| C r e e p | 26.11.2017 23:22 |
FRST Logfile:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 26-11-2017 01
Ran by O-Goshi (administrator) on O-GOSHI-PC (26-11-2017 23:17:15)
Running from C:\Users\O-Goshi\Downloads
Loaded Profiles: O-Goshi (Available Profiles: O-Goshi)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11\WLTRYSVC.EXE
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11\BCMWLTRY.EXE
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanNetService.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(SEIKO EPSON CORPORATION) C:\Program Files\EPSON\EpsonCustomerResearchParticipation\EPCP.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(The OpenVPN Project) C:\Program Files\OpenVPN\bin\openvpnserv.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11\WLTRAY.EXE
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIRHE.EXE
() C:\Program Files\OpenVPN\bin\openvpn-gui.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
() C:\Program Files\BEHRINGER\UMC_Audio_Driver\UMCAudioCplApp.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanGUI.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Gabest) C:\Users\O-Goshi\Desktop\mplayerc.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Image-Line) C:\Program Files (x86)\Image-Line\FL Studio 12\FL64.exe
(Image-Line) C:\Program Files (x86)\Image-Line\FL Studio 12\System\Tools\Bridge\32bit\ilbridge.exe
(Image-Line) C:\Program Files (x86)\Image-Line\FL Studio 12\System\Tools\Bridge\32bit\ilbridge.exe
(Image-Line) C:\Program Files (x86)\Image-Line\FL Studio 12\System\Tools\Bridge\32bit\ilbridge.exe
(Image-Line) C:\Program Files (x86)\Image-Line\FL Studio 12\System\Tools\Bridge\32bit\ilbridge.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [487424 2010-06-17] (IDT, Inc.)
HKLM\...\Run: [IntelWireless] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1928976 2010-03-05] (Intel(R) Corporation)
HKLM\...\Run: [Broadcom Wireless Manager UI] => C:\Program Files\Broadcom\Broadcom 802.11\WLTRAY.exe [7173632 2017-04-22] (Broadcom Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500936 2015-04-28] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-06-08] (Intel Corporation)
HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\wlangui.exe [2105344 2010-10-22] (AVM Berlin)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1087184 2016-01-20] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-3091303281-14082041-545763789-1000\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIRHE.EXE [417776 2014-11-14] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-3091303281-14082041-545763789-1000\...\Run: [CyberGhost] => "C:\Program Files\CyberGhost 6\CyberGhost.exe" /autostart /min
HKU\S-1-5-21-3091303281-14082041-545763789-1000\...\Run: [OPENVPN-GUI] => C:\Program Files\OpenVPN\bin\openvpn-gui.exe [643200 2017-09-26] ()
HKU\S-1-5-21-3091303281-14082041-545763789-1000\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2017-04-24] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2017-04-22]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\UMC Audio Control Panel Autostart.lnk [2017-08-01]
ShortcutTarget: UMC Audio Control Panel Autostart.lnk -> C:\Program Files\BEHRINGER\UMC_Audio_Driver\UMCAudioCplApp.exe ()
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{86899B90-6CA6-4209-BCE8-57D1E0054905}: [DhcpNameServer] 192.168.2.1
Internet Explorer:
==================
