FRST Logfile:
FRST Logfile:
FRST Logfile:
FRST Logfile:
FRST Logfile:
FRST Logfile:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-12-2014
Ran by Issam276 (administrator) on CROUNTY on 25-12-2014 18:01:12
Running from C:\Users\Issam276\Desktop
Loaded Profile: Issam276 (Available profiles: Issam276 & Gast)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 9
Boot Mode: Safe Mode (with Networking)
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7204568 2013-12-28] (Realtek Semiconductor)
HKLM-x32\...\Run: [Turbo Key] => C:\Program Files (x86)\ASUS\Turbo Key\TurboKey.exe [1874432 2009-11-24] (ASUSTeK Computer Inc.)
HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\wlangui.exe [2105344 2010-10-22] (AVM Berlin)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-03-28] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-09-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Cpu Level Up help] => C:\Program Files (x86)\ASUS\AI Suite\CpuLevelUpHelp.exe [887936 2009-12-28] ()
HKLM-x32\...\Run: [emsisoft anti-malware] => c:\program files (x86)\emsisoft internet security\a2guard.exe [4974176 2014-12-25] (Emsisoft GmbH)
HKLM\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 0
HKLM\...\Policies\Explorer: [NoResolveSearch] 1
HKU\S-1-5-21-1925287450-1312797874-627100175-1001\...\Run: [Akamai NetSession Interface] => C:\Users\Issam276\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.)
HKU\S-1-5-21-1925287450-1312797874-627100175-1001\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [393216 2011-09-15] (AMD)
HKU\S-1-5-21-1925287450-1312797874-627100175-1001\...\Run: [Spotify Web Helper] => C:\Users\Issam276\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1676344 2014-12-12] (Spotify Ltd)
HKU\S-1-5-21-1925287450-1312797874-627100175-1001\...\Run: [GoogleChromeAutoLaunch_0106D596D6B01A359AD12FA4DA46D292] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [856904 2014-12-06] (Google Inc.)
HKU\S-1-5-21-1925287450-1312797874-627100175-1001\...\Policies\system: [EnableLUA] 0
HKU\S-1-5-18\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30524520 2014-11-27] (Skype Technologies S.A.)
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\ProgramData\MEGAsync\ShellExtX64.dll ()
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\ProgramData\MEGAsync\ShellExtX64.dll ()
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\ProgramData\MEGAsync\ShellExtX64.dll ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\ProgramData\MEGAsync\ShellExtX32.dll ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\ProgramData\MEGAsync\ShellExtX32.dll ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\ProgramData\MEGAsync\ShellExtX32.dll ()
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1925287450-1312797874-627100175-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 -> Backup.Old.DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1925287450-1312797874-627100175-1001 -> Backup.Old.DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233}
SearchScopes: HKU\S-1-5-21-1925287450-1312797874-627100175-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1925287450-1312797874-627100175-1001 -> {DECA3892-BA8F-44b8-A993-A466AD694AE4} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-flv
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{BF86312B-8016-42B1-B232-8DED504D4B33}: [NameServer] 81.173.194.68,212.117.68.10
FireFox:
========
FF ProfilePath: C:\Users\Issam276\AppData\Roaming\Mozilla\Firefox\Profiles\ogok5qfm.default-1361552468197
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_246.dll ()
FF Plugin: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_246.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Issam276\AppData\Roaming\Mozilla\Firefox\Profiles\ogok5qfm.default-1361552468197\searchplugins\yahoo_ff.xml
FF Extension: Adblock Plus - C:\Users\Issam276\AppData\Roaming\Mozilla\Firefox\Profiles\ogok5qfm.default-1361552468197\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-02-22]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-07-14]
FF Extension: No Name - C:\Users\Issam276\AppData\Roaming\Mozilla\Firefox\Profiles\ogok5qfm.default-1361552468197\extensions\ascsurfingprotection@iobit.com [Not Found]
FF Extension: No Name - C:\Program Files (x86)\IObit Apps Toolbar\FF [Not Found]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]
Chrome:
=======
CHR HomePage: Default -> https://www.google.de/
CHR StartupUrls: Default -> "https://www.google.de/"
CHR DefaultSearchKeyword: Default -> google.de_
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Issam276\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (ProxFlow) - C:\Users\Issam276\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2014-12-23]
CHR Extension: (Google Präsentationen) - C:\Users\Issam276\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-12-01]
CHR Extension: (Google Docs) - C:\Users\Issam276\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-12-01]
CHR Extension: (Google Drive) - C:\Users\Issam276\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-12-01]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Issam276\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-12-01]
CHR Extension: (WOT) - C:\Users\Issam276\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2014-12-23]
CHR Extension: (MEGA) - C:\Users\Issam276\AppData\Local\Google\Chrome\User Data\Default\Extensions\bigefpfhnfcobdlfbedofhhaibnlghod [2014-12-23]
CHR Extension: (YouTube) - C:\Users\Issam276\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-12-01]
CHR Extension: (Adblock Plus) - C:\Users\Issam276\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-12-23]
CHR Extension: (Google-Suche) - C:\Users\Issam276\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-01]
CHR Extension: (Google Tabellen) - C:\Users\Issam276\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-12-01]
CHR Extension: (League of Legends(LoL) For New Tab) - C:\Users\Issam276\AppData\Local\Google\Chrome\User Data\Default\Extensions\hagfodkdlfpceodghmlnbjafkcdjnifd [2014-12-23]
CHR Extension: (Ghostery) - C:\Users\Issam276\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2014-12-23]
CHR Extension: (Google Wallet) - C:\Users\Issam276\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-01]
CHR Extension: (Google Mail) - C:\Users\Issam276\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-01]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S2 a2AntiMalware; C:\Program Files (x86)\Emsisoft Internet Security\a2service.exe [4918032 2014-12-25] (Emsisoft GmbH)
S2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-03-28] (Advanced Micro Devices, Inc.) [File not signed]
S2 AMD_RAIDXpert; C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe [122880 2009-12-15] (AMD) [File not signed]
S4 AODService; C:\Program Files (x86)\AMD\OverDrive\AODAssist.exe [136616 2012-05-10] ()
S2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [90112 2009-08-19] (ASUSTeK Computer Inc.) [File not signed]
S2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin) [File not signed]
S4 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-09-25] () [File not signed]
S2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
S2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
S2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-01-05] ()
S2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5405456 2014-11-12] (TeamViewer GmbH)
S2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-21] (Microsoft Corporation)
S4 EslWireHelper; C:\Program Files\EslWire\service\WireHelperSvc.exe [X]
S3 npggsvc; C:\Windows\system32\GameMon.des -service [X]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S3 a2acc; C:\PROGRAM FILES (X86)\EMSISOFT INTERNET SECURITY\a2accx64.sys [71472 2014-05-12] (Emsisoft GmbH)
S1 A2DDA; C:\Program Files (x86)\Emsisoft Internet Security\a2ddax64.sys [26176 2013-03-28] (Emsisoft GmbH)
S1 a2injectiondriver; C:\Program Files (x86)\Emsisoft Internet Security\a2dix64.sys [45208 2013-09-30] (Emsisoft GmbH)
S1 a2util; C:\Program Files (x86)\Emsisoft Internet Security\a2util64.sys [23088 2014-05-12] (Emsisoft GmbH)
S2 ANIO; C:\Windows\SysWOW64\ANIO.SYS [28205 2003-05-05] (Alpha Networks Inc.) [File not signed]
R1 anodlwf; C:\Windows\System32\DRIVERS\anodlwfx.sys [15872 2009-03-06] ()
S2 AODDriver4.2.0; C:\Program Files (x86)\AMD\OverDrive\amd64\AODDriver2.sys [57472 2012-05-10] (Advanced Micro Devices)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-24] ()
S1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [13368 2009-07-06] ()
S3 aswTap; C:\Windows\System32\DRIVERS\aswTap.sys [44640 2014-06-29] (The OpenVPN Project)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-25] (AVM Berlin)
S3 cleanhlp; C:\Program Files (x86)\Emsisoft Internet Security\cleanhlp64.sys [57024 2013-12-04] (Emsisoft GmbH)
S3 cpuz130; No ImagePath
S3 dump_wmimmc; No ImagePath
S2 ESLWireAC; C:\Windows\system32\drivers\ESLWireACD.sys [160784 2012-12-17] (<Turtle Entertainment>)
S3 fwlanusbn; C:\Windows\System32\DRIVERS\fwlanusbn.sys [714368 2010-10-25] (AVM GmbH)
R3 fwndis; C:\Windows\System32\DRIVERS\fwndis64.sys [491632 2014-12-25] ()
S1 fwwfp; C:\Program Files (x86)\Emsisoft Internet Security\fwwfp764.sys [414424 2014-12-25] ()
R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [44744 2014-05-17] (AnchorFree Inc.)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
S3 NPPTNT2; C:\Windows\SysWOW64\npptNT2.sys [4682 2005-01-01] (INCA Internet Co., Ltd.) [File not signed]
R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-05-17] (Anchorfree Inc.)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [53760 2012-09-28] (Apple, Inc.) [File not signed]
S3 X6va008; No ImagePath
S3 X6va009; No ImagePath
S3 X6va012; No ImagePath
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
S3 netr28ux; system32\DRIVERS\netr28ux.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-12-25 17:56 - 2014-12-25 17:57 - 00051169 _____ () C:\Users\Issam276\Desktop\Addition.txt
2014-12-25 17:39 - 2014-12-25 17:39 - 00001892 _____ () C:\Users\Issam276\Desktop\bluescreen.txt
2014-12-25 16:45 - 2014-12-25 16:52 - 125683715 _____ (Realtek Semiconductor Corp.) C:\Users\Issam276\Downloads\64bit_Win7_Win8_Win81_R275.exe
2014-12-25 16:31 - 2014-12-25 16:31 - 00000000 ____D () C:\Windows\LastGood
2014-12-25 16:31 - 2014-08-27 07:10 - 00942808 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys
2014-12-25 16:31 - 2014-08-27 07:10 - 00073800 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2014-12-25 16:29 - 2014-12-25 16:29 - 00581632 ____H (radio42) C:\Users\Issam276\Downloads\Bass.Net.dll
2014-12-25 16:29 - 2014-12-25 16:29 - 00105528 ____H (Un4seen Developments) C:\Users\Issam276\Downloads\Bass.dll
2014-12-25 16:24 - 2014-12-25 16:24 - 03123224 _____ (Easeware ) C:\Users\Issam276\Downloads\DriverEasy_480_Setup.exe
2014-12-25 16:24 - 2014-12-25 16:24 - 00000933 _____ () C:\Users\Public\Desktop\DriverEasy.lnk
2014-12-25 16:24 - 2014-12-25 16:24 - 00000412 _____ () C:\Windows\Tasks\DriverEasy Scheduled Scan.job
2014-12-25 16:24 - 2014-12-25 16:24 - 00000000 ____D () C:\Users\Issam276\AppData\Roaming\Easeware
2014-12-25 16:24 - 2014-12-25 16:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverEasy
2014-12-25 15:41 - 2014-12-25 15:41 - 02347384 _____ (ESET) C:\Users\Issam276\Downloads\esetsmartinstaller_deu.exe
2014-12-25 15:41 - 2014-12-25 15:41 - 00852505 _____ () C:\Users\Issam276\Downloads\SecurityCheck (1).exe
2014-12-25 15:37 - 2014-12-25 15:37 - 00141480 _____ () C:\Users\Issam276\Downloads\bluescreenview_setup.exe
2014-12-25 15:37 - 2014-12-25 15:37 - 00000000 ____D () C:\Users\Issam276\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NirSoft BlueScreenView
2014-12-25 15:37 - 2014-12-25 15:37 - 00000000 ____D () C:\Program Files (x86)\NirSoft
2014-12-25 15:19 - 2014-12-25 15:19 - 00279552 _____ () C:\Windows\Minidump\122514-28392-01.dmp
2014-12-25 15:17 - 2014-12-25 15:19 - 461110785 _____ () C:\Windows\MEMORY.DMP
2014-12-25 15:17 - 2014-12-25 15:17 - 00275424 _____ () C:\Windows\Minidump\122514-32401-01.dmp
2014-12-23 21:20 - 2014-12-24 01:08 - 00000000 ____D () C:\Users\Issam276\Desktop\lelel3
2014-12-23 17:31 - 2014-12-23 17:31 - 00002253 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-12-23 17:31 - 2014-12-23 17:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-12-23 17:30 - 2014-12-25 15:18 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-23 17:30 - 2014-12-25 03:35 - 00001114 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-23 17:30 - 2014-12-23 17:30 - 00004110 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-12-23 17:30 - 2014-12-23 17:30 - 00003858 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-12-23 17:24 - 2014-12-23 17:25 - 00880784 _____ (Google Inc.) C:\Users\Issam276\Downloads\ChromeSetup.exe
2014-12-23 17:22 - 2014-12-23 17:22 - 00000698 _____ () C:\Users\Issam276\Desktop\JRT.txt
2014-12-23 17:13 - 2014-12-23 17:13 - 00000000 ____D () C:\Windows\ERUNT
2014-12-23 17:12 - 2014-12-23 17:12 - 01707646 _____ (Thisisu) C:\Users\Issam276\Downloads\JRT.exe
2014-12-23 17:04 - 2014-12-23 17:03 - 02173952 _____ () C:\Users\Issam276\Desktop\AdwCleaner_4.106.exe
2014-12-23 17:03 - 2014-12-23 17:03 - 02173952 _____ () C:\Users\Issam276\Downloads\AdwCleaner_4.106.exe
2014-12-22 00:00 - 2014-12-22 00:00 - 00167296 _____ (Gibson Research Corp.) C:\Users\Issam276\Downloads\DNSBench.exe
2014-12-21 21:19 - 2014-12-21 21:19 - 00001613 _____ () C:\Users\Public\Desktop\League of Legends.lnk
2014-12-21 21:19 - 2014-12-21 21:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2014-12-21 21:13 - 2014-12-21 21:13 - 30668968 _____ (Riot Games) C:\Users\Issam276\Downloads\LeagueofLegends_EUW_Installer_9_15_2014.exe
2014-12-21 16:19 - 2014-12-21 16:18 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-12-21 16:16 - 2014-12-21 16:16 - 00638376 _____ (Oracle Corporation) C:\Users\Issam276\Downloads\jre-8u25-windows-i586-iftw.exe
2014-12-21 16:10 - 2014-12-21 16:10 - 00852505 _____ () C:\Users\Issam276\Downloads\SecurityCheck.exe
2014-12-21 14:36 - 2014-12-25 18:01 - 00018049 _____ () C:\Users\Issam276\Desktop\FRST.txt
2014-12-21 04:09 - 2014-12-21 04:09 - 05073240 _____ (Microsoft Corporation) C:\Users\Issam276\Downloads\vcredist_x86.exe
2014-12-21 04:00 - 2014-12-25 02:46 - 00000000 ____D () C:\Users\Issam276\AppData\Roaming\BoL
2014-12-21 03:56 - 2014-12-21 03:56 - 00000270 _____ () C:\Users\Issam276\Downloads\Relog.zip
2014-12-21 03:54 - 2014-12-21 03:54 - 00000157 _____ () C:\Users\Issam276\Downloads\doGout.rar
2014-12-21 03:52 - 2014-12-23 21:20 - 00000000 ____D () C:\Users\Issam276\Desktop\sadsdasda
2014-12-21 03:51 - 2014-12-21 03:52 - 11539006 _____ () C:\Users\Issam276\Downloads\Bot of Legends.rar
2014-12-21 01:22 - 2014-12-21 01:23 - 00031608 _____ () C:\Users\Issam276\Downloads\mwb_scan.zip
2014-12-21 01:01 - 2014-12-21 01:01 - 00000000 ____D () C:\ProgramData\Emsisoft
2014-12-20 23:44 - 2014-12-20 23:44 - 00001132 _____ () C:\Users\Public\Desktop\Emsisoft Internet Security.lnk
2014-12-20 23:44 - 2014-12-20 23:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Internet Security
2014-12-20 23:43 - 2014-12-25 16:03 - 00000000 ____D () C:\Program Files (x86)\Emsisoft Internet Security
2014-12-20 23:43 - 2014-12-25 01:05 - 00491632 _____ () C:\Windows\system32\Drivers\fwndis64.sys
2014-12-20 23:42 - 2014-12-20 23:42 - 00001710 _____ () C:\EamClean.log
2014-12-20 23:36 - 2014-12-20 23:36 - 04095448 _____ (BrightFort LLC ) C:\Users\Issam276\Downloads\spywareblastersetup50.exe
2014-12-20 23:36 - 2014-12-20 23:36 - 00448512 _____ (OldTimer Tools) C:\Users\Issam276\Downloads\TFC.exe
2014-12-20 23:36 - 2014-12-20 23:36 - 00448512 _____ (OldTimer Tools) C:\Users\Issam276\Desktop\TFC.exe
2014-12-20 23:10 - 2014-12-20 23:10 - 02122240 _____ (Farbar) C:\Users\Issam276\Downloads\FRST64.exe
2014-12-20 23:10 - 2014-12-20 23:10 - 02122240 _____ (Farbar) C:\Users\Issam276\Desktop\FRST64.exe
2014-12-20 22:48 - 2014-12-20 23:42 - 00000000 ____D () C:\Program Files (x86)\Emsisoft Anti-Malware
2014-12-20 22:34 - 2014-12-20 22:34 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab
2014-12-20 22:33 - 2008-01-04 13:34 - 00011832 _____ () C:\Windows\SysWOW64\Drivers\AsInsHelp64.sys
2014-12-20 22:33 - 2008-01-04 13:34 - 00010216 _____ () C:\Windows\SysWOW64\Drivers\AsInsHelp32.sys
2014-12-20 22:12 - 2014-12-20 22:12 - 05718872 _____ (Microsoft Corporation) C:\Users\Issam276\Downloads\vcredist_x64 (2).exe
2014-12-20 22:11 - 2014-12-20 22:11 - 05718872 _____ (Microsoft Corporation) C:\Users\Issam276\Downloads\vcredist_x64 (1).exe
2014-12-20 22:08 - 2014-12-20 22:08 - 00000000 ____D () C:\ProgramData\Package Cache
2014-12-20 22:07 - 2014-12-20 22:07 - 07190152 _____ (Microsoft Corporation) C:\Users\Issam276\Downloads\vcredist_x64.exe
2014-12-20 21:51 - 2014-12-20 21:51 - 00000000 ____D () C:\Windows\System32\Tasks\Apple
2014-12-20 21:42 - 2014-12-20 21:42 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Issam276\Downloads\revosetup95.exe
2014-12-20 21:42 - 2014-12-20 21:42 - 00001270 _____ () C:\Users\Issam276\Desktop\Revo Uninstaller.lnk
2014-12-20 21:42 - 2014-12-20 21:42 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-12-19 15:53 - 2014-12-19 15:53 - 00000000 ____D () C:\ComboFix
2014-12-13 22:22 - 2014-12-13 22:22 - 00000000 ____D () C:\Users\Issam276\AppData\Local\Blizzard
2014-12-13 22:14 - 2014-12-13 22:22 - 00000000 ____D () C:\Program Files (x86)\Hearthstone
2014-12-13 22:14 - 2014-12-13 22:14 - 00001161 _____ () C:\Users\Public\Desktop\Hearthstone.lnk
2014-12-13 22:14 - 2014-12-13 22:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone
2014-12-13 13:17 - 2014-12-13 13:17 - 00000731 _____ () C:\Users\Issam276\mabast suckt.txt
2014-12-12 19:40 - 2014-12-12 19:40 - 00000000 ____D () C:\Windows\system32\appraiser
2014-12-12 17:42 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-12-12 17:42 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-12-12 17:42 - 2014-07-07 03:06 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-12-12 17:42 - 2014-07-07 03:06 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2014-12-12 17:42 - 2014-07-07 03:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2014-12-12 17:42 - 2014-07-07 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2014-12-12 17:42 - 2014-07-07 02:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2014-12-12 17:42 - 2014-07-07 02:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2014-12-12 17:42 - 2014-07-07 02:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2014-12-12 17:42 - 2014-07-07 02:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2014-12-12 16:26 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2014-12-12 16:26 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2014-12-12 16:26 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-12-12 16:26 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2014-12-12 16:26 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-12-12 16:26 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2014-12-12 16:26 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-12-12 16:26 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2014-12-12 16:26 - 2014-11-24 23:12 - 17874432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-12 16:26 - 2014-11-24 22:59 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-12-12 16:26 - 2014-11-24 22:54 - 10921984 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-12 16:26 - 2014-11-24 22:53 - 02339840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-12-12 16:26 - 2014-11-24 22:47 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-12 16:26 - 2014-11-24 22:47 - 01388032 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-12 16:26 - 2014-11-24 22:45 - 01494016 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-12 16:26 - 2014-11-24 22:45 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-12-12 16:26 - 2014-11-24 22:45 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-12-12 16:26 - 2014-11-24 22:44 - 02157056 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-12 16:26 - 2014-11-24 22:44 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-12-12 16:26 - 2014-11-24 22:44 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-12 16:26 - 2014-11-24 22:44 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-12 16:26 - 2014-11-24 22:44 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-12-12 16:26 - 2014-11-24 22:44 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-12-12 16:26 - 2014-11-24 22:44 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-12-12 16:26 - 2014-11-24 22:44 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-12-12 16:26 - 2014-11-24 22:44 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-12-12 16:26 - 2014-11-24 22:43 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-12-12 16:26 - 2014-11-24 22:43 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-12 16:26 - 2014-11-24 22:43 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-12-12 16:26 - 2014-11-24 22:42 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-12-12 16:26 - 2014-11-24 21:44 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-12-12 16:26 - 2014-11-24 21:41 - 12369920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-12-12 16:26 - 2014-11-24 21:40 - 01810944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-12-12 16:26 - 2014-11-24 21:37 - 09740800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-12-12 16:26 - 2014-11-24 21:35 - 01139712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-12-12 16:26 - 2014-11-24 21:35 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-12-12 16:26 - 2014-11-24 21:34 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-12-12 16:26 - 2014-11-24 21:34 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-12-12 16:26 - 2014-11-24 21:33 - 01802752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-12-12 16:26 - 2014-11-24 21:33 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-12-12 16:26 - 2014-11-24 21:33 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-12-12 16:26 - 2014-11-24 21:33 - 00421376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-12-12 16:26 - 2014-11-24 21:33 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-12-12 16:26 - 2014-11-24 21:33 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-12-12 16:26 - 2014-11-24 21:33 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-12-12 16:26 - 2014-11-24 21:32 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-12-12 16:26 - 2014-11-24 21:32 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-12-12 16:26 - 2014-11-24 21:32 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-12-12 16:26 - 2014-11-24 21:32 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-12-12 16:26 - 2014-11-24 21:32 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-12-12 16:26 - 2014-11-24 21:32 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-12-12 16:26 - 2014-11-24 21:32 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-12-12 16:26 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-12 16:26 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-12-12 16:26 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2014-12-12 16:26 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2014-12-12 16:26 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2014-12-12 16:26 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-12-12 16:26 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2014-12-12 16:26 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2014-12-12 16:26 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2014-12-12 16:26 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2014-12-12 16:26 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2014-12-12 16:26 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2014-12-12 16:26 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2014-12-12 16:26 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2014-12-12 16:26 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2014-12-12 16:25 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-12-12 16:25 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-12-06 18:13 - 2014-12-06 18:13 - 00146183 _____ () C:\Users\Issam276\Downloads\YouTube-Unblocker-056.crx
2014-12-06 17:48 - 2014-12-08 14:45 - 00000000 ____D () C:\Program Files (x86)\Yahoo!
2014-12-06 17:48 - 2014-12-06 17:48 - 00000000 ____D () C:\Users\Issam276\AppData\Roaming\Yahoo!
2014-12-06 17:43 - 2014-12-06 17:44 - 04998707 _____ () C:\Users\Issam276\Downloads\flvplayer_setup20_25.exe
2014-12-05 17:14 - 2014-12-05 17:14 - 00000000 ____D () C:\Users\Issam276\AppData\Roaming\xulrunner
2014-12-05 17:13 - 2014-12-05 17:13 - 10124389 _____ () C:\Users\Issam276\AppData\Roaming\xulrunner.zip
2014-12-04 16:29 - 2014-12-04 16:29 - 00000000 ____D () C:\Users\Issam276\AppData\Local\Secunia PSI
2014-12-03 11:25 - 2014-12-03 11:30 - 441252901 _____ () C:\Users\Issam276\Downloads\League Of Legends.mp4
2014-12-01 21:34 - 2014-12-01 21:34 - 00000000 ____D () C:\Users\Issam276\AppData\Roaming\Steganos
2014-11-30 23:30 - 2014-11-30 23:30 - 01294848 _____ () C:\Users\Issam276\Desktop\zoek.exe
2014-11-30 22:22 - 2014-12-05 17:28 - 00001108 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-11-30 21:10 - 2014-11-30 21:10 - 00031862 _____ () C:\ComboFix.txt
2014-11-30 20:47 - 2014-11-30 21:10 - 00000000 ____D () C:\Qoobox
2014-11-30 20:47 - 2014-11-30 21:08 - 00000000 ____D () C:\Windows\erdnt
2014-11-30 20:47 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-11-30 20:47 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-11-30 20:47 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-11-30 20:47 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-11-30 20:47 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-11-30 20:47 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-11-30 20:47 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-11-30 20:47 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-11-30 20:46 - 2014-12-19 15:52 - 05601641 ____R (Swearware) C:\Users\Issam276\Desktop\ComboFix.exe
2014-11-30 20:14 - 2014-12-25 15:31 - 01001196 _____ () C:\Windows\PFRO.log
2014-11-30 20:14 - 2014-12-25 15:17 - 00007780 _____ () C:\Windows\setupact.log
2014-11-30 20:14 - 2014-11-30 20:14 - 00000000 _____ () C:\Windows\setuperr.log
2014-11-30 19:53 - 2014-11-19 16:25 - 00272296 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-11-30 19:51 - 2014-11-30 19:51 - 00319912 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-11-30 19:51 - 2014-11-30 19:51 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-11-30 19:51 - 2014-11-30 19:51 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-11-30 19:51 - 2014-11-30 19:51 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-11-30 19:50 - 2014-11-30 19:54 - 00001467 _____ () C:\Windows\SecuniaPackage.log
2014-11-30 19:41 - 2014-11-30 19:41 - 00000000 ____D () C:\Program Files (x86)\Secunia
2014-11-30 15:25 - 2014-11-30 15:25 - 00001174 _____ () C:\Users\Issam276\Desktop\Avast Internet Security License File.rar
2014-11-30 01:25 - 2014-11-30 01:25 - 01093536 _____ () C:\Users\Issam276\Documents\cc_20141130_012508.reg
2014-11-29 22:20 - 2014-11-29 22:20 - 00001049 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2014-11-29 18:05 - 2014-11-29 18:05 - 00000000 ____D () C:\Users\Issam276\Documents\Diablo III
2014-11-29 00:10 - 2014-11-29 18:04 - 00000000 ____D () C:\Program Files (x86)\Diablo III
2014-11-29 00:10 - 2014-11-29 00:10 - 00001162 _____ () C:\Users\Public\Desktop\Diablo III.lnk
2014-11-29 00:10 - 2014-11-29 00:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo III
2014-11-29 00:03 - 2014-12-16 20:30 - 00000000 ____D () C:\Users\Issam276\AppData\Local\Battle.net
2014-11-29 00:03 - 2014-11-29 00:03 - 00000000 ____D () C:\Users\Issam276\AppData\Roaming\Battle.net
2014-11-29 00:03 - 2014-11-29 00:03 - 00000000 ____D () C:\Users\Issam276\AppData\Local\Blizzard Entertainment
2014-11-29 00:02 - 2014-12-13 22:14 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-11-29 00:02 - 2014-11-29 00:02 - 00001124 _____ () C:\Users\Public\Desktop\Battle.net.lnk
2014-11-29 00:02 - 2014-11-29 00:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-12-25 18:01 - 2014-06-28 19:29 - 00000000 ____D () C:\FRST
2014-12-25 16:59 - 2012-06-15 15:21 - 00000000 ____D () C:\Users\Issam276\Desktop\Alles
2014-12-25 16:43 - 2014-07-04 02:28 - 01546615 _____ () C:\Windows\WindowsUpdate.log
2014-12-25 16:31 - 2012-06-14 13:30 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-12-25 15:19 - 2012-06-15 15:18 - 00000000 ____D () C:\Windows\Minidump
2014-12-25 15:17 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-25 04:30 - 2012-06-14 15:08 - 00000000 ____D () C:\Users\Issam276\AppData\Roaming\TS3Client
2014-12-25 04:27 - 2012-06-14 13:47 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-25 01:03 - 2012-06-29 19:50 - 00000000 ____D () C:\Users\Issam276\AppData\Roaming\Skype
2014-12-23 23:32 - 2014-11-07 17:57 - 00000000 ____D () C:\Users\Issam276\AppData\Roaming\Spotify
2014-12-23 19:45 - 2014-09-07 12:39 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-12-23 17:31 - 2013-02-22 18:07 - 00000000 ____D () C:\Program Files (x86)\Google
2014-12-23 17:19 - 2009-07-14 05:45 - 00028720 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-23 17:19 - 2009-07-14 05:45 - 00028720 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-23 17:10 - 2014-03-03 18:42 - 00000000 ____D () C:\AdwCleaner
2014-12-21 21:19 - 2014-05-11 10:31 - 00000000 ____D () C:\Users\Issam276\AppData\Roaming\Riot Games
2014-12-21 19:31 - 2012-09-19 17:23 - 00000000 ____D () C:\Users\Issam276\AppData\Local\Facebook
2014-12-21 18:15 - 2012-06-12 10:08 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-12-21 17:06 - 2011-04-12 08:43 - 00770016 _____ () C:\Windows\system32\perfh007.dat
2014-12-21 17:06 - 2011-04-12 08:43 - 00174334 _____ () C:\Windows\system32\perfc007.dat
2014-12-21 17:06 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-12-21 17:05 - 2012-09-22 13:39 - 00000000 ____D () C:\Users\Issam276\AppData\Roaming\SoftGrid Client
2014-12-21 17:01 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-12-21 16:51 - 2012-10-03 08:30 - 00000000 ____D () C:\Users\Issam276\AppData\Roaming\HpUpdate
2014-12-21 16:51 - 2012-09-25 18:22 - 00000000 ____D () C:\Program Files (x86)\HP
2014-12-21 16:22 - 2013-08-23 11:40 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-12-21 16:22 - 2012-06-21 17:01 - 00000000 ____D () C:\Users\Issam276\AppData\Local\Adobe
2014-12-21 16:22 - 2012-06-14 13:47 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-12-21 16:22 - 2012-06-14 13:47 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-12-21 00:35 - 2014-09-06 18:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2014-12-21 00:00 - 2014-11-18 17:48 - 00000000 ____D () C:\Users\Issam276\AppData\Roaming\TERA
2014-12-20 23:42 - 2014-06-29 19:05 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-12-20 22:46 - 2013-07-10 17:40 - 00000000 ____D () C:\Users\DefaultAppPool
2014-12-20 22:33 - 2012-06-14 14:10 - 00000000 ____D () C:\Windows\System32\Tasks\ASUS
2014-12-20 22:33 - 2012-06-14 14:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2014-12-20 22:33 - 2012-06-14 14:09 - 00000000 ____D () C:\Program Files (x86)\ASUS
2014-12-20 22:24 - 2013-02-01 21:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Screaming Bee
2014-12-20 22:21 - 2012-09-02 16:31 - 00000000 ____D () C:\Program Files (x86)\Java
2014-12-20 22:17 - 2012-09-14 17:26 - 00000000 ____D () C:\Users\Issam276\AppData\Local\Unity
2014-12-20 21:59 - 2012-06-22 13:27 - 00000000 ____D () C:\Program Files (x86)\D-Link
2014-12-20 21:50 - 2012-06-14 13:52 - 00000000 ____D () C:\Users\Issam276\AppData\Roaming\InfraRecorder
2014-12-18 22:16 - 2013-04-27 07:45 - 00000000 ____D () C:\Users\Issam276\AppData\Local\Spotify
2014-12-15 16:44 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-12-13 14:36 - 2013-02-02 10:54 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-12-13 14:36 - 2012-06-29 19:50 - 00000000 ____D () C:\ProgramData\Skype
2014-12-13 13:17 - 2012-06-14 12:17 - 00000000 ____D () C:\Users\Issam276
2014-12-12 19:40 - 2014-05-06 19:56 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-12-12 19:40 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
2014-12-12 17:50 - 2013-08-21 23:30 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-12 17:43 - 2012-06-17 14:06 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-12 17:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-12-06 17:40 - 2014-08-10 06:44 - 00000000 ____D () C:\Users\Issam276\AppData\Local\Windows Live
2014-12-05 17:28 - 2014-06-28 16:36 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-12-05 17:28 - 2014-06-28 16:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-12-05 17:28 - 2014-06-28 16:36 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-12-01 21:50 - 2012-12-08 09:39 - 00066256 _____ () C:\Users\Issam276\AppData\Local\GDIPFONTCACHEV1.DAT
2014-12-01 21:48 - 2012-12-08 09:38 - 04913880 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-12-01 21:47 - 2012-09-25 18:21 - 00006178 _____ () C:\ProgramData\hpzinstall.log
2014-12-01 21:38 - 2012-09-25 18:21 - 00000000 ____D () C:\ProgramData\HP
2014-12-01 21:33 - 2013-02-22 16:07 - 00000000 ____D () C:\Program Files\CCleaner
2014-12-01 00:13 - 2014-02-11 12:15 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-12-01 00:08 - 2014-05-10 17:23 - 00000000 ____D () C:\Users\Issam276\AppData\Local\Comodo
2014-12-01 00:08 - 2014-05-10 17:23 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-12-01 00:08 - 2014-05-10 17:23 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-12-01 00:08 - 2014-05-10 17:23 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-12-01 00:08 - 2014-05-10 17:23 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-12-01 00:08 - 2014-05-10 17:23 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-12-01 00:08 - 2014-02-14 17:14 - 00000000 ____D () C:\Users\Default\AppData\Local\Google
2014-12-01 00:08 - 2014-02-14 17:14 - 00000000 ____D () C:\Users\Default User\AppData\Local\Google
2014-12-01 00:08 - 2013-06-26 12:08 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-12-01 00:08 - 2012-07-03 17:11 - 00000000 ____D () C:\Users\Issam276\AppData\Local\Google
2014-11-30 23:59 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-11-30 23:59 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-11-30 22:40 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PLA
2014-11-30 21:10 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-11-30 21:02 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2014-11-30 20:13 - 2014-03-03 17:37 - 00000000 ____D () C:\Windows\system32\log
2014-11-30 19:39 - 2012-11-18 14:41 - 00000000 ____D () C:\Users\Issam276\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-11-30 19:39 - 2012-11-18 14:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-11-30 19:39 - 2012-06-14 13:52 - 00000000 ____D () C:\Program Files\WinRAR
2014-11-30 19:26 - 2014-08-31 20:00 - 00000000 ___RD () C:\Users\Issam276\Dropbox
2014-11-30 19:17 - 2014-08-31 19:58 - 00000000 ____D () C:\Users\Issam276\AppData\Roaming\Dropbox
2014-11-30 19:16 - 2014-08-31 20:00 - 00000000 ____D () C:\Users\Issam276\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-11-30 12:19 - 2014-11-01 20:28 - 00000000 ____D () C:\Users\Issam276\AppData\Local\osu!
2014-11-30 01:24 - 2012-06-27 18:39 - 00000000 ____D () C:\Users\Issam276\AppData\Roaming\TeamViewer
2014-11-29 22:20 - 2012-06-14 13:02 - 00000000 ____D () C:\Program Files (x86)\TeamViewer
2014-11-29 10:13 - 2013-01-25 19:07 - 00000000 ____D () C:\Users\Issam276\AppData\Roaming\.minecraft
2014-11-27 22:18 - 2009-07-14 06:13 - 01799304 _____ () C:\Windows\system32\PerfStringBackup.INI
Files to move or delete:
====================
C:\Users\Issam276\jagex_cl_oldschool_LIVE.dat
C:\Users\Issam276\jagex_cl_runescape_LIVE.dat
C:\Users\Issam276\random.dat
Some content of TEMP:
====================
C:\Users\Issam276\AppData\Local\Temp\Quarantine.exe
C:\Users\Issam276\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-12-15 16:36
==================== End Of Log ============================
--- --- ---
--- --- ---
--- --- ---
--- --- ---
--- --- ---
--- --- ---
--- --- --- Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-12-2014
Ran by Issam276 at 2014-12-25 18:01:33
Running from C:\Users\Issam276\Desktop
Boot Mode: Safe Mode (with Networking)
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Emsisoft Internet Security (Enabled - Up to date) {8504DEEF-CC04-1F76-2137-F1A5F4A659DA}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Emsisoft Internet Security (Enabled - Up to date) {3E653F0B-EA3E-10F8-1B87-CAD78F211367}
FW: Emsisoft Internet Security (Disabled) {BD3F5FCA-866B-1E2E-0A68-58900A751EA1}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 15.0.0.356 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.246 - Adobe Systems Incorporated)
Adobe Flash Player 16 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 16.0.0.235 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
AI Suite (HKLM-x32\...\{310BC5E2-31AF-49BB-904D-E71EB93645DC}) (Version: 1.06.22 - )
Akamai NetSession Interface (HKU\S-1-5-21-1925287450-1312797874-627100175-1001\...\Akamai) (Version: - Akamai Technologies, Inc)
AMD Catalyst Install Manager (HKLM\...\{2BFD590F-1D73-3533-E734-FDDAC3746E4A}) (Version: 8.0.911.0 - Advanced Micro Devices, Inc.)
AMD OverDrive (HKLM-x32\...\{9C1FAB12-F426-432E-8579-75CAB60C69CF}) (Version: 4.2.0.0594 - Advanced Micro Devices, Inc.)
ANIO Service (HKLM-x32\...\{7B5CE976-C7A9-4E38-A7F3-6C8EF025DD8E}) (Version: - )
Application Profiles (HKLM-x32\...\{4ED980CB-C288-6A80-A3EA-AEECC543058B}) (Version: 2.0.4525.30280 - Advanced Micro Devices, Inc.)
ASUSUpdate (HKLM-x32\...\{587178E7-B1DF-494E-9838-FA4DD36E873C}) (Version: 7.18.03 - ASUSTeK Computer Inc.)
AutoHotkey 1.0.48.05 (HKLM-x32\...\AutoHotkey) (Version: 1.0.48.05 - Chris Mallett)
AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version: - AVM Berlin)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Chris-PC Game Booster (HKLM-x32\...\Chris-PC Game Booster_is1) (Version: 2.00 - Chris P.C. srl)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version: - Valve)
Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment)
Dota 2 (HKLM-x32\...\Steam App 570) (Version: - Valve)
DriverEasy 4.8.0 (HKLM\...\DriverEasy_is1) (Version: 4.8.0.0 - Easeware)
Dropbox (HKU\S-1-5-21-1925287450-1312797874-627100175-1001\...\Dropbox) (Version: 2.10.52 - Dropbox, Inc.)
Emsisoft Internet Security (HKLM-x32\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 9.0 - Emsisoft Ltd)
eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
Gameforge Live 2.0.5 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.5 - Gameforge)
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version: - Facepunch Studios)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
HydraVision (x32 Version: 4.2.216.0 - Advanced Micro Devices, Inc.) Hidden
Java 7 Update 71 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417071FF}) (Version: 7.0.710 - Oracle)
Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)
JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version: - Valve)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{D285FC5F-3021-32E9-9C59-24CA325BDC5C}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{b341426f-8543-4e0d-96c3-e976f8ec5ab6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{90ffcee5-8608-4e94-8c18-a4feb4f83fb8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
MSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MTA:SA v1.4.0 (HKLM-x32\...\MTA:SA 1.4) (Version: v1.4.0 - Multi Theft Auto)
NirSoft BlueScreenView (HKLM-x32\...\NirSoft BlueScreenView) (Version: - )
NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
OpenOffice.org 3.4.1 (HKLM-x32\...\{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}) (Version: 3.41.9593 - Apache Software Foundation)
osu! (HKLM-x32\...\{ba6599d0-1e00-4060-a455-55382b1c7008}) (Version: latest - ppy Pty Ltd)
PC Probe II (HKLM-x32\...\{F7338FA3-DAB5-49B2-900D-0AFB5760C166}) (Version: 1.04.92 - ASUSTeK Computer Inc.)
RAIDXpert (HKLM-x32\...\InstallShield_{8B76B8E9-F773-4B75-A08C-120079EB765E}) (Version: 3.2.1540.10 - AMD)
RAIDXpert (x32 Version: 3.2.1540.10 - AMD) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.90.826.2014 - Realtek)
Realtek HDMI Audio Driver for ATI (HKLM-x32\...\{5449FB4F-1802-4D5B-A6D8-087DB1142147}) (Version: 6.0.1.6519 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7083 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
RuneScape Launcher 1.2.3 (HKLM-x32\...\{FAE99C85-0732-4C58-9C6B-10B5B12FA2E9}) (Version: 1.2.3 - Jagex Ltd)
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14083.17 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.14083.17 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.45.0 - SAMSUNG Electronics Co., Ltd.)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 6.22 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.22.107 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-1925287450-1312797874-627100175-1001\...\Spotify) (Version: 0.9.15.27.g87efe634 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version: - Valve)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.35436 Beta - TeamViewer)
Turbo Key (HKLM-x32\...\{B83F7FA5-3191-4E39-A1F2-8A9038BD0B04}) (Version: 1.01.03 - )
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
WinRAR 5.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)
WinSCP 4.3.8 (HKLM-x32\...\winscp3_is1) (Version: 4.3.8 - Martin Prikryl)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-1925287450-1312797874-627100175-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Issam276\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1925287450-1312797874-627100175-1001_Classes\CLSID\{3a022117-d6e3-4fcd-a8a2-d31ed64d8e1e}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1925287450-1312797874-627100175-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Issam276\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1925287450-1312797874-627100175-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Issam276\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1925287450-1312797874-627100175-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Issam276\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1925287450-1312797874-627100175-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Issam276\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1925287450-1312797874-627100175-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Issam276\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1925287450-1312797874-627100175-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Issam276\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1925287450-1312797874-627100175-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Issam276\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1925287450-1312797874-627100175-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Issam276\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
==================== Restore Points =========================
21-12-2014 18:15:32 Revo Uninstaller's restore point - Futuremark SystemInfo
21-12-2014 21:13:15 Revo Uninstaller's restore point - League of Legends
21-12-2014 21:13:34 Removed League of Legends
21-12-2014 21:18:29 Revo Uninstaller's restore point - LOLReplay
21-12-2014 21:18:35 Installed League of Legends
21-12-2014 21:19:13 DirectX wurde installiert
21-12-2014 21:50:17 Revo Uninstaller's restore point - ChrisPC DNS Switch 1.40
22-12-2014 00:22:17 Installed IP Camera Adapter
23-12-2014 17:25:24 Revo Uninstaller's restore point - Google Chrome
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2014-09-27 11:49 - 2014-11-30 21:02 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {002BC456-DB44-4F10-BC5B-16C0AE4B94E5} - System32\Tasks\{35A5A0DE-E4FD-4FCE-A133-406843CE3598} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {00442CFD-6F8A-4E25-B0F7-099CBAF166DD} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-09-12] (Adobe Systems Incorporated)
Task: {07487D3F-27D3-4242-9986-5805088BC752} - System32\Tasks\{9CD2CBDC-9F17-4183-A776-3C3CDDB91238} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {094AD9FC-9A2A-4434-A267-67318F3AFB3C} - System32\Tasks\{C0BF0233-4710-4F22-B838-C53FD13B197E} => C:\Program Files (x86)\Opera\Opera.exe
Task: {0D5CB102-9F0B-4BEF-9B7C-C8DD85A116EC} - System32\Tasks\{57FA110B-6E92-4EFD-98D9-19C15C00EF98} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {0E945E72-5D2C-4BEE-8169-B44EFAF0C579} - System32\Tasks\{CC321D73-229D-4CDF-9597-05F0B15F5904} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {1B0FF44F-B3B3-4261-9E8C-07E83F04A8CE} - System32\Tasks\{97DA18F4-90B4-45A3-BC74-3C01B81E7603} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {1B9795BE-3E65-435B-A5B7-EE5DED837485} - System32\Tasks\{1DB90D4F-8D72-4AD5-8F36-5C4F0864AD9F} => C:\Program Files (x86)\Opera\Opera.exe
Task: {1D959856-47B4-4D86-A9FD-33900CD35ADF} - System32\Tasks\{D7E5FBB1-D0B1-4F1A-8742-47F989B83816} => C:\Program Files (x86)\Opera\Opera.exe
Task: {1EC122BA-C536-430F-8C35-6F86ECC39FF0} - System32\Tasks\{494A9B35-6058-4C19-A20A-E1DCE48F0786} => C:\Program Files (x86)\Opera\Opera.exe
Task: {217D3CDB-3FEF-4F4E-9156-02BFFFAAE60A} - System32\Tasks\{1CB8B36D-FC19-4546-8C7C-611AF21AD7E1} => pcalua.exe -a C:\ProgramData\Wizard101(DE)\Wizard101.exe -d C:\ProgramData\Wizard101(DE)
Task: {2572CB5E-1A7C-46F1-85B1-B62F4A17C417} - System32\Tasks\{1FBC4539-2901-4DDB-9D2F-862065494E88} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {27618943-30C4-4FBF-94B8-8ACB0A6F7E6D} - System32\Tasks\{0C9C72E9-00D2-49A6-8DF4-DAF367138BD8} => C:\Program Files (x86)\Opera\Opera.exe
Task: {2991A55D-1CD8-403C-B255-0C11A6C837E1} - System32\Tasks\{B261FD97-9C57-4F06-9AD3-4052FA220C1D} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {2B7A7CE2-981F-42D2-8492-CD5D1AF9E827} - System32\Tasks\{B4F0F2F1-B534-4A0D-9DF2-C38AE4C520E9} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {2CCD6124-8AE7-461C-BE80-4B62D3002340} - System32\Tasks\{3D7EEA60-2C2B-478A-9723-F829C43AC6E5} => C:\Program Files (x86)\Opera\Opera.exe
Task: {2CF1D8CF-0EA9-458A-85A8-561D147B6135} - System32\Tasks\{0B628F86-550A-486F-B114-58C62871B721} => C:\Program Files (x86)\Opera\Opera.exe
Task: {310CC0F8-C247-4599-ACFC-F3CD766E6AD5} - System32\Tasks\{FB8C4083-EF27-4416-85FA-D471CEDE5FB4} => C:\Program Files (x86)\Opera\Opera.exe
Task: {38FF6FD9-3BC6-4F09-959F-F2205181E561} - System32\Tasks\ASUS\Cpu Level Up Hook Lanunch => C:\Program Files (x86)\ASUS\AI Suite\CpuLevelUpHookLaunch.exe [2009-12-28] ()
Task: {3B272214-852C-4330-841F-3F9FF4F9CB96} - System32\Tasks\{2B6CE963-FF84-494C-A826-01D80631B926} => C:\Program Files (x86)\Opera\Opera.exe
Task: {4D020374-93EC-4337-92A7-F01F2B25AB76} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-12-23] (Google Inc.)
Task: {517D8EB9-77F1-497E-834A-D1FA240CE073} - System32\Tasks\{027A1301-659D-4B41-8A7F-040B74EBA95D} => C:\Program Files (x86)\Opera\Opera.exe
Task: {518389D1-8CCD-4B86-8F41-B077F9C9C618} - System32\Tasks\{EDDBD687-D415-4B69-927A-02931F7F1AAE} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {51BFF5FC-5BC5-4DEE-9099-827B8BFB3632} - System32\Tasks\{8383930E-67E3-4379-A09D-4E59914B6389} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {5244B6B7-C2C2-416A-8955-6F2586705863} - System32\Tasks\{54F5669B-1BD5-4394-89D5-A6EFBA584ACD} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {5250B132-6E5B-47AC-BB16-E9815CC9A9C0} - System32\Tasks\{CAF62C3C-79A4-4066-B1CD-4E0DF30564F9} => pcalua.exe -a "C:\Program Files (x86)\Hotspot Shield\bin\HssInstaller.exe" -d "C:\Program Files (x86)\Hotspot Shield\bin"
Task: {52E12DE9-93B7-4E4B-85D1-DD2EDCEBE48A} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
Task: {562A50BF-2E54-45F4-9077-473F7A049562} - System32\Tasks\{6310026B-3E16-4E78-998C-7F30496D8899} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {571A9041-6AA5-4836-BA2B-534C9EB85DCE} - System32\Tasks\{D319D8AB-8433-493A-84FA-D1698EDEAFCE} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {577E3FA9-79BA-4694-AE4C-9B609E38C0E9} - System32\Tasks\{DE38B5D4-C035-40D9-848C-B966145964A9} => C:\Program Files (x86)\Opera\Opera.exe
Task: {5AEBC49C-BCC7-4EC1-8951-9B299633E773} - System32\Tasks\{9E9AC548-DCCB-4B5B-9EDB-0E52B9DE5627} => C:\Program Files (x86)\Opera\Opera.exe
Task: {5BE38A7A-4925-497C-82F3-A330FC280BC4} - System32\Tasks\{949BCCD7-1397-41DE-9EF8-11EE2C0CE563} => C:\Program Files (x86)\Opera\Opera.exe
Task: {5C099198-A578-4EEC-92B4-6417465170A1} - System32\Tasks\{41F9C8B0-D0DD-4377-9D24-69E831D0CF7A} => C:\Program Files (x86)\Opera\Opera.exe
Task: {5C4A49C0-89DE-4238-8F91-64CFBFBAEE53} - System32\Tasks\{BB6E67DE-783D-4A31-8585-E7CAEC52E5AA} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {60553E3D-46C1-4E1E-A947-FA9307DD2C8C} - System32\Tasks\{74F988AC-9E60-40C7-8D90-CFECFAEE92E1} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {627CECAB-2B8F-4A2E-92B9-B140446FE0EC} - System32\Tasks\{90038331-2672-47E4-99D2-E9ECCB36DC14} => C:\Program Files (x86)\Opera\Opera.exe
Task: {6D6DF3D0-D45F-4F6F-B07C-E1FBBD6FD0B9} - System32\Tasks\{59008250-33FF-402A-82FD-577C388040C8} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {717B3FF7-1A14-47F6-8B46-91A57AD183CA} - System32\Tasks\{1FB7ED02-0BF3-4694-A643-44D549B5C376} => C:\Program Files (x86)\Opera\Opera.exe
Task: {722A80F7-B367-438E-82D6-607B2AAE2AD5} - System32\Tasks\{0D1B66EB-8E6C-4941-A849-C02CAA677C49} => C:\Program Files (x86)\Opera\Opera.exe
Task: {7352E960-C7B0-45FE-A83F-F87B5AA6E651} - System32\Tasks\{5F44ABCA-6526-4396-A179-A30F6651B4A5} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {740EE1F2-3BC5-4CD5-B694-A5FE540D3E9E} - System32\Tasks\{F6171EAE-04B0-4030-B64B-4B9DF15D3273} => C:\Program Files (x86)\Opera\Opera.exe
Task: {7461D4F0-EA41-4211-B75D-45216A8E1438} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-12-23] (Google Inc.)
Task: {76B86268-4206-4908-ADA8-A9FA15A4F610} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-10-07] (Oracle Corporation)
Task: {7A0C2EDE-2AF3-40D3-8E5E-AC91914B9348} - System32\Tasks\{36BD8F26-454A-45A7-98BC-D772130BD6D1} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7CBDBD19-6CA0-43C5-95A3-B5B0B50A01DB} - System32\Tasks\{B117D272-C5AF-4E62-9F8E-DA7E6CE8FF4E} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7EF615A3-395A-4B8F-AF0B-D79B49D3A554} - System32\Tasks\{064550D4-D75D-402D-AB32-91E23A58D5F4} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {821856F1-ED6B-4965-84E5-2519F0D73FB5} - System32\Tasks\{8424C4DF-A4EC-4B5B-814E-60CE8AB30940} => C:\Program Files (x86)\Opera\Opera.exe
Task: {82F5E65C-C34C-4E7A-BA2B-3EC5834D6E13} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-21] (Adobe Systems Incorporated)
Task: {86715FE4-085D-43AB-A67D-906AB668D4A7} - System32\Tasks\{D1BFDBF2-DEA8-4BB9-8474-3A446710C951} => C:\Program Files (x86)\Opera\Opera.exe
Task: {878AA624-33EF-4ADA-BD3A-0D7BEA46656B} - System32\Tasks\{11EE2B2D-9A84-413C-B65A-30FADFE1F4C1} => C:\Program Files (x86)\Opera\Opera.exe
Task: {8A24C11B-1434-4888-BB67-DA4035986E85} - System32\Tasks\{8F6BCC5D-9E79-4A90-A52C-B05FBD3A95EA} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {8B9B1B73-C0C4-48B0-A910-7D63871A1890} - System32\Tasks\{CE6A2A80-3982-406F-916F-BF44A1FE93BE} => C:\Program Files (x86)\Opera\Opera.exe
Task: {8C5EA5CA-2168-47C9-A8AD-8D8F8CD43494} - System32\Tasks\{3096790B-F753-40DE-BBBD-C96814C19276} => C:\Program Files (x86)\Opera\Opera.exe
Task: {8D278482-A7C4-4259-B172-CD56F7F3242B} - System32\Tasks\{C307734E-4CEF-40E7-BB76-67E38AFE3245} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {8FB0CF65-18EC-4D9E-84EA-E0C2E70B609A} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe
Task: {9034EE4A-EF7C-4EBC-B8FB-59A0E30DCDCB} - System32\Tasks\{B7D832C7-A1D4-449B-AFB7-35A7D5308265} => C:\Program Files (x86)\Opera\Opera.exe
Task: {9173C9BE-02B5-4B2E-9CDD-85959BAC8FE8} - System32\Tasks\{AA084653-E62A-4321-85C7-E1F14B703E3B} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {92D5F453-D605-4376-BBAF-560DCBF5179E} - System32\Tasks\{08F83017-CD43-415F-BAC5-1B6099D399DE} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {9455CECE-75DF-4B1C-8F1C-9D6F22BAF9EE} - System32\Tasks\{1C451F35-6BB4-4E64-9D44-83DA1235BD66} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {97E4E16D-3E9D-4441-B88C-F8DAD136D5AC} - System32\Tasks\Driver Booster SkipUAC (SYSTEM) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
Task: {9B836882-C9AA-46BA-A2BA-B2FBC31A7D1B} - System32\Tasks\{402ED0EB-55E1-49BC-85FF-B611C38007C2} => C:\Program Files (x86)\Opera\Opera.exe
Task: {9DEE72AF-EDDE-4210-860C-D59F8CE425A5} - System32\Tasks\{FEE95010-E0AC-4F29-89EB-CC1D42B7322D} => C:\Program Files (x86)\Opera\Opera.exe
Task: {A5971EB2-865A-4144-B663-DC582061EE03} - System32\Tasks\{2EB349E6-0751-41BC-9F7E-301AC1E05B93} => C:\Program Files (x86)\Opera\Opera.exe
Task: {A6148E12-0291-4995-AF46-E06D84208F64} - System32\Tasks\{CE3CDE01-297E-4503-BDBC-F6BFCA06FC5A} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {A67DF276-6D87-4B90-9873-2A2EA8FCE1CB} - System32\Tasks\{F14CFAC1-DBF2-4360-95C4-B2F2F9DB35E4} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {AA1BFF9B-0E49-4EB7-B267-2C7CB4A2ED1E} - System32\Tasks\{9276B961-43E2-4972-B3AD-25EACD24D008} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {B1677E31-93D0-47CC-AC29-7D496732B34B} - System32\Tasks\{6933359E-E599-4364-BEFF-153E2C84ECF1} => C:\Program Files (x86)\Opera\Opera.exe
Task: {B23234F8-1783-4601-B17A-A749DC43B32C} - System32\Tasks\{CF201C0D-902D-45EC-AB8B-441B32C49B96} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {B39E32F9-A4EE-4F1C-AD43-1AFF1EC66810} - System32\Tasks\{520D24F2-56D5-4A8F-A89D-4396E1298D0E} => C:\Program Files (x86)\Opera\Opera.exe
Task: {B43C1327-9D38-4105-BA3A-C7AC2DC0A854} - System32\Tasks\ASUS\ASUS Update Checker => C:\Program Files (x86)\ASUS\ASUSUpdate\UpdateChecker\UpdateChecker.exe [2009-12-28] (ASUSTeK Computer Inc.)
Task: {B4CB886A-F99C-4F83-B319-AC5B4339BAFC} - System32\Tasks\{74BC537C-1377-401A-9CBD-EC70A4E00FE6} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {B4D142B4-4AB8-4B95-912F-FA662BCB5F05} - System32\Tasks\{816E19F8-6746-42E8-825E-C00C9D8CFF94} => C:\Program Files (x86)\Opera\Opera.exe
Task: {B4F576A8-5746-40C0-878D-8D298BD66F25} - System32\Tasks\{15AA7614-5DDE-4F02-8A19-A95EC0A1D51D} => C:\Program Files (x86)\Opera\Opera.exe
Task: {B8266606-848E-4C36-BA78-1D86A62F2B77} - System32\Tasks\{24C3BC9D-CAFC-4292-BD2A-FFCF0B425D08} => C:\Program Files (x86)\Opera\Opera.exe
Task: {BB7D82FD-251B-4EF7-B078-D7DCE617D964} - System32\Tasks\{8FC938EB-7EAF-4A34-BC9D-AE2F5778B1B1} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {BE835B87-3BC8-4D2F-98F4-08EA1738769B} - System32\Tasks\{9A921854-22BF-4FF6-917B-1529CCCD96DB} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {BF14D3C2-045B-46CA-95BA-E54E71AA5EE8} - System32\Tasks\{FE9E2570-3D08-4423-AFC3-5C7948AE63B6} => C:\Program Files (x86)\Opera\Opera.exe
Task: {CBB4538C-70A1-4630-8661-5D84D95409E7} - System32\Tasks\{7A14CB27-EE0B-47F1-B055-77F01B48DBC9} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {CE491649-14B0-4AE2-AF71-9B80E2717EDE} - System32\Tasks\{9A3B38A4-E24C-4CA3-836B-B69E7E5C4A8F} => C:\Program Files (x86)\Opera\Opera.exe
Task: {D3A08372-F9B6-4E87-B367-CF2D04F990A2} - System32\Tasks\{C58F335D-256C-447C-8F92-0D21522B0AE2} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {D3ABB6D7-9F40-4E4A-B2B6-72AB46A050F7} - System32\Tasks\{83D83B71-6311-4584-B276-FEF554406168} => C:\Program Files (x86)\Opera\Opera.exe
Task: {D51CC9D5-F8A0-48CA-AF21-4E3C1E57E18A} - System32\Tasks\{E3BA121A-6110-46E2-B350-F190E39F142A} => C:\Program Files (x86)\Opera\Opera.exe
Task: {D55EA148-E054-4415-97C3-733D26CAD4E3} - System32\Tasks\{7B2D31C4-B94E-459C-9AB9-7BA5A6885752} => C:\Program Files (x86)\Opera\Opera.exe
Task: {D68AFE80-D806-4B03-8AF8-0D69B8F3266F} - System32\Tasks\{C0804A57-189E-4D52-A8D5-914BE6EC38F9} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {D9F0C0DA-2D8C-45BC-8EB1-746DAD06A5AA} - System32\Tasks\{178B6CBE-CD97-4A87-A91B-79970D345AA5} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {DE9B3A77-0437-4DAC-A2F6-1C4095755D50} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {DF647FC5-023B-433B-A122-FD19ECBBFB86} - System32\Tasks\{6B5908DA-E475-496F-9C03-92B7931F8B4E} => C:\Program Files (x86)\Opera\Opera.exe
Task: {E605C0CD-CF58-4517-9803-90D6F64981E6} - System32\Tasks\{CC42283F-627B-42E6-B065-74187AD2AC1E} => C:\Program Files (x86)\Opera\Opera.exe
Task: {E6FF23C5-E38B-446E-8E9D-335C6AF909D1} - System32\Tasks\{174B23CD-95AE-408F-A856-1370A9D536E1} => C:\Program Files (x86)\Opera\Opera.exe
Task: {E709A72E-20A0-408C-8C71-C6281C3A9E2C} - System32\Tasks\{A7B59FCB-77B6-43A8-B48C-A4408A63A05C} => C:\Program Files (x86)\Opera\Opera.exe
Task: {E966568A-61B6-46C0-81ED-FD8F48DFB1A5} - System32\Tasks\{3EF7DE06-5206-4DE0-8481-16D004F97BC7} => C:\Program Files (x86)\Opera\Opera.exe
Task: {EA7EC79F-EE05-40AC-A1AA-EF8F38EE1D94} - System32\Tasks\{0E7C6814-82A5-4652-86AF-0257E8E200B0} => C:\Program Files (x86)\Opera\Opera.exe
Task: {ED2C4059-C99A-478E-AFB7-A89311EE1AF3} - System32\Tasks\ASUS\ASUS RegRun Loader => C:\Program Files (x86)\ASUS\AASP\1.01.12\AsLoader.exe [2010-01-13] (ASUSTeK Computer Inc.)
Task: {EE65A338-E67D-4F14-B674-5CBA24CD1AF1} - System32\Tasks\{3FE25692-2DF1-4C8A-83BD-5C0938957293} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {F20A80F0-766A-4B7F-98DD-6229DA061883} - System32\Tasks\{6ABFC70E-5286-4F62-8D85-3DB5C7E96535} => C:\Program Files (x86)\Opera\Opera.exe
Task: {FAD1D3B7-6A37-47D3-839D-81888361D8DA} - System32\Tasks\{C4DCDE58-2889-4887-A3A8-759819CB3B00} => C:\Program Files (x86)\Opera\Opera.exe
Task: {FBD60A63-97EE-4455-A187-75DD221AC9B9} - System32\Tasks\{B55E87D1-7DD5-45F3-839C-11D9E63BACE7} => Firefox.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {FDA4DAEA-5188-46B1-8E30-64BB76D227AC} - System32\Tasks\{EF6CA142-96C0-4D8A-B1B8-DF46DCB79231} => C:\Program Files (x86)\Opera\Opera.exe
Task: {FE7BAC5A-F911-419A-A23E-1A2FA331CB95} - System32\Tasks\{4C1D5CDD-8AE5-4025-923B-71D4C96C9F47} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {FFBA2F6D-660A-4E9F-984C-78AD46ACDCD5} - System32\Tasks\{87B307EE-CC62-4781-8900-89C379B24C05} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DriverEasy Scheduled Scan.job => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2014-05-01 15:13 - 2014-05-01 15:13 - 00470016 _____ () C:\ProgramData\MEGAsync\ShellExtX64.dll
2012-12-17 17:14 - 2012-12-17 17:14 - 00954848 _____ () C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll
2014-05-01 15:15 - 2014-05-01 15:15 - 00463360 _____ () C:\ProgramData\MEGAsync\ShellExtX32.dll
2014-12-23 17:31 - 2014-12-06 02:50 - 09009480 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\pdf.dll
2014-12-23 17:31 - 2014-12-06 02:50 - 01677128 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\ffmpegsumo.dll
2014-12-25 15:38 - 2014-02-10 12:44 - 04592128 _____ () C:\Users\Issam276\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libglesv2.dll
2014-12-25 15:38 - 2014-02-10 12:44 - 00112128 _____ () C:\Users\Issam276\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libegl.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2"
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
MSCONFIG\Services: Apple Mobile Device => 2
MSCONFIG\Services: BEService => 3
MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: CGVPNCliService => 2
MSCONFIG\Services: EslWireHelper => 2
MSCONFIG\Services: Hamachi2Svc => 2
MSCONFIG\Services: hshld => 2
MSCONFIG\Services: HssTrayService => 3
MSCONFIG\Services: HssWd => 2
MSCONFIG\Services: iPod Service => 3
MSCONFIG\Services: LBTServ => 3
MSCONFIG\Services: LiveUpdateSvc => 2
MSCONFIG\Services: OkayFreedom VPN Starter Service => 2
MSCONFIG\Services: OverwolfUpdaterService => 3
MSCONFIG\Services: RalinkRegistryWriter => 2
MSCONFIG\Services: RalinkRegistryWriter64 => 2
MSCONFIG\Services: RaMediaServer => 2
MSCONFIG\Services: SearchAnonymizer => 2
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: TeamViewer8 => 2
MSCONFIG\Services: TeamViewer9 => 2
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: hpqSRMon => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
MSCONFIG\startupreg: Spotify => "C:\Users\Issam276\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Issam276\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\steam.exe" -silent
========================= Accounts: ==========================
Administrator (S-1-5-21-1925287450-1312797874-627100175-500 - Administrator - Disabled)
Gast (S-1-5-21-1925287450-1312797874-627100175-501 - Limited - Disabled) => C:\Users\Gast
HomeGroupUser$ (S-1-5-21-1925287450-1312797874-627100175-1002 - Limited - Enabled)
Issam276 (S-1-5-21-1925287450-1312797874-627100175-1001 - Administrator - Enabled) => C:\Users\Issam276
==================== Faulty Device Manager Devices =============
Name: Security Processor Loader Driver
Description: Security Processor Loader Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: spldr
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Event log errors: =========================
Application errors:
==================
Error: (12/25/2014 05:51:58 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (12/25/2014 04:44:02 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\wbem\wmiprvse.exe; Beschreibung = Installed AMD PCI IDE Controller.zip by DriverEasy; Fehler = 0x8007043c).
Error: (12/25/2014 04:35:05 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (12/25/2014 04:31:09 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Users\Issam276\AppData\Local\Temp\Rar$EXa0.743\Install_Win7_7090_11252014\setup.exe ; Beschreibung = Installiert Realtek Ethernet Controller Driver; Fehler = 0x8007043c).
Error: (12/25/2014 03:32:59 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/25/2014 03:21:06 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/25/2014 01:06:10 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: a2service.exe, Version: 9.0.0.4783, Zeitstempel: 0x5474cf54
Name des fehlerhaften Moduls: fw32.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x54694215
Ausnahmecode: 0xc0000005
Fehleroffset: 0x72bc477d
ID des fehlerhaften Prozesses: 0x434
Startzeit der fehlerhaften Anwendung: 0xa2service.exe0
Pfad der fehlerhaften Anwendung: a2service.exe1
Pfad des fehlerhaften Moduls: a2service.exe2
Berichtskennung: a2service.exe3
Error: (12/23/2014 09:20:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: BoL Studio.exe, Version: 0.0.0.0, Zeitstempel: 0x53ebcd62
Name des fehlerhaften Moduls: BoL Studio.exe, Version: 0.0.0.0, Zeitstempel: 0x53ebcd62
Ausnahmecode: 0xc0000409
Fehleroffset: 0x0000cf4f
ID des fehlerhaften Prozesses: 0x1678
Startzeit der fehlerhaften Anwendung: 0xBoL Studio.exe0
Pfad der fehlerhaften Anwendung: BoL Studio.exe1
Pfad des fehlerhaften Moduls: BoL Studio.exe2
Berichtskennung: BoL Studio.exe3
Error: (12/23/2014 07:26:49 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SpotifyWebHelper.exe, Version: 0.9.15.27, Zeitstempel: 0x54803b75
Name des fehlerhaften Moduls: SpotifyWebHelper.exe, Version: 0.9.15.27, Zeitstempel: 0x54803b75
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00012397
ID des fehlerhaften Prozesses: 0xb70
Startzeit der fehlerhaften Anwendung: 0xSpotifyWebHelper.exe0
Pfad der fehlerhaften Anwendung: SpotifyWebHelper.exe1
Pfad des fehlerhaften Moduls: SpotifyWebHelper.exe2
Berichtskennung: SpotifyWebHelper.exe3
System errors:
=============
Error: (12/25/2014 05:52:21 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1084defragsvc{D20A3293-3341-4AE8-9AAF-8E397CB63C34}
Error: (12/25/2014 04:32:13 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (12/25/2014 04:32:13 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (12/25/2014 04:32:13 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (12/25/2014 04:32:12 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (12/25/2014 04:32:09 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (12/25/2014 04:32:09 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (12/25/2014 04:32:09 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (12/25/2014 04:32:02 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (12/25/2014 04:32:02 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Microsoft Office Sessions:
=========================
Error: (12/25/2014 05:51:58 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe
Error: (12/25/2014 04:44:02 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: C:\Windows\system32\wbem\wmiprvse.exeInstalled AMD PCI IDE Controller.zip by DriverEasy0x8007043c
Error: (12/25/2014 04:35:05 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Issam276\Downloads\esetsmartinstaller_deu.exe
Error: (12/25/2014 04:31:09 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: C:\Users\Issam276\AppData\Local\Temp\Rar$EXa0.743\Install_Win7_7090_11252014\setup.exe Installiert Realtek Ethernet Controller Driver0x8007043c
Error: (12/25/2014 03:32:59 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/25/2014 03:21:06 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/25/2014 01:06:10 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: a2service.exe9.0.0.47835474cf54fw32.dll_unloaded0.0.0.054694215c000000572bc477d43401d01ecb15711921C:\Program Files (x86)\Emsisoft Internet Security\a2service.exefw32.dlld459cba0-8bc9-11e4-bc70-5404a612ad7a
Error: (12/23/2014 09:20:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: BoL Studio.exe0.0.0.053ebcd62BoL Studio.exe0.0.0.053ebcd62c00004090000cf4f167801d01eedb7174746C:\Users\Issam276\Desktop\sadsdasda\BoL Studio.exeC:\Users\Issam276\Desktop\sadsdasda\BoL Studio.exe11e2d658-8ae1-11e4-bc70-5404a612ad7a
Error: (12/23/2014 07:26:49 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: SpotifyWebHelper.exe0.9.15.2754803b75SpotifyWebHelper.exe0.9.15.2754803b75c000000500012397b7001d01ecb221fced9C:\Users\Issam276\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exeC:\Users\Issam276\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe41edc2fc-8ad1-11e4-bc70-5404a612ad7a
CodeIntegrity Errors:
===================================
Date: 2014-11-30 20:57:24.409
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-11-30 20:57:24.253
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-06-29 09:37:48.936
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-06-29 09:37:48.935
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-06-29 09:37:48.934
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-06-29 09:37:48.916
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-06-29 09:37:48.915
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-06-29 09:37:48.913
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-06-28 19:42:21.884
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-06-28 19:42:21.883
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Processor: AMD FX(tm)-4100 Quad-Core Processor
Percentage of memory in use: 23%
Total physical RAM: 8174.12 MB
Available physical RAM: 6219.1 MB
Total Pagefile: 16346.41 MB
Available Pagefile: 14682.19 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB
==================== Drives ================================
Drive c: (System) (Fixed) (Total:921.75 GB) (Free:734.52 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: B2544B2F)
Partition 1: (Not Active) - (Size=9.8 GB) - (Type=27)
Partition 2: (Active) - (Size=921.7 GB) - (Type=07 NTFS)
==================== End Of Log ============================
So, hab Google Chrome deinstalliert, kam aber nach wie vor das Problem, bloß mit einer etwas veränderten Fehlermeldung. Code:
fwndis64.sys fwndis64.sys+3b2a fffff880`02c00000 fffff880`02c79000 0x00079000 0x549958e6 23.12.2014 12:58:30
ntoskrnl.exe ntoskrnl.exe+f20d4 fffff800`0340e000 fffff800`039f3000 0x005e5000 0x531590fb 04.03.2014 09:38:19 Microsoft® Windows® Operating System NT Kernel & System 6.1.7601.18409 (win7sp1_gdr.140303-2144) Microsoft Corporation C:\Windows\system32\ntoskrnl.exe
hal.dll fffff800`039f3000 fffff800`03a3c000 0x00049000 0x4ce7c669 20.11.2010 14:00:25
kdcom.dll fffff800`00bb3000 fffff800`00bbd000 0x0000a000 0x4d4d8061 05.02.2011 17:52:49
mcupdate_AuthenticAMD.dll fffff880`00c75000 fffff880`00c82000 0x0000d000 0x4a5bdf65 14.07.2009 02:29:09
PSHED.dll fffff880`00c82000 fffff880`00c96000 0x00014000 0x4a5be027 14.07.2009 02:32:23 Betriebssystem Microsoft® Windows® Plattformspezifischer Hardwarefehlertreiber 6.1.7600.16385 (win7_rtm.090713-1255) Microsoft Corporation C:\Windows\system32\PSHED.dll
CLFS.SYS fffff880`00c96000 fffff880`00cf4000 0x0005e000 0x4a5bc11d 14.07.2009 00:19:57
CI.dll fffff880`00cf4000 fffff880`00db4000 0x000c0000 0x4ce7c944 20.11.2010 14:12:36
Wdf01000.sys fffff880`00e05000 fffff880`00ec7000 0x000c2000 0x51c51641 22.06.2013 04:13:05
WDFLDR.SYS fffff880`00ec7000 fffff880`00ed7000 0x00010000 0x5010ab70 26.07.2012 03:29:04
ACPI.sys fffff880`00ed7000 fffff880`00f2e000 0x00057000 0x4ce79294 20.11.2010 10:19:16
WMILIB.SYS fffff880`00f2e000 fffff880`00f37000 0x00009000 0x4a5bc117 14.07.2009 00:19:51
msisadrv.sys fffff880`00f37000 fffff880`00f41000 0x0000a000 0x4a5bc0fe 14.07.2009 00:19:26
pci.sys fffff880`00f41000 fffff880`00f74000 0x00033000 0x4ce7928f 20.11.2010 10:19:11
vdrvroot.sys fffff880`00f74000 fffff880`00f81000 0x0000d000 0x4a5bcadb 14.07.2009 01:01:31
partmgr.sys fffff880`00f81000 fffff880`00f96000 0x00015000 0x4f641bc1 17.03.2012 06:06:09
volmgr.sys fffff880`00f96000 fffff880`00fab000 0x00015000 0x4ce792a0 20.11.2010 10:19:28
volmgrx.sys fffff880`00c00000 fffff880`00c5c000 0x0005c000 0x4ce792eb 20.11.2010 10:20:43
pciide.sys fffff880`00fab000 fffff880`00fb2000 0x00007000 0x4a5bc115 14.07.2009 00:19:49
PCIIDEX.SYS fffff880`00fb2000 fffff880`00fc2000 0x00010000 0x4a5bc114 14.07.2009 00:19:48
mountmgr.sys fffff880`00fc2000 fffff880`00fdc000 0x0001a000 0x4ce79299 20.11.2010 10:19:21
atapi.sys fffff880`00fdc000 fffff880`00fe5000 0x00009000 0x4a5bc113 14.07.2009 00:19:47
ataport.SYS fffff880`00db4000 fffff880`00dde000 0x0002a000 0x51fef9b5 05.08.2013 02:02:45
amd_sata.sys fffff880`00fe5000 fffff880`00ffd000 0x00018000 0x5077e774 12.10.2012 10:48:36
storport.sys fffff880`010df000 fffff880`01143000 0x00064000 0x52f04432 04.02.2014 02:36:50
amd_xata.sys fffff880`01143000 fffff880`01151000 0x0000e000 0x5077e777 12.10.2012 10:48:39
amdsata.sys fffff880`01151000 fffff880`0116f000 0x0001e000 0x4ba2c91d 19.03.2010 01:45:17
amdxata.sys fffff880`0116f000 fffff880`0117a000 0x0000b000 0x4ba3a3ca 19.03.2010 17:18:18
fltmgr.sys fffff880`0117a000 fffff880`011c6000 0x0004c000 0x4ce7929c 20.11.2010 10:19:24
fileinfo.sys fffff880`011c6000 fffff880`011da000 0x00014000 0x4a5bc481 14.07.2009 00:34:25
Ntfs.sys fffff880`0124d000 fffff880`013f6000 0x001a9000 0x52e1be8a 24.01.2014 02:14:50
msrpc.sys fffff880`01000000 fffff880`0105e000 0x0005e000 0x4ce79334 20.11.2010 10:21:56
ksecdd.sys fffff880`01200000 fffff880`0121b000 0x0001b000 0x5348920e 12.04.2014 02:08:30
cng.sys fffff880`0105e000 fffff880`010d0000 0x00072000 0x50194fb7 01.08.2012 16:48:07
pcw.sys fffff880`0121b000 fffff880`0122c000 0x00011000 0x4a5bc0ff 14.07.2009 00:19:27
Fs_Rec.sys fffff880`0122c000 fffff880`01236000 0x0000a000 0x4f4eefd2 01.03.2012 04:41:06
ndis.sys fffff880`014c9000 fffff880`015bb000 0x000f2000 0x5034f6b2 22.08.2012 16:11:46
NETIO.SYS fffff880`01400000 fffff880`01460000 0x00060000 0x5294760d 26.11.2013 11:21:01
ksecpkg.sys fffff880`01460000 fffff880`0148c000 0x0002c000 0x543c7790 14.10.2014 02:08:32
tcpip.sys fffff880`01601000 fffff880`01800000 0x001ff000 0x533f5bd4 05.04.2014 02:26:44
fwpkclnt.sys fffff880`0182c000 fffff880`01875000 0x00049000 0x533f5b09 05.04.2014 02:23:21
volsnap.sys fffff880`01875000 fffff880`018c1000 0x0004c000 0x4ce792c8 20.11.2010 10:20:08
spldr.sys fffff880`018c1000 fffff880`018c9000 0x00008000 0x4a0858bb 11.05.2009 17:56:27
rdyboost.sys fffff880`018c9000 fffff880`01903000 0x0003a000 0x4ce7982e 20.11.2010 10:43:10
mup.sys fffff880`01903000 fffff880`01915000 0x00012000 0x4a5bc201 14.07.2009 00:23:45
hwpolicy.sys fffff880`01915000 fffff880`0191e000 0x00009000 0x4ce7927e 20.11.2010 10:18:54
fvevol.sys fffff880`0191e000 fffff880`01958000 0x0003a000 0x5100a65c 24.01.2013 04:11:24
disk.sys fffff880`01958000 fffff880`0196e000 0x00016000 0x4a5bc11d 14.07.2009 00:19:57
CLASSPNP.SYS fffff880`0196e000 fffff880`0199e000 0x00030000 0x4ce7929b 20.11.2010 10:19:23
cdrom.sys fffff880`019d4000 fffff880`019fe000 0x0002a000 0x4ce79298 20.11.2010 10:19:20
a2dix64.sys fffff880`01800000 fffff880`0180f000 0x0000f000 0x5221c6af 31.08.2013 11:34:23
Null.SYS fffff880`0180f000 fffff880`01818000 0x00009000 0x4a5bc109 14.07.2009 00:19:37
Beep.SYS fffff880`01818000 fffff880`0181f000 0x00007000 0x4a5bca8d 14.07.2009 01:00:13
vga.sys fffff880`0148c000 fffff880`0149a000 0x0000e000 0x4a5bc587 14.07.2009 00:38:47
VIDEOPRT.SYS fffff880`0149a000 fffff880`014bf000 0x00025000 0x4a5bc58b 14.07.2009 00:38:51
watchdog.sys fffff880`015bb000 fffff880`015cb000 0x00010000 0x4a5bc53f 14.07.2009 00:37:35
RDPCDD.sys fffff880`0181f000 fffff880`01828000 0x00009000 0x4a5bce62 14.07.2009 01:16:34
rdpencdd.sys fffff880`015cb000 fffff880`015d4000 0x00009000 0x4a5bce62 14.07.2009 01:16:34
rdprefmp.sys fffff880`015d4000 fffff880`015dd000 0x00009000 0x4a5bce63 14.07.2009 01:16:35
Msfs.SYS fffff880`015dd000 fffff880`015e8000 0x0000b000 0x4a5bc113 14.07.2009 00:19:47
Npfs.SYS fffff880`015e8000 fffff880`015f9000 0x00011000 0x4a5bc114 14.07.2009 00:19:48
tdx.sys fffff880`011da000 fffff880`011fc000 0x00022000 0x54616a72 11.11.2014 02:46:26
TDI.SYS fffff880`01236000 fffff880`01243000 0x0000d000 0x4ce7933e 20.11.2010 10:22:06
afd.sys fffff880`03eb7000 fffff880`03f40000 0x00089000 0x5388291c 30.05.2014 07:45:48
netbt.sys fffff880`03f40000 fffff880`03f85000 0x00045000 0x4ce79386 20.11.2010 10:23:18
ws2ifsl.sys fffff880`03f85000 fffff880`03f90000 0x0000b000 0x4a5bccf9 14.07.2009 01:10:33
wfplwf.sys fffff880`03f90000 fffff880`03f99000 0x00009000 0x4a5bccb6 14.07.2009 01:09:26
pacer.sys fffff880`03f99000 fffff880`03fbf000 0x00026000 0x4ce7a862 20.11.2010 11:52:18
anodlwfx.sys fffff880`03fbf000 fffff880`03fc8000 0x00009000 0x49b0f680 06.03.2009 11:10:08
vwififlt.sys fffff880`03fc8000 fffff880`03fde000 0x00016000 0x4a5bcc3a 14.07.2009 01:07:22
hssdrv6.sys fffff880`03fde000 fffff880`03ff8000 0x0001a000 0x5376cad1 17.05.2014 03:34:57
netbios.sys fffff880`03e00000 fffff880`03e0f000 0x0000f000 0x4a5bccb6 14.07.2009 01:09:26
serial.sys fffff880`03e0f000 fffff880`03e2c000 0x0001d000 0x4a5bcaa8 14.07.2009 01:00:40
wanarp.sys fffff880`03e2c000 fffff880`03e47000 0x0001b000 0x4ce7a874 20.11.2010 11:52:36
termdd.sys fffff880`03e47000 fffff880`03e5b000 0x00014000 0x4ce7ab0c 20.11.2010 12:03:40
rdbss.sys fffff880`03e5b000 fffff880`03eac000 0x00051000 0x4ce79497 20.11.2010 10:27:51
nsiproxy.sys fffff880`010d0000 fffff880`010dc000 0x0000c000 0x4a5bc15e 14.07.2009 00:21:02
mssmbios.sys fffff880`03eac000 fffff880`03eb7000 0x0000b000 0x4a5bc3be 14.07.2009 00:31:10
fwwfp764.sys fffff880`0426c000 fffff880`042d4000 0x00068000 0x54995909 23.12.2014 12:59:05
discache.sys fffff880`042d4000 fffff880`042e3000 0x0000f000 0x4a5bc52e 14.07.2009 00:37:18
dfsc.sys fffff880`042e3000 fffff880`04301000 0x0001e000 0x4ce79447 20.11.2010 10:26:31
blbdrive.sys fffff880`04301000 fffff880`04312000 0x00011000 0x4a5bc4df 14.07.2009 00:35:59
AsUpIO.sys fffff880`04312000 fffff880`04318000 0x00006000 0x4a515fb2 06.07.2009 03:21:38 C:\Windows\system32\drivers\AsUpIO.sys
AsIO.sys fffff880`04318000 fffff880`0431e000 0x00006000 0x4c7325fe 24.08.2010 02:53:02 C:\Windows\system32\drivers\AsIO.sys
a2util64.sys fffff880`0431e000 fffff880`04328000 0x0000a000 0x537059be 12.05.2014 06:18:54
a2ddax64.sys fffff880`04328000 fffff880`04332000 0x0000a000 0x51396c04 08.03.2013 05:41:40
tunnel.sys fffff880`04332000 fffff880`04358000 0x00026000 0x4ce7a846 20.11.2010 11:51:50
amdppm.sys fffff880`04358000 fffff880`0436d000 0x00015000 0x4a5bc0fd 14.07.2009 00:19:25
atikmpag.sys fffff880`0446d000 fffff880`0450b000 0x0009e000 0x52311556 12.09.2013 02:13:58
atikmdag.sys fffff880`11071000 fffff880`11cf1000 0x00c80000 0x52312203 12.09.2013 03:08:03
dxgkrnl.sys fffff880`11cf1000 fffff880`11de6000 0x000f5000 0x539e411c 16.06.2014 01:58:04
dxgmms1.sys fffff880`11000000 fffff880`11046000 0x00046000 0x5164dc13 10.04.2013 04:27:15
HDAudBus.sys fffff880`11046000 fffff880`1106a000 0x00024000 0x4ce7a65e 20.11.2010 11:43:42
Rt64win7.sys fffff880`0450b000 fffff880`045f4000 0x000e9000 0x53fc2790 26.08.2014 07:22:08
usbohci.sys fffff880`11de6000 fffff880`11df1000 0x0000b000 0x52954db5 27.11.2013 02:41:09
USBPORT.SYS fffff880`04400000 fffff880`04456000 0x00056000 0x52954db7 27.11.2013 02:41:11
usbfilter.sys fffff880`04456000 fffff880`04467000 0x00011000 0x503d6ff0 29.08.2012 02:27:12
usbehci.sys fffff880`0436d000 fffff880`0437f000 0x00012000 0x52954db7 27.11.2013 02:41:11
parport.sys fffff880`0437f000 fffff880`0439c000 0x0001d000 0x4a5bcaa8 14.07.2009 01:00:40
ASACPI.sys fffff880`11df1000 fffff880`11df9000 0x00008000 0x4a5e9f11 16.07.2009 04:31:29
serenum.sys fffff880`045f4000 fffff880`04600000 0x0000c000 0x4a5bcaa1 14.07.2009 01:00:33
wmiacpi.sys fffff880`0439c000 fffff880`043a5000 0x00009000 0x4a5bc3b6 14.07.2009 00:31:02
CompositeBus.sys fffff880`043a5000 fffff880`043b5000 0x00010000 0x4ce7a3ed 20.11.2010 11:33:17
ScreamingBAudio64.sys fffff880`043b5000 fffff880`043c3000 0x0000e000 0x4c2ce468 01.07.2010 19:54:32
portcls.sys fffff880`043c3000 fffff880`04400000 0x0003d000 0x524e1b82 04.10.2013 02:36:02
drmk.sys fffff880`04200000 fffff880`04222000 0x00022000 0x524e24fe 04.10.2013 03:16:30
ks.sys fffff880`04222000 fffff880`04265000 0x00043000 0x4ce7a3f3 20.11.2010 11:33:23
ksthunk.sys fffff880`11df9000 fffff880`11dfe200 0x00005200 0x4a5bca93 14.07.2009 01:00:19
AgileVpn.sys fffff880`00dde000 fffff880`00df4000 0x00016000 0x4a5bccf0 14.07.2009 01:10:24
rasl2tp.sys fffff880`02cfd000 fffff880`02d21000 0x00024000 0x4ce7a872 20.11.2010 11:52:34
ndistapi.sys fffff880`02d21000 fffff880`02d2d000 0x0000c000 0x4a5bccd8 14.07.2009 01:10:00
ndiswan.sys fffff880`02d2d000 fffff880`02d5c000 0x0002f000 0x4ce7a870 20.11.2010 11:52:32
raspppoe.sys fffff880`02d5c000 fffff880`02d77000 0x0001b000 0x4a5bcce9 14.07.2009 01:10:17
raspptp.sys fffff880`02d77000 fffff880`02d98000 0x00021000 0x4ce7a86f 20.11.2010 11:52:31
rassstp.sys fffff880`02d98000 fffff880`02db2000 0x0001a000 0x4a5bccf1 14.07.2009 01:10:25
taphss6.sys fffff880`02db2000 fffff880`02dc0000 0x0000e000 0x5376b077 17.05.2014 01:42:31
kbdclass.sys fffff880`02c79000 fffff880`02c88000 0x0000f000 0x4a5bc116 14.07.2009 00:19:50
mouclass.sys fffff880`02c88000 fffff880`02c97000 0x0000f000 0x4a5bc116 14.07.2009 00:19:50
swenum.sys fffff880`02c97000 fffff880`02c98480 0x00001480 0x4a5bca92 14.07.2009 01:00:18
amdiox64.sys fffff880`02c99000 fffff880`02cad000 0x00014000 0x4b7d5a21 18.02.2010 16:17:53
umbus.sys fffff880`02cad000 fffff880`02cbf000 0x00012000 0x4ce7a695 20.11.2010 11:44:37
usbhub.sys fffff880`05667000 fffff880`056c1000 0x0005a000 0x52954dd0 27.11.2013 02:41:36
NDProxy.SYS fffff880`056c1000 fffff880`056d6000 0x00015000 0x4ce7a864 20.11.2010 11:52:20
AtihdW76.sys fffff880`056d6000 fffff880`056f2000 0x0001c000 0x511d60fd 14.02.2013 23:11:09
RTKVHD64.sys fffff880`05e46000 fffff880`061cd500 0x00387500 0x5278d8fd 05.11.2013 12:39:41
win32k.sys fffff960`000b0000 fffff960`003d2000 0x00322000 0x00000000
Dxapi.sys fffff880`061ce000 fffff880`061da000 0x0000c000 0x4a5bc574 14.07.2009 00:38:28
crashdmp.sys fffff880`061da000 fffff880`061e8000 0x0000e000 0x4a5bcabd 14.07.2009 01:01:01
dump_dumpata.sys fffff880`061e8000 fffff880`061f4000 0x0000c000 0x4a5bc113 14.07.2009 00:19:47
dump_atapi.sys fffff880`061f4000 fffff880`061fd000 0x00009000 0x4a5bc113 14.07.2009 00:19:47
dump_dumpfve.sys fffff880`05e00000 fffff880`05e13000 0x00013000 0x4a5bc18f 14.07.2009 00:21:51
hidusb.sys fffff880`05e13000 fffff880`05e21000 0x0000e000 0x4ce7a665 20.11.2010 11:43:49
HIDCLASS.SYS fffff880`05e21000 fffff880`05e3a000 0x00019000 0x51d3a2f1 03.07.2013 05:05:05
HIDPARSE.SYS fffff880`05e3a000 fffff880`05e42080 0x00008080 0x51d3a2f0 03.07.2013 05:05:04
USBD.SYS fffff880`05e43000 fffff880`05e44e80 0x00001e80 0x52954daf 27.11.2013 02:41:03
mouhid.sys fffff880`056f2000 fffff880`056ff000 0x0000d000 0x4a5bca94 14.07.2009 01:00:20
kbdhid.sys fffff880`056ff000 fffff880`0570d000 0x0000e000 0x4ce7a3f5 20.11.2010 11:33:25
monitor.sys fffff880`0570d000 fffff880`0571b000 0x0000e000 0x4a5bc58c 14.07.2009 00:38:52
TSDDD.dll fffff960`004a0000 fffff960`004aa000 0x0000a000 0x00000000
cdd.dll fffff960`00610000 fffff960`00637000 0x00027000 0x00000000
ATMFD.DLL fffff960`00940000 fffff960`009a1000 0x00061000 0x00000000 Adobe Type Manager Windows NT OpenType/Type 1 Font Driver 5.1 Build 238 Adobe Systems Incorporated C:\Windows\system32\ATMFD.DLL
luafv.sys fffff880`0571b000 fffff880`0573e000 0x00023000 0x4a5bc295 14.07.2009 00:26:13
lltdio.sys fffff880`0573e000 fffff880`05753000 0x00015000 0x4a5bcc92 14.07.2009 01:08:50
nwifi.sys fffff880`05753000 fffff880`057a6000 0x00053000 0x4a5bcc3b 14.07.2009 01:07:23
ndisuio.sys fffff880`057a6000 fffff880`057b9000 0x00013000 0x4ce7a7e0 20.11.2010 11:50:08
rspndr.sys fffff880`057b9000 fffff880`057d1000 0x00018000 0x4a5bcc92 14.07.2009 01:08:50
HTTP.sys fffff880`06233000 fffff880`062fc000 0x000c9000 0x4ce793ce 20.11.2010 10:24:30
bowser.sys fffff880`062fc000 fffff880`0631a000 0x0001e000 0x4d649328 23.02.2011 05:55:04
mpsdrv.sys fffff880`0631a000 fffff880`06332000 0x00018000 0x4a5bcc79 14.07.2009 01:08:25
mrxsmb.sys fffff880`06332000 fffff880`0635f000 0x0002d000 0x4db78226 27.04.2011 03:40:38
mrxsmb10.sys fffff880`0635f000 fffff880`063ad000 0x0004e000 0x4e17c104 09.07.2011 03:46:28
mrxsmb20.sys fffff880`063ad000 fffff880`063d1000 0x00024000 0x4db781e9 27.04.2011 03:39:37
AODDriver2.sys fffff880`06200000 fffff880`06232000 0x00032000 0x4f7d6499 05.04.2012 10:23:37
AODDriver2.sys fffff880`05600000 fffff880`05632000 0x00032000 0x4f8e24b3 18.04.2012 03:19:31
Code:
==================================================
Dump File : 122514-29078-01.dmp
Crash Time : 25.12.2014 18:07:11
Bug Check String : DRIVER_IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x000000d1
Parameter 1 : fffffa80`15e00000
Parameter 2 : 00000000`00000002
Parameter 3 : 00000000`00000000
Parameter 4 : fffff880`02c03b2a
Caused By Driver : fwndis64.sys
Caused By Address : fwndis64.sys+3b2a
File Description :
Product Name :
Company :
File Version :
Processor : x64
Crash Address : ntoskrnl.exe+75bc0
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\Windows\Minidump\122514-29078-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7601
Dump File Size : 279.552
Dump File Time : 25.12.2014 18:08:21
==================================================
Hab danach wieder Chrome installiert
Edit: Problem mit dem Bluescreen behoben, lag tatsächlich an Chrome. Hab nach Chromes Installation Pc neugestartet und plötzlich kam kein Bluescreen mehr.
Soll ich jetzt Eset, Securitycheck und FRST wiederholen?
Ok, nochmal einen Bluescreen gekriegt.
Entweder fwndis64.sys+36a2 oder fwndis64.sys+3b2a
Es lag an Emsisoft. Wusste es von anfang an, wollte es aber nicht glauben. Nachdem ich einen Systemwiederherstellungspunkt genutzt hatte und ich noch immer Bluescreens gekriegt hab, hab ich Emsisoft runtergehauen und voilà! Keine Bluescreens mehr.
Ich werd Emsisoft wieder installieren, wenn ich noch immer Probleme hab, werde ich nen anderen Anti Virus suchen müssen |
FRST 32-Bit | FRST 64-Bit
AdwCleaner auf deinen Desktop.
SecurityCheck und:
