| rudi9999 | 06.09.2014 11:40 |
Malware auf dem PC
Hallo!
Ich habe wohl Malware auf dem PC. Das Programm Malwarebytes startet nicht mehr. Ich habe auch alles nach der Anleitung hier probiert aber es startet nicht.
Wenn ich das Programm OTH starte und benutze stürzt der Rechner immer ab.
Danke
Hier die Logs von FRST
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 06-09-2014
Ran by Holger (administrator) on HOLGER-PC on 06-09-2014 12:34:55
Running from C:\Users\Holger\Downloads
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation.) C:\Program Files\Microsoft\BingBar\7.3.132.0\BBSvc.EXE
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(LogMeIn, Inc.) C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe
(Nero AG) C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe
(pdfforge GmbH) C:\Program Files\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files\PDF Architect\ConversionService.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
(APN) C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Adobe Systems Inc.) C:\Program Files\Adobe\Acrobat 11.0\Acrobat\acrotray.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(Samsung) C:\Program Files\Samsung\Kies\Kies.exe
(Samsung) C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Overwolf LTD) C:\Program Files\Overwolf\Overwolf.exe
(LOL Replay) C:\Program Files\LOLReplay\LOLRecorder.exe
() C:\Windows\System32\C2MP\TrayMenu.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil32_14_0_0_145_ActiveX.exe
(Overwolf LTD) C:\Program Files\Common Files\Overwolf\0.79.21.0\OverwolfHelper.exe
() C:\Program Files\Overwolf\0.79.21.0\OverwolfBrowser.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-14] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\x86\CLIStart.exe [747264 2013-08-30] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [KiesTrayAgent] => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311152 2013-09-04] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [Nero MediaHome 4] => C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe [5178664 2010-10-26] (Nero AG)
HKLM\...\Run: [ApnTBMon] => C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1942424 2014-08-22] (APN)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [Acrobat Assistant 8.0] => C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3478752 2012-12-18] (Adobe Systems Inc.)
HKLM\...\Run: [RadioRage Home Page Guard 32 bit] => "C:\PROGRA~1\RADIOR~1\bar\1.bin\AppIntegrator.exe"
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [152392 2014-07-08] (Apple Inc.)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [161584 2014-08-04] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [3802448 2014-09-04] (LogMeIn Inc.)
HKU\.DEFAULT\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2013-08-31] (Microsoft Corporation)
HKU\S-1-5-21-1237565898-1862580291-3482752318-1000\...\Run: [KiesPreload] => C:\Program Files\Samsung\Kies\Kies.exe [1564528 2013-09-04] (Samsung)
HKU\S-1-5-21-1237565898-1862580291-3482752318-1000\...\Run: [KiesAirMessage] => C:\Program Files\Samsung\Kies\KiesAirMessage.exe -startup
HKU\S-1-5-21-1237565898-1862580291-3482752318-1000\...\Run: [] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844656 2013-09-04] (Samsung)
HKU\S-1-5-21-1237565898-1862580291-3482752318-1000\...\Run: [Nero MediaHome 4] => C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe [5178664 2010-10-26] (Nero AG)
HKU\S-1-5-21-1237565898-1862580291-3482752318-1000\...\Run: [MKLOL] => C:\Program Files\MKJogo\MKLOL\Bin\MKIM.exe [1089736 2014-08-28] ()
HKU\S-1-5-21-1237565898-1862580291-3482752318-1000\...\Run: [Overwolf] => C:\Program Files\Overwolf\Overwolf.exe [39712 2014-08-28] (Overwolf LTD)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\LOLRecorder.lnk
ShortcutTarget: LOLRecorder.lnk -> C:\Program Files\LOLReplay\LOLRecorder.exe (LOL Replay)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TrayMenu.lnk
ShortcutTarget: TrayMenu.lnk -> C:\Windows\System32\C2MP\TrayMenu.exe ()
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
ProxyServer: http=127.0.0.1:49220;https=127.0.0.1:49220
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x0ACB0707D5C8CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
BHO: Bing Bar Helper -> {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -> C:\Program Files\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
BHO: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
BHO: Avira SearchFree Toolbar -> {41564952-412D-5637-00A7-7A786E7484D7} -> C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Adobe Acrobat Create PDF Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll No File
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll No File
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll No File
Toolbar: HKLM - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @Nero.com/KM -> C:\PROGRA~1\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files\PDF Architect\FFPDFArchitectExt [2013-10-21]
FF HKLM\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2014-02-09]
Chrome:
=======
CHR HomePage: Default -> 0DB0B33B2EB990B56FE21065B91F443549630593DF7E18781C7281D05BA8DDD4
CHR DefaultSearchKeyword: Default -> trovi.search
CHR DefaultSearchProvider: Default -> Trovi search
CHR DefaultSearchURL: Default -> hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M3AEF6CD1-12FB-4095-BB5E-B8F007E34CBD&SearchSource=58&CUI=&UM=2&UP=SPEF674306-B5AD-44FD-8D8A-3D79F17072F0&q={searchTerms}&SSPV=
CHR DefaultSuggestURL: Default -> hxxp://suggest.seccint.com/CSuggestJson.ashx?prefix={searchTerms}
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\37.0.2062.103\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\37.0.2062.103\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\37.0.2062.103\pdf.dll ()
CHR Plugin: (ChromeUtilPlugin) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaacalgebmfelllfiaoknifldpngjh\20.53263_0\background/ChromeUtilPlugin.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\system32\npDeployJava1.dll No File
CHR Plugin: (Pando Web Plugin) - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (VLC Web Plugin) - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR CustomProfile: C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avira SearchFree Toolbar plus Web Protection) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaacalgebmfelllfiaoknifldpngjh [2013-12-23]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-05]
CHR Extension: (YouTube) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-09-08]
CHR Extension: (No Name) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\cokhadepfhgbjhnngnmkkbcclhgjelkn [2013-10-21]
CHR Extension: (Google-Suche) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-09-08]
CHR Extension: (Adobe Acrobat – PDF-Datei erstellen) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2014-02-23]
CHR Extension: (Avira Browser Safety) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-20]
CHR Extension: (Google Wallet) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-15]
CHR Extension: (Google Mail) - C:\Users\Holger\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-09-08]
CHR HKLM\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx [2014-09-03]
CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2012-09-23]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-08-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1021008 2014-08-14] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [166296 2014-08-22] (APN LLC.)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [149296 2014-08-04] (Avira Operations GmbH & Co. KG)
R2 Hamachi2Svc; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1890128 2014-09-04] (LogMeIn Inc.)
R2 LMIGuardianSvc; C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe [375056 2014-08-08] (LogMeIn, Inc.)
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG)
R2 NeroMediaHomeService.4; C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe [517416 2010-10-26] (Nero AG)
S3 OverwolfUpdater; C:\Program Files\Overwolf\OverwolfUpdater.exe [998176 2014-08-28] (Overwolf LTD)
R2 PDF Architect Helper Service; C:\Program Files\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [97648 2014-07-03] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-07-02] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-27] (Avira Operations GmbH & Co. KG)
S3 EverestDriver; C:\Program Files\Lavalys\EVEREST Home Edition\kerneld.wnt [7168 2005-08-18] () [File not signed]
R3 FETNDIS; C:\Windows\System32\DRIVERS\fetnd6.sys [44032 2009-07-14] (VIA Technologies, Inc. )
R3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO32.SYS [22560 2013-08-31] (REALiX(tm))
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
S3 taphss6; system32\DRIVERS\taphss6.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-06 12:34 - 2014-09-06 12:35 - 00019637 _____ () C:\Users\Holger\Downloads\FRST.txt
2014-09-06 12:34 - 2014-09-06 12:35 - 00000000 ____D () C:\FRST
2014-09-06 12:33 - 2014-09-06 12:33 - 01096704 _____ (Farbar) C:\Users\Holger\Downloads\FRST.exe
2014-09-06 12:28 - 2014-09-06 12:28 - 00142704 _____ () C:\Windows\Minidump\090614-18765-01.dmp
2014-09-06 10:25 - 2014-09-06 10:25 - 00001064 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-09-06 10:25 - 2014-09-06 10:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-09-06 10:24 - 2014-09-06 11:42 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-09-06 10:24 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-09-06 10:24 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-09-06 10:09 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll
2014-09-06 10:06 - 2014-09-06 10:06 - 01370467 _____ () C:\Users\Holger\Downloads\adwcleaner_3.309.exe
2014-09-06 09:54 - 2014-09-06 09:54 - 00142704 _____ () C:\Windows\Minidump\090614-18390-01.dmp
2014-09-06 09:45 - 2014-09-06 09:44 - 00259584 _____ (OldTimer Tools) C:\Users\Holger\Desktop\OTH.scr
2014-09-06 09:44 - 2014-09-06 09:44 - 00259584 _____ (OldTimer Tools) C:\Users\Holger\Downloads\OTH.scr
2014-09-06 09:25 - 2014-09-06 10:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced-System Protector
2014-09-06 09:25 - 2012-07-25 12:03 - 00017136 _____ () C:\Windows\system32\sasnative32.exe
2014-09-06 09:23 - 2014-09-06 09:23 - 00000000 ____D () C:\Program Files\RCP
2014-09-06 08:59 - 2014-09-06 08:59 - 00000000 ____D () C:\Users\Holger\Downloads\ec5d398
2014-09-06 08:56 - 2014-09-06 08:56 - 17929263 _____ () C:\Users\Holger\Downloads\ec5d398.rar
2014-09-06 08:34 - 2014-09-06 08:34 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-X-SL-505
2014-09-06 08:33 - 2014-09-06 08:34 - 68953382 _____ () C:\Users\Holger\Downloads\Sons-X-SL-505.part4.rar
2014-09-06 08:32 - 2014-09-06 08:33 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-X-SL-505.part3.rar
2014-09-06 08:32 - 2014-09-06 08:33 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-X-SL-505.part2.rar
2014-09-06 08:32 - 2014-09-06 08:33 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-X-SL-505.part1.rar
2014-09-06 08:32 - 2014-09-06 08:32 - 00616256 _____ (ClickMeIn Limited) C:\Users\Holger\AppData\Local\nsmC98D.tmp
2014-09-06 01:24 - 2014-09-06 01:24 - 00001892 _____ () C:\Users\Public\Desktop\NosTale.lnk
2014-09-06 01:24 - 2014-09-06 01:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nostale(DE)
2014-09-06 01:10 - 2014-09-06 01:18 - 00000000 ____D () C:\Program Files\GameforgeLive
2014-09-06 01:10 - 2014-09-06 01:10 - 00001029 _____ () C:\Users\Public\Desktop\Gameforge Live.lnk
2014-09-06 01:10 - 2014-09-06 01:10 - 00000000 ____D () C:\Users\Holger\Downloads\Gameforge Live
2014-09-06 01:10 - 2014-09-06 01:10 - 00000000 ____D () C:\Users\Holger\AppData\Local\Gameforge4d
2014-09-06 01:10 - 2014-09-06 01:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2014-09-06 01:02 - 2014-09-06 01:03 - 20227296 _____ (Gameforge ) C:\Users\Holger\Downloads\NosTale_GameforgeLiveSetup (1).exe
2014-09-06 00:59 - 2014-09-06 01:00 - 20227296 _____ (Gameforge ) C:\Users\Holger\Downloads\NosTale_GameforgeLiveSetup.exe
2014-09-06 00:43 - 2014-09-06 08:34 - 00000364 _____ () C:\Windows\Tasks\APSnotifierPP2.job
2014-09-06 00:42 - 2014-09-06 00:42 - 00631688 _____ (ClickMeIn Limited) C:\Users\Holger\AppData\Local\nsr15C9.tmp
2014-09-05 23:53 - 2014-09-05 23:53 - 00001919 _____ () C:\Users\Public\Desktop\Overwolf.lnk
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\ProgramData\Overwolf
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Program Files\Overwolf
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Program Files\Common Files\Overwolf
2014-09-05 23:52 - 2014-09-06 12:30 - 00000000 ____D () C:\Users\Holger\AppData\Local\Overwolf
2014-09-05 23:52 - 2014-09-05 23:52 - 01248032 _____ (Overwolf) C:\Users\Holger\Downloads\OverwolfInstaller.exe
2014-09-05 23:25 - 2014-09-05 23:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-09-05 23:24 - 2014-09-05 23:50 - 00000000 ____D () C:\Fraps
2014-09-05 23:24 - 2014-09-05 23:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2014-09-05 23:24 - 2014-09-05 23:24 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-09-05 23:23 - 2014-09-05 23:23 - 02326976 _____ (Beepa Pty Ltd) C:\Users\Holger\Desktop\setup.exe
2014-09-05 23:23 - 2014-09-05 23:23 - 00001026 _____ () C:\Users\Holger\Desktop\FLVM Player.lnk
2014-09-05 23:22 - 2014-09-05 23:22 - 00528968 _____ (Eilio.-.Installer · sl) C:\Users\Holger\Downloads\Fraps.exe
2014-09-05 17:59 - 2014-09-05 18:00 - 00000000 ____D () C:\Users\Holger\Downloads\A.Million.Ways.to.Die.in.the.West.2014.BDRip.Line.Dubbed.German.XviD-POE
2014-09-05 17:58 - 2014-09-05 17:59 - 252028961 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part7.rar
2014-09-05 17:56 - 2014-09-05 17:58 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part6.rar
2014-09-05 17:56 - 2014-09-05 17:58 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part5.rar
2014-09-05 17:56 - 2014-09-05 17:58 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part4.rar
2014-09-05 17:54 - 2014-09-05 17:56 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part3.rar
2014-09-05 17:54 - 2014-09-05 17:56 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part2.rar
2014-09-05 17:54 - 2014-09-05 17:56 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part1.rar
2014-09-05 08:42 - 2014-09-05 08:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-09-05 08:42 - 2014-09-05 08:42 - 00000000 ____D () C:\Program Files\LogMeIn Hamachi
2014-08-31 14:06 - 2014-08-31 14:06 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-XVID-DL-504
2014-08-31 14:05 - 2014-08-31 14:06 - 78567538 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part6.rar
2014-08-31 14:05 - 2014-08-31 14:06 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part5.rar
2014-08-31 14:05 - 2014-08-31 14:06 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part4.rar
2014-08-31 14:04 - 2014-08-31 14:05 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part3.rar
2014-08-31 14:04 - 2014-08-31 14:05 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part2.rar
2014-08-31 14:04 - 2014-08-31 14:05 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part1.rar
2014-08-28 18:33 - 2014-08-28 18:33 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part15.rar
2014-08-28 18:33 - 2014-08-28 18:33 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part14.rar
2014-08-28 18:33 - 2014-08-28 18:33 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part13.rar
2014-08-28 18:33 - 2014-08-28 18:33 - 08371674 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part16.rar
2014-08-28 18:32 - 2014-08-28 18:33 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part12.rar
2014-08-28 18:32 - 2014-08-28 18:33 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part11.rar
2014-08-28 18:32 - 2014-08-28 18:32 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part10.rar
2014-08-28 18:31 - 2014-08-28 18:32 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part09.rar
2014-08-28 18:31 - 2014-08-28 18:32 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part08.rar
2014-08-28 18:31 - 2014-08-28 18:32 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part07.rar
2014-08-28 18:30 - 2014-08-28 18:31 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part06.rar
2014-08-28 18:30 - 2014-08-28 18:31 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part05.rar
2014-08-28 18:30 - 2014-08-28 18:31 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part04.rar
2014-08-28 18:29 - 2014-08-28 18:30 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part03.rar
2014-08-28 18:29 - 2014-08-28 18:30 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part02.rar
2014-08-28 18:29 - 2014-08-28 18:30 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part01.rar
2014-08-28 16:37 - 2014-08-28 16:39 - 616998912 _____ () C:\Users\Holger\Downloads\ubcd531.iso
2014-08-28 16:24 - 2014-08-23 03:46 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-28 16:24 - 2014-08-23 02:42 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-27 20:51 - 2014-08-27 20:51 - 00000000 ____D () C:\Users\Holger\Downloads\Bad.Neighbors.2014.German.BDRiP.AC3.XVID-CRG
2014-08-23 14:57 - 2014-08-23 14:58 - 00000000 ____D () C:\Users\Holger\Downloads\Die.Bestimmung.Divergent.2014.German.BDRiP.AC3.XviD-TOD
2014-08-23 14:53 - 2014-08-23 14:57 - 500000000 _____ () C:\Users\Holger\Downloads\17567198qw7.part1.rar
2014-08-23 14:53 - 2014-08-23 14:57 - 480117824 _____ () C:\Users\Holger\Downloads\17567198qw7.part3.rar
2014-08-23 14:53 - 2014-08-23 14:56 - 500000000 _____ () C:\Users\Holger\Downloads\17567198qw7.part2.rar
2014-08-23 11:38 - 2014-08-22 22:06 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-X-DL-502
2014-08-23 11:23 - 2014-08-23 11:23 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-X-DL-503
2014-08-23 07:22 - 2014-08-23 07:22 - 00001095 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-08-22 05:42 - 2014-08-24 13:18 - 00041187 _____ () C:\Users\Holger\Downloads\ESt2013_Timmermann_Rita.elfo
2014-08-21 17:38 - 2014-08-21 17:38 - 00001191 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk
2014-08-21 17:38 - 2014-08-21 17:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular
2014-08-21 17:38 - 2014-08-21 17:38 - 00000000 ____D () C:\Program Files\ElsterFormular
2014-08-21 17:35 - 2014-08-21 17:37 - 77405552 _____ (Landesfinanzdirektion Thüringen) C:\Users\Holger\Downloads\ElsterFormular-15.2.20140326p.exe
2014-08-20 18:18 - 2011-10-20 17:51 - 1064916992 _____ () C:\Users\Holger\Downloads\Winnie.Puuh.2011.BDRip.German.AC3-XviD-Oxy.avi
2014-08-19 17:33 - 2013-10-02 14:40 - 00000863 _____ () C:\Users\Holger\Downloads\Bitte lesen - Please read.txt
2014-08-19 17:33 - 2013-06-15 15:04 - 00000173 _____ () C:\Users\Holger\Downloads\SHARE-ONLINE Premium-Account.url
2014-08-19 17:33 - 2013-06-15 14:32 - 00000113 _____ () C:\Users\Holger\Downloads\UPLOADED Premium-Account.url
2014-08-19 17:25 - 2014-08-19 17:28 - 00000000 ____D () C:\Users\Holger\Downloads\Captain.America.2.The.Return.of.the.First.Avenger.2014.German.BDRiP.AC3.XviD-TOD
2014-08-19 17:23 - 2014-08-19 17:23 - 00000000 ____D () C:\Users\Holger\Downloads\Bundesliga Kicker Sonderheft 14_15
2014-08-19 17:23 - 2014-08-19 17:23 - 00000000 ____D () C:\Users\Holger\Downloads\__MACOSX
2014-08-19 17:14 - 2014-08-19 17:15 - 68955853 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part25.rar
2014-08-19 17:14 - 2014-08-19 17:15 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part24.rar
2014-08-19 17:14 - 2014-08-19 17:15 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part22.rar
2014-08-19 17:14 - 2014-08-19 17:14 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part23.rar
2014-08-19 17:13 - 2014-08-19 17:14 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part21.rar
2014-08-19 17:13 - 2014-08-19 17:14 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part20.rar
2014-08-19 17:13 - 2014-08-19 17:14 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part19.rar
2014-08-19 17:12 - 2014-08-19 17:13 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part18.rar
2014-08-19 17:12 - 2014-08-19 17:13 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part17.rar
2014-08-19 17:12 - 2014-08-19 17:13 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part16.rar
2014-08-19 17:11 - 2014-08-19 17:12 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part15.rar
2014-08-19 17:11 - 2014-08-19 17:12 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part14.rar
2014-08-19 17:11 - 2014-08-19 17:12 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part13.rar
2014-08-19 17:10 - 2014-08-19 17:11 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part12.rar
2014-08-19 17:10 - 2014-08-19 17:11 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part11.rar
2014-08-19 17:10 - 2014-08-19 17:11 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part10.rar
2014-08-19 17:09 - 2014-08-19 17:10 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part09.rar
2014-08-19 17:09 - 2014-08-19 17:10 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part08.rar
2014-08-19 17:09 - 2014-08-19 17:10 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part07.rar
2014-08-19 17:08 - 2014-08-19 17:09 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part06.rar
2014-08-19 17:08 - 2014-08-19 17:09 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part05.rar
2014-08-19 17:08 - 2014-08-19 17:09 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part04.rar
2014-08-19 17:07 - 2014-08-19 17:08 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part03.rar
2014-08-19 17:07 - 2014-08-19 17:08 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part02.rar
2014-08-19 17:07 - 2014-08-19 17:08 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part01.rar
2014-08-16 18:00 - 2014-08-16 18:00 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\MPC
2014-08-16 17:59 - 2014-08-16 17:59 - 00002122 _____ () C:\Users\Public\Desktop\KODAK Create@Home Software (für dm).lnk
2014-08-16 17:59 - 2014-08-16 17:59 - 00000000 ____D () C:\Users\Holger\.kodakch
2014-08-16 17:59 - 2014-08-16 17:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KODAK Create@Home Software (für dm)
2014-08-16 17:58 - 2014-08-18 16:35 - 00000000 ____D () C:\Program Files\KODAK Create@Home Software (für dm)
2014-08-16 17:57 - 2014-08-16 17:57 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Eastman Kodak Company
2014-08-16 17:55 - 2014-08-16 17:56 - 102239928 _____ (Eastman Kodak Company) C:\Users\Holger\Downloads\KodakCreateHome.exe
2014-08-14 18:10 - 2014-04-23 23:16 - 00000119 _____ () C:\Users\Holger\Downloads\Premium @ oboom.com.url
2014-08-14 18:10 - 2014-04-22 04:21 - 00000119 _____ () C:\Users\Holger\Downloads\Premium @ uploaded.net.url
2014-08-14 18:10 - 2014-04-22 04:21 - 00000119 _____ () C:\Users\Holger\Downloads\Premium @ share-online.biz.url
2014-08-14 18:09 - 2014-08-14 18:10 - 00000000 ____D () C:\Users\Holger\Downloads\Coyote.Ugly.2000.Unrated.Extended.Edition.AC3D.BDRip.XviD-HQSD
2014-08-14 17:35 - 2014-08-14 17:35 - 39354003 _____ (Fomanu AG ) C:\Users\Holger\Downloads\designer_20.exe.boc5hvl.partial
2014-08-14 03:05 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-14 03:05 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-14 03:05 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-14 03:05 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-13 18:55 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-13 18:55 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-13 18:55 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-13 18:55 - 2014-07-25 15:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-13 18:55 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-13 18:55 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-13 18:55 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-13 18:55 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-13 18:55 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-13 18:55 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-13 18:55 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-13 18:55 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-13 18:55 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-13 18:55 - 2014-07-25 14:10 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-13 18:55 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-13 18:55 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-13 18:55 - 2014-07-25 13:59 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-13 18:55 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-13 18:55 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-13 18:55 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-13 18:55 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-13 18:55 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-13 18:55 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-13 18:55 - 2014-07-25 13:09 - 00663040 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-13 18:55 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-13 18:55 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-13 18:55 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-13 18:55 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-13 18:55 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-13 18:55 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-13 18:55 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-13 18:55 - 2014-07-14 03:42 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-13 18:55 - 2014-06-16 03:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-13 18:55 - 2014-06-16 03:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-08-13 18:55 - 2014-06-16 03:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-08-13 18:54 - 2014-08-07 03:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-13 18:54 - 2014-08-07 03:39 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-13 18:54 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-08-13 18:54 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-08-13 18:54 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-08-13 18:54 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-08-13 18:54 - 2014-07-09 03:29 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-08-13 18:54 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-08-13 18:54 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-13 18:54 - 2014-06-03 11:30 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-13 18:54 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-13 18:54 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-13 18:54 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-13 18:50 - 2014-08-13 18:52 - 200000000 _____ () C:\Users\Holger\Downloads\KKW1OST.part1.rev
2014-08-13 18:50 - 2014-08-13 18:52 - 200000000 _____ () C:\Users\Holger\Downloads\KKW1OST.part1.rar
2014-08-13 18:50 - 2014-08-13 18:51 - 176763834 _____ () C:\Users\Holger\Downloads\KKW1OST.part2.rar
2014-08-11 05:19 - 2014-08-10 09:04 - 00000000 ____D () C:\Users\Holger\Downloads\Focus Magazin 33-2014 Deutsch
2014-08-11 05:18 - 2014-08-11 05:18 - 16311072 _____ () C:\Users\Holger\Downloads\ydfgb4532bhjkl.rar
2014-08-10 22:16 - 2014-08-10 22:17 - 00000000 ____D () C:\Users\Holger\Downloads\Person.of.Interest.S03E19.Frank.Mercer.und.Betty.Harris.German.Dubbed.DL.iTunesHD.x264-TVS
2014-08-10 22:16 - 2014-08-10 22:16 - 17260579 _____ () C:\Users\Holger\Downloads\tvs-poi-ded-dl-ithd-x264-319.part4.rar
2014-08-10 22:15 - 2014-08-10 22:16 - 105906176 _____ () C:\Users\Holger\Downloads\tvs-poi-ded-dl-ithd-x264-319.part3.rar
2014-08-10 22:15 - 2014-08-10 22:16 - 105906176 _____ () C:\Users\Holger\Downloads\tvs-poi-ded-dl-ithd-x264-319.part2.rar
2014-08-10 22:15 - 2014-08-10 22:16 - 105906176 _____ () C:\Users\Holger\Downloads\tvs-poi-ded-dl-ithd-x264-319.part1.rar
2014-08-10 22:15 - 2014-08-10 22:15 - 00012471 _____ () C:\Users\Holger\Downloads\xix.nfo
2014-08-10 22:15 - 2014-08-10 22:15 - 00006211 _____ () C:\Users\Holger\Downloads\ncode_imageresizer.js
2014-08-09 11:24 - 2014-08-09 11:24 - 00000000 ____D () C:\Users\Holger\Downloads\o594459t05q2e4i
2014-08-09 11:22 - 2014-08-09 11:24 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part09.rar
2014-08-09 11:22 - 2014-08-09 11:24 - 168822268 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part10.rar
2014-08-09 11:20 - 2014-08-09 11:22 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part08.rar
2014-08-09 11:19 - 2014-08-09 11:24 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part07.rar
2014-08-09 11:18 - 2014-08-28 20:05 - 00000000 ____D () C:\Users\Holger\Downloads\HTEC21GA3BRx6
2014-08-09 11:18 - 2014-08-09 11:22 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part06.rar
2014-08-09 11:17 - 2014-08-09 11:20 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part04.rar
2014-08-09 11:17 - 2014-08-09 11:19 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part05.rar
2014-08-09 11:15 - 2014-08-09 11:18 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part02.rar
2014-08-09 11:15 - 2014-08-09 11:17 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part03.rar
2014-08-09 11:15 - 2014-08-09 11:17 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part01.rar
2014-08-09 11:10 - 2014-08-09 11:14 - 550000000 _____ () C:\Users\Holger\Downloads\HTEC21GA3BRx6.part2.rar
2014-08-09 11:10 - 2014-08-09 11:14 - 550000000 _____ () C:\Users\Holger\Downloads\HTEC21GA3BRx6.part1.rar
2014-08-09 11:10 - 2014-08-09 11:13 - 330317416 _____ () C:\Users\Holger\Downloads\HTEC21GA3BRx6.part3.rar
2014-08-09 10:40 - 2014-08-09 09:16 - 19648512 _____ () C:\Users\Holger\Downloads\sample.avi
2014-08-09 10:40 - 2014-08-09 09:13 - 00001472 _____ () C:\Users\Holger\Downloads\nfo.nfo
2014-08-09 10:34 - 2014-08-09 10:35 - 110100480 _____ () C:\Users\Holger\Downloads\PdARTSMDCiW.part02.rar
2014-08-09 10:34 - 2014-08-09 10:35 - 110100480 _____ () C:\Users\Holger\Downloads\PdARTSMDCiW.part01.rar
2014-08-09 01:08 - 2014-08-09 01:08 - 00000000 ____D () C:\Users\Holger\Tracing
2014-08-09 01:07 - 2014-08-09 01:07 - 00001251 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-08-09 01:07 - 2014-08-09 01:07 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2014-08-09 01:07 - 2014-08-09 01:07 - 00000000 ____D () C:\Windows\de
2014-08-09 01:07 - 2013-02-05 22:57 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fssfltr.sys
2014-08-09 01:06 - 2014-08-09 01:06 - 00002432 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2014-08-09 01:06 - 2014-08-09 01:06 - 00001404 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2014-08-09 01:06 - 2014-08-09 01:06 - 00001320 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2014-08-09 01:06 - 2014-08-09 01:06 - 00000000 ____D () C:\Program Files\Microsoft SQL Server Compact Edition
2014-08-09 01:05 - 2014-08-09 01:07 - 00000000 ____D () C:\Program Files\Windows Live
2014-08-09 01:05 - 2014-08-09 01:05 - 00000000 ____D () C:\Windows\PCHEALTH
2014-08-09 01:03 - 2014-08-09 01:03 - 00002145 _____ () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-08-09 01:03 - 2014-08-09 01:03 - 00002082 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-08-09 01:03 - 2014-08-09 01:03 - 00002082 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-08-09 01:03 - 2014-08-09 01:03 - 00000000 ___RD () C:\Users\Holger\SkyDrive
2014-08-09 01:03 - 2014-08-09 01:03 - 00000000 ____D () C:\Program Files\Microsoft SkyDrive
2014-08-09 01:02 - 2014-08-09 01:02 - 00000000 ____D () C:\ProgramData\Microsoft SkyDrive
2014-08-09 01:01 - 2014-08-09 01:09 - 00000000 ____D () C:\Users\Holger\AppData\Local\Windows Live
2014-08-09 01:01 - 2014-08-09 01:01 - 00000000 ____D () C:\Program Files\Common Files\Windows Live
2014-08-09 01:00 - 2014-08-09 01:01 - 142602520 _____ (Microsoft Corporation) C:\Users\Holger\Downloads\wlsetup-all_16.4.3508.0205.exe
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-06 12:35 - 2014-09-06 12:34 - 00019637 _____ () C:\Users\Holger\Downloads\FRST.txt
2014-09-06 12:35 - 2014-09-06 12:34 - 00000000 ____D () C:\FRST
2014-09-06 12:33 - 2014-09-06 12:33 - 01096704 _____ (Farbar) C:\Users\Holger\Downloads\FRST.exe
2014-09-06 12:32 - 2013-08-27 16:00 - 01602452 _____ () C:\Windows\WindowsUpdate.log
2014-09-06 12:30 - 2014-09-05 23:52 - 00000000 ____D () C:\Users\Holger\AppData\Local\Overwolf
2014-09-06 12:29 - 2014-06-15 19:05 - 00000000 ____D () C:\Users\Holger\AppData\Local\LogMeIn Hamachi
2014-09-06 12:29 - 2013-09-08 13:32 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-06 12:28 - 2014-09-06 12:28 - 00142704 _____ () C:\Windows\Minidump\090614-18765-01.dmp
2014-09-06 12:28 - 2013-12-20 14:22 - 00000000 ____D () C:\Users\NeroMediaHomeUser.4
2014-09-06 12:28 - 2013-11-07 21:31 - 00000000 ____D () C:\Windows\Minidump
2014-09-06 12:28 - 2013-09-06 13:34 - 00069120 _____ () C:\Windows\setupact.log
2014-09-06 12:28 - 2013-08-27 16:08 - 00000000 ____D () C:\Users\Holger
2014-09-06 12:28 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-06 12:03 - 2013-08-27 16:57 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-06 11:54 - 2013-09-08 13:33 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-06 11:42 - 2014-09-06 10:24 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-09-06 10:41 - 2009-07-14 06:34 - 00026752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-06 10:41 - 2009-07-14 06:34 - 00026752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-06 10:33 - 2013-10-21 17:16 - 00000000 ____D () C:\AdwCleaner
2014-09-06 10:33 - 2013-09-06 13:34 - 00575022 _____ () C:\Windows\PFRO.log
2014-09-06 10:28 - 2014-09-06 09:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced-System Protector
2014-09-06 10:25 - 2014-09-06 10:25 - 00001064 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-09-06 10:25 - 2014-09-06 10:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-09-06 10:25 - 2014-06-11 19:52 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-09-06 10:11 - 2009-07-14 06:53 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-09-06 10:11 - 2009-07-14 04:04 - 00000505 _____ () C:\Windows\win.ini
2014-09-06 10:06 - 2014-09-06 10:06 - 01370467 _____ () C:\Users\Holger\Downloads\adwcleaner_3.309.exe
2014-09-06 09:54 - 2014-09-06 09:54 - 00142704 _____ () C:\Windows\Minidump\090614-18390-01.dmp
2014-09-06 09:44 - 2014-09-06 09:45 - 00259584 _____ (OldTimer Tools) C:\Users\Holger\Desktop\OTH.scr
2014-09-06 09:44 - 2014-09-06 09:44 - 00259584 _____ (OldTimer Tools) C:\Users\Holger\Downloads\OTH.scr
2014-09-06 09:23 - 2014-09-06 09:23 - 00000000 ____D () C:\Program Files\RCP
2014-09-06 09:18 - 2013-08-29 18:05 - 00000000 ____D () C:\Users\Holger\AppData\Local\JDownloader v2.0
2014-09-06 09:17 - 2013-08-27 16:22 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\vlc
2014-09-06 08:59 - 2014-09-06 08:59 - 00000000 ____D () C:\Users\Holger\Downloads\ec5d398
2014-09-06 08:56 - 2014-09-06 08:56 - 17929263 _____ () C:\Users\Holger\Downloads\ec5d398.rar
2014-09-06 08:34 - 2014-09-06 08:34 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-X-SL-505
2014-09-06 08:34 - 2014-09-06 08:33 - 68953382 _____ () C:\Users\Holger\Downloads\Sons-X-SL-505.part4.rar
2014-09-06 08:34 - 2014-09-06 00:43 - 00000364 _____ () C:\Windows\Tasks\APSnotifierPP2.job
2014-09-06 08:33 - 2014-09-06 08:32 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-X-SL-505.part3.rar
2014-09-06 08:33 - 2014-09-06 08:32 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-X-SL-505.part2.rar
2014-09-06 08:33 - 2014-09-06 08:32 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-X-SL-505.part1.rar
2014-09-06 08:32 - 2014-09-06 08:32 - 00616256 _____ (ClickMeIn Limited) C:\Users\Holger\AppData\Local\nsmC98D.tmp
2014-09-06 01:24 - 2014-09-06 01:24 - 00001892 _____ () C:\Users\Public\Desktop\NosTale.lnk
2014-09-06 01:24 - 2014-09-06 01:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nostale(DE)
2014-09-06 01:18 - 2014-09-06 01:10 - 00000000 ____D () C:\Program Files\GameforgeLive
2014-09-06 01:10 - 2014-09-06 01:10 - 00001029 _____ () C:\Users\Public\Desktop\Gameforge Live.lnk
2014-09-06 01:10 - 2014-09-06 01:10 - 00000000 ____D () C:\Users\Holger\Downloads\Gameforge Live
2014-09-06 01:10 - 2014-09-06 01:10 - 00000000 ____D () C:\Users\Holger\AppData\Local\Gameforge4d
2014-09-06 01:10 - 2014-09-06 01:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2014-09-06 01:03 - 2014-09-06 01:02 - 20227296 _____ (Gameforge ) C:\Users\Holger\Downloads\NosTale_GameforgeLiveSetup (1).exe
2014-09-06 01:00 - 2014-09-06 00:59 - 20227296 _____ (Gameforge ) C:\Users\Holger\Downloads\NosTale_GameforgeLiveSetup.exe
2014-09-06 00:42 - 2014-09-06 00:42 - 00631688 _____ (ClickMeIn Limited) C:\Users\Holger\AppData\Local\nsr15C9.tmp
2014-09-06 00:42 - 2013-10-18 21:54 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\.minecraft
2014-09-05 23:57 - 2013-08-30 14:49 - 00000000 ____D () C:\Users\Holger\AppData\Local\PMB Files
2014-09-05 23:53 - 2014-09-05 23:53 - 00001919 _____ () C:\Users\Public\Desktop\Overwolf.lnk
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\ProgramData\Overwolf
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Program Files\Overwolf
2014-09-05 23:53 - 2014-09-05 23:53 - 00000000 ____D () C:\Program Files\Common Files\Overwolf
2014-09-05 23:52 - 2014-09-05 23:52 - 01248032 _____ (Overwolf) C:\Users\Holger\Downloads\OverwolfInstaller.exe
2014-09-05 23:50 - 2014-09-05 23:24 - 00000000 ____D () C:\Fraps
2014-09-05 23:25 - 2014-09-05 23:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-09-05 23:24 - 2014-09-05 23:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2014-09-05 23:24 - 2014-09-05 23:24 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-09-05 23:23 - 2014-09-05 23:23 - 02326976 _____ (Beepa Pty Ltd) C:\Users\Holger\Desktop\setup.exe
2014-09-05 23:23 - 2014-09-05 23:23 - 00001026 _____ () C:\Users\Holger\Desktop\FLVM Player.lnk
2014-09-05 23:22 - 2014-09-05 23:22 - 00528968 _____ (Eilio.-.Installer · sl) C:\Users\Holger\Downloads\Fraps.exe
2014-09-05 18:00 - 2014-09-05 17:59 - 00000000 ____D () C:\Users\Holger\Downloads\A.Million.Ways.to.Die.in.the.West.2014.BDRip.Line.Dubbed.German.XviD-POE
2014-09-05 17:59 - 2014-09-05 17:58 - 252028961 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part7.rar
2014-09-05 17:58 - 2014-09-05 17:56 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part6.rar
2014-09-05 17:58 - 2014-09-05 17:56 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part5.rar
2014-09-05 17:58 - 2014-09-05 17:56 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part4.rar
2014-09-05 17:56 - 2014-09-05 17:54 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part3.rar
2014-09-05 17:56 - 2014-09-05 17:54 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part2.rar
2014-09-05 17:56 - 2014-09-05 17:54 - 263192576 _____ () C:\Users\Holger\Downloads\913f1c80969e9bc212343ea67c9f8fb8.part1.rar
2014-09-05 08:59 - 2013-09-08 13:34 - 00002121 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-09-05 08:42 - 2014-09-05 08:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-09-05 08:42 - 2014-09-05 08:42 - 00000000 ____D () C:\Program Files\LogMeIn Hamachi
2014-09-05 08:42 - 2014-06-18 19:14 - 00000896 _____ () C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2014-08-31 14:06 - 2014-08-31 14:06 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-XVID-DL-504
2014-08-31 14:06 - 2014-08-31 14:05 - 78567538 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part6.rar
2014-08-31 14:06 - 2014-08-31 14:05 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part5.rar
2014-08-31 14:06 - 2014-08-31 14:05 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part4.rar
2014-08-31 14:05 - 2014-08-31 14:04 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part3.rar
2014-08-31 14:05 - 2014-08-31 14:04 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part2.rar
2014-08-31 14:05 - 2014-08-31 14:04 - 106857600 _____ () C:\Users\Holger\Downloads\Sons-XVID-DL-504.part1.rar
2014-08-29 07:33 - 2009-07-14 06:33 - 00277824 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-28 20:05 - 2014-08-09 11:18 - 00000000 ____D () C:\Users\Holger\Downloads\HTEC21GA3BRx6
2014-08-28 20:04 - 2013-08-27 16:14 - 01619284 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-28 20:02 - 2013-08-30 14:49 - 00000000 ____D () C:\ProgramData\PMB Files
2014-08-28 18:33 - 2014-08-28 18:33 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part15.rar
2014-08-28 18:33 - 2014-08-28 18:33 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part14.rar
2014-08-28 18:33 - 2014-08-28 18:33 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part13.rar
2014-08-28 18:33 - 2014-08-28 18:33 - 08371674 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part16.rar
2014-08-28 18:33 - 2014-08-28 18:32 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part12.rar
2014-08-28 18:33 - 2014-08-28 18:32 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part11.rar
2014-08-28 18:32 - 2014-08-28 18:32 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part10.rar
2014-08-28 18:32 - 2014-08-28 18:31 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part09.rar
2014-08-28 18:32 - 2014-08-28 18:31 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part08.rar
2014-08-28 18:32 - 2014-08-28 18:31 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part07.rar
2014-08-28 18:31 - 2014-08-28 18:30 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part06.rar
2014-08-28 18:31 - 2014-08-28 18:30 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part05.rar
2014-08-28 18:31 - 2014-08-28 18:30 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part04.rar
2014-08-28 18:30 - 2014-08-28 18:29 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part03.rar
2014-08-28 18:30 - 2014-08-28 18:29 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part02.rar
2014-08-28 18:30 - 2014-08-28 18:29 - 104857600 _____ () C:\Users\Holger\Downloads\b57c2ea2d3bae25a49f5c38ad501f065.part01.rar
2014-08-28 16:39 - 2014-08-28 16:37 - 616998912 _____ () C:\Users\Holger\Downloads\ubcd531.iso
2014-08-27 20:51 - 2014-08-27 20:51 - 00000000 ____D () C:\Users\Holger\Downloads\Bad.Neighbors.2014.German.BDRiP.AC3.XVID-CRG
2014-08-24 13:18 - 2014-08-22 05:42 - 00041187 _____ () C:\Users\Holger\Downloads\ESt2013_Timmermann_Rita.elfo
2014-08-23 14:58 - 2014-08-23 14:57 - 00000000 ____D () C:\Users\Holger\Downloads\Die.Bestimmung.Divergent.2014.German.BDRiP.AC3.XviD-TOD
2014-08-23 14:57 - 2014-08-23 14:53 - 500000000 _____ () C:\Users\Holger\Downloads\17567198qw7.part1.rar
2014-08-23 14:57 - 2014-08-23 14:53 - 480117824 _____ () C:\Users\Holger\Downloads\17567198qw7.part3.rar
2014-08-23 14:56 - 2014-08-23 14:53 - 500000000 _____ () C:\Users\Holger\Downloads\17567198qw7.part2.rar
2014-08-23 11:23 - 2014-08-23 11:23 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-X-DL-503
2014-08-23 07:22 - 2014-08-23 07:22 - 00001095 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-08-23 07:22 - 2013-10-04 08:57 - 00000000 ____D () C:\ProgramData\Package Cache
2014-08-23 07:22 - 2013-08-27 17:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-08-23 07:22 - 2013-08-27 17:19 - 00000000 ____D () C:\Program Files\Avira
2014-08-23 03:46 - 2014-08-28 16:24 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 02:42 - 2014-08-28 16:24 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-22 22:06 - 2014-08-23 11:38 - 00000000 ____D () C:\Users\Holger\Downloads\Sons-X-DL-502
2014-08-21 17:39 - 2013-09-03 16:40 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\elsterformular
2014-08-21 17:38 - 2014-08-21 17:38 - 00001191 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk
2014-08-21 17:38 - 2014-08-21 17:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular
2014-08-21 17:38 - 2014-08-21 17:38 - 00000000 ____D () C:\Program Files\ElsterFormular
2014-08-21 17:38 - 2013-09-03 16:40 - 00000000 ____D () C:\ProgramData\elsterformular
2014-08-21 17:37 - 2014-08-21 17:35 - 77405552 _____ (Landesfinanzdirektion Thüringen) C:\Users\Holger\Downloads\ElsterFormular-15.2.20140326p.exe
2014-08-20 18:27 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-08-20 17:46 - 2013-08-27 17:19 - 00000000 ____D () C:\ProgramData\Avira
2014-08-19 17:28 - 2014-08-19 17:25 - 00000000 ____D () C:\Users\Holger\Downloads\Captain.America.2.The.Return.of.the.First.Avenger.2014.German.BDRiP.AC3.XviD-TOD
2014-08-19 17:23 - 2014-08-19 17:23 - 00000000 ____D () C:\Users\Holger\Downloads\Bundesliga Kicker Sonderheft 14_15
2014-08-19 17:23 - 2014-08-19 17:23 - 00000000 ____D () C:\Users\Holger\Downloads\__MACOSX
2014-08-19 17:15 - 2014-08-19 17:14 - 68955853 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part25.rar
2014-08-19 17:15 - 2014-08-19 17:14 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part24.rar
2014-08-19 17:15 - 2014-08-19 17:14 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part22.rar
2014-08-19 17:14 - 2014-08-19 17:14 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part23.rar
2014-08-19 17:14 - 2014-08-19 17:13 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part21.rar
2014-08-19 17:14 - 2014-08-19 17:13 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part20.rar
2014-08-19 17:14 - 2014-08-19 17:13 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part19.rar
2014-08-19 17:13 - 2014-08-19 17:12 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part18.rar
2014-08-19 17:13 - 2014-08-19 17:12 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part17.rar
2014-08-19 17:13 - 2014-08-19 17:12 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part16.rar
2014-08-19 17:12 - 2014-08-19 17:11 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part15.rar
2014-08-19 17:12 - 2014-08-19 17:11 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part14.rar
2014-08-19 17:12 - 2014-08-19 17:11 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part13.rar
2014-08-19 17:11 - 2014-08-19 17:10 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part12.rar
2014-08-19 17:11 - 2014-08-19 17:10 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part11.rar
2014-08-19 17:11 - 2014-08-19 17:10 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part10.rar
2014-08-19 17:10 - 2014-08-19 17:09 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part09.rar
2014-08-19 17:10 - 2014-08-19 17:09 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part08.rar
2014-08-19 17:10 - 2014-08-19 17:09 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part07.rar
2014-08-19 17:09 - 2014-08-19 17:08 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part06.rar
2014-08-19 17:09 - 2014-08-19 17:08 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part05.rar
2014-08-19 17:09 - 2014-08-19 17:08 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part04.rar
2014-08-19 17:08 - 2014-08-19 17:07 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part03.rar
2014-08-19 17:08 - 2014-08-19 17:07 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part02.rar
2014-08-19 17:08 - 2014-08-19 17:07 - 107520000 _____ () C:\Users\Holger\Downloads\RiseBDPOE.part01.rar
2014-08-18 16:35 - 2014-08-16 17:58 - 00000000 ____D () C:\Program Files\KODAK Create@Home Software (für dm)
2014-08-16 19:05 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-08-16 18:00 - 2014-08-16 18:00 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\MPC
2014-08-16 17:59 - 2014-08-16 17:59 - 00002122 _____ () C:\Users\Public\Desktop\KODAK Create@Home Software (für dm).lnk
2014-08-16 17:59 - 2014-08-16 17:59 - 00000000 ____D () C:\Users\Holger\.kodakch
2014-08-16 17:59 - 2014-08-16 17:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KODAK Create@Home Software (für dm)
2014-08-16 17:57 - 2014-08-16 17:57 - 00000000 ____D () C:\Users\Holger\AppData\Roaming\Eastman Kodak Company
2014-08-16 17:56 - 2014-08-16 17:55 - 102239928 _____ (Eastman Kodak Company) C:\Users\Holger\Downloads\KodakCreateHome.exe
2014-08-14 18:10 - 2014-08-14 18:09 - 00000000 ____D () C:\Users\Holger\Downloads\Coyote.Ugly.2000.Unrated.Extended.Edition.AC3D.BDRip.XviD-HQSD
2014-08-14 17:35 - 2014-08-14 17:35 - 39354003 _____ (Fomanu AG ) C:\Users\Holger\Downloads\designer_20.exe.boc5hvl.partial
2014-08-14 03:45 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-08-14 03:29 - 2014-05-07 03:01 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-14 03:29 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-08-14 03:13 - 2014-01-18 10:07 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-14 03:09 - 2014-01-18 10:07 - 96303304 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-13 18:52 - 2014-08-13 18:50 - 200000000 _____ () C:\Users\Holger\Downloads\KKW1OST.part1.rev
2014-08-13 18:52 - 2014-08-13 18:50 - 200000000 _____ () C:\Users\Holger\Downloads\KKW1OST.part1.rar
2014-08-13 18:51 - 2014-08-13 18:50 - 176763834 _____ () C:\Users\Holger\Downloads\KKW1OST.part2.rar
2014-08-11 05:18 - 2014-08-11 05:18 - 16311072 _____ () C:\Users\Holger\Downloads\ydfgb4532bhjkl.rar
2014-08-10 22:17 - 2014-08-10 22:16 - 00000000 ____D () C:\Users\Holger\Downloads\Person.of.Interest.S03E19.Frank.Mercer.und.Betty.Harris.German.Dubbed.DL.iTunesHD.x264-TVS
2014-08-10 22:16 - 2014-08-10 22:16 - 17260579 _____ () C:\Users\Holger\Downloads\tvs-poi-ded-dl-ithd-x264-319.part4.rar
2014-08-10 22:16 - 2014-08-10 22:15 - 105906176 _____ () C:\Users\Holger\Downloads\tvs-poi-ded-dl-ithd-x264-319.part3.rar
2014-08-10 22:16 - 2014-08-10 22:15 - 105906176 _____ () C:\Users\Holger\Downloads\tvs-poi-ded-dl-ithd-x264-319.part2.rar
2014-08-10 22:16 - 2014-08-10 22:15 - 105906176 _____ () C:\Users\Holger\Downloads\tvs-poi-ded-dl-ithd-x264-319.part1.rar
2014-08-10 22:15 - 2014-08-10 22:15 - 00012471 _____ () C:\Users\Holger\Downloads\xix.nfo
2014-08-10 22:15 - 2014-08-10 22:15 - 00006211 _____ () C:\Users\Holger\Downloads\ncode_imageresizer.js
2014-08-10 09:04 - 2014-08-11 05:19 - 00000000 ____D () C:\Users\Holger\Downloads\Focus Magazin 33-2014 Deutsch
2014-08-09 11:24 - 2014-08-09 11:24 - 00000000 ____D () C:\Users\Holger\Downloads\o594459t05q2e4i
2014-08-09 11:24 - 2014-08-09 11:22 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part09.rar
2014-08-09 11:24 - 2014-08-09 11:22 - 168822268 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part10.rar
2014-08-09 11:24 - 2014-08-09 11:19 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part07.rar
2014-08-09 11:22 - 2014-08-09 11:20 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part08.rar
2014-08-09 11:22 - 2014-08-09 11:18 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part06.rar
2014-08-09 11:20 - 2014-08-09 11:17 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part04.rar
2014-08-09 11:19 - 2014-08-09 11:17 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part05.rar
2014-08-09 11:18 - 2014-08-09 11:15 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part02.rar
2014-08-09 11:17 - 2014-08-09 11:15 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part03.rar
2014-08-09 11:17 - 2014-08-09 11:15 - 262144000 _____ () C:\Users\Holger\Downloads\o594459t05q2e4i.part01.rar
2014-08-09 11:14 - 2014-08-09 11:10 - 550000000 _____ () C:\Users\Holger\Downloads\HTEC21GA3BRx6.part2.rar
2014-08-09 11:14 - 2014-08-09 11:10 - 550000000 _____ () C:\Users\Holger\Downloads\HTEC21GA3BRx6.part1.rar
2014-08-09 11:13 - 2014-08-09 11:10 - 330317416 _____ () C:\Users\Holger\Downloads\HTEC21GA3BRx6.part3.rar
2014-08-09 10:35 - 2014-08-09 10:34 - 110100480 _____ () C:\Users\Holger\Downloads\PdARTSMDCiW.part02.rar
2014-08-09 10:35 - 2014-08-09 10:34 - 110100480 _____ () C:\Users\Holger\Downloads\PdARTSMDCiW.part01.rar
2014-08-09 09:16 - 2014-08-09 10:40 - 19648512 _____ () C:\Users\Holger\Downloads\sample.avi
2014-08-09 09:13 - 2014-08-09 10:40 - 00001472 _____ () C:\Users\Holger\Downloads\nfo.nfo
2014-08-09 01:09 - 2014-08-09 01:01 - 00000000 ____D () C:\Users\Holger\AppData\Local\Windows Live
2014-08-09 01:08 - 2014-08-09 01:08 - 00000000 ____D () C:\Users\Holger\Tracing
2014-08-09 01:07 - 2014-08-09 01:07 - 00001251 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-08-09 01:07 - 2014-08-09 01:07 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2014-08-09 01:07 - 2014-08-09 01:07 - 00000000 ____D () C:\Windows\de
2014-08-09 01:07 - 2014-08-09 01:05 - 00000000 ____D () C:\Program Files\Windows Live
2014-08-09 01:06 - 2014-08-09 01:06 - 00002432 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2014-08-09 01:06 - 2014-08-09 01:06 - 00001404 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2014-08-09 01:06 - 2014-08-09 01:06 - 00001320 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2014-08-09 01:06 - 2014-08-09 01:06 - 00000000 ____D () C:\Program Files\Microsoft SQL Server Compact Edition
2014-08-09 01:05 - 2014-08-09 01:05 - 00000000 ____D () C:\Windows\PCHEALTH
2014-08-09 01:05 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-08-09 01:03 - 2014-08-09 01:03 - 00002145 _____ () C:\Users\Holger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-08-09 01:03 - 2014-08-09 01:03 - 00002082 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-08-09 01:03 - 2014-08-09 01:03 - 00002082 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-08-09 01:03 - 2014-08-09 01:03 - 00000000 ___RD () C:\Users\Holger\SkyDrive
2014-08-09 01:03 - 2014-08-09 01:03 - 00000000 ____D () C:\Program Files\Microsoft SkyDrive
2014-08-09 01:02 - 2014-08-09 01:02 - 00000000 ____D () C:\ProgramData\Microsoft SkyDrive
2014-08-09 01:01 - 2014-08-09 01:01 - 00000000 ____D () C:\Program Files\Common Files\Windows Live
2014-08-09 01:01 - 2014-08-09 01:00 - 142602520 _____ (Microsoft Corporation) C:\Users\Holger\Downloads\wlsetup-all_16.4.3508.0205.exe
2014-08-07 03:43 - 2014-08-13 18:54 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-07 03:39 - 2014-08-13 18:54 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.11516.dll
Some content of TEMP:
====================
C:\Users\Holger\AppData\Local\Temp\13-9_mobility_win7_win8_32_dd_ccc_whql.exe
C:\Users\Holger\AppData\Local\Temp\80656-671486-pdf-shrink.exe
C:\Users\Holger\AppData\Local\Temp\AutoRun.exe
C:\Users\Holger\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Holger\AppData\Local\Temp\avgnt.exe
C:\Users\Holger\AppData\Local\Temp\BackupSetup.exe
C:\Users\Holger\AppData\Local\Temp\bstrapInstall.exe
C:\Users\Holger\AppData\Local\Temp\catalyst_mobility_32-bit_util.exe
C:\Users\Holger\AppData\Local\Temp\cgtqp6hz.dll
C:\Users\Holger\AppData\Local\Temp\CloudBackup6826.exe
C:\Users\Holger\AppData\Local\Temp\dlLogic.exe
C:\Users\Holger\AppData\Local\Temp\dltr.exe
C:\Users\Holger\AppData\Local\Temp\GCVerifier.dll
C:\Users\Holger\AppData\Local\Temp\h7rxxkgy.dll
C:\Users\Holger\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Holger\AppData\Local\Temp\post1.exe
C:\Users\Holger\AppData\Local\Temp\post2.dll
C:\Users\Holger\AppData\Local\Temp\post2.exe
C:\Users\Holger\AppData\Local\Temp\proxy_vole1768017490497548973.dll
C:\Users\Holger\AppData\Local\Temp\Quarantine.exe
C:\Users\Holger\AppData\Local\Temp\System.Data.SQLite.dll
C:\Users\Holger\AppData\Local\Temp\System.Data.SQLite22799.dll
C:\Users\Holger\AppData\Local\Temp\System.Data.SQLite63844.dll
C:\Users\Holger\AppData\Local\Temp\System.Data.SQLite67090.dll
C:\Users\Holger\AppData\Local\Temp\System.Data.SQLite70292.dll
C:\Users\Holger\AppData\Local\Temp\System.Data.SQLite80555.dll
C:\Users\Holger\AppData\Local\Temp\System.Data.SQLite82604.dll
C:\Users\Holger\AppData\Local\Temp\System.Data.SQLite85762.dll
C:\Users\Holger\AppData\Local\Temp\vcredist_x86.exe
C:\Users\Holger\AppData\Local\Temp\verifier.exe
C:\Users\Holger\AppData\Local\Temp\vis-de.exe
C:\Users\Holger\AppData\Local\Temp\vlc-2.1.1-win32.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-09-06 11:03
==================== End Of Log ============================
--- --- --- Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 06-09-2014
Ran by Holger at 2014-09-06 12:36:35
Running from C:\Users\Holger\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
7-Zip 9.20 (HKLM\...\7-Zip) (Version: - )
Adobe Acrobat XI Pro (HKLM\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.02 - Adobe Systems)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.8.0.1280 - Adobe Systems Incorporated)
Adobe AIR (Version: 3.8.0.1280 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 14 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.08) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
Advanced-System Protector (HKLM\...\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~4A5BE654_is1) (Version: 2.1.1000.13727 - Systweak Software)
Advertising Center (Version: 0.0.0.2 - Nero AG) Hidden
AMD Accelerated Video Transcoding (Version: 13.15.100.30830 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Control Center (Version: 2013.0830.1944.33589 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (HKLM\...\{103811D6-2580-5DF1-2689-5686C05AC91F}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Media Foundation Decoders (Version: 1.0.80830.1925 - Advanced Micro Devices, Inc.) Hidden
Apple Application Support (HKLM\...\{21ECABC3-40B2-42DF-8E21-ACF3A4D0D95A}) (Version: 3.0.5 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{941B4CE7-3F5D-443E-A8B7-56A420D2EAFD}) (Version: 7.1.2.6 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Application Profiles (HKLM\...\{63059735-CA97-FDFB-0E7A-3B8D81572EFD}) (Version: 2.0.4888.34279 - Advanced Micro Devices, Inc.)
Avira (HKLM\...\{e67154a7-9cc5-4167-b782-f3982bc6c70d}) (Version: 1.1.19.30000 - Avira Operations GmbH & Co. KG)
Avira (Version: 1.1.19.30000 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.6.570 - Avira)
Avira SearchFree Toolbar (HKLM\...\{41564952-412D-5637-00A7-A758B70C1001}) (Version: 12.16.1.1671 - APN, LLC)
Bing Bar (HKLM\...\{3365E735-48A6-4194-9988-CE59AC5AE503}) (Version: 7.3.132.0 - Microsoft Corporation)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
Catalyst Control Center - Branding (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden
ccc-utility (Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden
Craften Terminal 3.4.5 (HKLM\...\{4e7c3936-7c06-4ef0-928b-c5d92f372578}_is1) (Version: 3.4.5 - Craften.de)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Drakensang Online (HKLM\...\Drakensang Online) (Version: - )
ElsterFormular (HKLM\...\ElsterFormular) (Version: 15.2.20140326 - Landesfinanzdirektion Thüringen)
EVEREST Home Edition v2.20 (HKLM\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
FLV Player (remove only) (HKLM\...\FLVM Player) (Version: - )
Fotogalerie (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Fraps (HKLM\...\Fraps) (Version: - )
Gameforge Live 2.0.5 (HKLM\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.5 - Gameforge)
Google Chrome (HKLM\...\Google Chrome) (Version: 37.0.2062.103 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden
HWiNFO32 Version 4.22 (HKLM\...\HWiNFO32_is1) (Version: 4.22 - Martin Malík - REALiX)
iTunes (HKLM\...\{0A37EE62-9A58-420D-90CC-4E52153112EE}) (Version: 11.3.0.54 - Apple Inc.)
Java 7 Update 45 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.450 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Junk Mail filter update (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
KODAK Create@Home Software (für dm) (HKLM\...\{43B8BDF6-13EC-44BE-9EDA-F284C4CA19A6}) (Version: 7.8.1392 - Eastman Kodak Company)
League of Legends (HKLM\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (Version: 3.0.1 - Riot Games ) Hidden
LogMeIn Hamachi (HKLM\...\LogMeIn Hamachi) (Version: 2.2.0.236 - LogMeIn, Inc.)
LogMeIn Hamachi (Version: 2.2.0.236 - LogMeIn, Inc.) Hidden
LOLReplay (HKLM\...\LOLReplay) (Version: 0.8.7.4 - www.leaguereplays.com)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Age of Empires II (HKLM\...\Age of Empires 2.0) (Version: - )
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.60310.0 - Microsoft Corporation)
Microsoft SkyDrive (HKCU\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
MKLOL (HKCU\...\MKLOL) (Version: - )
Movie Maker (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (Version: 16.4.1108.0727 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 12 (HKLM\...\{560FC78C-A4B2-461D-9B47-820C1EEF87B8}) (Version: 12.0.02000 - Nero AG)
Nero Audio Pack 1 (Version: 11.0.11500.110.0 - Nero AG) Hidden
Nero BackItUp (Version: 12.0.2001 - Nero AG) Hidden
Nero BackItUp Help (CHM) (Version: 12.0.3000 - Nero AG) Hidden
Nero Blu-ray Player (Version: 12.0.14300 - Nero AG) Hidden
Nero Blu-ray Player Help (CHM) (Version: 12.0.4000 - Nero AG) Hidden
Nero Burning ROM (Version: 12.0.20000 - Nero AG) Hidden
Nero Burning ROM Help (CHM) (Version: 12.0.3000 - Nero AG) Hidden
Nero ControlCenter (Version: 11.0.15200 - Nero AG) Hidden
Nero ControlCenter Help (CHM) (Version: 12.0.5000 - Nero AG) Hidden
Nero Core Components (Version: 11.0.18100 - Nero AG) Hidden
Nero Disc Menus Basic (Version: 12.0.11500 - Nero AG) Hidden
Nero Effects Basic (Version: 12.0.11500 - Nero AG) Hidden
Nero Express (Version: 12.0.20000 - Nero AG) Hidden
Nero Express Help (CHM) (Version: 12.0.5000 - Nero AG) Hidden
Nero Installer (Version: 4.4.9.0 - Nero AG) Hidden
Nero Kwik Media (Version: 1.18.18200 - Nero AG) Hidden
Nero Kwik Media Help (CHM) (Version: 12.0.4000 - Nero AG) Hidden
Nero Kwik Themes Basic (Version: 12.0.11500 - Nero AG) Hidden
Nero MediaHome 4 (Version: 4.5.9.2 - Nero AG) Hidden
Nero MediaHome 4 Essentials (HKLM\...\{52000877-ae1f-4058-9ed0-0abde5553999}) (Version: - Nero AG)
Nero PiP Effects Basic (Version: 12.0.11500 - Nero AG) Hidden
Nero Recode (Version: 12.0.24000 - Nero AG) Hidden
Nero Recode Help (CHM) (Version: 12.0.4000 - Nero AG) Hidden
Nero RescueAgent (Version: 12.0.9000 - Nero AG) Hidden
Nero RescueAgent Help (CHM) (Version: 12.0.3000 - Nero AG) Hidden
Nero SharedVideoCodecs (Version: 1.0.12100.2.0 - Nero AG) Hidden
Nero Update (Version: 11.0.11800.31.0 - Nero AG) Hidden
Nero Video (Version: 12.0.3000 - Nero AG) Hidden
Nero Video Help (CHM) (Version: 12.0.4000 - Nero AG) Hidden
neroxml (Version: 1.0.0 - Nero AG) Hidden
Nostale(DE) (HKLM\...\NosTale(DE)_is1) (Version: - Gameforge 4D GmbH)
Overwolf (HKLM\...\Overwolf) (Version: 0.79.21.0 - Overwolf Ltd.)
Pando Media Booster (HKLM\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.)
PDF Architect (HKLM\...\{064A929A-4DE8-40CF-A901-BD40C14E4D25}) (Version: 1.1.83.9982 - pdfforge GmbH)
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.1 - pdfforge)
Photo Common (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Photo Gallery (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Prerequisite installer (Version: 12.0.0002 - Nero AG) Hidden
Ravensburger tiptoi (HKLM\...\Ravensburger tiptoi) (Version: - )
RocketTab (HKLM\...\RocketTab) (Version: - RocketTab)
Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.0.13091_9 - Samsung Electronics Co., Ltd.)
Samsung Kies (Version: 2.6.0.13091_9 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.27.0 - SAMSUNG Electronics Co., Ltd.)
SDFormatter (HKLM\...\{179324FF-7B16-4BA8-9836-055CAAEE4F08}) (Version: 4.0.0 - SD Association)
SimCity 4 Deluxe (HKLM\...\{A7A34FC9-DF24-4A36-00AD-D4EFE94CC116}) (Version: - )
Snap.Do (HKLM\...\{A20F162B-9C72-4093-9C15-8BCDF2D90D30}) (Version: 1.98.1.11691 - ReSoft Ltd.) <==== ATTENTION
SpywareBlaster 5.0 (HKLM\...\SpywareBlaster_is1) (Version: 5.0.0 - BrightFort LLC)
TechPowerUp GPU-Z (HKLM\...\TechPowerUp GPU-Z) (Version: - TechPowerUp)
VLC Codec Pack 2.0.5 (HKLM\...\VLC - Codec Pack) (Version: 2.0.5 - VLC Codec Pack)
VLC media player 2.0.8 (HKLM\...\VLC media player) (Version: 2.0.8 - VideoLAN)
Welcome App (Start-up experience) (Version: 12.0.14000 - Nero AG) Hidden
Windows Live Communications Platform (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
Windows Live Essentials (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Mail (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Messenger (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Writer (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Writer Resources (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
WinRAR 4.20 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
WinZip 17.5 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240DC}) (Version: 17.5.10562 - WinZip Computing, S.L. )
World of Tanks (HKLM\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1) (Version: - Wargaming.net)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-1237565898-1862580291-3482752318-1000_Classes\CLSID\{31261F21-2B16-45EE-BEAB-07C4CFA18B65}\InprocServer32 -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CustomCLSID: HKU\S-1-5-21-1237565898-1862580291-3482752318-1000_Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}\localserver32 -> C:\Users\Holger\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1237565898-1862580291-3482752318-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Holger\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1237565898-1862580291-3482752318-1000_Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}\localserver32 -> C:\Users\Holger\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1237565898-1862580291-3482752318-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Holger\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1237565898-1862580291-3482752318-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Holger\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1237565898-1862580291-3482752318-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Holger\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\FileSyncApi.dll (Microsoft Corporation)
==================== Restore Points =========================
06-09-2014 10:07:39 Geplanter Prüfpunkt
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {05F0F530-38C9-4F40-B5EF-03971A66D77E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-09-08] (Google Inc.)
Task: {07D14C9C-2F1D-479D-B481-A560B0ACAAD3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-09-08] (Google Inc.)
Task: {529A5FCA-3AE8-4F4D-B81F-AF14EF56E4FC} - System32\Tasks\RocketTab => C:\Windows\system32\cmd.exe [2010-11-20] (Microsoft Corporation)
Task: {5AA336F3-5A42-4C80-A20E-D61FC077E976} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-13] (Adobe Systems Incorporated)
Task: {89FF56BF-6C46-4D29-8FFB-A5FA86E91A5E} - System32\Tasks\Overwolf Updater Task => C:\Program Files\Overwolf\OverwolfUpdater.exe [2014-08-28] (Overwolf LTD)
Task: {AC0AA77B-8DB3-47E6-9CDC-2B62E6DAF505} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {C7EAC1AA-53DA-4D9F-862D-8AED39D10913} - System32\Tasks\RocketTab Update Task => C:\Program Files\RocketTab\uninstall.exe
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\APSnotifierPP2.job => C:\Program Files\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2014-07-03 13:20 - 2014-07-03 13:20 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2014-07-03 13:19 - 2014-07-03 13:19 - 01044808 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-08-04 14:20 - 2014-08-04 14:20 - 00139056 _____ () C:\Program Files\Avira\My Avira\Avira.OE.NativeCore.dll
2014-08-04 14:20 - 2014-08-04 14:20 - 00067832 _____ () C:\Program Files\Avira\My Avira\Avira.OE.AvConnectorNative.dll
2014-08-20 17:46 - 2014-08-04 14:20 - 00052472 _____ () C:\Users\Holger\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
2012-09-23 21:43 - 2012-09-23 21:43 - 00010240 _____ () C:\Program Files\Adobe\Acrobat 11.0\Acrobat\locale\de_de\acrotray.deu
2014-02-27 17:45 - 2014-02-27 17:45 - 00186368 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Commonc65c5a95#\7b778d24921453a8669f3c3b9cc0b71e\Kies.Common.DeviceServiceLib.Interface.ni.dll
2014-02-27 17:46 - 2014-02-27 17:46 - 14971904 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Theme\1e35c2da60014113523a116c51f0f03a\Kies.Theme.ni.dll
2014-02-27 17:44 - 2014-02-27 17:44 - 01822208 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.UI\98ab01d97977a8631264ad46875bebb3\Kies.UI.ni.dll
2014-02-27 17:44 - 2014-02-27 17:44 - 00081920 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.MVVM\713f8aa449d7a7b75bacbce9b9a8a34e\Kies.MVVM.ni.dll
2014-02-27 17:45 - 2014-02-27 17:45 - 00236032 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_32\ASF_cSharpAPI\cffeb31975c17760187d713cf2d7934d\ASF_cSharpAPI.ni.dll
2014-08-28 13:27 - 2014-08-28 13:27 - 00025600 _____ () C:\Program Files\Overwolf\0.79.21.0\CoreAudioApi.dll
2014-08-28 13:27 - 2014-08-28 13:27 - 38713856 _____ () C:\Program Files\Overwolf\0.79.21.0\libcef.DLL
2014-05-23 12:16 - 2014-05-23 12:16 - 00379904 _____ () C:\Program Files\LOLReplay\LOLUtils.dll
2013-02-24 22:04 - 2013-02-24 22:04 - 00704008 _____ () C:\Windows\System32\C2MP\TrayMenu.exe
2014-08-28 13:31 - 2014-08-28 13:31 - 00070432 _____ () C:\Program Files\Overwolf\0.79.21.0\OverwolfBrowser.exe
2014-08-28 13:27 - 2014-08-28 13:27 - 00514528 _____ () C:\Program Files\Overwolf\0.79.21.0\libglesv2.dll
2014-08-28 13:27 - 2014-08-28 13:27 - 00105952 _____ () C:\Program Files\Overwolf\0.79.21.0\libegl.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\ProgramData\TEMP:5C321E34
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
==================== Faulty Device Manager Devices =============
Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (09/06/2014 00:32:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x494
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3
Error: (09/06/2014 00:05:45 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"1".
Die abhängige Assemblierung "ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (09/06/2014 00:05:29 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"1". Fehler in Manifest- oder Richtliniendatei "SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"2" in Zeile SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: SMC,processorArchitecture="x86",type="win32",version="8.2.0.0".
Definition: SMC,processorArchitecture="x86",type="win32",version="12.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.
Error: (09/06/2014 00:05:19 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (09/06/2014 00:00:46 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Das Stammelement der Manifestdatei muss assembliert sein.
Error: (09/06/2014 11:42:45 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x5bc
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3
Error: (09/06/2014 11:41:52 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x132c
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3
Error: (09/06/2014 11:36:11 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x408
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3
Error: (09/06/2014 11:35:49 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0xbf0
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3
Error: (09/06/2014 11:29:01 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.0.532, Zeitstempel: 0x53518532
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0x40000015
Fehleroffset: 0x0008d6fd
ID des fehlerhaften Prozesses: 0x12b8
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3
System errors:
=============
Error: (09/06/2014 00:28:26 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 6) (User: NT-AUTORITÄT)
Description: Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten.
Error: (09/06/2014 00:28:40 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: 0x000000f4 (0x00000003, 0x86f6f4f8, 0x86f6f664, 0x831fe000)C:\Windows\MEMORY.DMP090614-18765-01
Error: (09/06/2014 00:28:35 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 06.09.2014 um 12:27:39 unerwartet heruntergefahren.
Error: (09/06/2014 10:33:52 AM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 6) (User: NT-AUTORITÄT)
Description: Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten.
Error: (09/06/2014 10:15:26 AM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 6) (User: NT-AUTORITÄT)
Description: Einige Funktionen zur Energieverwaltung im Leistungsstatus wurden im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten.
Error: (09/06/2014 10:13:40 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Gruppenrichtlinienclient" ist vom Dienst "Remoteprozeduraufruf (RPC)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (09/06/2014 10:13:40 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Remoteprozeduraufruf (RPC)" ist vom Dienst "RPC-Endpunktzuordnung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1062
Error: (09/06/2014 10:13:40 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "IP-Hilfsdienst" ist vom Dienst "Remoteprozeduraufruf (RPC)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (09/06/2014 10:13:40 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Remoteprozeduraufruf (RPC)" ist vom Dienst "RPC-Endpunktzuordnung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1062
Error: (09/06/2014 10:13:40 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Multimediaklassenplaner" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Microsoft Office Sessions:
=========================
Error: (09/06/2014 00:32:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd49401cfc9bddb24101fC:\Program Files\Malwarebytes Anti-Malware\mbam.exeC:\Program Files\Malwarebytes Anti-Malware\MSVCR100.dll1d3d18f7-35b1-11e4-91b2-00138ff9b6fa
Error: (09/06/2014 00:05:45 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"c:\program files\Nero\Nero 12\nero recode\NeroBRServer.exe.Manifest
Error: (09/06/2014 00:05:29 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"SMC,processorArchitecture="x86",type="win32",version="12.0.0.0"c:\program files\Nero\Nero 12\nero burning rom\NeroCmd.exe.Manifestc:\program files\Nero\Nero 12\nero burning rom\SMC\SMC.MANIFEST3
Error: (09/06/2014 00:05:19 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\Nero\Nero 12\nero backitup\NBVSSTool_x64.exe
Error: (09/06/2014 00:00:46 PM) (Source: SideBySide) (EventID: 9) (User: )
Description: C:\Program Files\WinZip\adxloader.dll.ManifestC:\Program Files\WinZip\adxloader.dll.Manifest2
Error: (09/06/2014 11:42:45 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd5bc01cfc9b6e5e56f03C:\Program Files\Malwarebytes Anti-Malware\mbam.exeC:\Program Files\Malwarebytes Anti-Malware\MSVCR100.dll273eb0b3-35aa-11e4-b2a3-00138ff9b6fa
Error: (09/06/2014 11:41:52 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd132c01cfc9b6c5d6c4a3C:\Program Files\Malwarebytes Anti-Malware\mbam.exeC:\Program Files\Malwarebytes Anti-Malware\MSVCR100.dll073cb0d2-35aa-11e4-b2a3-00138ff9b6fa
Error: (09/06/2014 11:36:11 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd40801cfc9b5faadfd82C:\Program Files\Malwarebytes Anti-Malware\mbam.exeC:\Program Files\Malwarebytes Anti-Malware\MSVCR100.dll3c6ef57d-35a9-11e4-b2a3-00138ff9b6fa
Error: (09/06/2014 11:35:49 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fdbf001cfc9b5ed20b3b1C:\Program Files\Malwarebytes Anti-Malware\mbam.exeC:\Program Files\Malwarebytes Anti-Malware\MSVCR100.dll2f1b0a42-35a9-11e4-b2a3-00138ff9b6fa
Error: (09/06/2014 11:29:01 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd12b801cfc9b4f9d73669C:\Program Files\Malwarebytes Anti-Malware\mbam.exeC:\Program Files\Malwarebytes Anti-Malware\MSVCR100.dll3c035211-35a8-11e4-b2a3-00138ff9b6fa
CodeIntegrity Errors:
===================================
Date: 2013-12-30 10:49:25.039
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22318_none_59e0fbb029838c63\appid.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-12-30 10:49:24.601
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22318_none_59e0fbb029838c63\appid.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-12-30 10:49:24.211
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22318_none_59e0fbb029838c63\appid.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-12-30 10:49:23.773
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22318_none_59e0fbb029838c63\appid.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-12-30 10:49:22.914
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22318_none_59e0fbb029838c63\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-12-30 10:49:22.507
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22318_none_59e0fbb029838c63\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-12-30 10:49:22.117
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22318_none_59e0fbb029838c63\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-12-30 10:49:21.726
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22318_none_59e0fbb029838c63\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-09-23 15:50:41.997
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22318_none_59e0fbb029838c63\appid.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-09-23 15:50:41.544
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows\winsxs\x86_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22318_none_59e0fbb029838c63\appid.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Processor: Intel(R) Pentium(R) D CPU 2.80GHz
Percentage of memory in use: 44%
Total physical RAM: 3327.3 MB
Available physical RAM: 1831.63 MB
Total Pagefile: 6650.84 MB
Available Pagefile: 4658.09 MB
Total Virtual: 2047.88 MB
Available Virtual: 1888.4 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:292.87 GB) (Free:6.74 GB) NTFS
Drive d: () (Fixed) (Total:638.54 GB) (Free:472.58 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 9E3CAF4E)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=292.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=638.5 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
Malwarebytes Anti-Malware 
AdwCleaner auf deinen Desktop.
SecurityCheck und:
WARNUNG an die MITLESER: 