HKU\S-1-5-21-3091303281-14082041-545763789-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://ch.search.yahoo.com/yhs/web?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__hp_WCYID10438__171113__yaie
HKU\S-1-5-21-3091303281-14082041-545763789-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
SearchScopes: HKU\S-1-5-21-3091303281-14082041-545763789-1000 -> {C0C3A6C6-03BC-4195-8FCB-AEA091301353} URL = hxxps://ch.search.yahoo.com/yhs/search?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__ch_WCYID10438__171113__yaie&p={searchTerms}
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-20] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-20] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-20] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-20] (Microsoft Corporation)
FireFox:
========
FF DefaultProfile: svkzmv55.default
FF ProfilePath: C:\Users\O-Goshi\AppData\Roaming\Mozilla\Firefox\Profiles\svkzmv55.default [2017-11-26]
FF Homepage: Mozilla\Firefox\Profiles\svkzmv55.default -> hxxps://www.google.de/
FF NewTab: Mozilla\Firefox\Profiles\svkzmv55.default -> hxxps://ch.search.yahoo.com/yhs/web?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__hp_WCYID10438__171113__yaff
FF Extension: (Avast SafePrice) - C:\Users\O-Goshi\AppData\Roaming\Mozilla\Firefox\Profiles\svkzmv55.default\Extensions\sp@avast.com.xpi [2017-11-23]
FF Extension: (NoScript) - C:\Users\O-Goshi\AppData\Roaming\Mozilla\Firefox\Profiles\svkzmv55.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2017-11-23]
FF Extension: (Adblock Plus) - C:\Users\O-Goshi\AppData\Roaming\Mozilla\Firefox\Profiles\svkzmv55.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-11-08]
FF Extension: (Disable Media WMF NV12 format) - C:\Users\O-Goshi\AppData\Roaming\Mozilla\Firefox\Profiles\svkzmv55.default\features\{8ddd0c32-f430-4ef9-a6d5-a9da0806cca9}\disable-media-wmf-nv12@mozilla.org.xpi [2017-11-22] [Lagacy]
FF SearchPlugin: C:\Users\O-Goshi\AppData\Roaming\Mozilla\Firefox\Profiles\svkzmv55.default\searchplugins\yahoo-lavasoft.xml [2017-11-13]
FF Plugin: @videolan.org/vlc,version=2.2.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-03-09] (Adobe Systems)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-03-09] (Adobe Systems)
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin) [File not signed]
R2 EpsonCustomerResearchParticipation; C:\Program Files\EPSON\EpsonCustomerResearchParticipation\EPCP.exe [677880 2017-04-25] (SEIKO EPSON CORPORATION)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [145224 2016-01-13] (Seiko Epson Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2010-03-05] ()
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [15872 2016-11-25] ( ) [File not signed]
R2 OpenVPNServiceInteractive; C:\Program Files\OpenVPN\bin\openvpnserv.exe [73856 2017-09-26] (The OpenVPN Project)
S3 OpenVPNServiceLegacy; C:\Program Files\OpenVPN\bin\openvpnserv.exe [73856 2017-09-26] (The OpenVPN Project)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
R2 wltrysvc; C:\Program Files\Broadcom\Broadcom 802.11\bcmwltry.exe [5858304 2017-04-22] (Broadcom Corporation) [File not signed]
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 fwlanusbn; C:\Windows\System32\DRIVERS\fwlanusbn.sys [714368 2010-10-22] (AVM GmbH)
S3 MADFUAUDIOPHILE; C:\Windows\System32\DRIVERS\MAudioAudiophile_DFU.sys [46088 2009-09-03] (M-Audio)
S3 MAUSBAUDIOPHILE; C:\Windows\System32\DRIVERS\MAudioAudiophile.sys [187912 2009-09-03] (Avid Technology, Inc.)
