![]() |
|
Log-Analyse und Auswertung: Mail Delivery Service seit mehr als 1 Monat wie bekomme ich das Problem aus der WeltWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
| ![]() Mail Delivery Service seit mehr als 1 Monat wie bekomme ich das Problem aus der Welt Guten Abend, Ich hoffe ihr könnt mir helfen. Ich bekomme seit mehr als 1. Monat jeden Tag locker 50 Mails mit dem Inhalt Mail Delivery Service und ich weiß partu nicht wie ich das Problem gelöst bekommen tue habe mein Antivir laufen lassen doch keine Infektion oder funde auch habe ich die Passwörter meiner Email Konten schon geändert wegen verdacht eines Email Hacks doch jetzt seit ihr gefragt und ich hoffe ihr könnt mir helfen habe hier ein log File von FRS Tool doch daraus werde ich nicht schlau: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:21-05-2014 Ran by Pascal (administrator) on PASCAL-PC on 21-05-2014 22:27:38 Running from C:\Users\Pascal\Downloads Platform: Microsoft Windows 7 Enterprise Service Pack 1 (X86) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (Logitech, Inc.) C:\Program Files\Common Files\logishrd\Bluetooth\LBTServ.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Autodesk, Inc.) C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe (SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50ST7.EXE (SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RP7.EXE (Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (O&O Software GmbH) C:\Program Files\OO Software\Defrag\oodag.exe (Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe (TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe (Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe (Nero AG) C:\Program Files\Nero\Update\NASvc.exe (Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe (Elaborate Bytes AG) C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe (Logitech Inc.) C:\Program Files\Logitech\SetPoint\LBTWiz.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe () C:\Program Files\MagicTune Premium\GammaTray.exe (Logitech, Inc.) C:\Program Files\Logitech\SetPoint\SetPoint.exe (Ralink Technology, Corp.) C:\Program Files\RALINK\Common\RaUI.exe (RPworld.de) C:\Users\Pascal\Downloads\FritzBox_Tray_Tool_1.2\FritzBox_Tray_Tool.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Logitech, Inc.) C:\Program Files\Common Files\logishrd\KHAL2\KHALMNPR.exe (SEC) C:\Program Files\MagicTune Premium\MagicTune.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe (Microsoft Corporation) C:\Windows\System32\wuauclt.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe (Nero AG) C:\Program Files\Nero\Nero 2014\Nero Vision\NeroVision.exe (Nero AG) C:\Program Files\Nero\Nero 2014\Nero Vision\NeroBurnServer.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [MagicTuneLauncher] => C:\Program Files\MagicTune Premium\MagicTuneLauncher.exe [51712 2011-01-04] () HKLM\...\Run: [VirtualCloneDrive] => C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [85160 2009-06-17] (Elaborate Bytes AG) HKLM\...\Run: [FUFAXSTM] => C:\Program Files\Epson Software\FAX Utility\FUFAXSTM.exe [847872 2009-12-03] (SEIKO EPSON CORPORATION) HKLM\...\Run: [EEventManager] => C:\Program Files\Epson Software\Event Manager\EEventManager.exe [976320 2009-12-03] (SEIKO EPSON CORPORATION) HKLM\...\Run: [OODefragTray] => C:\Program Files\OO Software\Defrag\oodtray.exe [3257640 2014-01-24] (O&O Software GmbH) HKLM\...\Run: [Kernel and Hardware Abstraction Layer] => C:\Windows\KHALMNPR.EXE [55824 2009-06-17] (Logitech, Inc.) HKLM\...\Run: [Bluetooth Connection Assistant] => LBTWIZ.EXE -silent HKLM\...\Run: [KiesTrayAgent] => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311152 2013-12-11] (Samsung Electronics Co., Ltd.) HKLM\...\Run: [Nvtmru] => C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-08] (NVIDIA Corporation) HKLM\...\Run: [AllShareAgent] => C:\Program Files\Samsung\AllShare\AllShareAgent.exe [285072 2012-03-01] (Samsung Electronics Co., Ltd.) HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [689744 2014-03-13] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap.dll [982232 2013-12-10] (NVIDIA Corporation) HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-01-20] (Apple Inc.) HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation) HKU\.DEFAULT\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [894344 2013-02-05] (Autodesk, Inc.) HKU\S-1-5-21-2929401604-168723178-134223584-1000\...\Run: [KiesAirMessage] => C:\Program Files\Samsung\Kies\KiesAirMessage.exe [578560 2013-05-22] (Samsung Electronics) HKU\S-1-5-21-2929401604-168723178-134223584-1000\...\Run: [] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168 2013-12-11] (Samsung) HKU\S-1-5-21-2929401604-168723178-134223584-1000\...\Policies\Explorer: [DisallowRun] 1 HKU\S-1-5-21-2929401604-168723178-134223584-1000\...\Policies\Explorer: [] HKU\S-1-5-21-2929401604-168723178-134223584-1000\...\MountPoints2: {166e3181-db5c-11e1-b68d-001e8c836755} - I:\pushinst.exe HKU\S-1-5-21-2929401604-168723178-134223584-1000\...\MountPoints2: {ee36545b-dd1f-11e1-a81c-bc054307a844} - H:\setup.exe HKU\S-1-5-21-2929401604-168723178-134223584-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [KiesAirMessage] => C:\Program Files\Samsung\Kies\KiesAirMessage.exe [578560 2013-05-22] (Samsung Electronics) HKU\S-1-5-21-2929401604-168723178-134223584-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168 2013-12-11] (Samsung) HKU\S-1-5-21-2929401604-168723178-134223584-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\Explorer: [DisallowRun] 1 HKU\S-1-5-21-2929401604-168723178-134223584-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\Explorer: [] HKU\S-1-5-21-2929401604-168723178-134223584-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {166e3181-db5c-11e1-b68d-001e8c836755} - I:\pushinst.exe HKU\S-1-5-21-2929401604-168723178-134223584-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {ee36545b-dd1f-11e1-a81c-bc054307a844} - H:\setup.exe IFEO\allshare.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe" IFEO\driveragent.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe" IFEO\driverscanner.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe" IFEO\kies3.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe" IFEO\kiesagent.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe" IFEO\setup.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe" IFEO\teamviewer.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe" IFEO\unins000.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe" IFEO\uninst.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe" IFEO\uninstall.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe" Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GammaTray.lnk ShortcutTarget: GammaTray.lnk -> C:\Program Files\MagicTune Premium\GammaTray.exe () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Logitech SetPoint.lnk ShortcutTarget: Logitech SetPoint.lnk -> C:\Program Files\Logitech\SetPoint\SetPoint.exe (Logitech, Inc.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\O&O Defrag Tray.lnk ShortcutTarget: O&O Defrag Tray.lnk -> C:\Windows\Installer\{9A111B78-51E3-48ED-B3CF-F76E004C2CA9}\app_icon.ico () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Ralink Wireless Utility.lnk ShortcutTarget: Ralink Wireless Utility.lnk -> C:\Program Files\RALINK\Common\RaUI.exe (Ralink Technology, Corp.) Startup: C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip () Startup: C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Fritz!Box Tray Tool.lnk ShortcutTarget: Fritz!Box Tray Tool.lnk -> C:\Users\Pascal\Downloads\FritzBox_Tray_Tool_1.2\FritzBox_Tray_Tool.exe (RPworld.de) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.giga.de/software/ HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKCU - {09859B9C-D4E5-403D-8076-AFEBCD42A55A} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=U3&apn_dtid=OSJ000YYDE&apn_uid=A6A6A550-0B0B-4371-9E53-7048D8DF73D8&apn_sauid=1FFE243C-45AC-458A-88C6-5ED81ACC53CB SearchScopes: HKCU - {5AAB9BE1-340F-4E19-9272-664E86A59A38} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus SearchScopes: HKCU - {AF4CB84D-0C01-4D23-846B-D908805D3B71} URL = hxxp://search.softonic.com/MOY00621/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=fcc169e9000000000000001f1f2671b7&r=186 BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.) Hosts: 127.0.0.1 validation.sls.microsoft.com Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default FF SelectedSearchEngine: Google FF Homepage: hxxp://schnittberichte.com/ FF NetworkProxy: "ftp", "91.121.58.235" FF NetworkProxy: "ftp_port", 3128 FF NetworkProxy: "http", "91.121.58.235" FF NetworkProxy: "http_port", 3128 FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co" FF NetworkProxy: "share_proxy_settings", true FF NetworkProxy: "socks", "91.121.58.235" FF NetworkProxy: "socks_port", 3128 FF NetworkProxy: "ssl", "91.121.58.235" FF NetworkProxy: "ssl_port", 3128 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll () FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC) FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin: @Nero.com/KM - C:\PROGRA~1\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG) FF Plugin: @nokia.com/EnablerPlugin - C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( ) FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.) FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Amazon-Icon - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\amazon-icon@giga.de [2014-01-02] FF Extension: Разпознаване на устройство Logitech - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\DeviceDetection@logitech.com [2012-08-01] FF Extension: pricealarm - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM [2014-01-02] FF Extension: ProxTube - Unblock YouTube - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\ich@maltegoetz.de [2013-12-12] FF Extension: Nokia Maps 3D browser plugin - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\maps@ovi.com [2012-09-02] FF Extension: No Name - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\staged [2014-05-21] FF Extension: LastPass - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\support@lastpass.com [2014-03-24] FF Extension: DivX Browser Bar DE - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\{6dad39c6-f4ac-4984-8e9b-f666269b9eb1} [2014-05-05] FF Extension: SaveAs - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\5032a6c925cac@5032a6c925ce5.info.xpi [2012-08-20] FF Extension: Personas Plus - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\personas@christopher.beard.xpi [2012-08-01] FF Extension: Stealthy - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\stealthyextension@gmail.com.xpi [2012-12-19] FF Extension: FlashGot - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi [2014-03-13] FF Extension: {799fe388-8c3f-4d0b-b490-c748f2dcd714} - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\{799fe388-8c3f-4d0b-b490-c748f2dcd714}.xpi [2014-01-08] FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-21] FF Extension: PDF Print Converter Light - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\{bf87ed13-b668-4984-b4d3-4d0b1cb35e33}.xpi [2014-01-09] FF Extension: Adblock Plus - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-08-01] ========================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440400 2014-03-13] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440400 2014-03-13] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1017424 2014-03-13] (Avira Operations GmbH & Co. KG) R2 Autodesk Content Service; C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe [12288 2012-12-13] (Autodesk, Inc.) R2 EPSON_EB_RPCV4_04; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50ST7.EXE [153600 2009-09-14] (SEIKO EPSON CORPORATION) R2 EPSON_PM_RPCV4_04; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RP7.EXE [121856 2009-09-14] (SEIKO EPSON CORPORATION) S4 Fabs; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG) S4 FirebirdServerMAGIXInstance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) S3 FlexNet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [1064312 2014-02-06] (Flexera Software LLC) R2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation) R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [762192 2013-07-18] (Nero AG) R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14658848 2013-12-10] (NVIDIA Corporation) R2 OODefragAgent; C:\Program Files\OO Software\Defrag\oodag.exe [1387304 2014-01-24] (O&O Software GmbH) S4 SamsungAllShareV2.0; C:\Program Files\Samsung\AllShare\AllShareDMS\AllShareDMS.exe [25504 2012-03-02] (Samsung Electronics Co., Ltd.) S4 SimpleSlideShowServer; C:\Program Files\Samsung\AllShare\AllShareSlideShowService.exe [27584 2012-03-02] (Samsung Electronics Co., Ltd.) R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [1731896 2014-01-28] (TuneUp Software) R2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2012-01-18] (Logitech Inc.) S4 vToolbarUpdater18.1.0; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\ToolbarUpdater.exe [1801240 2014-04-28] (AVG Secure Search) ==================== Drivers (Whitelisted) ==================== R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [121248 2012-08-26] (SlySoft, Inc.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-18] (Avira Operations GmbH & Co. KG) R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [42272 2014-04-28] (AVG Technologies) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-18] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-09-30] (Avira Operations GmbH & Co. KG) S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [4352 2010-10-22] (AVM Berlin) R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [69240 2013-12-18] (Avira Operations GmbH & Co. KG) S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [22528 2009-08-13] (CSR, plc) R3 cmuda3; C:\Windows\System32\drivers\cmuda3.sys [1482048 2007-04-26] (C-Media Inc) S3 CompFilter; C:\Windows\System32\DRIVERS\lvbusflt.sys [22176 2012-01-18] (Logitech Inc.) S3 DFUBTUSB; C:\Windows\System32\Drivers\frmupgr.sys [27536 2007-01-03] (Broadcom Corporation.) R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [34760 2007-02-16] (SlySoft, Inc.) R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [31088 2010-12-17] (Elaborate Bytes AG) S3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2013-02-05] () S3 fwlanusbn; C:\Windows\System32\DRIVERS\fwlanusbn.sys [586752 2010-10-22] (AVM GmbH) R1 MagicTune; C:\Windows\system32\drivers\MTiCtwl.sys [14336 2010-04-22] (Samsung Electronics, Inc. ) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-04-03] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [107736 2014-05-21] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51416 2014-04-03] (Malwarebytes Corporation) R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [6504 2009-05-13] () R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [34080 2013-12-05] (NVIDIA Corporation) R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-09-30] (Avira GmbH) R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [10088 2012-11-16] (TuneUp Software) S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X] S3 tsusbhub; system32\drivers\tsusbhub.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-05-21 22:25 - 2014-05-21 22:27 - 00038330 _____ () C:\Users\Pascal\Downloads\Addition.txt 2014-05-21 22:24 - 2014-05-21 22:27 - 00022676 _____ () C:\Users\Pascal\Downloads\FRST.txt 2014-05-21 22:22 - 2014-05-21 22:27 - 00000000 ____D () C:\FRST 2014-05-21 22:20 - 2014-05-21 22:21 - 01056768 _____ (Farbar) C:\Users\Pascal\Downloads\FRST.exe 2014-05-21 22:03 - 2014-05-21 22:03 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{B3919DC4-5283-4A2C-8573-4C917059BE20} 2014-05-20 19:38 - 2014-05-20 19:38 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{1526393C-662C-4559-85AF-1A252E171405} 2014-05-20 19:25 - 2014-05-21 18:48 - 00000336 _____ () C:\Windows\setupact.log 2014-05-20 19:25 - 2014-05-20 19:25 - 00000000 _____ () C:\Windows\setuperr.log 2014-05-20 19:24 - 2014-05-21 18:48 - 00001512 _____ () C:\Windows\PFRO.log 2014-05-18 23:19 - 2014-05-18 23:55 - 110100480 _____ () C:\Users\Pascal\Downloads\h4v3fun-r0ll3rb0y5-xv1d.part01.rar 2014-05-18 23:15 - 2014-05-18 23:15 - 00002456 _____ () C:\Users\Pascal\Downloads\2db390e102eaf98cf59033618e1ae139.dlc 2014-05-18 22:21 - 2014-05-18 22:21 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{98638811-E171-4D0C-A51C-072CF5517DDE} 2014-05-18 22:08 - 2014-05-19 20:43 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\1&1 2014-05-18 22:08 - 2014-05-18 22:08 - 00000000 ____D () C:\Users\Pascal\AppData\Local\1&1 2014-05-18 22:05 - 2014-05-18 22:05 - 16746208 _____ (1&1 Internet AG) C:\Users\Pascal\Downloads\1und1_multimessenger_setup.exe 2014-05-16 18:25 - 2014-05-16 18:26 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{3B5807A1-4191-495A-A879-1CD27CE3B894} 2014-05-15 18:43 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll 2014-05-15 18:41 - 2014-05-15 18:46 - 00000000 ____D () C:\AdwCleaner 2014-05-15 18:40 - 2014-05-15 18:40 - 01325827 _____ () C:\Users\Pascal\Downloads\adwcleaner_3.208.exe 2014-05-15 17:30 - 2014-05-15 17:30 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{199A5393-E899-4070-BD5A-22B640CA4D83} 2014-05-12 21:06 - 2014-05-12 21:06 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{749199E8-2336-42EC-A2D1-F1E134FA2128} 2014-05-11 23:23 - 2014-05-11 23:23 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{DE2AFFE4-6A9D-4F5D-A086-0CFA261F9E23} 2014-05-09 13:46 - 2014-05-09 13:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID 2014-05-09 13:46 - 2014-05-09 13:46 - 00000000 ____D () C:\Program Files\CPUID 2014-05-09 13:44 - 2014-05-09 13:44 - 01496480 _____ ( ) C:\Users\Pascal\Downloads\cpu-z_1.692-setup-en.exe 2014-05-07 23:51 - 2014-05-07 23:51 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{8F78B5A7-F8DB-40D4-AC47-186A91DF03E0} 2014-05-06 20:22 - 2014-05-06 20:22 - 00402696 _____ () C:\Users\Pascal\Downloads\setup.exe 2014-05-06 19:36 - 2014-05-06 19:36 - 00000000 ____D () C:\ProgramData\Curse Client 2014-05-05 22:25 - 2014-05-19 22:08 - 00000625 _____ () C:\Users\Pascal\Documents\Uninstall STAR WARS The Old Republic.log 2014-05-05 19:30 - 2014-05-05 19:31 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{C2E3727A-DD16-46F4-AB3B-AC026AA91777} 2014-04-30 17:26 - 2014-04-30 17:26 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{1C28FBBF-9B26-4E95-9BC9-F04687C738D0} 2014-04-29 22:48 - 2014-04-29 22:48 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{48019A28-725D-4D32-B79B-82E5019D413B} 2014-04-29 19:19 - 2014-04-29 19:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer 2014-04-29 18:57 - 2014-04-29 18:57 - 01064736 _____ (Microsoft Corporation) C:\Users\Pascal\Downloads\VB6.0-KB290887-X86.exe 2014-04-29 18:56 - 2014-04-29 18:59 - 01064736 _____ (Microsoft Corporation) C:\Users\Pascal\Downloads\VB6.0-KB290887-X86(1).exe 2014-04-28 23:17 - 2014-04-28 23:18 - 00000000 ____D () C:\ProgramData\AVG Secure Search 2014-04-28 19:25 - 2014-05-21 21:12 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-04-28 19:24 - 2014-04-28 19:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-04-28 19:23 - 2014-04-28 19:24 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 2014-04-28 19:23 - 2014-04-03 09:51 - 00073432 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-04-28 19:23 - 2014-04-03 09:51 - 00051416 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-04-24 18:04 - 2014-04-24 18:04 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{36F2A2E4-850E-4139-A114-871D6C4EF407} 2014-04-22 17:21 - 2014-04-22 17:22 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{90F12593-C6A2-4D83-88D1-07CA9D42830E} 2014-04-21 22:09 - 2014-04-21 22:09 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{A84371FE-1718-4165-A9C3-D4A2682E41FA} ==================== One Month Modified Files and Folders ======= 2014-05-21 22:27 - 2014-05-21 22:25 - 00038330 _____ () C:\Users\Pascal\Downloads\Addition.txt 2014-05-21 22:27 - 2014-05-21 22:24 - 00022676 _____ () C:\Users\Pascal\Downloads\FRST.txt 2014-05-21 22:27 - 2014-05-21 22:22 - 00000000 ____D () C:\FRST 2014-05-21 22:25 - 2012-08-17 09:41 - 00000000 ____D () C:\Users\Pascal\AppData\Local\CrashDumps 2014-05-21 22:21 - 2014-05-21 22:20 - 01056768 _____ (Farbar) C:\Users\Pascal\Downloads\FRST.exe 2014-05-21 22:03 - 2014-05-21 22:03 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{B3919DC4-5283-4A2C-8573-4C917059BE20} 2014-05-21 21:48 - 2012-08-01 21:53 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-05-21 21:43 - 2012-08-02 23:34 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\Azureus 2014-05-21 21:20 - 2012-07-31 23:35 - 02084416 _____ () C:\Windows\WindowsUpdate.log 2014-05-21 21:12 - 2014-04-28 19:25 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-05-21 19:03 - 2009-07-14 06:34 - 00016944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-05-21 19:03 - 2009-07-14 06:34 - 00016944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-05-21 18:48 - 2014-05-20 19:25 - 00000336 _____ () C:\Windows\setupact.log 2014-05-21 18:48 - 2014-05-20 19:24 - 00001512 _____ () C:\Windows\PFRO.log 2014-05-21 18:48 - 2012-08-01 00:47 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-05-21 18:48 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-05-20 22:58 - 2013-08-10 17:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Tanks 2014-05-20 22:58 - 2013-01-23 23:21 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Movie2KDownloader.com 2014-05-20 19:38 - 2014-05-20 19:38 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{1526393C-662C-4559-85AF-1A252E171405} 2014-05-20 19:25 - 2014-05-20 19:25 - 00000000 _____ () C:\Windows\setuperr.log 2014-05-19 22:09 - 2012-08-01 00:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue 2014-05-19 22:09 - 2012-08-01 00:24 - 00000000 ____D () C:\Program Files\Uniblue 2014-05-19 22:08 - 2014-05-05 22:25 - 00000625 _____ () C:\Users\Pascal\Documents\Uninstall STAR WARS The Old Republic.log 2014-05-19 22:05 - 2014-04-14 19:18 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\elsterformular 2014-05-19 22:05 - 2014-04-14 19:15 - 00000000 ____D () C:\ProgramData\elsterformular 2014-05-19 21:05 - 2012-08-01 23:55 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\Nero 2014-05-19 20:43 - 2014-05-18 22:08 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\1&1 2014-05-19 20:34 - 2013-06-02 21:51 - 00000000 ____D () C:\Windows\Minidump 2014-05-19 20:34 - 2010-09-14 21:40 - 00000000 ____D () C:\Windows\Panther 2014-05-19 20:18 - 2013-11-06 23:09 - 00000000 ____D () C:\Users\Pascal\AppData\Local\Battle.net 2014-05-19 19:04 - 2012-08-07 19:25 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk 2014-05-19 17:51 - 2012-08-01 00:22 - 00000324 _____ () C:\Windows\Tasks\WindowsUpdate.job 2014-05-18 23:55 - 2014-05-18 23:19 - 110100480 _____ () C:\Users\Pascal\Downloads\h4v3fun-r0ll3rb0y5-xv1d.part01.rar 2014-05-18 23:34 - 2012-08-02 23:22 - 00000000 ____D () C:\Program Files\CCleaner 2014-05-18 23:15 - 2014-05-18 23:15 - 00002456 _____ () C:\Users\Pascal\Downloads\2db390e102eaf98cf59033618e1ae139.dlc 2014-05-18 22:21 - 2014-05-18 22:21 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{98638811-E171-4D0C-A51C-072CF5517DDE} 2014-05-18 22:08 - 2014-05-18 22:08 - 00000000 ____D () C:\Users\Pascal\AppData\Local\1&1 2014-05-18 22:05 - 2014-05-18 22:05 - 16746208 _____ (1&1 Internet AG) C:\Users\Pascal\Downloads\1und1_multimessenger_setup.exe 2014-05-16 18:26 - 2014-05-16 18:25 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{3B5807A1-4191-495A-A879-1CD27CE3B894} 2014-05-15 19:49 - 2012-08-01 21:53 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2014-05-15 19:49 - 2012-08-01 21:53 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2014-05-15 18:46 - 2014-05-15 18:41 - 00000000 ____D () C:\AdwCleaner 2014-05-15 18:42 - 2012-08-14 22:14 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\BrowserCompanion 2014-05-15 18:40 - 2014-05-15 18:40 - 01325827 _____ () C:\Users\Pascal\Downloads\adwcleaner_3.208.exe 2014-05-15 17:30 - 2014-05-15 17:30 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{199A5393-E899-4070-BD5A-22B640CA4D83} 2014-05-14 19:39 - 2013-12-06 00:37 - 00000000 ____D () C:\Program Files\Hearthstone 2014-05-13 17:22 - 2012-08-17 10:37 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-05-12 23:10 - 2014-03-31 18:59 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-05-12 21:06 - 2014-05-12 21:06 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{749199E8-2336-42EC-A2D1-F1E134FA2128} 2014-05-11 23:23 - 2014-05-11 23:23 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{DE2AFFE4-6A9D-4F5D-A086-0CFA261F9E23} 2014-05-09 16:05 - 2012-09-03 23:34 - 00000000 ____D () C:\Users\Pascal\AppData\Local\Deployment 2014-05-09 13:46 - 2014-05-09 13:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID 2014-05-09 13:46 - 2014-05-09 13:46 - 00000000 ____D () C:\Program Files\CPUID 2014-05-09 13:44 - 2014-05-09 13:44 - 01496480 _____ ( ) C:\Users\Pascal\Downloads\cpu-z_1.692-setup-en.exe 2014-05-07 23:51 - 2014-05-07 23:51 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{8F78B5A7-F8DB-40D4-AC47-186A91DF03E0} 2014-05-07 18:05 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\registration 2014-05-06 21:30 - 2013-05-07 12:33 - 00000000 ____D () C:\Users\Gast 2014-05-06 20:22 - 2014-05-06 20:22 - 00402696 _____ () C:\Users\Pascal\Downloads\setup.exe 2014-05-06 19:36 - 2014-05-06 19:36 - 00000000 ____D () C:\ProgramData\Curse Client 2014-05-06 18:59 - 2012-08-01 00:08 - 00146320 _____ () C:\Users\Pascal\AppData\Local\GDIPFONTCACHEV1.DAT 2014-05-06 18:58 - 2009-07-14 06:33 - 00492128 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-05-06 00:01 - 2012-08-05 22:30 - 00000000 ____D () C:\Program Files\TeamViewer 2014-05-05 23:59 - 2014-03-13 02:47 - 00000000 ____D () C:\Program Files\Easeware 2014-05-05 23:33 - 2012-08-02 23:33 - 00000000 ____D () C:\Users\Pascal\AppData\Local\Conduit 2014-05-05 23:30 - 2013-07-10 12:47 - 00982016 ___SH () C:\Users\Pascal\Documents\Thumbs.db 2014-05-05 22:31 - 2010-09-14 20:52 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-05-05 22:24 - 2009-07-14 06:52 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2014-05-05 22:23 - 2013-12-25 02:41 - 00000000 ____D () C:\Users\Pascal\Documents\NeroVideo 2014-05-05 19:31 - 2014-05-05 19:30 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{C2E3727A-DD16-46F4-AB3B-AC026AA91777} 2014-05-05 19:31 - 2012-08-01 22:22 - 00000000 ____D () C:\Users\Pascal\AppData\Local\Windows Live Writer 2014-05-04 21:51 - 2013-11-06 23:09 - 00000000 ____D () C:\Program Files\Battle.net 2014-04-30 17:26 - 2014-04-30 17:26 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{1C28FBBF-9B26-4E95-9BC9-F04687C738D0} 2014-04-29 22:48 - 2014-04-29 22:48 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{48019A28-725D-4D32-B79B-82E5019D413B} 2014-04-29 19:19 - 2014-04-29 19:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer 2014-04-29 19:19 - 2014-03-13 12:16 - 00000000 ____D () C:\Program Files\MyPhoneExplorer 2014-04-29 18:59 - 2014-04-29 18:56 - 01064736 _____ (Microsoft Corporation) C:\Users\Pascal\Downloads\VB6.0-KB290887-X86(1).exe 2014-04-29 18:57 - 2014-04-29 18:57 - 01064736 _____ (Microsoft Corporation) C:\Users\Pascal\Downloads\VB6.0-KB290887-X86.exe 2014-04-29 18:41 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\Offline Web Pages 2014-04-28 23:18 - 2014-04-28 23:17 - 00000000 ____D () C:\ProgramData\AVG Secure Search 2014-04-28 23:18 - 2013-07-05 13:09 - 00003730 _____ () C:\Program Files\Mozilla Firefoxavg-secure-search.xml 2014-04-28 23:15 - 2012-11-26 22:38 - 00000000 ____D () C:\Program Files\AVG Secure Search 2014-04-28 23:14 - 2012-11-26 22:38 - 00042272 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx86.sys 2014-04-28 19:24 - 2014-04-28 19:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-04-28 19:24 - 2014-04-28 19:23 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 2014-04-28 19:24 - 2012-08-01 00:22 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\Malwarebytes 2014-04-28 19:23 - 2012-08-01 00:22 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-04-24 18:04 - 2014-04-24 18:04 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{36F2A2E4-850E-4139-A114-871D6C4EF407} 2014-04-22 18:56 - 2012-10-23 14:05 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\MediaMonkey 2014-04-22 17:22 - 2014-04-22 17:21 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{90F12593-C6A2-4D83-88D1-07CA9D42830E} 2014-04-21 22:09 - 2014-04-21 22:09 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{A84371FE-1718-4165-A9C3-D4A2682E41FA} Files to move or delete: ==================== C:\Users\Pascal\taskmgr.exe Some content of TEMP: ==================== C:\Users\Pascal\AppData\Local\Temp\avgnt.exe C:\Users\Pascal\AppData\Local\Temp\i4jdel0.exe C:\Users\Pascal\AppData\Local\Temp\SpotifyUninstall.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\system32\winlogon.exe => MD5 is legit C:\Windows\system32\wininit.exe => MD5 is legit C:\Windows\system32\svchost.exe => MD5 is legit C:\Windows\system32\services.exe => MD5 is legit C:\Windows\system32\User32.dll => MD5 is legit C:\Windows\system32\userinit.exe => MD5 is legit C:\Windows\system32\rpcss.dll => MD5 is legit C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-05-19 23:17 ==================== End Of Log ============================ Hier die Addition nochmal falls sie gebraucht wird: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version:21-05-2014 Ran by Pascal at 2014-05-21 22:28:07 Running from C:\Users\Pascal\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== Adobe Flash Player 13 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated) Adobe Flash Player 13 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated) Adobe Reader X (10.1.10) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.10 - Adobe Systems Incorporated) AMD Catalyst Install Manager (HKLM\...\{00E410EB-8542-5527-9FC9-4C44DF3B7E79}) (Version: 8.0.903.0 - Advanced Micro Devices, Inc.) AMD Processor Driver (HKLM\...\{C151CE54-E7EA-4804-854B-F515368B0798}) (Version: 1.3.2.0053 - AMD) AnyDVD (HKLM\...\AnyDVD) (Version: 7.0.9.0 - SlySoft) Apple Application Support (HKLM\...\{A922C4B7-50E0-4787-A94C-59DBF3C65DBE}) (Version: 3.0 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{10E3A6DD-84D8-4D8A-BB11-5E5314BCA7FD}) (Version: 7.1.0.32 - Apple Inc.) Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ATI - Dienstprogramm zur Deinstallation der Software (HKLM\...\All ATI Software) (Version: 6.14.10.1016 - ) AutoCAD 2014 - English (Version: 19.1.18.0 - Autodesk) Hidden AutoCAD 2014 Language Pack - English (Version: 19.1.18.0 - Autodesk) Hidden Autodesk 360 (HKLM\...\{52B28CAD-F49D-47BA-9FFE-29C2E85F0D0B}) (Version: 4.0.27.1 - Autodesk) Autodesk App Manager (HKLM\...\{C070121A-C8C5-4D52-9A7D-D240631BD433}) (Version: 1.1.0 - Autodesk) Autodesk AutoCAD 2014 - English (HKLM\...\AutoCAD 2014 - English) (Version: 19.1.18.0 - Autodesk) Autodesk Content Service (HKLM\...\Autodesk Content Service) (Version: 3.1.3.0 - Autodesk) Autodesk Content Service (Version: 3.1.3.0 - Autodesk) Hidden Autodesk Content Service Language Pack (Version: 3.1.3.0 - Autodesk) Hidden Autodesk Featured Apps (HKLM\...\{F732FEDA-7713-4428-934B-EF83B8DD65D0}) (Version: 1.1.0 - Autodesk) Autodesk Material Library 2014 (HKLM\...\{644F9B19-A462-499C-BF4D-300ABC2A28B1}) (Version: 4.0.19.0 - Autodesk) Autodesk Material Library Base Resolution Image Library 2014 (HKLM\...\{51BF3210-B825-4092-8E0D-66D689916E02}) (Version: 4.0.19.0 - Autodesk) Autodesk ReCap (HKLM\...\Autodesk ReCap) (Version: 1.0.43.13 - Autodesk) Autodesk ReCap (Version: 1.0.43.13 - Autodesk) Hidden Autodesk ReCap Language Pack-English (Version: 1.0.43.13 - Autodesk) Hidden Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira) Battle.net (HKLM\...\Battle.net) (Version: - Blizzard Entertainment) CameraHelperMsi (Version: 13.50.854.0 - Logitech) Hidden CCleaner (HKLM\...\CCleaner) (Version: 4.09 - Piriform) CDDRV_Installer (Version: 4.60 - Logitech) Hidden CloneCD (HKLM\...\CloneCD) (Version: - SlySoft) CloneDVD2 (HKLM\...\CloneDVD2) (Version: 2.9.3.0 - Elaborate Bytes) C-Media PCI Audio (HKLM\...\C-Media PCI Sound) (Version: - ) Content Manager 2 (HKLM\...\Content Manager 2) (Version: 3.10.0.52790 - NNG Llc.) Corel PaintShop Pro X4 (HKLM\...\_{00580795-581C-4587-B9F2-37320D7AB37F}) (Version: 14.0.0.345 - Corel Corporation) Corel PaintShop Pro X4 (Version: 14.0.0.345 - Corel Corporation) Hidden Corel PaintShop Pro X5 (HKLM\...\_{1563C6F2-E9B5-42DE-9EA6-207C9A8C2DFB}) (Version: 15.0.0.183 - Corel Corporation) Corel PaintShop Pro X5 (Version: 15.0.0.183 - Corel Corporation) Hidden Corel PaintShop Pro X6 (HKLM\...\_{166D1CB6-DD8A-40DD-9E25-4D31D2D6DE4D}) (Version: 16.0.0.113 - Corel Corporation) Corel PaintShop Pro X6 (Version: 16.0.0.113 - Corel Corporation) Hidden CPUID CPU-Z 1.69.2 (HKLM\...\CPUID CPU-Z_is1) (Version: - ) Curse Client (HKCU\...\101a9f93b8f0bb6f) (Version: 5.1.1.792 - Curse) D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden DDBAC (HKLM\...\{8E1246B9-9F66-4303-BF11-212EC2672BBE}) (Version: 5.3.13 - DataDesign) DivX-Setup (HKLM\...\DivX Setup) (Version: 2.6.1.87 - DivX, LLC) DriverAgent by eSupport.com (HKLM\...\DriverAgent_is1) (Version: - Copyright © 2013 eSupport.com, Inc • All Rights Reserved) eMule (HKLM\...\eMule) (Version: - ) EPSON BX620FWD Series Handbuch (HKLM\...\EPSON BX620FWD Series Manual) (Version: - ) EPSON BX620FWD Series Netzwerk-Handbuch (HKLM\...\EPSON BX620FWD Series Network Guide) (Version: - ) EPSON BX620FWD Series Printer Uninstall (HKLM\...\EPSON BX620FWD Series) (Version: - SEIKO EPSON Corporation) Epson Easy Photo Print 2 (HKLM\...\{310C1558-F6B5-4889-98B0-7471966BA7F2}) (Version: 2.2.3.0 - SEIKO EPSON CORPORATION) Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION) Epson Event Manager (HKLM\...\{03B8AA32-F23C-4178-B8E6-09ECD07EAA47}) (Version: 2.40.0001 - SEIKO EPSON CORPORATION) Epson FAX Utility (HKLM\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 1.10.00 - SEIKO EPSON CORPORATION) Epson PC-FAX Driver (HKLM\...\EPSON PC-FAX Driver 2) (Version: - ) EPSON Scan (HKLM\...\EPSON Scanner) (Version: - Seiko Epson Corporation) EpsonNet Print (HKLM\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.4i - SEIKO EPSON CORPORATION) EpsonNet Setup 3.3 (HKLM\...\{C9D8A041-2963-4B31-8FFC-1500F3DB9293}) (Version: 3.3a - SEIKO EPSON CORPORATION) erLT (Version: 1.20.0137 - Logitech, Inc.) Hidden erLT (Version: 1.20.138.34 - Logitech, Inc.) Hidden FARO LS 1.1.501.0 (HKLM\...\{8F196892-666A-4A40-8587-6AE38F78A5C2}) (Version: 5.1.0.30630 - FARO Scanner Production) Firebird SQL Server - MAGIX Edition (HKLM\...\{39AB2E37-1A55-4292-A5D3-971E9F70D0F8}) (Version: 2.1.32.0 - MAGIX AG) Free Video to DVD Converter version 5.0.24.422 (HKLM\...\Free Video to DVD Converter_is1) (Version: 5.0.24.422 - DVDVideoSoft Ltd.) Free YouTube Download version 3.2.20.1230 (HKLM\...\Free YouTube Download_is1) (Version: 3.2.20.1230 - DVDVideoSoft Ltd.) Free YouTube to MP3 Converter version 3.12.20.1230 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.20.1230 - DVDVideoSoft Ltd.) GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden Hearthstone (HKLM\...\Hearthstone) (Version: - Blizzard Entertainment) ICA (Version: 14.0.0.345 - Corel Corporation) Hidden ICA (Version: 15.0.0.183 - Corel Corporation) Hidden ICA (Version: 16.0.0.113 - Corel Corporation) Hidden IPM_PSP_COM (Version: 14.0.0.345 - Corel Corporation) Hidden IPM_PSP_COM (Version: 15.0.0.183 - Corel Corporation) Hidden IPM_PSP_COM (Version: 16.0.0.113 - Corel Corporation) Hidden Java 7 Update 45 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.450 - Oracle) Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden JavaFX 2.1.1 (HKLM\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation) Junk Mail filter update (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden KhalInstallWrapper (Version: 2.00.0000 - Logitech) Hidden LastPass (nur deinstallieren) (HKLM\...\LastPass) (Version: - LastPass) Logitech SetPoint (HKLM\...\{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}) (Version: 4.80 - Logitech) Logitech Vid HD (HKLM\...\Logitech Vid) (Version: 7.2 (7259) - Logitech Inc..) Logitech Webcam-Software (HKLM\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.31 - Logitech Inc.) LWS Facebook (Version: 13.50.854.0 - Logitech) Hidden LWS Gallery (Version: 13.50.854.0 - Logitech) Hidden LWS Help_main (Version: 13.50.862.0 - Logitech) Hidden LWS Launcher (Version: 13.50.859.0 - Logitech) Hidden LWS Motion Detection (Version: 13.30.1395.0 - Logitech) Hidden LWS Pictures And Video (Version: 13.50.861.0 - Logitech) Hidden LWS Twitter (Version: 13.30.1346.0 - Logitech) Hidden LWS Video Mask Maker (Version: 13.30.1379.0 - Logitech) Hidden LWS VideoEffects (Version: 13.30.1379.0 - Logitech) Hidden LWS Webcam Software (Version: 13.31.1038.0 - Logitech) Hidden LWS WLM Plugin (Version: 1.30.1201.0 - Logitech) Hidden LWS YouTube Plugin (Version: 13.31.1038.0 - Logitech) Hidden MagicTune Premium (HKLM\...\{69F962F7-3761-4704-9E4B-24FF10F77111}) (Version: 4.0.12 - Samsung Electronics Co. Ltd.) MAGIX Fotos auf DVD 2014 Deluxe (HKLM\...\MX.{D7951A7D-D2B7-494B-BFA8-0EC07C00EBDC}) (Version: 13.0.2.87 - MAGIX AG) MAGIX Fotos auf DVD 2014 Deluxe (Version: 13.0.2.87 - MAGIX AG) Hidden MAGIX Speed burnR (MSI) (HKLM\...\MX.{294792A1-CA9A-459E-8F78-3C96FD3A3EC4}) (Version: 7.0.2.6 - MAGIX AG) MAGIX Speed burnR (MSI) (Version: 7.0.2.6 - MAGIX AG) Hidden Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation) MediaMonkey 4.0 (HKLM\...\MediaMonkey_is1) (Version: 4.0 - Ventis Media Inc.) Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden Microsoft Primary Interoperability Assemblies 2005 (HKLM\...\{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft_VC100_CRT_SP1_x86 (Version: 10.0.40219.1 - Nokia) Hidden Mozilla Firefox 29.0.1 (x86 de) (HKLM\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla) MSVC80_x86_v2 (Version: 1.0.3.0 - Nokia) Hidden MSVC90_x86 (Version: 1.0.1.2 - Nokia) Hidden MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) MyFreeCodec (HKCU\...\MyFreeCodec) (Version: - ) MyPhoneExplorer (HKLM\...\MPE) (Version: 1.8.5 - F.J. Wechselberger) Naviextras Toolbox Prerequesities (HKLM\...\{537575D6-3B96-474C-BD8F-DFF667363DBD}) (Version: 1.0.0 - Nav N Go Ltd.) Nero 2014 (HKLM\...\{F384C1E1-3A16-4073-95C3-7271FE0ED4C2}) (Version: 15.0.02200 - Nero AG) Nero 2014 Content Pack (HKLM\...\{204A26F0-01B8-4656-8607-5CCEDE820BC2}) (Version: 15.0.00200 - Nero AG) Nero Abstract Themes (Version: 12.0.11500 - Nero AG) Hidden Nero Audio Pack 1 (Version: 11.0.11500.110.0 - Nero AG) Hidden Nero Blu-ray Player (Version: 12.0.20031 - Nero AG) Hidden Nero Blu-ray Player Help (CHM) (Version: 15.0.00015 - Nero AG) Hidden Nero Burning Core (Version: 15.0.19000 - Nero AG) Hidden Nero Burning ROM (Version: 15.0.19000 - Nero AG) Hidden Nero Burning ROM Help (CHM) (Version: 15.0.00018 - Nero AG) Hidden Nero Cliparts (Version: 12.0.11500 - Nero AG) Hidden Nero ControlCenter (Version: 11.0.16700 - Nero AG) Hidden Nero ControlCenter Help (CHM) (Version: 15.0.00015 - Nero AG) Hidden Nero Core Components (Version: 11.0.22500 - Nero AG) Hidden Nero Disc Menus 1 (Version: 12.0.11500 - Nero AG) Hidden Nero Disc Menus 2 (Version: 12.0.11500 - Nero AG) Hidden Nero Disc Menus 3 (Version: 12.0.11500 - Nero AG) Hidden Nero Disc Menus Basic (Version: 12.0.11500 - Nero AG) Hidden Nero Disc to Device (Version: 15.0.12010 - Nero AG) Hidden Nero Effects Basic (Version: 15.0.10011 - Nero AG) Hidden Nero Express (Version: 15.0.19000 - Nero AG) Hidden Nero Express Help (CHM) (Version: 15.0.00018 - Nero AG) Hidden Nero Family and Events Themes (Version: 12.0.11500 - Nero AG) Hidden Nero Football (Soccer) Themes (Version: 12.0.11500 - Nero AG) Hidden Nero Holiday and Sports Themes (Version: 12.0.11500 - Nero AG) Hidden Nero Image Samples (Version: 15.0.10008 - Nero AG) Hidden Nero Info (Version: 15.1.0023 - Nero AG) Hidden Nero Kwik Themes Basic (Version: 12.0.11500 - Nero AG) Hidden Nero Launcher (Version: 15.0.8000 - Nero AG) Hidden Nero MediaHome (Version: 1.20.8200 - Nero AG) Hidden Nero MediaHome Help (CHM) (Version: 15.0.00018 - Nero AG) Hidden Nero PiP Effects 1 (Version: 12.0.11500 - Nero AG) Hidden Nero PiP Effects Basic (Version: 15.0.10008 - Nero AG) Hidden Nero Platinum Effects 12 (Version: 15.0.10011 - Nero AG) Hidden Nero Recode (Version: 15.0.14000 - Nero AG) Hidden Nero Recode Help (CHM) (Version: 15.0.00018 - Nero AG) Hidden Nero RescueAgent (Version: 15.0.2000 - Nero AG) Hidden Nero RescueAgent Help (CHM) (Version: 15.0.00015 - Nero AG) Hidden Nero Retro Film Themes (Version: 12.0.11700 - Nero AG) Hidden Nero SharedVideoCodecs (Version: 1.0.15003 - Nero AG) Hidden Nero Update (Version: 11.0.13300.42.0 - Nero AG) Hidden Nero Video (Version: 15.0.12000 - Nero AG) Hidden Nero Video Help (CHM) (Version: 15.0.00015 - Nero AG) Hidden Nero Video Samples (Version: 12.0.11500 - Nero AG) Hidden Nero Video Transitions 1 (Version: 12.0.11500 - Nero AG) Hidden Nokia Connectivity Cable Driver (HKLM\...\{6FE12C01-2FBC-42E2-AEB9-4CA2238C462F}) (Version: 7.1.101.0 - Nokia) Nokia Suite (HKLM\...\Nokia Suite) (Version: 3.7.22.0 - Nokia) Nokia Suite (Version: 3.7.22.0 - Nokia) Hidden NVIDIA 3D Vision Controller-Treiber 335.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 335.21 - NVIDIA Corporation) NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation) NVIDIA GeForce Experience 1.8.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.1 - NVIDIA Corporation) NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.147.1067 - NVIDIA Corporation) Hidden NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA PhysX (Version: 9.13.1220 - NVIDIA Corporation) Hidden NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation) NVIDIA ShadowPlay 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.3523 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden NVIDIA Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden NVIDIA Update Core (Version: 10.11.15 - NVIDIA Corporation) Hidden NVIDIA Virtual Audio 1.2.19 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.19 - NVIDIA Corporation) O&O Defrag Professional (HKLM\...\{9A111B78-51E3-48ED-B3CF-F76E004C2CA9}) (Version: 17.0.504 - O&O Software GmbH) OpenOffice.org 3.4 (HKLM\...\{4C552FD3-2CCD-4E00-AC64-0681DBB3F8B5}) (Version: 3.4.9590 - OpenOffice.org) PC Connectivity Solution (HKLM\...\{6B722793-E77B-41F5-BAB3-6C9832274E75}) (Version: 12.0.76.0 - Nokia) Prerequisite installer (Version: 15.0.0005 - Nero AG) Hidden PSPPContent (Version: 14.0.0.345 - Corel Corporation) Hidden PSPPContent (Version: 15.0.0.183 - Corel Corporation) Hidden PSPPContent (Version: 16.0.0.113 - Corel Corporation) Hidden PSPPHelp (Version: 14.0.0.345 - Corel Corporation) Hidden PSPPHelp (Version: 15.0.0.183 - Corel Corporation) Hidden PSPPHelp (Version: 16.0.0.113 - Corel Corporation) Hidden Ralink Wireless LAN (HKLM\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 1.00.0000 - RaLink) Samsung AllShare (HKLM\...\InstallShield_{DF47ACA3-7C78-4C08-8007-AC682563C9F1}) (Version: 2.1.0.12031_10 - Samsung Electronics Co., Ltd.) Samsung AllShare (Version: 2.1.0.12031_10 - Samsung Electronics Co., Ltd.) Hidden Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.5.1.12123_2 - Samsung Electronics Co., Ltd.) Samsung Kies (Version: 2.5.1.12123_2 - Samsung Electronics Co., Ltd.) Hidden Samsung Kies3 (HKLM\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14034.17 - Samsung Electronics Co., Ltd.) Samsung Kies3 (Version: 3.2.14034.17 - Samsung Electronics Co., Ltd.) Hidden SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.29.0 - SAMSUNG Electronics Co., Ltd.) Setup (Version: 14.0.0.345 - Ihr Firmenname) Hidden Setup (Version: 15.0.0.183 - Ihr Firmenname) Hidden Setup (Version: 16.0.0.113 - Ihr Firmenname) Hidden Shared Add-in Extensibility Update for Microsoft .NET Framework 2.0 (KB908002) (HKLM\...\{09959E11-AD5D-408E-96AF-E3346954D6B8}) (Version: 1.0.0 - Microsoft) Shared Add-in Support Update for Microsoft .NET Framework 2.0 (KB908002) (HKLM\...\{64F3B15C-24C7-4B2B-9B72-65CCBBD7F06B}) (Version: 1.0.0 - Microsoft) SHIELD Streaming (Version: 1.6.85 - NVIDIA Corporation) Hidden SketchUp Import for AutoCAD 2014 (HKLM\...\{644E9589-F73A-49A4-AC61-A953B9DE5669}) (Version: 1.1.0 - Autodesk) Star Wars: The Old Republic (HKLM\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.) StarCraft II (HKLM\...\StarCraft II) (Version: - Blizzard Entertainment) Steam (HKLM\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation) TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.13.1 - TeamSpeak Systems GmbH) TuneUp Utilities 2013 (HKLM\...\TuneUp Utilities 2013) (Version: 13.0.4000.245 - TuneUp Software) TuneUp Utilities 2013 (Version: 13.0.4000.245 - TuneUp Software) Hidden TuneUp Utilities 2013 13.0.2013.194 (HKLM\...\TuneUp Utilities 2013 13.0.2013.194) (Version: - ) TuneUp Utilities Language Pack (de-DE) (Version: 10.0.1000.47 - TuneUp Software) Hidden TuneUp Utilities Language Pack (de-DE) (Version: 12.0.3500.13 - TuneUp Software) Hidden TuneUp Utilities Language Pack (de-DE) (Version: 13.0.4000.245 - TuneUp Software) Hidden Uplay (HKLM\...\Uplay) (Version: 3.0 - Ubisoft) VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden VirtualCloneDrive (HKLM\...\VirtualCloneDrive) (Version: - Elaborate Bytes) VLC media player 2.1.0 (HKLM\...\VLC media player) (Version: 2.1.0 - VideoLAN) Vuze (HKLM\...\8461-7759-5462-8226) (Version: 5.2.0.0 - Azureus Software, Inc.) Winamp (HKLM\...\Winamp) (Version: 5.63 - Nullsoft, Inc) Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc) Windows Live Communications Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation) Windows Live Essentials (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotogalerie (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden Windows Live Installer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mail (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Movie Maker (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Common (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Gallery (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live PIMT Platform (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live SOXE (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Writer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Writer Resources (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Media Player Firefox Plugin (HKLM\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp) Windows Utils (HKLM\...\Windows Utils) (Version: - ) Windows-Treiberpaket - Nokia pccsmcfd “LegacyDriver” (05/31/2012 7.1.2.0) (HKLM\...\17D063A0A9F5D5A225B76B1D9BCB5ADBE85C8382) (Version: 05/31/2012 7.1.2.0 - Nokia) WinRAR 4.00 (32-bit) (HKLM\...\WinRAR archiver) (Version: 4.00.0 - win.rar GmbH) World of Warcraft (HKLM\...\World of Warcraft) (Version: - Blizzard Entertainment) Xilisoft Video Converter Ultimate (HKLM\...\Xilisoft Video Converter Ultimate) (Version: 7.7.3.20131014 - Xilisoft) XP Codec Pack (HKLM\...\XP Codec Pack) (Version: - ) YGOPro DevPro Version 1.9.2r2 (HKLM\...\{3CF2634F-3F38-4DD3-9201-CB2FE6B5FF23}_is1) (Version: 1.9.2r2 - YGOPro DevPro Online) ==================== Restore Points ========================= ==================== Hosts content: ========================== 2009-07-14 04:04 - 2012-09-02 22:41 - 00000864 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 validation.sls.microsoft.com ==================== Scheduled Tasks (whitelisted) ============= Task: {16D215CA-419C-4602-8AD3-A58D5AEDBC78} - System32\Tasks\{1C598B69-0DED-476D-A610-8DCF4E823F83} => E:\Setup.exe Task: {2799E072-9B31-4692-AD33-7AD098E9AB5A} - System32\Tasks\WindowsUpdate => Rundll32.exe C:\Windows\wupd.dll, xmlcreate Task: {5AB47F9B-9F25-4A0B-850F-A4A0F22C4E7D} - System32\Tasks\DivX-Online-Aktualisierungsprogramm => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2013-02-13] () Task: {5CCE5702-887E-43C8-800D-3633A19E580C} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files\TuneUp Utilities 2013\OneClick.exe [2014-01-28] (TuneUp Software) Task: {647E4BEB-321B-4C5D-B920-2A42EB30CD7A} - System32\Tasks\{826E6F22-6BEF-4E3F-9E6E-9D6411AE80C9} => G:\Crysis 3\Bin32\Crysis3.exe Task: {6A0C2E99-4F8A-4F46-8C1A-BB46D7F4DD4D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {A5112FBA-DEA6-425C-8F95-0702FD0A160A} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated) Task: {AB743BE2-4380-4CDE-A962-DA9C5F72C813} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: {CDCB5DC2-38B6-42DB-A248-58AD121EA492} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd) Task: {D964EF81-ADD5-4668-A81B-567640DD7D6E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-15] (Adobe Systems Incorporated) Task: {E74890E7-A596-4D04-A39D-CC7C930BF174} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\WindowsUpdate.job => C:\Windows\wupd.dll ==================== Loaded Modules (whitelisted) ============= 2012-08-01 00:47 - 2014-03-04 14:34 - 00109000 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll 2013-10-09 11:36 - 2013-09-30 11:01 - 00394824 _____ () C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll 2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2014-01-28 10:37 - 2014-01-28 10:37 - 00607032 _____ () C:\Program Files\TuneUp Utilities 2013\avgreplibx.dll 2012-08-01 00:02 - 2009-10-05 16:36 - 00036864 _____ () C:\Program Files\MagicTune Premium\GammaTray.exe 2012-12-25 03:38 - 2009-07-20 13:27 - 00017936 _____ () C:\Program Files\Logitech\SetPoint\khalwrapper.dll 2012-08-01 00:02 - 2011-01-04 09:30 - 00065024 _____ () C:\Program Files\MagicTune Premium\VESADll.dll 2012-08-01 00:02 - 2011-01-04 09:30 - 00064512 _____ () C:\Program Files\MagicTune Premium\IPROFILE.dll 2012-08-01 00:02 - 2011-01-04 09:31 - 00054272 _____ () C:\Program Files\MagicTune Premium\DPROFILE.dll 2012-08-01 00:02 - 2011-01-04 09:30 - 00056320 _____ () C:\Program Files\MagicTune Premium\EPROFILE.dll 2012-08-01 00:02 - 2011-01-04 09:30 - 00053248 _____ () C:\Program Files\MagicTune Premium\DEVICEINTERFACE.dll 2012-08-01 00:02 - 2011-01-04 09:31 - 00023552 _____ () C:\Program Files\MagicTune Premium\HzZone.dll 2012-08-01 00:02 - 2011-01-04 09:31 - 00023040 _____ () C:\Program Files\MagicTune Premium\Highlight.dll 2012-08-01 00:02 - 2011-01-04 09:31 - 00052224 _____ () C:\Program Files\MagicTune Premium\MTResGer.dll 2014-03-31 18:59 - 2014-05-12 23:10 - 03839088 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll 2014-03-21 11:01 - 2014-03-21 11:01 - 01020928 _____ () C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\extensions\support@lastpass.com\platform\WINNT_x86-msvc\components\lpxpcom.dll 2013-08-21 15:58 - 2013-08-21 15:58 - 00245072 _____ () C:\Program Files\Nero\Nero 2014\Nero Vision\DotNetProxy.dll 2013-06-05 12:45 - 2013-06-05 12:45 - 00071504 _____ () C:\Program Files\Nero\Nero 2014\Nero Vision\Nero3D\zlib1.dll 2013-06-05 12:45 - 2013-06-05 12:45 - 00091984 _____ () C:\Program Files\Nero\Nero 2014\Nero Vision\Nero3D\lib3ds-1.3.dll 2013-08-21 15:59 - 2013-08-21 15:59 - 00858008 _____ () C:\Program Files\Nero\Nero 2014\Nero Vision\System.Data.SQLite.dll 2012-08-01 00:17 - 2011-03-02 12:40 - 00140288 _____ () C:\Program Files\WinRAR\rarext.dll 2014-01-14 12:26 - 2013-12-10 04:15 - 00081184 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\gamecaster32.dll 2014-01-14 12:26 - 2013-12-10 04:15 - 00758048 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\twitchsdk32.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== EXE Association (whitelisted) ============= ==================== Disabled items from MSCONFIG ============== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (05/21/2014 10:25:11 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: NvBackend.exe, Version: 10.11.15.0, Zeitstempel: 0x52a6776c Name des fehlerhaften Moduls: nvspcap.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x52a67618 Ausnahmecode: 0xc0000005 Fehleroffset: 0x100077e2 ID des fehlerhaften Prozesses: 0x17c8 Startzeit der fehlerhaften Anwendung: 0xNvBackend.exe0 Pfad der fehlerhaften Anwendung: NvBackend.exe1 Pfad des fehlerhaften Moduls: NvBackend.exe2 Berichtskennung: NvBackend.exe3 Error: (05/21/2014 10:24:44 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: NvBackend.exe, Version: 10.11.15.0, Zeitstempel: 0x52a6776c Name des fehlerhaften Moduls: nvspcap.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x52a67618 Ausnahmecode: 0xc0000005 Fehleroffset: 0x100be510 ID des fehlerhaften Prozesses: 0x17c8 Startzeit der fehlerhaften Anwendung: 0xNvBackend.exe0 Pfad der fehlerhaften Anwendung: NvBackend.exe1 Pfad des fehlerhaften Moduls: NvBackend.exe2 Berichtskennung: NvBackend.exe3 Error: (05/21/2014 09:25:01 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: NvBackend.exe, Version: 10.11.15.0, Zeitstempel: 0x52a6776c Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f Ausnahmecode: 0xc0000005 Fehleroffset: 0x00033a96 ID des fehlerhaften Prozesses: 0xd98 Startzeit der fehlerhaften Anwendung: 0xNvBackend.exe0 Pfad der fehlerhaften Anwendung: NvBackend.exe1 Pfad des fehlerhaften Moduls: NvBackend.exe2 Berichtskennung: NvBackend.exe3 Error: (05/21/2014 09:24:34 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: NvBackend.exe, Version: 10.11.15.0, Zeitstempel: 0x52a6776c Name des fehlerhaften Moduls: nvspcap.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x52a67618 Ausnahmecode: 0xc0000005 Fehleroffset: 0x100be510 ID des fehlerhaften Prozesses: 0xd98 Startzeit der fehlerhaften Anwendung: 0xNvBackend.exe0 Pfad der fehlerhaften Anwendung: NvBackend.exe1 Pfad des fehlerhaften Moduls: NvBackend.exe2 Berichtskennung: NvBackend.exe3 Error: (05/21/2014 08:15:37 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: OneClick.exe, Version: 13.0.4000.245, Zeitstempel: 0x52e76b11 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea91c Ausnahmecode: 0xc0000005 Fehleroffset: 0x00052ca9 ID des fehlerhaften Prozesses: 0x16b0 Startzeit der fehlerhaften Anwendung: 0xOneClick.exe0 Pfad der fehlerhaften Anwendung: OneClick.exe1 Pfad des fehlerhaften Moduls: OneClick.exe2 Berichtskennung: OneClick.exe3 Error: (05/21/2014 08:03:40 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: OneClick.exe, Version: 13.0.4000.245, Zeitstempel: 0x52e76b11 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea91c Ausnahmecode: 0xc0000005 Fehleroffset: 0x00052ca9 ID des fehlerhaften Prozesses: 0x464 Startzeit der fehlerhaften Anwendung: 0xOneClick.exe0 Pfad der fehlerhaften Anwendung: OneClick.exe1 Pfad des fehlerhaften Moduls: OneClick.exe2 Berichtskennung: OneClick.exe3 Error: (05/21/2014 06:48:47 PM) (Source: NvStreamSvc) (EventID: 1) (User: ) Description: NvStreamSvcNvVAD initialization failed [6] Error: (05/21/2014 06:48:47 PM) (Source: NvStreamSvc) (EventID: 1) (User: ) Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0] Error: (05/21/2014 06:48:47 PM) (Source: NvStreamSvc) (EventID: 1) (User: ) Description: NvStreamSvcNvVAD endpoint registration failed [0] Error: (05/20/2014 07:25:05 PM) (Source: NvStreamSvc) (EventID: 1) (User: ) Description: NvStreamSvcNvVAD initialization failed [6] System errors: ============= Error: (05/21/2014 06:48:42 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Das System wurde zuvor am 21.05.2014 um 00:02:50 unerwartet heruntergefahren. Error: (05/20/2014 09:14:29 PM) (Source: volsnap) (EventID: 36) (User: ) Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte. Error: (05/15/2014 05:23:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Avira Browser-Schutz" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (05/15/2014 05:23:07 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Browser-Schutz erreicht. Error: (05/15/2014 05:21:22 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Das System wurde zuvor am 15.05.2014 um 01:50:34 unerwartet heruntergefahren. Error: (05/14/2014 06:29:58 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Avira Browser-Schutz" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (05/14/2014 06:29:58 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Browser-Schutz erreicht. Error: (05/13/2014 05:25:56 PM) (Source: Disk) (EventID: 11) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden. Error: (05/13/2014 05:25:54 PM) (Source: Disk) (EventID: 11) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden. Error: (05/13/2014 05:25:54 PM) (Source: Disk) (EventID: 11) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden. Microsoft Office Sessions: ========================= Error: (05/21/2014 10:25:11 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: NvBackend.exe10.11.15.052a6776cnvspcap.dll_unloaded0.0.0.052a67618c0000005100077e217c801cf75326f01538dC:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exenvspcap.dll016bacfc-e126-11e3-9e3f-001e8c836755 Error: (05/21/2014 10:24:44 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: NvBackend.exe10.11.15.052a6776cnvspcap.dll_unloaded0.0.0.052a67618c0000005100be51017c801cf75326f01538dC:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exenvspcap.dllf19a5f32-e125-11e3-9e3f-001e8c836755 Error: (05/21/2014 09:25:01 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: NvBackend.exe10.11.15.052a6776cole32.dll6.1.7601.175144ce7b96fc000000500033a96d9801cf7515ebe231d7C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exeC:\Windows\system32\ole32.dll99c99485-e11d-11e3-9e3f-001e8c836755 Error: (05/21/2014 09:24:34 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: NvBackend.exe10.11.15.052a6776cnvspcap.dll_unloaded0.0.0.052a67618c0000005100be510d9801cf7515ebe231d7C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exenvspcap.dll89a5b8b5-e11d-11e3-9e3f-001e8c836755 Error: (05/21/2014 08:15:37 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: OneClick.exe13.0.4000.24552e76b11ntdll.dll6.1.7601.18247521ea91cc000000500052ca916b001cf751fa09fa37cC:\Program Files\TuneUp Utilities 2013\OneClick.exeC:\Windows\SYSTEM32\ntdll.dlle7e1353a-e113-11e3-9e3f-001e8c836755 Error: (05/21/2014 08:03:40 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: OneClick.exe13.0.4000.24552e76b11ntdll.dll6.1.7601.18247521ea91cc000000500052ca946401cf751d843911f2C:\Program Files\TuneUp Utilities 2013\OneClick.exeC:\Windows\SYSTEM32\ntdll.dll3c86215e-e112-11e3-9e3f-001e8c836755 Error: (05/21/2014 06:48:47 PM) (Source: NvStreamSvc) (EventID: 1) (User: ) Description: NvStreamSvcNvVAD initialization failed [6] Error: (05/21/2014 06:48:47 PM) (Source: NvStreamSvc) (EventID: 1) (User: ) Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0] Error: (05/21/2014 06:48:47 PM) (Source: NvStreamSvc) (EventID: 1) (User: ) Description: NvStreamSvcNvVAD endpoint registration failed [0] Error: (05/20/2014 07:25:05 PM) (Source: NvStreamSvc) (EventID: 1) (User: ) Description: NvStreamSvcNvVAD initialization failed [6] ==================== Memory info =========================== Percentage of memory in use: 78% Total physical RAM: 3070.49 MB Available physical RAM: 664.21 MB Total Pagefile: 6139.27 MB Available Pagefile: 3217.13 MB Total Virtual: 2047.88 MB Available Virtual: 1883.67 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:149.05 GB) (Free:69.33 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: (Volume) (Fixed) (Total:186.31 GB) (Free:39.79 GB) NTFS Drive g: (My Book) (Fixed) (Total:931.51 GB) (Free:196.8 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149 GB) (Disk ID: 2AE0CD32) Partition 1: (Active) - (Size=149 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows XP) (Size: 186 GB) (Disk ID: 08D39400) Partition 1: (Not Active) - (Size=186 GB) - (Type=07 NTFS) ======================================================== Disk: 2 (Size: 932 GB) (Disk ID: E8900690) Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS) ==================== End Of Log ============================ Geändert von Ironforge (21.05.2014 um 22:12 Uhr) |
Themen zu Mail Delivery Service seit mehr als 1 Monat wie bekomme ich das Problem aus der Welt |
amazon-icon, association, bat/trojandownloader.ftp.nnp, browser, conduit.search, conduit.search entfernen, converter, cpu-z, dvdvideosoft ltd., email, explorer, homepage, install.exe, mp3, nvbackend, problem gelöst, pup.optional.conduit.a, reg/runkeys.nai, secure search, services.exe, svchost.exe, vtoolbarupdater, win32/adware.adon, win32/adware.multiplug.h, win32/conduit.searchprotect.a, win32/conduit.searchprotect.n, win32/pricegong.a, win32/toolbar.conduit.b, win32/toolbar.conduit.p, win32/toolbar.conduit.w, win32/toolbar.conduit.x, win64/toolbar.conduit.a, windows |