Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Mail Delivery Service seit mehr als 1 Monat wie bekomme ich das Problem aus der Welt

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

 
Alt 21.05.2014, 22:05   #1
Ironforge
 
Mail Delivery Service seit mehr als 1 Monat wie bekomme ich das Problem aus der Welt - Standard

Mail Delivery Service seit mehr als 1 Monat wie bekomme ich das Problem aus der Welt



Guten Abend,

Ich hoffe ihr könnt mir helfen. Ich bekomme seit mehr als 1. Monat jeden Tag locker 50 Mails mit dem Inhalt Mail Delivery Service und ich weiß partu nicht wie ich das Problem gelöst bekommen tue habe mein Antivir laufen lassen doch keine Infektion oder funde auch habe ich die Passwörter meiner Email Konten schon geändert wegen verdacht eines Email Hacks doch jetzt seit ihr gefragt und ich hoffe ihr könnt mir helfen habe hier ein log File von FRS Tool doch daraus werde ich nicht schlau:
FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:21-05-2014
Ran by Pascal (administrator) on PASCAL-PC on 21-05-2014 22:27:38
Running from C:\Users\Pascal\Downloads
Platform: Microsoft Windows 7 Enterprise  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Logitech, Inc.) C:\Program Files\Common Files\logishrd\Bluetooth\LBTServ.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Autodesk, Inc.) C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50ST7.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RP7.EXE
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(O&O Software GmbH) C:\Program Files\OO Software\Defrag\oodag.exe
(Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe
(Elaborate Bytes AG) C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Logitech Inc.) C:\Program Files\Logitech\SetPoint\LBTWiz.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files\MagicTune Premium\GammaTray.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPoint\SetPoint.exe
(Ralink Technology, Corp.) C:\Program Files\RALINK\Common\RaUI.exe
(RPworld.de) C:\Users\Pascal\Downloads\FritzBox_Tray_Tool_1.2\FritzBox_Tray_Tool.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Logitech, Inc.) C:\Program Files\Common Files\logishrd\KHAL2\KHALMNPR.exe
(SEC) C:\Program Files\MagicTune Premium\MagicTune.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Nero AG) C:\Program Files\Nero\Nero 2014\Nero Vision\NeroVision.exe
(Nero AG) C:\Program Files\Nero\Nero 2014\Nero Vision\NeroBurnServer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [MagicTuneLauncher] => C:\Program Files\MagicTune Premium\MagicTuneLauncher.exe [51712 2011-01-04] ()
HKLM\...\Run: [VirtualCloneDrive] => C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [85160 2009-06-17] (Elaborate Bytes AG)
HKLM\...\Run: [FUFAXSTM] => C:\Program Files\Epson Software\FAX Utility\FUFAXSTM.exe [847872 2009-12-03] (SEIKO EPSON CORPORATION)
HKLM\...\Run: [EEventManager] => C:\Program Files\Epson Software\Event Manager\EEventManager.exe [976320 2009-12-03] (SEIKO EPSON CORPORATION)
HKLM\...\Run: [OODefragTray] => C:\Program Files\OO Software\Defrag\oodtray.exe [3257640 2014-01-24] (O&O Software GmbH)
HKLM\...\Run: [Kernel and Hardware Abstraction Layer] => C:\Windows\KHALMNPR.EXE [55824 2009-06-17] (Logitech, Inc.)
HKLM\...\Run: [Bluetooth Connection Assistant] => LBTWIZ.EXE -silent
HKLM\...\Run: [KiesTrayAgent] => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311152 2013-12-11] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [Nvtmru] => C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-08] (NVIDIA Corporation)
HKLM\...\Run: [AllShareAgent] => C:\Program Files\Samsung\AllShare\AllShareAgent.exe [285072 2012-03-01] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [689744 2014-03-13] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap.dll [982232 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-01-20] (Apple Inc.)
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKU\.DEFAULT\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [894344 2013-02-05] (Autodesk, Inc.)
HKU\S-1-5-21-2929401604-168723178-134223584-1000\...\Run: [KiesAirMessage] => C:\Program Files\Samsung\Kies\KiesAirMessage.exe [578560 2013-05-22] (Samsung Electronics)
HKU\S-1-5-21-2929401604-168723178-134223584-1000\...\Run: [] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168 2013-12-11] (Samsung)
HKU\S-1-5-21-2929401604-168723178-134223584-1000\...\Policies\Explorer: [DisallowRun] 1
HKU\S-1-5-21-2929401604-168723178-134223584-1000\...\Policies\Explorer: [] 
HKU\S-1-5-21-2929401604-168723178-134223584-1000\...\MountPoints2: {166e3181-db5c-11e1-b68d-001e8c836755} - I:\pushinst.exe
HKU\S-1-5-21-2929401604-168723178-134223584-1000\...\MountPoints2: {ee36545b-dd1f-11e1-a81c-bc054307a844} - H:\setup.exe
HKU\S-1-5-21-2929401604-168723178-134223584-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [KiesAirMessage] => C:\Program Files\Samsung\Kies\KiesAirMessage.exe [578560 2013-05-22] (Samsung Electronics)
HKU\S-1-5-21-2929401604-168723178-134223584-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168 2013-12-11] (Samsung)
HKU\S-1-5-21-2929401604-168723178-134223584-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\Explorer: [DisallowRun] 1
HKU\S-1-5-21-2929401604-168723178-134223584-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\Explorer: [] 