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-06-22] (Corel Corporation)
R0 Tpkd; C:\Windows\System32\Drivers\Tpkd.sys [103272 2009-05-21] (PACE Anti-Piracy, Inc.) [File not signed]
S3 umc_audio; C:\Windows\System32\DRIVERS\umc_audio_x64.sys [288328 2015-12-08] ()
S3 umc_audioks; C:\Windows\System32\DRIVERS\umc_audioks_x64.sys [56904 2015-12-08] ()
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-11-26 23:17 - 2017-11-26 23:17 - 000012093 _____ C:\Users\O-Goshi\Downloads\FRST.txt
2017-11-26 23:16 - 2017-11-26 23:17 - 000000000 ____D C:\FRST
2017-11-26 23:16 - 2017-11-26 23:16 - 002391552 _____ (Farbar) C:\Users\O-Goshi\Downloads\FRST64.exe
2017-11-26 19:30 - 2017-11-26 19:30 - 001031778 _____ C:\Users\O-Goshi\Desktop\Untitled.mpd
2017-11-23 18:28 - 2017-11-23 18:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TAP-Windows
2017-11-23 18:28 - 2017-11-23 18:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenVPN
2017-11-23 18:28 - 2017-11-23 18:28 - 000000000 ____D C:\Program Files\TAP-Windows
2017-11-23 17:47 - 2017-11-23 18:41 - 000000000 ____D C:\Users\O-Goshi\Desktop\peep
2017-11-23 17:46 - 2017-11-23 18:52 - 000000000 ____D C:\T racks
2017-11-23 17:46 - 2017-11-23 17:46 - 000000000 ____D C:\B anger
2017-11-23 12:27 - 2017-11-23 12:27 - 000000000 ____D C:\Users\O-Goshi\AppData\Local\CyberGhost
2017-11-21 22:29 - 2017-11-21 22:29 - 000000000 ____D C:\Users\O-Goshi\AppData\Local\CEF
2017-11-21 22:26 - 2017-11-21 22:25 - 001142072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2017-11-21 22:26 - 2017-11-21 22:25 - 001001272 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2017-11-21 21:32 - 2017-11-24 11:22 - 000000000 ____D C:\ProgramData\AVAST Software
2017-11-13 13:32 - 2017-11-23 18:44 - 000000000 ____D C:\Users\O-Goshi\AppData\LocalLow\uTorrent
2017-11-13 13:28 - 2017-11-13 13:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
2017-11-13 13:27 - 2017-11-13 13:27 - 000002611 _____ C:\Users\O-Goshi\Desktop\µTorrent.lnk
2017-11-13 13:26 - 2017-11-23 18:44 - 000000000 ____D C:\Users\O-Goshi\AppData\Roaming\uTorrent
2017-11-13 13:25 - 2017-11-13 13:26 - 002403520 _____ (BitTorrent Inc.) C:\Users\O-Goshi\Downloads\uTorrent350.exe
2017-11-11 12:56 - 2017-11-11 12:56 - 000078081 _____ C:\Users\O-Goshi\Desktop\pigeon_raffle-696x464.jpeg
2017-10-29 17:35 - 2017-10-29 17:36 - 000000557 _____ C:\Users\O-Goshi\Downloads\UTC--2017-10-29T16-35-50.706Z--62440ded5461c5b2f642b1693d8f24b903e60d22
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-11-26 21:04 - 2017-04-28 09:00 - 000000000 ____D C:\Users\O-Goshi\AppData\Roaming\Celemony Software GmbH
2017-11-26 17:34 - 2009-07-14 06:13 - 000790742 _____ C:\Windows\system32\PerfStringBackup.INI
2017-11-26 17:34 - 2009-07-14 05:45 - 000017136 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-11-26 17:34 - 2009-07-14 05:45 - 000017136 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-11-26 17:34 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2017-11-26 17:28 - 2017-04-22 14:12 - 000000000 ____D C:\Users\O-Goshi\AppData\LocalLow\Mozilla
2017-11-26 17:27 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-11-26 02:00 - 2017-04-27 15:51 - 000000000 ____D C:\Users\O-Goshi\AppData\Local\Adobe
2017-11-23 20:53 - 2016-11-18 00:56 - 000000000 ____D C:\FL Studio Producer Edition 12.0.2 + Plugins Bundle
2017-11-23 18:44 - 2017-06-28 12:22 - 000000000 ____D C:\O-G-O-S-H-I
2017-11-23 18:28 - 2017-10-23 19:22 - 000000000 ____D C:\Users\O-Goshi\Desktop\pix
2017-11-23 18:28 - 2017-10-18 14:16 - 000000908 _____ C:\Users\Public\Desktop\OpenVPN GUI.lnk
2017-11-23 18:21 - 2017-10-18 14:11 - 000000000 ____D C:\Program Files (x86)\oVPN.to Client
2017-11-22 03:12 - 2017-06-14 00:43 - 000000000 ____D C:\Users\O-Goshi\AppData\Roaming\vlc
2017-11-21 22:32 - 2017-04-27 21:26 - 000000000 ____D C:\Users\O-Goshi\Documents\Adobe
2017-11-15 20:44 - 2017-04-22 14:11 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-11-15 10:40 - 2017-04-22 14:11 - 000000000 ____D C:\Users\O-Goshi\AppData\Roaming\Mozilla
2017-11-15 10:39 - 2017-04-22 14:10 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-11-13 13:27 - 2017-05-31 10:05 - 000000000 ____D C:\Users\O-Goshi\AppData\LocalLow\Temp
2017-11-09 03:32 - 2017-08-01 11:47 - 000000309 _____ C:\Users\O-Goshi\Desktop\lyrix.txt
2017-11-02 15:19 - 2017-10-11 13:09 - 000000383 _____ C:\Users\O-Goshi\Desktop\essen diary.txt
==================== Files in the root of some directories =======
2011-07-25 10:48 - 2011-07-25 10:48 - 000074293 _____ () C:\Users\O-Goshi\AppData\Roaming\Setup.1.2.exe
2017-04-27 21:23 - 2017-04-27 21:23 - 325407814 _____ () C:\Users\O-Goshi\AppData\Local\ACCCx4_0_1_188.zip.aamdownload
2017-04-27 21:23 - 2017-04-27 21:23 - 000003630 _____ () C:\Users\O-Goshi\AppData\Local\ACCCx4_0_1_188.zip.aamdownload.aamd
Some files in TEMP:
====================
2017-04-27 21:22 - 2015-03-05 07:54 - 002212008 _____ (Adobe Systems Incorporated) C:\Users\O-Goshi\AppData\Local\Temp\AdobeApplicationManager.exe
2009-10-27 01:20 - 2009-10-27 01:20 - 029044736 _____ (Antares Audio Technologies) C:\Users\O-Goshi\AppData\Local\Temp\Auto-Tune_evo.exe
2017-11-13 13:27 - 2017-11-13 13:27 - 000353904 _____ (Lavasoft) C:\Users\O-Goshi\AppData\Local\Temp\offer-EB9503F2-312D-4575-9BEB-7B505EBBCB0A.exe
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-11-19 19:36
==================== End of FRST.txt ============================
--- --- ---
--- --- ---
FRST Additions Logfile:
[CODE]Additional
FRST Logfile: Code:
scan result of Farbar Recovery Scan Tool (x64) Version: 26-11-2017 01
Ran by O-Goshi (26-11-2017 23:17:58)
Running from C:\Users\O-Goshi\Downloads
Windows 7 Ultimate Service Pack 1 (X64) (2016-11-17 23:54:01)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-3091303281-14082041-545763789-500 - Administrator - Disabled)
Guest (S-1-5-21-3091303281-14082041-545763789-501 - Limited - Disabled)
O-Goshi (S-1-5-21-3091303281-14082041-545763789-1000 - Administrator - Enabled) => C:\Users\O-Goshi
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKU\S-1-5-21-3091303281-14082041-545763789-1000\...\uTorrent) (Version: 3.5.0.44090 - BitTorrent Inc.)
Adobe Audition CC 2015 (HKLM-x32\...\{839A3566-AED6-4787-A849-5CBE2B1DC6AE}) (Version: 8.0 - Adobe Systems Incorporated)
Antares Auto-Tune Evo VST (HKLM-x32\...\{FFF74EC9-1FF4-4456-99E3-4F05129F4FAB}) (Version: 6.00.0009 - Antares Audio Technologies)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.12 - Michael Tippach)
AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version: - AVM Berlin)
bl (HKLM-x32\...\{2A075BB4-E976-4278-BF3F-E5C6945D84C0}) (Version: 1.0.0 - Your Company Name) Hidden
Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version: - Broadcom Corporation)
Broadcom Wireless Utility (HKLM\...\Broadcom Wireless Utility) (Version: - Broadcom Corporation)
Celemony Melodyne Studio 4 (HKLM-x32\...\Celemony Melodyne Studio 4) (Version: 4.0.4.001 - Celemony)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.) Hidden
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.) Hidden
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.) Hidden
Easy Photo Scan (HKLM-x32\...\{1021AA9F-6A0A-4128-B89B-1A05A8DD1770}) (Version: 1.00.0009 - Seiko Epson Corporation)
Electrum (HKU\S-1-5-21-3091303281-14082041-545763789-1000\...\Electrum) (Version: 2.9.0 - Electrum Technologies GmbH)
Epson Customer Research Participation (HKLM\...\{B26449A6-6007-4460-B4FE-C4776115BCEA}) (Version: 1.82.0000 - Seiko Epson Corporation)
Epson Event Manager (HKLM-x32\...\{9F205E94-9E42-4486-A92A-DF3F6CB85444}) (Version: 3.10.0061 - Seiko Epson Corporation)
Epson Print CD (HKLM-x32\...\{D16A31F9-276D-4968-A753-FFEAC56995D0}) (Version: 2.44.00 - Seiko Epson Corporation)
Epson Scan 2 (HKLM-x32\...\Epson Scan 2) (Version: - Seiko Epson Corporation)
EPSON Scan OCR Component (HKLM-x32\...\{563B99D8-8895-4E3E-AE8D-15BE8C05F1C1}) (Version: 3.00.04 - SEIKO EPSON Corp.)
Epson Software Updater (HKLM-x32\...\{7BAC3F7A-B963-468E-982E-B5608A87408D}) (Version: 4.4.4 - SEIKO EPSON CORPORATION)
EPSON XP-640 Series Printer Uninstall (HKLM\...\EPSON XP-640 Series) (Version: - Seiko Epson Corporation)
Epson XP-640 User’s Guide version 1.0 (HKLM-x32\...\UsersGuideEpson XP-640 User’s Guide_is1) (Version: 1.0 - )
EpsonNet Print (HKLM\...\{96ED1D58-440C-4345-8FEE-C4781366C67F}) (Version: 3.1.4.0 - SEIKO EPSON Corporation)
FL Studio 12 (HKLM-x32\...\FL Studio 12) (Version: - Image-Line)
FL Studio ASIO (HKLM-x32\...\FL Studio ASIO) (Version: - Image-Line)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6289.0 - IDT)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) PROSet/Wireless WiFi-Software (HKLM\...\{1A8BA6CE-822D-4888-89E2-ACBF4308F271}) (Version: 13.02.0000 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.4.1002 - Intel Corporation)
Interlok driver setup x64 (HKLM\...\{25613C10-27D2-410B-942B-D922D5C3A7BE}) (Version: 5.8.10 - PACE Anti-Piracy)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Mozilla Firefox 57.0 (x64 de) (HKLM\...\Mozilla Firefox 57.0 (x64 de)) (Version: 57.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 53.0 - Mozilla)
OpenVPN 2.4.4-I601 (HKLM\...\OpenVPN) (Version: 2.4.4-I601 - OpenVPN Technologies, Inc.)
oVPN.to Client v0.8.12-gtk3_win32 (HKLM-x32\...\{991F58FC-8D40-4B45-B434-6A10AAC12FBA}_is1) (Version: v0.8.12-gtk3_win32 - oVPN.to Anonymous Services)
ph (HKLM-x32\...\{185F9795-9663-4F13-9EF9-307A282ADB5A}) (Version: 1.0.0 - Your Company Name) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.92.115.2015 - Realtek)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30127 - Realtek Semiconductor Corp.)
TAP-Windows 9.21.2 (HKLM\...\TAP-Windows) (Version: 9.21.2 - )
UMC v3.29.0 (HKLM-x32\...\Software_BEHRINGER_umc_audio_Setup) (Version: 3.29.0 - BEHRINGER)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.6 - VideoLAN)
WIDCOMM Bluetooth Software (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.1.1100 - Broadcom Corporation)
Windows Driver Package - Broadcom Corporation (BTHUSB) Bluetooth (03/24/2010 6.3.0.2501) (HKLM\...\AF09E130E2FD4D1BEFD1B9132AE624BAE0364719) (Version: 03/24/2010 6.3.0.2501 - Broadcom Corporation)
WinRAR 5.40 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-14] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-14] (Alexander Roshal)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-14] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-14] (Alexander Roshal)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {ABB5B110-57CC-4470-A6D3-95D51BFA11EE} - System32\Tasks\AdobeAAMUpdater-1.0-O-Goshi-PC-O-Goshi => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-04-28] (Adobe Systems Incorporated)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2010-03-05 09:21 - 2010-03-05 09:21 - 001501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll
2009-12-29 13:19 - 2009-12-29 13:19 - 000173344 _____ () C:\Program Files\WIDCOMM\Bluetooth Software\btkeyind.dll
2017-09-26 11:07 - 2017-09-26 11:07 - 000643200 _____ () C:\Program Files\OpenVPN\bin\openvpn-gui.exe
2017-08-01 13:31 - 2015-12-08 16:21 - 000383488 _____ () C:\Program Files\BEHRINGER\UMC_Audio_Driver\UMCAudioCplApp.exe
2015-01-17 10:27 - 2015-01-17 10:27 - 034734712 _____ () C:\Program Files (x86)\Image-Line\Shared\dsp_ipp_x64.dll
2015-03-18 17:18 - 2015-03-18 17:18 - 000872056 _____ () C:\Program Files (x86)\Image-Line\Shared\QuickFontCache_x64.dll
2014-12-02 20:32 - 2014-12-02 20:32 - 000607352 _____ () C:\Program Files (x86)\Image-Line\Shared\freetype_x64.dll
2015-04-26 19:28 - 2015-04-26 19:28 - 002446648 _____ () C:\Program Files (x86)\Image-Line\FL Studio 12\Plugins\Fruity\Effects\Fruity Limiter\Fruity Limiter_x64.dll
2011-06-06 16:00 - 2011-06-06 16:00 - 000094720 _____ () C:\Program Files (x86)\Steinberg\VstPlugins\Dada Life\Sausage Fattener\Sausage Fattener x64.dll
2011-06-06 16:00 - 2011-06-06 16:00 - 000762880 _____ () C:\Program Files (x86)\Steinberg\Vstplugins\Dada Life\Sausage Fattener\Resource\Sausage Fattener 64.dat
2015-04-26 19:27 - 2015-04-26 19:27 - 002247992 _____ () C:\Program Files (x86)\Image-Line\FL Studio 12\Plugins\Fruity\Effects\Fruity Delay 2\Fruity Delay 2_x64.dll
2015-04-26 19:28 - 2015-04-26 19:28 - 002442040 _____ () C:\Program Files (x86)\Image-Line\FL Studio 12\Plugins\Fruity\Effects\Fruity Reeverb 2\Fruity Reeverb 2_x64.dll
2014-12-02 20:32 - 2014-12-02 20:32 - 000076408 _____ () C:\Program Files (x86)\Image-Line\Shared\Reverb_x64.dll
2015-04-26 19:28 - 2015-04-26 19:28 - 004608312 _____ () C:\Program Files (x86)\Image-Line\FL Studio 12\Plugins\Fruity\Effects\Soundgoodizer\Soundgoodizer_x64.dll
2017-08-01 13:31 - 2015-12-08 16:20 - 000228352 _____ () C:\Program Files\BEHRINGER\UMC_Audio_Driver\umc_audioapi.dll
2017-04-24 20:21 - 2017-04-24 20:21 - 000170496 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\1266bf4bc00412e0e654ff040fff59af\IsdiInterop.ni.dll
2016-11-18 01:35 - 2010-06-08 10:44 - 000058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2015-01-17 10:27 - 2015-01-17 10:27 - 026941048 _____ () C:\Program Files (x86)\Image-Line\Shared\dsp_ipp.dll
