| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Conhost.EXE startet permanent neuWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
26.08.2014, 08:03
| #1 |
| |  Conhost.EXE startet permanent neu Hallo erstmal, ich hoffe ihr könnt mir hier weiterhelfen, ich bin langsam am verzweifeln... Also seit gestern habe ich das Problem, dass in meinen Prozessen die Conhost.Exe permanent neu startet. Wenn ich auf dem Rechner etwas mache (Egal ob surfen, zocken, arbeiten) werden alle paar Sekunden die offenen Fenster in den Hintergrund gestellt. (nicht minimiert) Also so als würde permanent ein unsichtbares Fenster in den Vordergrund rücken. Java und Adobe habe ich gestern auf den neuesten Stand gebracht Ich hoffe ihr könnt mit helfen Danke und Lg Alex |
|
26.08.2014, 09:28
| #2 |
| /// the machine /// TB-Ausbilder    | Conhost.EXE startet permanent neu hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
26.08.2014, 09:41
| #3 |
| | Conhost.EXE startet permanent neu Sorry habs vergessen, ich verwenden Windows 7 Home Premium.
__________________Hallo  FRST Logfile FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-08-2014
Ran by Gerlinde (administrator) on ALEXANDER-PC on 26-08-2014 10:34:08
Running from C:\Users\Gerlinde\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Razer, Inc.) C:\Program Files (x86)\Razer\Core\64bit\RzOvlMon.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
() C:\Users\Gerlinde\AppData\Local\Amazon Music\Amazon Music Helper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\wermgr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7194840 2013-07-26] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403288 2014-08-09] (NVIDIA Corporation)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [8292120 2013-11-14] (Logitech Inc.)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292088 2013-02-22] (Intel Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard)
HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [585560 2014-06-23] (Razer Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [165624 2014-08-14] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-15] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)
HKU\S-1-5-21-427701738-522564404-579651769-1000\...\Run: [Amazon Music] => C:\Users\Gerlinde\AppData\Local\Amazon Music\Amazon Music Helper.exe [3356480 2014-07-22] ()
HKU\S-1-5-21-427701738-522564404-579651769-1000\...\Run: [GoogleChromeAutoLaunch_F5CF2F4A6B9D1F6F1DF50D0635AC8284] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [860488 2014-08-07] (Google Inc.)
HKU\S-1-5-21-427701738-522564404-579651769-1000\...\Policies\Explorer: [DisallowRun] 1
AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~2.DLL => C:\PROGRA~2\SupTab\SEARCH~2.DLL File Not Found
AppInit_DLLs-x32: C:\PROGRA~2\SupTab\SEARCH~1.DLL => "C:\PROGRA~2\SupTab\SEARCH~1.DLL" File Not Found
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ISCTSystray.lnk
ShortcutTarget: ISCTSystray.lnk -> C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe (Intel Corporation)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.sweet-page.com/?type=hp&ts=1400003634&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.sweet-page.com/?type=hp&ts=1400003634&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL =
SearchScopes: HKLM - {758B870D-DF78-4A6A-9955-DEDDCACF94DC} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3324774&octid=EB_ORIGINAL_CTID&ISID=MA6E2A8D5-873A-4BBC-80C1-B5E9DBA35B86&SearchSource=58&CUI=&UM=6&UP=SP6D1D3C7A-F9DE-4F1E-B99F-B8880A36B229&q={searchTerms}&SSPV=
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1400003634&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R&q={searchTerms}
SearchScopes: HKCU - {758B870D-DF78-4A6A-9955-DEDDCACF94DC} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> No File
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: No Name -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> No File
BHO-x32: Ó¦Óñ¦Ò»¼ü°²×°²å¼þ -> {50F4150A-48B2-417A-BE4C-C83F580FB904} -> C:\Program Files (x86)\Common Files\Tencent\QQPhoneManager\2.0.201.3192\npQQPhoneManagerExt.dll (腾讯公司)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
FireFox:
========
FF ProfilePath: C:\Users\Gerlinde\AppData\Roaming\Mozilla\Firefox\Profiles\qwOFdo0w.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_179.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_179.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @qq.com/npAndroidAssistant -> C:\Program Files (x86)\Common Files\Tencent\QQPhoneManager\2.0.201.3192\npQQPhoneManagerExt.dll (腾讯公司)
FF Plugin-x32: @qq.com/TXSSO -> C:\Program Files (x86)\Common Files\Tencent\TXSSO\1.2.2.37\Bin\npSSOAxCtrlForPTLogin.dll (Tencent)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> D:\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> D:\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> D:\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Extension: Avira Browser Safety - C:\Users\Gerlinde\AppData\Roaming\Mozilla\Firefox\Profiles\qwOFdo0w.default\Extensions\abs@avira.com [2014-08-26]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-04-24]
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.at/
CHR StartupUrls: Default -> "hxxp://www.google.at/", "hxxp://www.sweet-page.com/?type=hppp&ts=1404885316&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1404927441&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1405029293&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1405093910&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1405245688&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1405358318&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1405492550&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1405524496&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1405588488&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1405766672&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1405965616&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1405966542&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1406059466&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1406134326&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1406224846&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1406305583&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1406365722&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1406469723&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1406572810&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1406655667&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1406666989&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1406753658&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1406907717&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1406977653&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1407068693&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1407090103&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1407144345&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1407228496&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1407314915&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1407430315&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1407582421&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1407679101&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1407885446&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1408068862&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1408389071&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1408469243&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1408554154&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1408653169&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1408783484&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1408875185&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R", "hxxp://www.sweet-page.com/?type=hppp&ts=1408989693&from=cor&uid=SamsungXSSDX840XEVOX250GB_S1DBNSADA30623R"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Gerlinde\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Angry Birds) - C:\Users\Gerlinde\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2013-12-12]
CHR Extension: (Google Docs) - C:\Users\Gerlinde\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-12-12]
CHR Extension: (Google Drive) - C:\Users\Gerlinde\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-12-12]
CHR Extension: (Ancient Map) - C:\Users\Gerlinde\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjcjaemihddenoopkkhaamlcoliiiain [2014-05-21]
CHR Extension: (YouTube) - C:\Users\Gerlinde\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-12]
CHR Extension: (Adblock Plus) - C:\Users\Gerlinde\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-03-26]
CHR Extension: (Google-Suche) - C:\Users\Gerlinde\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-12]
CHR Extension: (Der magische Weg nach Oz) - C:\Users\Gerlinde\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgmbnhmcbgnenhcjpmgfhneiiamfijel [2013-12-12]
CHR Extension: (Google Wallet) - C:\Users\Gerlinde\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-12]
CHR Extension: (Deezer) - C:\Users\Gerlinde\AppData\Local\Google\Chrome\User Data\Default\Extensions\npfkoakaabdallkcdbpkkhfilkkngakh [2013-12-12]
CHR Extension: (Google Mail) - C:\Users\Gerlinde\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-12]
CHR Extension: (Extutil) - C:\Users\Gerlinde\AppData\Local\Temp\D7ADFCCA-EE7E-442C-9999-C4D14FEF360B [2014-07-04]
CHR Extension: (Managera) - C:\Users\Gerlinde\AppData\Local\Temp\38fdaae5-8e0e-493c-88ec-e05c3be06e42 [2014-07-04]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-15] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [158000 2014-08-14] (Avira Operations GmbH & Co. KG)
R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [File not signed]
R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) [File not signed]
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1037824 2009-09-20] (Hewlett-Packard Co.) [File not signed]
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [198120 2013-08-01] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-17] (Intel Corporation)
S2 kxescore; C:\Program Files (x86)\Kingsoft\kingsoft antivirus\kxescore.exe [263544 2014-03-29] (Kingsoft Corporation)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2008-12-03] (Hewlett-Packard) [File not signed]
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720792 2014-08-09] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18973144 2014-08-09] (NVIDIA Corporation)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2008-12-03] (Hewlett-Packard) [File not signed]
R2 RzOvlMon; C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe [32960 2014-04-18] (Razer, Inc.)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-08-15] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-08-15] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-08-15] (Avira Operations GmbH & Co. KG)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-07] (Intel Corporation)
R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [21408 2013-08-01] ()
R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [21920 2013-08-01] ()
R3 INETMON; C:\Windows\System32\Drivers\INETMON.sys [29088 2013-08-01] ()
R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [46568 2013-08-01] ()
R1 KDHacker; C:\Program Files (x86)\Kingsoft\kingsoft antivirus\security\kxescan\kdhacker64.sys [171832 2014-03-29] (Kingsoft Corporation)
S3 Logi_Headset_DFU; C:\Windows\System32\Drivers\lhusbdfuamd64.sys [44136 2013-09-30] (CSR plc.)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-17] (Intel Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20440 2014-08-09] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
S3 RzDxgk; C:\Windows\system32\drivers\RzDxgk.sys [129472 2014-04-18] (Razer, Inc.)
R3 rzendpt; C:\Windows\System32\DRIVERS\rzendpt.sys [39080 2014-05-19] (Razer Inc)
R3 rzmpos; C:\Windows\System32\DRIVERS\rzmpos.sys [34984 2014-05-19] (Razer Inc)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2013-03-18] (Apple, Inc.) [File not signed]
S3 cpuz136; \??\C:\Users\Gerlinde\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 GPU-Z; \??\C:\Users\Gerlinde\AppData\Local\Temp\GPU-Z.sys [X]
S1 QMUdisk; \??\C:\Program Files (x86)\Tencent\QQPCMgr\8.11.11347.801\QMUdisk64.sys [X]
S3 X6va015; \??\C:\Windows\SysWOW64\Drivers\X6va015 [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-08-26 10:33 - 2014-08-26 10:34 - 00028846 _____ () C:\Users\Gerlinde\Desktop\FRST.txt
2014-08-26 10:32 - 2014-08-26 10:32 - 02103296 _____ (Farbar) C:\Users\Gerlinde\Desktop\FRST64.exe
2014-08-26 10:30 - 2014-08-26 10:34 - 00000000 ____D () C:\FRST
2014-08-26 08:49 - 2014-08-26 08:49 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-08-26 08:49 - 2014-08-26 08:49 - 00002025 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-08-26 08:49 - 2014-08-26 08:49 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-08-26 08:36 - 2014-08-26 08:36 - 00000000 ____D () C:\Users\Gerlinde\AppData\Roaming\Avira
2014-08-26 08:35 - 2014-08-15 10:30 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-08-26 08:35 - 2014-08-15 10:30 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-08-26 08:35 - 2014-08-15 10:30 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-08-26 08:31 - 2014-08-26 08:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-08-26 08:31 - 2014-08-26 08:35 - 00000000 ____D () C:\ProgramData\Avira
2014-08-26 08:31 - 2014-08-26 08:35 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-08-26 08:31 - 2014-08-26 08:31 - 00001143 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-08-26 08:31 - 2014-08-26 08:31 - 00000000 ____D () C:\Users\Gerlinde\AppData\Roaming\Mozilla
2014-08-26 08:29 - 2014-08-26 08:29 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-26 08:28 - 2014-08-26 08:28 - 04791736 _____ (Avira Operations GmbH & Co. KG) C:\Users\Gerlinde\Downloads\avira_de_av___ws.exe
2014-08-26 08:15 - 2014-08-07 04:06 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-26 08:15 - 2014-08-07 04:01 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-26 08:15 - 2014-06-25 04:06 - 14179328 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-26 08:15 - 2014-06-25 03:37 - 12877312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-08-26 08:15 - 2014-02-04 04:37 - 00191424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-08-26 08:15 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-08-26 08:15 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-08-26 08:15 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-08-26 08:15 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-08-26 08:15 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-08-26 08:15 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-08-26 08:15 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-08-26 08:15 - 2014-01-24 04:40 - 01684416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-08-25 23:20 - 2014-08-26 10:00 - 00699568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-08-25 23:20 - 2014-08-26 10:00 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-08-25 23:20 - 2014-08-26 10:00 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-08-25 23:20 - 2014-08-26 10:00 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-25 20:43 - 2014-08-25 20:43 - 00918440 _____ (Oracle Corporation) C:\Users\Gerlinde\Downloads\chromeinstall-7u67.exe
2014-08-25 20:43 - 2014-08-25 20:43 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-08-25 20:43 - 2014-08-25 20:43 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-08-25 20:43 - 2014-08-25 20:43 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-08-25 20:43 - 2014-08-25 20:43 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-08-25 20:43 - 2014-08-25 20:43 - 00000000 ____D () C:\Program Files (x86)\Java
2014-08-25 20:12 - 2014-08-25 20:12 - 00002702 _____ () C:\Users\Gerlinde\Downloads\legitcheck.hta
2014-08-23 16:20 - 2014-08-23 16:20 - 00000222 _____ () C:\Users\Gerlinde\Desktop\Rust.url
2014-08-23 12:56 - 2014-07-02 19:44 - 00609240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-08-23 12:55 - 2014-07-02 22:48 - 24196896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-08-23 12:55 - 2014-07-02 22:48 - 22994208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-08-23 12:55 - 2014-07-02 22:48 - 17555104 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-08-23 12:55 - 2014-07-02 22:48 - 15294296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-08-23 12:55 - 2014-07-02 22:48 - 13922752 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-08-23 12:55 - 2014-07-02 22:48 - 13835208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-08-23 12:55 - 2014-07-02 22:48 - 12866008 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-08-23 12:55 - 2014-07-02 22:48 - 11283344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-08-23 12:55 - 2014-07-02 22:48 - 11222048 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-08-23 12:55 - 2014-07-02 22:48 - 04247000 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-08-23 12:55 - 2014-07-02 22:48 - 03989960 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-08-23 12:55 - 2014-07-02 22:48 - 01890080 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434052.dll
2014-08-23 12:55 - 2014-07-02 22:48 - 01539928 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434052.dll
2014-08-23 12:55 - 2014-07-02 22:48 - 00944928 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-08-23 12:55 - 2014-07-02 22:48 - 00907096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-08-23 12:55 - 2014-07-02 22:48 - 00903624 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-08-23 12:55 - 2014-07-02 22:48 - 00869152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-08-23 12:55 - 2014-07-02 22:48 - 00846832 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-08-23 12:55 - 2014-07-02 22:48 - 00502232 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2014-08-23 12:55 - 2014-07-02 22:48 - 00418760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2014-08-23 12:55 - 2014-07-02 22:48 - 00391640 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2014-08-23 12:55 - 2014-07-02 22:48 - 00354016 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-08-23 12:55 - 2014-07-02 22:48 - 00348120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2014-08-23 12:55 - 2014-07-02 22:48 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-08-23 12:55 - 2014-07-02 22:48 - 00166568 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-08-23 12:55 - 2014-07-02 22:48 - 00146480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-08-14 17:15 - 2014-08-14 17:15 - 00000555 _____ () C:\Users\Gerlinde\Desktop\TalonRO.lnk
2014-08-14 17:15 - 2014-08-14 17:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TalonRO
2014-08-14 14:01 - 2014-08-14 14:04 - 12212672 _____ (Bitcoin Core project) C:\Users\Gerlinde\Downloads\bitcoin-0.9.2.1-win64-setup.exe
2014-08-14 13:52 - 2014-08-14 13:52 - 00020108 _____ () C:\Users\Gerlinde\Downloads\TalonRO_Full_20140222.torrent
2014-08-14 03:00 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-14 03:00 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2014-08-14 03:00 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-08-14 03:00 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-14 03:00 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-14 03:00 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-14 03:00 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2014-08-14 03:00 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2014-08-13 07:32 - 2014-08-01 01:41 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-13 07:32 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-13 07:32 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-13 07:32 - 2014-07-25 16:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-13 07:32 - 2014-07-25 16:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-13 07:32 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-13 07:32 - 2014-07-25 15:30 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-13 07:32 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-13 07:32 - 2014-07-25 15:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-13 07:32 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-13 07:32 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-13 07:32 - 2014-07-25 15:11 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-13 07:32 - 2014-07-25 15:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-13 07:32 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-08-13 07:32 - 2014-07-25 15:03 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-13 07:32 - 2014-07-25 15:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-13 07:32 - 2014-07-25 15:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-13 07:32 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-13 07:32 - 2014-07-25 14:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-13 07:32 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-13 07:32 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-08-13 07:32 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-08-13 07:32 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-08-13 07:32 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-08-13 07:32 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-13 07:32 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-13 07:32 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-08-13 07:32 - 2014-07-25 14:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-13 07:32 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-08-13 07:32 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-13 07:32 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-08-13 07:32 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-08-13 07:32 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-13 07:32 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-08-13 07:32 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-08-13 07:32 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-13 07:32 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-08-13 07:32 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-13 07:32 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-13 07:32 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-13 07:32 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-13 07:32 - 2014-07-25 13:39 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-13 07:32 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-08-13 07:32 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-08-13 07:32 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-08-13 07:32 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-13 07:32 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-08-13 07:32 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-08-13 07:32 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-08-13 07:32 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-08-13 07:32 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-13 07:32 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-13 07:32 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-13 07:32 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-08-13 07:32 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-08-13 07:32 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-08-13 07:32 - 2014-07-16 05:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-13 07:32 - 2014-07-16 05:22 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-13 07:32 - 2014-07-16 04:55 - 00311296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-13 07:32 - 2014-07-16 04:55 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-08-13 07:32 - 2014-07-16 04:17 - 03166720 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-13 07:32 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-13 07:32 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-13 07:32 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-13 07:32 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-08-13 07:32 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-08-13 07:32 - 2014-06-03 04:42 - 01942016 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-13 07:32 - 2014-06-03 04:42 - 00112576 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-13 07:32 - 2014-06-03 04:13 - 01806336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-08-13 07:30 - 2014-07-14 03:52 - 01215488 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-13 07:30 - 2014-07-14 03:52 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2014-08-13 07:30 - 2014-07-14 03:42 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2014-08-13 07:30 - 2014-07-14 03:41 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-08-12 21:25 - 2014-08-12 21:25 - 00001059 _____ () C:\Users\Gerlinde\Desktop\ePatcher - Verknüpfung.lnk
2014-08-12 19:12 - 2014-08-12 19:12 - 00000000 ____D () C:\Users\Gerlinde\Neuer Ordner
2014-08-12 19:10 - 2014-08-12 19:11 - 2428172044 _____ () C:\Users\Gerlinde\Downloads\ero-full-7-2-14.exe
2014-08-12 15:39 - 2014-08-12 15:45 - 00000090 _____ () C:\Users\Gerlinde\Desktop\RPG Maker Klassen.txt
2014-08-12 15:21 - 2014-08-12 15:21 - 00000000 ____D () C:\Users\Gerlinde\Documents\Steam Cloud
2014-08-12 15:03 - 2014-08-12 18:48 - 00000000 ____D () C:\Users\Gerlinde\Documents\RPGVXAce
2014-08-12 14:52 - 2014-08-12 14:52 - 00000222 _____ () C:\Users\Gerlinde\Desktop\RPG Maker VX Ace.url
2014-08-12 14:33 - 2014-08-12 14:33 - 00000000 ____D () C:\Users\Gerlinde\Downloads\temp
2014-08-12 14:33 - 2014-08-12 14:33 - 00000000 ____D () C:\Users\Gerlinde\Downloads\graphic
2014-08-12 14:33 - 2014-04-05 08:21 - 00707584 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3_300800403.dll
2014-08-12 14:32 - 2014-08-12 14:33 - 00000000 ____D () C:\Users\Gerlinde\Downloads\data
2014-08-12 14:32 - 2014-08-12 14:32 - 05170176 _____ () C:\Users\Gerlinde\Downloads\Staemme 1.6.4.0.exe
2014-08-11 16:49 - 2014-08-11 16:49 - 00000000 ____D () C:\ProgramData\Age of Empires 3
2014-08-09 16:28 - 2014-08-11 18:06 - 00000222 _____ () C:\Users\Gerlinde\Desktop\Nosgoth.url
2014-08-09 13:27 - 2014-08-09 13:27 - 00000000 ____D () C:\gravity
2014-08-06 04:05 - 2014-08-06 04:05 - 00085824 _____ () C:\Users\Gerlinde\Downloads\[Coalgirls]_Laputa_Castle_in_the_Sky_(1920x1038_Blu-Ray_FLAC)_[973DE550].mkv.torrent
2014-08-06 04:04 - 2014-08-06 04:04 - 00293968 _____ () C:\Users\Gerlinde\Downloads\[Coalgirls]_Sword_Art_Online_(1920x1080_Blu-ray_FLAC) (1).torrent
2014-08-06 04:00 - 2014-08-06 04:00 - 00490037 _____ () C:\Users\Gerlinde\Downloads\[Coalgirls]_Hunter_X_Hunter_01-48_(1920x1080_Blu-ray_FLAC).torrent
2014-08-06 03:59 - 2014-08-06 03:59 - 00293968 _____ () C:\Users\Gerlinde\Downloads\[Coalgirls]_Sword_Art_Online_(1920x1080_Blu-ray_FLAC).torrent
2014-08-06 03:57 - 2014-08-06 03:57 - 00296021 _____ () C:\Users\Gerlinde\Downloads\[BakaBT.172701v1] [Coalgirls]_Sword_Art_Online_(1920x1080_Blu-ray_FLAC).torrent
2014-08-06 03:55 - 2014-08-06 03:55 - 00286612 _____ () C:\Users\Gerlinde\Downloads\[a-S] Eureka Seven COMPLETE (01-50 + Movie) (1080p).torrent
2014-08-05 21:08 - 2014-08-05 21:08 - 00999701 _____ (VLC Player) C:\Users\Gerlinde\Downloads\Play_Video1968_Setup.exe
2014-08-05 20:56 - 2014-08-05 20:56 - 00000222 _____ () C:\Users\Gerlinde\Desktop\Age of Empires III Complete Collection.url
2014-08-05 19:44 - 2014-08-05 19:44 - 00000222 _____ () C:\Users\Gerlinde\Desktop\Age of Empires II HD Edition.url
2014-08-05 03:38 - 2014-08-05 03:38 - 00049970 _____ () C:\Users\Gerlinde\Downloads\0delay by isenhartxcore.rar
2014-08-01 17:43 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-01 17:43 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-08-01 17:43 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-08-01 17:43 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-01 17:43 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-01 17:43 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-08-01 17:43 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-08-01 17:43 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-01 17:43 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-08-01 17:43 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-08-01 17:42 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-01 17:42 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-08-01 17:42 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-08-01 17:42 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-07-31 23:26 - 2014-07-31 23:29 - 00000000 ____D () C:\Users\Gerlinde\Desktop\Eluveitie - Origins
2014-07-31 20:04 - 2014-07-31 20:04 - 00004594 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log
2014-07-31 19:59 - 2014-07-31 19:59 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Intel Corporation
2014-07-31 19:58 - 2014-07-31 19:59 - 00000000 ____D () C:\Users\Gast\AppData\Local\NVIDIA Corporation
2014-07-31 19:58 - 2014-07-31 19:58 - 00072016 _____ () C:\Users\Gast\AppData\Local\GDIPFONTCACHEV1.DAT
2014-07-31 19:58 - 2014-07-31 19:58 - 00001423 _____ () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-31 19:58 - 2014-07-31 19:58 - 00000020 ___SH () C:\Users\Gast\ntuser.ini
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 _SHDL () C:\Users\Gast\Vorlagen
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 _SHDL () C:\Users\Gast\Startmenü
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 _SHDL () C:\Users\Gast\Netzwerkumgebung
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 _SHDL () C:\Users\Gast\Lokale Einstellungen
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 _SHDL () C:\Users\Gast\Eigene Dateien
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 _SHDL () C:\Users\Gast\Druckumgebung
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 _SHDL () C:\Users\Gast\Documents\Eigene Musik
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 _SHDL () C:\Users\Gast\Documents\Eigene Bilder
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 _SHDL () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 _SHDL () C:\Users\Gast\AppData\Local\Verlauf
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 _SHDL () C:\Users\Gast\AppData\Local\Anwendungsdaten
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 _SHDL () C:\Users\Gast\Anwendungsdaten
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\NVIDIA
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Adobe
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 ____D () C:\Users\Gast\AppData\Local\Razer
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 ____D () C:\Users\Gast\AppData\Local\NVIDIA
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 ____D () C:\Users\Gast\AppData\Local\Logitech
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 ____D () C:\Users\Gast
2014-07-31 19:58 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-31 19:58 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-07-27 21:07 - 2014-07-27 21:35 - 00000000 ____D () C:\Users\Gerlinde\Documents\Dolphin Emulator
2014-07-27 21:06 - 2014-07-27 21:34 - 00000000 ____D () C:\Users\Gerlinde\Desktop\Dolphin
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-08-26 10:34 - 2014-08-26 10:33 - 00028846 _____ () C:\Users\Gerlinde\Desktop\FRST.txt
2014-08-26 10:34 - 2014-08-26 10:30 - 00000000 ____D () C:\FRST
2014-08-26 10:33 - 2009-07-14 06:45 - 00021840 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-26 10:33 - 2009-07-14 06:45 - 00021840 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-26 10:32 - 2014-08-26 10:32 - 02103296 _____ (Farbar) C:\Users\Gerlinde\Desktop\FRST64.exe
2014-08-26 10:01 - 2014-03-23 01:01 - 00000304 _____ () C:\Windows\Tasks\PriceMeterUpdater.job
2014-08-26 10:00 - 2014-08-25 23:20 - 00699568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-08-26 10:00 - 2014-08-25 23:20 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-08-26 10:00 - 2014-08-25 23:20 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-08-26 10:00 - 2014-08-25 23:20 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-26 09:40 - 2013-12-12 20:57 - 00001114 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-26 08:49 - 2014-08-26 08:49 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-08-26 08:49 - 2014-08-26 08:49 - 00002025 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-08-26 08:49 - 2014-08-26 08:49 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-08-26 08:49 - 2013-12-10 12:06 - 00000000 ____D () C:\ProgramData\Adobe
2014-08-26 08:36 - 2014-08-26 08:36 - 00000000 ____D () C:\Users\Gerlinde\AppData\Roaming\Avira
2014-08-26 08:36 - 2014-08-26 08:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-08-26 08:36 - 2010-11-21 08:50 - 00700454 _____ () C:\Windows\system32\perfh007.dat
2014-08-26 08:36 - 2010-11-21 08:50 - 00150092 _____ () C:\Windows\system32\perfc007.dat
2014-08-26 08:36 - 2009-07-14 07:13 - 01624034 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-26 08:35 - 2014-08-26 08:31 - 00000000 ____D () C:\ProgramData\Avira
2014-08-26 08:35 - 2014-08-26 08:31 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-08-26 08:32 - 2013-12-10 12:01 - 01889394 _____ () C:\Windows\WindowsUpdate.log
2014-08-26 08:31 - 2014-08-26 08:31 - 00001143 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-08-26 08:31 - 2014-08-26 08:31 - 00000000 ____D () C:\Users\Gerlinde\AppData\Roaming\Mozilla
2014-08-26 08:31 - 2014-02-22 16:45 - 00000000 ____D () C:\ProgramData\Package Cache
2014-08-26 08:31 - 2013-12-12 20:57 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-26 08:30 - 2013-12-10 12:14 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-08-26 08:30 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-26 08:30 - 2009-07-14 06:51 - 00311380 _____ () C:\Windows\setupact.log
2014-08-26 08:30 - 2009-07-14 06:45 - 00335936 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-26 08:29 - 2014-08-26 08:29 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-26 08:29 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-08-26 08:29 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-08-26 08:28 - 2014-08-26 08:28 - 04791736 _____ (Avira Operations GmbH & Co. KG) C:\Users\Gerlinde\Downloads\avira_de_av___ws.exe
2014-08-26 08:11 - 2010-11-21 05:47 - 00275442 _____ () C:\Windows\PFRO.log
2014-08-25 23:24 - 2014-05-18 20:13 - 00000000 ____D () C:\Users\Gerlinde\Desktop\FP
2014-08-25 23:24 - 2014-03-29 13:38 - 00000000 ____D () C:\Users\Gerlinde\Desktop\Bilder
2014-08-25 22:54 - 2014-02-27 22:25 - 00000000 ____D () C:\Users\Gerlinde\AppData\Local\Battle.net
2014-08-25 21:56 - 2013-12-28 16:54 - 00000000 ____D () C:\Users\Gerlinde\AppData\Roaming\vlc
2014-08-25 20:45 - 2013-12-12 21:33 - 00000000 ____D () C:\Users\Gerlinde\AppData\Roaming\TS3Client
2014-08-25 20:43 - 2014-08-25 20:43 - 00918440 _____ (Oracle Corporation) C:\Users\Gerlinde\Downloads\chromeinstall-7u67.exe
2014-08-25 20:43 - 2014-08-25 20:43 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-08-25 20:43 - 2014-08-25 20:43 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-08-25 20:43 - 2014-08-25 20:43 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-08-25 20:43 - 2014-08-25 20:43 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-08-25 20:43 - 2014-08-25 20:43 - 00000000 ____D () C:\Program Files (x86)\Java
2014-08-25 20:43 - 2014-01-25 06:02 - 00000000 ____D () C:\ProgramData\Oracle
2014-08-25 20:12 - 2014-08-25 20:12 - 00002702 _____ () C:\Users\Gerlinde\Downloads\legitcheck.hta
2014-08-24 16:37 - 2014-03-23 02:01 - 00000109 _____ () C:\Users\Gerlinde\AppData\Roaming\WB.CFG
2014-08-24 12:27 - 2014-02-27 22:25 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-08-24 01:13 - 2013-12-12 21:05 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-08-23 16:20 - 2014-08-23 16:20 - 00000222 _____ () C:\Users\Gerlinde\Desktop\Rust.url
2014-08-23 12:56 - 2013-12-10 12:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-08-23 12:56 - 2013-12-10 12:13 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-08-23 12:55 - 2013-12-10 12:13 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-08-23 12:13 - 2013-12-12 20:44 - 00000000 ____D () C:\Users\Gerlinde\AppData\Local\NVIDIA Corporation
2014-08-21 00:34 - 2013-12-29 23:14 - 00000000 ____D () C:\Users\Gerlinde\AppData\Roaming\Skype
2014-08-19 19:47 - 2014-03-20 22:24 - 00000000 ____D () C:\Program Files (x86)\Hearthstone
2014-08-15 10:30 - 2014-08-26 08:35 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-08-15 10:30 - 2014-08-26 08:35 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-08-15 10:30 - 2014-08-26 08:35 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-08-15 04:49 - 2013-12-12 21:06 - 00000000 ____D () C:\Users\Gerlinde\AppData\Local\PMB Files
2014-08-14 19:48 - 2014-03-13 19:32 - 00000000 ____D () C:\Users\Gerlinde\AppData\Roaming\uTorrent
2014-08-14 18:12 - 2013-12-13 18:21 - 00000000 ____D () C:\Users\Gerlinde\AppData\Roaming\.minecraft
2014-08-14 17:15 - 2014-08-14 17:15 - 00000555 _____ () C:\Users\Gerlinde\Desktop\TalonRO.lnk
2014-08-14 17:15 - 2014-08-14 17:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TalonRO
2014-08-14 14:04 - 2014-08-14 14:01 - 12212672 _____ (Bitcoin Core project) C:\Users\Gerlinde\Downloads\bitcoin-0.9.2.1-win64-setup.exe
2014-08-14 13:52 - 2014-08-14 13:52 - 00020108 _____ () C:\Users\Gerlinde\Downloads\TalonRO_Full_20140222.torrent
2014-08-14 13:09 - 2013-12-11 12:46 - 00000344 _____ () C:\Windows\lgfwup.ini
2014-08-14 13:09 - 2013-12-11 12:46 - 00000000 ____D () C:\Program Files (x86)\lg_fwupdate
2014-08-14 07:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-08-14 07:21 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-08-14 03:04 - 2013-12-17 20:19 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-14 03:01 - 2013-12-17 20:19 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-14 01:42 - 2013-12-12 20:58 - 00002181 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-08-13 23:25 - 2013-12-13 01:01 - 00000000 ____D () C:\Users\Gerlinde\AppData\Local\CrashDumps
2014-08-12 21:25 - 2014-08-12 21:25 - 00001059 _____ () C:\Users\Gerlinde\Desktop\ePatcher - Verknüpfung.lnk
2014-08-12 19:12 - 2014-08-12 19:12 - 00000000 ____D () C:\Users\Gerlinde\Neuer Ordner
2014-08-12 19:12 - 2013-12-10 12:01 - 00000000 ____D () C:\Users\Gerlinde
2014-08-12 19:11 - 2014-08-12 19:10 - 2428172044 _____ () C:\Users\Gerlinde\Downloads\ero-full-7-2-14.exe
2014-08-12 18:48 - 2014-08-12 15:03 - 00000000 ____D () C:\Users\Gerlinde\Documents\RPGVXAce
2014-08-12 15:45 - 2014-08-12 15:39 - 00000090 _____ () C:\Users\Gerlinde\Desktop\RPG Maker Klassen.txt
2014-08-12 15:21 - 2014-08-12 15:21 - 00000000 ____D () C:\Users\Gerlinde\Documents\Steam Cloud
2014-08-12 14:52 - 2014-08-12 14:52 - 00000222 _____ () C:\Users\Gerlinde\Desktop\RPG Maker VX Ace.url
2014-08-12 14:33 - 2014-08-12 14:33 - 00000000 ____D () C:\Users\Gerlinde\Downloads\temp
2014-08-12 14:33 - 2014-08-12 14:33 - 00000000 ____D () C:\Users\Gerlinde\Downloads\graphic
2014-08-12 14:33 - 2014-08-12 14:32 - 00000000 ____D () C:\Users\Gerlinde\Downloads\data
2014-08-12 14:32 - 2014-08-12 14:32 - 05170176 _____ () C:\Users\Gerlinde\Downloads\Staemme 1.6.4.0.exe
2014-08-12 13:40 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-08-11 18:06 - 2014-08-09 16:28 - 00000222 _____ () C:\Users\Gerlinde\Desktop\Nosgoth.url
2014-08-11 16:49 - 2014-08-11 16:49 - 00000000 ____D () C:\ProgramData\Age of Empires 3
2014-08-11 16:49 - 2014-01-30 23:46 - 00000000 ____D () C:\Users\Gerlinde\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-08-11 16:49 - 2013-12-13 14:39 - 00354180 _____ () C:\Windows\DirectX.log
2014-08-11 16:49 - 2013-12-12 22:11 - 00000000 ____D () C:\Users\Gerlinde\Documents\My Games
2014-08-09 13:27 - 2014-08-09 13:27 - 00000000 ____D () C:\gravity
2014-08-09 02:22 - 2014-07-26 19:59 - 01715224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2014-08-09 02:22 - 2014-07-26 19:59 - 01291280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2014-08-09 02:22 - 2013-12-10 12:15 - 01283136 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-08-09 02:22 - 2013-12-10 12:15 - 01126480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-08-08 17:30 - 2014-04-24 23:09 - 00000000 ____D () C:\Users\Gerlinde\Desktop\Schule
2014-08-07 04:06 - 2014-08-26 08:15 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-07 04:01 - 2014-08-26 08:15 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-06 04:05 - 2014-08-06 04:05 - 00085824 _____ () C:\Users\Gerlinde\Downloads\[Coalgirls]_Laputa_Castle_in_the_Sky_(1920x1038_Blu-Ray_FLAC)_[973DE550].mkv.torrent
2014-08-06 04:04 - 2014-08-06 04:04 - 00293968 _____ () C:\Users\Gerlinde\Downloads\[Coalgirls]_Sword_Art_Online_(1920x1080_Blu-ray_FLAC) (1).torrent
2014-08-06 04:00 - 2014-08-06 04:00 - 00490037 _____ () C:\Users\Gerlinde\Downloads\[Coalgirls]_Hunter_X_Hunter_01-48_(1920x1080_Blu-ray_FLAC).torrent
2014-08-06 03:59 - 2014-08-06 03:59 - 00293968 _____ () C:\Users\Gerlinde\Downloads\[Coalgirls]_Sword_Art_Online_(1920x1080_Blu-ray_FLAC).torrent
2014-08-06 03:57 - 2014-08-06 03:57 - 00296021 _____ () C:\Users\Gerlinde\Downloads\[BakaBT.172701v1] [Coalgirls]_Sword_Art_Online_(1920x1080_Blu-ray_FLAC).torrent
2014-08-06 03:55 - 2014-08-06 03:55 - 00286612 _____ () C:\Users\Gerlinde\Downloads\[a-S] Eureka Seven COMPLETE (01-50 + Movie) (1080p).torrent
2014-08-05 21:08 - 2014-08-05 21:08 - 00999701 _____ (VLC Player) C:\Users\Gerlinde\Downloads\Play_Video1968_Setup.exe
2014-08-05 20:56 - 2014-08-05 20:56 - 00000222 _____ () C:\Users\Gerlinde\Desktop\Age of Empires III Complete Collection.url
2014-08-05 19:44 - 2014-08-05 19:44 - 00000222 _____ () C:\Users\Gerlinde\Desktop\Age of Empires II HD Edition.url
2014-08-05 03:38 - 2014-08-05 03:38 - 00049970 _____ () C:\Users\Gerlinde\Downloads\0delay by isenhartxcore.rar
2014-08-03 21:57 - 2013-12-24 13:14 - 00000000 ____D () C:\Users\Gerlinde\AppData\Local\Amazon Cloud Player
2014-08-03 21:56 - 2013-12-24 13:14 - 00001600 _____ () C:\Windows\System32\Tasks\Amazon Music Helper
2014-08-03 21:39 - 2013-12-12 21:06 - 00000000 ____D () C:\ProgramData\PMB Files
2014-08-03 21:06 - 2013-12-28 16:54 - 00000497 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-08-03 20:53 - 2014-01-04 21:53 - 00000000 ____D () C:\Users\Gerlinde\Documents\ManiaPlanet
2014-08-03 20:45 - 2014-01-04 21:53 - 00000000 ____D () C:\ProgramData\ManiaPlanet
2014-08-01 01:41 - 2014-08-13 07:32 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-01 01:16 - 2014-08-13 07:32 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-31 23:29 - 2014-07-31 23:26 - 00000000 ____D () C:\Users\Gerlinde\Desktop\Eluveitie - Origins
2014-07-31 20:04 - 2014-07-31 20:04 - 00004594 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_65-b20.log
2014-07-31 19:59 - 2014-07-31 19:59 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Intel Corporation
2014-07-31 19:59 - 2014-07-31 19:58 - 00000000 ____D () C:\Users\Gast\AppData\Local\NVIDIA Corporation
2014-07-31 19:58 - 2014-07-31 19:58 - 00072016 _____ () C:\Users\Gast\AppData\Local\GDIPFONTCACHEV1.DAT
2014-07-31 19:58 - 2014-07-31 19:58 - 00001423 _____ () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-31 19:58 - 2014-07-31 19:58 - 00000020 ___SH () C:\Users\Gast\ntuser.ini
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 _SHDL () C:\Users\Gast\Vorlagen
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 _SHDL () C:\Users\Gast\Startmenü
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 _SHDL () C:\Users\Gast\Netzwerkumgebung
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 _SHDL () C:\Users\Gast\Lokale Einstellungen
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 _SHDL () C:\Users\Gast\Eigene Dateien
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 _SHDL () C:\Users\Gast\Druckumgebung
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 _SHDL () C:\Users\Gast\Documents\Eigene Musik
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 _SHDL () C:\Users\Gast\Documents\Eigene Bilder
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 _SHDL () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 _SHDL () C:\Users\Gast\AppData\Local\Verlauf
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 _SHDL () C:\Users\Gast\AppData\Local\Anwendungsdaten
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 _SHDL () C:\Users\Gast\Anwendungsdaten
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\NVIDIA
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Adobe
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 ____D () C:\Users\Gast\AppData\Local\Razer
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 ____D () C:\Users\Gast\AppData\Local\NVIDIA
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 ____D () C:\Users\Gast\AppData\Local\Logitech
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-07-31 19:58 - 2014-07-31 19:58 - 00000000 ____D () C:\Users\Gast
2014-07-27 21:35 - 2014-07-27 21:07 - 00000000 ____D () C:\Users\Gerlinde\Documents\Dolphin Emulator
2014-07-27 21:34 - 2014-07-27 21:06 - 00000000 ____D () C:\Users\Gerlinde\Desktop\Dolphin
Some content of TEMP:
====================
C:\Users\Gerlinde\AppData\Local\Temp\amazonicon_v6.exe
C:\Users\Gerlinde\AppData\Local\Temp\amazoninstallernircmdc.exe
C:\Users\Gerlinde\AppData\Local\Temp\avgnt.exe
C:\Users\Gerlinde\AppData\Local\Temp\bdfilters.dll
C:\Users\Gerlinde\AppData\Local\Temp\bitool.dll
C:\Users\Gerlinde\AppData\Local\Temp\COMAP.EXE
C:\Users\Gerlinde\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Gerlinde\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\Gerlinde\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe
C:\Users\Gerlinde\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\Gerlinde\AppData\Local\Temp\MouseKeyboardCenterx64_1031.exe
C:\Users\Gerlinde\AppData\Local\Temp\NGMDll.dll
C:\Users\Gerlinde\AppData\Local\Temp\NGMResource.dll
C:\Users\Gerlinde\AppData\Local\Temp\nsd84AD.exe
C:\Users\Gerlinde\AppData\Local\Temp\nsdA06B.exe
C:\Users\Gerlinde\AppData\Local\Temp\nsdA32A.exe
C:\Users\Gerlinde\AppData\Local\Temp\nsn870E.exe
C:\Users\Gerlinde\AppData\Local\Temp\nsw864E.exe
C:\Users\Gerlinde\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Gerlinde\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Gerlinde\AppData\Local\Temp\nvStereoApiI64.dll
C:\Users\Gerlinde\AppData\Local\Temp\nvStInst.exe
C:\Users\Gerlinde\AppData\Local\Temp\ochelper.exe
C:\Users\Gerlinde\AppData\Local\Temp\PIPInstaller_PTV_.exe
C:\Users\Gerlinde\AppData\Local\Temp\rd.exe
C:\Users\Gerlinde\AppData\Local\Temp\sdanircmdc.exe
C:\Users\Gerlinde\AppData\Local\Temp\sdapskill.exe
C:\Users\Gerlinde\AppData\Local\Temp\sdaspwn.exe
C:\Users\Gerlinde\AppData\Local\Temp\SRLDetectionLibrary8465221268041359608.dll
C:\Users\Gerlinde\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\Gerlinde\AppData\Local\Temp\unicows.dll
C:\Users\Gerlinde\AppData\Local\Temp\vlc-2.1.3-win32.exe
C:\Users\Gerlinde\AppData\Local\Temp\vlc-2.1.5-win32.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-08-17 02:04
==================== End Of Log ============================
--- --- --- ---------------- ---------------- FRST Addition Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-08-2014
Ran by Gerlinde at 2014-08-26 10:34:23
Running from C:\Users\Gerlinde\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKCU\...\uTorrent) (Version: 3.4.2.32126 - BitTorrent Inc.)
2570 (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
2570_Help (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden
2570Trb (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden
64 Bit HP CIO Components Installer (Version: 6.2.1 - Hewlett-Packard) Hidden
Adobe Flash Player 14 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 14.0.0.176 - Adobe Systems Incorporated)
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.179 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.08) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
Age of Empires II: HD Edition (HKLM-x32\...\Steam App 221380) (Version: - Hidden Path Entertainment, Ensemble Studios)
Age of Empires® III: Complete Collection (HKLM-x32\...\Steam App 105450) (Version: - Ensemble Studios)
AIO_CDB_ProductContext (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
AIO_CDB_Software (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
AIO_Scan (x32 Version: 130.0.421.000 - Hewlett-Packard) Hidden
Amazon Music (HKCU\...\Amazon Amazon Music) (Version: 3.2.0.591 - Amazon Services LLC)
Assassins Creed IV Black Flag (HKLM-x32\...\Uplay Install 273) (Version: - Ubisoft)
Aurora Blu-ray Media Player (HKLM-x32\...\Aurora Blu-ray Media Player) (Version: 2.13.6.1456 - Aurora Software Inc.)
Avira (HKLM-x32\...\{c5039061-0c7c-4f6c-96e5-348a19bd22ec}) (Version: 1.1.20.29573 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.20.29573 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.6.570 - Avira)
Batman™: Arkham Origins (HKLM-x32\...\Steam App 209000) (Version: - WB Games Montreal)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Borderlands 2 (HKLM-x32\...\Steam App 49520) (Version: - Gearbox Software)
Bound By Flame (HKLM-x32\...\Steam App 243930) (Version: - Spiders)
Brick-Force (HKLM-x32\...\{9853ABB2-6416-4C87-8650-DD8E528FF564}}_is1) (Version: 3.13.294.84.14 - Infernum Productions AG)
BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden
Castlevania: Lords of Shadow - Ultimate Edition (HKLM-x32\...\Steam App 234080) (Version: - MercurySteam - Climax Studios)
Castlevania: Lords of Shadow 2 (HKLM-x32\...\Steam App 239250) (Version: - MercurySteam)
Copy (x32 Version: 130.0.428.000 - Hewlett-Packard) Hidden
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version: - Valve)
Dark Souls: Prepare to Die Edition (HKLM-x32\...\Steam App 211420) (Version: - FromSoftware)
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 130.0.465.000 - Hewlett-Packard) Hidden
Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment)
DocProc (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Dota 2 (HKLM-x32\...\Steam App 570) (Version: - Valve)
Dragon Age: Origins (HKLM-x32\...\{AEC81925-9C76-4707-84A9-40696C613ED3}) (Version: 1.05.0.0 - Electronic Arts)
Dragon Age™ II (HKLM-x32\...\{4D565319-8B91-41CB-961C-0DDC86101AC5}) (Version: 1.04.8524.0 - Electronic Arts)
Fax (x32 Version: 130.0.418.000 - Hewlett-Packard) Hidden
FileZilla Client 3.7.4.1 (HKLM-x32\...\FileZilla Client) (Version: 3.7.4.1 - Tim Kosse)
FINAL FANTASY XIV - A Realm Reborn (HKLM-x32\...\{2B41E132-07DF-4925-A3D3-F2D1765CCDFE}) (Version: 1.0.0000 - SQUARE ENIX CO., LTD.)
Gameforge Live 2.0.4 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.4 - Gameforge)
Goat Simulator (HKLM-x32\...\Steam App 265930) (Version: - Coffee Stain Studios)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 36.0.1985.143 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)
HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)
HP Photosmart Officejet and Deskjet All-In-One Driver Software 13.0 Rel. B (HKLM\...\{B61ED343-0B14-4241-999C-490CB1A20DA4}) (Version: 13.0 - HP)
HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Update (HKLM-x32\...\{7059BDA7-E1DB-442C-B7A1-6144596720A4}) (Version: 4.000.011.006 - Hewlett-Packard)
HPPhotoGadget (x32 Version: 130.0.282.000 - Hewlett-Packard) Hidden
HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPPhotosmartEssential (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)
Intel(R) Rapid Storage Technology (Version: 12.8.0.1016 - Intel Corporation) Hidden
Intel(R) Smart Connect Technology (HKLM\...\{B1AC3709-3E98-4F2C-A84E-4BCA2A452E64}) (Version: 4.2.40.2418 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.8.251 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.31.8.1 - Intel Corporation) Hidden
Java 7 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417045FF}) (Version: 7.0.450 - Oracle)
Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle)
Java Auto Updater (x32 Version: 2.1.67.1 - Oracle, Inc.) Hidden
Kingdoms of Amalur: Reckoning™ (HKLM-x32\...\Steam App 102500) (Version: - Big Huge Games)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
LG ODD Auto Firmware Update (HKLM-x32\...\{6179550A-3E7C-499E-BCC9-9E8113E0A285}) (Version: 10.01.0712.01 - )
Logitech Gaming Software (Version: 8.45.88 - Logitech Inc.) Hidden
Logitech Gaming Software 8.51 (HKLM\...\Logitech Gaming Software) (Version: 8.51.5 - Logitech Inc.)
MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden
Metin2 (HKLM-x32\...\Metin2_is1) (Version: - Gameforge 4D GmbH)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Security Client (Version: 4.5.0216.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.5.216.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{86CE1746-9EFF-3C9C-8755-81EA8903AC34}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)
Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.2.173.0 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (Version: 2.2.173.0 - Microsoft Corporation) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
My Game Long Name (HKLM\...\UDK-fbdb215f-8764-4222-a7c0-616e1b2c5831) (Version: - Epic Games, Inc.)
Network64 (Version: 130.0.572.000 - Hewlett-Packard) Hidden
Nosgoth (HKLM-x32\...\Steam App 200110) (Version: 140819.91216 - Square Enix Ltd)
NVIDIA 3D Vision Controller-Treiber 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 340.52 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.1.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.1.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.160.1244 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA ShadowPlay 15.3.36 (Version: 15.3.36 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6514 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 340.52 (Version: 340.52 - NVIDIA Corporation) Hidden
NVIDIA Update 15.3.36 (Version: 15.3.36 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 15.3.36 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.23 (Version: 1.2.23 - NVIDIA Corporation) Hidden
OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.11.2806 - Electronic Arts, Inc.)
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.)
Path of Exile (HKLM-x32\...\{90A4562F-D4A1-4B65-906D-41F236CF6902}) (Version: 1.0.3.30295 - Grinding Gear Games)
PlanetSide 2 (HKLM-x32\...\Steam App 218230) (Version: - Sony Online Entertainment)
Ragnarok Online - Free to Play - European Version (HKLM-x32\...\Steam App 250740) (Version: - Gravity Europe SAS)
Ragnarok Online 2 (HKLM-x32\...\Steam App 231060) (Version: - Gravity, Inc.)
Razer Core (HKLM-x32\...\Razer Core) (Version: 1.0.1.66 - Razer Inc)
Razer Synapse 2.0 (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 1.18.15.20888 - Razer Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.72.410.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7004 - Realtek Semiconductor Corp.)
RPG Maker VX Ace (HKLM-x32\...\Steam App 220700) (Version: - Enterbrain)
Rust (HKLM-x32\...\Steam App 252490) (Version: - Facepunch Studios)
Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
SHIELD Streaming (Version: 3.1.100 - NVIDIA Corporation) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
SmartWebPrinting (x32 Version: 130.0.457.000 - Hewlett-Packard) Hidden
Sniper Elite: Nazi Zombie Army (HKLM-x32\...\Steam App 227100) (Version: - Rebellion)
Sniper Elite: Nazi Zombie Army 2 (HKLM-x32\...\Steam App 247910) (Version: - )
SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
South Park™: The Stick of Truth™ (HKLM-x32\...\Steam App 213670) (Version: - Obsidian Entertainment)
Spore (HKLM-x32\...\Steam App 17390) (Version: - Maxis™)
Starbound (HKLM-x32\...\Steam App 211820) (Version: - )
StarCraft II (HKLM-x32\...\StarCraft II) (Version: - Blizzard Entertainment)
Status (x32 Version: 130.0.469.000 - Hewlett-Packard) Hidden
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
TalonRO Client 1.0.0 (HKLM-x32\...\TalonRO_is1) (Version: 1.0.0 - TalonRO)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version: - Valve)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
The Forest (HKLM-x32\...\Steam App 242760) (Version: - Endnight Games Ltd)
The Last Remnant (HKLM-x32\...\Steam App 23310) (Version: - SQUARE ENIX)
The Stomping Land (HKLM-x32\...\Steam App 263440) (Version: - SuperCrit)
Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden
Torchlight II (HKLM-x32\...\Steam App 200710) (Version: - Runic Games)
TrackMania² Stadium (HKLM-x32\...\Steam App 232910) (Version: - Nadeo)
TrayApp (x32 Version: 130.0.422.000 - Hewlett-Packard) Hidden
UE BOOM Update-Assistent (HKLM-x32\...\{31BD1782-6664-43E4-A6B5-F1736B89EB33}) (Version: 1.2.6 - Logitech, Inc.)
UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden
Uplay (HKLM-x32\...\Uplay) (Version: 4.2 - Ubisoft)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Warcraft III (HKLM-x32\...\Warcraft III) (Version: - Blizzard Entertainment)
WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden
WildStar (HKLM-x32\...\WildStar) (Version: - NCSOFT)
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
WinRAR 5.10 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
WinRAR archiver (HKLM-x32\...\WinRAR archiver) (Version: - )
WoonRoRenewal Client (HKCU\...\WoonRoRenewal Client) (Version: - )
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment)
World of Warcraft Beta (HKLM-x32\...\World of Warcraft Beta) (Version: - Blizzard Entertainment)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
==================== Restore Points =========================
21-08-2014 20:43:16 Windows Update
23-08-2014 09:48:00 Windows-Sicherung
23-08-2014 10:13:21 DirectX wurde installiert
24-08-2014 17:00:07 Windows-Sicherung
25-08-2014 18:04:44 Windows Update
25-08-2014 18:40:12 Windows-Sicherung
25-08-2014 18:42:50 Installed Java 7 Update 67
25-08-2014 21:12:21 Removed Adobe Reader XI (11.0.07) - Deutsch.
26-08-2014 06:28:57 Windows Update
26-08-2014 08:07:40 Removed System Requirements Lab CYRI
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {2855FFD6-0231-4392-BFF8-3E2958B39E15} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {3BC64D6F-C79D-42C5-8D1F-879F5FA79F14} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-05-13] (Microsoft)
Task: {3F86074C-1406-435A-A290-762CCE14B580} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {3FBF2A89-9FB0-4852-9047-AD71461F0020} - System32\Tasks\{FED8056D-FE72-46E0-93AD-94CAC5E3876A} => D:\Spiele\World of Warcraft\World of Warcraft Launcher.exe [2014-02-19] (Blizzard Entertainment)
Task: {4852394C-DD4B-484D-986C-8AEBC37DF623} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {6996CB3F-EA7D-4397-B0A8-E01BD543105C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-08-26] (Adobe Systems Incorporated)
Task: {8BE13A17-87AE-49E9-B422-DDAD1AA8A951} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {A231150E-7D82-462F-833D-33C1E08F8A61} - System32\Tasks\{1661B995-F684-47E2-942E-6A222985C768} => D:\Spiele\World of Warcraft\World of Warcraft Launcher.exe [2014-02-19] (Blizzard Entertainment)
Task: {A623CA54-275A-4581-AC4B-5F990D28EE1B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-12] (Google Inc.)
Task: {B048C5A8-F9F7-40CF-8A9B-1948302F63C6} - System32\Tasks\PriceMeterUpdater => C:\Users\Gerlinde\AppData\Roaming\PRICEM~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {CD57E779-DE99-4D29-BC18-05C4021026B5} - System32\Tasks\Amazon Music Helper => C:\Users\Gerlinde\AppData\Local\Amazon Music\Amazon Music Helper.exe [2014-07-22] ()
Task: {DDD38B48-BB06-4182-83B0-F7986814E6F1} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {E730E651-E30D-4B8F-BC7A-A14F3FF72FF8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-12] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\PriceMeterUpdater.job => C:\Users\Gerlinde\AppData\Roaming\PRICEM~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
==================== Loaded Modules (whitelisted) =============
2013-08-01 18:31 - 2013-08-01 18:31 - 00198120 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
2013-08-01 18:31 - 2013-08-01 18:31 - 00054760 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\NetworkHeuristic.dll
2013-08-01 18:31 - 2013-08-01 18:31 - 00034792 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTNetMon.dll
2010-01-02 16:42 - 2010-01-02 16:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2013-12-10 12:14 - 2014-07-02 20:55 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-08-03 21:56 - 2014-07-22 22:46 - 03356480 _____ () C:\Users\Gerlinde\AppData\Local\Amazon Music\Amazon Music Helper.exe
2014-02-11 21:29 - 2014-02-11 21:29 - 00093696 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2014-08-14 01:42 - 2014-08-07 05:20 - 00718152 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\libglesv2.dll
2014-08-14 01:42 - 2014-08-07 05:20 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\libegl.dll
2014-08-14 01:42 - 2014-08-07 05:20 - 08537928 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\pdf.dll
2014-08-14 01:42 - 2014-08-07 05:20 - 00353096 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\ppGoogleNaClPluginChrome.dll
2014-08-14 01:42 - 2014-08-07 05:20 - 01732936 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\ffmpegsumo.dll
2014-08-14 17:27 - 2014-08-14 17:27 - 00140024 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll
2014-08-14 17:27 - 2014-08-14 17:27 - 00067832 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll
2013-12-10 12:17 - 2013-09-17 04:20 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2014-08-26 08:36 - 2014-08-14 17:27 - 00051504 _____ () C:\Users\Gerlinde\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
2014-08-14 01:42 - 2014-08-07 05:20 - 14669128 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.143\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\QQPCRTP => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\QQPCRTP => ""="service"
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
MSCONFIG\startupreg: Akamai NetSession Interface => "C:\Users\Gerlinde\AppData\Local\Akamai\netsession_win.exe"
MSCONFIG\startupreg: LGODDFU => C:\Program Files (x86)\lg_fwupdate\lgfw.exe blrun
MSCONFIG\startupreg: Nvtmru => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
MSCONFIG\startupreg: PowerDVD13Agent => "C:\Program Files (x86)\CyberLink\PowerDVD13\PowerDVD13Agent.exe"
MSCONFIG\startupreg: PriceMeterW => "C:\Users\Gerlinde\AppData\Local\PriceMeter\pricemeterw.exe"
MSCONFIG\startupreg: Razer Synapse => "C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe"
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\Steam.exe" -silent
==================== Faulty Device Manager Devices =============
Name: tencent QMUdisk
Description: tencent QMUdisk
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: QMUdisk
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: Photosmart 2570 series
Description: Photosmart 2570 series
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Photosmart 2570 series
Description: Photosmart 2570 series
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: HP
Service: StillCam
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (08/26/2014 10:34:36 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: nvstreamsvc.exe, Version: 3.1.100.0, Zeitstempel: 0x53e5680c
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.22436, Zeitstempel: 0x521eb03f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000052286
ID des fehlerhaften Prozesses: 0x1b88
Startzeit der fehlerhaften Anwendung: 0xnvstreamsvc.exe0
Pfad der fehlerhaften Anwendung: nvstreamsvc.exe1
Pfad des fehlerhaften Moduls: nvstreamsvc.exe2
Berichtskennung: nvstreamsvc.exe3
Error: (08/26/2014 10:34:34 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: nvstreamsvc.exe, Version: 3.1.100.0, Zeitstempel: 0x53e5680c
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.22436, Zeitstempel: 0x521eb03f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000052286
ID des fehlerhaften Prozesses: 0x12e0
Startzeit der fehlerhaften Anwendung: 0xnvstreamsvc.exe0
Pfad der fehlerhaften Anwendung: nvstreamsvc.exe1
Pfad des fehlerhaften Moduls: nvstreamsvc.exe2
Berichtskennung: nvstreamsvc.exe3
Error: (08/26/2014 10:34:31 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: nvstreamsvc.exe, Version: 3.1.100.0, Zeitstempel: 0x53e5680c
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.22436, Zeitstempel: 0x521eb03f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000052286
ID des fehlerhaften Prozesses: 0xe2c
Startzeit der fehlerhaften Anwendung: 0xnvstreamsvc.exe0
Pfad der fehlerhaften Anwendung: nvstreamsvc.exe1
Pfad des fehlerhaften Moduls: nvstreamsvc.exe2
Berichtskennung: nvstreamsvc.exe3
Error: (08/26/2014 10:34:29 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: nvstreamsvc.exe, Version: 3.1.100.0, Zeitstempel: 0x53e5680c
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.22436, Zeitstempel: 0x521eb03f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000052286
ID des fehlerhaften Prozesses: 0x51c
Startzeit der fehlerhaften Anwendung: 0xnvstreamsvc.exe0
Pfad der fehlerhaften Anwendung: nvstreamsvc.exe1
Pfad des fehlerhaften Moduls: nvstreamsvc.exe2
Berichtskennung: nvstreamsvc.exe3
Error: (08/26/2014 10:34:27 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: nvstreamsvc.exe, Version: 3.1.100.0, Zeitstempel: 0x53e5680c
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.22436, Zeitstempel: 0x521eb03f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000052286
ID des fehlerhaften Prozesses: 0x19b4
Startzeit der fehlerhaften Anwendung: 0xnvstreamsvc.exe0
Pfad der fehlerhaften Anwendung: nvstreamsvc.exe1
Pfad des fehlerhaften Moduls: nvstreamsvc.exe2
Berichtskennung: nvstreamsvc.exe3
Error: (08/26/2014 10:34:25 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: nvstreamsvc.exe, Version: 3.1.100.0, Zeitstempel: 0x53e5680c
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.22436, Zeitstempel: 0x521eb03f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000052286
ID des fehlerhaften Prozesses: 0x14a4
Startzeit der fehlerhaften Anwendung: 0xnvstreamsvc.exe0
Pfad der fehlerhaften Anwendung: nvstreamsvc.exe1
Pfad des fehlerhaften Moduls: nvstreamsvc.exe2
Berichtskennung: nvstreamsvc.exe3
Error: (08/26/2014 10:34:23 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: nvstreamsvc.exe, Version: 3.1.100.0, Zeitstempel: 0x53e5680c
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.22436, Zeitstempel: 0x521eb03f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000052286
ID des fehlerhaften Prozesses: 0x1b50
Startzeit der fehlerhaften Anwendung: 0xnvstreamsvc.exe0
Pfad der fehlerhaften Anwendung: nvstreamsvc.exe1
Pfad des fehlerhaften Moduls: nvstreamsvc.exe2
Berichtskennung: nvstreamsvc.exe3
Error: (08/26/2014 10:34:21 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: nvstreamsvc.exe, Version: 3.1.100.0, Zeitstempel: 0x53e5680c
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.22436, Zeitstempel: 0x521eb03f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000052286
ID des fehlerhaften Prozesses: 0x884
Startzeit der fehlerhaften Anwendung: 0xnvstreamsvc.exe0
Pfad der fehlerhaften Anwendung: nvstreamsvc.exe1
Pfad des fehlerhaften Moduls: nvstreamsvc.exe2
Berichtskennung: nvstreamsvc.exe3
Error: (08/26/2014 10:34:19 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: nvstreamsvc.exe, Version: 3.1.100.0, Zeitstempel: 0x53e5680c
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.22436, Zeitstempel: 0x521eb03f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000052286
ID des fehlerhaften Prozesses: 0x16cc
Startzeit der fehlerhaften Anwendung: 0xnvstreamsvc.exe0
Pfad der fehlerhaften Anwendung: nvstreamsvc.exe1
Pfad des fehlerhaften Moduls: nvstreamsvc.exe2
Berichtskennung: nvstreamsvc.exe3
Error: (08/26/2014 10:34:17 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: nvstreamsvc.exe, Version: 3.1.100.0, Zeitstempel: 0x53e5680c
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.22436, Zeitstempel: 0x521eb03f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000052286
ID des fehlerhaften Prozesses: 0x1c74
Startzeit der fehlerhaften Anwendung: 0xnvstreamsvc.exe0
Pfad der fehlerhaften Anwendung: nvstreamsvc.exe1
Pfad des fehlerhaften Moduls: nvstreamsvc.exe2
Berichtskennung: nvstreamsvc.exe3
System errors:
=============
Error: (08/26/2014 08:38:37 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "IePlugin Services" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (08/26/2014 08:30:33 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Kingsoft Core Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%14001
Error: (08/26/2014 08:25:36 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Kingsoft Core Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%14001
Error: (08/26/2014 08:11:17 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Kingsoft Core Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%14001
Error: (08/25/2014 10:59:43 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Kingsoft Core Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%14001
Error: (08/25/2014 09:59:43 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR8 gefunden.
Error: (08/25/2014 07:53:56 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Kingsoft Core Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%14001
Error: (08/24/2014 00:12:14 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Kingsoft Core Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%14001
Error: (08/23/2014 10:40:22 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Kingsoft Core Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%14001
Error: (08/21/2014 10:32:28 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Kingsoft Core Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%14001
Microsoft Office Sessions:
=========================
Error: (08/26/2014 10:34:40 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: nvstreamsvc.exe3.1.100.053e5680cntdll.dll6.1.7601.22436521eb03fc000000500000000000522861eb401cfc1089361be09C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeC:\Windows\SYSTEM32\ntdll.dlld192ccc3-2cfb-11e4-a64c-d43d7ef89c13
Error: (08/26/2014 10:34:38 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: nvstreamsvc.exe3.1.100.053e5680cntdll.dll6.1.7601.22436521eb03fc00000050000000000052286e9801cfc1089222d0bdC:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeC:\Windows\SYSTEM32\ntdll.dlld05258d1-2cfb-11e4-a64c-d43d7ef89c13
Error: (08/26/2014 10:34:36 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: nvstreamsvc.exe3.1.100.053e5680cntdll.dll6.1.7601.22436521eb03fc000000500000000000522861b8801cfc10890e62d6aC:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeC:\Windows\SYSTEM32\ntdll.dllcf173c24-2cfb-11e4-a64c-d43d7ef89c13
Error: (08/26/2014 10:34:34 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: nvstreamsvc.exe3.1.100.053e5680cntdll.dll6.1.7601.22436521eb03fc0000005000000000005228612e001cfc1088fa7b551C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeC:\Windows\SYSTEM32\ntdll.dllcddabfe2-2cfb-11e4-a64c-d43d7ef89c13
Error: (08/26/2014 10:34:31 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: nvstreamsvc.exe3.1.100.053e5680cntdll.dll6.1.7601.22436521eb03fc00000050000000000052286e2c01cfc1088e6a4eabC:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeC:\Windows\SYSTEM32\ntdll.dllcc9bab86-2cfb-11e4-a64c-d43d7ef89c13
Error: (08/26/2014 10:34:29 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: nvstreamsvc.exe3.1.100.053e5680cntdll.dll6.1.7601.22436521eb03fc0000005000000000005228651c01cfc1088d2c99e4C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeC:\Windows\SYSTEM32\ntdll.dllcb5d0c5b-2cfb-11e4-a64c-d43d7ef89c13
Error: (08/26/2014 10:34:27 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: nvstreamsvc.exe3.1.100.053e5680cntdll.dll6.1.7601.22436521eb03fc0000005000000000005228619b401cfc1088bed8588C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeC:\Windows\SYSTEM32\ntdll.dllca1e9442-2cfb-11e4-a64c-d43d7ef89c13
Error: (08/26/2014 10:34:25 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: nvstreamsvc.exe3.1.100.053e5680cntdll.dll6.1.7601.22436521eb03fc0000005000000000005228614a401cfc1088aaf5b8fC:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeC:\Windows\SYSTEM32\ntdll.dllc8e0915a-2cfb-11e4-a64c-d43d7ef89c13
Error: (08/26/2014 10:34:23 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: nvstreamsvc.exe3.1.100.053e5680cntdll.dll6.1.7601.22436521eb03fc000000500000000000522861b5001cfc108897158a7C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeC:\Windows\SYSTEM32\ntdll.dllc7a54d9c-2cfb-11e4-a64c-d43d7ef89c13
Error: (08/26/2014 10:34:21 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: nvstreamsvc.exe3.1.100.053e5680cntdll.dll6.1.7601.22436521eb03fc0000005000000000005228688401cfc10888355197C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeC:\Windows\SYSTEM32\ntdll.dllc6757bb9-2cfb-11e4-a64c-d43d7ef89c13
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i7-3770 CPU @ 3.40GHz
Percentage of memory in use: 23%
Total physical RAM: 16334.92 MB
Available physical RAM: 12575.01 MB
Total Pagefile: 18333.11 MB
Available Pagefile: 13865.01 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
==================== Drives ================================
Drive c: (System) (Fixed) (Total:232.79 GB) (Free:56.21 GB) NTFS
Drive d: (Daten) (Fixed) (Total:929.56 GB) (Free:409.39 GB) NTFS
Drive e: (HI-TECH Treiber) (Fixed) (Total:1.95 GB) (Free:0.45 GB) NTFS
Drive g: (INTENSO) (Fixed) (Total:931.28 GB) (Free:737.73 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 5F66E1AA)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=232.8 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 5F66E1A1)
Partition 1: (Not Active) - (Size=929.6 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=2 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (Size: 931.5 GB) (Disk ID: 56EA5009)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=0C)
==================== End Of Log ============================
|
|
27.08.2014, 10:00
| #4 |
| /// the machine /// TB-Ausbilder | Conhost.EXE startet permanent neu hi, Scan mit Combofix
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
27.08.2014, 10:02
| #5 |
| | Conhost.EXE startet permanent neu Hallo, Thema kann geschlossen werden, lag scheinbar an einer defekten Version von Java. Hab den Computer um 3 Tage zurückgesetzt und jetzt funktioniert alles wieder einwandfrei Danke für die Hilfe Lg Alex |
|
28.08.2014, 07:17
| #6 |
| /// the machine /// TB-Ausbilder | Conhost.EXE startet permanent neu ok.
__________________ --> Conhost.EXE startet permanent neu |
|
| Themen zu Conhost.EXE startet permanent neu |
| adobe, arbeiten, fenster, gestern, hintergrund, hoffe, langsam, neu, neues, neueste, offene, permanent, problem, prozesse, rechner, sekunden, stand, starte, startet, surfe, surfen, unsichtbares fenster, vordergrund, weiterhelfen, würde, zocken |
WARNUNG an die MITLESER: 
Linear-Darstellung
