| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Nach Neustart von Windows 7 keine Aktionen (Maus+Tastatur) mehr möglich! Allerdings kein Freeze!Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
31.05.2014, 14:39
| #1 |
| |  Nach Neustart von Windows 7 keine Aktionen (Maus+Tastatur) mehr möglich! Allerdings kein Freeze! Hallo, Ich habe ein sehr ärgerliches Problem. Ich habe einen Lenovo Laptop gekauft und wollte die vorinstallierte Norton AntiVirus Version durch AntiVir mit Comodo FIrewall ersetzen. Bei dem Deinstallationsprozess habe ich mir wahrscheinlich Schadsoftware und Viren eingefangen!  Ich habe das zunächst dadurch bemerkt, dass sich ein Programm namens PrivDog eingenistet hat. Dieses habe ich zunächst durch die Software Revo Uninstaller versucht zu deinstallieren. Das ging auch soweit ganz gut und habe auch alle Registry Einträge gelöscht... Jedenfalls habe ich beim Erneuten Neustarten das Problem, dass ich meine Maus nicht mehr bewegen kann und ebenfalls keinerlei Aktionen mehr durchführen kann. Allerdings ist das system nicht hängengeblieben. Die Firewall meckert irgendwas zwischendurch und die Systemzeit läuft auch weiter.Bin jetzt gerade im abgesicherten Modus. Da scheint noch alles zu funktionieren (Maus + Tastatur)... Wie verfahre ich am besten jetzt weiter? Antivirscan läuft gerade in diesem Moment... DANKE! Edit: Virenscan ergab keine Treffer im abgesicherten Modus FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 30-05-2014
Ran by DerRobag (administrator) on MINIME on 31-05-2014 15:27:25
Running from C:\Users\DerRobag\Downloads
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Safe Mode (with Networking)
==================== Processes (Whitelisted) =================
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [TpShocks] => C:\Windows\system32\TpShocks.exe [382248 2013-05-10] (Lenovo.)
HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [293672 2013-06-14] (Lenovo Group Limited)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3011312 2013-06-11] (Synaptics Incorporated)
HKLM\...\Run: [AcWin7Hlpr] => C:\Program Files (x86)\Lenovo\Access Connections\AcTBenabler.exe [63832 2014-03-14] (Lenovo)
HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1275608 2014-03-25] (COMODO)
HKLM-x32\...\Run: [331BigDog] => C:\Program Files (x86)\USB Camera\VM331STI.EXE [552960 2013-05-15] (Vimicro)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642816 2013-06-23] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [PWMTRV] => rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-10] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Lenovo Registration] => C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe [4315872 2011-06-01] (Lenovo, Inc.)
HKLM-x32\...\Run: [Fastboot] => C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [733936 2013-07-03] (Lenovo)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [737872 2014-05-09] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [tvncontrol] => C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2014-05-05] (Comodo Security Solutions, Inc.)
HKU\S-1-5-21-2462734624-1699265906-3523415636-1000\...\MountPoints2: {ee7f1c7d-ce89-11e3-86f9-806e6f6e6963} - Q:\LenovoQDrive.exe
Lsa: [Notification Packages] scecli C:\Program Files\ThinkPad\Bluetooth Software\BtwProximityCP.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Start GeekBuddy.lnk
ShortcutTarget: Start GeekBuddy.lnk -> C:\Program Files\COMODO\GeekBuddy\launcher.exe (Comodo Security Solutions, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13-comm.msn.com/?pc=LNJB
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13-comm.msn.com/?pc=LNJB
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/welcome/thinkpad
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad
SearchScopes: HKLM - DefaultScope {28085B94-4EFC-48C3-A556-3D3FD389A07D} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LNJB
SearchScopes: HKLM - {28085B94-4EFC-48C3-A556-3D3FD389A07D} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LNJB
SearchScopes: HKLM-x32 - DefaultScope {28085B94-4EFC-48C3-A556-3D3FD389A07D} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LNJB
SearchScopes: HKLM-x32 - {28085B94-4EFC-48C3-A556-3D3FD389A07D} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LNJB
SearchScopes: HKCU - DefaultScope {28085B94-4EFC-48C3-A556-3D3FD389A07D} URL =
SearchScopes: HKCU - {28085B94-4EFC-48C3-A556-3D3FD389A07D} URL =
BHO: PrivDog Extension - {FB16E5C3-A9E2-47A2-8EFC-319E775E62CC} - C:\Program Files\AdTrustMedia\PrivDog\1.8.0.15\trustedads.dll (AdTrustMedia)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\DerRobag\AppData\Roaming\Mozilla\Firefox\Profiles\xm7uu5g5.default
FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro\Pro 8\npnitromozilla.dll (Nitro PDF)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: PrivDog - C:\Users\DerRobag\AppData\Roaming\Mozilla\Firefox\Profiles\xm7uu5g5.default\Extensions\PrivDog@AdTrustMedia.com.xpi [2014-05-31]
FF Extension: Adblock Plus - C:\Users\DerRobag\AppData\Roaming\Mozilla\Firefox\Profiles\xm7uu5g5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-31]
==================== Services (Whitelisted) =================
S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-05-09] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-05-09] (Avira Operations GmbH & Co. KG)
S2 CLPSLauncher; C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe [70864 2014-05-05] (Comodo Security Solutions, Inc.)
S2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [6812400 2014-03-25] (COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2264280 2014-03-25] (COMODO)
S2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2135232 2014-05-21] ()
S2 FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [140016 2013-07-03] (Lenovo)
S2 GeekBuddyRSP; C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2014-05-05] (Comodo Security Solutions, Inc.)
S2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [187688 2013-06-14] (Lenovo Group Limited)
S2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited)
S2 NitroDriverReadSpool8; C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe [230408 2013-06-17] (Nitro PDF Software)
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [24120 2014-02-21] ()
==================== Drivers (Whitelisted) ====================
S2 APXACC; C:\Windows\System32\DRIVERS\appexDrv.sys [219360 2013-04-18] (AppEx Networks Corporation)
S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [112080 2014-05-09] (Avira Operations GmbH & Co. KG)
S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-09] (Avira Operations GmbH & Co. KG)
S1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-05-09] (Avira Operations GmbH & Co. KG)
S3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [170200 2013-03-27] (Broadcom Corporation.)
S1 CFRMD; C:\Windows\System32\DRIVERS\CFRMD.sys [37976 2013-05-07] (Windows (R) Win 7 DDK provider)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [23168 2014-03-25] (COMODO)
S1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [738472 2014-03-25] (COMODO)
R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [48360 2014-03-25] (COMODO)
R0 Fastboot; C:\Windows\System32\DRIVERS\fastboot.sys [56048 2013-07-03] (Windows (R) Win 7 DDK provider)
S1 HMD; C:\Windows\System32\DRIVERS\hmd.sys [14888 2013-10-07] ()
R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [105552 2014-03-25] (COMODO)
S3 RSP2STOR; C:\Windows\System32\DRIVERS\RtsP2Stor.sys [288840 2013-03-29] (Realtek Semiconductor Corp.)
S3 TVTI2C; C:\Windows\System32\DRIVERS\Tvti2c.sys [40248 2011-05-29] (Lenovo Information Product(ShenZhen China) Inc.)
S3 tvtvcamd; C:\Windows\System32\DRIVERS\tvtvcamd.sys [27432 2011-12-08] (ThinkVantage Communications Utility)
S3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [1049984 2013-05-01] (Vimicro Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-05-31 15:27 - 2014-05-31 15:27 - 00009026 _____ () C:\Users\DerRobag\Downloads\FRST.txt
2014-05-31 15:27 - 2014-05-31 15:27 - 00000000 ____D () C:\FRST
2014-05-31 15:26 - 2014-05-31 15:26 - 02066944 _____ (Farbar) C:\Users\DerRobag\Downloads\FRST64.exe
2014-05-31 11:49 - 2014-05-31 11:49 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\CrashDumps
2014-05-31 11:25 - 2014-05-31 11:25 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\PwrMgr
2014-05-31 11:14 - 2014-05-31 11:14 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\DerRobag\Downloads\nw_20672_revosetupexe.exe
2014-05-31 11:14 - 2014-05-31 11:14 - 00001279 _____ () C:\Users\DerRobag\Desktop\Revo Uninstaller.lnk
2014-05-31 11:14 - 2014-05-31 11:14 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-05-31 11:03 - 2014-05-31 11:03 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Tvsukernel
2014-05-31 10:58 - 2014-05-31 11:00 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\DAEMON Tools Lite
2014-05-31 10:56 - 2014-05-31 10:57 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2014-05-31 10:55 - 2014-05-31 10:55 - 13429504 _____ (Disc Soft Ltd) C:\Users\DerRobag\Downloads\DTLite4491-0356.exe
2014-05-31 10:07 - 2014-05-31 10:07 - 00001870 _____ () C:\Users\Public\Desktop\COMODO Firewall.lnk
2014-05-31 10:07 - 2014-05-31 10:07 - 00000000 ____D () C:\Windows\System32\Tasks\COMODO
2014-05-31 10:06 - 2014-05-31 10:06 - 00048392 _____ (COMODO CA Limited) C:\Windows\SysWOW64\certsentry.dll
2014-05-31 10:05 - 2014-05-31 11:28 - 00000000 ____D () C:\Program Files (x86)\AdTrustMedia
2014-05-31 10:05 - 2014-05-31 10:07 - 00000000 ___SD () C:\ProgramData\Shared Space
2014-05-31 10:05 - 2014-05-31 10:05 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdiplus.dll
2014-05-31 10:05 - 2014-05-31 10:05 - 01060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll
2014-05-31 10:05 - 2014-05-31 10:05 - 00000000 ____D () C:\ProgramData\Adtrustmedia
2014-05-31 10:05 - 2014-05-31 10:05 - 00000000 ____D () C:\Program Files\AdTrustMedia
2014-05-31 10:04 - 2014-05-31 10:15 - 00002024 _____ () C:\Users\Public\Desktop\GeekBuddy.lnk
2014-05-31 10:04 - 2014-05-31 10:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo
2014-05-31 10:04 - 2014-05-31 10:06 - 00057096 _____ (COMODO CA Limited) C:\Windows\system32\certsentry.dll
2014-05-31 10:04 - 2014-05-31 10:05 - 00000000 ____D () C:\Program Files\COMODO
2014-05-31 10:04 - 2014-05-31 10:05 - 00000000 ____D () C:\Program Files (x86)\Comodo
2014-05-31 10:04 - 2014-05-31 10:04 - 00001131 _____ () C:\Users\Public\Desktop\Comodo Dragon.lnk
2014-05-31 10:04 - 2014-05-31 10:04 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Comodo
2014-05-31 10:04 - 2014-05-31 10:04 - 00000000 ____D () C:\ProgramData\Comodo Downloader
2014-05-31 10:02 - 2014-05-31 10:07 - 00000000 ____D () C:\ProgramData\Comodo
2014-05-31 09:59 - 2014-05-31 09:59 - 00000000 ____D () C:\Users\Public\Lenovo
2014-05-31 09:58 - 2014-05-31 10:00 - 230532264 _____ (COMODO) C:\Users\DerRobag\Downloads\cfw_installer_7.0.exe
2014-05-31 01:45 - 2012-06-03 00:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-05-31 01:45 - 2012-06-03 00:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-05-31 01:45 - 2012-06-03 00:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-05-31 01:45 - 2012-06-03 00:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-05-31 01:45 - 2012-06-03 00:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-05-31 01:45 - 2012-06-03 00:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-05-31 01:45 - 2012-06-03 00:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-05-31 01:44 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-05-31 01:44 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-05-31 01:43 - 2014-05-31 15:27 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Temp
2014-05-31 01:43 - 2014-05-31 01:44 - 00000257 _____ () C:\Users\DerRobag\AppData\Roaming\AbsoluteReminder.xml
2014-05-31 01:43 - 2014-05-31 01:43 - 00000020 ___SH () C:\Users\DerRobag\ntuser.ini
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Vorlagen
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Startmenü
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Netzwerkumgebung
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Lokale Einstellungen
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Eigene Dateien
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Druckumgebung
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Documents\Eigene Musik
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Documents\Eigene Bilder
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\AppData\Local\Verlauf
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\AppData\Local\Anwendungsdaten
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Anwendungsdaten
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Absolute_Software
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _____ () C:\Windows\firstboot.dat
2014-05-31 01:43 - 2014-05-30 19:47 - 00000000 ____D () C:\Users\DerRobag
2014-05-31 01:43 - 2014-04-28 06:35 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Macromedia
2014-05-31 01:43 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\DerRobag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-31 01:43 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\DerRobag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Programme
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-05-30 20:34 - 2014-05-30 20:34 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Avira
2014-05-30 20:32 - 2014-05-30 20:32 - 00002081 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk
2014-05-30 20:32 - 2014-05-30 20:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-05-30 20:32 - 2014-05-30 20:32 - 00000000 ____D () C:\ProgramData\Avira
2014-05-30 20:32 - 2014-05-30 20:32 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-05-30 20:32 - 2014-05-09 11:16 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-05-30 20:32 - 2014-05-09 11:16 - 00112080 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-05-30 20:32 - 2014-05-09 11:16 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-05-30 20:22 - 2014-05-30 20:28 - 137314600 _____ () C:\Users\DerRobag\Downloads\avira_free_antivirus_de_642.exe
2014-05-30 19:53 - 2014-05-30 19:53 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Mozilla
2014-05-30 19:53 - 2014-05-30 19:53 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Mozilla
2014-05-30 19:52 - 2014-05-30 19:52 - 00001174 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-05-30 19:52 - 2014-05-30 19:52 - 00001162 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-05-30 19:52 - 2014-05-30 19:52 - 00000000 ____D () C:\ProgramData\Mozilla
2014-05-30 19:52 - 2014-05-30 19:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-30 19:52 - 2014-05-30 19:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-30 19:49 - 2014-05-31 10:02 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\LSC
2014-05-30 19:49 - 2014-05-30 19:49 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Adobe
2014-05-30 19:48 - 2014-05-30 19:48 - 00000000 ____D () C:\Users\DerRobag\Documents\Bluetooth-Exchange-Ordner
2014-05-30 19:48 - 2014-05-30 19:48 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Broadcom
2014-05-30 19:47 - 2014-05-30 19:48 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Adobe
2014-05-30 19:47 - 2014-05-30 19:47 - 00058016 _____ () C:\Users\DerRobag\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-30 19:47 - 2014-05-30 19:47 - 00001436 _____ () C:\Users\DerRobag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-30 19:47 - 2014-05-30 19:47 - 00000000 ___RD () C:\Users\DerRobag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-30 19:47 - 2014-05-30 19:47 - 00000000 ___RD () C:\Users\DerRobag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-30 19:47 - 2014-05-30 19:47 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Lenovo
2014-05-30 19:47 - 2014-05-30 19:47 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Leadertech
2014-05-30 19:47 - 2014-05-30 19:47 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\VirtualStore
2014-05-30 19:47 - 2014-05-30 19:47 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Lenovo
==================== One Month Modified Files and Folders =======
2014-05-31 15:27 - 2014-05-31 15:27 - 00009026 _____ () C:\Users\DerRobag\Downloads\FRST.txt
2014-05-31 15:27 - 2014-05-31 15:27 - 00000000 ____D () C:\FRST
2014-05-31 15:27 - 2014-05-31 01:43 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Temp
2014-05-31 15:26 - 2014-05-31 15:26 - 02066944 _____ (Farbar) C:\Users\DerRobag\Downloads\FRST64.exe
2014-05-31 13:01 - 2014-04-28 15:14 - 00710744 _____ () C:\Windows\system32\perfh007.dat
2014-05-31 13:01 - 2014-04-28 15:14 - 00151984 _____ () C:\Windows\system32\perfc007.dat
2014-05-31 13:01 - 2009-07-14 07:13 - 00006204 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-31 12:54 - 2014-04-28 06:06 - 01448955 _____ () C:\Windows\WindowsUpdate.log
2014-05-31 12:51 - 2014-04-28 06:37 - 629145600 ___SH () C:\Windows\lenovo_fastboot.img
2014-05-31 12:48 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-31 12:48 - 2009-07-14 06:51 - 00044692 _____ () C:\Windows\setupact.log
2014-05-31 12:28 - 2010-11-21 05:47 - 00740948 _____ () C:\Windows\PFRO.log
2014-05-31 11:49 - 2014-05-31 11:49 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\CrashDumps
2014-05-31 11:32 - 2009-07-14 06:45 - 00034208 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-31 11:32 - 2009-07-14 06:45 - 00034208 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-31 11:32 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-31 11:28 - 2014-05-31 10:05 - 00000000 ____D () C:\Program Files (x86)\AdTrustMedia
2014-05-31 11:28 - 2014-04-28 06:40 - 00000000 ____D () C:\ProgramData\Norton
2014-05-31 11:27 - 2013-02-11 20:28 - 00000000 ____D () C:\Program Files\Windows Journal
2014-05-31 11:27 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\SysWOW64\winrm
2014-05-31 11:27 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\SysWOW64\WCN
2014-05-31 11:27 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\SysWOW64\sysprep
2014-05-31 11:27 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\SysWOW64\slmgr
2014-05-31 11:27 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts
2014-05-31 11:27 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\system32\winrm
2014-05-31 11:27 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\system32\WCN
2014-05-31 11:27 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\system32\slmgr
2014-05-31 11:27 - 2009-07-14 07:37 - 00000000 ____D () C:\Windows\DigitalLocker
2014-05-31 11:27 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Sidebar
2014-05-31 11:27 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2014-05-31 11:27 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Defender
2014-05-31 11:27 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\DVD Maker
2014-05-31 11:27 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Sidebar
2014-05-31 11:27 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
2014-05-31 11:27 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-05-31 11:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Setup
2014-05-31 11:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\oobe
2014-05-31 11:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\MUI
2014-05-31 11:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\migwiz
2014-05-31 11:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-05-31 11:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\com
2014-05-31 11:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\sysprep
2014-05-31 11:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Setup
2014-05-31 11:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\oobe
2014-05-31 11:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\MUI
2014-05-31 11:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\migwiz
2014-05-31 11:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-05-31 11:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\IME
2014-05-31 11:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-05-31 11:26 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts
2014-05-31 11:26 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\com
2014-05-31 11:25 - 2014-05-31 11:25 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\PwrMgr
2014-05-31 11:16 - 2014-04-28 06:35 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-05-31 11:14 - 2014-05-31 11:14 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\DerRobag\Downloads\nw_20672_revosetupexe.exe
2014-05-31 11:14 - 2014-05-31 11:14 - 00001279 _____ () C:\Users\DerRobag\Desktop\Revo Uninstaller.lnk
2014-05-31 11:14 - 2014-05-31 11:14 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-05-31 11:03 - 2014-05-31 11:03 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Tvsukernel
2014-05-31 11:02 - 2014-04-28 06:35 - 00000000 ____D () C:\Windows\System32\Tasks\Lenovo
2014-05-31 11:02 - 2014-04-28 06:18 - 00000000 ____D () C:\Program Files\Lenovo
2014-05-31 11:00 - 2014-05-31 10:58 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\DAEMON Tools Lite
2014-05-31 10:57 - 2014-05-31 10:56 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2014-05-31 10:55 - 2014-05-31 10:55 - 13429504 _____ (Disc Soft Ltd) C:\Users\DerRobag\Downloads\DTLite4491-0356.exe
2014-05-31 10:24 - 2014-04-28 06:32 - 00065536 _____ () C:\Windows\system32\spu_storage.bin
2014-05-31 10:15 - 2014-05-31 10:04 - 00002024 _____ () C:\Users\Public\Desktop\GeekBuddy.lnk
2014-05-31 10:15 - 2014-05-31 10:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo
2014-05-31 10:15 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-31 10:07 - 2014-05-31 10:07 - 00001870 _____ () C:\Users\Public\Desktop\COMODO Firewall.lnk
2014-05-31 10:07 - 2014-05-31 10:07 - 00000000 ____D () C:\Windows\System32\Tasks\COMODO
2014-05-31 10:07 - 2014-05-31 10:05 - 00000000 ___SD () C:\ProgramData\Shared Space
2014-05-31 10:07 - 2014-05-31 10:02 - 00000000 ____D () C:\ProgramData\Comodo
2014-05-31 10:07 - 2010-11-21 04:50 - 00000000 ____D () C:\Users\Administrator
2014-05-31 10:06 - 2014-05-31 10:06 - 00048392 _____ (COMODO CA Limited) C:\Windows\SysWOW64\certsentry.dll
2014-05-31 10:06 - 2014-05-31 10:04 - 00057096 _____ (COMODO CA Limited) C:\Windows\system32\certsentry.dll
2014-05-31 10:05 - 2014-05-31 10:05 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdiplus.dll
2014-05-31 10:05 - 2014-05-31 10:05 - 01060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll
2014-05-31 10:05 - 2014-05-31 10:05 - 00000000 ____D () C:\ProgramData\Adtrustmedia
2014-05-31 10:05 - 2014-05-31 10:05 - 00000000 ____D () C:\Program Files\AdTrustMedia
2014-05-31 10:05 - 2014-05-31 10:04 - 00000000 ____D () C:\Program Files\COMODO
2014-05-31 10:05 - 2014-05-31 10:04 - 00000000 ____D () C:\Program Files (x86)\Comodo
2014-05-31 10:04 - 2014-05-31 10:04 - 00001131 _____ () C:\Users\Public\Desktop\Comodo Dragon.lnk
2014-05-31 10:04 - 2014-05-31 10:04 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Comodo
2014-05-31 10:04 - 2014-05-31 10:04 - 00000000 ____D () C:\ProgramData\Comodo Downloader
2014-05-31 10:02 - 2014-05-30 19:49 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\LSC
2014-05-31 10:02 - 2014-04-28 14:58 - 00000000 ____D () C:\ProgramData\Lenovo
2014-05-31 10:01 - 2014-04-28 06:35 - 00000000 ____D () C:\Windows\Downloaded Installations
2014-05-31 10:00 - 2014-05-31 09:58 - 230532264 _____ (COMODO) C:\Users\DerRobag\Downloads\cfw_installer_7.0.exe
2014-05-31 09:59 - 2014-05-31 09:59 - 00000000 ____D () C:\Users\Public\Lenovo
2014-05-31 09:59 - 2014-04-28 06:33 - 00000000 ___HD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo ThinkVantage Tools
2014-05-31 09:57 - 2014-04-28 06:18 - 00000000 ____D () C:\Program Files (x86)\Lenovo
2014-05-31 01:46 - 2012-10-01 21:26 - 00000000 ____D () C:\Windows\Panther
2014-05-31 01:46 - 2012-10-01 21:26 - 00000000 ____D () C:\SWTOOLS
2014-05-31 01:44 - 2014-05-31 01:43 - 00000257 _____ () C:\Users\DerRobag\AppData\Roaming\AbsoluteReminder.xml
2014-05-31 01:43 - 2014-05-31 01:43 - 00000020 ___SH () C:\Users\DerRobag\ntuser.ini
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Vorlagen
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Startmenü
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Netzwerkumgebung
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Lokale Einstellungen
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Eigene Dateien
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Druckumgebung
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Documents\Eigene Musik
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Documents\Eigene Bilder
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\AppData\Local\Verlauf
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\AppData\Local\Anwendungsdaten
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Anwendungsdaten
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Absolute_Software
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _____ () C:\Windows\firstboot.dat
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Programme
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-05-31 01:42 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-05-31 01:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Windows NT
2014-05-30 20:34 - 2014-05-30 20:34 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Avira
2014-05-30 20:32 - 2014-05-30 20:32 - 00002081 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk
2014-05-30 20:32 - 2014-05-30 20:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-05-30 20:32 - 2014-05-30 20:32 - 00000000 ____D () C:\ProgramData\Avira
2014-05-30 20:32 - 2014-05-30 20:32 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-05-30 20:28 - 2014-05-30 20:22 - 137314600 _____ () C:\Users\DerRobag\Downloads\avira_free_antivirus_de_642.exe
2014-05-30 19:57 - 2014-04-28 06:43 - 00000000 ____D () C:\Windows\System32\Tasks\TVT
2014-05-30 19:53 - 2014-05-30 19:53 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Mozilla
2014-05-30 19:53 - 2014-05-30 19:53 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Mozilla
2014-05-30 19:52 - 2014-05-30 19:52 - 00001174 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-05-30 19:52 - 2014-05-30 19:52 - 00001162 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-05-30 19:52 - 2014-05-30 19:52 - 00000000 ____D () C:\ProgramData\Mozilla
2014-05-30 19:52 - 2014-05-30 19:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-30 19:52 - 2014-05-30 19:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-30 19:49 - 2014-05-30 19:49 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Adobe
2014-05-30 19:48 - 2014-05-30 19:48 - 00000000 ____D () C:\Users\DerRobag\Documents\Bluetooth-Exchange-Ordner
2014-05-30 19:48 - 2014-05-30 19:48 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Broadcom
2014-05-30 19:48 - 2014-05-30 19:47 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Adobe
2014-05-30 19:47 - 2014-05-31 01:43 - 00000000 ____D () C:\Users\DerRobag
2014-05-30 19:47 - 2014-05-30 19:47 - 00058016 _____ () C:\Users\DerRobag\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-30 19:47 - 2014-05-30 19:47 - 00001436 _____ () C:\Users\DerRobag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-05-30 19:47 - 2014-05-30 19:47 - 00000000 ___RD () C:\Users\DerRobag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-30 19:47 - 2014-05-30 19:47 - 00000000 ___RD () C:\Users\DerRobag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-30 19:47 - 2014-05-30 19:47 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Lenovo
2014-05-30 19:47 - 2014-05-30 19:47 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Leadertech
2014-05-30 19:47 - 2014-05-30 19:47 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\VirtualStore
2014-05-30 19:47 - 2014-05-30 19:47 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Lenovo
2014-05-30 19:46 - 2014-04-28 06:37 - 00000000 ____D () C:\swshare
2014-05-09 11:16 - 2014-05-30 20:32 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-05-09 11:16 - 2014-05-30 20:32 - 00112080 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-05-09 11:16 - 2014-05-30 20:32 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
Some content of TEMP:
====================
C:\Users\DerRobag\AppData\Local\Temp\avgnt.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-05-31 09:08
==================== End Of Log ============================
--- --- --- --- --- --- --- --- --- Geändert von KingOfBug (31.05.2014 um 14:41 Uhr) Grund: Edit |
|
31.05.2014, 14:44
| #2 |
| /// the machine /// TB-Ausbilder    | Nach Neustart von Windows 7 keine Aktionen (Maus+Tastatur) mehr möglich! Allerdings kein Freeze! Hi,
__________________Additon.txt fehlt noch 
__________________ |
|
01.06.2014, 13:21
| #3 |
| | Nach Neustart von Windows 7 keine Aktionen (Maus+Tastatur) mehr möglich! Allerdings kein Freeze!Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 30-05-2014
Ran by DerRobag at 2014-05-31 15:28:33
Running from C:\Users\DerRobag\Downloads
Boot Mode: Safe Mode (with Networking)
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: COMODO Antivirus (Disabled - Out of date) {0C2D2636-923D-EE52-2A83-E643204A8275}
FW: COMODO Firewall (Enabled) {8F7746F7-FE68-E084-3B6C-7404A51E8FB3}
==================== Installed Programs ======================
Absolute Reminder (HKLM-x32\...\{40F4FF7A-B214-4453-B973-080B09CED019}) (Version: 2.0.0.19 - Absolute Software)
Adobe Reader X (10.1.7) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.7 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 12.10.100.30622 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{F0621BA6-D5BD-1358-EC7C-DEBBEEAEF6C8}) (Version: 8.0.911.0 - Advanced Micro Devices, Inc.)
AMD Media Foundation Decoders (Version: 1.0.80622.2220 - Advanced Micro Devices, Inc.) Hidden
AMD Quick Stream (HKLM\...\{E9EED4AE-682B-4501-9574-D09A21717599}_is1) (Version: 3.4.4.2 - AppEx Networks)
AMD VISION Engine Control Center (x32 Version: 2013.0622.2227.38490 - Ihr Firmenname) Hidden
Anzeige am Bildschirm (HKLM\...\OnScreenDisplay) (Version: 7.12.20 - )
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.4.642 - Avira)
Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 6.30.59.91 - Broadcom Corporation)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0622.2227.38490 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.0622.2227.38490 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.0622.2227.38490 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Profiles Mobile (x32 Version: 2013.0622.2227.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.0622.2227.38490 - Advanced Micro Devices, Inc.) Hidden
Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.) Hidden
Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.) Hidden
Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.) Hidden
Comodo Dragon (HKLM-x32\...\Comodo Dragon) (Version: 33.1.0.0 - COMODO)
COMODO Firewall (HKLM\...\{D32EF4F9-1506-434E-A813-3D4C0AA50300}) (Version: 7.0.53315.4132 - COMODO Security Solutions Inc.)
Create Recovery Media (HKLM-x32\...\{50DC5136-21E8-48BC-97E5-1AD055F6B0B6}) (Version: 1.20.0.00 - Lenovo Group Limited)
Dolby Advanced Audio v2 (HKLM-x32\...\{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}) (Version: 7.2.8000.17 - Dolby Laboratories Inc)
Energie-Manager (HKLM-x32\...\{DAC01CEE-5BAE-42D5-81FC-B687E84E8405}) (Version: 6.61.1 - Lenovo Group Limited)
GeekBuddy (HKLM\...\{6E2F0618-2867-4DA8-870B-3750588F06A6}) (Version: 4.12.99 - Comodo Security Solutions Inc)
Integrated Camera (HKLM-x32\...\{ADE16A9D-FBDC-4ecc-B6BD-9C31E51D0332}) (Version: 5.13.514.32 - Vimicro)
Lenovo Auto Scroll Utility (HKLM\...\LenovoAutoScrollUtility) (Version: 2.01 - )
Lenovo Patch Utility (x32 Version: 1.3.2.6 - Lenovo Group Limited) Hidden
Lenovo Patch Utility 64 bit (Version: 1.3.2.6 - Lenovo Group Limited) Hidden
Lenovo Power Management Driver (HKLM\...\Power Management Driver) (Version: 1.67.00.02 - )
Lenovo Registration (HKLM-x32\...\{6707C034-ED6B-4B6A-B21F-969B3606FBDE}) (Version: 1.0.3 - Lenovo Inc.)
Lenovo System Update (HKLM-x32\...\{25C64847-B900-48AD-A164-1B4F9B774650}) (Version: 5.05.0009 - Lenovo)
Lenovo User Guide (HKLM-x32\...\{13F59938-C595-479C-B479-F171AB9AF64F}) (Version: 1.0.0009.00 - Lenovo Group Limited)
Lenovo Warranty Information (HKLM-x32\...\{FD4EC278-C1B1-4496-99ED-C0BE1B0AA521}) (Version: 1.0.0005.00 - Lenovo)
Lenovo Welcome (HKLM-x32\...\{2DC26D10-CC6A-494F-BEA3-B5BC21126D5E}) (Version: 3.1.0022.00 - Lenovo Group Limited)
Message Center Plus (HKLM\...\{3849486C-FF09-4F5D-B491-3E179D58EE15}) (Version: 3.1.0004.00 - Lenovo Group Limited)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Mozilla Firefox 29.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Nitro Pro 8 (HKLM\...\{C97CFB86-B083-4BAE-90B2-D141500A5ACA}) (Version: 8.5.5.2 - Nitro)
OEM Application Profile (HKLM-x32\...\{B58255B5-DF43-3FA9-3DF9-618510C1109A}) (Version: 1.00.0000 - Ihr Firmenname)
PowerXpressHybrid (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
RapidBoot HDD Accelerator (HKLM-x32\...\Fastboot) (Version: 1.1.1.1 - Lenovo)
Realtek Card Reader (HKLM-x32\...\{F0A8BF4A-972F-41E0-9800-1EFE3BF28266}) (Version: 6.2.9200.29057 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.70.314.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6937 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
SugarSync Manager (HKLM-x32\...\SugarSync) (Version: 1.9.80.99066 - SugarSync, Inc.)
ThinkPad Bluetooth with Enhanced Data Rate Software (HKLM\...\{A1439D4F-FD46-47F2-A1D3-FEE097C29A09}) (Version: 6.5.1.4500 - Broadcom Corporation)
ThinkPad UltraNav Driver (HKLM\...\SynTPDeinstKey) (Version: 16.3.7.3 - )
ThinkVantage Access Connections (HKLM-x32\...\{8E537894-A559-4D60-B3CB-F4485E3D24E3}) (Version: 6.21 - Lenovo)
ThinkVantage Communications Utility (HKLM\...\{88C6A6D9-324C-46E8-BA87-563D14021442}_is1) (Version: 3.0.45.0 - Lenovo)
ThinkVantage System für aktiven Festplattenschutz (HKLM\...\{46A84694-59EC-48F0-964C-7E76E9F8A2ED}) (Version: 1.77.0.20 - Lenovo)
Windows-Treiberpaket - Lenovo 1.67.00.02 (04/17/2013 1.67.00.02) (HKLM\...\907DA143458FE258EFEB416B946DE8DF2B87A0BA) (Version: 04/17/2013 1.67.00.02 - Lenovo)
==================== Restore Points =========================
30-05-2014 23:43:30 Windows Update
31-05-2014 06:40:01 Windows Update
31-05-2014 07:15:32 Sprachpaketdeinstallation
31-05-2014 08:06:07 Gerätetreiber-Paketinstallation: COMODO Netzwerkdienst
31-05-2014 08:58:20 Gerätetreiber-Paketinstallation: DT Soft Ltd Systemgeräte
31-05-2014 09:15:25 Revo Uninstaller's restore point - Adobe AIR
31-05-2014 09:17:21 Revo Uninstaller's restore point - PrivDog
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {0CC842E2-C19D-4C5A-BC49-C7F43967CA63} - System32\Tasks\Lenovo\Message Center Plus Launcher => C:\Program Files (x86)\Lenovo\message center plus\mcplaunch.exe [2012-05-15] (Lenovo)
Task: {1B78CD74-44F6-4DE1-91B6-BEA5C84C9E82} - System32\Tasks\RtHDVBg_Dolby => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2013-05-21] (Realtek Semiconductor)
Task: {1BD3FFEE-F284-4BEE-87C0-26F12A24BDB5} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2014-03-31] (COMODO)
Task: {4FAD04CD-6BE0-4B00-BD5F-89491FF0CD6E} - System32\Tasks\Lenovo\LSC\RebootCountTask => C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCService.exe
Task: {5565CD65-CD2B-4E69-9D8B-53F77801B0CC} - System32\Tasks\TVT\LenovoWERMonitor => C:\Program Files (x86)\Common Files\lenovo\SUP\sup_wermonitor.exe [2014-01-21] (Microsoft)
Task: {5EEE3A9F-E147-4C69-984B-FCA569ADA4A0} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2014-03-31] (COMODO)
Task: {5F588C90-C48E-4866-AC55-400A2478399E} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe
Task: {6F0FD636-F6C4-413C-AF55-84A0144DD903} - System32\Tasks\Absolute Reminder => C:\Program Files (x86)\Absolute Software\Absolute Reminder\AbsoluteReminder.exe [2013-01-08] (Absolute Software)
Task: {766C54FD-FB77-45AF-904B-5936716846F5} - System32\Tasks\Lenovo\LSC\Time72Task => C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCService.exe
Task: {790F1D5D-3082-4FFD-99B2-ACD9CC959F7E} - System32\Tasks\PMTask => C:\Program Files (x86)\ThinkPad\Utilities\PWMIDTSV.EXE [2013-06-14] (Lenovo Group Limited)
Task: {89B79027-6380-4EA9-B8E8-032D748C1C68} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2013-05-30] (Realtek Semiconductor)
Task: {ED3B8A4D-D019-4C3C-9696-FF7F4E1E2F75} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 => C:\Program Files (x86)\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2014-02-13] (Lenovo)
Task: {F6B74B40-E6C8-4957-8EEC-7F0FDF86EA3A} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2014-02-21] ()
==================== Loaded Modules (whitelisted) =============
2014-04-28 06:33 - 2013-06-14 16:01 - 00117248 ____N () C:\Program Files (x86)\ThinkPad\Utilities\GR\PWMRT64V.DLL
2014-05-30 19:52 - 2014-05-07 04:27 - 03839088 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2"
==================== EXE Association (whitelisted) =============
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
Name: Security Processor Loader Driver
Description: Security Processor Loader Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: spldr
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Event log errors: =========================
Application errors:
==================
Error: (05/31/2014 01:01:03 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
Error: (05/31/2014 01:01:03 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (05/31/2014 01:01:03 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (05/31/2014 00:58:22 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/31/2014 00:49:48 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/31/2014 00:33:36 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/31/2014 00:29:19 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/31/2014 00:26:53 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe" ; Beschreibung = Revo Uninstaller's restore point - DAEMON Tools Lite; Fehler = 0x8007043c).
Error: (05/31/2014 11:49:26 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: avshadow.exe, Version: 14.0.4.642, Zeitstempel: 0x536c9660
Name des fehlerhaften Moduls: avshadow.exe, Version: 14.0.4.642, Zeitstempel: 0x536c9660
Ausnahmecode: 0xc0000409
Fehleroffset: 0x000000000001370e
ID des fehlerhaften Prozesses: 0x7d0
Startzeit der fehlerhaften Anwendung: 0xavshadow.exe0
Pfad der fehlerhaften Anwendung: avshadow.exe1
Pfad des fehlerhaften Moduls: avshadow.exe2
Berichtskennung: avshadow.exe3
Error: (05/31/2014 11:48:27 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (05/31/2014 00:57:33 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1084WSearch{9E175B6D-F52A-11D8-B9A5-505054503030}
Error: (05/31/2014 00:57:33 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1084WSearch{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
Error: (05/31/2014 00:57:28 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1084EventSystem{1BE1F766-5536-11D1-B726-00C04FB926AF}
Error: (05/31/2014 00:57:15 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\System32\bcmihvsrv64.dll
Fehlercode: 21
Error: (05/31/2014 00:57:13 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1084ShellHWDetection{DD522ACC-F821-461A-A407-50B198B896DC}
Error: (05/31/2014 00:56:59 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
avipbb
avkmgr
cdrom
CFRMD
cmdGuard
discache
HMD
spldr
TPPWRIF
Wanarpv6
Error: (05/31/2014 00:56:50 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 31.05.2014 um 12:54:55 unerwartet heruntergefahren.
Error: (05/31/2014 00:48:59 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom
Error: (05/31/2014 00:34:50 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1084wuauserv{E60687F7-01A1-40AA-86AC-DB1CBF673334}
Error: (05/31/2014 00:32:42 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Microsoft Office Sessions:
=========================
Error: (05/31/2014 01:01:03 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: WmiApRplWmiApRpl8F20300004D070000
Error: (05/31/2014 01:01:03 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000
Error: (05/31/2014 01:01:03 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000
Error: (05/31/2014 00:58:22 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/31/2014 00:49:48 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/31/2014 00:33:36 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/31/2014 00:29:19 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/31/2014 00:26:53 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe" Revo Uninstaller's restore point - DAEMON Tools Lite0x8007043c
Error: (05/31/2014 11:49:26 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: avshadow.exe14.0.4.642536c9660avshadow.exe14.0.4.642536c9660c0000409000000000001370e7d001cf7cb5929a85adC:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exeC:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exed96173b8-e8a8-11e3-b032-b59b4bc29703
Error: (05/31/2014 11:48:27 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
==================== Memory info ===========================
Percentage of memory in use: 25%
Total physical RAM: 3353.74 MB
Available physical RAM: 2498.21 MB
Total Pagefile: 6705.66 MB
Available Pagefile: 5895.34 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
==================== Drives ================================
Drive c: (Windows7_OS) (Fixed) (Total:451.98 GB) (Free:414.09 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive q: (Lenovo_Recovery) (Fixed) (Total:12.32 GB) (Free:2.16 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 466 GB) (Disk ID: FC428299)
Partition 1: (Active) - (Size=1 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=452 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=12 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Ich weiss, eigentlich soll man nicht auf seine Postings antworten  Aber ich würde den Rechner gerne heute einrichten. Vermutlich habe ich selber meine Registry mit Revo Uninstall geschrottet. Kann mir nur vielleicht jemand sagen ob das System sauber ist, und ob eventuell eine Systemwiederherstellung das Problem beheben könnte? Danke! |
|
02.06.2014, 12:05
| #4 |
| /// the machine /// TB-Ausbilder | Nach Neustart von Windows 7 keine Aktionen (Maus+Tastatur) mehr möglich! Allerdings kein Freeze! Mach doch mal ne Wiederherstellung. Teste dann und berichte. danach können wir dann immer noch schauen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
03.06.2014, 08:24
| #5 |
| | Nach Neustart von Windows 7 keine Aktionen (Maus+Tastatur) mehr möglich! Allerdings kein Freeze! Moin, Sodele ich habe den letzen Wiederherstellungspunkt gewählt und hatte das selbe Ergebnis. Ich bin dann suxessiv immer ein Punkt weiter zurückgegangen und erst beim letzten Wiederherstellungspunkt ist der Fehler nicht mehr aufgetaucht. Ich habe dann allerdings als erstes mal alle möglichen Windows-Updates installiert... Das hat etwa 4-6 Stunden gedauert Anscheinend war nichts davon von Werk aus gemacht worden, was man doch eigentlich erwarten könnte, wenn ein Laptop frisch ausgeliefert wird ... naja. Auf jeden Fall sieht es bis zu diesem Zeitpunkt ganz gut aus. Ich habe auch schon Antivir installiert. Lasse den auch mal durchlaufen. Anbei schicke ich dir nochmal die neuen Logfiles. Danke soweit! FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-06-2014
Ran by DerRobag (administrator) on MINIME on 03-06-2014 09:17:43
Running from C:\Users\DerRobag\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IA85SVI3
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
(Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CamMute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe
() C:\ProgramData\MobileBrServ\mbbService.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\System32\LogonUI.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\mkrmsg.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\BTStackServer.exe
(Lenovo Group Limited) C:\Program Files (x86)\ThinkPad\Utilities\SCHTASK.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Message Center Plus\MCPLaunch.exe
(Lenovo) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [TpShocks] => C:\Windows\system32\TpShocks.exe [382248 2013-05-10] (Lenovo.)
HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [293672 2013-06-14] (Lenovo Group Limited)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3011312 2013-06-11] (Synaptics Incorporated)
HKLM-x32\...\Run: [331BigDog] => C:\Program Files (x86)\USB Camera\VM331STI.EXE [552960 2013-05-15] (Vimicro)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642816 2013-06-23] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [PWMTRV] => rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-10] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Lenovo Registration] => C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe [4315872 2011-06-01] (Lenovo, Inc.)
HKLM-x32\...\Run: [Fastboot] => C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [733936 2013-07-03] (Lenovo)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [183376 2014-05-14] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [737872 2014-05-09] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-2462734624-1699265906-3523415636-1000\...\MountPoints2: {f7b42ce9-eadb-11e3-a3ba-342387da7d6e} - D:\AutoRun.exe
Lsa: [Notification Packages] scecli C:\Program Files\ThinkPad\Bluetooth Software\BtwProximityCP.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13-comm.msn.com/?pc=LNJB
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13-comm.msn.com/?pc=LNJB
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/welcome/thinkpad
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad
SearchScopes: HKLM - DefaultScope {28085B94-4EFC-48C3-A556-3D3FD389A07D} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LNJB
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {28085B94-4EFC-48C3-A556-3D3FD389A07D} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LNJB
SearchScopes: HKLM-x32 - DefaultScope {28085B94-4EFC-48C3-A556-3D3FD389A07D} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LNJB
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {28085B94-4EFC-48C3-A556-3D3FD389A07D} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LNJB
SearchScopes: HKCU - DefaultScope {28085B94-4EFC-48C3-A556-3D3FD389A07D} URL =
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
FireFox:
========
FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro\Pro 8\npnitromozilla.dll (Nitro PDF)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\IPSFFPlgn\
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\coFFPlgn\
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-05-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-05-09] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [123984 2014-05-14] (Avira Operations GmbH & Co. KG)
R2 FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [140016 2013-07-03] (Lenovo)
R2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [187688 2013-06-14] (Lenovo Group Limited)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited)
R2 Mobile Broadband HL Service; C:\ProgramData\MobileBrServ\mbbservice.exe [232288 2012-03-12] ()
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-20] (Symantec Corporation)
R2 NitroDriverReadSpool8; C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe [230408 2013-06-17] (Nitro PDF Software)
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [22376 2013-02-04] ()
==================== Drivers (Whitelisted) ====================
R2 APXACC; C:\Windows\System32\DRIVERS\appexDrv.sys [219360 2013-04-18] (AppEx Networks Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [112080 2014-05-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-05-09] (Avira Operations GmbH & Co. KG)
R3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [170200 2013-03-27] (Broadcom Corporation.)
S1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\BASHDefs\20130522.001\BHDrvx64.sys [1393240 2013-05-20] (Symantec Corporation)
S1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-15] (Symantec Corporation)
R0 Fastboot; C:\Windows\System32\DRIVERS\fastboot.sys [56048 2013-07-03] (Windows (R) Win 7 DDK provider)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\IPSDefs\20130402.100\IDSVia64.sys [513184 2013-03-04] (Symantec Corporation)
S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20130523.016\ENG64.SYS [126040 2013-05-23] (Symantec Corporation)
S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20130523.016\EX64.SYS [2098776 2013-05-23] (Symantec Corporation)
R3 RSP2STOR; C:\Windows\System32\DRIVERS\RtsP2Stor.sys [288840 2013-03-29] (Realtek Semiconductor Corp.)
S3 SRTSP; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-15] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-04] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-20] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-22] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2014-04-28] (Symantec Corporation)
S1 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-04] (Symantec Corporation)
R1 SymNetS; C:\Windows\system32\drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-24] (Symantec Corporation)
R3 TVTI2C; C:\Windows\System32\DRIVERS\Tvti2c.sys [40248 2011-05-29] (Lenovo Information Product(ShenZhen China) Inc.)
R3 tvtvcamd; C:\Windows\System32\DRIVERS\tvtvcamd.sys [27432 2011-12-08] (ThinkVantage Communications Utility)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [1049984 2013-05-01] (Vimicro Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-06-03 09:10 - 2014-05-09 11:16 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-06-03 09:10 - 2014-05-09 11:16 - 00112080 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-06-03 09:10 - 2014-05-09 11:16 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-06-03 09:06 - 2014-06-03 09:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-06-03 09:06 - 2014-06-03 09:06 - 00001148 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-06-03 09:06 - 2014-06-03 09:06 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-03 08:53 - 2014-06-03 08:53 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-03 07:50 - 2014-05-08 09:14 - 23134208 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-03 07:50 - 2014-05-08 08:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-03 07:50 - 2014-05-08 07:52 - 17073152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-03 07:50 - 2014-05-08 07:27 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-06-03 07:50 - 2014-05-08 06:57 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-03 07:50 - 2014-05-08 06:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-03 07:23 - 2013-12-21 11:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-03 07:23 - 2013-12-21 10:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-06-03 07:21 - 2014-03-01 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-03 07:21 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-03 07:21 - 2014-03-01 06:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-03 07:21 - 2014-03-01 06:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-03 07:21 - 2014-03-01 06:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-03 07:21 - 2014-03-01 06:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-03 07:21 - 2014-03-01 06:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-03 07:21 - 2014-03-01 06:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-03 07:21 - 2014-03-01 06:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-03 07:21 - 2014-03-01 06:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-03 07:21 - 2014-03-01 06:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-03 07:21 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-03 07:21 - 2014-03-01 06:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-03 07:21 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-03 07:21 - 2014-03-01 05:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-03 07:21 - 2014-03-01 05:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-03 07:21 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-03 07:21 - 2014-03-01 05:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-03 07:21 - 2014-03-01 05:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-03 07:21 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-03 07:21 - 2014-03-01 05:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-06-03 07:21 - 2014-03-01 05:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-03 07:21 - 2014-03-01 05:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-06-03 07:21 - 2014-03-01 05:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-03 07:21 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-03 07:21 - 2014-03-01 05:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-03 07:21 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-03 07:21 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-03 07:21 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-03 07:21 - 2014-03-01 05:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-03 07:21 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-03 07:21 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-03 07:21 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-03 07:21 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-03 07:21 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-03 07:21 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-06-03 07:15 - 2012-06-03 00:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-06-03 07:15 - 2012-06-03 00:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-06-03 07:15 - 2012-06-03 00:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-06-03 07:15 - 2012-06-03 00:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-06-03 07:15 - 2012-06-03 00:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-06-03 07:15 - 2012-06-03 00:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-06-03 07:15 - 2012-06-03 00:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-06-03 07:15 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-06-03 07:15 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-06-03 07:14 - 2014-06-03 07:14 - 00000000 ____D () C:\ProgramData\MobileBrServ
2014-06-03 07:13 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-06-03 07:13 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-06-03 07:13 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-06-03 07:13 - 2011-04-09 08:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-06-03 07:13 - 2011-04-09 07:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2014-06-03 07:12 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-03 07:12 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-03 07:12 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-06-03 07:12 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-06-03 07:12 - 2014-01-01 01:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-06-03 07:12 - 2014-01-01 01:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-06-03 07:12 - 2013-12-06 04:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-03 07:12 - 2013-12-06 04:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-06-03 07:12 - 2013-12-06 04:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-06-03 07:12 - 2013-12-06 04:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-06-03 07:12 - 2013-11-23 20:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-06-03 07:12 - 2013-11-23 19:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-06-03 07:12 - 2011-11-17 08:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2014-06-03 07:12 - 2011-11-17 07:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2014-06-03 07:11 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-06-03 07:11 - 2013-12-04 04:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-06-03 07:11 - 2013-12-04 04:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-06-03 07:11 - 2013-12-04 04:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-06-03 07:11 - 2013-12-04 04:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-06-03 07:11 - 2013-12-04 04:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-06-03 07:11 - 2013-12-04 04:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-06-03 07:11 - 2013-12-04 04:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-06-03 07:11 - 2013-12-04 04:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-06-03 07:11 - 2013-12-04 04:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-06-03 07:11 - 2013-12-04 04:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-06-03 07:11 - 2013-12-04 04:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-06-03 07:11 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-06-03 07:11 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-06-03 07:11 - 2013-12-04 04:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-06-03 07:11 - 2013-12-04 03:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-06-03 07:11 - 2013-12-04 03:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-06-03 07:11 - 2013-12-04 03:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-06-03 07:11 - 2013-12-04 03:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-06-03 07:10 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-06-03 07:10 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-06-03 07:10 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-06-03 07:10 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-06-03 07:10 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-06-03 07:10 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-06-03 07:10 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-06-03 07:10 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-06-03 07:10 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-06-03 07:10 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-06-03 07:10 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-06-03 07:10 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-06-03 07:10 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-06-03 07:10 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-06-03 07:10 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-06-03 07:10 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-06-03 07:10 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-06-03 07:10 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-06-03 07:10 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-06-03 07:10 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-06-03 07:10 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-06-03 07:10 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-06-03 07:10 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-06-03 07:10 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-06-03 07:10 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-06-03 07:10 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-06-03 07:10 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-06-03 07:10 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-06-03 07:10 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-06-03 07:10 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-06-03 07:10 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-06-03 07:10 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-06-03 07:10 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-06-03 07:10 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-06-03 07:10 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-06-03 07:10 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-06-03 07:10 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-06-03 07:10 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-06-03 07:10 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-06-03 07:10 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-06-03 07:10 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-06-03 07:10 - 2013-12-25 01:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-06-03 07:10 - 2013-12-25 00:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-06-03 07:10 - 2013-11-26 10:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-06-03 07:10 - 2013-11-23 00:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-06-03 07:10 - 2013-09-08 04:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2014-06-03 07:10 - 2013-09-08 04:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2014-06-03 07:09 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-06-03 07:09 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-06-03 07:09 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-06-03 07:09 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-06-03 07:09 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-06-03 07:08 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-06-03 07:08 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-06-03 07:08 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-06-03 07:08 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-06-03 07:08 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-06-03 07:08 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-06-03 07:08 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-06-03 07:08 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-06-03 07:08 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-06-03 07:08 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-06-03 07:08 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-06-03 07:08 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-06-03 07:08 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-06-03 07:08 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-06-03 07:08 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-06-03 07:08 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-06-03 07:08 - 2013-07-20 12:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-06-03 07:08 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-06-03 07:08 - 2011-02-23 06:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2014-06-03 07:02 - 2014-06-03 07:02 - 00003538 _____ () C:\Windows\System32\Tasks\CreateChoiceProcessTask
2014-06-03 07:02 - 2014-06-03 07:02 - 00001765 _____ () C:\Users\Public\Desktop\Browserwahl.lnk
2014-06-03 01:56 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2014-06-03 01:47 - 2014-06-03 01:47 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-06-03 01:47 - 2014-06-03 01:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-06-03 01:47 - 2014-06-03 01:47 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-06-03 01:47 - 2014-06-03 01:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-06-03 01:47 - 2014-06-03 01:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-06-03 01:47 - 2014-06-03 01:47 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-06-03 01:47 - 2014-06-03 01:47 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-06-03 01:47 - 2014-06-03 01:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-06-03 01:47 - 2014-06-03 01:47 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-06-03 01:47 - 2014-06-03 01:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-06-03 01:47 - 2014-06-03 01:47 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-06-03 01:47 - 2014-06-03 01:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-06-03 01:47 - 2014-06-03 01:47 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-06-03 01:47 - 2014-06-03 01:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-06-03 01:47 - 2014-06-03 01:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-06-03 01:47 - 2014-06-03 01:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-06-03 01:47 - 2014-06-03 01:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-06-03 01:47 - 2014-06-03 01:47 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-06-03 01:45 - 2014-06-03 01:56 - 00009698 _____ () C:\Windows\IE11_main.log
2014-06-03 01:26 - 2010-02-23 10:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe
2014-06-03 01:09 - 2014-06-03 01:11 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-03 01:09 - 2014-05-04 17:12 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-03 01:01 - 2012-07-26 05:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2014-06-03 01:01 - 2012-07-26 05:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2014-06-03 01:01 - 2012-07-26 05:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2014-06-03 01:01 - 2012-07-26 05:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2014-06-03 01:01 - 2012-07-26 05:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2014-06-03 01:01 - 2012-07-26 04:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2014-06-03 01:01 - 2012-07-26 04:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2014-06-03 01:01 - 2012-06-02 16:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2014-06-03 00:36 - 2012-02-17 08:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2014-06-03 00:36 - 2012-02-17 07:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2014-06-03 00:36 - 2012-02-17 06:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2014-06-03 00:32 - 2014-06-03 07:02 - 00001436 _____ () C:\Users\DerRobag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-03 00:32 - 2014-06-03 00:32 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Lenovo
2014-06-03 00:09 - 2014-06-03 00:09 - 00000000 ____D () C:\Program Files (x86)\Comodo
2014-06-03 00:07 - 2014-06-03 00:26 - 00000000 ____D () C:\Windows\System32\Tasks\COMODO
2014-05-31 15:28 - 2014-05-31 15:28 - 00022840 _____ () C:\Users\DerRobag\Downloads\Addition.txt
2014-05-31 15:27 - 2014-06-03 09:17 - 00000000 ____D () C:\FRST
2014-05-31 15:27 - 2014-05-31 15:28 - 00038139 _____ () C:\Users\DerRobag\Downloads\FRST.txt
2014-05-31 11:49 - 2014-05-31 11:49 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\CrashDumps
2014-05-31 11:25 - 2014-05-31 11:25 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\PwrMgr
2014-05-31 11:14 - 2014-05-31 11:14 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-05-31 10:58 - 2014-05-31 11:00 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\DAEMON Tools Lite
2014-05-31 10:56 - 2014-05-31 10:57 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2014-05-31 10:05 - 2014-06-03 00:01 - 00000000 ___SD () C:\ProgramData\Shared Space
2014-05-31 10:05 - 2014-05-31 10:05 - 00000000 ____D () C:\ProgramData\Adtrustmedia
2014-05-31 10:04 - 2014-05-31 10:05 - 00000000 ____D () C:\Program Files\COMODO
2014-05-31 10:04 - 2014-05-31 10:04 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Comodo
2014-05-31 10:04 - 2014-05-31 10:04 - 00000000 ____D () C:\ProgramData\Comodo Downloader
2014-05-31 10:02 - 2014-06-02 23:56 - 00000000 ____D () C:\ProgramData\Comodo
2014-05-31 09:59 - 2014-05-31 09:59 - 00000000 ____D () C:\Users\Public\Lenovo
2014-05-31 01:43 - 2014-06-03 09:18 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Temp
2014-05-31 01:43 - 2014-06-03 00:30 - 00000000 ____D () C:\Users\DerRobag
2014-05-31 01:43 - 2014-06-03 00:27 - 00000000 ___RD () C:\Users\DerRobag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-05-31 01:43 - 2014-06-03 00:27 - 00000000 ___RD () C:\Users\DerRobag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-31 01:43 - 2014-06-03 00:20 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Macromedia
2014-05-31 01:43 - 2014-05-31 01:44 - 00000257 _____ () C:\Users\DerRobag\AppData\Roaming\AbsoluteReminder.xml
2014-05-31 01:43 - 2014-05-31 01:43 - 00002636 _____ () C:\Windows\serial.cmd
2014-05-31 01:43 - 2014-05-31 01:43 - 00000020 ___SH () C:\Users\DerRobag\ntuser.ini
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Vorlagen
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Startmenü
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Netzwerkumgebung
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Lokale Einstellungen
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Eigene Dateien
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Druckumgebung
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Documents\Eigene Musik
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Documents\Eigene Bilder
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\AppData\Local\Verlauf
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\AppData\Local\Anwendungsdaten
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Anwendungsdaten
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Absolute_Software
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _____ () C:\Windows\firstboot.dat
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Programme
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-05-30 20:34 - 2014-05-30 20:34 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Avira
2014-05-30 20:32 - 2014-06-03 09:06 - 00000000 ____D () C:\ProgramData\Avira
2014-05-30 20:32 - 2014-06-03 09:06 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-05-30 19:53 - 2014-05-30 19:53 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Mozilla
2014-05-30 19:53 - 2014-05-30 19:53 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Mozilla
2014-05-30 19:52 - 2014-06-03 00:26 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-30 19:52 - 2014-06-03 00:26 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-30 19:52 - 2014-05-30 19:52 - 00000000 ____D () C:\ProgramData\Mozilla
2014-05-30 19:49 - 2014-05-31 10:02 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\LSC
2014-05-30 19:49 - 2014-05-30 19:49 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Adobe
2014-05-30 19:48 - 2014-05-30 19:48 - 00000000 ____D () C:\Users\DerRobag\Documents\Bluetooth-Exchange-Ordner
2014-05-30 19:48 - 2014-05-30 19:48 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Broadcom
2014-05-30 19:47 - 2014-06-03 08:57 - 00000000 ___RD () C:\Users\DerRobag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-30 19:47 - 2014-06-03 08:57 - 00000000 ___RD () C:\Users\DerRobag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-30 19:47 - 2014-05-30 19:48 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Adobe
2014-05-30 19:47 - 2014-05-30 19:47 - 00058016 _____ () C:\Users\DerRobag\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-30 19:47 - 2014-05-30 19:47 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Leadertech
2014-05-30 19:47 - 2014-05-30 19:47 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\VirtualStore
2014-05-30 19:47 - 2014-05-30 19:47 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Lenovo
==================== One Month Modified Files and Folders =======
2014-06-03 09:18 - 2014-05-31 01:43 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Temp
2014-06-03 09:17 - 2014-05-31 15:27 - 00000000 ____D () C:\FRST
2014-06-03 09:13 - 2014-04-28 06:06 - 00879027 _____ () C:\Windows\WindowsUpdate.log
2014-06-03 09:10 - 2014-06-03 09:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-06-03 09:06 - 2014-06-03 09:06 - 00001148 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-06-03 09:06 - 2014-06-03 09:06 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-03 09:06 - 2014-05-30 20:32 - 00000000 ____D () C:\ProgramData\Avira
2014-06-03 09:06 - 2014-05-30 20:32 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-06-03 09:01 - 2014-04-28 15:14 - 00699666 _____ () C:\Windows\system32\perfh007.dat
2014-06-03 09:01 - 2014-04-28 15:14 - 00149774 _____ () C:\Windows\system32\perfc007.dat
2014-06-03 09:01 - 2009-07-14 07:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-03 09:01 - 2009-07-14 06:45 - 00034208 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-03 09:01 - 2009-07-14 06:45 - 00034208 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-03 08:58 - 2014-04-28 06:37 - 629145600 ___SH () C:\Windows\lenovo_fastboot.img
2014-06-03 08:57 - 2014-05-30 19:47 - 00000000 ___RD () C:\Users\DerRobag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-03 08:57 - 2014-05-30 19:47 - 00000000 ___RD () C:\Users\DerRobag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-06-03 08:55 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-03 08:55 - 2009-07-14 06:51 - 00044692 _____ () C:\Windows\setupact.log
2014-06-03 08:55 - 2009-07-14 06:45 - 00275856 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-06-03 08:54 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-06-03 08:53 - 2014-06-03 08:53 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-03 08:53 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-06-03 07:33 - 2014-04-28 06:25 - 01594892 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-06-03 07:14 - 2014-06-03 07:14 - 00000000 ____D () C:\ProgramData\MobileBrServ
2014-06-03 07:02 - 2014-06-03 07:02 - 00003538 _____ () C:\Windows\System32\Tasks\CreateChoiceProcessTask
2014-06-03 07:02 - 2014-06-03 07:02 - 00001765 _____ () C:\Users\Public\Desktop\Browserwahl.lnk
2014-06-03 07:02 - 2014-06-03 00:32 - 00001436 _____ () C:\Users\DerRobag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-03 07:00 - 2010-11-21 05:47 - 00054532 _____ () C:\Windows\PFRO.log
2014-06-03 02:32 - 2014-04-28 06:32 - 00065536 _____ () C:\Windows\system32\spu_storage.bin
2014-06-03 01:56 - 2014-06-03 01:45 - 00009698 _____ () C:\Windows\IE11_main.log
2014-06-03 01:47 - 2014-06-03 01:47 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-06-03 01:47 - 2014-06-03 01:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-06-03 01:47 - 2014-06-03 01:47 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-06-03 01:47 - 2014-06-03 01:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-06-03 01:47 - 2014-06-03 01:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-06-03 01:47 - 2014-06-03 01:47 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-06-03 01:47 - 2014-06-03 01:47 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-06-03 01:47 - 2014-06-03 01:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-06-03 01:47 - 2014-06-03 01:47 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-06-03 01:47 - 2014-06-03 01:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-06-03 01:47 - 2014-06-03 01:47 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-06-03 01:47 - 2014-06-03 01:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-06-03 01:47 - 2014-06-03 01:47 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-06-03 01:47 - 2014-06-03 01:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-06-03 01:47 - 2014-06-03 01:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-06-03 01:47 - 2014-06-03 01:47 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-06-03 01:47 - 2014-06-03 01:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-06-03 01:47 - 2014-06-03 01:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-06-03 01:47 - 2014-06-03 01:47 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-06-03 01:11 - 2014-06-03 01:09 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-03 00:32 - 2014-06-03 00:32 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Lenovo
2014-06-03 00:31 - 2014-04-28 06:37 - 00000000 ____D () C:\swshare
2014-06-03 00:31 - 2014-04-28 06:35 - 00000000 ____D () C:\Windows\System32\Tasks\Lenovo
2014-06-03 00:30 - 2014-05-31 01:43 - 00000000 ____D () C:\Users\DerRobag
2014-06-03 00:27 - 2014-05-31 01:43 - 00000000 ___RD () C:\Users\DerRobag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-06-03 00:27 - 2014-05-31 01:43 - 00000000 ___RD () C:\Users\DerRobag\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-06-03 00:27 - 2014-04-28 06:43 - 00000000 ____D () C:\Windows\System32\Tasks\TVT
2014-06-03 00:27 - 2014-04-28 06:40 - 00000000 ____D () C:\Windows\system32\Drivers\NISx64
2014-06-03 00:27 - 2014-04-28 06:35 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia
2014-06-03 00:27 - 2014-04-28 06:35 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia
2014-06-03 00:27 - 2012-10-01 21:26 - 00000000 ____D () C:\SWWORK
2014-06-03 00:27 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\SysWOW64\winrm
2014-06-03 00:27 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\SysWOW64\WCN
2014-06-03 00:27 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\SysWOW64\slmgr
2014-06-03 00:27 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts
2014-06-03 00:27 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\system32\winrm
2014-06-03 00:27 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\system32\WCN
2014-06-03 00:27 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\system32\slmgr
2014-06-03 00:27 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts
2014-06-03 00:27 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-06-03 00:27 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-03 00:27 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-06-03 00:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\migwiz
2014-06-03 00:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-06-03 00:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\com
2014-06-03 00:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\sysprep
2014-06-03 00:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\oobe
2014-06-03 00:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\migwiz
2014-06-03 00:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-06-03 00:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\com
2014-06-03 00:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\servicing
2014-06-03 00:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-06-03 00:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\L2Schemas
2014-06-03 00:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\IME
2014-06-03 00:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat
2014-06-03 00:26 - 2014-06-03 00:07 - 00000000 ____D () C:\Windows\System32\Tasks\COMODO
2014-06-03 00:26 - 2014-05-30 19:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-03 00:26 - 2014-05-30 19:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-03 00:26 - 2014-04-28 06:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Absolute Software
2014-06-03 00:26 - 2014-04-28 06:42 - 00000000 ____D () C:\Program Files (x86)\SymSilent
2014-06-03 00:26 - 2014-04-28 06:41 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared
2014-06-03 00:26 - 2014-04-28 06:40 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security
2014-06-03 00:26 - 2014-04-28 06:40 - 00000000 ____D () C:\ProgramData\Norton
2014-06-03 00:26 - 2014-04-28 06:40 - 00000000 ____D () C:\Program Files (x86)\Norton Internet Security
2014-06-03 00:26 - 2014-04-28 06:35 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-06-03 00:26 - 2014-04-28 06:33 - 00000000 ___HD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo ThinkVantage Tools
2014-06-03 00:26 - 2014-04-28 06:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Quick Stream
2014-06-03 00:26 - 2014-04-28 06:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD VISION Engine Control Center
2014-06-03 00:26 - 2014-04-28 06:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby
2014-06-03 00:26 - 2014-04-28 06:18 - 00000000 ____D () C:\Program Files\Lenovo
2014-06-03 00:26 - 2014-04-28 06:18 - 00000000 ____D () C:\Program Files (x86)\Lenovo
2014-06-03 00:26 - 2013-02-11 20:28 - 00000000 ____D () C:\Program Files\Windows Journal
2014-06-03 00:26 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-06-03 00:26 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Sidebar
2014-06-03 00:26 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2014-06-03 00:26 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Defender
2014-06-03 00:26 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\DVD Maker
2014-06-03 00:26 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Sidebar
2014-06-03 00:26 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
2014-06-03 00:26 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-06-03 00:26 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-06-03 00:25 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-06-03 00:20 - 2014-05-31 01:43 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Macromedia
2014-06-03 00:18 - 2014-04-28 14:58 - 00000000 ____D () C:\ProgramData\Lenovo
2014-06-03 00:18 - 2012-10-01 21:26 - 00000000 ____D () C:\SWTOOLS
2014-06-03 00:09 - 2014-06-03 00:09 - 00000000 ____D () C:\Program Files (x86)\Comodo
2014-06-03 00:01 - 2014-05-31 10:05 - 00000000 ___SD () C:\ProgramData\Shared Space
2014-06-02 23:56 - 2014-05-31 10:02 - 00000000 ____D () C:\ProgramData\Comodo
2014-05-31 15:28 - 2014-05-31 15:28 - 00022840 _____ () C:\Users\DerRobag\Downloads\Addition.txt
2014-05-31 15:28 - 2014-05-31 15:27 - 00038139 _____ () C:\Users\DerRobag\Downloads\FRST.txt
2014-05-31 11:49 - 2014-05-31 11:49 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\CrashDumps
2014-05-31 11:27 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\SysWOW64\sysprep
2014-05-31 11:27 - 2009-07-14 07:37 - 00000000 ____D () C:\Windows\DigitalLocker
2014-05-31 11:25 - 2014-05-31 11:25 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\PwrMgr
2014-05-31 11:14 - 2014-05-31 11:14 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-05-31 11:00 - 2014-05-31 10:58 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\DAEMON Tools Lite
2014-05-31 10:57 - 2014-05-31 10:56 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2014-05-31 10:07 - 2010-11-21 04:50 - 00000000 ____D () C:\Users\Administrator
2014-05-31 10:05 - 2014-05-31 10:05 - 00000000 ____D () C:\ProgramData\Adtrustmedia
2014-05-31 10:05 - 2014-05-31 10:04 - 00000000 ____D () C:\Program Files\COMODO
2014-05-31 10:04 - 2014-05-31 10:04 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Comodo
2014-05-31 10:04 - 2014-05-31 10:04 - 00000000 ____D () C:\ProgramData\Comodo Downloader
2014-05-31 10:02 - 2014-05-30 19:49 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\LSC
2014-05-31 09:59 - 2014-05-31 09:59 - 00000000 ____D () C:\Users\Public\Lenovo
2014-05-31 01:46 - 2012-10-01 21:26 - 00000000 ____D () C:\Windows\Panther
2014-05-31 01:44 - 2014-05-31 01:43 - 00000257 _____ () C:\Users\DerRobag\AppData\Roaming\AbsoluteReminder.xml
2014-05-31 01:43 - 2014-05-31 01:43 - 00002636 _____ () C:\Windows\serial.cmd
2014-05-31 01:43 - 2014-05-31 01:43 - 00000020 ___SH () C:\Users\DerRobag\ntuser.ini
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Vorlagen
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Startmenü
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Netzwerkumgebung
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Lokale Einstellungen
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Eigene Dateien
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Druckumgebung
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Documents\Eigene Musik
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Documents\Eigene Bilder
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\AppData\Local\Verlauf
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\AppData\Local\Anwendungsdaten
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _SHDL () C:\Users\DerRobag\Anwendungsdaten
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Absolute_Software
2014-05-31 01:43 - 2014-05-31 01:43 - 00000000 _____ () C:\Windows\firstboot.dat
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Programme
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-05-31 01:42 - 2014-05-31 01:42 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-05-31 01:42 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-05-31 01:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Windows NT
2014-05-30 20:34 - 2014-05-30 20:34 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Avira
2014-05-30 19:53 - 2014-05-30 19:53 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Mozilla
2014-05-30 19:53 - 2014-05-30 19:53 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Mozilla
2014-05-30 19:52 - 2014-05-30 19:52 - 00000000 ____D () C:\ProgramData\Mozilla
2014-05-30 19:49 - 2014-05-30 19:49 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Adobe
2014-05-30 19:48 - 2014-05-30 19:48 - 00000000 ____D () C:\Users\DerRobag\Documents\Bluetooth-Exchange-Ordner
2014-05-30 19:48 - 2014-05-30 19:48 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Broadcom
2014-05-30 19:48 - 2014-05-30 19:47 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Adobe
2014-05-30 19:47 - 2014-05-30 19:47 - 00058016 _____ () C:\Users\DerRobag\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-30 19:47 - 2014-05-30 19:47 - 00000000 ____D () C:\Users\DerRobag\AppData\Roaming\Leadertech
2014-05-30 19:47 - 2014-05-30 19:47 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\VirtualStore
2014-05-30 19:47 - 2014-05-30 19:47 - 00000000 ____D () C:\Users\DerRobag\AppData\Local\Lenovo
2014-05-09 11:16 - 2014-06-03 09:10 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-05-09 11:16 - 2014-06-03 09:10 - 00112080 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-05-09 11:16 - 2014-06-03 09:10 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-05-09 08:14 - 2014-06-03 07:12 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 08:11 - 2014-06-03 07:12 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-08 09:14 - 2014-06-03 07:50 - 23134208 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-08 08:37 - 2014-06-03 07:50 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-08 07:52 - 2014-06-03 07:50 - 17073152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-08 07:27 - 2014-06-03 07:50 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-08 06:57 - 2014-06-03 07:50 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-08 06:04 - 2014-06-03 07:50 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-04 17:12 - 2014-06-03 01:09 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
Some content of TEMP:
====================
C:\Users\DerRobag\AppData\Local\Temp\avgnt.exe
C:\Users\DerRobag\AppData\Local\Temp\bw1toc-v.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-05-31 09:08
==================== End Of Log ============================
--- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-06-2014
Ran by DerRobag at 2014-06-03 09:18:36
Running from C:\Users\DerRobag\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IA85SVI3
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
Absolute Reminder (HKLM-x32\...\{40F4FF7A-B214-4453-B973-080B09CED019}) (Version: 2.0.0.19 - Absolute Software)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.4.0.2710 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.4.0.2710 - Adobe Systems Incorporated) Hidden
Adobe Reader X (10.1.7) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.7 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 12.10.100.30622 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{F0621BA6-D5BD-1358-EC7C-DEBBEEAEF6C8}) (Version: 8.0.911.0 - Advanced Micro Devices, Inc.)
AMD Media Foundation Decoders (Version: 1.0.80622.2220 - Advanced Micro Devices, Inc.) Hidden
AMD Quick Stream (HKLM\...\{E9EED4AE-682B-4501-9574-D09A21717599}_is1) (Version: 3.4.4.2 - AppEx Networks)
AMD VISION Engine Control Center (x32 Version: 2013.0622.2227.38490 - Ihr Firmenname) Hidden
Anzeige am Bildschirm (HKLM\...\OnScreenDisplay) (Version: 7.12.20 - )
Avira (HKLM-x32\...\{68e29fba-92b1-4f6f-a604-1d8679da3a9f}) (Version: 1.1.13.24161 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.13.24161 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.4.642 - Avira)
Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 6.30.59.91 - Broadcom Corporation)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0622.2227.38490 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.0622.2227.38490 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.0622.2227.38490 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Profiles Mobile (x32 Version: 2013.0622.2227.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.0622.2226.38490 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.0622.2227.38490 - Advanced Micro Devices, Inc.) Hidden
Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.) Hidden
Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.) Hidden
Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.) Hidden
Create Recovery Media (HKLM-x32\...\{50DC5136-21E8-48BC-97E5-1AD055F6B0B6}) (Version: 1.20.0.00 - Lenovo Group Limited)
Dolby Advanced Audio v2 (HKLM-x32\...\{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}) (Version: 7.2.8000.17 - Dolby Laboratories Inc)
Energie-Manager (HKLM-x32\...\{DAC01CEE-5BAE-42D5-81FC-B687E84E8405}) (Version: 6.61.1 - Lenovo Group Limited)
Integrated Camera (HKLM-x32\...\{ADE16A9D-FBDC-4ecc-B6BD-9C31E51D0332}) (Version: 5.13.514.32 - Vimicro)
Lenovo Auto Scroll Utility (HKLM\...\LenovoAutoScrollUtility) (Version: 2.01 - )
Lenovo Patch Utility (x32 Version: 1.3.2.6 - Lenovo Group Limited) Hidden
Lenovo Patch Utility 64 bit (Version: 1.3.2.6 - Lenovo Group Limited) Hidden
Lenovo Power Management Driver (HKLM\...\Power Management Driver) (Version: 1.67.00.02 - )
Lenovo Registration (HKLM-x32\...\{6707C034-ED6B-4B6A-B21F-969B3606FBDE}) (Version: 1.0.3 - Lenovo Inc.)
Lenovo Solution Center (HKLM\...\{4041B18B-DE30-4D78-9D60-6ADC586C5E00}) (Version: 2.1.003.00 - Lenovo Group Limited)
Lenovo System Update (HKLM-x32\...\{25C64847-B900-48AD-A164-1B4F9B774650}) (Version: 5.02.0007 - Lenovo)
Lenovo User Guide (HKLM-x32\...\{13F59938-C595-479C-B479-F171AB9AF64F}) (Version: 1.0.0009.00 - Lenovo Group Limited)
Lenovo Warranty Information (HKLM-x32\...\{FD4EC278-C1B1-4496-99ED-C0BE1B0AA521}) (Version: 1.0.0005.00 - Lenovo)
Lenovo Welcome (HKLM-x32\...\{2DC26D10-CC6A-494F-BEA3-B5BC21126D5E}) (Version: 3.1.0022.00 - Lenovo Group Limited)
Message Center Plus (HKLM\...\{3849486C-FF09-4F5D-B491-3E179D58EE15}) (Version: 3.1.0004.00 - Lenovo Group Limited)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Mobile Broadband HL Service (HKLM-x32\...\Mobile Broadband HL Service) (Version: 22.001.14.00.03 - Huawei Technologies Co.,Ltd)
Nitro Pro 8 (HKLM\...\{C97CFB86-B083-4BAE-90B2-D141500A5ACA}) (Version: 8.5.5.2 - Nitro)
Norton Internet Security (HKLM-x32\...\NIS) (Version: 20.4.0.40 - Symantec Corporation)
OEM Application Profile (HKLM-x32\...\{B58255B5-DF43-3FA9-3DF9-618510C1109A}) (Version: 1.00.0000 - Ihr Firmenname)
PowerXpressHybrid (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
RapidBoot HDD Accelerator (HKLM-x32\...\Fastboot) (Version: 1.1.1.1 - Lenovo)
Realtek Card Reader (HKLM-x32\...\{F0A8BF4A-972F-41E0-9800-1EFE3BF28266}) (Version: 6.2.9200.29057 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.70.314.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6937 - Realtek Semiconductor Corp.)
SugarSync Manager (HKLM-x32\...\SugarSync) (Version: 1.9.80.99066 - SugarSync, Inc.)
ThinkPad Bluetooth with Enhanced Data Rate Software (HKLM\...\{A1439D4F-FD46-47F2-A1D3-FEE097C29A09}) (Version: 6.5.1.4500 - Broadcom Corporation)
ThinkPad UltraNav Driver (HKLM\...\SynTPDeinstKey) (Version: 16.3.7.3 - )
ThinkVantage Communications Utility (HKLM\...\{88C6A6D9-324C-46E8-BA87-563D14021442}_is1) (Version: 3.0.45.0 - Lenovo)
ThinkVantage System für aktiven Festplattenschutz (HKLM\...\{46A84694-59EC-48F0-964C-7E76E9F8A2ED}) (Version: 1.77.0.20 - Lenovo)
Windows-Treiberpaket - Lenovo 1.67.00.02 (04/17/2013 1.67.00.02) (HKLM\...\907DA143458FE258EFEB416B946DE8DF2B87A0BA) (Version: 04/17/2013 1.67.00.02 - Lenovo)
==================== Restore Points =========================
31-05-2014 08:06:07 Gerätetreiber-Paketinstallation: COMODO Netzwerkdienst
31-05-2014 08:58:20 Gerätetreiber-Paketinstallation: DT Soft Ltd Systemgeräte
31-05-2014 09:15:25 Revo Uninstaller's restore point - Adobe AIR
31-05-2014 09:17:21 Revo Uninstaller's restore point - PrivDog
02-06-2014 22:10:52 Windows Update
02-06-2014 22:33:50 Windows Update
02-06-2014 22:38:17 Windows Update
03-06-2014 05:14:42 Windows Update
03-06-2014 05:21:46 Windows Update
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {0CC842E2-C19D-4C5A-BC49-C7F43967CA63} - System32\Tasks\Lenovo\Message Center Plus Launcher => C:\Program Files (x86)\Lenovo\message center plus\mcplaunch.exe [2012-05-15] (Lenovo)
Task: {1B78CD74-44F6-4DE1-91B6-BEA5C84C9E82} - System32\Tasks\RtHDVBg_Dolby => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2013-05-21] (Realtek Semiconductor)
Task: {2849A383-5E1F-4121-B0B5-A745EED4A41E} - System32\Tasks\Lenovo\Run TVSU Once => C:\SWTOOLS\DRIVERS\utils\TVSUHook.exe [2012-06-06] ()
Task: {373A93C3-DCC9-4816-B379-5C2212649DBE} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [2013-05-17] (Lenovo)
Task: {3CC648D8-1056-4864-8CB3-0D28E9261148} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2013-05-17] ()
Task: {40A1CDEB-ECB1-4F97-BF02-BBDCECB52187} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2013-02-04] ()
Task: {4FAD04CD-6BE0-4B00-BD5F-89491FF0CD6E} - System32\Tasks\Lenovo\LSC\RebootCountTask => C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCService.exe [2013-05-17] (Lenovo)
Task: {5AF42CCE-1396-44C2-95DD-1004C031DE76} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2013-05-17] (Lenovo)
Task: {6007CF0B-EE54-4680-979A-CAE340B78B5C} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\WSCStub.exe [2013-06-03] (Symantec Corporation)
Task: {6F0FD636-F6C4-413C-AF55-84A0144DD903} - System32\Tasks\Absolute Reminder => C:\Program Files (x86)\Absolute Software\Absolute Reminder\AbsoluteReminder.exe [2013-01-08] (Absolute Software)
Task: {766C54FD-FB77-45AF-904B-5936716846F5} - System32\Tasks\Lenovo\LSC\Time72Task => C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCService.exe [2013-05-17] (Lenovo)
Task: {790F1D5D-3082-4FFD-99B2-ACD9CC959F7E} - System32\Tasks\PMTask => C:\Program Files (x86)\ThinkPad\Utilities\PWMIDTSV.EXE [2013-06-14] (Lenovo Group Limited)
Task: {89B79027-6380-4EA9-B8E8-032D748C1C68} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2013-05-30] (Realtek Semiconductor)
==================== Loaded Modules (whitelisted) =============
2014-06-03 07:14 - 2012-03-12 11:05 - 00232288 _____ () C:\ProgramData\MobileBrServ\mbbservice.exe
2014-04-28 06:33 - 2013-06-14 16:01 - 00117248 ____N () C:\Program Files (x86)\ThinkPad\Utilities\GR\PWMRT64V.DLL
2014-04-28 06:37 - 2013-07-03 00:33 - 00033520 ____N () C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBServiceps.dll
2014-04-28 06:34 - 2011-08-02 20:58 - 02201088 _____ () C:\Program Files\Lenovo\Communications Utility\cxcore210.dll
2014-04-28 06:34 - 2011-08-02 20:58 - 02085888 _____ () C:\Program Files\Lenovo\Communications Utility\cv210.dll
2014-05-14 14:27 - 2014-05-14 14:27 - 00137296 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll
2014-05-14 14:27 - 2014-05-14 14:27 - 00065616 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll
2014-06-03 09:11 - 2014-05-14 14:27 - 00049744 _____ () C:\Users\DerRobag\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== EXE Association (whitelisted) =============
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
Name: Symantec Iron Driver
Description: Symantec Iron Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: SymIRON
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: BHDrvx64
Description: BHDrvx64
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: BHDrvx64
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: Norton Internet Security Settings Manager
Description: Norton Internet Security Settings Manager
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: ccSet_NIS
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Event log errors: =========================
Application errors:
==================
Error: (06/03/2014 08:56:08 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/03/2014 08:53:36 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/03/2014 07:01:30 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/03/2014 00:30:26 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/03/2014 00:14:19 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/03/2014 00:07:03 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/02/2014 11:52:23 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/02/2014 11:46:01 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/02/2014 11:36:37 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/02/2014 11:31:29 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (06/03/2014 08:56:29 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Windows Modules Installer" wurde mit folgendem Fehler beendet:
%%16405
Error: (06/03/2014 08:56:04 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
BHDrvx64
ccSet_NIS
cdrom
SymIRON
Error: (06/03/2014 08:53:32 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
BHDrvx64
ccSet_NIS
cdrom
SymIRON
Error: (06/03/2014 08:52:03 AM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Der Dienst Windows Modules Installer konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.
Error: (06/03/2014 07:20:46 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Definition Update for Windows Defender - KB915597 (Definition 1.175.864.0)
Error: (06/03/2014 07:14:07 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "Mobile Broadband HL Service" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Error: (06/03/2014 07:04:06 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Kumulatives Sicherheitsupdate für Internet Explorer 10 unter Windows 7 Service Pack 1 für x64-basierte Systeme (KB2925418)
Error: (06/03/2014 07:04:06 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Sicherheitsupdate für Internet Explorer 10 für Windows 7 für x64-Systeme (KB2909210)
Error: (06/03/2014 07:04:06 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Sicherheitsupdate für Internet Explorer 10 für Windows 7 für x64-Systeme (KB2953522)
Error: (06/03/2014 07:01:28 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
BHDrvx64
ccSet_NIS
SymIRON
Microsoft Office Sessions:
=========================
Error: (06/03/2014 08:56:08 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/03/2014 08:53:36 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/03/2014 07:01:30 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/03/2014 00:30:26 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/03/2014 00:14:19 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/03/2014 00:07:03 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/02/2014 11:52:23 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/02/2014 11:46:01 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/02/2014 11:36:37 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/02/2014 11:31:29 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
==================== Memory info ===========================
Percentage of memory in use: 48%
Total physical RAM: 3353.74 MB
Available physical RAM: 1731.38 MB
Total Pagefile: 6705.66 MB
Available Pagefile: 4681.62 MB
Total Virtual: 8192 MB
Available Virtual: 8191.86 MB
==================== Drives ================================
Drive c: (Windows7_OS) (Fixed) (Total:451.98 GB) (Free:409.38 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive q: (Lenovo_Recovery) (Fixed) (Total:12.32 GB) (Free:2.16 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 466 GB) (Disk ID: FC428299)
Partition 1: (Active) - (Size=1 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=452 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=12 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
04.06.2014, 08:16
| #6 |
| /// the machine /// TB-Ausbilder | Nach Neustart von Windows 7 keine Aktionen (Maus+Tastatur) mehr möglich! Allerdings kein Freeze! sieht gut aus
__________________ --> Nach Neustart von Windows 7 keine Aktionen (Maus+Tastatur) mehr möglich! Allerdings kein Freeze! |
|
| Themen zu Nach Neustart von Windows 7 keine Aktionen (Maus+Tastatur) mehr möglich! Allerdings kein Freeze! |
| abgesicherten, antivirus, besten, comodo, ebenfalls, einträge, firewall, freeze, funktionieren, gekauft, gen, laptop, maus, neustart, neustarten, nicht mehr, norton, programm, pwmtr64v.dll, registry, revo uninstaller, system, tastatur, version, viren, windows, windows 7 |
