FRST Log
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:20-07-2015
Ran by Adminxx (administrator) on KEKZ-PC on 24-07-2015 15:00:33
Running from C:\Users\Adminxx\Downloads
Loaded Profiles: Adminxx (Available Profiles: Adminxx)
Platform: Windows 7 Professional (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 9 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\avp.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(LOL Replay) C:\Program Files (x86)\LOLReplay\LOLRecorder.exe
() C:\Program Files\Rainmeter\Rainmeter.exe
(Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.2.1.1\Lightshot.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\avpui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Logitech(c)) C:\Program Files (x86)\Logitech\G930\G930.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\plugin-nm-server.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.250\deploy\LoLLauncher.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.34\deploy\LoLPatcher.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.152\deploy\LolClient.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8484056 2015-07-06] (Realtek Semiconductor)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226560 2014-11-18] ()
HKLM-x32\...\Run: [Logitech G930] => C:\Program Files (x86)\Logitech\G930\G930.exe [1516888 2011-03-23] (Logitech(c))
HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53282944 2015-06-29] (Skype Technologies S.A.)
HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\RunOnce: [Uninstall C:\Users\Adminxx\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Adminxx\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64"
HKU\S-1-5-18\...\Run: [Advanced SystemCare 8] => C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe [2429728 2015-04-08] (IObit)
Startup: C:\Users\Adminxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk [2015-06-25]
ShortcutTarget: Rainmeter.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\LOLRecorder.lnk [2015-02-10]
ShortcutTarget: LOLRecorder.lnk -> C:\Program Files (x86)\LOLReplay\LOLRecorder.exe (LOL Replay)
GroupPolicyScripts: Group Policy detected <======= ATTENTION
GroupPolicyScripts\User: Group Policy detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.qone8.com/web/?type=ds&ts=1401799398&from=vtt&uid=HitachiXHDS721010CLA332_JP2940J82HXS8V2HXS8VX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.qone8.com/web/?type=ds&ts=1401799398&from=vtt&uid=HitachiXHDS721010CLA332_JP2940J82HXS8V2HXS8VX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.qone8.com/web/?type=ds&ts=1401799398&from=vtt&uid=HitachiXHDS721010CLA332_JP2940J82HXS8V2HXS8VX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.qone8.com/web/?type=ds&ts=1401799398&from=vtt&uid=HitachiXHDS721010CLA332_JP2940J82HXS8V2HXS8VX&q={searchTerms}
HKU\S-1-5-21-877811456-2021815861-1849052563-1000\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.de
SearchScopes: HKLM -> {98939DF3-2C26-4247-9D80-90B4291B1688} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL =
BHO: Content Blocker Plugin -> {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\x64\IEExt\ie_plugin.dll [2014-12-12] (Kaspersky Lab ZAO)
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll [2015-07-20] (IObit)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-04-21] (Oracle Corporation)
BHO: bestadblocker -> {A68EF7BE-20B0-4CAC-95E9-9442EDC46BBC} -> C:\Program Files (x86)\bestadblocker\WfzloncOFaEdIt.x64.dll [2015-07-08] ()
BHO: CutThePrIIce -> {AF7B4F14-EF87-4A15-965D-35B2700A866D} -> C:\Program Files (x86)\CutThePrIIce\dRBtildM3cfKGA.x64.dll [2015-07-08] ()
BHO: Virtual Keyboard Plugin -> {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\x64\IEExt\ie_plugin.dll [2014-12-12] (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-21] (Oracle Corporation)
BHO: Safe Money Plugin -> {E3D96E85-529D-4269-AC6A-97CF9E2221E3} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\x64\IEExt\ie_plugin.dll [2014-12-12] (Kaspersky Lab ZAO)
BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll [2015-05-25] (DVDVideoSoft Ltd.)
BHO-x32: Content Blocker Plugin -> {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll [2014-12-12] (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-21] (Oracle Corporation)
BHO-x32: Ads Removal -> {9D974C8C-6D92-44FB-BEAF-B45A1C0CF17F} -> C:\Program Files (x86)\IObit\IObit Malware Fighter\adsremoval\IE\Adblock.dll [2014-06-11] (Adblock)
BHO-x32: bestadblocker -> {A68EF7BE-20B0-4CAC-95E9-9442EDC46BBC} -> C:\Program Files (x86)\bestadblocker\WfzloncOFaEdIt.dll [2015-07-08] ()
BHO-x32: CutThePrIIce -> {AF7B4F14-EF87-4A15-965D-35B2700A866D} -> C:\Program Files (x86)\CutThePrIIce\dRBtildM3cfKGA.dll [2015-07-08] ()
BHO-x32: Virtual Keyboard Plugin -> {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll [2014-12-12] (Kaspersky Lab ZAO)
BHO-x32: Advanced SystemCare Surfing Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll [2015-04-01] (IObit)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-21] (Oracle Corporation)
BHO-x32: Safe Money Plugin -> {E3D96E85-529D-4269-AC6A-97CF9E2221E3} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll [2014-12-12] (Kaspersky Lab ZAO)
BHO-x32: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll [2015-05-25] (DVDVideoSoft Ltd.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{07806CF7-8EF9-48CC-AA59-4B025B0DCA64}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{87871B33-DD73-48AA-88FB-AD62945348AF}: [DhcpNameServer] 192.168.178.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF ProfilePath: C:\Users\Adminxx\AppData\Roaming\Mozilla\Firefox\Profiles\en1xp5t0.default
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-19] ()
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-21] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-21] (Oracle Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-07-02] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-19] ()
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll [2014-05-26] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-21] (Oracle Corporation)
FF Plugin-x32: @kaspersky.com/content_blocker_6418E0D362104DADA084DC312DFA8ABC -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\content_blocker@kaspersky.com [2014-12-12] ()
FF Plugin-x32: @kaspersky.com/online_banking_69A4E213815F42BD863D889007201D82 -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\online_banking@kaspersky.com [2014-12-12] ()
FF Plugin-x32: @kaspersky.com/virtual_keyboard_294FF26A1D5B455495946778FDE7CEDB -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com [2014-12-12] ()
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll [2014-10-30] (Nexon)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @raidcall.en/RCplugin -> C:\Users\Adminxx\AppData\Roaming\raidcall\plugins\nprcplugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-07-02] (Adobe Systems)
FF user.js: detected! => C:\Users\Adminxx\AppData\Roaming\Mozilla\Firefox\Profiles\en1xp5t0.default\user.js [2015-06-06]
FF Extension: CutThePrIIce - C:\Users\Adminxx\AppData\Roaming\Mozilla\Firefox\Profiles\en1xp5t0.default\Extensions\5Sc8@Q.org [2015-07-08]
FF Extension: Amazon-Icon - C:\Users\Adminxx\AppData\Roaming\Mozilla\Firefox\Profiles\en1xp5t0.default\Extensions\amazon-icon@giga.de [2015-04-21]
FF Extension: bestadblocker - C:\Users\Adminxx\AppData\Roaming\Mozilla\Firefox\Profiles\en1xp5t0.default\Extensions\b0kvzG@aKd7j.net [2015-07-08]
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Adminxx\AppData\Roaming\Mozilla\Firefox\Profiles\en1xp5t0.default\Extensions\iobitascsurfingprotection@iobit.com [2015-07-20]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Adminxx\AppData\Roaming\Mozilla\Firefox\Profiles\en1xp5t0.default\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900}.xpi [2015-06-07]
FF Extension: Adblock Plus - C:\Users\Adminxx\AppData\Roaming\Mozilla\Firefox\Profiles\en1xp5t0.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-12-17]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker_6418E0D362104DADA084DC312DFA8ABC@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\content_blocker@kaspersky.com [2014-12-12]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard_294FF26A1D5B455495946778FDE7CEDB@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com [2014-12-12]
FF HKLM-x32\...\Firefox\Extensions: [online_banking_69A4E213815F42BD863D889007201D82@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\online_banking@kaspersky.com [2014-12-12]
FF Extension: No Name - C:\Program Files (x86)\IObit Apps Toolbar\FF [not found]
Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (ProxFlow) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2014-06-28]
CHR Extension: (Google Docs) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-06-28]
CHR Extension: (Google Drive) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-06-28]
CHR Extension: (Weather) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\beapnbfmjmjhhfpaoajfhjbbfnnlfpnc [2014-12-06]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-06]
CHR Extension: (YouTube) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-06-28]
CHR Extension: (Google Search) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-06-28]
CHR Extension: (AdBlock) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-06-28]
CHR Extension: (Google Wallet) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-28]
CHR Extension: (Blue Space Sunset Chrome Theme) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\nndfdjfoclbidmgpmbelcieibgjjfdog [2014-06-28]
CHR Extension: (ProxPrice) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\nopgehbobniifpngnhmljfojnkkopbje [2014-06-28]
CHR Extension: (My Chrome Theme) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\oehpjpccmlcalbenfhnacjeocbjdonic [2014-06-28]
CHR Extension: (Evernote Web Clipper) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2015-07-08]
CHR Extension: (Gmail) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-06-28]
CHR Extension: (BuyNsave) - C:\ProgramData\dkaejgbnphngipoonelnaiblfdgpcpig\ []
CHR Extension: (CutThePrIIce) - C:\ProgramData\gcllmbgmppjgdmhopdojhhigojhfjkdh\ []
CHR Profile: C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Google Drive) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-09-08]
CHR Extension: (YouTube) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-08]
CHR Extension: (Google Search) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-08]
CHR Extension: (Kaspersky Protection) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho [2014-12-12]
CHR Extension: (AdBlock) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-07-02]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-12]
CHR Extension: (Zelda Dark) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lilddpnkkhkcjkdaaglfminjopbijomp [2015-06-15]
CHR Extension: (Google Wallet) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-08]
CHR Extension: (Evernote Web Clipper) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2015-07-08]
CHR Extension: (Gmail) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-08]
CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho
CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [680112 2015-06-09] (Adobe Systems Incorporated)
R2 AdvancedSystemCareService8; C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe [814880 2015-04-03] (IObit)
R2 AVP15.0.1; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\avp.exe [234520 2014-08-30] (Kaspersky Lab ZAO)
S3 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-05-23] (NVIDIA Corporation)
R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [344896 2014-09-30] (IObit)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2904864 2015-06-02] (IObit)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1893008 2015-05-23] (NVIDIA Corporation)
S3 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [23006864 2015-05-23] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1903472 2015-01-21] (Electronic Arts)
S3 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-06-23] ()
S3 RalinkRegistryWriter; C:\Program Files (x86)\TP-LINK\COMMON\RaRegistry.exe [185632 2010-06-25] (Ralink Technology, Corp.)
S3 RalinkRegistryWriter64; C:\Program Files (x86)\TP-LINK\COMMON\RaRegistry64.exe [212256 2010-06-25] (Ralink Technology, Corp.)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
S3 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [174600 2014-10-14] (Sandboxie Holdings, LLC)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R0 amdide64; C:\Windows\System32\DRIVERS\amdide64.sys [11944 2014-12-03] (Advanced Micro Devices Inc.)
R0 cm_km_w; C:\Windows\System32\DRIVERS\cm_km_w.sys [238288 2013-01-14] (Kaspersky Lab UK Ltd)
S3 EagleX64; No ImagePath
S3 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2013-03-23] (IObit)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2014-12-29] (REALiX(tm))
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [468576 2014-03-31] (Kaspersky Lab ZAO)
R2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [46144 2014-07-02] (Kaspersky Lab ZAO)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [150536 2014-12-12] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [246456 2014-08-12] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [819896 2015-03-10] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [30304 2014-02-25] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [28768 2014-03-28] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55872 2014-06-05] (Kaspersky Lab ZAO)
R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [77512 2014-12-12] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [179776 2014-07-09] (Kaspersky Lab ZAO)
R3 LADF_BakerCOnly; C:\Windows\System32\DRIVERS\ladfBakerCamd64.sys [410184 2011-03-18] (Logitech)
R3 LADF_BakerROnly; C:\Windows\System32\DRIVERS\ladfBakerRamd64.sys [335688 2011-03-18] (Logitech)
S3 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
S3 NTIOLib_1_0_4; No ImagePath
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-05-23] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2015-04-03] (NVIDIA Corporation)
S3 pmem; No ImagePath
S3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34848 2013-11-19] (IObit.com)
S3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13368 2013-01-23] ()
R3 SaiK1705; C:\Windows\System32\DRIVERS\SaiK1705.sys [180584 2012-09-20] (Saitek)
R3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [25120 2013-04-30] (Saitek)
R3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [52640 2013-04-30] (Saitek)
R3 SaiU1705; C:\Windows\System32\DRIVERS\SaiU1705.sys [47208 2012-09-20] (Saitek)
S3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [185352 2014-10-14] (Sandboxie Holdings, LLC)
S3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2013-11-19] (IObit.com)
S3 X86BDA; C:\Windows\System32\DRIVERS\OEMDrv.sys [268416 2011-06-08] ( ) [File not signed]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
U4 klkbdflt2; system32\DRIVERS\klkbdflt2.sys [X]
S0 SmartDefragDriver; System32\Drivers\SmartDefragDriver.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-07-24 15:00 - 2015-07-24 15:01 - 00025619 _____ C:\Users\Adminxx\Downloads\FRST.txt
2015-07-24 14:57 - 2015-07-24 14:57 - 02135552 _____ (Farbar) C:\Users\Adminxx\Downloads\FRST64.exe
2015-07-24 13:25 - 2015-07-24 13:25 - 00000590 _____ C:\Windows\PFRO.log
2015-07-24 13:25 - 2015-07-24 13:25 - 00000056 _____ C:\Windows\setupact.log
2015-07-24 13:25 - 2015-07-24 13:25 - 00000000 _____ C:\Windows\setuperr.log
2015-07-23 15:00 - 2015-07-23 15:00 - 00000189 _____ C:\siw_debug.txt
2015-07-23 14:43 - 2015-07-23 14:43 - 00000000 ____D C:\Users\Adminxx\AppData\Local\CrashRpt
2015-07-23 14:43 - 2015-07-23 14:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SIW
2015-07-23 14:43 - 2015-07-23 14:43 - 00000000 ____D C:\Program Files (x86)\SIW 2013 Home Edition
2015-07-23 14:41 - 2015-07-23 14:41 - 04524952 _____ (Topala Software Solutions ) C:\Users\Adminxx\Downloads\siw13-setup.exe
2015-07-21 19:14 - 2015-07-21 19:14 - 00000000 ____H C:\asc_rdflag
2015-07-21 03:26 - 2015-07-21 03:27 - 00003186 _____ C:\Windows\System32\Tasks\ASC8_PerformanceMonitor
2015-07-21 03:25 - 2015-07-21 03:25 - 00003184 _____ C:\Windows\System32\Tasks\SmartDefrag4_Update
2015-07-20 01:55 - 2015-07-20 01:55 - 00000000 ____D C:\Users\Adminxx\AppData\Roaming\Apple Computer
2015-07-20 01:54 - 2015-01-10 15:32 - 00128288 _____ (IObit) C:\Windows\SysWOW64\IObitSmartDefragExtension.dll
2015-07-20 01:53 - 2015-07-20 01:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 4
2015-07-19 02:10 - 2015-07-19 02:10 - 01187008 _____ (Adobe Systems Incorporated) C:\Users\Adminxx\Downloads\flashplayer18_ha_install.exe
2015-07-09 03:54 - 2015-07-09 03:54 - 01528823 _____ C:\Users\Adminxx\Downloads\LOLReplay-0.8.9.37.exe
2015-07-08 08:47 - 2015-07-08 08:47 - 00001149 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2015-07-08 08:30 - 2015-07-08 08:30 - 00262144 _____ C:\Windows\system32\config\elam
2015-07-08 04:41 - 2015-07-08 06:03 - 00000000 ____D C:\Program Files (x86)\Evernote Web Clipper
2015-07-08 04:40 - 2015-07-08 06:03 - 00000000 ____D C:\Program Files (x86)\CutThePrIIce
2015-07-08 04:40 - 2015-07-08 06:03 - 00000000 ____D C:\Program Files (x86)\bestadblocker
2015-07-08 04:39 - 2015-07-08 04:42 - 00000000 ____D C:\ProgramData\gcllmbgmppjgdmhopdojhhigojhfjkdh
2015-07-08 04:38 - 2015-07-08 08:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-07-08 04:38 - 2015-07-08 04:38 - 00000404 _____ C:\Windows\Tasks\JustWrite.job
2015-07-08 04:38 - 2015-07-08 04:38 - 00000000 ____D C:\ProgramData\{9a3ed56b-4740-7927-9a3e-ed56b47455ad}
2015-07-06 03:58 - 2015-07-06 03:58 - 42729104 _____ C:\Windows\system32\nvcompiler.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 37748880 _____ C:\Windows\SysWOW64\nvcompiler.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 30481552 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 22947144 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 16145200 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 15866992 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 15224784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 14497520 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 13263056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 11831856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 11011216 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-07-06 03:58 - 2015-07-06 03:58 - 02932368 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 02599752 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 01898128 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435330.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 01557832 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435330.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 01060168 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 01050768 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 00982672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 00975176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 00938752 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 00176904 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 00155280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 00150832 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 00128696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 00030966 _____ C:\Windows\system32\nvinfo.pb
2015-07-06 03:58 - 2015-07-06 03:58 - 00000000 ____D C:\Windows\system32\DAX2
2015-07-06 03:55 - 2015-07-06 03:55 - 12996528 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 05708736 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICV2apo.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 04496600 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2015-07-06 03:55 - 2015-07-06 03:55 - 03234520 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 03195416 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 03157796 _____ C:\Windows\system32\Drivers\rtkSSTsetting.dat
2015-07-06 03:55 - 2015-07-06 03:55 - 03129672 _____ (Intel Corporation) C:\Windows\system32\IntelSSTAPO.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 02930904 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 02862488 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2015-07-06 03:55 - 2015-07-06 03:55 - 02702040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2015-07-06 03:55 - 2015-07-06 03:55 - 02585816 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RltkAPO.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 02461016 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv211.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 02393432 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv201.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 01748184 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 01576976 _____ (Conexant Systems Inc.) C:\Windows\system32\CX64APO.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 01374640 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 01192368 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 01145264 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 00980400 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 00944984 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOProp.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 00728392 _____ (Intel Corporation) C:\Windows\system32\IntelSstCApoPropPage.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 00349528 _____ (Dolby Laboratories) C:\Windows\system32\HiFiDAX2API.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 00166616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2015-06-30 19:07 - 2015-06-30 19:07 - 00105546 _____ C:\Users\Adminxx\Downloads\Radvisual-Holographic-Folder.icns
2015-06-30 18:46 - 2015-06-30 18:47 - 52701004 _____ C:\Users\Adminxx\Downloads\Seven Lions with Myon & Shane 54 ft. Tove Lo - Strangers (The Eden Project Remix).mp4
2015-06-30 18:46 - 2015-06-30 18:47 - 05263042 _____ C:\Users\Adminxx\Downloads\videoplayback.m4a
2015-06-30 16:37 - 2015-06-30 16:40 - 00735295 _____ C:\Users\Adminxx\Downloads\CoreTemp_106.zip
2015-06-30 14:47 - 2015-06-30 14:47 - 00000000 ____D C:\Users\Adminxx\Documents\Adobe
2015-06-30 14:41 - 2015-06-30 14:41 - 01503788 _____ C:\Users\Adminxx\Downloads\Adobe+Creative+Cloud+Crack+and+Serial+Number+Free+Download_10924_i25545428_il345.exe.zip
2015-06-30 14:40 - 2015-06-30 14:40 - 00000000 ____D C:\Users\Adminxx\AppData\Roaming\PDAppFlex
2015-06-29 03:18 - 2015-06-29 03:18 - 00001222 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe After Effects CC 2015.lnk
2015-06-29 03:16 - 2015-06-29 03:16 - 00001328 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Character Animator (Preview).lnk
2015-06-27 16:25 - 2015-06-27 16:31 - 564744309 _____ C:\Users\Adminxx\Downloads\Windows6.1-KB947821-v34-x64.msu
2015-06-25 22:01 - 2015-06-25 22:01 - 00042020 _____ C:\Users\Adminxx\Downloads\Franksouza183-Fs-Places-folder-black.icns
2015-06-25 22:00 - 2015-06-25 22:00 - 00058989 _____ C:\Users\Adminxx\Downloads\Draseart-Dumper-PokeBall.icns
2015-06-25 21:41 - 2015-05-22 18:47 - 01021440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-06-25 21:41 - 2015-05-22 18:47 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-06-25 21:41 - 2015-05-22 18:47 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-06-25 21:41 - 2015-05-22 18:47 - 00423424 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-06-25 21:41 - 2015-05-22 18:47 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-06-25 21:41 - 2015-05-22 18:47 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-06-25 21:41 - 2015-05-22 18:42 - 01119232 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-06-25 21:41 - 2015-05-21 15:12 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-06-25 21:35 - 2015-07-24 13:29 - 00600694 _____ C:\Windows\WindowsUpdate.log
2015-06-25 21:33 - 2015-06-25 21:33 - 10082692 _____ C:\Users\Adminxx\Downloads\jelly_lockscreen_v_1_by_aidendrew-d8nz429.rmskin
2015-06-25 21:32 - 2015-06-25 21:32 - 00461353 _____ C:\Users\Adminxx\Downloads\___rainmeter_lockscreen____by_aidendrew-d8nbaht.rmskin
2015-06-25 21:30 - 2015-06-25 21:30 - 00032291 _____ C:\Users\Adminxx\Downloads\isteve___1_by_emilniemi-d8ok2dl.rmskin
2015-06-25 21:30 - 2015-06-25 21:30 - 00024058 _____ C:\Users\Adminxx\Downloads\fountain_of_colors__music_visualizer___rainmeter__by_alatsombath-d8kxplv.rmskin
2015-06-25 21:27 - 2015-06-25 21:27 - 05440992 _____ C:\Users\Adminxx\Downloads\drizzle_v1_0_by_fadeoffset-d8y6dqn.rmskin
2015-06-25 21:27 - 2015-06-25 21:27 - 00090906 _____ C:\Users\Adminxx\Downloads\radialclock_1_02_by_pvoijen-d8wzdmz.rmskin
2015-06-25 21:23 - 2015-06-25 21:23 - 00008997 _____ C:\Users\Adminxx\Downloads\Citrus_1.5.rmskin
2015-06-25 21:18 - 2015-06-25 21:18 - 01219088 _____ C:\Users\Adminxx\Downloads\Metropolis_1.0.rmskin
2015-06-25 21:01 - 2015-06-25 21:01 - 02335944 _____ C:\Users\Adminxx\Downloads\Rainmeter-3.3-r2416-beta (1).exe
2015-06-25 21:01 - 2015-06-25 21:01 - 00001706 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rainmeter.lnk
2015-06-25 21:01 - 2015-06-25 21:01 - 00000000 ____D C:\Program Files\Rainmeter
2015-06-25 20:59 - 2015-06-25 20:59 - 00090435 _____ C:\Users\Adminxx\Downloads\Blue_Visualization_2.0.rmskin
2015-06-25 20:57 - 2015-06-25 20:57 - 00146725 _____ C:\Users\Adminxx\Downloads\Gray_.rmskin
2015-06-25 20:56 - 2015-06-25 20:56 - 05408767 _____ C:\Users\Adminxx\Downloads\The_Arc_Menu_Launcher_Suite_3.2.0.zip
2015-06-25 20:37 - 2015-06-25 20:37 - 00000000 ____D C:\Rainmeter
2015-06-25 20:36 - 2015-06-25 20:36 - 02335944 _____ C:\Users\Adminxx\Downloads\Rainmeter-3.3-r2416-beta.exe
2015-06-25 13:06 - 2015-06-25 13:06 - 01528662 _____ C:\Users\Adminxx\Downloads\LOLReplay-0.8.9.35.exe
2015-06-24 00:52 - 2015-06-24 00:52 - 00000097 _____ C:\Users\Adminxx\Downloads\Einhorn---
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-07-24 15:00 - 2014-12-11 02:45 - 00000000 ____D C:\FRST
2015-07-24 14:58 - 2014-12-12 22:02 - 00000000 ____D C:\Users\Adminxx\AppData\Roaming\Skype
2015-07-24 14:09 - 2014-10-17 17:38 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-07-24 13:40 - 2014-12-12 19:29 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2015-07-24 13:33 - 2009-07-14 06:45 - 00020512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-07-24 13:33 - 2009-07-14 06:45 - 00020512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-07-24 13:26 - 2014-04-27 16:11 - 00002876 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (Adminxx)
2015-07-24 13:25 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-23 15:26 - 2015-01-04 13:59 - 00000000 ____D C:\Users\Public\Documents\Blizzard Entertainment
2015-07-23 00:44 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-07-21 19:14 - 2014-05-30 12:23 - 56094720 _____ C:\Windows\system32\config\SOFTWARE.iodefrag.bak
2015-07-21 19:14 - 2014-05-30 12:23 - 00282624 _____ C:\Windows\system32\config\DEFAULT.iodefrag.bak
2015-07-21 19:14 - 2014-05-30 12:23 - 00028672 _____ C:\Windows\system32\config\SAM.iodefrag.bak
2015-07-21 19:14 - 2014-05-30 12:23 - 00024576 _____ C:\Windows\system32\config\SECURITY.iodefrag.bak
2015-07-20 13:44 - 2014-12-05 01:54 - 00000392 _____ C:\Windows\Tasks\update-sys.job
2015-07-20 13:44 - 2014-12-05 01:54 - 00000392 _____ C:\Windows\Tasks\update-S-1-5-21-877811456-2021815861-1849052563-1000.job
2015-07-20 03:33 - 2015-06-08 15:26 - 00000000 ____D C:\ProgramData\boost_interprocess
2015-07-20 03:33 - 2014-06-23 19:54 - 00000000 ____D C:\Users\Adminxx\AppData\Local\Adobe
2015-07-20 02:34 - 2014-12-27 15:54 - 00003134 _____ C:\Windows\System32\Tasks\{386CB472-0168-45D8-97E3-6ACAA83DEFB4}
2015-07-20 02:34 - 2014-12-05 01:54 - 00003384 _____ C:\Windows\System32\Tasks\update-S-1-5-21-877811456-2021815861-1849052563-1000
2015-07-20 02:28 - 2014-12-05 01:54 - 00003402 _____ C:\Windows\System32\Tasks\update-sys
2015-07-20 02:28 - 2014-06-23 20:45 - 00003506 _____ C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-KEKZ-PC-Adminxx
2015-07-20 01:54 - 2014-12-19 13:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 8
2015-07-20 01:53 - 2015-03-16 18:50 - 00000000 ____D C:\Users\Adminxx\AppData\Roaming\IObit
2015-07-20 01:53 - 2014-04-27 16:09 - 00000000 ____D C:\Program Files (x86)\IObit
2015-07-19 02:09 - 2014-10-17 17:38 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-07-19 02:09 - 2014-10-17 17:38 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-07-19 02:09 - 2014-10-17 17:38 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-07-19 00:59 - 2014-04-27 16:15 - 00000000 ____D C:\ProgramData\ProductData
2015-07-12 15:52 - 2014-04-29 19:35 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-07-12 15:52 - 2014-04-29 19:35 - 00000000 ____D C:\ProgramData\Skype
2015-07-09 04:02 - 2014-05-09 22:58 - 00000000 ____D C:\Users\Adminxx\Documents\LOLReplay
2015-07-09 03:54 - 2014-11-27 05:34 - 00000000 ____D C:\Program Files (x86)\LOLReplay
2015-07-09 03:54 - 2014-05-09 22:58 - 00001913 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LOL Recorder.lnk
2015-07-08 08:47 - 2014-06-23 19:58 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-07-08 08:40 - 2014-12-17 05:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-07-08 04:41 - 2014-12-06 05:34 - 00000000 ____D C:\ProgramData\10033927629175197721
2015-07-07 09:40 - 2014-07-06 06:08 - 00000000 ____D C:\Users\Adminxx\AppData\Local\Battle.net
2015-07-07 09:28 - 2014-07-06 06:08 - 00000000 ____D C:\Program Files (x86)\Battle.net
2015-07-06 04:02 - 2014-04-27 21:23 - 00000000 ____D C:\ProgramData\NVIDIA
2015-07-06 04:01 - 2014-04-27 21:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-07-06 04:01 - 2014-04-27 21:05 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-07-06 03:58 - 2015-05-19 23:58 - 01099992 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-07-06 03:58 - 2014-05-29 19:25 - 17724600 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-07-06 03:58 - 2014-05-29 19:25 - 12855416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-07-06 03:58 - 2014-05-29 19:25 - 02997544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-07-06 03:58 - 2014-04-27 21:21 - 03395648 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-07-06 03:57 - 2014-04-27 22:33 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2015-07-05 20:54 - 2014-04-26 20:10 - 00000000 ____D C:\Users\Adminxx
2015-07-03 05:16 - 2014-04-29 19:48 - 00000000 ____D C:\Program Files (x86)\Steam
2015-07-03 00:14 - 2014-04-26 21:01 - 00000000 ____D C:\Windows\Minidump
2015-06-30 14:48 - 2015-03-16 20:58 - 00000000 ____D C:\Users\Adminxx\AppData\Roaming\Adobe
2015-06-30 14:48 - 2014-06-23 20:44 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2015-06-29 15:37 - 2014-04-27 16:10 - 00064024 _____ C:\Users\Adminxx\AppData\Local\GDIPFONTCACHEV1.DAT
2015-06-29 15:36 - 2009-07-14 06:45 - 04959608 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-29 03:22 - 2014-06-23 20:29 - 00000000 ____D C:\Program Files\Common Files\Adobe
2015-06-29 03:18 - 2014-06-23 20:30 - 00000000 ____D C:\Program Files\Adobe
2015-06-29 03:13 - 2014-04-29 19:46 - 00000000 ____D C:\ProgramData\Package Cache
2015-06-29 02:51 - 2014-06-23 20:00 - 00000000 ____D C:\ProgramData\Adobe
2015-06-28 22:40 - 2014-05-10 18:49 - 00000000 ____D C:\Users\Adminxx\AppData\Local\Spotify
2015-06-28 22:37 - 2015-05-01 09:29 - 00000000 ____D C:\Users\Adminxx\AppData\Roaming\Spotify
2015-06-28 13:54 - 2015-06-14 18:39 - 00000000 ___RD C:\Users\Adminxx\Desktop\Pokemon
2015-06-26 02:17 - 2015-04-15 12:49 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-06-26 02:17 - 2015-04-15 12:49 - 00000000 ____D C:\Windows\system32\appraiser
2015-06-25 21:46 - 2014-04-27 16:27 - 00000000 ____D C:\Windows\system32\MRT
2015-06-25 21:41 - 2014-04-27 16:27 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
==================== Files in the root of some directories =======
2015-04-22 23:12 - 2015-04-22 23:12 - 0001951 _____ () C:\Users\Adminxx\AppData\Local\recently-used.xbel
2014-11-20 05:41 - 2014-11-20 05:41 - 0007601 _____ () C:\Users\Adminxx\AppData\Local\Resmon.ResmonCfg
2014-12-05 01:54 - 2014-12-05 01:54 - 0000003 _____ () C:\Users\Adminxx\AppData\Local\updater.log
2014-12-05 01:54 - 2015-04-24 00:04 - 0000424 _____ () C:\Users\Adminxx\AppData\Local\UserProducts.xml
2014-04-27 22:33 - 2014-04-27 22:33 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-07-24 09:49
==================== End of log ============================
--- --- ---
[/CODE]
und uhm soll ich mir nun noch ein anderes Antiviren Programm runterladen oder eher lassen?Weil andere habe ich auf dem PC nicht drauf und wo die Logs von Kaspersky sind und MRT.exe weiß ich leider nicht. Code:
Additional
FRST Logfile:
Code:
scan result of Farbar Recovery Scan Tool (x64) Version:20-07-2015
Ran by Adminxx at 2015-07-24 15:02:30
Running from C:\Users\Adminxx\Downloads
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-877811456-2021815861-1849052563-500 - Administrator - Disabled)
Adminxx (S-1-5-21-877811456-2021815861-1849052563-1000 - Administrator - Enabled) => C:\Users\Adminxx
Gast (S-1-5-21-877811456-2021815861-1849052563-501 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Kaspersky Internet Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}
AS: Kaspersky Internet Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: IObit Malware Fighter (Disabled - Up to date) {A751AC20-3B48-5237-898A-78C4436BB78D}
FW: Kaspersky Internet Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe After Effects CC 2015 (HKLM-x32\...\{147EC100-14BE-45EF-AB42-35BAEE7D02F0}) (Version: 13.5.0 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 3.1.3.121 - Adobe Systems Incorporated)
Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Photoshop CC 2014 (HKLM-x32\...\{D7A4F897-B20A-42D0-862D-CB5F6DB7391D}) (Version: 15.0 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Advanced SystemCare 8 (HKLM-x32\...\Advanced SystemCare 8_is1) (Version: 8.3.0 - IObit)
Akamai NetSession Interface (HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\Akamai) (Version: - Akamai Technologies, Inc)
Auto Keyboard v1.6 (HKLM-x32\...\{71E16EE4-BBED-44A8-8724-9E68D05EE945}_is1) (Version: 1.6 - MurGee.com)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.4.0 - EA Digital Illusions CE AB)
Call of Duty: Black Ops II - Multiplayer (HKLM-x32\...\Steam App 202990) (Version: - )
CCleaner (HKLM\...\CCleaner) (Version: 5.05 - Piriform)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
Curse (HKLM-x32\...\{1F2611FB-6F69-4AA8-BECD-243BD8CB45F3}) (Version: 6.0.0.0 - Curse)
Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment)
Driver Booster 2.3 (HKLM-x32\...\Driver Booster_is1) (Version: 2.3 - IObit)
Druckerdeinstallation für EPSON SX430 Series (HKLM\...\EPSON SX430 Series) (Version: - SEIKO EPSON Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
Fiesta Online DE (HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\fiestaonline_de) (Version: 1.0.0.1 - Gamigo Games)
Free YouTube to MP3 Converter version 3.12.59.525 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.59.525 - DVDVideoSoft Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.132 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
Happy Cloud Client (HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\HappyCloud) (Version: 5.24 - Happy Cloud, Inc.)
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
HexChat (HKLM\...\HexChat_is1) (Version: 2.10.2 - HexChat)
IObit Malware Fighter (HKLM-x32\...\IObit Malware Fighter_is1) (Version: 2.5 - IObit)
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 4.3.0.5 - IObit)
Java 7 Update 72 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217072FF}) (Version: 7.0.720 - Oracle)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418045F0}) (Version: 8.0.450 - Oracle Corporation)
Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
Java SE Development Kit 8 Update 25 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180250}) (Version: 8.0.250.18 - Oracle Corporation)
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{8ED07EBD-22AD-415A-B71E-C1AD86862C2E}) (Version: 15.0.1.415 - Kaspersky Lab)
Kaspersky Internet Security (x32 Version: 15.0.1.415 - Kaspersky Lab) Hidden
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Lightshot-5.2.1.1 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.2.1.1 - Skillbrains)
Logitech G930 (HKLM\...\{91C4D79C-3579-48E8-ADFA-8818042AEB73}) (Version: 1.0.364 - Logitech)
LOLReplay (HKLM-x32\...\LOLReplay) (Version: 0.8.9.37 - www.leaguereplays.com)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mozilla Firefox 39.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 39.0 (x86 de)) (Version: 39.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 34.0.5 - Mozilla)
MSI Afterburner 2.3.1 (HKLM-x32\...\Afterburner) (Version: 2.3.1 - MSI Co., LTD)
MSI Kombustor 2.5.0 (HKLM-x32\...\{0B7C79A5-5CB2-4ABD-A9C1-92A6213CE8DD}_is1) (Version: - MSI Co., LTD)
MTA:SA v1.3.5 (HKLM-x32\...\MTA:SA 1.3) (Version: v1.3.5 - Multi Theft Auto)
MTA:SA v1.4.0 (HKLM-x32\...\MTA:SA 1.4) (Version: v1.4.0 - Multi Theft Auto)
MyPC Backup (HKLM\...\OLBPre) (Version: - MyPC Backup) <==== ATTENTION
NEC Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{D7BF9739-8A68-4335-BBEE-37752AD9E86B}) (Version: 1.0.18.0 - NEC Electronics Corporation)
NEC Electronics USB 3.0 Host Controller Driver (x32 Version: 1.0.18.0 - NEC Electronics Corporation) Hidden
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.4.5.28 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.5.28 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - )
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.)
Rainmeter (HKLM-x32\...\Rainmeter) (Version: 3.3 beta r2416 - )
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.77.1126.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7541 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.51 - Piriform)
Sandboxie 4.14 (64-bit) (HKLM\...\Sandboxie) (Version: 4.14 - Sandboxie Holdings, LLC)
Scordalus Setup Version 1.0 (HKLM-x32\...\{870A82F3-865A-43AE-9E64-77F85CB0FFE9}_is1) (Version: 1.0 - Scordalus Network)
SHIELD Streaming (Version: 4.1.2000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.5.28 - NVIDIA Corporation) Hidden
Shutdown Manager (HKLM-x32\...\{C457BA5F-35F9-480C-90F8-5C91DB443A15}_is1) (Version: 2.0.7 - Daniel Höllig)
SIW 2013 Home Edition (HKLM-x32\...\{AB67580-257C-45FF-B8F4-C8C30682091A}_is1) (Version: 2013.05.14 - Topala Software Solutions)
Skype™ 7.6 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.6.105 - Skype Technologies S.A.)
Smart Defrag 4 (HKLM-x32\...\Smart Defrag 4_is1) (Version: 4.1 - IObit)
Smart Technology Programming Software 7.0.27.13 (HKLM\...\{C9193CBB-C31A-412A-A074-AD08F0F2CF3D}) (Version: 7.0.27.13 - Mad Catz)
Spotify (HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\Spotify) (Version: 1.0.4.90.g0b6df40b - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
Surfing Protection (HKLM-x32\...\IObit Surfing Protection_is1) (Version: 1.2 - IObit)
System Requirements Lab CYRI (HKLM-x32\...\{6C8C4577-8E15-4C63-96ED-D40F2072FF74}) (Version: 6.0.19.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.32494 - TeamViewer)
The Binding of Isaac: Rebirth (HKLM-x32\...\Steam App 250900) (Version: - Nicalis, Inc.)
TP-LINK Wireless Utility (HKLM-x32\...\{6FFEF5E1-F7B0-40DD-838D-557BD7EE4301}) (Version: 1.5.6.0 - TP-LINK)
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
Wireshark 1.12.2 (64-bit) (HKLM-x32\...\Wireshark) (Version: 1.12.2 - The Wireshark developer community, hxxp://www.wireshark.org)
Yahoo Community Smartbar Engine (HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\{79a1ec54-8fe4-4517-be9e-1122e2792dec}) (Version: 11.38.66.16134 - Linkury Inc.) <==== ATTENTION
Zune (HKLM\...\Zune) (Version: 04.08.2345.00 - Microsoft Corporation)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-877811456-2021815861-1849052563-1000_Classes\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-877811456-2021815861-1849052563-1000_Classes\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-877811456-2021815861-1849052563-1000_Classes\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-877811456-2021815861-1849052563-1000_Classes\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\ooofilt_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-877811456-2021815861-1849052563-1000_Classes\CLSID\{AE424E85-F6DF-4910-A6A9-438797986431}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\propertyhdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-877811456-2021815861-1849052563-1000_Classes\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-877811456-2021815861-1849052563-1000_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
==================== Restore Points =========================
24-07-2015 09:56:16 Geplanter Prüfpunkt
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:34 - 2014-12-06 06:21 - 00000959 __RAH C:\Windows\system32\Drivers\etc\hosts
0.0.0.0 host.sandboxie.com
0.0.0.0 host2.sandboxie.com
0.0.0.0 host3.sandboxie.com
0.0.0.0 host4.sandboxie.com
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0403E109-2010-4A1A-9A8A-B9C3BD621E9E} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-03-25] ()
Task: {13829D37-79A7-443C-BFFD-D9DB14748168} - System32\Tasks\{364F549A-CA2E-4D8B-BCAD-B388B6719CFA} => pcalua.exe -a "C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\Uninstall.exe"
Task: {20006C6A-A99B-40EC-BE9C-77070A943DC3} - System32\Tasks\ASC8_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare 8\Monitor.exe [2015-06-10] (IObit)
Task: {2CEF832B-83F3-4206-B080-43AB9FE691D6} - System32\Tasks\AdobeAAMUpdater-1.0-KEKZ-PC-Adminxx => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-05-26] (Adobe Systems Incorporated)
Task: {36425D32-A9FB-4705-A816-B85AD8522AC3} - System32\Tasks\SmartDefrag4_Update => C:\Program Files (x86)\IObit\Smart Defrag 4\AutoUpdate.exe [2015-03-03] (IObit)
Task: {3DC9986E-CDA4-47B5-A7DB-6361525C170A} - System32\Tasks\update-S-1-5-21-877811456-2021815861-1849052563-1000 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-03-25] ()
Task: {49177CC2-00BC-418A-B152-E9ACD7C70ADE} - System32\Tasks\ASC8_SkipUac_Adminxx => C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASC.exe [2015-06-16] (IObit)
Task: {5306945C-F39B-4991-8174-BC38BC3CA12D} - System32\Tasks\Driver Booster SkipUAC (Adminxx) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe [2015-04-28] (IObit)
Task: {62CB6F46-B940-44A8-8132-69EEE3C0C59B} - System32\Tasks\{6FA0550B-BA83-4446-A73D-FD7B6EB604B0} => C:\Users\Adminxx\Desktop\Vicinity Online\VicinityLauncher.exe
Task: {67164103-B51E-4545-978F-8CAEE754BC4E} - System32\Tasks\{A9A292A1-85C6-41E2-9D5A-AD2B3D8628EC} => pcalua.exe -a "C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\Uninstall.exe"
Task: {793A8584-6DE1-4C35-9D39-BFD4B651D4B8} - System32\Tasks\Driver Booster Scan => C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe [2015-04-07] (IObit)
Task: {92881E4D-E5B6-4800-BC37-47F9A09B6F28} - System32\Tasks\Uninstaller_SkipUac_Administrator => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2015-05-20] (IObit)
Task: {9A880C69-2884-4351-8CE6-D326090395C3} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-19] (Adobe Systems Incorporated)
Task: {C6CF2936-D030-4162-8E31-56BFDDE9D6E4} - System32\Tasks\{386CB472-0168-45D8-97E3-6ACAA83DEFB4} => pcalua.exe -a C:\Users\Adminxx\Downloads\NetFx64.exe -d C:\Users\Adminxx\Downloads
Task: {D15596EA-3E1D-496F-A973-6E7F8354DE83} - System32\Tasks\Driver Booster Update => C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe [2015-04-28] (IObit)
Task: {D2718CB9-C3F5-4E96-921A-A58713D9A874} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-04-23] (Piriform Ltd)
Task: {D82E79F4-9A50-4258-9283-8BA94E09A812} - System32\Tasks\{7776A7EB-3B1D-4BDA-B1FC-7D5C81511218} => C:\Users\Adminxx\Desktop\Vicinity Online\VicinityLauncher.exe
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\JustWrite.job => c:\programdata\{9a3ed56b-4740-7927-9a3e-ed56b47455ad}\alexamilesakahaleyissoarx.exe-1436323086587.exe <==== ATTENTION
Task: C:\Windows\Tasks\update-S-1-5-21-877811456-2021815861-1849052563-1000.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\Windows\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
==================== Loaded Modules (Whitelisted) ==============
2014-04-27 21:22 - 2015-06-17 08:48 - 00116368 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-05-31 14:00 - 2015-05-31 14:00 - 00036544 _____ () C:\Program Files\Rainmeter\Rainmeter.exe
2015-05-31 14:00 - 2015-05-31 14:00 - 00781504 _____ () C:\Program Files\Rainmeter\Rainmeter.dll
2015-05-31 13:59 - 2015-05-31 13:59 - 00011776 _____ () C:\Program Files\Rainmeter\Plugins\PowerPlugin.dll
2015-05-31 13:59 - 2015-05-31 13:59 - 00058368 _____ () C:\Program Files\Rainmeter\Plugins\WebParser.dll
2015-05-31 13:59 - 2015-05-31 13:59 - 00033792 _____ () C:\Program Files\Rainmeter\Plugins\AudioLevel.DLL
2014-01-21 17:54 - 2015-02-20 02:15 - 01294336 _____ () C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
2015-07-23 00:54 - 2015-07-23 00:54 - 02354168 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.250\deploy\LoLLauncher.exe
2015-07-23 00:54 - 2015-07-23 00:54 - 03985912 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.34\deploy\LoLPatcher.exe
2015-02-20 02:31 - 2015-02-20 02:31 - 00074752 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.152\deploy\LolClient.exe
2014-12-19 13:04 - 2013-10-25 12:08 - 00517408 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 8\sqlite3.dll
2014-08-30 18:12 - 2014-08-30 18:12 - 01269952 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\kpcengine.2.3.dll
2015-07-08 06:21 - 2015-07-08 06:21 - 00424448 _____ () C:\Program Files (x86)\LOLReplay\LOLUtils.dll
2015-04-14 23:15 - 2015-05-23 03:48 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2014-12-19 13:04 - 2013-01-15 18:48 - 00348992 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madExcept_.bpl
2014-12-19 13:04 - 2013-01-15 18:48 - 00183616 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madBasic_.bpl
2014-12-19 13:04 - 2013-01-15 18:48 - 00051008 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madDisAsm_.bpl
2015-07-07 19:40 - 2015-07-07 05:49 - 01281864 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.132\libglesv2.dll
2015-07-07 19:40 - 2015-07-07 05:49 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.132\libegl.dll
2015-03-16 12:11 - 2015-03-16 12:11 - 00040448 _____ () C:\Program Files (x86)\LOLReplay\Launcher.dll
2015-07-23 00:54 - 2015-07-23 00:54 - 01715704 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.34\deploy\RiotLauncher.dll
2015-03-27 05:31 - 2015-03-27 05:31 - 00166400 _____ () C:\Program Files (x86)\LOLReplay\Air.dll
2015-02-20 02:23 - 2015-02-20 02:23 - 04774248 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.152\deploy\Adobe AIR\Versions\1.0\Resources\WebKit.dll
2015-02-20 02:23 - 2015-02-20 02:23 - 16032616 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.152\deploy\Adobe AIR\Versions\1.0\Resources\NPSWF32.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\ProgramData:NT
AlternateDataStreams: C:\ProgramData:NT2
AlternateDataStreams: C:\Users\All Users:NT
AlternateDataStreams: C:\Users\All Users:NT2
AlternateDataStreams: C:\Users\Adminxx\Anwendungsdaten:NT
AlternateDataStreams: C:\Users\Adminxx\Anwendungsdaten:NT2
AlternateDataStreams: C:\Users\Adminxx\AppData\Roaming:NT
AlternateDataStreams: C:\Users\Adminxx\AppData\Roaming:NT2
AlternateDataStreams: C:\ProgramData\Anwendungsdaten:NT
AlternateDataStreams: C:\ProgramData\Anwendungsdaten:NT2
AlternateDataStreams: C:\ProgramData\Application Data:NT
AlternateDataStreams: C:\ProgramData\Application Data:NT2
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2
==================== Safe Mode (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice => ""="Service"
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\100sexlinks.com -> 100sexlinks.com
There are 4788 more restricted sites.
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-877811456-2021815861-1849052563-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Adminxx\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TP-LINK Wireless Utility.lnk => C:\Windows\pss\TP-LINK Wireless Utility.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Adminxx^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Curse.lnk => C:\Windows\pss\Curse.lnk.Startup
MSCONFIG\startupreg: Adobe Creative Cloud => "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: Advanced SystemCare 7 =>
MSCONFIG\startupreg: APSDaemon =>
MSCONFIG\startupreg: Browser Infrastructure Helper =>
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: EPLTarget =>
MSCONFIG\startupreg: EvolveClient =>
MSCONFIG\startupreg: IObit Malware Fighter => "C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe" /autostart
MSCONFIG\startupreg: MurGee.com Auto Keyboard => C:\ProgramData\Auto Keyboard\AutoKeyboard.exe :silent
MSCONFIG\startupreg: NUSB3MON => "C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
MSCONFIG\startupreg: puush =>
MSCONFIG\startupreg: QuickTime Task =>
MSCONFIG\startupreg: ShadowPlay => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
MSCONFIG\startupreg: Spotify =>
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Adminxx\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: Zune Launcher => "C:\Program Files\Zune\ZuneLauncher.exe"
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{888FC972-2F45-4974-B011-2A5BAF6A47E7}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{5887CDF1-C533-4687-ADA1-4C2D05A2F617}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{0FAD3BC9-E2EB-4FB9-88CF-53A8A529802F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{A0FBA2AE-182E-4BF0-BFA1-991AFD743974}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{ABA8C8E1-6771-4CF8-80E6-FD1309A7F24E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{0DDB10F9-4020-4707-B178-2757975AA16E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{E9569CD6-C259-44EB-A20B-91A82E36B3CA}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{7C13CB8B-BDF3-462C-9D2A-14795A78E974}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{D33443EA-9983-4990-8708-87ACB93EDD9E}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{8D571B72-CD50-4538-A3B5-CB67DE752D38}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{6CD58CA9-1084-4681-9B0A-F0962C5B38E0}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{CC64DB76-EA15-406B-AE3C-6D29A5303416}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{6BD50363-3232-4487-BC10-5518154754AA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{E92E636F-6D22-44B9-89F6-BADE1BD67B9E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{CA91E12C-3D2F-4A47-AE18-B729839F178E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{D0BF7B70-AE87-4A51-B865-66173B2F28B1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{3BFE2313-300C-40CD-ACA9-24E43C3F6681}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{ED57C8B9-616D-463B-9171-E284FA1529DD}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{FC37E0DC-FADC-4494-ABAA-416E85483D02}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{D388CBE9-09FE-4356-B921-9EB0295EE627}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{CF0200C2-DA03-4749-A4E4-62AC5A24E43D}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{720FE1E0-F8A0-4B6D-9310-E3D5CDEBABEB}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{D75295B4-DA8B-4079-99AC-B9B9A8881994}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe
FirewallRules: [{A7040605-37D3-424F-8100-9A75AEC4A9D9}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe
FirewallRules: [{9CBCE74B-7ADC-447D-8E8F-76B3F67AD05B}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{7497CDF4-B924-4780-968F-9D2E9C7C1D77}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{B4051526-1A9C-4E32-98D1-442DE5853017}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{C5DB0057-5A5E-4D99-9399-CE850E5521D5}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{917219B2-7DB2-4655-A292-DC626F0F150A}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{F3CA7A40-ED25-4AB7-8A4A-4ECB0B1E13E5}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{145D516D-9FAF-4B48-95C0-9E42322B4C99}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{0C1E7CD5-63E7-4F10-B791-B66893092D61}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [TCP Query User{399320A3-E702-45D7-B9B5-0F6443B0694A}C:\users\adminxx\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\adminxx\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{DAB9CB42-4631-4DB0-9545-C6D23148B54B}C:\users\adminxx\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\adminxx\appdata\local\akamai\netsession_win.exe
FirewallRules: [{290EAC14-3629-42C5-B893-D365FCE129EB}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [{EC58FE13-0AD0-43E6-A6BD-9F4BAAE48B31}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [{54421C57-A574-4BC7-B13D-FD8279460782}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{0AF3498E-B2CE-425D-9F23-0BE682E84C1B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C9E50E22-3B25-48F0-8D65-9DA21E5DAAF6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{88CE7845-0314-456B-A1E6-FBA21E271C49}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{DEF96DF8-26EB-45B9-B061-3E6374B1E97B}C:\users\adminxx\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\adminxx\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{74EAF886-C054-455F-AD38-25FB68CC06BE}C:\users\adminxx\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\adminxx\appdata\roaming\spotify\spotify.exe
FirewallRules: [{601ECCFB-1896-4029-820B-7E7C1798B629}] => (Allow) %ProgramFiles%\Zune\Zune.exe
FirewallRules: [{024EF658-720F-4B6A-8D9D-F228A6198C0D}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{962139BA-D304-4C20-930F-FBFD368F9F05}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{FC4E485B-0B14-47F0-85B3-D3D0EC1B986A}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{2C5FFC94-1B6C-45C5-8ADC-8CDFDEEBA8D5}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{344FFD4B-3FA3-48BD-A7B0-047B1EAD5023}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{17B408A0-3115-4E88-A9BA-EA5162EA3C46}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{C9D5782D-2902-4CB6-9D39-8D28C7EA5A61}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{E389075A-9E1F-4F1F-83CF-BCD0C25DD6B7}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{6B810E55-FB5A-41A3-9430-11DB0F64B5E0}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Faulty Device Manager Devices =============
Name: Programmable Root Enumerator
Description: Programming Support
Class Guid: {678dcf40-e2e6-11d5-8cd5-e960089ea00a}
Manufacturer: Mad Catz
Service: SaiNtBus
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
Name: Microsoft-ISATAP-Adapter
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: Microsoft-Teredo-Tunneling-Adapter
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: Programmable Root Enumerator
Description: Programming Support
Class Guid: {678dcf40-e2e6-11d5-8cd5-e960089ea00a}
Manufacturer: Mad Catz
Service: SaiNtBus
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
==================== Event log errors: =========================
Application errors:
==================
Error: (07/24/2015 09:56:17 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.
System Error:
Falscher Parameter.
.
Error: (07/24/2015 09:56:16 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.
System Error:
Falscher Parameter.
.
Error: (07/19/2015 04:52:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: rads_user_kernel.exe, Version: 0.0.0.0, Zeitstempel: 0x4e65c1ac
Name des fehlerhaften Moduls: rads_user_kernel.exe, Version: 0.0.0.0, Zeitstempel: 0x4e65c1ac
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000b8554
ID des fehlerhaften Prozesses: 0x738
Startzeit der fehlerhaften Anwendung: 0xrads_user_kernel.exe0
Pfad der fehlerhaften Anwendung: rads_user_kernel.exe1
Pfad des fehlerhaften Moduls: rads_user_kernel.exe2
Berichtskennung: rads_user_kernel.exe3
Error: (07/19/2015 04:43:29 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: An error has occurred (NvVAD initialization failed [6]).
Error: (07/19/2015 04:43:29 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: An error has occurred (Failed to set NvVAD endpoint as default Audio endpoint [0]).
Error: (07/19/2015 04:43:29 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: An error has occurred (NvVAD endpoint registration failed [0]).
Error: (07/14/2015 01:49:02 AM) (Source: AdvancedSystemCareService8) (EventID: 0) (User: )
Description: Das Handle ist ungültig
Error: (07/11/2015 03:58:18 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: rads_user_kernel.exe, Version: 0.0.0.0, Zeitstempel: 0x4e65c1ac
Name des fehlerhaften Moduls: rads_user_kernel.exe, Version: 0.0.0.0, Zeitstempel: 0x4e65c1ac
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000b8554
ID des fehlerhaften Prozesses: 0x1d58
Startzeit der fehlerhaften Anwendung: 0xrads_user_kernel.exe0
Pfad der fehlerhaften Anwendung: rads_user_kernel.exe1
Pfad des fehlerhaften Moduls: rads_user_kernel.exe2
Berichtskennung: rads_user_kernel.exe3
Error: (07/10/2015 01:32:26 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: An error has occurred (NvVAD initialization failed [6]).
Error: (07/10/2015 01:32:26 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: An error has occurred (Failed to set NvVAD endpoint as default Audio endpoint [0]).
System errors:
=============
Error: (07/24/2015 01:30:59 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.
Error: (07/24/2015 01:30:59 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.
Error: (07/24/2015 01:30:59 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.
Error: (07/24/2015 01:30:17 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.
Error: (07/24/2015 01:30:17 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.
Error: (07/24/2015 01:30:17 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.
Error: (07/24/2015 01:30:17 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.
Error: (07/24/2015 01:30:17 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.
Error: (07/24/2015 01:30:17 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.
Error: (07/24/2015 05:08:29 AM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.
Microsoft Office:
=========================
Error: (07/24/2015 09:56:17 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.
System Error:
Falscher Parameter.
Error: (07/24/2015 09:56:16 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.
System Error:
Falscher Parameter.
Error: (07/19/2015 04:52:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: rads_user_kernel.exe0.0.0.04e65c1acrads_user_kernel.exe0.0.0.04e65c1acc0000005000b855473801d0c2328272f80eC:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exeC:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exec1ae0044-2e25-11e5-b6e1-8c89a569b94b
Error: (07/19/2015 04:43:29 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]
Error: (07/19/2015 04:43:29 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]
Error: (07/19/2015 04:43:29 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcNvVAD endpoint registration failed [0]
Error: (07/14/2015 01:49:02 AM) (Source: AdvancedSystemCareService8) (EventID: 0) (User: )
Description: Das Handle ist ungültig
Error: (07/11/2015 03:58:18 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: rads_user_kernel.exe0.0.0.04e65c1acrads_user_kernel.exe0.0.0.04e65c1acc0000005000b85541d5801d0bb7d07c2ddffC:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exeC:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe4c2937ee-2770-11e5-9033-8c89a569b94b
Error: (07/10/2015 01:32:26 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]
Error: (07/10/2015 01:32:26 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]
CodeIntegrity Errors:
===================================
Date: 2015-07-20 01:10:30.626
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-07-20 01:10:30.623
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-07-20 00:42:55.613
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-07-20 00:42:55.599
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-07-08 09:58:23.735
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-07-08 09:58:23.733
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-07-08 09:47:28.503
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-07-08 09:47:28.502
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-06-06 18:37:32.553
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-06-06 18:37:32.552
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Processor: AMD Phenom(tm) II X4 955 Processor
Percentage of memory in use: 37%
Total physical RAM: 8191.18 MB
Available physical RAM: 5145.59 MB
Total Virtual: 16380.5 MB
Available Virtual: 12224.49 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:683.5 GB) (Free:507.41 GB) NTFS
Drive e: (Backup) (Fixed) (Total:247.92 GB) (Free:247.81 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 968D461D)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=683.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=247.9 GB) - (Type=07 NTFS)
==================== End of log ============================
--- --- ---
|
FRST 32-Bit | FRST 64-Bit
Lesestoff:
Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
AdwCleaner auf deinen Desktop.
Malwarebytes Anti-Malware 