2015-03-18 17:18 - 2015-03-18 17:18 - 000535160 _____ () C:\Program Files (x86)\Image-Line\Shared\QuickFontCache.dll
2014-12-02 20:32 - 2014-12-02 20:32 - 000487032 _____ () C:\Program Files (x86)\Image-Line\Shared\freetype.dll
2017-04-28 08:56 - 2003-01-12 23:47 - 000497152 _____ () C:\Program Files (x86)\VstPlugins\SPITFISH.dll
2015-03-11 10:46 - 2015-03-11 10:46 - 000130360 _____ () C:\Program Files (x86)\Image-Line\FL Studio 12\Plugins\VST\Fruity Chorus.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\Users\O-Goshi\Local Settings:JaDZEnppyGyTnHkr9 [2452]
AlternateDataStreams: C:\Users\O-Goshi\AppData\Local:JaDZEnppyGyTnHkr9 [2452]
AlternateDataStreams: C:\Users\O-Goshi\AppData\Local\Application Data:JaDZEnppyGyTnHkr9 [2452]
AlternateDataStreams: C:\Users\O-Goshi\AppData\Local\cTIJvcp4R0:FPwCxfqTDsAyisgM5EdhHD9h8 [2304]
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com
IE trusted site: HKU\S-1-5-21-3091303281-14082041-545763789-1000\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-3091303281-14082041-545763789-1000\...\webcompanion.com -> hxxp://webcompanion.com
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:34 - 2017-04-27 21:22 - 000001023 _____ C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 lmlicenses.wip4.adobe.com
127.0.0.1 lm.licenses.adobe.com
127.0.0.1 na1r.services.adobe.com
127.0.0.1 hlrcv.stage.adobe.com
127.0.0.1 practivate.adobe.com
127.0.0.1 activate.adobe.com
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-3091303281-14082041-545763789-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\O-Goshi\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{AD450165-8B22-4A56-B4A4-808BEED1A533}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{659E02A4-16E0-48D4-85F1-00042FCABAEC}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{CD95AF2A-3294-4822-89CF-4C095FAD6D3D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{DE414AE3-061E-4176-A18C-0D15B2CB10E2}] => (Allow) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
FirewallRules: [{A4896879-7074-4B57-8796-FAECAA8F3148}] => (Allow) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
FirewallRules: [TCP Query User{F3FD6EE8-657B-4A4A-A4E6-22E4911B6A3C}C:\users\o-goshi\downloads\makeitviral-qt.exe] => (Allow) C:\users\o-goshi\downloads\makeitviral-qt.exe
FirewallRules: [UDP Query User{D1A390EC-9DB7-48FA-8DD7-B78950154406}C:\users\o-goshi\downloads\makeitviral-qt.exe] => (Allow) C:\users\o-goshi\downloads\makeitviral-qt.exe
FirewallRules: [{1C0CBBA9-A0E9-4C5A-AE64-A74685DDAC74}] => (Allow) C:\Users\O-Goshi\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{F2A6F1EC-3FA4-45CC-A2BC-1794EE48C1F0}] => (Allow) C:\Users\O-Goshi\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{9BDF793B-1059-45CF-AAB4-8FA6C9FF244C}] => (Allow) C:\Users\O-Goshi\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{C222788B-3316-4F15-A1F6-0F710CBD7A78}] => (Allow) C:\Users\O-Goshi\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{1446153C-B812-42CB-BEA3-E859DCC45E6B}] => (Allow) C:\Users\O-Goshi\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{1D81153C-9F7B-4C68-827A-E79A2EA7003E}] => (Allow) C:\Users\O-Goshi\AppData\Roaming\uTorrent\uTorrent.exe
==================== Restore Points =========================
25-10-2017 19:47:20 Scheduled Checkpoint
01-11-2017 05:29:28 Windows Update
08-11-2017 13:33:19 Scheduled Checkpoint
14-11-2017 03:27:51 Windows Update
17-11-2017 03:51:44 Windows Update
23-11-2017 18:49:07 chip 1-click download service wurde entfernt.
