| Reinhardo | 31.07.2014 13:31 |
Hallo schrauber,hier die beiden Files vom FRST
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-07-2014 01
Ran by Reinhard Schreiber (administrator) on REINHARDSCHREIB on 31-07-2014 09:45:41
Running from C:\Users\Reinhard Schreiber\Desktop
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlk.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcDeskBandHlpr.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ZOOM\TpScrex.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATILEE.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CamMute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe
() C:\Program Files (x86)\Lenovo\Message Center Plus\MCPLaunch.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\SvcGuiHlpr.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\BTStackServer.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\BluetoothHeadsetProxy.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
(InterVideo) C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\System Update\SUService.exe
(Lenovo Group Limited) C:\Program Files (x86)\Common Files\Lenovo\tvt_reg_monitor_svc.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [TPHOTKEY] => C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe [69560 2010-07-27] (Lenovo Group Limited)
HKLM\...\Run: [TpShocks] => C:\Windows\system32\TpShocks.exe [380776 2010-07-01] (Lenovo.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11049576 2010-07-15] (Realtek Semiconductor)
HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [62312 2010-07-27] (Lenovo Group Limited)
HKLM\...\Run: [AcWin7Hlpr] => C:\Program Files (x86)\Lenovo\Access Connections\AcTBenabler.exe [31592 2010-09-17] (Lenovo)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2097960 2010-04-22] (Synaptics Incorporated)
HKLM-x32\...\Run: [PWMTRV] => rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
HKLM-x32\...\Run: [Message Center Plus] => C:\Program Files (x86)\LENOVO\Message Center Plus\MCPLaunch.exe [49976 2009-05-27] ()
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [RoxWatchTray] => C:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatchTray10.exe [244208 2009-08-04] (Sonic Solutions)
HKLM-x32\...\Run: [Microsoft Default Manager] => C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [439568 2010-05-10] (Microsoft Corporation)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-03] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058880 2013-03-28] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation)
HKU\S-1-5-21-2126444604-3890187502-3811796630-1000\...\Run: [EPLTarget\P0000000000000003] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATILEE.EXE [297024 2013-04-26] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2126444604-3890187502-3811796630-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [EPLTarget\P0000000000000003] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATILEE.EXE [297024 2013-04-26] (SEIKO EPSON CORPORATION)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad
URLSearchHook: HKCU - (No Name) - {D8278076-BC68-4484-9233-6E7F1628B56C} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {9715C61C-8E41-4FF3-9664-D8F86A47C85B} URL =
SearchScopes: HKCU - {9715C61C-8E41-4FF3-9664-D8F86A47C85B} URL =
SearchScopes: HKCU - {C8E8020C-C814-4C13-8260-C76F6AB06BCF} URL =
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll No File
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - No File
DPF: HKLM-x32 {02BCC737-B171-4746-94C9-0D8A0B2C0089} hxxp://office.microsoft.com/sites/production/ieawsdc32.cab
DPF: HKLM-x32 {1ABA5FAC-1417-422B-BA82-45C35E2C908B} hxxp://kitchenplanner.ikea.com/DE/Core/Player/2020PlayerAX_IKEA_Win32.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{0000B37A-AA2D-4BFD-8A61-C8E046B45DC6}: [NameServer]193.189.244.225 193.189.244.206
Tcpip\..\Interfaces\{DFA350B8-2E7E-467E-B56F-52E33EF8FC63}: [NameServer]193.189.244.225 193.189.244.206
Tcpip\..\Interfaces\{E1F00DBA-BE67-4FDA-BB0F-B3B1F448B789}: [NameServer]193.189.244.225 193.189.244.206
FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension
FF Extension: Default Manager - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension [2011-01-21]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-03] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-03] (Avira Operations GmbH & Co. KG)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [144560 2012-05-17] (Seiko Epson Corporation)
R2 EPSON_PM_RPCV4_06; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE [152640 2013-04-26] (SEIKO EPSON CORPORATION)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [93032 2010-04-07] (Lenovo Group Limited)
S3 Roxio UPnP Renderer 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [313840 2009-08-04] (Sonic Solutions)
S2 Roxio Upnp Server 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [362992 2009-08-04] (Sonic Solutions)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [199272 2010-07-15] (Realtek Semiconductor)
R2 SUService; c:\Program Files (x86)\Lenovo\System Update\SUService.exe [28672 2010-03-15] (Lenovo Group Limited) [File not signed]
R2 ThinkVantage Registry Monitor Service; C:\Program Files (x86)\Common Files\Lenovo\tvt_reg_monitor_svc.exe [1019904 2009-08-28] (Lenovo Group Limited) [File not signed]
S3 TVT Backup Service; C:\Program Files (x86)\Lenovo\Rescue and Recovery\rrservice.exe [1475896 2010-07-29] (Lenovo Group Limited)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-03] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-06-03] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-14] (Avira Operations GmbH & Co. KG)
S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [250368 2010-04-07] (Huawei Technologies Co., Ltd.)
S3 SMA_USBBUS; C:\Windows\System32\drivers\ftdibus.sys [69320 2011-02-05] (FTDI Ltd.)
R1 TPPWRIF; C:\Windows\System32\drivers\Tppwr64v.sys [13104 2010-08-24] ()
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
R3 PCDSRVC{127174DC-C366ED8B-06020200}_0; \??\c:\program files\pc-doctor\pcdsrvc_x64.pkms [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-07-31 09:45 - 2014-07-31 09:47 - 00015779 _____ () C:\Users\Reinhard Schreiber\Desktop\FRST.txt
2014-07-31 09:45 - 2014-07-31 09:45 - 00000000 ____D () C:\FRST
2014-07-31 09:44 - 2014-07-31 09:44 - 02094080 _____ (Farbar) C:\Users\Reinhard Schreiber\Desktop\FRST64.exe
2014-07-30 21:15 - 2014-07-30 21:15 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{0D200835-F557-4E44-AD3E-799E1A08930E}
2014-07-30 09:15 - 2014-07-30 09:15 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{C2D75AD5-9F8F-41FC-AED3-4886FBEB60A6}
2014-07-29 21:14 - 2014-07-29 21:15 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{73DA6E74-D195-463A-9AFE-FB4EC1C10A9B}
2014-07-29 09:12 - 2014-07-29 09:13 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{0A38383F-C9D4-423C-9DC2-B5CB76396D90}
2014-07-28 19:43 - 2014-07-28 19:43 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{926401E7-BF3A-437A-B66E-8C9BB0A823A7}
2014-07-28 07:42 - 2014-07-28 07:42 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{E4F1886B-8FB2-4B6B-8072-488C78935FD1}
2014-07-27 14:35 - 2014-07-27 14:36 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{33513E1B-52DF-4B24-B82F-92D96D7BF0E1}
2014-07-27 02:20 - 2014-07-27 02:20 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{7905C81E-B919-44A4-8157-30D0203EA970}
2014-07-26 13:08 - 2014-07-26 13:09 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{A799F21E-5B0E-4B7F-B47D-23EE6FB9ADC2}
2014-07-26 01:07 - 2014-07-26 01:08 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{FE267E68-AA6E-4389-B859-447221AC9B49}
2014-07-25 12:13 - 2014-07-25 12:13 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{F9E8E605-5D98-498B-8FF1-BFC7D8BE46A7}
2014-07-25 00:12 - 2014-07-25 00:12 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{638950D1-2765-44F7-B826-BC597EDEDAC6}
2014-07-24 12:11 - 2014-07-24 12:11 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{755D0D6B-C852-47B9-8686-28839E3E8DB1}
2014-07-23 23:24 - 2014-07-23 23:25 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{CE34A58E-1FF6-4F91-B62D-980DA8B96FFB}
2014-07-23 11:23 - 2014-07-23 11:24 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{585931EA-09D8-4FD0-979A-72BA027D26FC}
2014-07-22 23:22 - 2014-07-22 23:23 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{F66CBB4B-17DC-4D71-9EC5-021B5B96CEB5}
2014-07-22 11:02 - 2014-07-22 11:02 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{0096A449-8D41-437F-9246-F5F67492673C}
2014-07-21 21:14 - 2014-07-21 21:14 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{F1EEB5EB-C7F3-4F0F-99A1-834F910D7A0B}
2014-07-21 07:35 - 2014-07-21 07:35 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{9FF060FC-5F2B-4363-AC4B-615C303C6185}
2014-07-20 19:23 - 2014-07-20 19:23 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{8BE589C8-561D-4C47-BAE6-34048A1E4240}
2014-07-20 07:22 - 2014-07-20 07:22 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{F0596EF0-60CA-4A77-A238-8D42C7CE6784}
2014-07-19 19:21 - 2014-07-19 19:21 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{9BD9924E-2AE9-4165-9D78-8D0EFD3188FB}
2014-07-19 02:01 - 2014-07-19 02:01 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{F5E45A39-CCE2-49A1-9ADB-7FDD46ED430A}
2014-07-18 09:14 - 2014-07-18 09:14 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{5B7958E4-CDDC-4831-AF80-743C1282A226}
2014-07-17 21:13 - 2014-07-17 21:13 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{31F9E1CB-3960-400D-B8E2-E30A735F12A3}
2014-07-17 07:34 - 2014-07-17 07:34 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{0527CC64-B56A-4A51-9918-6128492CD544}
2014-07-16 19:23 - 2014-07-16 19:24 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{642D0634-A7D4-4A8E-A44F-0AFE0AF251A4}
2014-07-16 01:03 - 2014-07-16 01:03 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{37F8BEB2-7517-40BD-9DCD-090B778C8BD5}
2014-07-15 12:02 - 2014-07-15 12:02 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{BFB72029-13EF-4220-B7BD-2C88AE5BB640}
2014-07-15 00:01 - 2014-07-15 00:01 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{DA986911-3899-4C71-AB0B-A8A69098535E}
2014-07-14 08:50 - 2014-07-14 08:50 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{B4FCC259-66AE-4D9D-8DCA-784747DD3CD6}
2014-07-13 20:50 - 2014-07-13 20:50 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{C6EB9779-C03D-4012-A7C2-785C55BC6E4E}
2014-07-13 08:49 - 2014-07-13 08:50 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{9544DA7F-0B04-480D-9B4E-374AB6E48774}
2014-07-12 20:13 - 2014-07-12 20:13 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{466EAD0F-2320-4875-BB8D-E20EA93AF815}
2014-07-12 08:01 - 2014-07-12 08:01 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{E2339773-E93D-4F19-AF6D-E4C54F565724}
2014-07-11 18:29 - 2014-07-11 18:29 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{08B9A4AA-8110-4382-BF87-D7D5FFC345EE}
2014-07-11 06:28 - 2014-07-11 06:28 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{02473A18-EC95-409A-B012-0637A1C8E7E2}
2014-07-10 16:11 - 2014-07-10 16:11 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{9BF741AD-2FCC-43C6-853B-E0B9373EA825}
2014-07-10 01:51 - 2014-07-10 01:51 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{8E9EE974-18D8-4AAB-A7E9-07D2CF9595EB}
2014-07-09 13:45 - 2014-07-09 13:45 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{DA401E49-CC6D-47D0-8DA1-E517485D32AC}
2014-07-09 09:12 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-07-09 09:12 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-07-09 09:12 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-09 09:12 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-09 09:12 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-09 09:12 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-09 09:12 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-09 09:12 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-09 09:12 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-07-09 09:12 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-07-09 09:12 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-07-09 09:12 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-09 09:12 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-09 09:12 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-09 09:12 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-09 09:12 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-09 09:12 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-09 09:12 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-07-09 09:12 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-09 09:12 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-09 09:12 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-07-09 09:12 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-07-09 09:12 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-07-09 09:12 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-07-09 09:12 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-07-09 09:12 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-07-09 09:12 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-07-09 09:12 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-07-09 09:12 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-07-09 09:12 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-07-09 09:12 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-07-09 09:12 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-07-09 09:12 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-07-09 09:12 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-07-09 09:12 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-07-09 09:12 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-09 09:11 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-09 09:11 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-09 09:11 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-09 09:11 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-09 09:11 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-09 09:11 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-09 09:11 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-09 09:11 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-09 09:11 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-09 09:11 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-09 09:11 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-09 09:11 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-09 09:11 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-09 09:11 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-09 09:11 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-07-09 09:11 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-09 09:11 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-09 09:11 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-09 09:11 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-09 09:11 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-09 09:11 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-09 09:11 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-07-09 09:11 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-07-09 09:11 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-09 09:11 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-09 09:11 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-07-09 09:11 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-09 09:11 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-09 09:11 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-07-09 09:11 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-07-09 09:11 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-07-09 09:11 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-09 09:11 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-09 09:11 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-09 09:11 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-09 09:11 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-07-09 09:11 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-09 09:11 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-09 09:11 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-09 09:11 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-09 09:11 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-09 09:11 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-09 09:11 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-09 09:11 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-07-09 09:11 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-07-09 01:44 - 2014-07-09 01:44 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{C7594191-F2B0-4F71-B063-977DD19F1C59}
2014-07-08 08:48 - 2014-07-08 08:48 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{3E229214-BE51-48A5-8F80-378BF5AF20E1}
2014-07-07 20:47 - 2014-07-07 20:47 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{D8F42003-9BBE-4D0C-BEBA-20AF0207FAC4}
2014-07-07 08:46 - 2014-07-07 08:46 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{55D08D20-4B25-4B1B-AEFE-8742B0A852DD}
2014-07-06 15:19 - 2014-07-06 15:20 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{AB263E03-5D59-436B-84AF-DB01026638DC}
2014-07-06 03:19 - 2014-07-06 03:19 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{627723FC-24C1-4E4D-86DB-83F6F83080AF}
2014-07-05 08:23 - 2014-07-05 08:23 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{F8CB4CAB-683C-40E6-B6F3-1D1C29829616}
2014-07-04 11:55 - 2014-07-04 11:55 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{2DF64E07-A978-44D0-9FC2-21627FD0DEAE}
2014-07-03 23:45 - 2014-07-03 23:45 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{59218A31-2350-4F9A-B021-CB0373A13497}
2014-07-03 18:00 - 2014-07-28 19:35 - 00208815 _____ () C:\Windows\SysWOW64\~.tmp
2014-07-03 11:42 - 2014-07-03 11:42 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{A2057348-A64C-4D70-994B-33435DCB6C64}
2014-07-02 23:41 - 2014-07-02 23:42 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{CF34D353-66FB-4FA9-939A-AB69FA03A5ED}
2014-07-02 11:41 - 2014-07-02 11:41 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{3F82B088-138A-476C-B3DB-451B0DDC3683}
2014-07-01 23:30 - 2014-07-01 23:30 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{547DFCA5-1DC7-4BFE-B25C-B0E2197FB054}
2014-07-01 09:46 - 2014-07-01 09:47 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{660804D0-E2C1-4AB6-BF59-18BCB949A302}
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-07-31 09:47 - 2014-07-31 09:45 - 00015779 _____ () C:\Users\Reinhard Schreiber\Desktop\FRST.txt
2014-07-31 09:45 - 2014-07-31 09:45 - 00000000 ____D () C:\FRST
2014-07-31 09:44 - 2014-07-31 09:44 - 02094080 _____ (Farbar) C:\Users\Reinhard Schreiber\Desktop\FRST64.exe
2014-07-31 09:35 - 2014-06-24 03:18 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-31 09:35 - 2011-02-04 22:24 - 00000000 ____D () C:\Users\Reinhard Schreiber\Documents\WORD
2014-07-31 09:22 - 2012-04-22 14:12 - 00001134 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-31 09:18 - 2013-12-20 15:18 - 00000911 _____ () C:\Windows\Tasks\EPSON XP-412 413 415 Series Update {0CD65160-1B78-41EB-B227-A6F1B509D5D6}.job
2014-07-31 09:18 - 2013-12-20 15:18 - 00000725 _____ () C:\Windows\Tasks\EPSON XP-412 413 415 Series Invitation {0CD65160-1B78-41EB-B227-A6F1B509D5D6}.job
2014-07-31 09:18 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-07-31 09:11 - 2011-01-21 07:03 - 01404197 _____ () C:\Windows\WindowsUpdate.log
2014-07-31 09:02 - 2012-02-08 00:44 - 00003448 _____ () C:\Windows\System32\Tasks\PCDEventLauncher
2014-07-31 09:01 - 2012-02-08 00:44 - 00003532 _____ () C:\Windows\System32\Tasks\SystemToolsDailyTest
2014-07-31 09:01 - 2012-02-08 00:44 - 00000466 _____ () C:\Windows\Tasks\SystemToolsDailyTest.job
2014-07-31 04:34 - 2009-07-14 06:45 - 00020480 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-31 04:34 - 2009-07-14 06:45 - 00020480 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-31 04:29 - 2014-06-06 14:07 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-31 04:26 - 2012-04-22 14:12 - 00001130 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-31 04:25 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-31 04:25 - 2009-07-14 06:51 - 00085654 _____ () C:\Windows\setupact.log
2014-07-30 21:15 - 2014-07-30 21:15 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{0D200835-F557-4E44-AD3E-799E1A08930E}
2014-07-30 09:15 - 2014-07-30 09:15 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{C2D75AD5-9F8F-41FC-AED3-4886FBEB60A6}
2014-07-29 21:15 - 2014-07-29 21:14 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{73DA6E74-D195-463A-9AFE-FB4EC1C10A9B}
2014-07-29 10:42 - 2014-03-11 14:54 - 01649854 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-07-29 10:42 - 2011-01-21 15:41 - 00703230 _____ () C:\Windows\system32\perfh007.dat
2014-07-29 10:42 - 2011-01-21 15:41 - 00150838 _____ () C:\Windows\system32\perfc007.dat
2014-07-29 09:13 - 2014-07-29 09:12 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{0A38383F-C9D4-423C-9DC2-B5CB76396D90}
2014-07-28 19:43 - 2014-07-28 19:43 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{926401E7-BF3A-437A-B66E-8C9BB0A823A7}
2014-07-28 19:36 - 2011-02-04 22:11 - 00000000 ____D () C:\Users\Reinhard Schreiber\Documents\Arbeitsagentur
2014-07-28 19:35 - 2014-07-03 18:00 - 00208815 _____ () C:\Windows\SysWOW64\~.tmp
2014-07-28 07:42 - 2014-07-28 07:42 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{E4F1886B-8FB2-4B6B-8072-488C78935FD1}
2014-07-27 14:36 - 2014-07-27 14:35 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{33513E1B-52DF-4B24-B82F-92D96D7BF0E1}
2014-07-27 08:40 - 2012-02-08 00:44 - 00000528 _____ () C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job
2014-07-27 08:39 - 2013-03-13 16:07 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-27 08:39 - 2013-03-13 16:07 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-27 02:20 - 2014-07-27 02:20 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{7905C81E-B919-44A4-8157-30D0203EA970}
2014-07-26 13:09 - 2014-07-26 13:08 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{A799F21E-5B0E-4B7F-B47D-23EE6FB9ADC2}
2014-07-26 01:08 - 2014-07-26 01:07 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{FE267E68-AA6E-4389-B859-447221AC9B49}
2014-07-25 14:58 - 2013-08-22 21:25 - 00000000 ____D () C:\Users\Reinhard Schreiber\Documents\Heizölbestellungen
2014-07-25 12:13 - 2014-07-25 12:13 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{F9E8E605-5D98-498B-8FF1-BFC7D8BE46A7}
2014-07-25 00:12 - 2014-07-25 00:12 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{638950D1-2765-44F7-B826-BC597EDEDAC6}
2014-07-24 12:11 - 2014-07-24 12:11 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{755D0D6B-C852-47B9-8686-28839E3E8DB1}
2014-07-24 08:32 - 2013-03-13 16:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-23 23:25 - 2014-07-23 23:24 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{CE34A58E-1FF6-4F91-B62D-980DA8B96FFB}
2014-07-23 11:24 - 2014-07-23 11:23 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{585931EA-09D8-4FD0-979A-72BA027D26FC}
2014-07-23 10:04 - 2011-02-04 22:21 - 00000000 ____D () C:\Users\Reinhard Schreiber\Documents\Steuerreklärung
2014-07-22 23:23 - 2014-07-22 23:22 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{F66CBB4B-17DC-4D71-9EC5-021B5B96CEB5}
2014-07-22 11:02 - 2014-07-22 11:02 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{0096A449-8D41-437F-9246-F5F67492673C}
2014-07-21 22:00 - 2012-02-08 00:44 - 00004272 _____ () C:\Windows\System32\Tasks\PCDoctorBackgroundMonitorTask
2014-07-21 21:14 - 2014-07-21 21:14 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{F1EEB5EB-C7F3-4F0F-99A1-834F910D7A0B}
2014-07-21 07:35 - 2014-07-21 07:35 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{9FF060FC-5F2B-4363-AC4B-615C303C6185}
2014-07-20 19:23 - 2014-07-20 19:23 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{8BE589C8-561D-4C47-BAE6-34048A1E4240}
2014-07-20 09:01 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\spool
2014-07-20 07:22 - 2014-07-20 07:22 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{F0596EF0-60CA-4A77-A238-8D42C7CE6784}
2014-07-19 19:21 - 2014-07-19 19:21 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{9BD9924E-2AE9-4165-9D78-8D0EFD3188FB}
2014-07-19 02:01 - 2014-07-19 02:01 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{F5E45A39-CCE2-49A1-9ADB-7FDD46ED430A}
2014-07-18 09:14 - 2014-07-18 09:14 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{5B7958E4-CDDC-4831-AF80-743C1282A226}
2014-07-18 09:10 - 2011-02-04 22:12 - 00000000 ____D () C:\Users\Reinhard Schreiber\Documents\Reinhard
2014-07-17 21:13 - 2014-07-17 21:13 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{31F9E1CB-3960-400D-B8E2-E30A735F12A3}
2014-07-17 07:34 - 2014-07-17 07:34 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{0527CC64-B56A-4A51-9918-6128492CD544}
2014-07-16 19:24 - 2014-07-16 19:23 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{642D0634-A7D4-4A8E-A44F-0AFE0AF251A4}
2014-07-16 01:03 - 2014-07-16 01:03 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{37F8BEB2-7517-40BD-9DCD-090B778C8BD5}
2014-07-15 16:12 - 2013-05-06 11:20 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-07-15 12:02 - 2014-07-15 12:02 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{BFB72029-13EF-4220-B7BD-2C88AE5BB640}
2014-07-15 00:01 - 2014-07-15 00:01 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{DA986911-3899-4C71-AB0B-A8A69098535E}
2014-07-14 08:50 - 2014-07-14 08:50 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{B4FCC259-66AE-4D9D-8DCA-784747DD3CD6}
2014-07-13 20:50 - 2014-07-13 20:50 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{C6EB9779-C03D-4012-A7C2-785C55BC6E4E}
2014-07-13 08:50 - 2014-07-13 08:49 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{9544DA7F-0B04-480D-9B4E-374AB6E48774}
2014-07-12 20:13 - 2014-07-12 20:13 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{466EAD0F-2320-4875-BB8D-E20EA93AF815}
2014-07-12 08:01 - 2014-07-12 08:01 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{E2339773-E93D-4F19-AF6D-E4C54F565724}
2014-07-11 18:29 - 2014-07-11 18:29 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{08B9A4AA-8110-4382-BF87-D7D5FFC345EE}
2014-07-11 06:28 - 2014-07-11 06:28 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{02473A18-EC95-409A-B012-0637A1C8E7E2}
2014-07-10 16:11 - 2014-07-10 16:11 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{9BF741AD-2FCC-43C6-853B-E0B9373EA825}
2014-07-10 12:12 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-07-10 10:41 - 2009-07-14 06:45 - 00465608 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-10 10:38 - 2014-05-06 16:08 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-07-10 10:38 - 2009-07-14 09:45 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-10 10:38 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-07-10 10:38 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-07-10 01:51 - 2014-07-10 01:51 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{8E9EE974-18D8-4AAB-A7E9-07D2CF9595EB}
2014-07-09 20:57 - 2014-06-24 03:18 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-09 20:57 - 2012-04-03 22:42 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-09 20:57 - 2012-02-07 13:36 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-09 13:45 - 2014-07-09 13:45 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{DA401E49-CC6D-47D0-8DA1-E517485D32AC}
2014-07-09 09:25 - 2013-08-14 20:56 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-09 09:22 - 2011-02-05 21:38 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-09 09:22 - 2011-02-04 02:11 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-07-09 01:44 - 2014-07-09 01:44 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{C7594191-F2B0-4F71-B063-977DD19F1C59}
2014-07-08 08:48 - 2014-07-08 08:48 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{3E229214-BE51-48A5-8F80-378BF5AF20E1}
2014-07-07 20:47 - 2014-07-07 20:47 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{D8F42003-9BBE-4D0C-BEBA-20AF0207FAC4}
2014-07-07 08:46 - 2014-07-07 08:46 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{55D08D20-4B25-4B1B-AEFE-8742B0A852DD}
2014-07-06 15:20 - 2014-07-06 15:19 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{AB263E03-5D59-436B-84AF-DB01026638DC}
2014-07-06 03:19 - 2014-07-06 03:19 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{627723FC-24C1-4E4D-86DB-83F6F83080AF}
2014-07-05 14:59 - 2011-02-04 21:03 - 00222160 _____ () C:\Windows\PFRO.log
2014-07-05 08:23 - 2014-07-05 08:23 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{F8CB4CAB-683C-40E6-B6F3-1D1C29829616}
2014-07-04 11:55 - 2014-07-04 11:55 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{2DF64E07-A978-44D0-9FC2-21627FD0DEAE}
2014-07-03 23:45 - 2014-07-03 23:45 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{59218A31-2350-4F9A-B021-CB0373A13497}
2014-07-03 20:55 - 2013-03-28 03:38 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-07-03 11:42 - 2014-07-03 11:42 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{A2057348-A64C-4D70-994B-33435DCB6C64}
2014-07-03 00:15 - 2011-02-04 22:12 - 00000000 ____D () C:\Users\Reinhard Schreiber\Documents\EXCEL
2014-07-02 23:42 - 2014-07-02 23:41 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{CF34D353-66FB-4FA9-939A-AB69FA03A5ED}
2014-07-02 11:41 - 2014-07-02 11:41 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{3F82B088-138A-476C-B3DB-451B0DDC3683}
2014-07-01 23:30 - 2014-07-01 23:30 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{547DFCA5-1DC7-4BFE-B25C-B0E2197FB054}
2014-07-01 09:47 - 2014-07-01 09:46 - 00000000 ____D () C:\Users\Reinhard Schreiber\AppData\Local\{660804D0-E2C1-4AB6-BF59-18BCB949A302}
Some content of TEMP:
====================
C:\Users\Reinhard Schreiber\AppData\Local\Temp\avgnt.exe
C:\Users\Reinhard Schreiber\AppData\Local\Temp\Quarantine.exe
C:\Users\Reinhard Schreiber\AppData\Local\Temp\Uninstall.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-07-28 09:46
==================== End Of Log ============================
--- --- --- Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-07-2014 01
Ran by Reinhard Schreiber at 2014-07-31 09:48:40
Running from C:\Users\Reinhard Schreiber\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Registry Patch to arrange icons in Device and Printers folder of Windows 7 (HKLM\...\W7DevOR) (Version: 1.00 - )
Update for Microsoft Office 2007 (KB2508958) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version: - Microsoft)
Access Help (HKLM-x32\...\{C6FA39A7-26B1-480A-BC74-6D17531AC222}) (Version: 3.00 - Lenovo)
Adobe Flash Player 14 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Reader X (10.1.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.10 - Adobe Systems Incorporated)
Anzeige am Bildschirm (HKLM\...\OnScreenDisplay) (Version: 6.10.01 - )
ATI Catalyst Install Manager (HKLM\...\{F11F930D-5126-CE5C-B36A-19E8B87A5C78}) (Version: 3.0.762.0 - ATI Technologies, Inc.)
ATI Uninstaller (HKLM\...\ATI Uninstaller) (Version: 8.70-100113a-095272C-Lenovo - ATI Technologies, Inc.)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.5.464 - Avira)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Core Implementation (x32 Version: 2010.0113.2208.39662 - ATI) Hidden
Catalyst Control Center Graphics Full Existing (x32 Version: 2010.0113.2208.39662 - ATI) Hidden
Catalyst Control Center Graphics Full New (x32 Version: 2010.0113.2208.39662 - ATI) Hidden
Catalyst Control Center Graphics Light (x32 Version: 2010.0113.2208.39662 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0113.2208.39662 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2010.0113.2208.39662 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2010.0113.2208.39662 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2010.0113.2207.39662 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2010.0113.2207.39662 - ATI) Hidden
CCC Help Czech (x32 Version: 2010.0113.2207.39662 - ATI) Hidden
CCC Help Danish (x32 Version: 2010.0113.2207.39662 - ATI) Hidden
CCC Help Dutch (x32 Version: 2010.0113.2207.39662 - ATI) Hidden
CCC Help English (x32 Version: 2010.0113.2207.39662 - ATI) Hidden
CCC Help Finnish (x32 Version: 2010.0113.2207.39662 - ATI) Hidden
CCC Help French (x32 Version: 2010.0113.2207.39662 - ATI) Hidden
CCC Help German (x32 Version: 2010.0113.2207.39662 - ATI) Hidden
CCC Help Greek (x32 Version: 2010.0113.2207.39662 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2010.0113.2207.39662 - ATI) Hidden
CCC Help Italian (x32 Version: 2010.0113.2207.39662 - ATI) Hidden
CCC Help Japanese (x32 Version: 2010.0113.2207.39662 - ATI) Hidden
CCC Help Korean (x32 Version: 2010.0113.2207.39662 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2010.0113.2207.39662 - ATI) Hidden
CCC Help Polish (x32 Version: 2010.0113.2207.39662 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2010.0113.2207.39662 - ATI) Hidden
CCC Help Russian (x32 Version: 2010.0113.2207.39662 - ATI) Hidden
CCC Help Spanish (x32 Version: 2010.0113.2207.39662 - ATI) Hidden
CCC Help Swedish (x32 Version: 2010.0113.2207.39662 - ATI) Hidden
CCC Help Thai (x32 Version: 2010.0113.2207.39662 - ATI) Hidden
CCC Help Turkish (x32 Version: 2010.0113.2207.39662 - ATI) Hidden
ccc-core-static (x32 Version: 2010.0113.2208.39662 - Ihr Firmenname) Hidden
ccc-utility64 (Version: 2010.0113.2208.39662 - ATI) Hidden
Create Recovery Media (HKLM-x32\...\{50DC5136-21E8-48BC-97E5-1AD055F6B0B6}) (Version: 1.20.0.00 - Lenovo Group Limited)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dienstprogramm "ThinkPad UltraNav" (HKLM-x32\...\{17CBC505-D1AE-459D-B445-3D2000A85842}) (Version: 2.13.0 - Lenovo)
DirectX 9 Runtime (x32 Version: 1.00.0000 - Sonic Solutions) Hidden
ElsterFormular (HKLM-x32\...\ElsterFormular 13.0.0.8086k) (Version: 15.1.13904 - Landesfinanzdirektion Thüringen)
Epson Event Manager (HKLM-x32\...\{2970697F-2A11-4588-8B7F-97322D1CCF3C}) (Version: 3.10.0017 - Seiko Epson Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
EPSON XP-412 413 415 Series Printer Uninstall (HKLM\...\EPSON XP-412 413 415 Series) (Version: - SEIKO EPSON Corporation)
EPSON-Drucker-Software (HKLM\...\EPSON Printer and Utilities) (Version: - )
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Intel PROSet Wireless (Version: - ) Hidden
Intel(R) PROSet/Wireless WiFi-Software (HKLM\...\{CCAFF072-4DDB-4846-963D-15F02A8E9472}) (Version: 13.00.0000 - Intel Corporation)
InterVideo WinDVD 8 (HKLM-x32\...\InstallShield_{20471B27-D702-4FE8-8DEC-0702CC8C0A85}) (Version: 8.0.20.199 - InterVideo Inc.)
InterVideo WinDVD 8 (x32 Version: 8.0.20.199 - InterVideo Inc.) Hidden
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.28 - Irfan Skiljan)
Java 7 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217060FF}) (Version: 7.0.600 - Oracle)
Java Auto Updater (x32 Version: 2.1.60.19 - Oracle, Inc.) Hidden
JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.00.29.02 - JMicron Technology Corp.)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Lenovo Auto Scroll Utility (HKLM\...\LenovoAutoScrollUtility) (Version: 1.00 - )
Lenovo Power Management Driver (HKLM\...\Power Management Driver) (Version: 1.66.00.22 - )
Lenovo System Interface Driver (HKLM\...\LENOVO.SMIIF) (Version: 1.02 - )
Lenovo ThinkVantage Toolbox (HKLM\...\PC-Doctor for Windows) (Version: 6.0.5849.23 - PC-Doctor, Inc.)
Lenovo Welcome (HKLM-x32\...\Lenovo Welcome_is1) (Version: 2.02.003.0 - Lenovo)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Message Center Plus (HKLM-x32\...\{FD331A3B-F7A5-4C31-B8D4-DF413C85AF7A}) (Version: 2.0.0012.00 - Lenovo Group Limited)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Default Manager (x32 Version: 2.2.114.0 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.1.177.0 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (Version: 2.1.177.0 - Microsoft Corporation) Hidden
Mobile Broadband (HKLM-x32\...\{986AB50A-A527-4F6D-8E8B-87FC3F0C2DBA}) (Version: 3.6.0006 - Lenovo)
Mobile Partner (HKLM-x32\...\Mobile Partner) (Version: 16.002.03.03.511 - Huawei Technologies Co.,Ltd)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.2.0 - Frank Heindörfer, Philip Chinery)
Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.11.1127.2009 - Realtek)
Realtek HDMI Audio Driver for ATI (HKLM-x32\...\{5449FB4F-1802-4D5B-A6D8-087DB1142147}) (Version: 6.0.1.6034 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6146 - Realtek Semiconductor Corp.)
Registry Patch to Enable Maximum Power Saving on WiFi Adapters for Windows 7 (HKLM\...\EnablePS) (Version: 1.00 - )
Rescue and Recovery (HKLM-x32\...\{B383F243-0ABC-4E56-AA30-923B8D85076E}) (Version: 4.30.0025.00 - Lenovo Group Limited)
Roxio Activation Module (x32 Version: 1.0 - Roxio) Hidden
Roxio Central Audio (x32 Version: 3.8.0 - Roxio) Hidden
Roxio Central Copy (x32 Version: 3.8.0 - Roxio) Hidden
Roxio Central Core (x32 Version: 3.8.0 - Roxio) Hidden
Roxio Central Data (x32 Version: 3.8.0 - Roxio) Hidden
Roxio Central Tools (x32 Version: 3.8.0 - Roxio) Hidden
Roxio Creator Small Business Edition (HKLM-x32\...\{537BF16E-7412-448C-95D8-846E85A1D817}) (Version: 10.3 - Roxio)
Roxio Creator Small Business Edition (x32 Version: 10.3.081 - Roxio) Hidden
Roxio Express Labeler 3 (x32 Version: 3.2.1 - Roxio) Hidden
Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Software Updater (HKLM-x32\...\{C09D747A-BD47-42A9-915E-CEB6B1BB7C11}) (Version: 4.2.7 - SEIKO EPSON CORPORATION)
Sonic CinePlayer Decoder Pack (x32 Version: 4.3.0 - Sonic Solutions) Hidden
Sonic Icons for Lenovo (HKLM-x32\...\{B334D9AE-1393-423E-97C0-3BDC3360E692}) (Version: 2.0.0 - Lenovo)
Sunny Data Control (HKLM-x32\...\Sunny Data Control) (Version: - )
System Update (HKLM-x32\...\{25C64847-B900-48AD-A164-1B4F9B774650}) (Version: 4.00.0032 - Lenovo)
ThinkPad Bluetooth with Enhanced Data Rate Software (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.0.9600 - Broadcom Corporation)
ThinkPad Energie-Manager (HKLM-x32\...\{DAC01CEE-5BAE-42D5-81FC-B687E84E8405}) (Version: 3.30 - )
ThinkPad FullScreen Magnifier (HKLM\...\ThinkPad FullScreen Magnifier) (Version: 2.15 - )
ThinkPad UltraNav Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.18.0 - )
ThinkVantage Access Connections (HKLM-x32\...\{8E537894-A559-4D60-B3CB-F4485E3D24E3}) (Version: 5.72 - Lenovo)
ThinkVantage Communications Utility (HKLM\...\{88C6A6D9-324C-46E8-BA87-563D14021442}_is1) (Version: 1.42 - Lenovo)
ThinkVantage System für aktiven Festplattenschutz (HKLM\...\{46A84694-59EC-48F0-964C-7E76E9F8A2ED}) (Version: 1.72 - Lenovo)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2883030) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{F5DCAB53-C2FD-4E5A-8C83-0F37485E5E89}) (Version: - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft)
VC 9.0 Runtime (x32 Version: 1.0.0 - Check Point Software Technologies Ltd) Hidden
VD64Inst (Version: 1.00.0000 - Roxio, Inc.) Hidden
Verizon Wireless Mobile Broadband Self Activation (HKLM-x32\...\{C64A877E-DF8D-4017-AA82-000A77C6D809}) (Version: 3.1.4 - Smith Micro Software, Inc.)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows-Treiberpaket - Intel (iaStor) hdc (01/15/2010 9.5.7.1002) (HKLM\...\C39A7AFB5CAF49F10B9573FFE2E981F1AB2074B6) (Version: 01/15/2010 9.5.7.1002 - Intel)
Windows-Treiberpaket - Lenovo 1.60.0.4 (11/18/2009 1.60.0.4) (HKLM\...\114EB224AD576F278686036AA9E1EFB7847E3935) (Version: 11/18/2009 1.60.0.4 - Lenovo)
ZoneAlarm Firewall (x32 Version: 11.0.000.038 - Check Point Software Technologies Ltd.) Hidden
ZoneAlarm Security (x32 Version: 11.0.000.504 - Check Point Software Technologies Ltd.) Hidden
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
==================== Restore Points =========================
09-07-2014 00:37:26 Geplanter Prüfpunkt
09-07-2014 07:19:13 Windows Update
16-07-2014 22:22:20 Geplanter Prüfpunkt
23-07-2014 22:24:43 Geplanter Prüfpunkt
24-07-2014 06:29:48 Windows Update
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:34 - 2014-06-21 13:15 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {0332513B-7193-4442-AB9E-4B63D7ECF4B7} - System32\Tasks\PCDEventLauncher => C:\Program Files\PC-Doctor\sessionchecker.exe [2011-06-27] (PC-Doctor, Inc.)
Task: {054E2064-38B6-48E0-801A-7DD2B8E2FDE0} - System32\Tasks\TVT\LaunchRnR => C:\Program Files (x86)\Lenovo\Rescue and Recovery\rrcmd.exe [2009-08-28] (Lenovo Limited Group Corporation)
Task: {0EC76A82-1613-4499-9F52-966905D64012} - System32\Tasks\{279B09D7-7319-4DF5-923C-B4179DD3A458} => Iexplore.exe hxxp://ui.skype.com/ui/0/4.2.0.155.375/de/go/help.faq.installer?LastError=1603
Task: {0FA14BBF-14BE-491C-8913-8400F79D3E47} - System32\Tasks\Microsoft_Hardware_Launch_devicecenter_exe => c:\Program Files\Microsoft Device Center\devicecenter.exe
Task: {22E3EEE0-6522-45CF-A40E-A9B94360A743} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-04-22] (Google Inc.)
Task: {2C9064BF-094D-4A8E-9F94-23BF5786D239} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-01-29] (Microsoft Corporation)
Task: {41E505C6-0150-43EB-A10E-2A43AA8D5A4E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09] (Adobe Systems Incorporated)
Task: {4356AF64-9DD8-434C-9889-E0AABCBE5CF0} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-01-29] (Microsoft Corporation)
Task: {6B3B600C-4E98-4187-9CF7-0354D9EF1929} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-01-29] (Microsoft)
Task: {709967B8-0C39-4FC7-BD6C-FD56E0B2F121} - System32\Tasks\SystemToolsDailyTest => C:\Program Files\PC-Doctor\uaclauncher.exe [2011-06-27] (PC-Doctor, Inc.)
Task: {8127F4B9-4346-4B66-91B7-9F2F35B815F1} - System32\Tasks\TVT\ChangePWD => %RR%\rrcmd.exe
Task: {819A4C83-AF19-4F0D-8412-8095B94E4E29} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\PC-Doctor\uaclauncher.exe [2011-06-27] (PC-Doctor, Inc.)
Task: {856E0EB7-9960-43BE-9D6A-AD4049125242} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-01-29] (Microsoft Corporation)
Task: {9DC633BD-5D85-46FC-B11E-20F2767DF81A} - System32\Tasks\PMTask => C:\Program Files (x86)\ThinkPad\Utilities\PWMIDTSV.EXE [2010-08-24] (Lenovo Group Limited)
Task: {BDC30861-1441-4A92-96A6-7E41DC700952} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-01-29] (Microsoft Corporation)
Task: {D3226FFC-36E7-4264-8400-5E6FCFB80E10} - System32\Tasks\EPSON XP-412 413 415 Series Update {0CD65160-1B78-41EB-B227-A6F1B509D5D6} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLEE.EXE [2013-04-26] (SEIKO EPSON CORPORATION)
Task: {E01AFA7E-386D-40D6-972F-9647664E0DEC} - System32\Tasks\TVT\UpdateRnR => %TVTCOMMON%\Scheduler\tvtsetsched.exe
Task: {E6078295-0775-4E3E-8286-B83A77D74DDD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-04-22] (Google Inc.)
Task: {EA6203B3-711D-4837-B28C-33355A44EB60} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {FD782DEA-3D88-4BAD-8ED0-0DA9E58A7463} - System32\Tasks\EPSON XP-412 413 415 Series Invitation {0CD65160-1B78-41EB-B227-A6F1B509D5D6} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLEE.EXE [2013-04-26] (SEIKO EPSON CORPORATION)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\EPSON XP-412 413 415 Series Invitation {0CD65160-1B78-41EB-B227-A6F1B509D5D6}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLEE.EXE
Task: C:\Windows\Tasks\EPSON XP-412 413 415 Series Update {0CD65160-1B78-41EB-B227-A6F1B509D5D6}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLEE.EXE
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job => C:\Program Files\PC-Doctor\uaclauncher.exe
Task: C:\Windows\Tasks\SystemToolsDailyTest.job => C:\Program Files\PC-Doctor\uaclauncher.exe
==================== Loaded Modules (whitelisted) =============
2009-09-21 16:04 - 2009-09-21 16:04 - 01501696 ____N () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll
2011-02-04 22:38 - 2005-03-12 01:07 - 00087040 ____N () C:\Windows\System32\pdfcmnnt.dll
2011-01-21 07:20 - 2010-08-24 20:30 - 00047616 ____N () C:\Program Files (x86)\ThinkPad\Utilities\GR\PWMRT64V.DLL
2009-05-27 23:09 - 2009-05-27 23:09 - 00049976 ____N () C:\Program Files (x86)\Lenovo\Message Center Plus\MCPLaunch.exe
2009-06-10 03:06 - 2009-06-10 03:06 - 00219632 ____N () C:\Program Files (x86)\Roxio\SonicHDDemuxer.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (07/29/2014 09:13:56 AM) (Source: PC-Doctor) (EventID: 1) (User: )
Description: (10264) Asapi: (09:13:56:9680)(10264) S3LogPusherPlugin.Helper - Error -- 340 Unable to storage the test log to medium
Error: (07/28/2014 11:47:43 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wlmail.exe, Version: 15.4.3555.308, Zeitstempel: 0x4f59707e
Name des fehlerhaften Moduls: MSMAIL.DLL, Version: 15.4.3555.308, Zeitstempel: 0x4f59709e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x001e5130
ID des fehlerhaften Prozesses: 0x%9
Startzeit der fehlerhaften Anwendung: 0xwlmail.exe0
Pfad der fehlerhaften Anwendung: wlmail.exe1
Pfad des fehlerhaften Moduls: wlmail.exe2
Berichtskennung: wlmail.exe3
Error: (07/28/2014 11:32:00 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wlmail.exe, Version: 15.4.3555.308, Zeitstempel: 0x4f59707e
Name des fehlerhaften Moduls: MSMAIL.DLL, Version: 15.4.3555.308, Zeitstempel: 0x4f59709e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x001e5130
ID des fehlerhaften Prozesses: 0x%9
Startzeit der fehlerhaften Anwendung: 0xwlmail.exe0
Pfad der fehlerhaften Anwendung: wlmail.exe1
Pfad des fehlerhaften Moduls: wlmail.exe2
Berichtskennung: wlmail.exe3
Error: (07/27/2014 11:29:42 AM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.
Error: (07/27/2014 10:53:33 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm IEXPLORE.EXE, Version 11.0.9600.17207 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 106c
Startzeit: 01cfa96807be4054
Endzeit: 50
Anwendungspfad: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
Berichts-ID:
Error: (07/26/2014 00:40:15 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.
Error: (07/25/2014 03:07:05 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm wlmail.exe, Version 15.4.3555.308 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: cd0
Startzeit: 01cfa3c1721123cd
Endzeit: 0
Anwendungspfad: C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
Berichts-ID:
Error: (07/24/2014 07:00:05 PM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "E:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"
Error: (07/24/2014 09:38:21 AM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.
Error: (07/24/2014 08:06:44 AM) (Source: System Restore) (EventID: 8211) (User: )
Description: Der geplante Wiederherstellungspunkt konnte nicht erstellt werden. Zusätzliche Informationen: (0x81000101).
System errors:
=============
Error: (07/31/2014 09:43:42 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 107.
Error: (07/31/2014 09:43:42 AM) (Source: Schannel) (EventID: 4106) (User: NT-AUTORITÄT)
Description: Eine SSL 3.0-Verbindungsanforderung wurde von einer Remoteclientanwendung übermittelt, jedoch werden keine der Verschlüsselungssammlungen, die von der Clientanwendung unterstützt werden, vom Server unterstützt. Fehler bei der SSL-Verbindungsanforderung.
Error: (07/31/2014 09:43:42 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 107.
Error: (07/31/2014 09:43:42 AM) (Source: Schannel) (EventID: 4106) (User: NT-AUTORITÄT)
Description: Eine SSL 3.0-Verbindungsanforderung wurde von einer Remoteclientanwendung übermittelt, jedoch werden keine der Verschlüsselungssammlungen, die von der Clientanwendung unterstützt werden, vom Server unterstützt. Fehler bei der SSL-Verbindungsanforderung.
Error: (07/31/2014 09:43:39 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 107.
Error: (07/31/2014 09:43:39 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 107.
Error: (07/31/2014 09:43:39 AM) (Source: Schannel) (EventID: 4106) (User: NT-AUTORITÄT)
Description: Eine SSL 3.0-Verbindungsanforderung wurde von einer Remoteclientanwendung übermittelt, jedoch werden keine der Verschlüsselungssammlungen, die von der Clientanwendung unterstützt werden, vom Server unterstützt. Fehler bei der SSL-Verbindungsanforderung.
Error: (07/31/2014 09:43:39 AM) (Source: Schannel) (EventID: 4106) (User: NT-AUTORITÄT)
Description: Eine SSL 3.0-Verbindungsanforderung wurde von einer Remoteclientanwendung übermittelt, jedoch werden keine der Verschlüsselungssammlungen, die von der Clientanwendung unterstützt werden, vom Server unterstützt. Fehler bei der SSL-Verbindungsanforderung.
Error: (07/31/2014 09:42:22 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 107.
Error: (07/31/2014 09:42:22 AM) (Source: Schannel) (EventID: 4106) (User: NT-AUTORITÄT)
Description: Eine SSL 3.0-Verbindungsanforderung wurde von einer Remoteclientanwendung übermittelt, jedoch werden keine der Verschlüsselungssammlungen, die von der Clientanwendung unterstützt werden, vom Server unterstützt. Fehler bei der SSL-Verbindungsanforderung.
Microsoft Office Sessions:
=========================
Error: (09/02/2013 09:35:09 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 3088 seconds with 1680 seconds of active time. This session ended with a crash.
Error: (09/07/2012 00:11:20 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 3785 seconds with 3000 seconds of active time. This session ended with a crash.
CodeIntegrity Errors:
===================================
Date: 2014-06-24 03:50:08.938
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-06-24 03:14:57.719
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-06-24 02:41:59.513
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-06-24 02:26:45.577
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-06-24 02:08:41.415
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-06-24 01:41:22.234
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-06-24 01:32:18.026
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-06-24 01:25:21.353
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-06-24 01:14:17.719
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-06-23 22:33:26.784
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 62%
Total physical RAM: 4060.86 MB
Available physical RAM: 1526.97 MB
Total Pagefile: 8119.9 MB
Available Pagefile: 5313.3 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB
==================== Drives ================================
Drive c: (Windows7_OS) (Fixed) (Total:287.15 GB) (Free:156.21 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive q: (Lenovo_Recovery) (Fixed) (Total:9.77 GB) (Free:1.83 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 298 GB) (Disk ID: 083A93A8)
Partition 1: (Active) - (Size=1 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=287 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=10 GB) - (Type=07 NTFS)
==================== End Of Log ============================
vielen Dank für die Hilfe
Reinhardo |
FRST 32-Bit | FRST 64-Bit
Malwarebytes Anti-Malware 
AdwCleaner auf deinen Desktop.
SecurityCheck und:
WARNUNG an die MITLESER: 
