Geschafft, hier die Ergebnisse (die .... habe ich eingefügt statt des Namens)
Editor:
FRST Logfile:
FRST Logfile:
FRST Logfile:
FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-09-2014
Ran by I.... (administrator) on I.....-PC on 15-09-2014 13:25:29
Running from C:\Users\I....\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BWYYEZH0
Platform: Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 9
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EBAPI\eEBSvc.exe
(ABBYY) C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc.exe
() C:\Program Files\Digital Trends Club\HI-epanel-Reporting.exe
() C:\Program Files\Digital Trends Club\HI-epanel-Updater.exe
(Nero AG) C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
(Prolific Technology Inc.) C:\Windows\System32\IoctlSvc.exe
() C:\Windows\System32\PSIService.exe
() C:\Program Files\CyberLink\Shared Files\RichVideo.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
(X10) C:\Program Files\Common Files\X10\Common\X10nets.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Corel, Inc.) C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
() C:\Program Files\HI-epanelLSPService\HI-epanel-WatchDog.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Epson Software\Event Manager\EEventManager.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Macrovision Corporation) C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\w32x86\3\E_FATIJBE.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Sun Microsystems, Inc.) C:\Program Files\StarOffice7\program\soffice.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Google Inc.) C:\Program Files\Google\Update\Install\{A201DE93-749B-40FC-B854-87E8377FC18D}\37.0.2062.120_chrome_installer.exe
(Google Inc.) C:\Windows\Temp\CR_59E80.tmp\setup.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\klwtblfs.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil32_15_0_0_152_ActiveX.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\wmi32.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1033512 2008-01-04] (Synaptics, Inc.)
HKLM\...\Run: [UpdatePDRShortCut] => C:\Program Files\HomeCinema\PowerDirector\MUITransfer\MUIStartMenu.exe [222504 2008-01-04] (CyberLink Corp.)
HKLM\...\Run: [LanguageShortcut] => C:\Program Files\HomeCinema\PowerDVD\Language\Language.exe [52256 2007-01-08] ()
HKLM\...\Run: [UpdatePPShortCut] => C:\Program Files\HomeCinema\PowerProducer\MUITransfer\MUIStartMenu.exe [222504 2008-02-21] (CyberLink Corp.)
HKLM\...\Run: [UCam_Menu] => C:\Program Files\HomeCinema\YouCam\MUITransfer\MUIStartMenu.exe [210216 2008-06-13] (CyberLink Corp.)
HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [6294048 2008-09-18] (Realtek Semiconductor)
HKLM\...\Run: [toolbar_eula_launcher] => C:\Program Files\GoogleEULA\EULALauncher.exe [16896 2007-02-09] ( )
HKLM\...\Run: [Corel Photo Downloader] => C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe [112208 2007-02-21] (Corel, Inc.)
HKLM\...\Run: [Skytel] => C:\Windows\Skytel.exe [1833504 2008-09-18] (Realtek Semiconductor Corp.)
HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [NvMediaCenter] => RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [HI-epanel-WatchDog] => C:\Program Files\HI-epanelLSPService\HI-epanel-WatchDog.exe [60544 2014-02-20] ()
HKLM\...\Run: [EEventManager] => C:\Program Files\Epson Software\Event Manager\EEventManager.exe [1058912 2012-04-02] (SEIKO EPSON CORPORATION)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\RunOnce: [ControlLSP] => C:\Program Files\HI-epanelLSPService\ControlLSP.exe [110720 2014-02-20] ()
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-4085659358-3098424900-4204615200-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-4085659358-3098424900-4204615200-1000\...\Run: [ISUSPM] => C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [218032 2006-09-11] (Macrovision Corporation)
HKU\S-1-5-21-4085659358-3098424900-4204615200-1000\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIJBE.EXE [249440 2012-02-29] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-4085659358-3098424900-4204615200-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-4085659358-3098424900-4204615200-1000\...\MountPoints2: {ac7ea7dd-da3e-11dd-9675-806e6f6e6963} - E:\autorun.exe
AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL => C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll [146432 2008-10-26] (Google)
Startup: C:\Users\I...\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\I...\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\StarOffice 7.lnk
ShortcutTarget: StarOffice 7.lnk -> C:\Program Files\StarOffice7\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com/
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {043C5167-00BB-4324-AF7E-62013FAEDACF} URL = hxxp://vshare.toolbarhome.com/search.aspx?q={searchTerms}&srch=dsp
BHO: Winamp Toolbar Loader -> {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} -> C:\Program Files\Winamp Toolbar\winamptb.dll (AOL Inc.)
BHO: Digital Trends Club -> {4BEEA052-726D-4A6E-B65D-A6BD07C263F3} -> C:\Program Files\Digital Trends Club\Gacela2.dll (HI-epanel)
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO: Softonic Helper Object -> {E87806B5-E908-45FD-AF5E-957D83E58E68} -> C:\Program Files\Softonic\Softonic\1.8.21.14\bh\Softonic.dll (Softonic.com)
Toolbar: HKLM - Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL Inc.)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
Toolbar: HKLM - Softonic Toolbar - {5018CFD2-804D-4C99-9F81-25EAEA2769DE} - C:\Program Files\Softonic\Softonic\1.8.21.14\SoftonicTlbr.dll (Softonic.com)
Toolbar: HKCU - &Links - {F2CF5485-4E02-4F68-819C-B92DE9277049} - C:\Windows\system32\ieframe.dll (Microsoft Corporation)
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Toolbar: HKCU - No Name - {043C5167-00BB-4324-AF7E-62013FAEDACF} - No File
Toolbar: HKCU - Winamp Toolbar - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL Inc.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Winsock: Catalog9 01 C:\Windows\system32\HI-epanelLSPService.DLL [316032] (HI-epanel)
Winsock: Catalog9 02 C:\Windows\system32\HI-epanelLSPService.DLL [316032] (HI-epanel)
Winsock: Catalog9 03 C:\Windows\system32\HI-epanelLSPService.DLL [316032] (HI-epanel)
Winsock: Catalog9 04 C:\Windows\system32\HI-epanelLSPService.DLL [316032] (HI-epanel)
Winsock: Catalog9 15 C:\Windows\system32\HI-epanelLSPService.DLL [316032] (HI-epanel)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\I...\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default
FF DefaultSearchEngine: WEB.DE Suche
FF SelectedSearchEngine: WEB.DE Suche
FF Homepage: www.ixquick.de
FF NetworkProxy: "user_pref("extension.gacela.network.proxy.autoconfig_url", "");
FF NetworkProxy: "user_pref("extension.gacela.network.proxy.type", 5);
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.55.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\2.0.31005.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF user.js: detected! => C:\Users\I..\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\user.js
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdnu.dll (AOL LLC)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdnupdater2.dll (AOL LLC)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF SearchPlugin: C:\Users\I...\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\searchplugins\aol-web-search.xml
FF SearchPlugin: C:\Users\I...\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\searchplugins\englische-ergebnisse.xml
FF SearchPlugin: C:\Users\I...\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\searchplugins\gmx-suche.xml
FF SearchPlugin: C:\Users\I...\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\searchplugins\ixquick-https.xml
FF SearchPlugin: C:\Users\I...\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\searchplugins\lastminute.xml
FF SearchPlugin: C:\Users\I...\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\searchplugins\softonic.xml
FF SearchPlugin: C:\Users\I...\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\searchplugins\webde-suche.xml
FF Extension: Winamp Toolbar - C:\Users\I...\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\Extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} [2012-05-16]
FF Extension: WOT - C:\Users\I...\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2012-08-31]
FF Extension: Styles Tuner - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\Extensions\Artem@Demchenkov.Colors.xpi [2011-08-21]
FF Extension: AutoPager - C:\Users\I...\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\Extensions\autopager@mozilla.org.xpi [2011-05-01]
FF Extension: Dictionary (EN/DE) - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\Extensions\dictlookup@arnhold.com.xpi [2012-05-06]
FF Extension: Shorten URL - C:\Users\I...\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\Extensions\ShortenURL@loucypher.xpi [2011-05-11]
FF Extension: WEB.DE MailCheck - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\Extensions\toolbar@web.de.xpi [2012-12-15]
FF Extension: Stylish - C:\Users\I...\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\Extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi [2011-06-23]
FF Extension: ReloadEvery - C:\Users\I...\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\Extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi [2014-04-11]
FF Extension: Pearl Crescent Page Saver Basic - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\Extensions\{c151d79e-e61b-4a90-a887-5a46d38fba99}.xpi [2011-05-21]
FF Extension: Adblock Plus - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\tan7yyu8.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-05-14]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\autopager@mozilla.org [2014-06-11]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\cbsf-config@com.extensions.mattiasschlenker.de [2014-06-11]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\CompactMenuCE@Merci.chao [2014-06-11]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\lazarus@interclue.com [2014-06-11]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\metaswitcher@com.extensions.mattiasschlenker.de [2014-06-11]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\printpdf@pavlov.net [2014-06-11]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3} [2014-06-11]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{0545b830-f0aa-4d7e-8820-50a4629a56fe} [2014-06-11]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30} [2014-06-11]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{20291fcc-1471-46c8-8213-5911f5ce6d67} [2014-06-11]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{29c4afe1-db19-4298-8785-fcc94d1d6c1d} [2014-06-11]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{398e77b8-2304-11dc-8314-0800200c9a66} [2014-06-11]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{CE6E6E3B-84DD-4cac-9F63-8D2AE4F30A4B} [2014-06-11]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3} [2014-06-11]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8} [2014-06-11]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a} [2014-06-11]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{EF522540-89F5-46b9-B6FE-1829E2B572C6} [2014-06-11]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-02-12]
FF HKLM\...\Firefox\Extensions: [gacela2@nurago.com] - C:\Program Files\Digital Trends Club\FirefoxAddon.xpi
FF Extension: No Name - C:\Program Files\Digital Trends Club\FirefoxAddon.xpi [2014-09-02]
FF HKLM\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru
FF HKLM\...\Firefox\Extensions: - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: 卡巴斯基網址顧問 - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2014-01-08]
FF HKLM\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: 虛擬鍵盤 - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-01-08]
FF HKLM\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: 惡意網站攔截器 - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2014-01-08]
FF HKLM\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Chặn quảng cáo - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2014-01-08]
FF HKLM\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2014-01-08]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]
Chrome:
=======
CHR HomePage: Default -> hxxp://search.softonic.com/MOY00621/tb_v1?SearchSource=48&cc=&mi=54504794000000000000002220032110
CHR StartupUrls: Default -> "hxxp://ixquick.de/"
CHR DefaultSearchKeyword: Default -> E278D6FE1C2D80F8800A019E3DAB946B53FD7D3CB8FAE5F9464CD99F74ABE61B
CHR DefaultSearchURL: Default -> CF393058AA8D172D1DA4D6552A6ECAB9FFAAFE906C84BD9687582A52BF0F396F
CHR CustomProfile: C:\Users\I...\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\I...\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-10]
CHR Extension: (Kaspersky Protection) - C:\Users\I...\AppData\Local\Google\Chrome\User Data\Default\Extensions\blbkdnmdcafmfhinpmnlhhddbepgkeaa [2014-09-10]
CHR Extension: (Modul zur Link-Untersuchung) - C:\Users\I....\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2013-01-04]
CHR Extension: (No Name) - C:\Users\I...\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf [2013-10-30]
CHR Extension: (Sicherer Zahlungsverkehr) - C:\Users\I...\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh [2014-01-26]
CHR Extension: (Modul zum Sperren von gefährlichen Webseiten) - C:\Users\I...\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2014-01-26]
CHR Extension: (Digital Trends Club) - C:\Users\I...\AppData\Local\Google\Chrome\User Data\Default\Extensions\igkejcihojcegdmifcnlkhmnelneogef [2014-01-26]
CHR Extension: (Virtual Keyboard) - C:\Users\I...\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2013-01-04]
CHR Extension: (Google Wallet) - C:\Users\I...\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-26]
CHR Extension: (Anti-Banner) - C:\Users\I...\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2013-01-04]
CHR HKLM\...\Chrome\Extension: [blbkdnmdcafmfhinpmnlhhddbepgkeaa] - https://chrome.google.com/webstore/detail/blbkdnmdcafmfhinpmnlhhddbepgkeaa []
CHR HKLM\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\urladvisor.crx [2013-10-17]
CHR HKLM\...\Chrome\Extension: [elchiiiejkobdbblfejjkbphbddgmljf] - C:\Program Files\Softonic\Softonic\1.8.21.14\Softonic.crx [2013-10-17]
CHR HKLM\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\online_banking_chrome.crx [2013-10-17]
CHR HKLM\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\content_blocker_chrome.crx [2013-10-17]
CHR HKLM\...\Chrome\Extension: [igkejcihojcegdmifcnlkhmnelneogef] - C:\Program Files\Digital Trends Club\Chrome Extension\extension.crx [2011-08-17]
CHR HKLM\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\virtkbd.crx [2013-10-17]
CHR HKLM\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\ab.crx [2013-10-17]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R3 avp; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO)
R2 EpsonBidirectionalService; C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe [94208 2006-12-19] (SEIKO EPSON CORPORATION) [File not signed]
R2 EpsonScanSvc; C:\Windows\system32\EscSvc.exe [122000 2011-12-12] (Seiko Epson Corporation)
S3 GoogleDesktopManager; C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe [69120 2008-10-26] (Google) [File not signed]
R2 HI-epanel-Reporting-Service; C:\Program Files\Digital Trends Club\HI-epanel-Reporting.exe [3292288 2014-08-05] ()
R2 HI-epanel-Update-Service; C:\Program Files\Digital Trends Club\HI-epanel-Updater.exe [1357952 2014-08-05] ()
S2 HI-epanelLSPService; C:\Program Files\HI-epanelLSPService\HI-epanelLSPService.exe [3302528 2014-02-20] (HI-epanel)
R2 PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [File not signed]
R2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [177704 2007-06-05] ()
R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [241734 2008-06-28] () [File not signed]
S3 ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [611840 2010-04-27] (Nokia) [File not signed]
S3 TuneUp.Defrag; C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe [435016 2011-11-19] (TuneUp Software)
R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [1044808 2009-12-09] (TuneUp Software)
S3 WLSetupSvc; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [266240 2007-10-25] (Microsoft Corporation) [File not signed]
R2 x10nets; C:\Program Files\Common Files\X10\Common\X10nets.exe [20480 2001-11-12] (X10) [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [135776 2014-01-08] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [576608 2014-03-24] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [25696 2013-10-17] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [25184 2014-02-18] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [25696 2013-10-17] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [14432 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [45024 2013-05-14] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [144992 2014-01-08] (Kaspersky Lab ZAO)
S3 NxpCap; C:\Windows\System32\DRIVERS\NxpCap.sys [1332576 2008-09-25] (NXP Semiconductors Germany GmbH)
S3 PhilCap; C:\Windows\System32\DRIVERS\PhilCap.sys [908896 2007-07-31] (NXP Semiconductors Germany GmbH)
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [10064 2009-10-14] (TuneUp Software)
R3 X10Hid; C:\Windows\System32\Drivers\x10hid.sys [13976 2006-11-17] (X10 Wireless Technology, Inc.)
R3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [27416 2006-11-30] (X10 Wireless Technology, Inc.)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [94304 2014-03-24] (Kaspersky Lab ZAO)
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-15 13:22 - 2014-09-15 13:23 - 00024929 _____ () C:\Users\I...\Downloads\FRST.txt
2014-09-15 13:20 - 2014-09-15 13:25 - 00000000 ____D () C:\FRST
2014-09-15 13:19 - 2014-09-15 13:20 - 01097728 _____ (Farbar) C:\Users\I...\Downloads\FRST.exe
2014-09-14 15:31 - 2014-09-14 15:31 - 00000544 _____ () C:\Windows\PFRO.log
2014-09-14 15:31 - 2014-09-14 15:31 - 00000000 _____ () C:\Windows\setuperr.log
2014-09-14 15:31 - 2014-09-14 15:31 - 00000000 _____ () C:\Windows\setupact.log
2014-09-13 14:14 - 2014-09-13 14:16 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-09-13 13:09 - 2014-06-27 00:17 - 00619664 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-09-13 13:09 - 2014-06-27 00:17 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-09-13 13:09 - 2014-06-27 00:17 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-09-13 13:09 - 2014-06-06 06:28 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-09-13 13:08 - 2014-08-15 16:51 - 12363264 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-09-13 13:08 - 2014-08-15 16:42 - 09739776 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-09-13 13:08 - 2014-08-15 16:42 - 01810432 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-09-13 13:08 - 2014-08-15 16:37 - 01137664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-09-13 13:08 - 2014-08-15 16:37 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-09-13 13:08 - 2014-08-15 16:36 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-09-13 13:08 - 2014-08-15 16:35 - 01802240 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-09-13 13:08 - 2014-08-15 16:35 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-09-13 13:08 - 2014-08-15 16:35 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-09-13 13:08 - 2014-08-15 16:35 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-09-13 13:08 - 2014-08-15 16:35 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-09-13 13:08 - 2014-08-15 16:35 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-09-13 13:08 - 2014-08-15 16:35 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-09-13 13:08 - 2014-08-15 16:35 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-09-13 13:08 - 2014-08-15 16:35 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-09-13 13:08 - 2014-08-15 16:35 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-09-13 13:08 - 2014-08-15 16:34 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-09-13 13:08 - 2014-08-15 16:34 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-09-13 13:08 - 2014-08-15 16:34 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-09-13 13:08 - 2014-08-15 16:34 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-09-13 13:08 - 2014-08-15 16:34 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-09-13 13:01 - 2014-08-23 03:03 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-09-13 13:01 - 2014-08-23 01:26 - 02054656 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-09-13 12:19 - 2014-06-02 12:31 - 02263552 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-09-13 12:19 - 2014-06-02 12:30 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-09-13 12:18 - 2014-07-08 02:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-09-13 12:18 - 2014-06-14 02:44 - 00638400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-09-13 12:18 - 2014-06-14 02:33 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-09-13 12:18 - 2014-06-02 12:31 - 00332800 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-09-13 12:18 - 2014-06-02 12:30 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2014-09-13 12:18 - 2014-06-02 10:56 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-09-10 15:06 - 2014-09-10 15:06 - 00000000 ____D () C:\Users\I....\AppData\Roaming\dll-files.com
2014-09-10 15:06 - 2014-09-10 15:06 - 00000000 ____D () C:\Program Files\Dll-Files.com Fixer
2014-09-10 14:48 - 2014-09-10 14:48 - 00010930 _____ () C:\Users\I....\Downloads\xpcom.zip
2014-09-10 14:32 - 2013-02-28 14:00 - 00001163 ____N () C:\Users\I...\Desktop\readme.txt
2014-09-10 14:30 - 2014-09-10 14:30 - 00009797 _____ () C:\Users\I...\Dents\xpcom.zip
2014-09-10 14:30 - 2014-09-10 14:30 - 00000000 ____D () C:\Users\I...\Documents\xpcom
2014-09-10 14:28 - 2014-09-10 14:28 - 00009797 _____ () C:\Users\I...\Desktop\xpcom.zip
2014-09-10 14:27 - 2014-09-10 14:27 - 00000000 ____D () C:\Program Files\7-Zip
2014-09-08 15:11 - 2014-09-10 16:07 - 00004611 _____ () C:\Windows\system32\jupdate-1.7.0_67-b01.log
2014-09-07 14:30 - 2014-09-07 14:30 - 00000000 ____D () C:\Program Files\Mozilla Firefox(403)
2014-08-24 14:28 - 2014-09-13 12:37 - 00000000 ____D () C:\Users\I...\AppData\Local\Adobe
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-15 13:55 - 2013-01-04 17:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-09-15 13:55 - 2012-01-29 13:41 - 00000000 ____D () C:\Program Files\Digital Trends Club
2014-09-15 13:55 - 2009-01-04 11:22 - 00000000 ____D () C:\Users\I...
2014-09-15 13:55 - 2008-10-26 05:06 - 00000000 ____D () C:\Program Files\Google
2014-09-15 13:55 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\spool
2014-09-15 13:55 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\Msdtc
2014-09-15 13:55 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\registration
2014-09-15 13:55 - 2006-11-02 12:22 - 52428800 _____ () C:\Windows\system32\config\software_previous
2014-09-15 13:55 - 2006-11-02 12:22 - 103022592 _____ () C:\Windows\system32\config\system_previous
2014-09-15 13:43 - 2006-11-02 12:22 - 55312384 _____ () C:\Windows\system32\config\components_previous
2014-09-15 13:43 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\sam_previous
2014-09-15 13:25 - 2014-09-15 13:20 - 00000000 ____D () C:\FRST
2014-09-15 13:25 - 2008-10-25 05:29 - 00000438 ____H () C:\Windows\Tasks\User_Feed_Synchronization-{103B65BD-4798-4CA0-9487-EB211B637804}.job
2014-09-15 13:24 - 2012-08-10 09:54 - 01163259 _____ () C:\Windows\WindowsUpdate.log
2014-09-15 13:23 - 2014-09-15 13:22 - 00024929 _____ () C:\Users\I:::\Downloads\FRST.txt
2014-09-15 13:20 - 2014-09-15 13:19 - 01097728 _____ (Farbar) C:\Users\I....\Downloads\FRST.exe
2014-09-15 13:18 - 2012-07-19 14:06 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-09-15 13:16 - 2008-10-25 05:12 - 00043034 _____ () C:\ProgramData\nvModes.001
2014-09-15 13:07 - 2012-08-16 18:47 - 00000000 ____D () C:\Program Files\HI-epanelLSPService
2014-09-15 13:06 - 2009-01-04 11:22 - 00000000 ____D () C:\Users\I...\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Home Cinema
2014-09-15 12:59 - 2014-06-02 10:31 - 00000374 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-09-15 12:59 - 2008-10-25 05:12 - 00043034 _____ () C:\ProgramData\nvModes.dat
2014-09-15 12:58 - 2006-11-02 15:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-15 12:58 - 2006-11-02 14:47 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-15 12:58 - 2006-11-02 14:47 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-14 17:26 - 2006-11-02 12:22 - 00524288 _____ () C:\Windows\system32\config\default_previous
2014-09-14 17:26 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\security_previous
2014-09-14 15:31 - 2014-09-14 15:31 - 00000544 _____ () C:\Windows\PFRO.log
2014-09-14 15:31 - 2014-09-14 15:31 - 00000000 _____ () C:\Windows\setuperr.log
2014-09-14 15:31 - 2014-09-14 15:31 - 00000000 _____ () C:\Windows\setupact.log
2014-09-13 15:09 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-09-13 14:29 - 2008-10-22 05:40 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-09-13 14:16 - 2014-09-13 14:14 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-09-13 13:52 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\rescache
2014-09-13 13:40 - 2012-05-27 12:14 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-13 13:39 - 2006-11-02 12:33 - 01656994 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-13 13:33 - 2012-08-16 18:47 - 00003168 _____ () C:\Windows\system32\HI-epanelLSPService.ini
2014-09-13 13:33 - 2012-08-16 18:47 - 00001864 _____ () C:\Windows\system32\GacelaLSPServiceOff.ini
2014-09-13 13:31 - 2006-11-02 14:47 - 00366368 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-09-13 13:27 - 2006-11-02 15:01 - 00032534 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-09-13 13:26 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\de-DE
2014-09-13 13:00 - 2013-08-04 14:34 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-13 12:40 - 2014-05-14 09:40 - 17903792 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerInstaller.exe
2014-09-13 12:40 - 2012-05-27 12:14 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-09-13 12:40 - 2011-06-08 14:20 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-09-13 12:37 - 2014-08-24 14:28 - 00000000 ____D () C:\Users\I...\AppData\Local\Adobe
2014-09-13 11:53 - 2011-12-21 15:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5200 series
2014-09-13 11:19 - 2006-11-02 14:37 - 00000000 ____D () C:\Windows\twain_32
2014-09-13 11:19 - 2006-11-02 13:18 - 00000000 __RSD () C:\Windows\Media
2014-09-13 11:18 - 2014-06-11 10:55 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-09-13 11:18 - 2014-03-21 09:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-09-13 11:18 - 2013-10-30 10:52 - 00000000 ____D () C:\Program Files\Softonic
2014-09-13 11:18 - 2013-10-30 10:51 - 00000000 ____D () C:\Users\I...\AppData\Roaming\Softonic
2014-09-13 11:18 - 2013-08-04 13:28 - 00000000 ____D () C:\Program Files\Opera
2014-09-13 11:18 - 2013-01-04 17:31 - 00000000 ____D () C:\Users\I...\AppData\Roaming\PhotoScape
2014-09-13 11:18 - 2012-05-06 19:25 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-09-13 11:18 - 2011-06-23 12:30 - 00000000 ____D () C:\Users\I...\AppData\Roaming\Winamp
2014-09-13 11:18 - 2011-04-26 11:27 - 00000000 ___HD () C:\ProgramData\CanonIJScan
2014-09-13 11:18 - 2011-04-22 14:51 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information
2014-09-13 11:18 - 2011-04-22 14:51 - 00000000 ___HD () C:\ProgramData\CanonBJ
2014-09-13 11:18 - 2011-04-22 14:49 - 00000000 ___HD () C:\Program Files\CanonBJ
2014-09-13 11:18 - 2008-10-20 07:08 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-09-10 16:08 - 2014-03-21 09:43 - 00000000 ____D () C:\ProgramData\Oracle
2014-09-10 16:07 - 2014-09-08 15:11 - 00004611 _____ () C:\Windows\system32\jupdate-1.7.0_67-b01.log
2014-09-10 16:07 - 2008-10-20 07:08 - 00000000 ____D () C:\Program Files\Java
2014-09-10 15:06 - 2014-09-10 15:06 - 00000000 ____D () C:\Users\I...\AppData\Roaming\dll-files.com
2014-09-10 15:06 - 2014-09-10 15:06 - 00000000 ____D () C:\Program Files\Dll-Files.com Fixer
2014-09-10 15:06 - 2008-10-22 07:18 - 00000000 ____D () C:\ProgramData\Temp
2014-09-10 14:48 - 2014-09-10 14:48 - 00010930 _____ () C:\Users\I...\Downloads\xpcom.zip
2014-09-10 14:30 - 2014-09-10 14:30 - 00009797 _____ () C:\Users\I...\Documents\xpcom.zip
2014-09-10 14:30 - 2014-09-10 14:30 - 00000000 ____D () C:\Users\I....\Documents\xpcom
2014-09-10 14:28 - 2014-09-10 14:28 - 00009797 _____ () C:\Users\I....\Desktop\xpcom.zip
2014-09-10 14:27 - 2014-09-10 14:27 - 00000000 ____D () C:\Program Files\7-Zip
2014-09-09 15:45 - 2014-01-26 13:34 - 00000000 ____D () C:\Users\I...\Documents\2014
2014-09-09 15:00 - 2011-04-22 14:51 - 00000000 ____D () C:\ProgramData\CanonBJ(444)
2014-09-08 18:28 - 2006-11-02 14:37 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-09-08 15:18 - 2011-04-26 11:25 - 00000000 ____D () C:\Users\I...\AppData\Roaming\Canon
2014-09-07 14:30 - 2014-09-07 14:30 - 00000000 ____D () C:\Program Files\Mozilla Firefox(403)
2014-08-29 13:01 - 2006-11-02 12:24 - 98758480 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-08-27 14:33 - 2009-02-14 18:21 - 00001356 _____ () C:\Users\I...\AppData\Local\d3d9caps.dat
2014-08-25 06:53 - 2009-10-03 12:04 - 00231584 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-08-23 03:03 - 2014-09-13 13:01 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 01:26 - 2014-09-13 13:01 - 02054656 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-19 19:40 - 2009-08-01 13:12 - 00000000 ____D () C:\Users\I...\Documents\My PSP Files
Files to move or delete:
====================
C:\Users\I.....\CDBIDXL.DAT
C:\Users\I....\NECDB.DAT
C:\Users\I....\NETRKDB.DAT
C:\Users\I....\Schlecker_Fotoservice.exe
C:\Users\I....\TDBIDXL.DAT
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-09-15 13:04
==================== End Of Log ============================
--- --- ---
--- --- ---
--- --- ---
--- --- ---
und Addition Editor:
[CODE]Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Kaspersky Internet Security (Disabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}
AS: Kaspersky Internet Security (Disabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Disabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
2007 Microsoft Office Suite Service Pack 1 (SP1) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{BEE75E01-DD3F-4D5F-B96C-609E6538D419}) (Version: - Microsoft)
2007 Microsoft Office Suite Service Pack 1 (SP1) (Version: - Microsoft) Hidden
7-PDF Maker Version 1.4.1 (Build 128) (HKLM\...\7-PDF Maker_is1) (Version: 7-PDF Maker - Version 1.4.1 (Build 128) - 7-PDF, Germany - Thorsten Hodes)
ABBYY FineReader 9.0 Sprint (HKLM\...\ABBYY FineReader 9.0 Sprint) (Version: 9.00.631.5823 - ABBYY)
ABBYY FineReader 9.0 Sprint (Version: 9.00.631.5823 - ABBYY) Hidden
Activation Assistant for the 2007 Microsoft Office suites (HKLM\...\Activation Assistant for the 2007 Microsoft Office suites) (Version: - Microsoft Corporation)
Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0 - Microsoft Corporation) Hidden
Adobe Flash Player 15 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.08) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM\...\Adobe Shockwave Player) (Version: 12.0.4.144 - Adobe Systems, Inc.)
Anleitung für Epson Connect (HKLM\...\Epson Connect Guide) (Version: - )
Canon MG5200 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5200_series) (Version: - )
CCleaner (HKLM\...\CCleaner) (Version: 2.28 - Piriform)
CD-LabelPrint (HKLM\...\MediaNavigation.CDLabelPrint) (Version: - )
Compatibility Pack für 2007 Office System (HKLM\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6215.1000 - Microsoft Corporation)
Corel MediaOne (HKLM\...\{A062A15F-9CAC-4B88-98DF-87628A0BD721}) (Version: 2.00.0000 - Corel Corporation)
Corel Paint Shop Pro X (HKLM\...\{1A15507A-8551-4626-915D-3D5FA095CC1B}) (Version: 10.10 - Corel Inc)
Corel Photo Album 6 (HKLM\...\{8A9B8148-DDD7-448F-BD6C-358386D32354}) (Version: 6.40 - Corel, Inc.)
CorelDRAW Essential Edition 3 (HKLM\...\_{ADDBE07D-95B8-4789-9C76-187FFF9624B4}) (Version: - Corel Corporation)
CorelDRAW Essential Edition 3 (Version: 3.0 - Corel Corporation) Hidden
CyberLink MediaShow (HKLM\...\InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}) (Version: 4.1.2019 - CyberLink Corp.)
CyberLink MediaShow (Version: 4.1.2019 - CyberLink Corp.) Hidden
CyberLink PhotoNow (HKLM\...\InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: 1.1.5203 - CyberLink Corp.)
CyberLink PhotoNow (Version: 1.1.5203 - CyberLink Corp.) Hidden
CyberLink PowerDirector (HKLM\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 7.0.2209a - CyberLink Corp.)
CyberLink PowerDirector (Version: 7.0.2209a - CyberLink Corp.) Hidden
CyberLink PowerDVD (HKLM\...\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}) (Version: 7.0.3118.0 - PowerDVDCorp.)
CyberLink PowerProducer (HKLM\...\InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: 5.0815 - CyberLink Corp.)
CyberLink PowerProducer (Version: 5.0815 - CyberLink Corp.) Hidden
CyberLink YouCam (HKLM\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 2.0.2109 - CyberLink Corp.)
CyberLink YouCam (Version: 2.0.2109 - CyberLink Corp.) Hidden
DE (Version: 3.0 - Corel Corporation) Hidden
Digital Trends Club (HKLM\...\{5F0545E7-3F0F-4730-AF70-26E61DBDF263}) (Version: 11.1.3067 - HI-epanel)
Dolby Control Center (HKLM\...\{70E8EBD5-78C9-4258-B20A-5098CCA000F0}) (Version: 1.1.0601 - Dolby)
Download Updater (AOL LLC) (HKLM\...\SoftwareUpdUtility) (Version: - ) <==== ATTENTION
Druckerdeinstallation für EPSON XP-700 Series (HKLM\...\EPSON XP-700 Series) (Version: - SEIKO EPSON Corporation)
DVD Shrink 3.2 deutsch (DeCSS-frei) (HKLM\...\DVD Shrink DE_is1) (Version: - DVD Shrink)
Epson Benutzerhandbuch XP-700 Series (HKLM\...\XP-700 Series Useg) (Version: - )
Epson Easy Photo Print 2 (HKLM\...\{02A312B5-1542-47B6-BFE9-F51358C39E86}) (Version: 2.4.0.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION2)
Epson Event Manager (HKLM\...\{8F01524C-0676-4CC1-B4AE-64753C723391}) (Version: 3.01.0005 - Seiko Epson Corporation)
Epson Netzwerkhandbuch XP-700 Series (HKLM\...\XP-700 Series Netg) (Version: - )
Epson Print CD (HKLM\...\{D16A31F9-276D-4968-A753-FFEAC56995D0}) (Version: 2.20.00 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
EpsonNet Print (HKLM\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
FormatFactory 2.20 (HKLM\...\FormatFactory) (Version: 2.20 - Free Time)
Free Audio CD to MP3 Converter version 1.3.12.908 (HKLM\...\Free Audio CD to MP3 Converter_is1) (Version: - DVDVideoSoft Ltd.)
Free DVD Video Burner version 3.1.3.1228 (HKLM\...\Free DVD Video Burner_is1) (Version: - DVDVideoSoft Ltd.)
Free Video Converter V 2.5 (HKLM\...\Free Video Converter_is1) (Version: 2.5.0.0 - Koyote Soft)
Google Chrome (HKLM\...\Google Chrome) (Version: 36.0.1985.125 - Google Inc.)
Google Desktop (HKLM\...\Google Desktop) (Version: - - Google)
Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden
Hardcopy (C:\Program Files\Hardcopy) (HKLM\...\Hardcopy(C__Program Files_Hardcopy)) (Version: 2011.02.12 - www.hardcopy.de)
Java 7 Update 55 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217021FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 26 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216022FF}) (Version: 6.0.260 - Oracle)
Java(TM) 6 Update 7 (HKLM\...\{3248F0A8-6813-11D6-A77B-00B0D0160070}) (Version: 1.6.0.70 - Sun Microsystems, Inc.)
JavaFX 2.1.1 (HKLM\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
Kaspersky Internet Security (HKLM\...\InstallWIX_{6F6873E3-5C92-4049-B511-231A138DD090}) (Version: 14.0.0.4651 - Kaspersky Lab)
Kaspersky Internet Security (Version: 14.0.0.4651 - Kaspersky Lab) Hidden
MakeDisc (HKLM\...\{B145EC69-66F5-11D8-9D75-000129760D75}) (Version: 3.0.2601 - CyberLink Corp.)
Mein CEWE FOTOBUCH (HKLM\...\Mein CEWE FOTOBUCH) (Version: - )
Microsoft .NET Framework 1.1 (HKLM\...\Microsoft .NET Framework 1.1 (1033)) (Version: - )
Microsoft .NET Framework 1.1 (Version: 1.1.4322 - Microsoft) Hidden
Microsoft .NET Framework 1.1 German Language Pack (HKLM\...\{E78BFA60-5393-4C38-82AB-E8019E464EB4}) (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 1.1 Security Update (KB2698023) (HKLM\...\M2698023) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB2833941) (HKLM\...\M2833941) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB979906) (HKLM\...\M979906) (Version: - )
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version: - Microsoft Corporation)
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2007 (HKLM\...\HOMESTUDENTR) (Version: 12.0.6215.1000 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint Viewer 2007 (German) (HKLM\...\{95120000-00AF-0407-0000-0000000FF1CE}) (Version: 12.0.6215.1000 - Microsoft Corporation)
Microsoft Office Proof (English) 2007 (Version: 12.0.6213.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (Version: 12.0.6213.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (Version: 12.0.6213.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6213.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6215.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 2.0.31005.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [DEU] (HKLM\...\{BAC80EF3-E106-4AEA-8C57-F217F9BC7358}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{09298F26-A95C-31E2-9D95-2C60F586F075}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Works (HKLM\...\{39D0E034-1042-4905-BECB-5502909FCB7C}) (Version: 9.7.0621 - Microsoft Corporation)
Mozilla Firefox 30.0 (x86 de) (HKLM\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Mozilla Thunderbird 24.6.0 (x86 de) (HKLM\...\Mozilla Thunderbird 24.6.0 (x86 de)) (Version: 24.6.0 - Mozilla)
MSXML 4.0 SP2 (KB936181) (HKLM\...\{C04E32E0-0416-434D-AFB9-6969D703A9EF}) (Version: 4.20.9848.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB941833) (HKLM\...\{C523D256-313D-4866-B36A-F3DE528246EF}) (Version: 4.20.9849.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 8 Essentials (HKLM\...\{47948554-90C6-4AAC-8CFA-D23CE11C1031}) (Version: 8.3.124 - Nero AG)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: - )
OpenOffice 4.0.1 (HKLM\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Opera Stable 15.0.1147.153 (HKLM\...\Opera 15.0.1147.153) (Version: 15.0.1147.153 - Opera Software ASA)
PC Connectivity Solution (HKLM\...\{DCD22647-6D31-479D-8F97-16D0AA934D9E}) (Version: 10.18.0.0 - Nokia)
PhotoScape (HKLM\...\PhotoScape) (Version: - )
Pixum EasyBook (HKLM\...\Pixum EasyBook) (Version: - )
Pixum Fotobuch (HKLM\...\Pixum Fotobuch) (Version: - )
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5704 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM\...\{DC24971E-1946-445D-8A82-CE685433FA7D}) (Version: 3.0.1.3 - Realtek Semiconductor Corp.)
Softonic toolbar on IE and Chrome (HKLM\...\Softonic) (Version: 1.8.21.14 - Softonic) <==== ATTENTION
StarOffice 7 (HKCU\...\StarOffice 7) (Version: 7 - Sun Microsystems, Inc.)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 10.2.2.0 - Synaptics)
T-Online WLAN-Access Finder (HKLM\...\{295C31E5-3F91-498E-9623-DA24D2FA2B6A}) (Version: - )
TuneUp Utilities (HKLM\...\TuneUp Utilities) (Version: 9.0.3000.52 - TuneUp Software)
TuneUp Utilities (Version: 9.0.3000.52 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (Version: 9.0.3000.52 - TuneUp Software) Hidden
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation)
Update for Office 2007 (KB946691) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{A420F522-7395-4872-9882-C591B4B92278}) (Version: - Microsoft)
Update Manager (Version: 4.60 - Corel Corporation) Hidden
VCRedistSetup (Version: 1.0.0 - Nero AG) Hidden
Winamp (HKLM\...\Winamp) (Version: 5.61 - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Winamp Toolbar (HKCU\...\Winamp Toolbar) (Version: - ) <==== ATTENTION
Winamp Toolbar (HKLM\...\Winamp Toolbar) (Version: - ) <==== ATTENTION
Windows Live Fotogalerie (HKLM\...\{A1D08B90-AE1A-4885-AC29-731496FD397E}) (Version: 12.0.1347.0718 - Microsoft Corporation)
Windows Live installer (HKLM\...\{7A7B0BF3-2F00-4F03-8A9B-6ABCC07B90C6}) (Version: 12.0.1471.1025 - Microsoft Corporation)
Windows Live Mail (HKLM\...\{82F2B38B-1426-443D-874C-AC25675E7BEB}) (Version: 12.0.1606.1023 - Microsoft Corporation)
Windows Live Sign-in Assistant (HKLM\...\{0ED47137-C071-46CC-A243-E5E33271E10E}) (Version: 5.000.742.2 - Microsoft Corporation)
Windows Live Writer (HKLM\...\{B8D42C3A-3CFF-4A8A-A7DA-4F44474D12C5}) (Version: 12.0.1370.0325 - Microsoft Corporation)
Windows-Treiberpaket - Nokia pccsmcfd (08/22/2008 7.0.0.0) (HKLM\...\504244733D18C8F63FF584AEB290E3904E791693) (Version: 08/22/2008 7.0.0.0 - Nokia)
X10 Hardware(TM) (HKLM\...\X10Hardware) (Version: - )
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-4085659358-3098424900-4204615200-1000_Classes\CLSID\{30A2652A-DDF7-45e7-ACA6-3EAB26FC8A4E}\localserver32 -> C:\Program Files\StarOffice7\program\soffice.exe (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-4085659358-3098424900-4204615200-1000_Classes\CLSID\{41662FC2-0D57-4aff-AB27-AD2E12E7C273}\localserver32 -> C:\Program Files\StarOffice7\program\soffice.exe (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-4085659358-3098424900-4204615200-1000_Classes\CLSID\{67F2A879-82D5-4A6D-8CC5-FFB3C114B69D}\InprocServer32 -> C:\Program Files\StarOffice7\program\so_activex.dll ()
CustomCLSID: HKU\S-1-5-21-4085659358-3098424900-4204615200-1000_Classes\CLSID\{7B342DC4-139A-4a46-8A93-DB0827CCEE9C}\localserver32 -> C:\Program Files\StarOffice7\program\soffice.exe (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-4085659358-3098424900-4204615200-1000_Classes\CLSID\{82154420-0FBF-11d4-8313-005004526AB4}\localserver32 -> C:\Program Files\StarOffice7\program\soffice.exe (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-4085659358-3098424900-4204615200-1000_Classes\CLSID\{D0484DE6-AAEE-468a-991F-8D4B0737B57A}\localserver32 -> C:\Program Files\StarOffice7\program\soffice.exe (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-4085659358-3098424900-4204615200-1000_Classes\CLSID\{E5A0B632-DFBA-4549-9346-E414DA06E6F8}\localserver32 -> C:\Program Files\StarOffice7\program\soffice.exe (Sun Microsystems, Inc.)
==================== Restore Points =========================
14-08-2014 13:55:34 Windows Update
19-08-2014 12:14:59 Windows Update
26-08-2014 12:34:20 Windows Update
28-08-2014 12:26:36 Windows Update
29-08-2014 13:17:13 Windows Update
30-08-2014 11:04:32 Windows Update
31-08-2014 11:10:43 Windows Update
08-09-2014 13:10:34 Installed Java 7 Update 67
08-09-2014 13:14:24 Removed Java(TM) 6 Update 7
09-09-2014 12:51:49 Wiederherstellungsvorgang
09-09-2014 13:33:28 Removed Digital Trends Club
09-09-2014 13:49:50 Wiederherstellungsvorgang
09-09-2014 14:13:50 Windows Update
10-09-2014 14:05:45 Installed Java 7 Update 67
10-09-2014 17:13:38 Windows Update
10-09-2014 17:19:33 Wiederherstellungsvorgang
10-09-2014 18:07:11 Windows Update
10-09-2014 18:12:08 Windows Update
13-09-2014 09:00:22 Wiederherstellungsvorgang
13-09-2014 09:33:46 Windows Update
13-09-2014 09:46:45 Wiederherstellungsvorgang
13-09-2014 10:22:48 Windows Update
13-09-2014 10:47:14 Windows Update
13-09-2014 12:12:59 Windows Update
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2006-11-02 12:23 - 2006-09-18 23:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
::1 localhost
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {19B73077-717C-49C8-A623-7AEA5307FD09} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Signature Update => c:\program files\windows defender\MpCmdRun.exe [2008-01-21] (Microsoft Corporation)
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {51992868-60B9-4A4B-935C-AD0EEE80F4FE} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-13] (Adobe Systems Incorporated)
Task: {69A242D7-6D28-43D8-9DAA-AD9C1082BC89} - System32\Tasks\Adobe Reader and Acrobat Manager => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {72CC2AA4-D765-472F-8771-19AAEFF872BD} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance => C:\Program Files\TuneUp Utilities 2010\OneClick.exe [2009-12-09] (TuneUp Software)
Task: {7960B3A1-4BE1-46E9-A85D-EE3F7CDE06BA} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\netsh.exe [2006-11-02] (Microsoft Corporation)
Task: {BD307122-E5C7-4C13-BBD5-84C503C3F42E} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {BD64811B-9AD1-4CE9-BB2C-0A957DFBA0EB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-01-08] (Google Inc.)
Task: {C971F5E3-4379-4BC3-9789-51B4FA864D68} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-01-08] (Google Inc.)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: {EB12F98E-1545-4237-88CE-43E80776FA6B} - System32\Tasks\Automatische Problemsuche => C:\Program Files\TuneUp Utilities 2010\TuneUpSystemStatusCheck.exe [2009-12-09] (TuneUp Software)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\User_Feed_Synchronization-{103B65BD-4798-4CA0-9487-EB211B637804}.job => C:\Windows\system32\msfeedssync.exe
==================== Loaded Modules (whitelisted) =============
2013-06-17 13:35 - 2013-06-17 13:35 - 00478400 _____ () C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\dblite.dll
2013-05-08 15:52 - 2013-05-08 15:52 - 01270464 _____ () C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\kpcengine.2.3.dll
2011-08-17 19:29 - 2014-08-05 10:51 - 03292288 _____ () C:\Program Files\Digital Trends Club\HI-epanel-Reporting.exe
2011-08-17 19:28 - 2014-08-05 10:51 - 01357952 _____ () C:\Program Files\Digital Trends Club\HI-epanel-Updater.exe
2012-08-16 18:46 - 2012-08-16 17:42 - 00477312 _____ () C:\Program Files\Digital Trends Club\UpdateHelper.dll
2007-06-05 13:20 - 2007-06-05 13:20 - 00177704 _____ () C:\Windows\system32\PSIService.exe
2008-10-22 07:21 - 2008-06-28 02:00 - 00241734 _____ () C:\Program Files\CyberLink\Shared Files\RichVideo.exe
2012-08-16 17:20 - 2014-02-20 13:49 - 00060544 _____ () C:\Program Files\HI-epanelLSPService\HI-epanel-WatchDog.exe
2003-06-01 08:00 - 2003-06-01 08:00 - 08470528 _____ () C:\Program Files\StarOffice7\program\icudt22l.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (09/15/2014 01:10:53 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlerhafte Anwendung chrome.exe, Version 36.0.1985.125, Zeitstempel 0x53c4dbee, fehlerhaftes Modul chrome.dll, Version 36.0.1985.125, Zeitstempel 0x53c4d8ad, Ausnahmecode 0x80000003, Fehleroffset 0x004aa883,
Prozess-ID 0x13c8, Anwendungsstartzeit chrome.exe0.
Error: (09/15/2014 01:08:44 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlerhafte Anwendung chrome.exe, Version 36.0.1985.125, Zeitstempel 0x53c4dbee, fehlerhaftes Modul chrome.dll, Version 36.0.1985.125, Zeitstempel 0x53c4d8ad, Ausnahmecode 0x80000003, Fehleroffset 0x004aa883,
Prozess-ID 0x1658, Anwendungsstartzeit chrome.exe0.
Error: (09/15/2014 01:08:13 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlerhafte Anwendung chrome.exe, Version 36.0.1985.125, Zeitstempel 0x53c4dbee, fehlerhaftes Modul chrome.dll, Version 36.0.1985.125, Zeitstempel 0x53c4d8ad, Ausnahmecode 0x80000003, Fehleroffset 0x004aa883,
Prozess-ID 0xc14, Anwendungsstartzeit chrome.exe0.
Error: (09/15/2014 00:59:05 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/14/2014 05:13:18 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/14/2014 03:31:39 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (09/13/2014 02:59:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlerhafte Anwendung chrome.exe, Version 36.0.1985.125, Zeitstempel 0x53c4dbee, fehlerhaftes Modul chrome.dll, Version 36.0.1985.125, Zeitstempel 0x53c4d8ad, Ausnahmecode 0x80000003, Fehleroffset 0x004aa883,
Prozess-ID 0x15a8, Anwendungsstartzeit chrome.exe0.
Error: (09/13/2014 02:43:37 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlerhafte Anwendung chrome.exe, Version 36.0.1985.125, Zeitstempel 0x53c4dbee, fehlerhaftes Modul chrome.dll, Version 36.0.1985.125, Zeitstempel 0x53c4d8ad, Ausnahmecode 0x80000003, Fehleroffset 0x004aa883,
Prozess-ID 0x1240, Anwendungsstartzeit chrome.exe0.
Error: (09/13/2014 02:29:51 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlerhafte Anwendung HI-epanel-WatchDog.exe, Version 0.0.0.0, Zeitstempel 0x53e09833, fehlerhaftes Modul HI-epanelLSPService.DLL, Version 14.1.87.0, Zeitstempel 0x53e0983b, Ausnahmecode 0xc0000005, Fehleroffset 0x0001e2c2,
Prozess-ID 0x1494, Anwendungsstartzeit HI-epanel-WatchDog.exe0.
Error: (09/13/2014 02:25:51 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (09/15/2014 01:28:29 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: HI-epanelLSPService86
Error: (09/15/2014 01:27:29 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: HI-epanelLSPService85
Error: (09/15/2014 01:26:29 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: HI-epanelLSPService84
Error: (09/15/2014 01:25:29 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: HI-epanelLSPService83
Error: (09/15/2014 01:25:19 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: HI-epanelLSPService82
Error: (09/15/2014 01:24:29 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: HI-epanelLSPService81
Error: (09/15/2014 01:23:09 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: HI-epanelLSPService80
Error: (09/15/2014 01:22:59 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: HI-epanelLSPService79
Error: (09/15/2014 01:22:09 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: HI-epanelLSPService78
Error: (09/15/2014 01:21:54 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: HI-epanelLSPService77
Microsoft Office Sessions:
=========================
Error: (03/04/2011 11:10:29 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6324.5001, Microsoft Office Version: 12.0.6215.1000. This session lasted 513 seconds with 0 seconds of active time. This session ended with a crash.
CodeIntegrity Errors:
===================================
Date: 2014-09-15 13:26:04.375
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\kneps.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-09-15 13:26:03.907
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\kneps.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-09-15 13:26:03.330
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\kneps.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-09-15 13:26:02.846
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\kneps.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-09-15 13:26:02.113
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\kltdi.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-09-15 13:26:01.442
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\kltdi.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-09-15 13:26:00.896
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\kltdi.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-09-15 13:26:00.272
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\kltdi.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-09-15 13:25:59.757
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\klpd.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-09-15 13:25:59.227
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\klpd.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Processor: Intel(R) Core(TM)2 Duo CPU T5800 @ 2.00GHz
Percentage of memory in use: 75%
Total physical RAM: 2301.44 MB
Available physical RAM: 554.82 MB
Total Pagefile: 4829.77 MB
Available Pagefile: 2675.27 MB
Total Virtual: 2047.88 MB
Available Virtual: 1882.97 MB
==================== Drives ================================
Drive c: (BOOT) (Fixed) (Total:282.27 GB) (Free:190.54 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (RECOVER) (Fixed) (Total:15.81 GB) (Free:5.23 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298.1 GB) (Disk ID: DAE4C35C)
Partition 1: (Active) - (Size=282.3 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=15.8 GB) - (Type=0C)
==================== End Of Log ============================[/CODE
Ich hoffe, das ist jetzt kein Problem, dass das 2. nicht in den Code-Klammern steht?
FRST 32-Bit | FRST 64-Bit
Malwarebytes Anti-Malware 
AdwCleaner auf deinen Desktop.
WARNUNG an die MITLESER: 