26-11-2017 02:52:54 Windows Update
==================== Faulty Device Manager Devices =============
Name: Network Controller
Description: Network Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (11/26/2017 06:57:52 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: A problem prevented Customer Experience Improvement Program data from being sent to Microsoft, (Error 80004005).
Error: (11/25/2017 11:38:31 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: A problem prevented Customer Experience Improvement Program data from being sent to Microsoft, (Error 90080108).
Error: (11/25/2017 10:12:41 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: A problem prevented Customer Experience Improvement Program data from being sent to Microsoft, (Error 80004005).
Error: (11/24/2017 12:04:58 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: A problem prevented Customer Experience Improvement Program data from being sent to Microsoft, (Error 80004005).
Error: (11/23/2017 02:37:21 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: A problem prevented Customer Experience Improvement Program data from being sent to Microsoft, (Error 80004005).
Error: (11/22/2017 11:25:34 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: A problem prevented Customer Experience Improvement Program data from being sent to Microsoft, (Error 80004005).
Error: (11/22/2017 03:46:25 AM) (Source: openvpnserv) (EventID: 0) (User: )
Description: Event-ID 0
Error: (11/22/2017 12:32:30 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: A problem prevented Customer Experience Improvement Program data from being sent to Microsoft, (Error 80004005).
Error: (11/21/2017 10:28:38 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "C:\Program Files\AVAST Software\Avast\setup\iplugins\IStats.dll".
Dependent Assembly Avast.VC110.CRT,processorArchitecture="x86",publicKeyToken="2036b14a11e83e4a",type="win32",version="11.0.60610.1" could not be found.
Please use sxstrace.exe for detailed diagnosis.
Error: (11/20/2017 05:24:02 PM) (Source: openvpnserv) (EventID: 0) (User: )
Description: Event-ID 0
System errors:
=============
Error: (11/23/2017 05:51:47 PM) (Source: Service Control Manager) (EventID: 7016) (User: )
Description: The chip 1-click download service service has reported an invalid current state 0.
Error: (11/23/2017 05:51:47 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The OpenVPN Interactive Service service depends on the TAP-Windows Adapter V9 service which failed to start because of the following error:
The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
Error: (11/23/2017 05:51:47 PM) (Source: Service Control Manager) (EventID: 7016) (User: )
Description: The chip 1-click download service service has reported an invalid current state 0.
Error: (11/23/2017 05:51:44 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The TAP-Windows Adapter V9 service failed to start due to the following error:
The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
Error: (11/23/2017 01:55:02 PM) (Source: Service Control Manager) (EventID: 7016) (User: )
Description: The chip 1-click download service service has reported an invalid current state 0.
Error: (11/23/2017 01:55:02 PM) (Source: Service Control Manager) (EventID: 7016) (User: )
Description: The chip 1-click download service service has reported an invalid current state 0.
Error: (11/23/2017 01:55:02 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The OpenVPN Interactive Service service depends on the TAP-Windows Adapter V9 service which failed to start because of the following error:
The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
Error: (11/23/2017 01:55:00 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The TAP-Windows Adapter V9 service failed to start due to the following error:
The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
Error: (11/23/2017 01:54:59 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 13:44:02 on 23.11.2017 was unexpected.
Error: (11/23/2017 12:26:08 PM) (Source: Service Control Manager) (EventID: 7016) (User: )
Description: The chip 1-click download service service has reported an invalid current state 0.
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i3 CPU M 370 @ 2.40GHz
Percentage of memory in use: 71%
Total physical RAM: 3958.69 MB
Available physical RAM: 1141.92 MB
Total Virtual: 7915.57 MB
Available Virtual: 4936.87 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:223.47 GB) (Free:178.27 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 223.6 GB) (Disk ID: 8816BF3E)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=223.5 GB) - (Type=07 NTFS)
==================== End of Addition.txt ============================
--- --- ---
--- --- --- |
FRST 32-Bit | FRST 64-Bit
Lesestoff: