| andreara | 06.12.2017 11:48 |
Farbar logfiles
Hallo Cosinus,
erstmal danke für Deine Einschätzung und Deine Hilfe.
Hier die Farbar logfiles.
frst.txt:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:13-04-2016
Ran by super (administrator) on USER (06-12-2017 11:36:42)
Running from C:\Users\super\Downloads
Loaded Profiles: super (Available Profiles: super)
Platform: Windows 8 N (X64) Language: English (United Kingdom)
Internet Explorer Version 10 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
(Intel Corporation) C:\Windows\System32\DptfParticipantProcessorService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyConfigTDPService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyCriticalService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmService.exe
(Nitro PDF Software) C:\Program Files\Nitro\Pro 9\NitroPDFDriverService9x64.exe
() C:\Program Files\Nitro\Pro 9\Nitro_UpdateService.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE
() C:\Program Files\KMSpico\Service_KMS.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
() C:\ProgramData\ZDSupport\ZDServ\ZDServ.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Qualcomm®Atheros®) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmServiceHelper.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Program Files (x86)\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
() C:\Program Files (x86)\Grameenphone Internet\CancelAutoPlay.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Solvusoft Corporation) C:\Program Files (x86)\Solvusoft\Tray\SolvusoftTray.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.UI.Systray.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\consent.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1368792 2013-11-13] (Realtek Semiconductor)
HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\Windows\system32\DptfPolicyLpmServiceHelper.exe [114048 2013-10-18] (Intel Corporation)
HKLM-x32\...\Run: [BtTray] => C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [387832 2013-11-02] (IVT Corporation)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [HPUsageTrackingLEDM] => C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe [30264 2009-08-04] (Hewlett-Packard Company)
HKLM-x32\...\Run: [{0E0B0BE1-1F90-40C3-86C9-33E24A80906C}] => "C:\Program Files (x86)\Teletalk 3G-new\UUShell.exe" /CallBySystem
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [CancelAutoPlay] => C:\Program Files (x86)\Grameenphone Internet\CancelAutoPlay.exe [450304 2013-07-11] ()
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [226816 2016-05-23] (Geek Software GmbH)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [3567928 2017-11-13] (Dropbox, Inc.)
HKLM-x32\...\Run: [ALDITALKVerbindungsassistent_ALDITALKVerbindungsassistent_Launcher.exe] => C:\Program Files (x86)\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe [989872 2017-07-14] ()
HKLM-x32\...\Run: [CommonToolkitTray_Solvusoft] => C:\Program Files (x86)\Solvusoft\Tray\SolvusoftTray.exe [1685144 2017-11-09] (Solvusoft Corporation)
HKLM-x32\...\Run: [Avira System Speedup User Starter] => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe [65120 2017-12-04] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [134784 2014-01-24] (Qualcomm®Atheros®)
HKU\S-1-5-21-78175480-4144623691-3298621344-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27832272 2017-08-25] (Skype Technologies S.A.)
HKU\S-1-5-21-78175480-4144623691-3298621344-1001\...\MountPoints2: {3017d664-a6ac-11e4-b31d-9cad97a9afa8} - "H:\LaunchU3.exe" -a
HKU\S-1-5-21-78175480-4144623691-3298621344-1001\...\MountPoints2: {48489fe0-9a83-11e6-b334-9cad97a9afa8} - "H:\iStudio.exe"
HKU\S-1-5-21-78175480-4144623691-3298621344-1001\...\MountPoints2: {531e890f-dcdf-11e4-b320-9cad97a9afa8} - "I:\AutoRun.exe"
HKU\S-1-5-21-78175480-4144623691-3298621344-1001\...\MountPoints2: {531e895d-dcdf-11e4-b320-9cad97a9afa8} - "I:\AutoRun.exe"
HKU\S-1-5-21-78175480-4144623691-3298621344-1001\...\MountPoints2: {531e8985-dcdf-11e4-b320-9cad97a9afa8} - "I:\AutoRun.exe"
HKU\S-1-5-21-78175480-4144623691-3298621344-1001\...\MountPoints2: {64a03cd4-f931-11e4-b325-9cad97a9afa8} - "J:\.\Setup.exe" AUTORUN=1
HKU\S-1-5-21-78175480-4144623691-3298621344-1001\...\MountPoints2: {a440c1f1-6d23-11e4-b311-9cad97a9afa7} - "H:\Windows\AutoRun.exe"
HKU\S-1-5-21-78175480-4144623691-3298621344-1001\...\MountPoints2: {a440c233-6d23-11e4-b311-9cad97a9afa7} - "H:\Windows\AutoRun.exe"
HKU\S-1-5-21-78175480-4144623691-3298621344-1001\...\MountPoints2: {cdfb166f-ebf8-11e5-b32c-9cad97a9afa8} - "H:\AutoRun.exe"
HKU\S-1-5-21-78175480-4144623691-3298621344-1001\...\MountPoints2: {d05d0cc1-6d27-11e4-b312-9cad97a9afa8} - "H:\Windows/AutoRun.exe"
HKU\S-1-5-21-78175480-4144623691-3298621344-1001\...\MountPoints2: {d05d0cec-6d27-11e4-b312-9cad97a9afa8} - "H:\Windows/AutoRun.exe"
ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.19.0.dll [2017-11-13] (Dropbox, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Launcher.lnk [2015-05-25]
ShortcutTarget: Launcher.lnk -> C:\Program Files (x86)\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe ()
Startup: C:\Users\super\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Monitor Cartridge Alerts - HP DeskJet 2600 series.lnk [2017-12-05]
ShortcutTarget: Monitor Cartridge Alerts - HP DeskJet 2600 series.lnk -> C:\Program Files\HP\HP DeskJet 2600 series\Bin\HPStatusBL.dll (HP Inc.)
Startup: C:\Users\super\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Monitor Ink Alerts - HP Deskjet 1010 series.lnk [2017-12-05]
ShortcutTarget: Monitor Ink Alerts - HP Deskjet 1010 series.lnk -> C:\Program Files\HP\HP Deskjet 1010 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{1C23F7AE-F58E-4EEE-BC57-3C8C2370BE39}: [NameServer] 62.109.121.17
Tcpip\..\Interfaces\{46268A86-0369-4F54-9BC4-7B41D6A3C0B0}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{513345D8-35C3-45A8-82AF-87A699578A88}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{5250BF10-E818-43DF-9C44-E33DFA2D8386}: [NameServer] 62.109.121.17
Internet Explorer:
==================
HKU\S-1-5-21-78175480-4144623691-3298621344-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.benefind.de/index.php?org=307&shopurl=
SearchScopes: HKLM -> DefaultScope {9687B05D-ED82-4837-922F-B2ED8159F2AD} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM -> {9687B05D-ED82-4837-922F-B2ED8159F2AD} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKU\S-1-5-21-78175480-4144623691-3298621344-1001 -> DefaultScope {9687B05D-ED82-4837-922F-B2ED8159F2AD} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKU\S-1-5-21-78175480-4144623691-3298621344-1001 -> {9687B05D-ED82-4837-922F-B2ED8159F2AD} URL = hxxp://www.sm.de/?q={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2014-01-23] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2016-07-12] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2014-01-21] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2016-07-12] (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2016-05-17] (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2017-07-18] (Skype Technologies)
FireFox:
========
FF ProfilePath: C:\Users\super\AppData\Roaming\Mozilla\Firefox\Profiles\h4f8zmuj.default
FF Homepage: hxxp://www.startfenster.de
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_183.dll [2017-10-25] ()
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-30] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_183.dll [2017-10-25] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2012-10-02] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-21] (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Pro 9\npnitromozilla.dll [2014-05-19] (Nitro PDF)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-11-27] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2012-10-02] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2017-08-24] (Adobe Systems Inc.)
FF Extension: No Name - C:\Users\super\AppData\Roaming\Mozilla\Firefox\Profiles\h4f8zmuj.default\Extensions\abs@avira.com.xpi [2017-12-05]
FF Extension: Xpert-Web - C:\Users\super\AppData\Roaming\Mozilla\Firefox\Profiles\h4f8zmuj.default\Extensions\{58e3c1c9-2dc1-4762-bd45-1df9da9d0820} [2014-12-17] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension
FF Extension: SmartPrintButton - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension [2011-01-26] [not signed]
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S2 ALDITALKVerbindungsassistent_Service; C:\Program Files (x86)\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Service.exe [638128 2017-07-14] ()
S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [1128944 2017-11-26] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [490968 2017-11-26] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [490968 2017-11-26] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1526832 2017-11-26] (Avira Operations GmbH & Co. KG)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [319104 2014-01-24] (Windows (R) Win 7 DDK provider) [File not signed]
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [434248 2017-11-06] (Avira Operations GmbH & Co. KG)
R2 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1706744 2013-11-02] (IVT Corporation)
S3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [145656 2013-11-02] (IVT Corporation)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-03] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-03] (Dropbox, Inc.)
R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [51016 2017-11-13] (Dropbox, Inc.)
R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [117704 2013-10-18] (Intel Corporation)
R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [116680 2013-10-18] (Intel Corporation)
R2 DptfPolicyCriticalService; C:\Windows\system32\DptfPolicyCriticalService.exe [148160 2013-10-18] (Intel Corporation)
R2 DptfPolicyLpmService; C:\Windows\system32\DptfPolicyLpmService.exe [126952 2013-10-18] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [827392 2013-09-02] (Intel(R) Corporation) [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-10-23] (Intel Corporation)
R2 NitroDriverReadSpool9; C:\Program Files\Nitro\Pro 9\NitroPDFDriverService9x64.exe [230920 2014-05-19] (Nitro PDF Software)
R2 NitroUpdateService; C:\Program Files\Nitro\Pro 9\Nitro_UpdateService.exe [417800 2014-05-19] ()
R2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [98304 2013-04-13] () [File not signed]
R2 SpeedupService; C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe [74256 2017-12-04] (Avira Operations GmbH & Co. KG)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7534864 2016-08-25] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16056 2015-07-06] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-01-24] (Atheros) [File not signed]
R2 ZDServ; C:\ProgramData\ZDSupport\ZDServ\ZDServ.exe [432384 2014-02-25] ()
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [70928 2013-12-12] (ASUS Corporation)
R0 avdevprot; C:\Windows\System32\DRIVERS\avdevprot.sys [60920 2017-06-21] (Avira Operations GmbH & Co. KG)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [176224 2017-09-27] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [167464 2017-09-15] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [44488 2017-03-23] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [88488 2017-03-23] (Avira Operations GmbH & Co. KG)
U5 BlueletAudio; C:\Windows\System32\Drivers\BlueletAudio.sys [33968 2012-12-20] (IVT Corporation)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-01-24] (Qualcomm Atheros)
R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (IVT Corporation)
S3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [54064 2013-04-27] (Ralink Corporation)
R3 btUrbFilterDrv; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [49584 2013-03-25] (Ralink Corporation)
R3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [145640 2013-10-18] (Intel Corporation)
R3 DptfDevPch; C:\Windows\system32\DRIVERS\DptfDevPch.sys [116752 2013-10-18] (Intel Corporation)
R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [289744 2013-10-18] (Intel Corporation)
R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [494296 2013-10-18] (Intel Corporation)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3265256 2012-09-20] (Broadcom Corporation)
S3 massfilter; C:\Windows\System32\drivers\ztembbmassfilter.sys [15360 2012-11-23] (MBB Incorporated)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-10-23] (Intel Corporation)
S3 mtkmbim; C:\Windows\system32\DRIVERS\mtkmbim7_x64.sys [209920 2015-05-25] (MBB)
S3 mtkmbim6.2; C:\Windows\system32\DRIVERS\mtkmbim7.sys [209920 2012-12-15] (MBB)
S3 mvusbews; C:\Windows\System32\Drivers\mvusbews.sys [20480 2012-12-24] (Marvell Semiconductor, Inc.)
S3 NMgamingmsFltr; C:\Windows\system32\drivers\NMgamingms.sys [13312 2013-12-09] (LXD Development, Inc.)
R3 rtbth; C:\Windows\System32\drivers\rtbth.sys [1204424 2013-12-03] (Ralink Technology, Corp.)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [423128 2013-07-24] (Realsil Semiconductor Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-06] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [281944 2015-07-06] (Microsoft Corporation)
S3 wdf_usb; C:\Windows\system32\DRIVERS\usb2ser.sys [82944 2012-12-14] (MBB)
S3 wmbclass; C:\Windows\system32\DRIVERS\wmbclass.sys [230912 2013-04-09] (Microsoft Corporation)
S3 ZTEusbmdm6k; C:\Windows\system32\DRIVERS\ztembbusbmdm.sys [123264 2012-11-23] (ZTE Incorporated)
S3 ZTEusbnmea; C:\Windows\system32\DRIVERS\ztembbusbnmea.sys [123264 2012-11-23] (ZTE Incorporated)
S3 ZTEusbser6K; C:\Windows\system32\DRIVERS\ztembbusbser6k.sys [123264 2012-11-23] (ZTE Incorporated)
S3 ZTEusbvoice; C:\Windows\system32\DRIVERS\ztembbusbvoice.sys [123264 2012-11-23] (ZTE Incorporated)
U5 BlueletAudio; C:\Windows\SysWOW64\Drivers\BlueletAudio.sys [33968 2012-12-20] (IVT Corporation)
S3 dbx; system32\DRIVERS\dbx.sys [X]
S3 ewusbnet; \SystemRoot\system32\DRIVERS\ewusbnet.sys [X]
S3 ew_hwusbdev; \SystemRoot\system32\DRIVERS\ew_hwusbdev.sys [X]
S3 huawei_enumerator; \SystemRoot\System32\drivers\ew_jubusenum.sys [X]
S3 hwdatacard; \SystemRoot\system32\DRIVERS\ewusbmdm.sys [X]
S0 MBAMSwissArmy; system32\drivers\MBAMSwissArmy.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-12-06 11:36 - 2017-12-06 11:38 - 00025822 _____ C:\Users\super\Downloads\FRST.txt
2017-12-06 11:36 - 2017-12-06 11:36 - 00000000 ____D C:\FRST
2017-12-06 11:33 - 2017-12-06 11:34 - 02375168 _____ (Farbar) C:\Users\super\Downloads\FRST64.exe
2017-12-05 11:44 - 2017-12-05 11:44 - 00000000 ____D C:\ProgramData\Reimage Protector
2017-12-05 11:43 - 2017-12-05 11:43 - 00001942 _____ C:\Users\Public\Desktop\PC Scan & Repair by Reimage.lnk
2017-12-05 11:43 - 2017-12-05 11:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair
2017-12-05 11:43 - 2017-12-05 11:43 - 00000000 ____D C:\Program Files\Reimage
2017-12-05 11:42 - 2017-12-05 11:45 - 00000000 ____D C:\rei
2017-12-05 11:39 - 2017-12-05 11:45 - 00000150 _____ C:\Windows\Reimage.ini
2017-12-05 11:38 - 2017-12-05 11:38 - 00605424 _____ (Reimage) C:\Users\super\Downloads\ReimageRepair.exe
2017-12-05 11:33 - 2017-12-05 11:33 - 00000000 ____D C:\Windows\System32\Tasks\Avira
2017-12-05 11:32 - 2017-12-05 11:33 - 00000000 ____D C:\Users\Public\Speedup Sessions
2017-12-05 11:32 - 2017-12-05 11:32 - 00003660 _____ C:\Windows\System32\Tasks\AviraSystemSpeedupUpdate
2017-12-05 11:25 - 2017-12-05 11:26 - 05348656 _____ (Avira Operations GmbH & Co. KG) C:\Users\super\Downloads\avira_de_asu80_575d1c1a93ef9__adw.exe
2017-12-05 11:00 - 2017-12-05 11:00 - 00000000 ____D C:\Users\super\AppData\Roaming\Solvusoft
2017-12-05 10:59 - 2017-12-05 10:59 - 00002022 _____ C:\Users\Public\Desktop\WinThruster.lnk
2017-12-05 10:59 - 2017-12-05 10:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Solvusoft
2017-12-05 10:59 - 2017-12-05 10:59 - 00000000 ____D C:\Program Files\Solvusoft
2017-12-05 10:59 - 2017-12-05 10:59 - 00000000 ____D C:\Program Files (x86)\Solvusoft
2017-12-05 10:58 - 2017-12-05 11:00 - 00000000 ____D C:\ProgramData\Solvusoft
2017-12-05 10:56 - 2017-12-05 10:58 - 23195976 _____ (Solvusoft Corporation) C:\Users\super\Downloads\Setup_WinThruster_2017.exe
2017-11-26 15:31 - 2017-11-26 15:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2017-11-13 11:26 - 2017-11-13 11:26 - 00051016 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe
2017-11-13 11:26 - 2017-11-13 11:26 - 00045672 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-dev.sys
2017-11-13 11:26 - 2017-11-13 11:26 - 00045640 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-stable.sys
2017-11-13 11:26 - 2017-11-13 11:26 - 00045640 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-canary.sys
2017-11-08 12:25 - 2017-11-08 12:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ALDI TALK Verbindungsassistent
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-12-06 11:28 - 2014-11-16 01:31 - 00004268 _____ C:\Windows\SysWOW64\LOCALSERVICE.INI
2017-12-06 11:28 - 2014-11-16 01:31 - 00000043 _____ C:\Windows\SysWOW64\LOCALDEVICE.INI
2017-12-06 11:28 - 2013-11-20 19:44 - 00000966 _____ C:\Windows\SysWOW64\bscs.ini
2017-12-05 12:45 - 2015-06-23 14:24 - 00000370 _____ C:\Windows\SysWOW64\REMOTEDEVICE.INI
2017-12-05 12:11 - 2016-11-03 04:52 - 00000916 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2017-12-05 11:33 - 2014-11-27 20:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2017-12-05 11:33 - 2014-11-27 20:24 - 00000000 ____D C:\ProgramData\Avira
2017-12-05 11:33 - 2014-11-27 20:24 - 00000000 ____D C:\Program Files (x86)\Avira
2017-12-05 11:31 - 2014-11-16 02:18 - 00000000 ____D C:\ProgramData\Package Cache
2017-12-05 11:28 - 2012-07-26 09:13 - 00000000 ____D C:\Windows\system32\NDF
2017-12-05 11:09 - 2014-11-16 01:15 - 00000000 ____D C:\Users\super\AppData\Local\CrashDumps
2017-12-05 10:44 - 2015-04-30 14:50 - 00000000 ____D C:\Users\super\AppData\Roaming\Skype
2017-12-05 10:43 - 2017-05-24 20:35 - 00000000 ____D C:\Users\super\AppData\LocalLow\Mozilla
2017-12-05 10:43 - 2014-11-27 18:27 - 00003758 _____ C:\Windows\System32\Tasks\AutoKMS
2017-12-05 10:40 - 2016-11-03 04:52 - 00000912 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2017-11-30 11:13 - 2014-11-27 18:50 - 00000000 ____D C:\Users\super\Documents\Outlook Files
2017-11-30 11:13 - 2012-07-26 06:37 - 00000000 ____D C:\Windows\Inf
2017-11-30 11:09 - 2014-12-25 12:13 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-11-30 11:07 - 2016-01-31 12:10 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-11-27 12:16 - 2014-11-28 04:51 - 00000000 ____D C:\Users\super\Desktop\aktuelles
2017-11-26 15:32 - 2016-11-03 04:52 - 00000000 ____D C:\Program Files (x86)\Dropbox
2017-11-26 15:27 - 2012-07-26 08:27 - 00848230 _____ C:\Windows\system32\PerfStringBackup.INI
2017-11-20 10:56 - 2014-11-16 00:28 - 00000000 ____D C:\Users\super\AppData\Local\Packages
2017-11-08 12:25 - 2015-05-17 08:29 - 00002196 _____ C:\Users\Public\Desktop\ALDI TALK Verbindungsassistent.lnk
2017-11-06 08:29 - 2014-11-16 02:31 - 00000000 ____D C:\Program Files\KMSpico
2017-11-06 08:23 - 2015-05-07 18:40 - 00427888 _____ C:\Windows\system32\FNTCACHE.DAT
2017-11-06 08:23 - 2012-07-26 08:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-11-06 08:21 - 2017-06-30 13:57 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-11-06 08:21 - 2014-11-16 00:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
==================== Files in the root of some directories =======
2015-04-11 04:41 - 2015-04-11 04:41 - 0000057 _____ () C:\ProgramData\Ament.ini
2014-11-16 01:09 - 2014-11-16 01:09 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
Some files in TEMP:
====================
C:\Users\super\AppData\Local\Temp\ALDITALKVerbindungsassistent_Cloned.exe
C:\Users\super\AppData\Local\Temp\avgnt.exe
C:\Users\super\AppData\Local\Temp\ReimagePackage.exe
C:\Users\super\AppData\Local\Temp\SkypeSetup.exe
C:\Users\super\AppData\Local\Temp\Uninstaller.exe
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-11-03 11:21
==================== End of FRST.txt ============================
--- --- ---
hier addition.txt
[CODE]Additional
FRST Logfile: Code:
scan result of Farbar Recovery Scan Tool (x64) Version:13-04-2016
Ran by super (2017-12-06 11:38:22)
Running from C:\Users\super\Downloads
Windows 8 N (X64) (2014-11-15 23:28:30)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-78175480-4144623691-3298621344-500 - Administrator - Disabled)
Guest (S-1-5-21-78175480-4144623691-3298621344-501 - Limited - Disabled)
super (S-1-5-21-78175480-4144623691-3298621344-1001 - Administrator - Enabled) => C:\Users\super
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F}
AV: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 18.009.20050 - Adobe Systems Incorporated)
Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.183 - Adobe Systems Incorporated)
ALDI TALK Verbindungsassistent (HKLM-x32\...\ALDITALKVerbindungsassistent) (Version: 5.1 - ALDI TALK Verbindungsassistent)
Algorithms Unlimited (HKLM-x32\...\ST5UNST #1) (Version: - )
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 2.2.8 - ASUS)
Avira (HKLM-x32\...\{638c58eb-e71e-4b96-8f16-c5a7dbc4293f}) (Version: 1.2.100.18354 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.2.100.18354 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.33.24 - Avira Operations GmbH & Co. KG)
Avira System Speedup (HKLM-x32\...\Avira System Speedup_is1) (Version: 4.4.0.6828 - Avira Operations GmbH & Co. KG)
Caillou entdeckt die 4 Jahreszeiten (HKLM-x32\...\{2C02055C-1CBC-4E8A-BCE9-C83E8A52C69C}) (Version: 1.00 - )
Dropbox (HKLM-x32\...\Dropbox) (Version: 39.4.49 - Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.59.1 - Dropbox, Inc.) Hidden
FastStone Image Viewer 5.5 (HKLM-x32\...\FastStone Image Viewer) (Version: 5.5 - FastStone Soft)
Grameenphone Internet (HKLM-x32\...\{81B8C136-712F-4A20-8DFE-C0F1387380A7}) (Version: 1.0.0.1 - ZTE)
HP Deskjet 1010 series Basic Device Software (HKLM\...\{CFD917BE-F1F6-410E-ABEC-9EC819507D0D}) (Version: 32.2.188.47710 - Hewlett-Packard Co.)
HP Deskjet 1010 series Help (HKLM-x32\...\{BFB6C2B0-9643-4B59-A706-71DEB3017A99}) (Version: 30.0.0 - Hewlett Packard)
HP DeskJet 2600 series Basic Device Software (HKLM\...\{8DA7A239-79C2-49FC-826B-DD26A559FF60}) (Version: 43.2.2474.17192 - HP Inc.)
HP DeskJet 2600 series Help (HKLM-x32\...\{9A36A9D9-787C-4E75-914B-CF133FA88FC9}) (Version: 44.0.0 - HP)
HP Dropbox Plugin (HKLM-x32\...\{C68BD3B6-3CC4-4871-94D1-3412A571001F}) (Version: 36.0.100.66344 - HP)
HP EmailSMTP Plugin (HKLM-x32\...\{763E42DC-F6DB-49E5-AAFD-CC3273F858CB}) (Version: 43.0.0.0 - HP)
HP FTP Plugin (HKLM-x32\...\{1E02EFE9-1EDB-4EE4-B02F-1B23C9AF3CD5}) (Version: 43.0.0.0 - HP)
HP Google Drive Plugin (HKLM-x32\...\{ADA6C223-3EEA-4CAF-822A-5380A7A40342}) (Version: 36.0.100.66344 - HP)
HP LaserJet Professional P1100-P1560-P1600 Series (HKLM\...\HP LaserJet Professional P1100-P1560-P1600 Series) (Version: - )
HP OneDrive Plugin (HKLM-x32\...\{16DB1A9B-1180-43E7-BE29-7201EE339206}) (Version: 36.0.0.0 - HP)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP SharePoint Plugin (HKLM-x32\...\{1F73FB9B-71BC-47F8-8AA6-DA9076E4E52B}) (Version: 43.0.0.0 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
hppP1100P1560P1600SeriesLaserJetService (x32 Version: 001.001.0.0 - Hewlett-Packard) Hidden
hppusgP1100P1560P1600Series (x32 Version: 1.0.0.1 - Hewlett-Packard) Hidden
HPSSupply (HKLM-x32\...\{7902E313-FF0F-4493-ACB1-A8147B78DCD0}) (Version: 2.1.1.0000 - Hewlett Packard Development Company L.P.)
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\FFD10ECE-F715-4a86-9BD8-F6F47DA5DA1C) (Version: 7.1.0.2105 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.6.0.1038 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3412 - Intel Corporation)
KMSpico 5.1 (HKLM\...\KMSpico v5.1_is1) (Version: 5.1 - )
MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden
Mediatek Bluetooth (HKLM\...\{E0B1ECF5-766A-5464-BFE2-2C1BED6A49FB}) (Version: 11.0.748.2 - Mediatek)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Mozilla Firefox 56.0.2 (x64 de) (HKLM\...\Mozilla Firefox 56.0.2 (x64 de)) (Version: 56.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 56.0.2.6506 - Mozilla)
Nitro Pro 9 (HKLM-x32\...\{64e83b8f-8315-4011-88fa-45923055b005}) (Version: 9.5.1.5 - Nitro)
Nitro Pro 9 (Version: 9.5.1.5 - Nitro) Hidden
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
PDF24 Creator 7.8.1 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
Pixum Fotowelt (HKLM-x32\...\Pixum Fotowelt) (Version: 6.1.2 - CEWE Stiftung u Co. KGaA)
Product Improvement Study for HP Deskjet 1010 series (HKLM\...\{37839D69-6DA4-4125-B33A-30DE86345DF4}) (Version: 32.2.188.47710 - Hewlett-Packard Co.)
Product Improvement Study for HP DeskJet 2600 series (HKLM\...\{DF44980B-A87A-4945-937A-4812C29F4F32}) (Version: 43.2.2474.17192 - HP Inc.)
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.316 - Qualcomm Atheros Communications)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.21236 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7095 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.0239 - REALTEK Semiconductor Corp.)
Reimage Repair (HKLM\...\Reimage Repair) (Version: 1.8.7.1 - Reimage) <==== ATTENTION
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version: - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (Version: - Microsoft) Hidden
Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.103 - Skype Technologies S.A.)
Startfenster (HKLM\...\Startfenster) (Version: - Startfenster)
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.65452 - TeamViewer)
Teletalk 3G (HKLM-x32\...\{0E0B0BE1-1F90-40C3-86C9-33E24A80906C}) (Version: 1.0.0.1 - ZTE)
The KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: - )
Update for Skype for Business 2015 (KB3039776) 64-Bit Edition (HKLM\...\{90150000-012B-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{0FA8AE0C-69AE-4F60-A1AB-F79C6BA5A999}) (Version: - Microsoft)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Windows Driver Package - ASUS (ATP) Mouse (11/20/2013 1.0.0.194) (HKLM\...\8BA9C239ED04E09F06755E1497239BEFC08085C2) (Version: 11/20/2013 1.0.0.194 - ASUS)
WinThruster (HKLM\...\WinThruster) (Version: 1.26.1 - Solvusoft Corporation) <==== ATTENTION
WinThruster (Version: 1.26.1 - Solvusoft Corporation) Hidden <==== ATTENTION
ZDServer (HKLM-x32\...\{C8197F5F-E0DC-44f1-8AF2-1AA5A84F695D}) (Version: 1.0.1.2 - ZTE Corporation)
ZTE Mobile Broadband Device Drivers 1.0.0.17 (HKLM-x32\...\{9194B665-5134-4B6B-AD73-A5292CB072D3}_is1) (Version: - ZTE)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {056350CE-1C41-47EE-A019-21FECF778F89} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2014-11-27] ()
Task: {097722D0-4364-40BA-B8CE-A46BB15784E2} - System32\Tasks\HPCustParticipation HP DeskJet 2600 series => C:\Program Files\HP\HP DeskJet 2600 series\Bin\HPCustPartic.exe [2017-07-11] (HP Inc.)
Task: {19BFC85B-5497-438B-898E-9D1C30D9C2C8} - System32\Tasks\Microsoft\Windows\Setup\EOSNotify => C:\Windows\system32\EOSNotify.exe [2016-06-25] (Microsoft Corporation)
Task: {1ECF8C48-668E-4F8C-9078-4BA2C721ADE5} - System32\Tasks\Avira SystrayStartTrigger => Avira.SystrayStartTrigger.exe
Task: {32C9A2C1-89C1-496A-B933-BDEC030A1BE2} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {5A107F53-0D27-4BF4-BE48-F8D4ADEB698C} - System32\Tasks\{111BE16A-1262-44A7-8BC9-338C758EFA8B} => pcalua.exe -a "C:\Program Files\HP\HP LaserJet P1100 Series\Uninstall.exe"
Task: {5CD790B8-1265-4DB1-A79F-C3D459E577B1} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-11-03] (Dropbox, Inc.)
Task: {62D08D4E-15D4-4FAB-9E67-33D0487DE740} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-10-25] (Adobe Systems Incorporated)
Task: {6598B75F-EE6A-4BC4-ADB9-7D3104D7E3E5} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-09-27] (Adobe Systems Incorporated)
Task: {69BC259F-2954-47D0-87E8-9D90908B823B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {73E75111-332C-4903-8227-CBCA74EFBA3D} - System32\Tasks\AviraSystemSpeedupUpdate => C:\ProgramData\Avira\SystemSpeedup\Update\avira_speedup_setup_update.exe [2017-12-05] (Avira Operations GmbH & Co. KG )
Task: {8903CAED-D886-4FC3-952D-622D5EF2CFA2} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2013-12-12] (AsusTek)
Task: {8B357FA4-4DCC-4B80-80EC-902DA27EDC65} - System32\Tasks\HPCustParticipation HP Deskjet 1010 series => C:\Program Files\HP\HP Deskjet 1010 series\Bin\HPCustPartic.exe [2014-03-06] (Hewlett-Packard Co.)
Task: {9F8BF2E0-F784-412E-8564-71590FAB7F9C} - System32\Tasks\Avira\System Speedup\TestScheduler => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe [2017-12-04] (Avira Operations GmbH & Co. KG)
Task: {A2205F52-FFAA-4E6A-AB13-D464B3CE66F1} - System32\Tasks\{90B9AA04-FC51-4150-A2BC-81F419538FAD} => Firefox.exe hxxps://www.skype.com/go/downloading?source=lightinstaller&ver=7.35.0.103&LastError=12002
Task: {AB65ECC2-939E-45CF-9D8C-4765FA96C5FA} - System32\Tasks\Avira_Antivirus_Systray => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2017-11-26] (Avira Operations GmbH & Co. KG)
Task: {C1CA422A-4776-4261-9C7C-B4782EBCE518} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {DCA52854-27BD-4C28-A7D3-81BD78FCA98A} - System32\Tasks\Avira\System Speedup\SpeedupSysTray => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.UI.Systray.exe [2017-12-04] (Avira Operations GmbH & Co. KG)
Task: {E7A97FCF-3D45-407E-B31B-495755E21E46} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-11-03] (Dropbox, Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2014-12-20 08:16 - 2012-08-31 10:03 - 00288768 _____ () C:\Windows\System32\HP1100LM.DLL
2014-12-20 06:55 - 2012-08-31 10:02 - 00074240 _____ () C:\Windows\system32\spool\PRTPROCS\x64\HP1100PP.DLL
2014-05-19 22:27 - 2014-05-19 22:27 - 00417800 _____ () C:\Program Files\Nitro\Pro 9\Nitro_UpdateService.exe
2014-11-16 02:31 - 2013-04-13 03:41 - 00098304 ___SH () C:\Program Files\KMSpico\Service_KMS.exe
2016-03-14 05:19 - 2014-02-25 12:12 - 00432384 _____ () C:\ProgramData\ZDSupport\ZDServ\ZDServ.exe
2016-07-12 17:40 - 2016-07-12 17:40 - 08909504 _____ () C:\Program Files\Microsoft Office\Office15\1033\GrooveIntlResource.dll
2013-11-02 00:48 - 2013-11-02 00:48 - 00029432 _____ () C:\Windows\system32\BsTrace.dll
2013-11-02 00:48 - 2013-11-02 00:48 - 00371448 _____ () C:\Windows\system32\BsExtendFunc.dll
2013-11-02 00:48 - 2013-11-02 00:48 - 00062200 _____ () C:\Windows\system32\BlueSoleilCSps.dll
2014-01-24 12:24 - 2014-01-24 12:24 - 00011264 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2014-01-24 12:21 - 2014-01-24 12:21 - 00086016 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\Map\MAP.dll
2014-01-24 12:27 - 2014-01-24 12:27 - 00012928 _____ () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
2015-05-17 08:28 - 2017-07-14 13:00 - 00989872 _____ () C:\Program Files (x86)\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe
2016-03-14 05:18 - 2013-07-11 12:12 - 00450304 _____ () C:\Program Files (x86)\Grameenphone Internet\CancelAutoPlay.exe
2013-11-02 00:48 - 2013-11-02 00:48 - 00029432 _____ () C:\Windows\SYSTEM32\BsTrace.dll
2013-11-02 00:48 - 2013-11-02 00:48 - 00062200 _____ () C:\Windows\SYSTEM32\BlueSoleilCSps.dll
2013-05-24 19:22 - 2013-05-24 19:22 - 00334648 _____ () C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\Driver\USB\tl_filter.dll
2014-11-16 00:58 - 2013-10-23 22:44 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2017-08-17 15:51 - 2017-08-17 15:51 - 01993184 ____R () C:\Program Files (x86)\Skype\Phone\skypert.dll
2015-11-24 10:22 - 2017-07-14 12:59 - 00275456 _____ () C:\Program Files (x86)\ALDITALKVerbindungsassistent\WtgMobileBroadband7.dll
2013-11-02 00:48 - 2013-11-02 00:48 - 00080120 _____ () C:\Windows\SYSTEM32\BsProfilefunc.dll
2013-11-02 00:48 - 2013-11-02 00:48 - 00371448 _____ () C:\Windows\SYSTEM32\BsExtendFunc.dll
2015-03-14 05:55 - 2016-05-23 08:25 - 00075264 _____ () C:\Program Files (x86)\PDF24\zlib.dll
2015-03-14 05:55 - 2016-05-23 08:24 - 00053248 _____ () C:\Program Files (x86)\PDF24\OperationUI.dll
2017-11-26 15:30 - 2017-11-13 11:26 - 00725312 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_watchdog.dll
2017-11-26 15:30 - 2017-11-13 11:26 - 02075456 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_crashpad.dll
2017-11-26 15:31 - 2017-11-13 11:26 - 00100296 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00018888 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd
2017-11-26 15:31 - 2017-11-13 11:28 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00035792 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00694224 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd
2017-11-26 15:30 - 2017-11-13 11:28 - 00021848 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00130512 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd
2017-11-26 15:30 - 2017-11-13 11:28 - 01856848 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd
2017-11-26 15:30 - 2017-11-13 11:28 - 00022864 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd
2017-11-26 15:30 - 2017-11-13 11:26 - 00145864 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll
2017-11-26 15:31 - 2017-11-13 11:26 - 00105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd
2017-11-26 15:31 - 2017-11-13 11:29 - 00022864 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.crt.compiled._winffi_crt.pyd
2017-11-26 15:30 - 2017-11-13 11:28 - 00040248 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd
2017-11-26 15:30 - 2017-11-13 11:28 - 00062784 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00392656 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll
2017-11-26 15:30 - 2017-11-13 11:26 - 00020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00116176 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd
2017-11-26 15:31 - 2017-11-13 11:28 - 00392512 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd
2017-11-26 15:31 - 2017-11-13 11:29 - 00026456 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00026056 _____ () C:\Program Files (x86)\Dropbox\Client\win32job.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00057808 _____ () C:\Program Files (x86)\Dropbox\Client\win32evtlog.pyd
2017-11-26 15:30 - 2017-11-13 11:28 - 00021824 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd
2017-11-26 15:31 - 2017-11-13 11:29 - 00023368 _____ () C:\Program Files (x86)\Dropbox\Client\winshell.compiled._winshell.pyd
2017-11-26 15:31 - 2017-11-13 11:29 - 00066392 _____ () C:\Program Files (x86)\Dropbox\Client\winenumhandles.compiled._WinEnumHandles.pyd
2017-11-26 15:31 - 2017-11-13 11:29 - 00025432 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd
2017-11-26 15:30 - 2017-11-13 11:28 - 00022856 _____ () C:\Program Files (x86)\Dropbox\Client\crashpad.compiled._Crashpad.pyd
2017-11-26 15:30 - 2017-11-13 11:28 - 01796920 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00084424 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd
2017-11-26 15:30 - 2017-11-13 11:28 - 01956152 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd
2017-11-26 15:31 - 2017-11-13 11:28 - 03859264 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd
2017-11-26 15:31 - 2017-11-13 11:28 - 00155464 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd
2017-11-26 15:30 - 2017-11-13 11:28 - 00521024 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd
2017-11-26 15:31 - 2017-11-13 11:28 - 00050496 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineCore.pyd
2017-11-26 15:31 - 2017-11-13 11:28 - 00042304 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.pyd
2017-11-26 15:31 - 2017-11-13 11:28 - 00131384 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd
2017-11-26 15:31 - 2017-11-13 11:28 - 00218944 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd
2017-11-26 15:30 - 2017-11-13 11:28 - 00204096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00060880 _____ () C:\Program Files (x86)\Dropbox\Client\win32print.pyd
2017-11-26 15:31 - 2017-11-13 11:29 - 00054608 _____ () C:\Program Files (x86)\Dropbox\Client\winrpcserver.compiled._RPCServer.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd
2017-11-26 15:31 - 2017-11-13 11:29 - 00022864 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.user32.compiled._winffi_user32.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd
2017-11-26 15:31 - 2017-11-13 11:29 - 00022360 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi.compiled._winffi_iphlpapi.pyd
2017-11-26 15:31 - 2017-11-13 11:29 - 00021848 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winerror.compiled._winffi_winerror.pyd
2017-11-26 15:31 - 2017-11-13 11:29 - 00022360 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.wininet.compiled._winffi_wininet.pyd
2017-11-26 15:30 - 2017-11-13 11:28 - 00027488 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00349128 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd
2017-11-26 15:31 - 2017-11-13 11:28 - 00101184 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWinExtras.pyd
2017-11-26 15:31 - 2017-11-13 11:29 - 00023896 _____ () C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd
2017-11-26 15:30 - 2017-11-13 11:28 - 00025424 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd
2017-11-26 15:30 - 2017-11-13 11:26 - 00036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll
2017-11-26 15:30 - 2017-11-13 11:28 - 00181056 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL
2017-11-26 15:31 - 2017-11-13 11:29 - 00030536 _____ () C:\Program Files (x86)\Dropbox\Client\wind3d11.compiled._wind3d11.pyd
2017-11-26 15:30 - 2017-11-13 11:28 - 00024368 _____ () C:\Program Files (x86)\Dropbox\Client\libEGL.DLL
2017-11-26 15:30 - 2017-11-13 11:28 - 01638200 _____ () C:\Program Files (x86)\Dropbox\Client\libGLESv2.dll
2017-11-26 15:31 - 2017-11-13 11:29 - 00026456 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winhttp.compiled._winffi_winhttp.pyd
2017-11-26 15:31 - 2017-11-13 11:28 - 00545080 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd
2017-11-26 15:31 - 2017-11-13 11:28 - 00359224 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd
2017-11-26 15:31 - 2017-11-13 11:28 - 00038208 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngine.pyd
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\Windows:nlsPreferences [386]
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2012-07-26 06:26 - 2012-07-26 06:26 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-78175480-4144623691-3298621344-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\super\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{ACB55BA6-4F49-418F-9EEE-CBC27F036D9F}] => (Allow) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
FirewallRules: [{5FFCB71E-7F19-473E-944C-5047CDD32018}] => (Allow) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
FirewallRules: [{436BACCB-DAD6-4BF8-91FC-783A19BB982E}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{6C5DC3F6-F968-475E-B13E-53F7EDFDB92A}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{16929B70-B08F-4549-AEA0-F0EC59F78B2B}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{F5C8612C-2061-49F7-951C-7DC59B3A4D70}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{CA660A95-DED0-4E1D-9FCD-4B5674104EBF}] => (Allow) C:\Program Files\HP\HP Deskjet 1010 series\Bin\USBSetup.exe
FirewallRules: [{DF8DE36B-6553-4BF0-9E6C-C9445B57A94C}] => (Allow) C:\Program Files\HP\HP Deskjet 1010 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{3DEE0857-1A31-4C2C-8C2C-D217F30D72E0}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{4E92E778-2982-4576-AE03-D11CC65CF777}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{17B704B0-A9B8-4B9F-8CB9-E7F13467CE2C}C:\users\super\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\super\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{98A299E0-2BDD-4C31-8816-9DACE7DAA70B}C:\users\super\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\super\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{02494BA1-C414-4264-9A35-6E409397E27D}] => (Allow) C:\Program Files\KMSpico\KMSServer.exe
FirewallRules: [{4BF6AB60-47A2-400B-B72A-B61FF3463D63}] => (Allow) C:\Program Files\KMSpico\KMSServer.exe
FirewallRules: [{78A7FEE2-1089-441E-B8AD-CABE6FB22AA4}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{9C172AE3-A81F-4DF6-8201-D9C01DA35E3A}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{BDD198E3-5EBD-4E17-9FCC-5468AA481F49}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{9BD1A157-49A2-471C-B49D-770C56CC1BD0}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{D18072AC-A2E6-46B5-B043-34EADC0DC316}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{788082E2-A8C6-42FC-A4DC-02E7D728B46B}] => (Allow) C:\Users\super\AppData\Local\Temp\7zS47C4\HP.EasyStart.exe
FirewallRules: [{999E13AC-09F4-4F57-8E20-E8A8D0ECCC0C}] => (Allow) C:\Program Files\HP\HP DeskJet 2600 series\bin\DigitalWizards.exe
FirewallRules: [{2683167E-7605-46C6-AC93-4592982C9053}] => (Allow) C:\Program Files\HP\HP DeskJet 2600 series\Bin\DeviceSetup.exe
FirewallRules: [{8248CDA3-422D-4A70-98B6-4B313678D53C}] => (Allow) LPort=5357
FirewallRules: [{D47DE6CD-4680-40A9-84A2-9E1EDD769C1F}] => (Allow) C:\Program Files\HP\HP DeskJet 2600 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{B1FB49FA-9F0E-43A7-A12A-5E8A891CDB2D}] => (Allow) C:\Program Files\KMSpico\KMSServer.exe
FirewallRules: [{9F164615-2EBF-431B-956A-BE2571A5C68B}] => (Allow) C:\Program Files\KMSpico\KMSServer.exe
FirewallRules: [{DAFFD2C9-2218-4173-B921-3CAFA6DA31EE}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
==================== Restore Points =========================
18-09-2017 11:33:47 Scheduled Checkpoint
25-09-2017 12:28:03 Scheduled Checkpoint
05-12-2017 10:58:44 Installed WinThruster.
==================== Faulty Device Manager Devices =============
Name: Bluetooth Profile Interface Driver
Description: Bluetooth Profile Interface Driver
Class Guid: {5b0e08fd-59eb-47af-b743-965f15c0f8f1}
Manufacturer: Ralink Corporation
Service: BthL2caScoIfSrv
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: iPhone Audio/Video Remote Control HID
Description: Bluetooth Audio/Video Remote Control HID
Class Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}
Manufacturer: Microsoft
Service: BthAvrcpTg
Problem: : A driver (service) for this device has been disabled. An alternate driver may be providing this functionality (Code 32)
Resolution: The start type for this driver is set to disabled in the registry.
Uninstall the driver from Device Manager, and then scan for new hardware to install the driver again. If this does not work, you might have to change the device start type parameter in the registry.
==================== Event log errors: =========================
Application errors:
==================
Error: (12/06/2017 11:31:21 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=197390a0-65f6-4a95-bdc4-55d58a3b0253;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (12/06/2017 11:30:26 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: user)
Description: Activation of application Microsoft.BingWeather_8wekyb3d8bbwe!App failed with error: -2144927142 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (12/06/2017 11:30:26 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: user)
Description: Activation of application Microsoft.BingSports_8wekyb3d8bbwe!AppexSports failed with error: -2144927142 See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (12/05/2017 12:10:23 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=197390a0-65f6-4a95-bdc4-55d58a3b0253;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (12/05/2017 11:48:36 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=197390a0-65f6-4a95-bdc4-55d58a3b0253;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (12/05/2017 11:48:33 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=197390a0-65f6-4a95-bdc4-55d58a3b0253;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (12/05/2017 11:34:54 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=197390a0-65f6-4a95-bdc4-55d58a3b0253;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (12/05/2017 11:22:53 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=197390a0-65f6-4a95-bdc4-55d58a3b0253;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (12/05/2017 11:15:33 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=197390a0-65f6-4a95-bdc4-55d58a3b0253;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (12/05/2017 11:09:38 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: igfxsrvc.exe, version: 8.15.10.3412, time stamp: 0x52e048ae
Faulting module name: ntdll.dll, version: 6.2.9200.17581, time stamp: 0x5644f0f7
Exception code: 0xc0000018
Fault offset: 0x00000000000e1e80
Faulting process ID: 0x2574
Faulting application start time: 0xigfxsrvc.exe0
Faulting application path: igfxsrvc.exe1
Faulting module path: igfxsrvc.exe2
Report ID: igfxsrvc.exe3
Faulting package full name: igfxsrvc.exe4
Faulting package-relative application ID: igfxsrvc.exe5
System errors:
=============
Error: (12/06/2017 11:29:48 AM) (Source: DCOM) (EventID: 10010) (User: user)
Description: AppexSports.AppXzwt95zf827jx8vevssdmkdacbwrgjgeb.mca
Error: (12/06/2017 11:29:48 AM) (Source: DCOM) (EventID: 10010) (User: user)
Description: App.AppXckhq7ex47a0jh2z0wj5cd086mqkeegzy.mca
Error: (12/05/2017 11:10:14 AM) (Source: DCOM) (EventID: 10010) (User: user)
Description: {078AEF33-C48A-49F7-AFF3-A0EE810BFE7C}
Error: (12/05/2017 11:08:25 AM) (Source: DCOM) (EventID: 10005) (User: user)
Description: 1053BsHelpCS-Service{1CE3EB56-16B9-40A0-8110-284EF53ACF04}
Error: (12/05/2017 11:08:25 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the BsHelpCS service to connect.
Error: (12/05/2017 11:08:12 AM) (Source: DCOM) (EventID: 10005) (User: user)
Description: 1053BsHelpCS-Service{1CE3EB56-16B9-40A0-8110-284EF53ACF04}
Error: (12/05/2017 11:08:12 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the BsHelpCS service to connect.
Error: (12/05/2017 11:07:39 AM) (Source: DCOM) (EventID: 10005) (User: user)
Description: 1053BsHelpCS-Service{1CE3EB56-16B9-40A0-8110-284EF53ACF04}
Error: (12/05/2017 11:07:39 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the BsHelpCS service to connect.
Error: (12/05/2017 11:07:36 AM) (Source: DCOM) (EventID: 10005) (User: user)
Description: 1053BsHelpCS-Service{1CE3EB56-16B9-40A0-8110-284EF53ACF04}
CodeIntegrity:
===================================
Date: 2015-07-05 00:35:47.706
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\Drivers\dumpfve.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-07-05 00:35:17.811
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\Drivers\dumpfve.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-07-05 00:33:35.771
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\Drivers\dumpfve.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-07-05 00:32:16.020
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\Drivers\dumpfve.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-07-05 00:31:33.839
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\Drivers\dumpfve.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-07-05 00:30:24.337
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\Drivers\dumpfve.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-07-03 22:22:32.580
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\Drivers\dumpfve.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-07-03 22:10:08.394
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\Drivers\dumpfve.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-07-03 16:11:46.278
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\Drivers\dumpfve.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i5-4210U CPU @ 1.70GHz
Percentage of memory in use: 72%
Total physical RAM: 3979.79 MB
Available physical RAM: 1077.78 MB
Total Virtual: 6283.79 MB
Available Virtual: 1538.62 MB
==================== Drives ================================
Drive c: (win) (Fixed) (Total:247.58 GB) (Free:113.57 GB) NTFS
Drive d: (DATA_I) (Fixed) (Total:195.31 GB) (Free:85.05 GB) NTFS
Drive e: (DATA_II) (Fixed) (Total:244.14 GB) (Free:206.51 GB) NTFS
Drive f: (DATA_III) (Fixed) (Total:244.14 GB) (Free:135.2 GB) NTFS
Drive h: () (Removable) (Total:3.68 GB) (Free:2.61 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 50B617F5)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=247.6 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=683.6 GB) - (Type=OF Extended)
========================================================
Disk: 1 (Size: 3.7 GB) (Disk ID: 00000000)
Partition: GPT.
==================== End of Addition.txt ============================
--- --- ---
Bin gespannt zu lesen, was dir das sagt. Bitte wundere dich nicht, wenn ich immer etwas Zeit zum antworten brauche, bin allein mit drei Kindern. Aber ich freue mich sehr über deine Hilfe.
viele grüße,
andrea |
FRST 32-Bit | FRST 64-Bit
Lesestoff: