kobra8536 | 06.10.2013 09:48 | Vielen Dank für die Begrüßung :)
Hier die Log-Dateien: Malware-Bytes Log: Code:
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org
Datenbank Version: v2013.10.04.03
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16686
Marvin Blanken :: MARVINBLANKEN [Administrator]
04.10.2013 09:47:13
mbam-log-2013-10-04 (09-47-13).txt
Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 253985
Laufzeit: 3 Minute(n), 40 Sekunde(n)
Infizierte Speicherprozesse: 1
C:\Users\Marvin Blanken\AppData\Local\FilesFrog Update Checker\update_checker.exe (PUP.Optional.FilesFrog.A) -> 2880 -> Löschen bei Neustart.
Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungsschlüssel: 26
HKCR\CLSID\{11111111-1111-1111-1111-110411181156} (PUP.Optional.Lyrics.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\TypeLib\{44444444-4444-4444-4444-440444184456} (PUP.Optional.Lyrics.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\Interface\{55555555-5555-5555-5555-550455185556} (PUP.Optional.Lyrics.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CrossriderApp0041856.BHO.1 (PUP.Optional.Lyrics.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411181156} (PUP.Optional.Lyrics.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110411181156} (PUP.Optional.Lyrics.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\AppID\{BDB69379-802F-4eaf-B541-F8DE92DD98DB} (PUP.Optional.BabylonToolBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C} (PUP.Optional.Wajam) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C} (PUP.Optional.Wajam) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FilesFrog Update Checker (PUP.Optional.Somoto.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CrossriderApp0041856.BHO (PUP.Optional.CrossRider.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CrossriderApp0041856.Sandbox (PUP.Optional.CrossRider.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CrossriderApp0041856.Sandbox.1 (PUP.Optional.CrossRider.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\BabylonToolbar (PUP.Optional.BabylonToolBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\DataMngr_Toolbar (PUP.Optional.DataMngr.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\Software\1ClickDownload (PUP.Optional.1ClickDownload.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\BI (PUP.Optional.FilesFrog.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\Software\InstalledBrowserExtensions\Lyrics (PUP.Optional.Lyrics.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\SOMOTO\SDP (PUP.Optional.Somoto.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\SWEETIM (PUP.Optional.SweetIM.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\SWEETIM (PUP.Optional.SweetIM.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
Infizierte Registrierungswerte: 6
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|SDP (PUP.Optional.FilesFrog.A) -> Daten: C:\Users\Marvin Blanken\AppData\Local\FilesFrog Update Checker\update_checker.exe /auto -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\Software\BI|ui_path_filesfrog (PUP.Optional.FilesFrog.A) -> Daten: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FilesFrog Update Checker -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Daten: 0N2P2W1F0Z1S1U1H -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\Software\Somoto\SDP|affid (PUP.Optional.Somoto.A) -> Daten: unlockrootwqme -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\Software\SweetIM|simapp_id (PUP.Optional.SweetIM.A) -> Daten: {EE917320-9272-11E2-8023-DC811894E6D0} -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\Software\SweetIM|simapp_id (PUP.Optional.SweetIM.A) -> Daten: {EE917320-9272-11E2-8023-DC811894E6D0} -> Erfolgreich gelöscht und in Quarantäne gestellt.
Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)
Infizierte Verzeichnisse: 4
C:\Users\Marvin Blanken\AppData\Roaming\Babylon (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin Blanken\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\hdvidcodec.com (PUP.Optional.HDVidCodec.A) -> Löschen bei Neustart.
C:\Users\Marvin Blanken\AppData\Local\FilesFrog Update Checker (PUP.Optional.FilesFrog.A) -> Löschen bei Neustart.
C:\Users\Marvin Blanken\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker (PUP.Optional.FilesFrog.A) -> Löschen bei Neustart.
Infizierte Dateien: 9
C:\Users\Marvin Blanken\AppData\Local\FilesFrog Update Checker\update_checker.exe (PUP.Optional.FilesFrog.A) -> Löschen bei Neustart.
C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-bho.dll (PUP.Optional.Lyrics.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-bho64.dll (PUP.Optional.Lyrics.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin Blanken\AppData\Local\FilesFrog Update Checker\uninstall.exe (PUP.Optional.Somoto.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin Blanken\AppData\Roaming\Babylon\log_file.txt (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin Blanken\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\hdvidcodec.com\HDVidCodec.lnk (PUP.Optional.HDVidCodec.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin Blanken\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\hdvidcodec.com\Uninstall.lnk (PUP.Optional.HDVidCodec.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin Blanken\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker\Check for Updates.lnk (PUP.Optional.FilesFrog.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin Blanken\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker\Uninstall.lnk (PUP.Optional.FilesFrog.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
(Ende) --------------------------------------------------------------------------------------- FRST:
FRST Logfile:
FRST Logfile:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by Marvin Blanken (administrator) on MARVINBLANKEN on 06-10-2013 10:42:49
Running from C:\Users\Marvin Blanken\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Affinegy, Inc.) C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler64.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(FUJITSU LIMITED) C:\Program Files\Fujitsu\Plugfree NETWORK\PFNService.exe
(FUJITSU LIMITED) C:\Program Files\Fujitsu\PSUtility\PSUService.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Sonix) C:\Windows\vsnp2uvc.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(FUJITSU LIMITED) C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe
(FUJITSU LIMITED) C:\Program Files\Fujitsu\FDM7\FdmDaemon.exe
(FUJITSU LIMITED) C:\Program Files\Fujitsu\PSUtility\TrayManager.exe
(FUJITSU LIMITED) C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe
(FUJITSU LIMITED) C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe
(Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Microsoft Corporation) C:\Users\Marvin Blanken\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
(Akamai Technologies, Inc.) C:\Users\Marvin Blanken\AppData\Local\Akamai\netsession_win.exe
(Spotify Ltd) C:\Users\Marvin Blanken\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Akamai Technologies, Inc.) C:\Users\Marvin Blanken\AppData\Local\Akamai\netsession_win.exe
(Overwolf) C:\Program Files (x86)\Overwolf\Overwolf.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
() C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
(FUJITSU LIMITED) C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe
(Affinegy, Inc.) C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinRouterMonitor.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\brccMCtl.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfimon.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe
(Affinegy, Inc.) C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinSetup.exe
(FUJITSU LIMITED) C:\Program Files\Fujitsu\Plugfree NETWORK\PFNetDm.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE
(FUJITSU LIMITED) C:\Program Files\Fujitsu\Plugfree NETWORK\PFNTray.EXE
(Microsoft) C:\Program Files (x86)\Common Files\Overwolf\OverwolfHelper.exe
(Overwolf) C:\Program Files (x86)\Common Files\Overwolf\OverwolfHelper64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11663464 2011-04-20] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1886504 2009-11-19] (Synaptics Incorporated)
HKLM\...\Run: [snp2uvc] - C:\Windows\vsnp2uvc.exe [662016 2009-08-13] (Sonix)
HKLM\...\Run: [IntelWireless] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1933584 2011-01-05] (Intel(R) Corporation)
HKLM\...\Run: [LoadFUJ02E3] - C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe [45680 2010-06-08] (FUJITSU LIMITED)
HKLM\...\Run: [FDM7] - C:\Program Files\Fujitsu\FDM7\FdmDaemon.exe [164712 2009-11-26] (FUJITSU LIMITED)
HKLM\...\Run: [PSUTility] - C:\Program Files\Fujitsu\PSUtility\TrayManager.exe [199528 2010-11-13] (FUJITSU LIMITED)
HKLM\...\Run: [PfNet] - C:\Program Files\Fujitsu\Plugfree NETWORK\PfNet.exe [6311424 2010-10-07] (FUJITSU LIMITED)
HKLM\...\Run: [LoadFujitsuQuickTouch] - C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe [162416 2010-07-16] (FUJITSU LIMITED)
HKLM\...\Run: [LoadBtnHnd] - C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [21616 2010-07-09] (FUJITSU LIMITED)
HKLM\...\Run: [MouseDriver] - C:\Windows\system32\TiltWheelMouse.exe [241152 2012-12-19] (Pixart Imaging Inc)
HKLM\...\Run: [BTMTrayAgent] - rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1012000 2013-05-16] (NVIDIA Corporation)
HKLM-x32\...\RunOnce: [Malwarebytes Anti-Malware] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [SkyDrive] - C:\Users\Marvin Blanken\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [257136 2013-08-14] (Microsoft Corporation)
HKCU\...\Run: [OfficeSyncProcess] - "C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE"
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Marvin Blanken\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Marvin Blanken\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1140736 2013-10-04] (Spotify Ltd)
HKCU\...\Run: [Sony PC Companion] - C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [449248 2013-05-29] (Sony)
HKCU\...\Run: [Spotify] - C:\Users\Marvin Blanken\AppData\Roaming\Spotify\spotify.exe [4736000 2013-10-04] (Spotify Ltd)
HKCU\...\Run: [Overwolf] - C:\Program Files (x86)\Overwolf\Overwolf.exe [35256 2013-08-22] (Overwolf)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)
HKCU\...\Runonce: [Uninstall C:\Users\Marvin Blanken\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64] - C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Marvin Blanken\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64"
HKCU\...\Runonce: [Uninstall C:\Users\Marvin Blanken\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112] - C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Marvin Blanken\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112"
HKCU\...\Runonce: [Uninstall C:\Users\Marvin Blanken\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64] - C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Marvin Blanken\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64"
HKCU\...\Runonce: [Uninstall C:\Users\Marvin Blanken\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314] - C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Marvin Blanken\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314"
HKCU\...\Runonce: [Uninstall C:\Users\Marvin Blanken\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64] - C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Marvin Blanken\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64"
HKCU\...\Runonce: [Uninstall C:\Users\Marvin Blanken\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530] - C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Marvin Blanken\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530"
HKCU\...\Runonce: [Uninstall C:\Users\Marvin Blanken\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64] - C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Marvin Blanken\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64"
HKCU\...\Runonce: [Uninstall C:\Users\Marvin Blanken\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627] - C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Marvin Blanken\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627"
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [snp2uvc] - C:\Windows\vsnp2uvc.exe [662016 2009-08-13] (Sonix)
HKLM-x32\...\Run: [IndicatorUtility] - C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe [48752 2010-09-29] (FUJITSU LIMITED)
HKLM-x32\...\Run: [InstaLAN] - C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinRouterMonitor.exe [1501080 2010-09-14] (Affinegy, Inc.)
HKLM-x32\...\Run: [BrMfcWnd] - C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1167360 2009-08-03] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [ControlCenter3] - C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [SSBkgdUpdate] - C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PaperPort PTD] - C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe [29984 2008-07-10] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [IndexSearch] - C:\Program Files (x86)\ScanSoft\PaperPort\IndexSearch.exe [46368 2008-07-10] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PPort11reminder] - C:\ProgramData\ScanSoft\PaperPort\11\Config\Ereg\Ereg.ini [323 2013-03-08] ()
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [266448 2013-06-21] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll, C:\Windows\SysWOW64\nvinit.dll [214448 2013-06-21] (NVIDIA Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x77A447DCC412CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2001} URL =
SearchScopes: HKCU - {2EF5236D-9CF5-4D9A-885E-126E6C24308B} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=816731e8-682d-4d4f-91a5-b83e8b944302&apn_sauid=86975A02-4561-40B7-95DD-1F80A90226A0
BHO: LyriXeeker-1 - {11111111-1111-1111-1111-110411181156} - C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-bho64.dll No File
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll No File
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll No File
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Marvin Blanken\AppData\Roaming\Mozilla\Firefox\Profiles\k533ymct.default
FF DefaultSearchEngine: Google
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.6 - D:\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: No Name - C:\Users\Marvin Blanken\AppData\Roaming\Mozilla\Firefox\Profiles\k533ymct.default\Extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com
FF Extension: No Name - C:\Users\Marvin Blanken\AppData\Roaming\Mozilla\Firefox\profiles\extensions\extensions
FF Extension: movie2kdownloader - C:\Users\Marvin Blanken\AppData\Roaming\Mozilla\Firefox\profiles\extensions\movie2kdownloader@movie2kdownloader.com.xpi
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\coFFPlgn\
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\IPSFFPlgn\
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\IPSFFPlgn\
Chrome:
=======
CHR Extension: (Google Docs) - C:\Users\MARVIN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\MARVIN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\MARVIN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\MARVIN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (LyriXeeker-1) - C:\Users\MARVIN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghgmpcnmaamenhngcinchjeifhhnlaig\1.24.10_0
CHR Extension: (AdBlock) - C:\Users\MARVIN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.7_0
CHR Extension: (Top Eleven) - C:\Users\MARVIN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljphpjlafmmdmegmfbkacafhbegjfkkn\2.0.0.4_0
CHR Extension: (Norton Identity Protection) - C:\Users\MARVIN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.3.4_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\MARVIN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Gmail) - C:\Users\MARVIN~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\Exts\Chrome.crx
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
R2 AffinegyService; C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinService.exe [571288 2010-09-14] (Affinegy, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-01-05] ()
R2 N360; C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation)
R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1900728 2013-06-09] (Microsoft Corporation)
S3 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [18360 2013-08-22] (Overwolf Ltd)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] ()
R2 PFNService; C:\Program Files\Fujitsu\Plugfree NETWORK\PFNService.exe [331776 2010-10-07] (FUJITSU LIMITED)
R2 PowerSavingUtilityService; C:\Program Files\Fujitsu\PSUtility\PSUService.exe [63336 2010-06-17] (FUJITSU LIMITED)
==================== Drivers (Whitelisted) ====================
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20130924.001\BHDrvx64.sys [1525848 2013-09-24] (Symantec Corporation)
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20130924.001\BHDrvx64.sys [1525848 2013-09-24] (Symantec Corporation)
R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1404000.028\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-27] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-27] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [140376 2013-08-27] (Symantec Corporation)
R0 FBIOSDRV; C:\Windows\System32\Drivers\FBIOSDRV.sys [21104 2009-06-24] (FUJITSU LIMITED)
R3 FUJ02B1; C:\Windows\System32\DRIVERS\FUJ02B1.sys [7808 2006-11-01] (FUJITSU LIMITED)
R3 FUJ02E3; C:\Windows\System32\DRIVERS\FUJ02E3.sys [7296 2006-11-01] (FUJITSU LIMITED)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20131004.001\IDSvia64.sys [520280 2013-08-18] (Symantec Corporation)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20131004.001\IDSvia64.sys [520280 2013-08-18] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20131005.007\ENG64.SYS [126040 2013-09-18] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20131005.007\ENG64.SYS [126040 2013-09-18] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20131005.007\EX64.SYS [2099288 2013-09-18] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20131005.007\EX64.SYS [2099288 2013-09-18] (Symantec Corporation)
S3 rstescu; C:\Windows\system32\drivers\rstescu.sys [607256 2011-03-25] (Intel Corporation)
S3 rstescu1; C:\Windows\system32\drivers\rstescu1.sys [607256 2011-03-25] (Intel Corporation)
R0 rstfltr; C:\Windows\System32\drivers\rstfltr.sys [22552 2011-03-25] (Intel Corporation)
S3 SaiKF620; C:\Windows\System32\DRIVERS\SaiKF620.sys [131584 2008-10-22] (Saitek)
R3 seehcri; C:\Windows\System32\DRIVERS\seehcri.sys [34032 2013-09-15] (Sony Ericsson Mobile Communications)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1801216 2010-10-09] ()
R3 SRTSP; C:\Windows\System32\Drivers\N360x64\1404000.028\SRTSP64.SYS [796760 2013-05-16] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1404000.028\SRTSPX64.SYS [36952 2013-03-05] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\N360x64\1404000.028\SYMDS64.SYS [493656 2013-05-21] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\N360x64\1404000.028\SYMEFA64.SYS [1139800 2013-05-23] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-06-19] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\N360x64\1404000.028\Ironx64.SYS [224416 2013-03-05] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1404000.028\SYMNETS.SYS [433752 2013-04-25] (Symantec Corporation)
S3 t_mouse.sys; C:\Windows\System32\DRIVERS\t_mouse.sys [6144 2012-12-19] ()
U3 axtiapow; \??\C:\Users\MARVIN~1\AppData\Local\Temp\axtiapow.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-06 10:42 - 2013-10-06 10:42 - 01954124 _____ (Farbar) C:\Users\Marvin Blanken\Downloads\FRST64.exe
2013-10-06 10:42 - 2013-10-06 10:42 - 00000000 ____D C:\FRST
2013-10-06 10:35 - 2013-10-06 10:35 - 00001113 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-10-06 10:35 - 2013-10-06 10:35 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-06 10:35 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-10-06 10:00 - 2013-10-06 10:00 - 00377856 _____ C:\Users\Marvin Blanken\Downloads\gmer_2.1.19163.exe
2013-10-06 09:42 - 2013-10-06 09:45 - 00000000 ____D C:\AdwCleaner
2013-10-06 09:42 - 2013-10-06 09:42 - 01045226 _____ C:\Users\Marvin Blanken\Downloads\adwcleaner_3.0.0.6.exe
2013-10-05 20:58 - 2013-10-05 21:03 - 00009289 _____ C:\Users\Marvin Blanken\Documents\How to set up Gosa.odt
2013-10-05 20:55 - 2013-10-05 20:55 - 00001166 _____ C:\Users\Public\Desktop\TeamViewer 8.lnk
2013-10-05 20:55 - 2013-10-05 20:55 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2013-10-05 20:54 - 2013-10-05 20:54 - 05831344 _____ (TeamViewer GmbH) C:\Users\Marvin Blanken\Downloads\TeamViewer_Setup_de.exe
2013-10-05 19:24 - 2013-10-05 19:24 - 00055808 _____ C:\Users\Marvin Blanken\Downloads\Abrechnung Aufwandsentschädigung FuD_PB.xls
2013-10-04 09:45 - 2013-10-04 09:45 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Marvin Blanken\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-04 09:45 - 2013-10-04 09:45 - 00000000 ____D C:\Users\Marvin Blanken\AppData\Roaming\Malwarebytes
2013-10-04 09:45 - 2013-10-04 09:45 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-21 18:38 - 2013-09-21 18:38 - 00001076 _____ C:\Users\Public\Desktop\Oracle VM VirtualBox.lnk
2013-09-21 18:38 - 2013-09-21 18:38 - 00000000 ____D C:\Program Files\Oracle
2013-09-21 18:38 - 2013-09-06 14:27 - 00238352 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxDrv.sys
2013-09-21 18:38 - 2013-09-06 14:25 - 00119056 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSBMon.sys
2013-09-19 15:51 - 2013-09-19 15:52 - 00000000 ____D C:\ProgramData\Avanquest Bluetooth SDK
2013-09-17 16:30 - 2013-09-17 16:30 - 00260994 _____ C:\Windows\msxml4-KB2758694-enu.LOG
2013-09-15 18:27 - 2013-10-06 09:37 - 00000000 ____D C:\Flashtool
2013-09-15 18:22 - 2013-10-06 09:48 - 00001118 _____ C:\Windows\Tasks\LyriXeeker-1-enabler.job
2013-09-15 18:22 - 2013-09-15 18:22 - 00004148 _____ C:\Windows\System32\Tasks\LyriXeeker-1-enabler
2013-09-15 18:22 - 2013-09-15 18:22 - 00000747 _____ C:\Users\Marvin Blanken\Desktop\JDownloader.lnk
2013-09-15 18:21 - 2013-10-06 09:48 - 00001852 _____ C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job
2013-09-15 18:21 - 2013-10-06 09:48 - 00001218 _____ C:\Windows\Tasks\LyriXeeker-1-codedownloader.job
2013-09-15 18:21 - 2013-10-04 09:51 - 00000000 ____D C:\Program Files (x86)\LyriXeeker-1
2013-09-15 18:21 - 2013-09-15 18:21 - 00004248 _____ C:\Windows\System32\Tasks\LyriXeeker-1-codedownloader
2013-09-15 17:59 - 2013-09-15 17:59 - 00034032 _____ (Sony Ericsson Mobile Communications) C:\Windows\system32\Drivers\seehcri.sys
2013-09-15 12:07 - 2013-09-15 12:17 - 00000000 ____D C:\Users\Marvin Blanken\minecraft
2013-09-14 11:16 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-14 11:16 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-14 11:16 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-14 11:16 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-14 11:16 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-14 11:16 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-14 11:16 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-14 11:16 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-14 11:16 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-14 11:16 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-14 11:16 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-14 11:16 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-14 11:16 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-14 11:16 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-14 11:16 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-14 11:16 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-14 11:16 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-14 11:16 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-14 11:16 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-14 11:16 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-14 11:16 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-14 11:16 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-14 11:16 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-14 11:16 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-14 11:16 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-14 11:16 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-14 11:16 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-14 11:16 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-14 11:16 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-14 11:16 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-14 11:16 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-13 21:03 - 2013-10-06 09:41 - 00000000 ____D C:\Users\Marvin Blanken\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UnlockRoot Pro
2013-09-13 21:03 - 2013-10-06 09:41 - 00000000 ____D C:\Program Files (x86)\Unlockroot Pro
2013-09-13 21:03 - 2013-10-06 09:41 - 00000000 ____D C:\Program Files (x86)\Unlockroot
2013-09-13 20:52 - 2013-09-13 20:52 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01007.Wdf
2013-09-13 20:42 - 2010-06-11 11:32 - 00708168 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller.dll
2013-09-13 20:14 - 2013-09-13 20:23 - 00000000 ____D C:\ruu_log
2013-09-13 20:03 - 2013-09-13 20:03 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-09-13 20:03 - 2013-09-13 20:03 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-09-13 20:03 - 2013-09-13 20:03 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-09-13 20:03 - 2013-09-13 20:03 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-09-13 20:03 - 2013-09-13 20:03 - 00000000 ____D C:\ProgramData\Oracle
2013-09-13 19:43 - 2013-09-13 20:34 - 00000000 ____D C:\Android
2013-09-13 19:34 - 2013-09-13 21:17 - 00003642 _____ C:\Windows\System32\Tasks\Launch HTC Sync Loader
2013-09-13 19:32 - 2013-10-06 09:39 - 00000000 ____D C:\Program Files (x86)\HTC
2013-09-13 19:32 - 2013-09-13 19:32 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2013-09-13 19:32 - 2013-09-13 19:32 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2013-09-13 19:31 - 2013-09-13 19:31 - 00000000 ____D C:\Program Files (x86)\Android
2013-09-11 06:54 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-11 06:54 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-11 06:54 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-11 06:54 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-11 06:54 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-11 06:54 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-11 06:54 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-11 06:54 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-11 06:54 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-11 06:54 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-11 06:54 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-11 06:54 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-11 06:54 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-11 06:54 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-11 06:54 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-11 06:54 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-11 06:54 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-11 06:54 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-11 06:54 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-11 06:54 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-11 06:54 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-11 06:54 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-11 06:54 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-11 06:54 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-11 06:54 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-11 06:54 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-11 06:54 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 06:54 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-11 06:54 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-11 06:54 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-11 06:54 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-11 06:54 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-09 21:59 - 2013-10-06 10:14 - 00005190 _____ C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for MarvinBlanken-Marvin Blanken MarvinBlanken
2013-09-09 20:56 - 2013-09-09 20:56 - 00001561 _____ C:\Users\Marvin Blanken\Desktop\Xpadder.ini
2013-09-06 14:25 - 2013-09-06 14:25 - 00204048 _____ (Oracle Corporation) C:\Windows\system32\VBoxNetFltNobj.dll
2013-09-06 14:25 - 2013-09-06 14:25 - 00146704 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxNetFlt.sys
2013-09-06 14:25 - 2013-09-06 14:25 - 00131856 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxNetAdp.sys
2013-09-06 10:31 - 2013-09-06 10:31 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SaiKF620_01005.Wdf
2013-09-06 10:30 - 2008-10-22 15:05 - 01919968 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01005.dll
2013-09-06 10:30 - 2008-10-22 15:05 - 00695296 _____ (Jess Technology Co., Ltd.) C:\Windows\system32\ffdriver64.dll
2013-09-06 10:30 - 2008-10-22 15:05 - 00573440 _____ (Jess Technology Co., Ltd.) C:\Windows\SysWOW64\ffdriver32.Dll
2013-09-06 10:30 - 2008-10-22 15:05 - 00207872 _____ (Jess Technology Co., Ltd.) C:\Windows\system32\ffpage64.dll
2013-09-06 10:19 - 2013-09-06 10:19 - 01009664 _____ C:\Users\Marvin Blanken\Desktop\Xpadder.exe
==================== One Month Modified Files and Folders =======
2013-10-06 10:42 - 2013-10-06 10:42 - 01954124 _____ (Farbar) C:\Users\Marvin Blanken\Downloads\FRST64.exe
2013-10-06 10:42 - 2013-10-06 10:42 - 00000000 ____D C:\FRST
2013-10-06 10:40 - 2013-02-24 21:01 - 01568805 _____ C:\Windows\WindowsUpdate.log
2013-10-06 10:40 - 2009-07-14 06:45 - 00021264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-06 10:40 - 2009-07-14 06:45 - 00021264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-06 10:35 - 2013-10-06 10:35 - 00001113 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-10-06 10:35 - 2013-10-06 10:35 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-06 10:14 - 2013-09-09 21:59 - 00005190 _____ C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for MarvinBlanken-Marvin Blanken MarvinBlanken
2013-10-06 10:10 - 2013-02-24 21:27 - 00001126 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-06 10:06 - 2013-02-24 21:29 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-06 10:02 - 2013-05-31 14:50 - 00000000 ____D C:\Users\Marvin Blanken\AppData\Roaming\Spotify
2013-10-06 10:02 - 2013-05-15 19:42 - 00000000 ____D C:\Users\Marvin Blanken\AppData\Roaming\Skype
2013-10-06 10:00 - 2013-10-06 10:00 - 00377856 _____ C:\Users\Marvin Blanken\Downloads\gmer_2.1.19163.exe
2013-10-06 09:55 - 2013-02-25 05:34 - 00699342 _____ C:\Windows\system32\perfh007.dat
2013-10-06 09:55 - 2013-02-25 05:34 - 00149450 _____ C:\Windows\system32\perfc007.dat
2013-10-06 09:55 - 2009-07-14 07:13 - 01619284 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-06 09:53 - 2013-02-25 17:02 - 00000000 ____D C:\Users\Marvin Blanken\Desktop\Schule
2013-10-06 09:50 - 2013-08-07 21:20 - 00000000 ____D C:\Users\Marvin Blanken\AppData\Local\Overwolf
2013-10-06 09:50 - 2013-02-24 21:27 - 00123848 _____ C:\Users\Marvin Blanken\AppData\Local\GDIPFONTCACHEV1.DAT
2013-10-06 09:49 - 2013-02-24 21:27 - 00001122 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-06 09:48 - 2013-09-15 18:22 - 00001118 _____ C:\Windows\Tasks\LyriXeeker-1-enabler.job
2013-10-06 09:48 - 2013-09-15 18:21 - 00001852 _____ C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job
2013-10-06 09:48 - 2013-09-15 18:21 - 00001218 _____ C:\Windows\Tasks\LyriXeeker-1-codedownloader.job
2013-10-06 09:48 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-06 09:48 - 2009-07-14 06:51 - 00067415 _____ C:\Windows\setupact.log
2013-10-06 09:48 - 2009-07-14 06:45 - 00494784 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-06 09:47 - 2010-11-21 05:47 - 00165810 _____ C:\Windows\PFRO.log
2013-10-06 09:45 - 2013-10-06 09:42 - 00000000 ____D C:\AdwCleaner
2013-10-06 09:42 - 2013-10-06 09:42 - 01045226 _____ C:\Users\Marvin Blanken\Downloads\adwcleaner_3.0.0.6.exe
2013-10-06 09:41 - 2013-09-13 21:03 - 00000000 ____D C:\Users\Marvin Blanken\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UnlockRoot Pro
2013-10-06 09:41 - 2013-09-13 21:03 - 00000000 ____D C:\Program Files (x86)\Unlockroot Pro
2013-10-06 09:41 - 2013-09-13 21:03 - 00000000 ____D C:\Program Files (x86)\Unlockroot
2013-10-06 09:40 - 2013-06-15 22:38 - 00000000 ____D C:\Users\Marvin Blanken\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sony Mobile
2013-10-06 09:39 - 2013-09-13 19:32 - 00000000 ____D C:\Program Files (x86)\HTC
2013-10-06 09:39 - 2013-04-11 19:18 - 00000000 ____D C:\Users\Marvin Blanken\AppData\Local\Downloaded Installations
2013-10-06 09:38 - 2013-02-25 16:38 - 00331480 _____ C:\Windows\DPINST.LOG
2013-10-06 09:37 - 2013-09-15 18:27 - 00000000 ____D C:\Flashtool
2013-10-05 21:03 - 2013-10-05 20:58 - 00009289 _____ C:\Users\Marvin Blanken\Documents\How to set up Gosa.odt
2013-10-05 20:55 - 2013-10-05 20:55 - 00001166 _____ C:\Users\Public\Desktop\TeamViewer 8.lnk
2013-10-05 20:55 - 2013-10-05 20:55 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2013-10-05 20:54 - 2013-10-05 20:54 - 05831344 _____ (TeamViewer GmbH) C:\Users\Marvin Blanken\Downloads\TeamViewer_Setup_de.exe
2013-10-05 19:24 - 2013-10-05 19:24 - 00055808 _____ C:\Users\Marvin Blanken\Downloads\Abrechnung Aufwandsentschädigung FuD_PB.xls
2013-10-05 13:08 - 2013-06-01 18:33 - 00000083 _____ C:\Users\Marvin Blanken\Desktop\Luis Konto.txt
2013-10-05 12:40 - 2013-02-24 21:28 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-04 17:39 - 2013-05-31 14:51 - 00000000 ____D C:\Users\Marvin Blanken\AppData\Local\Spotify
2013-10-04 10:07 - 2013-05-18 16:09 - 00000000 __SHD C:\Windows\SysWOW64\AI_RecycleBin
2013-10-04 09:51 - 2013-09-15 18:21 - 00000000 ____D C:\Program Files (x86)\LyriXeeker-1
2013-10-04 09:45 - 2013-10-04 09:45 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Marvin Blanken\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-04 09:45 - 2013-10-04 09:45 - 00000000 ____D C:\Users\Marvin Blanken\AppData\Roaming\Malwarebytes
2013-10-04 09:45 - 2013-10-04 09:45 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-03 11:41 - 2013-02-25 17:02 - 00000000 ____D C:\Users\Marvin Blanken\Desktop\Lebenshilfe
2013-10-01 21:25 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-09-29 23:57 - 2013-05-08 21:52 - 00000000 ____D C:\Users\Marvin Blanken\AppData\Roaming\vlc
2013-09-21 21:54 - 2013-05-12 22:02 - 00000000 ____D C:\Users\Marvin Blanken\.VirtualBox
2013-09-21 18:40 - 2013-05-12 22:03 - 00000000 ____D C:\Users\Marvin Blanken\VirtualBox VMs
2013-09-21 18:38 - 2013-09-21 18:38 - 00001076 _____ C:\Users\Public\Desktop\Oracle VM VirtualBox.lnk
2013-09-21 18:38 - 2013-09-21 18:38 - 00000000 ____D C:\Program Files\Oracle
2013-09-19 20:06 - 2013-02-24 21:29 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-19 20:06 - 2013-02-24 21:29 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-19 20:06 - 2013-02-24 21:29 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-19 16:49 - 2013-07-13 18:54 - 00000000 ____D C:\Users\Marvin Blanken\.gimp-2.8
2013-09-19 16:04 - 2013-08-07 21:27 - 00000000 ____D C:\Program Files (x86)\Overwolf
2013-09-19 15:52 - 2013-09-19 15:51 - 00000000 ____D C:\ProgramData\Avanquest Bluetooth SDK
2013-09-19 15:46 - 2013-06-15 22:25 - 00002026 _____ C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
2013-09-19 15:46 - 2013-02-24 21:16 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-09-17 16:30 - 2013-09-17 16:30 - 00260994 _____ C:\Windows\msxml4-KB2758694-enu.LOG
2013-09-16 21:15 - 2013-02-24 21:02 - 00000000 ___RD C:\Users\Marvin Blanken\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-16 21:15 - 2013-02-24 21:02 - 00000000 ___RD C:\Users\Marvin Blanken\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-15 18:22 - 2013-09-15 18:22 - 00004148 _____ C:\Windows\System32\Tasks\LyriXeeker-1-enabler
2013-09-15 18:22 - 2013-09-15 18:22 - 00000747 _____ C:\Users\Marvin Blanken\Desktop\JDownloader.lnk
2013-09-15 18:21 - 2013-09-15 18:21 - 00004248 _____ C:\Windows\System32\Tasks\LyriXeeker-1-codedownloader
2013-09-15 17:59 - 2013-09-15 17:59 - 00034032 _____ (Sony Ericsson Mobile Communications) C:\Windows\system32\Drivers\seehcri.sys
2013-09-15 12:17 - 2013-09-15 12:07 - 00000000 ____D C:\Users\Marvin Blanken\minecraft
2013-09-15 12:07 - 2013-02-24 21:01 - 00000000 ____D C:\Users\Marvin Blanken
2013-09-15 12:05 - 2013-05-16 11:26 - 00000000 ____D C:\Users\Marvin Blanken\AppData\Roaming\.minecraft
2013-09-14 14:52 - 2013-07-21 20:22 - 00000000 ____D C:\Users\Marvin Blanken\AppData\Roaming\FileZilla
2013-09-14 11:16 - 2013-07-13 14:25 - 00000000 ____D C:\Windows\system32\MRT
2013-09-14 11:14 - 2013-02-24 22:40 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-13 21:17 - 2013-09-13 19:34 - 00003642 _____ C:\Windows\System32\Tasks\Launch HTC Sync Loader
2013-09-13 20:52 - 2013-09-13 20:52 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01007.Wdf
2013-09-13 20:34 - 2013-09-13 19:43 - 00000000 ____D C:\Android
2013-09-13 20:23 - 2013-09-13 20:14 - 00000000 ____D C:\ruu_log
2013-09-13 20:03 - 2013-09-13 20:03 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-09-13 20:03 - 2013-09-13 20:03 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-09-13 20:03 - 2013-09-13 20:03 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-09-13 20:03 - 2013-09-13 20:03 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-09-13 20:03 - 2013-09-13 20:03 - 00000000 ____D C:\ProgramData\Oracle
2013-09-13 20:03 - 2013-03-20 16:31 - 01095080 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2013-09-13 20:03 - 2013-03-20 16:31 - 00973736 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2013-09-13 20:03 - 2013-03-20 16:30 - 00000000 ____D C:\Program Files\Java
2013-09-13 19:54 - 2013-06-12 17:06 - 00000000 ____D C:\Users\Marvin Blanken\Documents\ok
2013-09-13 19:42 - 2013-06-15 22:55 - 00000000 ____D C:\Users\Marvin Blanken\.android
2013-09-13 19:32 - 2013-09-13 19:32 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2013-09-13 19:32 - 2013-09-13 19:32 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2013-09-13 19:32 - 2013-03-10 09:22 - 00000000 ____D C:\Program Files (x86)\MSXML 4.0
2013-09-13 19:32 - 2013-02-27 14:47 - 00000000 ____D C:\Users\Marvin Blanken\AppData\Local\Adobe
2013-09-13 19:32 - 2013-02-24 22:12 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-09-13 19:32 - 2013-02-24 22:11 - 00000000 ____D C:\ProgramData\Adobe
2013-09-13 19:32 - 2013-02-24 21:29 - 00000000 ____D C:\Users\Marvin Blanken\AppData\Roaming\Adobe
2013-09-13 19:31 - 2013-09-13 19:31 - 00000000 ____D C:\Program Files (x86)\Android
2013-09-09 20:56 - 2013-09-09 20:56 - 00001561 _____ C:\Users\Marvin Blanken\Desktop\Xpadder.ini
2013-09-08 10:53 - 2013-07-24 07:46 - 00000600 _____ C:\Users\Marvin Blanken\AppData\Local\PUTTY.RND
2013-09-06 14:27 - 2013-09-21 18:38 - 00238352 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxDrv.sys
2013-09-06 14:25 - 2013-09-21 18:38 - 00119056 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSBMon.sys
2013-09-06 14:25 - 2013-09-06 14:25 - 00204048 _____ (Oracle Corporation) C:\Windows\system32\VBoxNetFltNobj.dll
2013-09-06 14:25 - 2013-09-06 14:25 - 00146704 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxNetFlt.sys
2013-09-06 14:25 - 2013-09-06 14:25 - 00131856 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxNetAdp.sys
2013-09-06 10:31 - 2013-09-06 10:31 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SaiKF620_01005.Wdf
2013-09-06 10:19 - 2013-09-06 10:19 - 01009664 _____ C:\Users\Marvin Blanken\Desktop\Xpadder.exe
2013-09-06 10:13 - 2013-08-04 14:45 - 00000000 ____D C:\Users\Marvin Blanken\Desktop\Cube World Cracked
Files to move or delete:
====================
C:\Users\Public\avast_free_antivirus7.0.1474_setup.exe
Some content of TEMP:
====================
C:\Users\Marvin Blanken\AppData\Local\Temp\Quarantine.exe
C:\Users\Marvin Blanken\AppData\Local\Temp\_isBE7E.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-10-01 21:17
==================== End Of Log ============================ --- --- ---
--- --- ---
--- --- ---
--------------------------------------------------------------------------------------- Addition:FRST Additions Logfile: Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013
Ran by Marvin Blanken at 2013-10-06 10:43:18
Running from C:\Users\Marvin Blanken\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Norton 360 Online (Enabled - Up to date) {63DF5164-9100-186D-2187-8DC619EFD8BF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton 360 Online (Enabled - Up to date) {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton 360 Online (Enabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
==================== Installed Programs ======================
Adobe AIR (x32 Version: 3.7.0.1530)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.175)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168)
Adobe Reader XI (11.0.04) - Deutsch (x32 Version: 11.0.04)
Akamai NetSession Interface (HKCU)
Android SDK Tools (x32 Version: 1.16)
Anytime USB Charge Utility (x32 Version: 1.00.00.001)
Artisteer 4 (x32 Version: 4.0)
AviSynth 2.5 (x32)
BlueJ (x32 Version: 3.0.9)
Brother MFL-Pro Suite MFC-5895CW (x32 Version: 1.0.2.0)
FileZilla Client 3.7.1.1 (x32 Version: 3.7.1.1)
FJ Camera (x32 Version: 5.8.52016.0)
Free YouTube Download version 3.2.2.430 (x32 Version: 3.2.2.430)
Free YouTube to MP3 Converter version 3.12.0.128 (x32 Version: 3.12.0.128)
Fujitsu Display Manager (Version: 7.01.20.212)
Fujitsu Display Manager (x32 Version: )
Fujitsu Hotkey Utility (x32 Version: 3.70.0.0)
Fujitsu MobilityCenter Extension Utility (Version: 3.01.00.001)
Fujitsu MobilityCenter Extension Utility (x32 Version: 3.01.00.001)
Fujitsu System Extension Utility (Version: 3.3.0.0)
Fujitsu System Extension Utility (x32 Version: 3.3.0.0)
Gameforge Live 1.6.0 "Legend" (x32 Version: 1.6.0)
GIMP 2.8.6 (Version: 2.8.6)
GlassFish Server Open Source Edition 3.1.2.2
Google Chrome (x32 Version: 30.0.1599.69)
Google Earth (x32 Version: 7.1.1.1888)
Greenfoot (x32 Version: 2.3.0)
Intel PROSet Wireless
Intel(R) Processor Graphics (x32 Version: 9.17.10.2932)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (Version: 1.1.0.0537)
Intel(R) PROSet/Wireless WiFi-Software (Version: 14.0.2000)
IPTInstaller (x32 Version: 4.0.8)
Java 7 Update 25 (x32 Version: 7.0.250)
Java 7 Update 40 (64-bit) (Version: 7.0.400)
Java Auto Updater (x32 Version: 2.1.9.5)
Java SE Development Kit 7 Update 17 (64-bit) (Version: 1.7.0.170)
Java SE Development Kit 7 Update 25 (64-bit) (Version: 1.7.0.250)
Java SE Development Kit 7 Update 25 (x32 Version: 1.7.0.250)
Java SE Development Kit 7 Update 40 (64-bit) (Version: 1.7.0.400)
JDownloader 0.9 (x32 Version: 0.9)
LibreOffice 4.0.2.2 (x32 Version: 4.0.2.2)
LifeBook Application Panel (Version: 8.2.1.0)
LifeBook Application Panel (x32 Version: 8.2.1.0)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Microsoft .NET Framework 4.5 (Version: 4.5.50709)
Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709)
Microsoft Office 365 Home Premium - de-de (Version: 15.0.4517.1005)
Microsoft Silverlight (x32 Version: 5.1.20125.0)
Microsoft SkyDrive (HKCU Version: 17.0.2015.0811)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (x32 Version: 11.0.51106.1)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 (x32 Version: 11.0.51106)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 (x32 Version: 11.0.51106)
Mozilla Firefox 19.0.2 (x86 en-US) (x32 Version: 19.0.2)
Mozilla Maintenance Service (x32 Version: 17.0.5)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)
NetBeans IDE 7.3 (Version: 7.3)
Norton 360 (x32 Version: 20.4.0.40)
NVIDIA GeForce Experience 1.5 (Version: 1.5)
NVIDIA Grafiktreiber 320.49 (Version: 320.49)
NVIDIA Install Application (Version: 2.1002.124.810)
NVIDIA Optimus 4.11.9 (Version: 4.11.9)
NVIDIA PhysX (x32 Version: 9.13.0604)
NVIDIA PhysX-Systemsoftware 9.13.0604 (Version: 9.13.0604)
NVIDIA Systemsteuerung 320.49 (Version: 320.49)
NVIDIA Update 4.11.9 (Version: 4.11.9)
NVIDIA Update Components (Version: 4.11.9)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4517.1005)
Office 15 Click-to-Run Licensing Component (Version: 15.0.4517.1005)
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4517.1005)
Oracle VM VirtualBox 4.2.18 (Version: 4.2.18)
Overwolf (x32 Version: 0.44.256)
PaperPort Image Printer 64-bit (Version: 1.00.0000)
Plugfree NETWORK (Version: 5.4.0.1)
Plugfree NETWORK (Version: 5.4.001)
Power Saving Utility (x32 Version: 32.01.10.009)
Realtek Ethernet Controller Driver (x32 Version: 7.37.1229.2010)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6263)
Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30120)
Router Installationsprogramm und Monitor (x32)
ScanSoft PaperPort 11 (x32 Version: 11.2.0000)
Skype™ 6.6 (x32 Version: 6.6.106)
Sony Ericsson Update Engine (x32 Version: 2.13.6.201305161305)
Sony Mobile Update Service (x32 Version: 2.13.6.201305161305)
Sony PC Companion 2.10.174 (x32 Version: 2.10.174)
Spotify (HKCU Version: 0.9.4.178.g259772ba)
Synaptics Pointing Device Driver (Version: 14.0.16.0)
TeamViewer 8 (x32 Version: 8.0.22298)
Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1)
VLC media player 2.0.6 (Version: 2.0.6)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)
==================== Restore Points =========================
01-10-2013 19:24:28 Geplanter Prüfpunkt
04-10-2013 07:57:30 Removed Aeria Ignite
06-10-2013 07:37:52 Removed HTC BMP USB Driver.
06-10-2013 07:38:25 Removed HTC Driver Installer.
06-10-2013 07:38:58 Removed HTC Sync.
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {1303524D-C8CD-4EC9-9914-3E2D6A499DD4} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\SymErr.exe [2013-06-04] (Symantec Corporation)
Task: {1BC7D1CC-D189-47F1-ABB9-CDFE0B820725} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {1D8EEC64-25D7-4635-A92F-9A3413CBB7C6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-24] (Google Inc.)
Task: {2AFE48C6-89F1-4C19-AA0F-7971E77A904A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-19] (Adobe Systems Incorporated)
Task: {2F21BBB8-6CD4-4480-B74B-51BD3D49EAFC} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe
Task: {3BCA3B8E-CE18-49FF-9AEC-1983C1D327E3} - System32\Tasks\LyriXeeker-1-enabler => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-enabler.exe [2013-09-15] (Lyrics)
Task: {5E576767-7E51-4C57-ACA5-068CB875D5F4} - System32\Tasks\LyriXeeker-1-firefoxinstaller => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-firefoxinstaller.exe [2013-09-15] (Lyrics)
Task: {69A604EA-8A7D-4D57-B83A-0F7F5B47C098} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\SymErr.exe [2013-06-04] (Symantec Corporation)
Task: {8876A3A3-41CB-4EE8-9316-16D53DF9BFA4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-24] (Google Inc.)
Task: {9C023434-EEA0-424A-A832-57E7FD1A9073} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [2013-06-09] (Microsoft Corporation)
Task: {DBA98AD9-AE91-4B19-992B-60F0D6827082} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation)
Task: {DEEE7DD9-46A9-441C-9FBC-6266DE70A9A5} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\WSCStub.exe [2013-06-04] (Symantec Corporation)
Task: {E8EDBB2E-AFFC-4ED5-9BAB-EEF78EDC549B} - System32\Tasks\LyriXeeker-1-codedownloader => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-codedownloader.exe [2013-09-15] (Lyrics)
Task: {F1CF13EE-B3BA-4B12-BE81-C74AA0F76E07} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2013-07-24] (Microsoft Corporation)
Task: {F5A69B2E-D301-4130-95A3-9D0A555E75DD} - System32\Tasks\Microsoft Office 15 Sync Maintenance for MarvinBlanken-Marvin Blanken MarvinBlanken => C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [2013-07-24] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\LyriXeeker-1-codedownloader.job => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-codedownloader.exe
Task: C:\Windows\Tasks\LyriXeeker-1-enabler.job => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-enabler.exe
Task: C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-firefoxinstaller.exe
==================== Loaded Modules (whitelisted) =============
2013-08-22 15:37 - 2013-08-22 15:37 - 00031136 _____ () C:\Program Files (x86)\Overwolf\x64\OWExplorer-2006.dll
2010-01-02 16:42 - 2010-01-02 16:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2012-12-14 03:42 - 2012-12-14 03:42 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-01-05 13:53 - 2011-01-05 13:53 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll
2013-08-22 15:37 - 2013-08-22 15:37 - 00031648 _____ () C:\Program Files (x86)\Overwolf\x64\OWExplorerLauncher.dll
2013-07-24 08:39 - 2013-06-16 14:52 - 00386216 _____ () C:\Program Files\Microsoft Office 15\ClientX64\c2rui.dll
2013-07-24 08:39 - 2013-06-09 23:09 - 00518824 _____ () C:\Program Files\Microsoft Office 15\ClientX64\c2r64.dll
2013-02-27 15:40 - 2010-09-14 22:55 - 00022424 _____ () C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinServicePS.dll
2013-06-27 22:12 - 2013-06-27 22:12 - 00093696 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2013-08-22 15:37 - 2013-08-22 15:37 - 00078240 _____ () C:\Program Files (x86)\Overwolf\OWExplorer-2006.dll
2013-06-10 17:18 - 2012-05-30 08:51 - 00699280 ____R () C:\PROGRAM FILES (X86)\NORTON 360\ENGINE\20.4.0.40\wincfi39.dll
2013-06-15 22:25 - 2012-04-30 11:57 - 00039936 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\TMonitorAPI.dll
2013-06-15 22:25 - 2013-05-17 10:51 - 00207872 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\MExplorer.dll
2011-07-07 14:54 - 2011-07-07 14:54 - 00233984 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\Report.dll
2013-06-15 22:25 - 2013-05-20 12:58 - 00620718 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\sqlite3.dll
2013-08-22 15:37 - 2013-08-22 15:37 - 21636024 _____ () C:\Program Files (x86)\Overwolf\OverWolf.Client.Core.dll
2013-08-22 15:37 - 2013-08-22 15:37 - 00065536 _____ () C:\Program Files (x86)\Overwolf\de\OverWolf.Client.Core.resources.dll
2013-08-22 15:37 - 2013-08-22 15:37 - 00091576 _____ () C:\Program Files (x86)\Overwolf\OverWolf.BL.Interfaces.dll
2013-08-22 15:37 - 2013-08-22 15:37 - 00010240 _____ () C:\Program Files (x86)\Overwolf\ODK.AddIns.V2.HostView.dll
2013-08-22 15:37 - 2013-08-22 15:37 - 00124320 _____ () C:\Program Files (x86)\Overwolf\OWService.dll
2013-08-22 15:37 - 2013-08-22 15:37 - 00940960 _____ () C:\Program Files (x86)\Overwolf\OWServer.dll
2013-08-22 15:37 - 2013-08-22 15:37 - 00037280 _____ () C:\Program Files (x86)\Overwolf\OWLog.dll
2013-08-22 15:37 - 2013-08-22 15:37 - 00025600 _____ () C:\Program Files (x86)\Overwolf\CoreAudioApi.dll
2013-08-22 15:37 - 2013-08-22 15:37 - 00669088 _____ () C:\Program Files (x86)\Overwolf\OWAgent.dll
2013-08-22 15:37 - 2013-08-22 15:37 - 00087552 _____ () C:\Program Files (x86)\Overwolf\BrowserWindow.dll
2013-02-27 15:40 - 2010-08-22 22:01 - 00325632 _____ () C:\Program Files (x86)\Belkin\Router Setup and Monitor\QtXml4.dll
2013-02-27 15:40 - 2010-08-22 22:01 - 01954304 _____ () C:\Program Files (x86)\Belkin\Router Setup and Monitor\QtCore4.dll
2013-02-27 15:40 - 2010-08-22 22:01 - 07187456 _____ () C:\Program Files (x86)\Belkin\Router Setup and Monitor\QtGui4.dll
2013-02-27 15:40 - 2010-08-22 22:01 - 00847360 _____ () C:\Program Files (x86)\Belkin\Router Setup and Monitor\QtNetwork4.dll
2013-02-27 15:40 - 2010-08-22 21:32 - 00119808 _____ () C:\Program Files (x86)\Belkin\Router Setup and Monitor\imageformats\qjpeg4.dll
2013-03-04 22:52 - 2009-02-27 17:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2013-02-27 15:40 - 2010-09-14 22:30 - 00659456 _____ () C:\Program Files (x86)\Belkin\Router Setup and Monitor\gateways\GenericBelkinGatewayLOC.dll
2013-07-24 08:40 - 2013-07-24 08:45 - 00313000 _____ () C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\AppVIsvStream32.dll
2013-07-24 08:40 - 2013-07-24 08:45 - 00358056 _____ () C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\c2r32.dll
2013-08-22 15:37 - 2013-08-22 15:37 - 00027040 _____ () C:\Program Files (x86)\Overwolf\OWExplorerLauncher.dll
2013-10-05 12:40 - 2013-10-03 08:02 - 00698832 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libglesv2.dll
2013-10-05 12:40 - 2013-10-03 08:02 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libegl.dll
2013-10-05 12:40 - 2013-10-03 08:03 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\pdf.dll
2013-10-05 12:40 - 2013-10-03 08:03 - 00415184 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ppGoogleNaClPluginChrome.dll
2013-10-05 12:40 - 2013-10-03 08:02 - 01604560 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ffmpegsumo.dll
2013-06-10 17:18 - 2012-05-30 08:51 - 00699280 ____R () C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\wincfi39.dll
2013-10-05 12:40 - 2013-10-03 08:03 - 13611984 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\TEMP:31D9EFCC
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (10/06/2013 09:49:21 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/04/2013 09:54:11 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/02/2013 08:04:07 AM) (Source: Office 2013 Licensing Service) (User: )
Description: Subscription licensing service failed: -2143485936
Error: (10/02/2013 08:04:07 AM) (Source: Microsoft Office 15) (User: )
Description: Office Subscription licensing exception: Error Code: 0x803D0010; CorrelationId: {F7245076-2328-4FE7-9583-647A9C02FE82}
Error: (10/02/2013 08:04:07 AM) (Source: Microsoft Office 15) (User: )
Description: Office Subscription licensing exception: Error Code: 0x803D0010; CorrelationId: {F7245076-2328-4FE7-9583-647A9C02FE82}
Error: (10/01/2013 01:40:31 PM) (Source: Office 2013 Licensing Service) (User: )
Description: Subscription licensing service failed: -2143485936
Error: (10/01/2013 01:40:31 PM) (Source: Microsoft Office 15) (User: )
Description: Office Subscription licensing exception: Error Code: 0x803D0010; CorrelationId: {9E27C17A-4D3E-4B35-9B18-40819FF75B7C}
Error: (10/01/2013 01:40:31 PM) (Source: Microsoft Office 15) (User: )
Description: Office Subscription licensing exception: Error Code: 0x803D0010; CorrelationId: {9E27C17A-4D3E-4B35-9B18-40819FF75B7C}
Error: (09/29/2013 11:51:35 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Error: (09/29/2013 09:08:23 AM) (Source: Office 2013 Licensing Service) (User: )
Description: Subscription licensing service failed: -2143485936
System errors:
=============
Error: (10/06/2013 09:49:26 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (10/06/2013 09:04:48 AM) (Source: DCOM) (User: )
Description: {4EB61BAC-A3B6-4760-9581-655041EF4D69}
Error: (10/04/2013 05:39:43 PM) (Source: DCOM) (User: )
Description: {4EB61BAC-A3B6-4760-9581-655041EF4D69}
Error: (10/04/2013 09:59:10 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.
Error: (10/04/2013 09:56:28 AM) (Source: DCOM) (User: )
Description: {14286318-B6CF-49A1-81FC-D74AD94902F9}
Error: (10/04/2013 09:55:51 AM) (Source: WMPNetworkSvc) (User: )
Description: WMPNetworkSvc0x80004005
Error: (10/04/2013 09:54:54 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (10/02/2013 08:04:30 AM) (Source: DCOM) (User: )
Description: {4EB61BAC-A3B6-4760-9581-655041EF4D69}
Error: (10/01/2013 09:23:55 PM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.
Error: (10/01/2013 08:56:17 PM) (Source: NetBT) (User: )
Description: Ein doppelter Name wurde im TCP-Netzwerk entdeckt. Die IP-Adresse des Computers,
der die Meldung gesendet hat, steht in den Daten. Verwenden Sie NBTSTAT -n an
der Eingabeaufforderung, um den doppelten Namen zu bestimmen.
Microsoft Office Sessions:
=========================
Error: (10/06/2013 09:49:21 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/04/2013 09:54:11 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/02/2013 08:04:07 AM) (Source: Office 2013 Licensing Service)(User: )
Description: Subscription licensing service failed: -2143485936
Error: (10/02/2013 08:04:07 AM) (Source: Microsoft Office 15)(User: )
Description: Office Subscription licensing exception: Error Code: 0x803D0010; CorrelationId: {F7245076-2328-4FE7-9583-647A9C02FE82}
Error: (10/02/2013 08:04:07 AM) (Source: Microsoft Office 15)(User: )
Description: Office Subscription licensing exception: Error Code: 0x803D0010; CorrelationId: {F7245076-2328-4FE7-9583-647A9C02FE82}
Error: (10/01/2013 01:40:31 PM) (Source: Office 2013 Licensing Service)(User: )
Description: Subscription licensing service failed: -2143485936
Error: (10/01/2013 01:40:31 PM) (Source: Microsoft Office 15)(User: )
Description: Office Subscription licensing exception: Error Code: 0x803D0010; CorrelationId: {9E27C17A-4D3E-4B35-9B18-40819FF75B7C}
Error: (10/01/2013 01:40:31 PM) (Source: Microsoft Office 15)(User: )
Description: Office Subscription licensing exception: Error Code: 0x803D0010; CorrelationId: {9E27C17A-4D3E-4B35-9B18-40819FF75B7C}
Error: (09/29/2013 11:51:35 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Users\Marvin Blanken\Downloads\SoftonicDownloader_fuer_amcap.exe
Error: (09/29/2013 09:08:23 AM) (Source: Office 2013 Licensing Service)(User: )
Description: Subscription licensing service failed: -2143485936
CodeIntegrity Errors:
===================================
Date: 2013-02-24 20:37:17.281
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\MARVIN~1\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-02-24 20:37:17.265
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\MARVIN~1\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-02-24 20:37:16.906
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-02-24 20:37:16.891
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 39%
Total physical RAM: 8104.62 MB
Available physical RAM: 4930.11 MB
Total Pagefile: 16207.43 MB
Available Pagefile: 12781.13 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:97.56 GB) (Free:31.9 GB) NTFS
Drive d: () (Fixed) (Total:600.98 GB) (Free:465.3 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: 00053F66)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=98 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=601 GB) - (Type=07 NTFS)
==================== End Of Log ============================ --- --- --- |