| walter_h | 08.06.2015 17:11 |
Win7: Rechner "hing" nach Kopierversuch großer Dateien, dann chdsk angelaufen
Habe eine Menge *.ts-Datein vom Video-Mitschnitt. Diese Dateien wollte ich aufräumen, da sie über verschiedene externe Disks verteilt waren.
Unter dem Explorer dauerte es gefühlte Ewigkeiten, ein bestimmtes Verzeichnis zu öffnen. Daher habe ich Freecomander verwendet.
Als ich das System kopieren lies und wiederkam. war der Bildschirm dunkel und konnte auch nicht durch Mausbewegung etc. reaktiviert werden. Mir blieb nichts anderes übrig, als lange auf die Ein/Aus-Taste zu drücken.
Hernach kam die Meldung, win wurde nicht richtig heruntergefahren (was ja auch stimmt) und ein chkdsk lief durch - mit etlichen Meldungen. Nach dem Start kam dann auch die Meldung, die outlook.pst würde er nicht finden - obwohl ich Outlook gar nicht angeworfen habe.
Habe dann chkdsk für beide Partitionen (C und D) aufgesetzt und durchlaufen lassen. Die Resultate habe ich über die Ereignisanzeige rausgesucht und gespeichert (bei Bedarf also einblendbar).
Aktuell läuft die Kiste, aber ich habe kein gutes Gefühl, ob nicht vielleicht doch Schadsoftware drauf ist, die sich an das Zerschießen von Dateien macht.
Hier die Log-Dateien von FRST: Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:07-06-2015
Ran by Michael (administrator) on ASUS-NOTEBOOK on 08-06-2015 17:54:50
Running from C:\Users\Michael\Desktop
Loaded Profiles: Michael (Available Profiles: UpdatusUser & Michael & MichaelG & me & tu)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Common Files\Nuance\dgnsvc.exe
(Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\Center\EKAiOHostService.exe
(Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe
(XIMETA, Inc.) C:\Program Files\NDAS\System\ndassvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files\P4G\BatteryLife.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Common Files\Nuance\loggerservice.exe
(Eastman Kodak Company) C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Sonix Technology Co., Ltd.) C:\Windows\vsnp2uvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Promethean Technologies Group Ltd) C:\Program Files\Activ Software\ActivDriver\ActivControl2x64.exe
(syncables, LLC) C:\Program Files (x86)\syncables\syncables desktop\syncables.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\syncables\syncables desktop\jre\bin\javaw.exe
(Flexera Software LLC.) C:\ProgramData\FLEXnet\Connect\11\agent.exe
() C:\Program Files\Activ Software\ActivDriver\ActivMgr.exe
() C:\Users\Michael\AppData\Local\Amazon Music\Amazon Music Helper.exe
(CANON INC.) C:\Program Files (x86)\Canon\ImageTransferUtility\ImageTransferUtility.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(XIMETA, Inc.) C:\Program Files\NDAS\System\ndasmgmt.exe
(Flexera Software LLC.) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(Virage Logic Corporation / Sonic Focus) C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(shbox.de) C:\Program Files (x86)\FreePDF_XP\fpassist.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(Hercules®) C:\Program Files\Hercules\Audio\DJ USB Audio\HDJSeries2CPL.exe
(CANON INC.) C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
(Bose Corporation) C:\Program Files (x86)\SoundTouch\SoundTouchMusicServer\SoundTouch music server.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Numera) C:\Program Files (x86)\BiLink Gateway\GatewaySysTray.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(telegate MEDIA AG) C:\Program Files (x86)\klickTel\Telefon- und Branchenbuch + Rückwärtssuche Herbst 2013\kmon.exe
(telegate MEDIA AG) C:\Program Files (x86)\klickTel\Telefon- und Branchenbuch + Rückwärtssuche Herbst 2013\kstart32.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
() C:\Users\Michael\Desktop\Defogger.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [ASUS WebStorage] => C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe
HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2188904 2011-01-18] (Realtek Semiconductor)
HKLM\...\Run: [snp2uvc] => C:\Windows\vsnp2uvc.exe [909824 2010-01-21] (Sonix Technology Co., Ltd.)
HKLM\...\Run: [Setwallpaper] => c:\programdata\SetWallpaper.cmd
HKLM\...\Run: [ActivControl] => C:\Program Files\Activ Software\ActivDriver\ActivControl2x64.exe [1240944 2010-12-17] (Promethean Technologies Group Ltd)
HKLM-x32\...\Run: [UpdateLBPShortCut] => C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [Nuance PDF Reader-reminder] => C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe [328992 2008-11-03] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-08] (ASUS)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [SonicMasterTray] => C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe [984400 2010-07-10] (Virage Logic Corporation / Sonic Focus)
HKLM-x32\...\Run: [Wireless Console 3] => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536 2010-09-24] ()
HKLM-x32\...\Run: [FreePDF Assistant] => C:\Program Files (x86)\FreePDF_XP\fpassist.exe [371200 2011-02-23] (shbox.de)
HKLM-x32\...\Run: [TkBellExe] => C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [296096 2012-10-04] (RealNetworks, Inc.)
HKLM-x32\...\Run: [EKStatusMonitor] => C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe [2844608 2012-10-15] (Eastman Kodak Company)
HKLM-x32\...\Run: [Hercules DJ Series 2] => C:\Program Files\Hercules\Audio\DJ USB Audio\HDJSeries2CPL.exe [3301272 2012-08-05] (Hercules®)
HKLM-x32\...\Run: [HP Lamp] => "C:\Program Files (x86)\Hewlett-Packard\HP PrecisionScan\PrecisionScan Pro\hplamp.exe"
HKLM-x32\...\Run: [Conime] => %windir%\system32\conime.exe
HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1185112 2010-04-02] (CANON INC.)
HKLM-x32\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe [2068856 2011-10-12] (Flexera Software LLC.)
HKLM-x32\...\Run: [DNS7reminder] => C:\Program Files (x86)\Nuance\NaturallySpeaking13\Ereg\Ereg.exe [325960 2014-05-30] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [SoundTouch Music Server] => C:\Program Files (x86)\SoundTouch\SoundTouchMusicServer\SoundTouch music server.exe [1067008 2014-09-30] (Bose Corporation)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [728312 2015-05-07] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [129272 2015-03-16] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1188984864-3960233233-778719749-1001\...\Run: [Syncables] => C:\Program Files (x86)\syncables\syncables desktop\Syncables.exe [370480 2010-07-19] (syncables, LLC)
HKU\S-1-5-21-1188984864-3960233233-778719749-1001\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [2068856 2011-10-12] (Flexera Software LLC.)
HKU\S-1-5-21-1188984864-3960233233-778719749-1001\...\Run: [Amazon Music] => C:\Users\Michael\AppData\Local\Amazon Music\Amazon Music Helper.exe [5886784 2015-05-07] ()
HKU\S-1-5-21-1188984864-3960233233-778719749-1001\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1403224 2015-04-23] (Garmin Ltd. or its subsidiaries)
HKU\S-1-5-21-1188984864-3960233233-778719749-1001\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x9D000000
HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => "C:\Program Files (x86)\Garmin\Express Tray\tray.exe"
HKU\S-1-5-18\...\RunOnce: [KodakHomeCenter] => C:\Program Files (x86)\Kodak\AiO\Center\AiOHomeCenter.exe [2235840 2012-10-19] (Eastman Kodak Company)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [245872 2013-04-08] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [201576 2013-04-08] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AsusVibeLauncher.lnk [2011-03-02]
ShortcutTarget: AsusVibeLauncher.lnk -> C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Image Transfer Utility.lnk [2014-10-13]
ShortcutTarget: Image Transfer Utility.lnk -> C:\Program Files (x86)\Canon\ImageTransferUtility\ImageTransferUtility.exe (CANON INC.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NDAS Geräte-Manager.lnk [2011-04-16]
ShortcutTarget: NDAS Geräte-Manager.lnk -> C:\Program Files\NDAS\System\ndasmgmt.exe (XIMETA, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Omron BiLink Gateway.lnk [2014-08-25]
ShortcutTarget: Omron BiLink Gateway.lnk -> C:\Windows\Installer\{63041551-16E0-4841-AC48-92A825711C93}\NewShortcut1_8188288DFAC14FF2859A19505BA528D5.exe (Flexera Software LLC)
Startup: C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk [2014-12-07]
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Telefon- und Branchenbuch + Rückwärtssuche Herbst 2013 - Inversmonitor.lnk [2014-08-20]
ShortcutTarget: Telefon- und Branchenbuch + Rückwärtssuche Herbst 2013 - Inversmonitor.lnk -> C:\Program Files (x86)\klickTel\Telefon- und Branchenbuch + Rückwärtssuche Herbst 2013\kmon.exe (telegate MEDIA AG)
Startup: C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Telefon- und Branchenbuch + Rückwärtssuche Herbst 2013 - Schnellstarter.lnk [2014-08-20]
ShortcutTarget: Telefon- und Branchenbuch + Rückwärtssuche Herbst 2013 - Schnellstarter.lnk -> C:\Program Files (x86)\klickTel\Telefon- und Branchenbuch + Rückwärtssuche Herbst 2013\kstart32.exe (telegate MEDIA AG)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1188984864-3960233233-778719749-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1188984864-3960233233-778719749-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox
SearchScopes: HKLM-x32 -> DefaultScope value is missing
SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
SearchScopes: HKU\S-1-5-21-1188984864-3960233233-778719749-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-1188984864-3960233233-778719749-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox
BHO: Dragon Web Extension For Internet Explorer -> {609C0837-8DD3-4F9B-AAC5-446F36BC0353} -> C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\x64\dgnriaie_x64.dll [2014-08-01] (Nuance Communications, Inc.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-22] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-01] (Google Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2012-10-04] (RealPlayer)
BHO-x32: Dragon Web Extension For Internet Explorer -> {609C0837-8DD3-4F9B-AAC5-446F36BC0353} -> C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\dgnriaie.dll [2014-08-01] (Nuance Communications, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-26] (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-22] (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2010-11-10] (Microsoft Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-01] (Google Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-26] (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-01] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-01] (Google Inc.)
Toolbar: HKU\S-1-5-21-1188984864-3960233233-778719749-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-01] (Google Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 0.0.0.0
FireFox:
========
FF ProfilePath: C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\k7mseoh9.default
FF NewTab: about:blank
FF SearchEngineOrder.1: SuchMaschine
FF Homepage: hxxp://www.google.de
FF NetworkProxy: "autoconfig_url", "aasdf"
FF NetworkProxy: "type", 4
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_188.dll [2015-05-13] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: nuance.com/DgnRia2_x86_64 -> C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\x64\npDgnRia2_x64.dll [2014-08-01] (Nuance Communications, Inc.)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_188.dll [2015-05-13] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1207148.dll [2013-12-05] (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-26] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-26] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=15.0.6.14 -> c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll [2012-10-04] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprjplug;version=15.0.6.14 -> c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll [2012-10-04] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll [2012-10-04] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll [2012-10-04] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=15.0.6.14 -> c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll [2012-10-04] (RealPlayer)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-19] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-19] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF Plugin-x32: nuance.com/DgnRia2 -> C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\npDgnRia2.dll [2014-08-01] (Nuance Communications, Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 -> C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll [2010-01-23] (Zeon Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppl3260.dll [2012-10-04] (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprjplug.dll [2012-10-04] (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll [2012-10-04] (RealPlayer)
FF Extension: Avira Browser Safety - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\k7mseoh9.default\Extensions\abs@avira.com [2015-05-29]
FF Extension: WOT - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\k7mseoh9.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-06-05]
FF Extension: Classic Theme Restorer (Customize UI) - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\k7mseoh9.default\Extensions\ClassicThemeRestorer@ArisT2Noia4dev.xpi [2014-05-10]
FF Extension: Ghostery - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\k7mseoh9.default\Extensions\firefox@ghostery.com.xpi [2015-06-01]
FF Extension: TinEye Reverse Image Search - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\k7mseoh9.default\Extensions\tineye@ideeinc.com.xpi [2012-05-24]
FF Extension: NoScript - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\k7mseoh9.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2011-04-15]
FF Extension: Adblock Plus - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\k7mseoh9.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-03-18]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2015-06-03]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2015-06-03]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2015-06-03]
FF HKLM-x32\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012-06-05]
FF HKLM-x32\...\Firefox\Extensions: [{0153E448-190B-4987-BDE1-F256CADA672F}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
Chrome:
=======
CHR Profile: C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avira Browser Safety) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2015-05-03]
CHR Extension: (Bookmark Manager) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-03]
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2012-06-27]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-03]
CHR Extension: (Google Wallet) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-01]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2012-06-05]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [827640 2015-05-07] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [434424 2015-05-07] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [434424 2015-05-07] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1185584 2015-05-07] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [201008 2015-03-16] (Avira Operations GmbH & Co. KG)
R2 DragonLoggerService; C:\Program Files (x86)\Common Files\Nuance\loggerservice.exe [137280 2014-08-01] (Nuance Communications, Inc.)
S3 Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [713736 2015-04-23] (Garmin Ltd. or its subsidiaries)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
S3 Media Center 20 Service; C:\Program Files (x86)\J River\Media Center 20\JRService.exe [397088 2014-12-08] (JRiver, Inc.)
R2 ndassvc; C:\Program Files\NDAS\System\ndassvc.exe [331752 2010-01-13] (XIMETA, Inc.)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S2 ASPI32; No ImagePath
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [152744 2015-05-07] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132120 2015-05-07] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2015-03-17] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [44088 2015-03-17] (Avira Operations GmbH & Co. KG)
S3 cmcusbaudio; C:\Windows\System32\DRIVERS\cmcusbaudio_x64.sys [253632 2013-08-22] ()
S3 cmcusbaudioks; C:\Windows\System32\DRIVERS\cmcusbaudioks_x64.sys [54976 2013-08-22] ()
S3 HDJusbaudio; C:\Windows\System32\DRIVERS\HDJusbaudio_x64.sys [354672 2012-08-07] ( Hercules)
S3 HDJusbaudioks; C:\Windows\System32\DRIVERS\HDJusbaudioks_x64.sys [94064 2012-08-07] ( Hercules)
R3 jrvad_service; C:\Windows\System32\drivers\JRiverWDMDriver.sys [36872 2014-12-08] (JRiver, Inc.)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-21] ( )
R0 lfsfilt; C:\Windows\System32\DRIVERS\lfsfilt.sys [738792 2010-01-13] (XIMETA, Inc.)
R0 lpx; C:\Windows\System32\DRIVERS\lpx6x.sys [151528 2010-01-13] (XIMETA, Inc.)
S3 massfilter_hs; C:\Windows\system32\drivers\massfilter_hs.sys [20232 2012-06-08] (HandSet Incorporated)
R3 ndasbus; C:\Windows\System32\DRIVERS\ndasbus.sys [497640 2010-01-13] (XIMETA, Inc.)
R1 ndasfat; C:\Windows\System32\DRIVERS\ndasfat.sys [607720 2010-01-13] (Windows (R) Codename Longhorn DDK provider)
R0 ndasfs; C:\Windows\System32\DRIVERS\ndasfs.sys [746472 2010-01-13] (XIMETA, Inc.)
R1 ndasrofs; C:\Windows\System32\DRIVERS\ndasrofs.sys [1053160 2010-01-13] (XIMETA, Inc.)
S3 ndasscsi; C:\Windows\System32\DRIVERS\ndasscsi.sys [486888 2010-01-13] (XIMETA, Inc.)
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800832 2010-09-07] (Sonix Technology Co., Ltd.)
S3 TASCAM_US122144; C:\Windows\System32\Drivers\tascusb2.sys [419160 2011-04-28] (TASCAM)
S3 TASCAM_US144_MK2_MIDI; C:\Windows\System32\drivers\tscusb2m.sys [31576 2011-04-28] (TASCAM)
S3 TASCAM_US144_MK2_WDM; C:\Windows\System32\drivers\tscusb2a.sys [53080 2011-04-28] (TASCAM)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13832 2010-04-17] ()
S3 zghsmdm; C:\Windows\System32\DRIVERS\zghsmdm.sys [131080 2012-06-08] (ZTE Incorporated)
S3 ZodiacPlatinum; C:\Windows\System32\DRIVERS\ZodiacPlatinum_x64.sys [253440 2014-02-27] ()
S3 ZodiacPlatinumks; C:\Windows\System32\DRIVERS\ZodiacPlatinumks_x64.sys [46080 2014-02-27] ()
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 hexmagic; \??\C:\Windows\system32\drivers\hexmagic.sys [X]
S3 WadiaUSBAudioSrv; system32\drivers\WadiaDrv.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-06-08 17:54 - 2015-06-08 17:55 - 00030728 _____ C:\Users\Michael\Desktop\FRST.txt
2015-06-08 17:54 - 2015-06-08 17:54 - 02108928 _____ (Farbar) C:\Users\Michael\Desktop\FRST64.exe
2015-06-08 17:53 - 2015-06-08 17:53 - 00050477 _____ C:\Users\Michael\Desktop\Defogger.exe
2015-06-08 17:53 - 2015-06-08 17:53 - 00000476 _____ C:\Users\Michael\Desktop\defogger_disable.log
2015-06-07 19:00 - 2015-06-07 19:00 - 00000000 __SHD C:\found.002
2015-06-05 14:10 - 2015-06-05 14:10 - 00000000 __SHD C:\found.001
2015-06-04 11:41 - 2015-06-04 11:41 - 00002688 _____ C:\Users\Michael\AppData\Local\recently-used.xbel
2015-06-03 12:20 - 2015-06-05 14:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-05-28 23:46 - 2015-05-28 23:46 - 00000000 ____D C:\Users\me\AppData\Roaming\Promethean
2015-05-28 23:46 - 2015-05-28 23:46 - 00000000 ____D C:\Users\me\AppData\Local\Eastman Kodak Company
2015-05-28 23:46 - 2015-05-28 23:46 - 00000000 ____D C:\Users\me\AppData\Local\CrashDumps
2015-05-28 23:44 - 2015-05-28 23:44 - 00008224 _____ C:\Windows\SysWOW64\GDIPFONTCACHEV1.DAT
2015-05-28 23:44 - 2015-05-28 23:44 - 00001904 _____ C:\Users\Public\Desktop\NewShortcut4.lnk
2015-05-28 23:44 - 2015-05-28 23:44 - 00000000 ____D C:\Users\me\AppData\Roaming\Numera.Gateway
2015-05-28 23:44 - 2015-05-28 23:44 - 00000000 ____D C:\Users\me\AppData\Roaming\CANON INC
2015-05-28 23:43 - 2015-05-28 23:43 - 00000000 ____D C:\Users\me\AppData\Roaming\SoundTouchPersist
2015-05-28 23:43 - 2015-05-28 23:43 - 00000000 ____D C:\Users\me\AppData\Roaming\SoundTouch
2015-05-28 23:43 - 2015-05-28 23:43 - 00000000 ____D C:\Users\me\AppData\Roaming\ACTIV Software
2015-05-28 09:37 - 2015-05-28 09:37 - 35716508 _____ C:\Users\Michael\Desktop\150527_0105ext.wav
2015-05-28 09:32 - 2015-05-28 09:33 - 26690082 _____ C:\Users\Michael\Desktop\02 - Mama (Remastered).wav
2015-05-26 22:42 - 2015-05-26 22:42 - 77580056 _____ C:\Users\Michael\Desktop\150526_0103 norm2.wav
2015-05-26 22:36 - 2015-05-26 22:36 - 79855504 _____ C:\Users\Michael\Desktop\150526_0103 glitch 1.wav
2015-05-26 22:31 - 2015-05-26 22:31 - 77906696 _____ C:\Users\Michael\Desktop\150526_0103 norm1.wav
2015-05-26 22:30 - 2015-05-26 22:30 - 79856684 _____ C:\Users\Michael\Desktop\150526_0103.wav
2015-05-26 12:08 - 2015-05-26 12:08 - 00021807 _____ C:\Users\Michael\Desktop\Herunterladen.csv
2015-05-19 23:18 - 2015-05-19 23:18 - 00001876 _____ C:\Users\Public\Desktop\Room EQ Wizard.lnk
2015-05-19 23:18 - 2015-05-19 23:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Room EQ Wizard
2015-05-19 23:18 - 2015-05-19 23:18 - 00000000 ____D C:\Program Files (x86)\REW
2015-05-19 23:17 - 2015-05-19 23:17 - 00107410 _____ (Duckware) C:\Users\Michael\x.exe
2015-05-19 23:16 - 2015-05-19 23:16 - 11922056 _____ (John Mulcahy) C:\Users\Michael\Desktop\REW_windows_5_11.exe
2015-05-18 22:41 - 2015-05-18 22:48 - 256948384 _____ C:\Users\Michael\Desktop\Mellow_Tone_DSD.dff
2015-05-18 22:12 - 2015-05-18 22:31 - 415459444 _____ C:\Users\Michael\Desktop\Mellow_Tone_24-192.wav
2015-05-18 22:12 - 2015-05-18 22:18 - 63572678 _____ C:\Users\Michael\Desktop\Mellow_Tone_16-44.wav
2015-05-16 21:25 - 2015-06-06 23:44 - 00000892 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2015-05-16 21:25 - 2015-05-16 21:25 - 00003900 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2015-05-16 18:04 - 2015-05-16 18:04 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-05-12 23:29 - 2015-05-12 23:29 - 00021346 _____ C:\Users\Michael\Documents\Mappe1.xlsx
2015-05-11 18:57 - 2015-05-11 19:02 - 207775824 _____ C:\Users\Michael\Desktop\Deep house.wma
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-06-08 17:54 - 2014-04-28 22:25 - 00000000 ____D C:\FRST
2015-06-08 17:40 - 2011-03-02 11:51 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-08 16:40 - 2011-03-02 11:51 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-08 16:27 - 2009-07-14 06:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-08 16:27 - 2009-07-14 06:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-08 16:22 - 2011-03-02 11:11 - 01464981 _____ C:\Windows\WindowsUpdate.log
2015-06-08 16:17 - 2011-12-10 14:49 - 00000000 ____D C:\ProgramData\Kodak
2015-06-08 16:16 - 2011-05-29 18:16 - 00045056 _____ C:\Windows\system32\acovcnt.exe
2015-06-08 16:16 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-08 16:16 - 2009-07-14 06:51 - 00127424 _____ C:\Windows\setupact.log
2015-06-08 09:34 - 2014-08-25 11:05 - 00000000 ____D C:\Users\Michael\AppData\Roaming\Numera.Gateway
2015-06-07 20:03 - 2009-08-04 11:51 - 00711546 _____ C:\Windows\system32\perfh007.dat
2015-06-07 20:03 - 2009-08-04 11:51 - 00153736 _____ C:\Windows\system32\perfc007.dat
2015-06-07 20:03 - 2009-07-14 07:13 - 01653060 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-07 19:53 - 2011-08-25 21:03 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-06-07 11:14 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-06-05 14:13 - 2012-05-07 16:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-06-05 14:13 - 2011-03-02 12:21 - 01451942 _____ C:\Windows\PFRO.log
2015-06-05 03:00 - 2011-03-02 11:47 - 00000000 ____D C:\ProgramData\Temp
2015-06-05 00:11 - 2014-11-09 01:08 - 00000000 ____D C:\Users\Michael\.gimp-2.8
2015-06-04 11:41 - 2014-11-09 01:10 - 00000000 ____D C:\Users\Michael\AppData\Local\gtk-2.0
2015-05-28 23:44 - 2014-08-25 11:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BiLink Gateway
2015-05-28 23:43 - 2014-03-19 17:32 - 00152960 _____ C:\Users\me\AppData\Local\GDIPFONTCACHEV1.DAT
2015-05-28 09:37 - 2012-04-14 00:05 - 00000000 ____D C:\Users\Michael\AppData\Roaming\Audacity
2015-05-26 10:44 - 2014-02-21 16:09 - 00002177 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-05-25 20:18 - 2011-09-18 16:57 - 00000000 ____D C:\Users\Michael\AppData\Local\FreePDF_XP
2015-05-19 23:33 - 2014-01-03 01:04 - 00000000 ____D C:\Users\Michael\REW
2015-05-19 23:18 - 2014-01-03 01:04 - 00000000 ____D C:\jexepackres
2015-05-19 23:17 - 2011-04-08 16:17 - 00000000 ____D C:\Users\Michael
2015-05-19 22:37 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2015-05-19 16:35 - 2011-03-02 11:51 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-05-19 16:35 - 2011-03-02 11:51 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-05-16 21:36 - 2014-09-01 20:25 - 00000000 ____D C:\Users\Michael\AppData\Local\Adobe
2015-05-16 21:25 - 2012-04-11 20:31 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-05-16 21:25 - 2011-10-04 19:24 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-05-16 18:04 - 2013-02-18 00:07 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-05-13 19:31 - 2014-10-31 00:25 - 00000000 ____D C:\Users\Michael\AppData\Local\CrashDumps
==================== Files in the root of some directories =======
2011-08-28 11:36 - 2015-03-31 17:28 - 0002115 _____ () C:\Users\Michael\AppData\Roaming\SAS7_000.DAT
2011-09-16 00:49 - 2011-09-16 00:49 - 0003584 _____ () C:\Users\Michael\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2011-12-10 15:03 - 2011-12-10 15:03 - 0000236 _____ () C:\Users\Michael\AppData\Local\LaunchHomeCenter.log
2015-06-04 11:41 - 2015-06-04 11:41 - 0002688 _____ () C:\Users\Michael\AppData\Local\recently-used.xbel
2011-05-29 18:23 - 2014-06-25 19:51 - 0007610 _____ () C:\Users\Michael\AppData\Local\resmon.resmoncfg
2011-05-29 18:31 - 2011-05-29 18:31 - 0000056 ____H () C:\ProgramData\ezsidmv.dat
2011-03-02 12:13 - 2010-07-07 02:10 - 0131472 _____ () C:\ProgramData\FullRemove.exe
2014-07-14 21:23 - 2014-07-14 21:23 - 0010205 _____ () C:\ProgramData\regid.2013-05.com.numera_5FE1E02F-BC6D-482A-B12B-6D73D5C0C83F.swidtag
2014-07-14 15:59 - 2014-07-14 15:59 - 0010205 _____ () C:\ProgramData\regid.2013-05.com.numera_8387D7E1-EBC1-4947-8CEB-274608BDADDA.swidtag
2011-03-02 11:48 - 2011-03-02 11:49 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2011-03-02 11:47 - 2011-03-02 11:48 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
Files to move or delete:
====================
C:\Users\Michael\x.exe
Some files in TEMP:
====================
C:\Users\me\AppData\Local\Temp\avgnt.exe
C:\Users\Michael\AppData\Local\Temp\avgnt.exe
C:\Users\Michael\AppData\Local\Temp\CP210xVCPInstaller_x64.exe
C:\Users\Michael\AppData\Local\Temp\CP210xVCPInstaller_x86.exe
C:\Users\Michael\AppData\Local\Temp\GarminExpressInstaller.exe
C:\Users\Michael\AppData\Local\Temp\i4jdel0.exe
C:\Users\Michael\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe
C:\Users\Michael\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\Michael\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
C:\Users\Michael\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\Michael\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Michael\AppData\Local\Temp\Quarantine.exe
C:\Users\Michael\AppData\Local\Temp\qv81omza.dll
C:\Users\Michael\AppData\Local\Temp\ukfffvab.dll
C:\Users\MichaelG\AppData\Local\Temp\avgnt.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-06-03 15:27
==================== End of log ============================
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version:07-06-2015
Ran by Michael at 2015-06-08 17:55:44
Running from C:\Users\Michael\Desktop
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-1188984864-3960233233-778719749-500 - Administrator - Disabled)
Gast (S-1-5-21-1188984864-3960233233-778719749-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1188984864-3960233233-778719749-1005 - Limited - Enabled)
me (S-1-5-21-1188984864-3960233233-778719749-1007 - Administrator - Enabled) => C:\Users\me
Michael (S-1-5-21-1188984864-3960233233-778719749-1001 - Administrator - Enabled) => C:\Users\Michael
MichaelG (S-1-5-21-1188984864-3960233233-778719749-1006 - Limited - Enabled) => C:\Users\MichaelG
tu (S-1-5-21-1188984864-3960233233-778719749-1008 - Limited - Enabled) => C:\Users\tu
UpdatusUser (S-1-5-21-1188984864-3960233233-778719749-1000 - Limited - Enabled) => C:\Users\UpdatusUser
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
ActivDriver x64 v5.7 (HKLM\...\{F15D3F83-06DD-40AE-B7FC-AF720B154589}) (Version: 5.7.22.1 - Promethean)
ActivInspire Core Resources (DEU) v1 (HKLM-x32\...\{382BE32D-6CFD-4F62-B072-B2B87C0DFEB7}) (Version: 1.5.2 - Promethean)
ActivInspire Help (DEU) v1 (HKLM-x32\...\{79314E44-DF84-4A58-AD2A-802DE91033C3}) (Version: 1.6.1 - Promethean)
ActivInspire HWR Resources (DEU) v1 (HKLM-x32\...\{DBF47CB5-73EC-4DB3-B5A8-A961F41F5F1D}) (Version: 1.5.2 - Promethean)
ActivInspire v2 (HKLM-x32\...\{16B7CCDA-D47E-40D1-AD13-D10ACC13DD65}) (Version: 2.3.65940 - Promethean)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 17.0.0.144 - Adobe Systems Incorporated)
Adobe Digital Editions (HKLM-x32\...\Digital Editions) (Version: - )
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.188 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.188 - Adobe Systems Incorporated)
Adobe Flash Player 17 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 17.0.0.188 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.11) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.7.148 - Adobe Systems, Inc.)
aioscnnr (x32 Version: 7.3.4.0 - Your Company Name) Hidden
Amazon Music (HKU\S-1-5-21-1188984864-3960233233-778719749-1001\...\Amazon Amazon Music) (Version: 3.8.1.754 - Amazon Services LLC)
ANT Drivers Installer x64 (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
ArcSoft MediaConverter 2.5 (HKLM-x32\...\{A72FC039-FE41-4BAD-B36E-64368EC54B54}) (Version: - ArcSoft)
ASIO Proxy for foobar2000 (HKLM-x32\...\ASIOProxy) (Version: 0.7.1.2 - Maxim V.Anisiutkin)
ASUS AI Recovery (HKLM-x32\...\{38253529-D97D-4901-AE53-5CC9736D3A2E}) (Version: 1.0.13 - ASUS)
ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.0.20 - ASUS)
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.0.6 - ASUS)
ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 1.1.43 - ASUS)
ASUS SmartLogon (HKLM-x32\...\{64452561-169F-4A36-A2FF-B5E118EC65F5}) (Version: 1.0.0008 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 1.02.0030 - ASUS)
ASUS Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.20 - asus)
AsusVibe2.0 (HKLM-x32\...\Asus Vibe2.0) (Version: 2.0.3.585 - ASUSTEK)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0007 - ASUS)
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
AudioAnalyser 2010.12 (HKLM-x32\...\AudioAnalyser 2010.12_is1) (Version: - sedutec)
Avira (HKLM-x32\...\{b5675cc4-ab8b-4945-8c1d-4c5479556d6a}) (Version: 1.1.34.19732 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.34.19732 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.10.434 - Avira Operations GmbH & Co. KG)
Bi-LINK Gateway (HKLM-x32\...\{63041551-16E0-4841-AC48-92A825711C93}) (Version: 1.00.5000 - Ihr Firmenname)
Bing Rewards Client Installer (x32 Version: 16.0.345.0 - Microsoft Corporation) Hidden
C4USelfUpdater (x32 Version: 1.00.0000 - Your Company Name) Hidden
Canon MP Navigator EX 4.0 (HKLM-x32\...\MP Navigator EX 4.0) (Version: - )
Canon Solution Menu EX (HKLM-x32\...\CanonSolutionMenuEX) (Version: - )
Canon Utilities CameraWindow DC 8 (HKLM-x32\...\CameraWindowDC) (Version: 8.10.3.23 - Canon Inc.)
Canon Utilities Digital Photo Professional (HKLM-x32\...\Digital Photo Professional) (Version: 3.14.30.0 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.23.47 - Canon Inc.)
CanoScan LiDE 210 Scanner Driver (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_CNQ4809) (Version: - Canon Inc.)
Cantata Music Center v1.67.0 (HKLM-x32\...\Cantata Music Center v1.67.0) (Version: 1.67.0 - Resolution Audio)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.5000 - CDBurnerXP)
center (x32 Version: 6.2.5.0 - Eastman Kodak Company) Hidden
Complément Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Complemento Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Control ActiveX de Windows Live Mesh para conexiones remotas (HKLM-x32\...\{04668DF2-D32F-4555-9C7E-35523DCD6544}) (Version: 15.4.5722.2 - Microsoft Corporation)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (HKLM-x32\...\{55D003F4-9599-44BF-BA9E-95D060730DD3}) (Version: 15.4.5722.2 - Microsoft Corporation)
Controlo ActiveX do Windows Live Mesh para Ligações Remotas (HKLM-x32\...\{E54EEB5D-41ED-40FE-B4A8-8565DB81469B}) (Version: 15.4.5722.2 - Microsoft Corporation)
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1908 - CyberLink Corp.)
CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.3602c - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DJ Console Rmx2 (HKLM-x32\...\{CD682C54-5AAC-4FC4-AD4C-FBD93E0C5A45}) (Version: 1.00.0000 - Guillemot)
DJUCED 40 (HKLM-x32\...\{D9CC23A3-1BF6-4B2F-95EA-4296CD2CAC74}) (Version: 2.0.64 - Guillemot)
Dragon NaturallySpeaking 13 (HKLM-x32\...\{33EA20FB-5389-4938-BA59-2BCD9BB68F41}) (Version: 13.00.000 - Nuance Communications Inc.)
Elevated Installer (x32 Version: 4.0.19.0 - Garmin Ltd or its subsidiaries) Hidden
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
essentials (x32 Version: 6.0.14.0 - Eastman Kodak Company) Hidden
Exact Audio Copy 1.0beta3 (HKLM-x32\...\Exact Audio Copy) (Version: 1.0beta3 - Andre Wiethoff)
Fast Boot (HKLM\...\{13F4A7F3-EABC-4261-AF6B-1317777F0755}) (Version: 1.0.8 - ASUS)
foobar2000 v1.3.3 (HKLM-x32\...\foobar2000) (Version: 1.3.3 - Peter Pawlowski)
FormsForWeb® Filler 3.2.5 (HKLM-x32\...\{B2A617B5-317C-4F13-9206-7784D3871C04}) (Version: 3.2.5 - Lucom GmbH)
FreeCommander 2009.02b (HKLM-x32\...\FreeCommander_is1) (Version: 2009.02 - Marek Jasinski)
FreePDF (Remove only) (HKLM-x32\...\FreePDF_XP) (Version: - )
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Game Park Console (HKLM-x32\...\{E71E60C1-533E-45A5-8D80-E475E88D2B17}_is1) (Version: 6.2.1.1 - Oberon Media, Inc.)
Garmin Express (HKLM-x32\...\{3ee9d193-ab0b-47f1-a31c-cce4678679ce}) (Version: 4.0.19.0 - Garmin Ltd or its subsidiaries)
Garmin Express (x32 Version: 4.0.19.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (x32 Version: 4.0.19.0 - Garmin Ltd or its subsidiaries) Hidden
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.81 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.6227.252 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
Governor of Poker (HKLM-x32\...\Governor of Poker) (Version: - Oberon Media Inc.)
GPL Ghostscript (HKLM\...\GPL Ghostscript 9.04) (Version: 9.04 - Artifex Software Inc.)
Handset USB Driver (HKLM\...\{D2D77DC2-8299-11D1-8949-444553540000}_is1) (Version: 5.2066.1.A14B04 - )
HD Tune 2.55 (HKLM-x32\...\HD Tune_is1) (Version: - EFD Software)
Hercules DJ USB Audio Drivers (HKLM-x32\...\{65F11FC9-B1D7-445F-916D-A40764E1D8CE}) (Version: 1.HDJA.2012 - Hercules)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3347 - Intel Corporation)
Intel(R) Turbo Boost Technology Monitor (HKLM\...\{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}) (Version: 1.0.400.4 - Intel)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.37 - Irfan Skiljan)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Jewel Quest 3 (HKLM-x32\...\Jewel Quest 3) (Version: - Oberon Media Inc.)
Joe (HKLM-x32\...\{2F8C3308-46DC-4431-B1C0-5C579A5CADBE}) (Version: 3.08.0100 - Wirth IT Design)
JRiver Media Center 20 (HKLM-x32\...\Media Center 20) (Version: 20 - J. River, Inc.)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
klickTel Telefon- und Branchenbuch + Rückwärtssuche Herbst 2013 (HKLM-x32\...\{37FF2AB4-1D6A-4254-B4AF-4C9AF951D104}) (Version: 1.00.0000 - telegate MEDIA AG)
Kodak AIO Printer (Version: 7.0.3.0 - Eastman Kodak Company) Hidden
KODAK All-in-One Software (HKLM-x32\...\{E0F274B7-592B-4669-8FB8-8D9825A09858}) (Version: 7.6.12.20 - Eastman Kodak Company)
Kyocera Product Library (HKLM\...\Kyocera Product Library) (Version: 2.0.0713 - Kyocera Mita Corporation)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
LibreOffice 4.1.3.2 (HKLM-x32\...\{4F3722AD-197D-4DBB-BDFB-D2F0D6776354}) (Version: 4.1.3.2 - The Document Foundation)
Luxor 3 (HKLM-x32\...\Luxor 3) (Version: - Oberon Media Inc.)
Mahjongg dimensions (HKLM-x32\...\Mahjongg dimensions) (Version: - Oberon Media Inc.)
Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
MatheGrafix 10 (Version 10.2) (HKLM-x32\...\MatheGrafix 10_is1) (Version: - )
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Messenger 分享元件 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Professional 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Sync Framework 2.0 Core Components (x64) ENU (HKLM\...\{8CCBEC22-D2DB-4DC9-A58A-E1A1F3A38C8A}) (Version: 2.0.1578.0 - Microsoft Corporation)
Microsoft Sync Framework 2.0 Provider Services (x64) ENU (HKLM\...\{03AC245F-4C64-425C-89CF-7783C1D3AB2C}) (Version: 2.0.1578.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 38.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Mozilla Thunderbird 24.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.0 (x86 de)) (Version: 24.0 - Mozilla)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
MultisineV1.74 (HKLM-x32\...\MultisineV1.74_is1) (Version: - SeDuTec)
MyDriveConnect 4.0.2.2123 (HKLM-x32\...\MyDriveConnect) (Version: 4.0.2.2123 - TomTom)
NDAS-Software 3.72.2080 (HKLM\...\{D06E205A-1BF7-48D5-BD7F-E072D0FD6A67}) (Version: 3.72.2080 - XIMETA, Inc.)
NotenManager Heimversion 3.1 (HKLM-x32\...\NotenManager Heimversion) (Version: 3.1 - beSoft)
Nuance PDF Reader (HKLM-x32\...\{B480904D-F73F-4673-B034-8A5F492C9184}) (Version: 6.00.0041 - Nuance Communications, Inc.)
NVIDIA Grafiktreiber 311.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 311.44 - NVIDIA Corporation)
NVIDIA Update 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation)
ocr (x32 Version: 6.2.3.50 - Eastman Kodak Company) Hidden
Overlook Fing (HKLM-x32\...\Overlook Fing 1.4) (Version: 1.4 - Overlook)
Plants vs Zombies (HKLM-x32\...\Plants vs Zombies) (Version: - Oberon Media Inc.)
PreReq (x32 Version: 6.2.4.0 - Eastman Kodak Company) Hidden
PrintProjects (HKLM-x32\...\PrintProjects) (Version: 1.0.0.9282 - RocketLife Inc.)
ProSafe Plus Utility (HKLM-x32\...\InstallShield_{AFADA286-3422-45BA-93FE-CC24F1F3B7B5}) (Version: 2.2.36 - Ihr Firmenname)
ProSafe Plus Utility (x32 Version: 2.2.36 - Ihr Firmenname) Hidden
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM-x32\...\RealPlayer 15.0) (Version: 15.0.6 - RealNetworks)
Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.21.531.2010 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6294 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Reader Driver (HKLM-x32\...\{62BBB2F0-E220-4821-A564-730807D2C34D}) (Version: 6.1.7600.10001 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version: - )
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Room EQ Wizard 5.11 (HKLM-x32\...\4549-9647-2313-4375) (Version: 5.11 - John Mulcahy)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Silicon Laboratories CP210x USB to UART Bridge (Driver Removal) (HKLM-x32\...\SLABCOMM&10C4&EA60) (Version: - )
Silicon Laboratories USBXpress Device (Driver Removal) (HKLM-x32\...\SIUSBXP&10C4&EA61) (Version: - )
smartmontools (HKLM-x32\...\smartmontools) (Version: 6.0 2012-10-10 r3643 (sf-6.0-1) - )
Sonic Focus (HKLM-x32\...\{09BCB9CE-964B-4BDA-AE46-B5A0ABEF1D3F}) (Version: 1.00.0000 - Virage Logic, Corp.)
SoundTouch (HKLM-x32\...\{AF6D813E-29C9-44A0-851A-B5D961E498A2}) (Version: 7.0.37.8343 - BOSE)
Stellarium 0.11.3 (HKLM-x32\...\Stellarium_is1) (Version: - )
StreamTransport version: 1.1.1.1 (HKLM-x32\...\{FA0BBB87-91A1-4BFD-9005-EB058BBA0E14}_is1) (Version: - )
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
syncables desktop SE (HKLM-x32\...\{341697D8-9923-445E-B42A-529E5A99CB7A}) (Version: 5.5.746.11492 - syncables)
SyncToy 2.1 (x64) (HKLM\...\{88DAAF05-5A72-46D2-A7C5-C3759697E943}) (Version: 2.1.0 - Microsoft)
Update für Notenmanager Heimversion 3.1 (HKLM-x32\...\Update für Notenmanager Heimversion) (Version: 3.1 - beSoft)
US-122 MKII / US-144 MKII (HKLM\...\USB_AUDIO_DEusb-audio.deTascam) (Version: - )
USB2.0 UVC VGA WebCam (HKLM\...\USB2.0 UVC VGA WebCam) (Version: 5.8.55133.208 - Sonix)
USB-Feuchte Temp.Logger (HKLM-x32\...\{B7EB2CF8-BB80-488C-B0E9-26056DF3814F}) (Version: 4.01.0000 - ##COMPANY_NAME##)
Visual C++ 9.0 Runtime for Dragon NaturallySpeaking 64bit (x64) (HKLM\...\{4A5A427F-BA39-4BF0-7777-9A47FBE60C9F}) (Version: 11.0.200 - Nuance Communications Inc.)
Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)
Voltcraft - Voltsoft System Version (HKLM-x32\...\{27383738-D10F-4186-A784-7AB19733654D}_is1) (Version: - Voltcraft)
VueScan x64 (HKLM\...\VueScan x64) (Version: - )
Windows Driver Package - Silicon Laboratories (silabenm) Ports (12/10/2012 6.6.1.0) (HKLM\...\D680DEE0F68D64EC53D0C5769879D15D387054CC) (Version: 12/10/2012 6.6.1.0 - Silicon Laboratories)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (HKLM-x32\...\{C32CE55C-12BA-4951-8797-0967FDEF556F}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{C63A1E60-B6A4-440B-89A5-1FC6E4AC1C94}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
Windows-Treiberpaket - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Windows-Treiberpaket - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.31.0 - ASUS)
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
winpcap-overlook 4.02 (HKLM-x32\...\winpcap-overlook) (Version: - )
WinRAR 4.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH)
Wireless Console 3 (HKLM-x32\...\{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}) (Version: 3.0.19 - ASUS)
World of Goo (HKLM-x32\...\World of Goo) (Version: - Oberon Media Inc.)
XMedia Recode Version 3.1.7.9 (HKLM-x32\...\{DDA3C325-47B2-4730-9672-BF3771C08799}_is1) (Version: 3.1.7.9 - XMedia Recode)
ZodiacPlatinum USB Audio Class 2.0 Driver v2.20.0 (HKLM-x32\...\ZodiacPlatinum USB Audio Class 2.0 Driver v2.20.0) (Version: 2.20.0 - Antelope Audio)
ZTE Handset USB Driver (HKLM\...\{01D42BF0-ED08-463f-8A28-99EB6FEE962B}) (Version: - ZTE Corporation)
Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (HKLM-x32\...\{F665F3B8-01B4-46A9-8E47-FF8DC2208C9F}) (Version: 15.4.5722.2 - Microsoft Corporation)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
מסייע Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
פקד ActiveX של Windows Live Mesh עבור חיבורים מרוחקים (HKLM-x32\...\{9D4C7DFA-CBBB-4F06-BDAC-94D831406DF0}) (Version: 15.4.5722.2 - Microsoft Corporation)
適用遠端連線的 Windows Live Mesh ActiveX 控制項 (HKLM-x32\...\{622DE1BE-9EDE-49D3-B349-29D64760342A}) (Version: 15.4.5722.2 - Microsoft Corporation)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Restore Points =========================
30-05-2015 13:23:23 Geplanter Prüfpunkt
06-06-2015 18:08:52 Geplanter Prüfpunkt
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:34 - 2014-06-05 15:59 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {04D70B35-9000-4C9B-8C40-DBEC6056ED6E} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1188984864-3960233233-778719749-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-07-27] (RealNetworks, Inc.)
Task: {18F1DFAE-A591-471C-8AC2-2F9B17B80852} - System32\Tasks\{BF436030-8501-4D10-9BB3-F18BB26E90C7} => C:\sj675\SETUP.EXE
Task: {20DA536A-0980-4D14-815E-EFC3C8B8D721} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {29FE57DF-3023-43E2-942F-0399C27ADFFF} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2010-12-02] (ASUS)
Task: {2A894A5B-CE9D-4FE7-BAF6-1EDB5E9343D4} - System32\Tasks\{FBFEF18D-A407-4028-A7A9-A831EC4FF207} => C:\Program Files (x86)\Hewlett-Packard\HP PrecisionScan\PrecisionScan Pro\HP PrecisionScan Pro.exe
Task: {2AAB936A-4109-49BD-B3FD-D85D8516EF61} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2011-08-31] (ASUSTeK Computer Inc.)
Task: {2AF6477C-6A84-45E4-978C-19F0DD5A1C25} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-18] (Google Inc.)
Task: {430ADBC8-E235-4705-8FB1-AE102E9AD573} - System32\Tasks\{3548701E-F038-4969-899D-C92AEB0BE84E} => C:\Program Files (x86)\Hewlett-Packard\HP PrecisionScan\PrecisionScan Pro\HP PrecisionScan Pro.exe
Task: {5E5AD13B-4D56-4EB4-86D4-A11772D91EF7} - System32\Tasks\{B0D184B6-4801-43BE-8900-08702B859B63} => C:\Program Files (x86)\Hewlett-Packard\HP PrecisionScan\PrecisionScan Pro\HP PrecisionScan Pro.exe
Task: {611B277A-19D4-4850-A6D2-F849939F987F} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2010-08-18] (ASUS)
Task: {626F69D1-8D55-414E-A469-06469C969206} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-18] (Google Inc.)
Task: {6CF2CB15-7102-4833-80E9-094F64B2AEE8} - System32\Tasks\{9FA2CC6C-FCCF-41E1-93A6-BBB8A085AEB9} => pcalua.exe -a C:\Users\Michael\Downloads\jxpiinstall.exe -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {73B30C93-F1DE-4BFC-88C3-E01858D9166D} - System32\Tasks\{F1F768B3-175A-43AA-AE79-4C0DC652A3E3} => C:\Program Files (x86)\Hewlett-Packard\HP PrecisionScan\PrecisionScan Pro\HP PrecisionScan Pro.exe
Task: {86607A5E-FE34-46AA-8D16-5E9DEF031A6E} - System32\Tasks\{B61F1941-7563-4B18-8F4F-3C054C4E86F6} => pcalua.exe -a C:\Users\Michael\Downloads\Nikonupdate\F-J1-V130W.exe -d C:\Users\Michael\Downloads\Nikonupdate
Task: {8DF5DED2-01AE-4BD9-B7AE-3AE8D3705C2A} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2009-07-31] (ASUS)
Task: {928F861F-EC0B-4413-A132-37E0C02E06A3} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [2015-04-23] ()
Task: {9935F812-227C-4D4C-BB4B-B2D01358B984} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {9EF52CB0-9421-4C26-A1EA-C1C52FE4AFCF} - System32\Tasks\{2B9C2907-0E93-4C4B-BE89-1E3B6F7D9A3A} => C:\Program Files (x86)\Hewlett-Packard\HP PrecisionScan\PrecisionScan Pro\HP PrecisionScan Pro.exe
Task: {9F613578-0BD5-449C-B2A1-EBA408EE2B9C} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2010-08-02] (ASUS)
Task: {AE312105-DE13-46C7-9676-65464240C868} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {B42CA3BC-7B49-45BC-8EF6-208DE3883678} - System32\Tasks\{F9BECBA3-A75D-4C5C-930D-08F5E3F25B1A} => C:\Program Files (x86)\Hewlett-Packard\HP PrecisionScan\PrecisionScan Pro\HP PrecisionScan Pro.exe
Task: {BBFE3E10-25E3-47FD-9708-5CBD68020B9D} - System32\Tasks\{FE3DD918-A512-47A2-A6E6-EACB29C6D9FE} => C:\sj675\SETUP.EXE
Task: {BE92C498-0330-4CCF-848B-399CAA589EBF} - System32\Tasks\{31D8E556-3925-405D-A436-AFC05ADF3BF1} => pcalua.exe -a "C:\Users\Michael\Downloads\100040-up-01-ml-V4_1_Win7_32bit_64bit_Vista_XP_2000_de_en\DL120 V4.1\DL120 V4.1\Driver\USBXpressInstaller.exe" -d "C:\Users\Michael\Downloads\100040-up-01-ml-V4_1_Win7_32bit_64bit_Vista_XP_2000_de_en\DL120 V4.1\DL120 V4.1\Driver"
Task: {CDB182D6-B73B-4C76-A142-A62E36A3A817} - System32\Tasks\{6198560B-0AD0-4776-A402-0C5E7C889597} => pcalua.exe -a C:\sj675\SETUP.EXE -d C:\sj675
Task: {D135E863-A355-4A5A-A052-886ADEE5C446} - System32\Tasks\{580E2BB6-19B6-4F0A-8F75-1A9CFC49BF57} => pcalua.exe -a C:\Users\Michael\Downloads\wizardinstallv5.01beta20.exe -d C:\Users\Michael\Downloads
Task: {D7C10BA9-B287-44FD-89E2-2F7E9170ABCD} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {D94E9598-41E7-42A5-8D88-B8B8DFBC4BF0} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_17_0_0_188_pepper.exe [2015-05-16] (Adobe Systems Incorporated)
Task: {DA4638B7-6D02-4A43-9946-7BE10907849B} - System32\Tasks\{E21369DA-4C09-4778-954F-61CF7089000F} => C:\sj675\SETUP.EXE
Task: {DA4F77AE-8537-429F-8BC4-6170516E9F8C} - System32\Tasks\{9B4A7EE5-736D-400D-B91D-13BC1A7A50A7} => C:\sj675\SETUP.EXE
Task: {E3503121-A9FF-422C-B817-5E9FF0100BA4} - System32\Tasks\{30EEF864-C6B5-4936-A851-7795D119B4D7} => C:\Program Files (x86)\Skype\\Phone\Skype.exe
Task: {EC730561-EA4A-4A9B-B244-A149C8AD41D2} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)
Task: {FC1F758B-1812-4B0F-A5F1-6086C003A8AF} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1188984864-3960233233-778719749-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-07-27] (RealNetworks, Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_17_0_0_188_pepper.exe
Task: C:\Windows\Tasks\ASUS SmartLogon Console Sensor.job => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-1188984864-3960233233-778719749-1001.job => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe
==================== Loaded Modules (Whitelisted) ==============
2012-10-16 18:12 - 2013-03-14 08:28 - 00087328 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2011-09-18 16:56 - 2010-06-17 21:56 - 00087040 _____ () C:\Windows\System32\redmonnt.dll
2014-11-10 23:30 - 2014-11-10 23:30 - 00066048 _____ () C:\ProgramData\ACTIV Software\ActivApplications\ActivFocusHook.dll
2010-04-02 19:21 - 2008-09-30 23:08 - 00011264 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
2010-07-15 02:11 - 2010-07-15 02:11 - 00031360 _____ () C:\Program Files\P4G\DevMng.dll
2011-08-28 12:43 - 2011-05-28 22:05 - 00164864 _____ () C:\Program Files\WinRAR\rarext.dll
2010-11-28 14:34 - 2010-11-28 14:34 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2010-12-17 15:46 - 2010-12-17 15:46 - 00506720 _____ () C:\Program Files\Activ Software\ActivDriver\activmgr.exe
2014-06-23 21:02 - 2015-05-07 21:12 - 05886784 _____ () C:\Users\Michael\AppData\Local\Amazon Music\Amazon Music Helper.exe
2010-01-13 13:29 - 2010-01-13 13:29 - 00260096 _____ () C:\Program Files\NDAS\System\ndasmgmt.deu.dll
2010-09-24 02:53 - 2010-09-24 02:53 - 01601536 _____ () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
2015-06-08 17:53 - 2015-06-08 17:53 - 00050477 _____ () C:\Users\Michael\Desktop\Defogger.exe
2011-08-31 16:33 - 2011-08-31 16:33 - 00208384 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\alvupdt.dll
2009-11-03 00:20 - 2009-11-03 00:20 - 00619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2009-11-03 00:23 - 2009-11-03 00:23 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2010-12-17 15:46 - 2010-12-17 15:46 - 00345440 _____ () C:\Program Files\Activ Software\ActivDriver\QtXml4.dll
2010-12-17 15:46 - 2010-12-17 15:46 - 02291552 _____ () C:\Program Files\Activ Software\ActivDriver\QtCore4.dll
2010-12-17 15:46 - 2010-12-17 15:46 - 08189280 _____ () C:\Program Files\Activ Software\ActivDriver\QtGui4.dll
2010-12-17 15:46 - 2010-12-17 15:46 - 00919912 _____ () C:\Program Files\Activ Software\ActivDriver\QtNetwork4.dll
2010-12-17 15:47 - 2010-12-17 15:47 - 00231792 _____ () C:\Windows\libactivboardex.dll
2014-08-20 21:20 - 1999-03-02 10:12 - 00372736 _____ () C:\Program Files (x86)\klickTel\Telefon- und Branchenbuch + Rückwärtssuche Herbst 2013\KSDB32.DLL
2009-07-13 23:03 - 2009-07-14 03:15 - 00364544 _____ () C:\Windows\SysWOW64\msjetoledb40.dll
2014-08-20 21:20 - 2008-07-10 11:06 - 00430080 _____ () C:\Program Files (x86)\klickTel\Telefon- und Branchenbuch + Rückwärtssuche Herbst 2013\kmricapi.dll
2014-08-20 21:20 - 2004-12-02 20:07 - 00384000 _____ () C:\Program Files (x86)\klickTel\Telefon- und Branchenbuch + Rückwärtssuche Herbst 2013\kmritapi.dll
2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\office14\Cultures\office.odf
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\ProgramData\Temp:029E021F
AlternateDataStreams: C:\ProgramData\Temp:0FF263E8
==================== Safe Mode (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\rpcnet => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\rpcnet => ""="Service"
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1188984864-3960233233-778719749-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Desktop-Hintergrund.bmp
DNS Servers: 192.168.1.1
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: CLMLServer => "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{69E2B217-792E-46B5-A3F6-8707F631E9A8}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{13478680-EADC-485A-92CA-07E191CF4468}] => (Allow) LPort=2869
FirewallRules: [{E87DED7D-4EFD-4057-9CC5-63CD28C686C4}] => (Allow) LPort=1900
FirewallRules: [{9D6E1CA4-A8DB-4454-8D14-94A89151233D}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{43ECF8E5-5B95-4A62-8CD4-9793F45F36E3}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{AB9398CF-FBF1-4497-85B6-BEAC7B8ED210}] => (Allow) LPort=5353
FirewallRules: [{55F945E4-6383-46FD-9D1E-F2EF8713B8F5}] => (Allow) LPort=8182
FirewallRules: [{BFF6CC5E-9B57-4A5A-83C1-BE9378D986B8}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{6E0B2CE1-2E48-4DC0-90E3-C72A90E23B37}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [TCP Query User{AA60AEE3-AFB0-4C13-AEF4-D76EB38E7823}C:\program files (x86)\syncables\syncables desktop\jre\bin\javaw.exe] => (Block) C:\program files (x86)\syncables\syncables desktop\jre\bin\javaw.exe
FirewallRules: [UDP Query User{730BE146-A36D-45BF-A38F-FF28966E0039}C:\program files (x86)\syncables\syncables desktop\jre\bin\javaw.exe] => (Block) C:\program files (x86)\syncables\syncables desktop\jre\bin\javaw.exe
FirewallRules: [TCP Query User{3C3D0EDD-1869-4433-917E-353C296872A8}C:\windows\system32\spool\drivers\x64\3\kact.exe] => (Block) C:\windows\system32\spool\drivers\x64\3\kact.exe
FirewallRules: [UDP Query User{CE85BF00-7B5C-40A8-8E31-2A4D474F5D47}C:\windows\system32\spool\drivers\x64\3\kact.exe] => (Block) C:\windows\system32\spool\drivers\x64\3\kact.exe
FirewallRules: [{5A58963E-4D23-437C-84D8-20F9D1F58867}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{AEBEB5F3-F3FE-4E11-AB16-BDDB8B2042C3}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [TCP Query User{1C53B1FF-54E3-4CC6-8CF3-99AD98929A86}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Allow) C:\program files (x86)\mozilla firefox\plugin-container.exe
FirewallRules: [UDP Query User{18B1AD48-5B98-4CCF-BF9C-08AE4E3C71D1}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Allow) C:\program files (x86)\mozilla firefox\plugin-container.exe
FirewallRules: [TCP Query User{B7E16908-F05F-4B1C-A8EC-18FDC71FDCD3}C:\program files (x86)\real\realplayer\recordingmanager.exe] => (Allow) C:\program files (x86)\real\realplayer\recordingmanager.exe
FirewallRules: [UDP Query User{E5EC0E96-46B4-414F-9A9F-926C0DCA8144}C:\program files (x86)\real\realplayer\recordingmanager.exe] => (Allow) C:\program files (x86)\real\realplayer\recordingmanager.exe
FirewallRules: [{C869D601-DA45-4312-96F2-78E1E953D7F9}] => (Allow) LPort=51001
FirewallRules: [{664D1F4B-F36D-49F6-8273-26CDAAF36B30}] => (Allow) LPort=5353
FirewallRules: [{662CD2FC-3462-4883-A35F-F6226D06C88A}] => (Allow) LPort=9322
FirewallRules: [{338F53FD-2BD7-459E-9F02-EE0A550F3BBF}] => (Allow) C:\Program Files\7-Zip\7zFM.exe
FirewallRules: [{3CE6FAAE-05AD-4A23-883C-814C2D3220CF}] => (Allow) C:\Program Files\7-Zip\7zFM.exe
FirewallRules: [{F7771400-0D6B-42F4-ACE9-98362759B583}] => (Allow) C:\Program Files\7-Zip\7zFM.exe
FirewallRules: [{55D8CB3D-A9DC-43EB-A7E3-9CACABA0EC73}] => (Allow) C:\Program Files\7-Zip\7zFM.exe
FirewallRules: [TCP Query User{6443BAED-E504-4068-B393-4B1C5BFC1A31}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [UDP Query User{13FAF629-93CF-4D40-A898-5D92ED176A08}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [{C18C9167-EB2D-4417-8612-75F9C76419C9}] => (Allow) LPort=9322
FirewallRules: [{942D047E-79E0-4958-9A20-A12F493B6CE0}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Center\AiOHomeCenter.exe
FirewallRules: [{BA8E9403-2041-4DAB-9734-C35E7BCC3511}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Center\AiOHomeCenter.exe
FirewallRules: [{6126A6FF-BA96-4E05-8212-38DD1D166934}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Center\Kodak.Statistics.exe
FirewallRules: [{F01B3B67-6BC3-4078-9141-3C93551C75EB}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Center\Kodak.Statistics.exe
FirewallRules: [{A9E20B42-2FE6-4CFC-A76E-07F15A817583}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Center\NetworkPrinterDiscovery.exe
FirewallRules: [{5B22BC80-6E95-4A68-91E9-58746D44396F}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Center\NetworkPrinterDiscovery.exe
FirewallRules: [{F21F7929-84BE-4421-B636-6ED4507CCC56}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Firmware\KodakAiOUpdater.exe
FirewallRules: [{94731272-49E1-43D6-8F92-E5605028CE64}] => (Allow) C:\Program Files (x86)\Kodak\AiO\Firmware\KodakAiOUpdater.exe
FirewallRules: [{2097D5EE-05F3-4350-B4F7-97CEE28B92C2}] => (Allow) C:\ProgramData\Kodak\Installer\Setup.exe
FirewallRules: [{4AC1D459-D1BC-4B36-A142-A1B3D093F0A1}] => (Allow) C:\ProgramData\Kodak\Installer\Setup.exe
FirewallRules: [{3EC46AFD-66A5-48F1-BE79-16025CABDA62}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{19BE3414-6F84-4E47-B724-CA212DF1734B}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [TCP Query User{B232DF75-317A-4584-A28A-02A7A69A645E}C:\program files (x86)\libreoffice 4\program\soffice.bin] => (Allow) C:\program files (x86)\libreoffice 4\program\soffice.bin
FirewallRules: [UDP Query User{F0170B74-0EC6-4A8F-A9A1-BB4A9F73A2E0}C:\program files (x86)\libreoffice 4\program\soffice.bin] => (Allow) C:\program files (x86)\libreoffice 4\program\soffice.bin
FirewallRules: [TCP Query User{06C97286-5F88-427E-B028-2F7545FE8BDD}C:\program files (x86)\netgear\prosafe plus utility\nsdpmanager.exe] => (Allow) C:\program files (x86)\netgear\prosafe plus utility\nsdpmanager.exe
FirewallRules: [UDP Query User{6DA32866-A8E3-45B8-98FC-F382C0D9E8F8}C:\program files (x86)\netgear\prosafe plus utility\nsdpmanager.exe] => (Allow) C:\program files (x86)\netgear\prosafe plus utility\nsdpmanager.exe
FirewallRules: [TCP Query User{D9E8E3ED-C65C-4440-A285-90504D4EA919}C:\program files (x86)\netgear\prosafe plus utility\netgearserver.exe] => (Allow) C:\program files (x86)\netgear\prosafe plus utility\netgearserver.exe
FirewallRules: [UDP Query User{190F5E2E-B95D-4C72-AA4B-93BD995F3474}C:\program files (x86)\netgear\prosafe plus utility\netgearserver.exe] => (Allow) C:\program files (x86)\netgear\prosafe plus utility\netgearserver.exe
FirewallRules: [TCP Query User{EDC73357-51FF-47BA-9E84-B911DC4D7670}C:\program files (x86)\netgear\prosafe plus utility\prosafe plus utility.exe] => (Allow) C:\program files (x86)\netgear\prosafe plus utility\prosafe plus utility.exe
FirewallRules: [UDP Query User{7D7B99C1-22CA-4A51-9E8E-B69ECDEF3E23}C:\program files (x86)\netgear\prosafe plus utility\prosafe plus utility.exe] => (Allow) C:\program files (x86)\netgear\prosafe plus utility\prosafe plus utility.exe
FirewallRules: [TCP Query User{1DE4877A-0BCB-41F7-B87B-23B0DC90520E}C:\program files (x86)\zodiac platinum control panel\platinum.exe] => (Allow) C:\program files (x86)\zodiac platinum control panel\platinum.exe
FirewallRules: [UDP Query User{B2447666-DD20-41D3-9759-AB012DCA6350}C:\program files (x86)\zodiac platinum control panel\platinum.exe] => (Allow) C:\program files (x86)\zodiac platinum control panel\platinum.exe
FirewallRules: [TCP Query User{E66CF0AD-4E3D-4191-926E-862C200A865E}C:\program files (x86)\netgear\prosafe plus utility\nsdpmanager.exe] => (Block) C:\program files (x86)\netgear\prosafe plus utility\nsdpmanager.exe
FirewallRules: [UDP Query User{C3B678B7-C527-4F11-9706-C01F5FC20EEA}C:\program files (x86)\netgear\prosafe plus utility\nsdpmanager.exe] => (Block) C:\program files (x86)\netgear\prosafe plus utility\nsdpmanager.exe
FirewallRules: [{90610C2D-55C9-4F42-A849-006E5080E45A}] => (Allow) C:\Program Files (x86)\SoundTouch\SoundTouch.exe
FirewallRules: [{057DD971-656A-4E58-8642-04001794C3C4}] => (Allow) C:\Program Files (x86)\SoundTouch\SoundTouchMusicServer\SoundTouch music server.exe
FirewallRules: [{67DD3B77-8567-47B9-A781-88E83BDBFFCE}] => (Allow) LPort=51001
FirewallRules: [{04C1734D-D706-4094-A28B-7EBDD4721653}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{09D71311-47E4-435A-BF79-4430924F1D99}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{C233F458-B406-4430-8CD6-D3DD7C91C196}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{172C4B02-68BB-404F-AE56-EC2F12AF59A5}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{8EF79FCB-65D2-4B75-B2AB-96A4BC643807}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Faulty Device Manager Devices =============
Name: Atheros AR9285 Wireless Network Adapter
Description: Atheros AR9285 Wireless Network Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Atheros Communications Inc.
Service: athr
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (06/08/2015 04:16:17 AM) (Source: SideBySide) (EventID: 63) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "*" des "language"-Attributs im assemblyIdentity-Element ist ungültig.
Error: (06/08/2015 04:15:40 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (06/07/2015 08:11:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: AUDIODG.EXE, Version: 6.1.7601.18741, Zeitstempel: 0x54d036f1
Name des fehlerhaften Moduls: SFAPO64.dll, Version: 3.0.0.11, Zeitstempel: 0x4c48d82e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000052b5
ID des fehlerhaften Prozesses: 0x11a0
Startzeit der fehlerhaften Anwendung: 0xAUDIODG.EXE0
Pfad der fehlerhaften Anwendung: AUDIODG.EXE1
Pfad des fehlerhaften Moduls: AUDIODG.EXE2
Berichtskennung: AUDIODG.EXE3
Error: (06/07/2015 07:56:55 PM) (Source: DNS logging) (EventID: 0) (User: )
Description: Logger: Socket error: 10054
Error: (06/07/2015 07:52:17 PM) (Source: Office Software Protection Platform Service) (EventID: 1001) (User: )
Description: The Software Protection service failed to start. 0x80070005
14.0.370.400
Error: (06/07/2015 07:52:15 PM) (Source: Office Software Protection Platform Service) (EventID: 1001) (User: )
Description: The Software Protection service failed to start. 0x80070005
14.0.370.400
Error: (06/07/2015 00:00:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc3c1
Name des fehlerhaften Moduls: rastapi.DLL_unloaded, Version: 0.0.0.0, Zeitstempel: 0x4a5be041
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000007fef5d800e4
ID des fehlerhaften Prozesses: 0x15f0
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0
Pfad der fehlerhaften Anwendung: svchost.exe1
Pfad des fehlerhaften Moduls: svchost.exe2
Berichtskennung: svchost.exe3
Error: (06/07/2015 11:14:09 AM) (Source: Application Error) (EventID: 1005) (User: )
Description: Aus einem der folgenden Gründe kann nicht auf die Datei "" zugegriffen werden:
Es besteht ein Problem mit der Netzwerkverbindung, dem Datenträger mit der gespeicherten Datei bzw. den auf dem Computer installierten
Speichertreibern, oder der Datenträger fehlt.
Das Programm Hostprozess für Windows-Dienste wurde wegen dieses Fehlers geschlossen.
Programm: Hostprozess für Windows-Dienste
Datei:
Der Fehlerwert ist im Abschnitt "Zusätzliche Dateien" aufgelistet.
Benutzeraktion
1. Öffnen Sie die Datei erneut.
Diese Situation ist eventuell ein temporäres Problem, das selbstständig behoben wird, wenn das Programm erneut ausgeführt wird.
2.
Wenn Sie weiterhin nicht auf die Datei zugreifen können und
- diese sich im Netzwerk befindet,
dann sollte der Netzwerkadministrator überprüfen, dass kein Netzwerkproblem besteht und dass eine Verbindung mit dem Server hergestellt werden kann.
- diese sich auf einem Wechseldatenträger, wie z. B. einer Diskette oder einer CD, befindet, überprüfen Sie, ob der Datenträger richtig in den Computer eingelegt ist.
3. Überprüfen und reparieren Sie das Dateisystem, indem Sie CHKDSK ausführen. Klicken Sie dazu im Menü "Start" auf "Ausführen", geben Sie CMD ein, und klicken Sie auf "OK". Geben Sie an der Eingabeaufforderung CHKDSK /F ein, und drücken Sie die EINGABETASTE.
4. Stellen Sie die Datei von einer Sicherungskopie wieder her, wenn das Problem weiterhin besteht.
5. Überprüfen Sie, ob andere Dateien auf demselben Datenträger geöffnet werden können. Falls dies nicht möglich ist, ist der Datenträger eventuell beschädigt.
Wenden Sie sich an den Administrator oder den Hersteller der Computerhardware, um weitere Unterstützung zu erhalten, wenn es sich um eine Festplatte handelt.
Zusätzliche Daten
Fehlerwert: 00000000
Datenträgertyp: 0
Error: (06/07/2015 11:14:05 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc3c1
Name des fehlerhaften Moduls: rasppp.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7c972
Ausnahmecode: 0xc000001d
Fehleroffset: 0x00000000000300e4
ID des fehlerhaften Prozesses: 0x210
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0
Pfad der fehlerhaften Anwendung: svchost.exe1
Pfad des fehlerhaften Moduls: svchost.exe2
Berichtskennung: svchost.exe3
Error: (06/06/2015 06:04:17 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "*" des "language"-Attributs im assemblyIdentity-Element ist ungültig.
System errors:
=============
Error: (06/08/2015 04:21:00 PM) (Source: WMPNetworkSvc) (EventID: 14329) (User: )
Description: WMPNetworkSvc0x80070006
Error: (06/08/2015 04:20:54 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Error: (06/08/2015 04:20:54 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (06/08/2015 04:16:37 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "ASPI32" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (06/08/2015 03:35:59 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Error: (06/08/2015 03:35:59 AM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (06/08/2015 03:32:20 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "ASPI32" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (06/07/2015 07:52:17 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Office Software Protection Platform" wurde mit folgendem Fehler beendet:
%%5
Error: (06/07/2015 07:52:15 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Office Software Protection Platform" wurde mit folgendem Fehler beendet:
%%5
Error: (06/07/2015 07:07:19 PM) (Source: WMPNetworkSvc) (EventID: 14329) (User: )
Description: WMPNetworkSvc0x80070006
Microsoft Office:
=========================
Error: (06/08/2015 04:16:17 AM) (Source: SideBySide) (EventID: 63) (User: )
Description: assemblyIdentitylanguage*c:\program files (x86)\freecommander\DelZip179.dllc:\program files (x86)\freecommander\DelZip179.dll8
Error: (06/08/2015 04:15:40 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe
Error: (06/07/2015 08:11:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: AUDIODG.EXE6.1.7601.1874154d036f1SFAPO64.dll3.0.0.114c48d82ec000000500000000000052b511a001d0a14cad75e600C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\SFAPO64.dll8d90ed96-0d40-11e5-89d3-bcaec560a7df
Error: (06/07/2015 07:56:55 PM) (Source: DNS logging) (EventID: 0) (User: )
Description: Logger: Socket error: 10054
Error: (06/07/2015 07:52:17 PM) (Source: Office Software Protection Platform Service) (EventID: 1001) (User: )
Description: 0x8007000514.0.370.400
Error: (06/07/2015 07:52:15 PM) (Source: Office Software Protection Platform Service) (EventID: 1001) (User: )
Description: 0x8007000514.0.370.400
Error: (06/07/2015 00:00:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: svchost.exe6.1.7600.163854a5bc3c1rastapi.DLL_unloaded0.0.0.04a5be041c0000005000007fef5d800e415f001d0a102537c17c3C:\Windows\system32\svchost.exerastapi.DLL01f64cd2-0cfc-11e5-9027-bcaec560a7df
Error: (06/07/2015 11:14:09 AM) (Source: Application Error) (EventID: 1005) (User: )
Description: Hostprozess für Windows-Dienste000000000
Error: (06/07/2015 11:14:05 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: svchost.exe6.1.7600.163854a5bc3c1rasppp.dll6.1.7601.175144ce7c972c000001d00000000000300e421001d0a06c962dad6fC:\Windows\system32\svchost.exeC:\Windows\system32\rasppp.dll8b16f52c-0cf5-11e5-9027-bcaec560a7df
Error: (06/06/2015 06:04:17 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: assemblyIdentitylanguage*c:\program files (x86)\freecommander\DelZip179.dllc:\program files (x86)\freecommander\DelZip179.dll8
CodeIntegrity Errors:
===================================
Date: 2015-05-11 23:36:34.261
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\ProgramData\Activ Software\ActivApplications\ActivFocusHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-05-11 23:33:46.830
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\ProgramData\Activ Software\ActivApplications\ActivFocusHook.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-06-05 15:56:18.034
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-06-05 15:56:17.815
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz
Percentage of memory in use: 43%
Total physical RAM: 6055.77 MB
Available physical RAM: 3407.51 MB
Total Pagefile: 14562.51 MB
Available Pagefile: 11384.09 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:116.44 GB) (Free:6.76 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (DATA) (Fixed) (Total:327.83 GB) (Free:32.81 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: E0C5913D)
Partition 1: (Not Active) - (Size=21.5 GB) - (Type=1C)
Partition 2: (Active) - (Size=116.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=327.8 GB) - (Type=OF Extended)
==================== End of log ============================
|
Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
AdwCleaner auf deinen Desktop.