HKU\S-1-5-21-2929401604-168723178-134223584-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {166e3181-db5c-11e1-b68d-001e8c836755} - I:\pushinst.exe
HKU\S-1-5-21-2929401604-168723178-134223584-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {ee36545b-dd1f-11e1-a81c-bc054307a844} - H:\setup.exe
IFEO\allshare.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IFEO\driveragent.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IFEO\driverscanner.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IFEO\kies3.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IFEO\kiesagent.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IFEO\setup.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IFEO\teamviewer.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IFEO\unins000.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IFEO\uninst.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
IFEO\uninstall.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GammaTray.lnk
ShortcutTarget: GammaTray.lnk -> C:\Program Files\MagicTune Premium\GammaTray.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Logitech SetPoint.lnk
ShortcutTarget: Logitech SetPoint.lnk -> C:\Program Files\Logitech\SetPoint\SetPoint.exe (Logitech, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\O&O Defrag Tray.lnk
ShortcutTarget: O&O Defrag Tray.lnk -> C:\Windows\Installer\{9A111B78-51E3-48ED-B3CF-F76E004C2CA9}\app_icon.ico ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Ralink Wireless Utility.lnk
ShortcutTarget: Ralink Wireless Utility.lnk -> C:\Program Files\RALINK\Common\RaUI.exe (Ralink Technology, Corp.)
Startup: C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()
Startup: C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Fritz!Box Tray Tool.lnk
ShortcutTarget: Fritz!Box Tray Tool.lnk -> C:\Users\Pascal\Downloads\FritzBox_Tray_Tool_1.2\FritzBox_Tray_Tool.exe (RPworld.de)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.giga.de/software/
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {09859B9C-D4E5-403D-8076-AFEBCD42A55A} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=U3&apn_dtid=OSJ000YYDE&apn_uid=A6A6A550-0B0B-4371-9E53-7048D8DF73D8&apn_sauid=1FFE243C-45AC-458A-88C6-5ED81ACC53CB
SearchScopes: HKCU - {5AAB9BE1-340F-4E19-9272-664E86A59A38} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus
SearchScopes: HKCU - {AF4CB84D-0C01-4D23-846B-D908805D3B71} URL = hxxp://search.softonic.com/MOY00621/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=fcc169e9000000000000001f1f2671b7&r=186
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
Hosts: 127.0.0.1 validation.sls.microsoft.com
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default
FF SelectedSearchEngine: Google
FF Homepage: hxxp://schnittberichte.com/
FF NetworkProxy: "ftp", "91.121.58.235"
FF NetworkProxy: "ftp_port", 3128
FF NetworkProxy: "http", "91.121.58.235"
FF NetworkProxy: "http_port", 3128
FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co"
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "91.121.58.235"
FF NetworkProxy: "socks_port", 3128
FF NetworkProxy: "ssl", "91.121.58.235"
FF NetworkProxy: "ssl_port", 3128
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @Nero.com/KM - C:\PROGRA~1\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin: @nokia.com/EnablerPlugin - C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Amazon-Icon - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\amazon-icon@giga.de [2014-01-02]
FF Extension: Разпознаване на устройство Logitech - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\DeviceDetection@logitech.com [2012-08-01]
FF Extension: pricealarm - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM [2014-01-02]
FF Extension: ProxTube - Unblock YouTube - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\ich@maltegoetz.de [2013-12-12]
FF Extension: Nokia Maps 3D browser plugin - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\maps@ovi.com [2012-09-02]
FF Extension: No Name - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\staged [2014-05-21]
FF Extension: LastPass - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\support@lastpass.com [2014-03-24]
FF Extension: DivX Browser Bar DE  - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\{6dad39c6-f4ac-4984-8e9b-f666269b9eb1} [2014-05-05]
FF Extension: SaveAs - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\5032a6c925cac@5032a6c925ce5.info.xpi [2012-08-20]
FF Extension: Personas Plus - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\personas@christopher.beard.xpi [2012-08-01]
FF Extension: Stealthy - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\stealthyextension@gmail.com.xpi [2012-12-19]
FF Extension: FlashGot - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi [2014-03-13]
FF Extension: {799fe388-8c3f-4d0b-b490-c748f2dcd714} - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\{799fe388-8c3f-4d0b-b490-c748f2dcd714}.xpi [2014-01-08]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-21]
FF Extension: PDF Print Converter Light - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\{bf87ed13-b668-4984-b4d3-4d0b1cb35e33}.xpi [2014-01-09]
FF Extension: Adblock Plus - C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-08-01]

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440400 2014-03-13] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440400 2014-03-13] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1017424 2014-03-13] (Avira Operations GmbH & Co. KG)
R2 Autodesk Content Service; C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe [12288 2012-12-13] (Autodesk, Inc.)
R2 EPSON_EB_RPCV4_04; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50ST7.EXE [153600 2009-09-14] (SEIKO EPSON CORPORATION)
R2 EPSON_PM_RPCV4_04; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RP7.EXE [121856 2009-09-14] (SEIKO EPSON CORPORATION)
S4 Fabs; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG)
S4 FirebirdServerMAGIXInstance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®)
S3 FlexNet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [1064312 2014-02-06] (Flexera Software LLC)
R2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [762192 2013-07-18] (Nero AG)
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14658848 2013-12-10] (NVIDIA Corporation)
R2 OODefragAgent; C:\Program Files\OO Software\Defrag\oodag.exe [1387304 2014-01-24] (O&O Software GmbH)
S4 SamsungAllShareV2.0; C:\Program Files\Samsung\AllShare\AllShareDMS\AllShareDMS.exe [25504 2012-03-02] (Samsung Electronics Co., Ltd.)
S4 SimpleSlideShowServer; C:\Program Files\Samsung\AllShare\AllShareSlideShowService.exe [27584 2012-03-02] (Samsung Electronics Co., Ltd.)
R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [1731896 2014-01-28] (TuneUp Software)
R2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2012-01-18] (Logitech Inc.)
S4 vToolbarUpdater18.1.0; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.0\ToolbarUpdater.exe [1801240 2014-04-28] (AVG Secure Search)

==================== Drivers (Whitelisted) ====================

R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [121248 2012-08-26] (SlySoft, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [42272 2014-04-28] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-09-30] (Avira Operations GmbH & Co. KG)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [4352 2010-10-22] (AVM Berlin)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [69240 2013-12-18] (Avira Operations GmbH & Co. KG)
S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [22528 2009-08-13] (CSR, plc)
R3 cmuda3; C:\Windows\System32\drivers\cmuda3.sys [1482048 2007-04-26] (C-Media Inc)
S3 CompFilter; C:\Windows\System32\DRIVERS\lvbusflt.sys [22176 2012-01-18] (Logitech Inc.)
S3 DFUBTUSB; C:\Windows\System32\Drivers\frmupgr.sys [27536 2007-01-03] (Broadcom Corporation.)
R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [34760 2007-02-16] (SlySoft, Inc.)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [31088 2010-12-17] (Elaborate Bytes AG)
S3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2013-02-05] ()
S3 fwlanusbn; C:\Windows\System32\DRIVERS\fwlanusbn.sys [586752 2010-10-22] (AVM GmbH)
R1 MagicTune; C:\Windows\system32\drivers\MTiCtwl.sys [14336 2010-04-22] (Samsung Electronics, Inc. )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-04-03] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [107736 2014-05-21] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51416 2014-04-03] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [6504 2009-05-13] ()
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [34080 2013-12-05] (NVIDIA Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-09-30] (Avira GmbH)
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [10088 2012-11-16] (TuneUp Software)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-21 22:25 - 2014-05-21 22:27 - 00038330 _____ () C:\Users\Pascal\Downloads\Addition.txt
2014-05-21 22:24 - 2014-05-21 22:27 - 00022676 _____ () C:\Users\Pascal\Downloads\FRST.txt
2014-05-21 22:22 - 2014-05-21 22:27 - 00000000 ____D () C:\FRST
2014-05-21 22:20 - 2014-05-21 22:21 - 01056768 _____ (Farbar) C:\Users\Pascal\Downloads\FRST.exe
2014-05-21 22:03 - 2014-05-21 22:03 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{B3919DC4-5283-4A2C-8573-4C917059BE20}
2014-05-20 19:38 - 2014-05-20 19:38 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{1526393C-662C-4559-85AF-1A252E171405}
2014-05-20 19:25 - 2014-05-21 18:48 - 00000336 _____ () C:\Windows\setupact.log
2014-05-20 19:25 - 2014-05-20 19:25 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-20 19:24 - 2014-05-21 18:48 - 00001512 _____ () C:\Windows\PFRO.log
2014-05-18 23:19 - 2014-05-18 23:55 - 110100480 _____ () C:\Users\Pascal\Downloads\h4v3fun-r0ll3rb0y5-xv1d.part01.rar
2014-05-18 23:15 - 2014-05-18 23:15 - 00002456 _____ () C:\Users\Pascal\Downloads\2db390e102eaf98cf59033618e1ae139.dlc
2014-05-18 22:21 - 2014-05-18 22:21 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{98638811-E171-4D0C-A51C-072CF5517DDE}
2014-05-18 22:08 - 2014-05-19 20:43 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\1&1
2014-05-18 22:08 - 2014-05-18 22:08 - 00000000 ____D () C:\Users\Pascal\AppData\Local\1&1
2014-05-18 22:05 - 2014-05-18 22:05 - 16746208 _____ (1&1 Internet AG) C:\Users\Pascal\Downloads\1und1_multimessenger_setup.exe
2014-05-16 18:25 - 2014-05-16 18:26 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{3B5807A1-4191-495A-A879-1CD27CE3B894}
2014-05-15 18:43 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll
2014-05-15 18:41 - 2014-05-15 18:46 - 00000000 ____D () C:\AdwCleaner
2014-05-15 18:40 - 2014-05-15 18:40 - 01325827 _____ () C:\Users\Pascal\Downloads\adwcleaner_3.208.exe
2014-05-15 17:30 - 2014-05-15 17:30 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{199A5393-E899-4070-BD5A-22B640CA4D83}
2014-05-12 21:06 - 2014-05-12 21:06 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{749199E8-2336-42EC-A2D1-F1E134FA2128}
2014-05-11 23:23 - 2014-05-11 23:23 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{DE2AFFE4-6A9D-4F5D-A086-0CFA261F9E23}
2014-05-09 13:46 - 2014-05-09 13:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2014-05-09 13:46 - 2014-05-09 13:46 - 00000000 ____D () C:\Program Files\CPUID
2014-05-09 13:44 - 2014-05-09 13:44 - 01496480 _____ ( ) C:\Users\Pascal\Downloads\cpu-z_1.692-setup-en.exe
2014-05-07 23:51 - 2014-05-07 23:51 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{8F78B5A7-F8DB-40D4-AC47-186A91DF03E0}
2014-05-06 20:22 - 2014-05-06 20:22 - 00402696 _____ () C:\Users\Pascal\Downloads\setup.exe
2014-05-06 19:36 - 2014-05-06 19:36 - 00000000 ____D () C:\ProgramData\Curse Client
2014-05-05 22:25 - 2014-05-19 22:08 - 00000625 _____ () C:\Users\Pascal\Documents\Uninstall STAR WARS The Old Republic.log
2014-05-05 19:30 - 2014-05-05 19:31 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{C2E3727A-DD16-46F4-AB3B-AC026AA91777}
2014-04-30 17:26 - 2014-04-30 17:26 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{1C28FBBF-9B26-4E95-9BC9-F04687C738D0}
2014-04-29 22:48 - 2014-04-29 22:48 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{48019A28-725D-4D32-B79B-82E5019D413B}
2014-04-29 19:19 - 2014-04-29 19:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer
2014-04-29 18:57 - 2014-04-29 18:57 - 01064736 _____ (Microsoft Corporation) C:\Users\Pascal\Downloads\VB6.0-KB290887-X86.exe
2014-04-29 18:56 - 2014-04-29 18:59 - 01064736 _____ (Microsoft Corporation) C:\Users\Pascal\Downloads\VB6.0-KB290887-X86(1).exe
2014-04-28 23:17 - 2014-04-28 23:18 - 00000000 ____D () C:\ProgramData\AVG Secure Search
2014-04-28 19:25 - 2014-05-21 21:12 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-04-28 19:24 - 2014-04-28 19:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-04-28 19:23 - 2014-04-28 19:24 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-04-28 19:23 - 2014-04-03 09:51 - 00073432 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-28 19:23 - 2014-04-03 09:51 - 00051416 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-24 18:04 - 2014-04-24 18:04 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{36F2A2E4-850E-4139-A114-871D6C4EF407}
2014-04-22 17:21 - 2014-04-22 17:22 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{90F12593-C6A2-4D83-88D1-07CA9D42830E}
2014-04-21 22:09 - 2014-04-21 22:09 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{A84371FE-1718-4165-A9C3-D4A2682E41FA}

==================== One Month Modified Files and Folders =======

2014-05-21 22:27 - 2014-05-21 22:25 - 00038330 _____ () C:\Users\Pascal\Downloads\Addition.txt
2014-05-21 22:27 - 2014-05-21 22:24 - 00022676 _____ () C:\Users\Pascal\Downloads\FRST.txt
2014-05-21 22:27 - 2014-05-21 22:22 - 00000000 ____D () C:\FRST
2014-05-21 22:25 - 2012-08-17 09:41 - 00000000 ____D () C:\Users\Pascal\AppData\Local\CrashDumps
2014-05-21 22:21 - 2014-05-21 22:20 - 01056768 _____ (Farbar) C:\Users\Pascal\Downloads\FRST.exe
2014-05-21 22:03 - 2014-05-21 22:03 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{B3919DC4-5283-4A2C-8573-4C917059BE20}
2014-05-21 21:48 - 2012-08-01 21:53 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-21 21:43 - 2012-08-02 23:34 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\Azureus
2014-05-21 21:20 - 2012-07-31 23:35 - 02084416 _____ () C:\Windows\WindowsUpdate.log
2014-05-21 21:12 - 2014-04-28 19:25 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-21 19:03 - 2009-07-14 06:34 - 00016944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-21 19:03 - 2009-07-14 06:34 - 00016944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-21 18:48 - 2014-05-20 19:25 - 00000336 _____ () C:\Windows\setupact.log
2014-05-21 18:48 - 2014-05-20 19:24 - 00001512 _____ () C:\Windows\PFRO.log
2014-05-21 18:48 - 2012-08-01 00:47 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-05-21 18:48 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-20 22:58 - 2013-08-10 17:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Tanks
2014-05-20 22:58 - 2013-01-23 23:21 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Movie2KDownloader.com
2014-05-20 19:38 - 2014-05-20 19:38 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{1526393C-662C-4559-85AF-1A252E171405}
2014-05-20 19:25 - 2014-05-20 19:25 - 00000000 _____ () C:\Windows\setuperr.log
2014-05-19 22:09 - 2012-08-01 00:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue
2014-05-19 22:09 - 2012-08-01 00:24 - 00000000 ____D () C:\Program Files\Uniblue
2014-05-19 22:08 - 2014-05-05 22:25 - 00000625 _____ () C:\Users\Pascal\Documents\Uninstall STAR WARS The Old Republic.log
2014-05-19 22:05 - 2014-04-14 19:18 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\elsterformular
2014-05-19 22:05 - 2014-04-14 19:15 - 00000000 ____D () C:\ProgramData\elsterformular
2014-05-19 21:05 - 2012-08-01 23:55 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\Nero
2014-05-19 20:43 - 2014-05-18 22:08 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\1&1
2014-05-19 20:34 - 2013-06-02 21:51 - 00000000 ____D () C:\Windows\Minidump
2014-05-19 20:34 - 2010-09-14 21:40 - 00000000 ____D () C:\Windows\Panther
2014-05-19 20:18 - 2013-11-06 23:09 - 00000000 ____D () C:\Users\Pascal\AppData\Local\Battle.net
2014-05-19 19:04 - 2012-08-07 19:25 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-05-19 17:51 - 2012-08-01 00:22 - 00000324 _____ () C:\Windows\Tasks\WindowsUpdate.job
2014-05-18 23:55 - 2014-05-18 23:19 - 110100480 _____ () C:\Users\Pascal\Downloads\h4v3fun-r0ll3rb0y5-xv1d.part01.rar
2014-05-18 23:34 - 2012-08-02 23:22 - 00000000 ____D () C:\Program Files\CCleaner
2014-05-18 23:15 - 2014-05-18 23:15 - 00002456 _____ () C:\Users\Pascal\Downloads\2db390e102eaf98cf59033618e1ae139.dlc
2014-05-18 22:21 - 2014-05-18 22:21 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{98638811-E171-4D0C-A51C-072CF5517DDE}
2014-05-18 22:08 - 2014-05-18 22:08 - 00000000 ____D () C:\Users\Pascal\AppData\Local\1&1
2014-05-18 22:05 - 2014-05-18 22:05 - 16746208 _____ (1&1 Internet AG) C:\Users\Pascal\Downloads\1und1_multimessenger_setup.exe
2014-05-16 18:26 - 2014-05-16 18:25 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{3B5807A1-4191-495A-A879-1CD27CE3B894}
2014-05-15 19:49 - 2012-08-01 21:53 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-05-15 19:49 - 2012-08-01 21:53 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-05-15 18:46 - 2014-05-15 18:41 - 00000000 ____D () C:\AdwCleaner
2014-05-15 18:42 - 2012-08-14 22:14 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\BrowserCompanion
2014-05-15 18:40 - 2014-05-15 18:40 - 01325827 _____ () C:\Users\Pascal\Downloads\adwcleaner_3.208.exe
2014-05-15 17:30 - 2014-05-15 17:30 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{199A5393-E899-4070-BD5A-22B640CA4D83}
2014-05-14 19:39 - 2013-12-06 00:37 - 00000000 ____D () C:\Program Files\Hearthstone
2014-05-13 17:22 - 2012-08-17 10:37 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-05-12 23:10 - 2014-03-31 18:59 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-05-12 21:06 - 2014-05-12 21:06 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{749199E8-2336-42EC-A2D1-F1E134FA2128}
2014-05-11 23:23 - 2014-05-11 23:23 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{DE2AFFE4-6A9D-4F5D-A086-0CFA261F9E23}
2014-05-09 16:05 - 2012-09-03 23:34 - 00000000 ____D () C:\Users\Pascal\AppData\Local\Deployment
2014-05-09 13:46 - 2014-05-09 13:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2014-05-09 13:46 - 2014-05-09 13:46 - 00000000 ____D () C:\Program Files\CPUID
2014-05-09 13:44 - 2014-05-09 13:44 - 01496480 _____ ( ) C:\Users\Pascal\Downloads\cpu-z_1.692-setup-en.exe
2014-05-07 23:51 - 2014-05-07 23:51 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{8F78B5A7-F8DB-40D4-AC47-186A91DF03E0}
2014-05-07 18:05 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\registration
2014-05-06 21:30 - 2013-05-07 12:33 - 00000000 ____D () C:\Users\Gast
2014-05-06 20:22 - 2014-05-06 20:22 - 00402696 _____ () C:\Users\Pascal\Downloads\setup.exe
2014-05-06 19:36 - 2014-05-06 19:36 - 00000000 ____D () C:\ProgramData\Curse Client
2014-05-06 18:59 - 2012-08-01 00:08 - 00146320 _____ () C:\Users\Pascal\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-06 18:58 - 2009-07-14 06:33 - 00492128 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-06 00:01 - 2012-08-05 22:30 - 00000000 ____D () C:\Program Files\TeamViewer
2014-05-05 23:59 - 2014-03-13 02:47 - 00000000 ____D () C:\Program Files\Easeware
2014-05-05 23:33 - 2012-08-02 23:33 - 00000000 ____D () C:\Users\Pascal\AppData\Local\Conduit
2014-05-05 23:30 - 2013-07-10 12:47 - 00982016 ___SH () C:\Users\Pascal\Documents\Thumbs.db
2014-05-05 22:31 - 2010-09-14 20:52 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-05 22:24 - 2009-07-14 06:52 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-05-05 22:23 - 2013-12-25 02:41 - 00000000 ____D () C:\Users\Pascal\Documents\NeroVideo
2014-05-05 19:31 - 2014-05-05 19:30 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{C2E3727A-DD16-46F4-AB3B-AC026AA91777}
2014-05-05 19:31 - 2012-08-01 22:22 - 00000000 ____D () C:\Users\Pascal\AppData\Local\Windows Live Writer
2014-05-04 21:51 - 2013-11-06 23:09 - 00000000 ____D () C:\Program Files\Battle.net
2014-04-30 17:26 - 2014-04-30 17:26 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{1C28FBBF-9B26-4E95-9BC9-F04687C738D0}
2014-04-29 22:48 - 2014-04-29 22:48 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{48019A28-725D-4D32-B79B-82E5019D413B}
2014-04-29 19:19 - 2014-04-29 19:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer
2014-04-29 19:19 - 2014-03-13 12:16 - 00000000 ____D () C:\Program Files\MyPhoneExplorer
2014-04-29 18:59 - 2014-04-29 18:56 - 01064736 _____ (Microsoft Corporation) C:\Users\Pascal\Downloads\VB6.0-KB290887-X86(1).exe
2014-04-29 18:57 - 2014-04-29 18:57 - 01064736 _____ (Microsoft Corporation) C:\Users\Pascal\Downloads\VB6.0-KB290887-X86.exe
2014-04-29 18:41 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\Offline Web Pages
2014-04-28 23:18 - 2014-04-28 23:17 - 00000000 ____D () C:\ProgramData\AVG Secure Search
2014-04-28 23:18 - 2013-07-05 13:09 - 00003730 _____ () C:\Program Files\Mozilla Firefoxavg-secure-search.xml
2014-04-28 23:15 - 2012-11-26 22:38 - 00000000 ____D () C:\Program Files\AVG Secure Search
2014-04-28 23:14 - 2012-11-26 22:38 - 00042272 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx86.sys
2014-04-28 19:24 - 2014-04-28 19:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-04-28 19:24 - 2014-04-28 19:23 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-04-28 19:24 - 2012-08-01 00:22 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\Malwarebytes
2014-04-28 19:23 - 2012-08-01 00:22 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-24 18:04 - 2014-04-24 18:04 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{36F2A2E4-850E-4139-A114-871D6C4EF407}
2014-04-22 18:56 - 2012-10-23 14:05 - 00000000 ____D () C:\Users\Pascal\AppData\Roaming\MediaMonkey
2014-04-22 17:22 - 2014-04-22 17:21 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{90F12593-C6A2-4D83-88D1-07CA9D42830E}
2014-04-21 22:09 - 2014-04-21 22:09 - 00000000 ____D () C:\Users\Pascal\AppData\Local\{A84371FE-1718-4165-A9C3-D4A2682E41FA}

Files to move or delete:
====================
C:\Users\Pascal\taskmgr.exe


Some content of TEMP:
====================
C:\Users\Pascal\AppData\Local\Temp\avgnt.exe
C:\Users\Pascal\AppData\Local\Temp\i4jdel0.exe
C:\Users\Pascal\AppData\Local\Temp\SpotifyUninstall.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-19 23:17

==================== End Of Log ============================
         
--- --- ---



Hier die Addition nochmal falls sie gebraucht wird:

Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x86) Version:21-05-2014
Ran by Pascal at 2014-05-21 22:28:07
Running from C:\Users\Pascal\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Adobe Flash Player 13 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader X (10.1.10) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.10 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (HKLM\...\{00E410EB-8542-5527-9FC9-4C44DF3B7E79}) (Version: 8.0.903.0 - Advanced Micro Devices, Inc.)
AMD Processor Driver (HKLM\...\{C151CE54-E7EA-4804-854B-F515368B0798}) (Version: 1.3.2.0053 - AMD)
AnyDVD (HKLM\...\AnyDVD) (Version: 7.0.9.0 - SlySoft)
Apple Application Support (HKLM\...\{A922C4B7-50E0-4787-A94C-59DBF3C65DBE}) (Version: 3.0 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{10E3A6DD-84D8-4D8A-BB11-5E5314BCA7FD}) (Version: 7.1.0.32 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ATI - Dienstprogramm zur Deinstallation der Software (HKLM\...\All ATI Software) (Version: 6.14.10.1016 - )
AutoCAD 2014 - English (Version: 19.1.18.0 - Autodesk) Hidden
AutoCAD 2014 Language Pack - English (Version: 19.1.18.0 - Autodesk) Hidden
Autodesk 360 (HKLM\...\{52B28CAD-F49D-47BA-9FFE-29C2E85F0D0B}) (Version: 4.0.27.1 - Autodesk)
Autodesk App Manager (HKLM\...\{C070121A-C8C5-4D52-9A7D-D240631BD433}) (Version: 1.1.0 - Autodesk)
Autodesk AutoCAD 2014 - English (HKLM\...\AutoCAD 2014 - English) (Version: 19.1.18.0 - Autodesk)
Autodesk Content Service (HKLM\...\Autodesk Content Service) (Version: 3.1.3.0 - Autodesk)
Autodesk Content Service (Version: 3.1.3.0 - Autodesk) Hidden
Autodesk Content Service Language Pack (Version: 3.1.3.0 - Autodesk) Hidden
Autodesk Featured Apps (HKLM\...\{F732FEDA-7713-4428-934B-EF83B8DD65D0}) (Version: 1.1.0 - Autodesk)
Autodesk Material Library 2014 (HKLM\...\{644F9B19-A462-499C-BF4D-300ABC2A28B1}) (Version: 4.0.19.0 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2014 (HKLM\...\{51BF3210-B825-4092-8E0D-66D689916E02}) (Version: 4.0.19.0 - Autodesk)
Autodesk ReCap (HKLM\...\Autodesk ReCap) (Version: 1.0.43.13 - Autodesk)
Autodesk ReCap (Version: 1.0.43.13 - Autodesk) Hidden
Autodesk ReCap Language Pack-English (Version: 1.0.43.13 - Autodesk) Hidden
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Battle.net (HKLM\...\Battle.net) (Version:  - Blizzard Entertainment)
CameraHelperMsi (Version: 13.50.854.0 - Logitech) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.09 - Piriform)
CDDRV_Installer (Version: 4.60 - Logitech) Hidden
CloneCD (HKLM\...\CloneCD) (Version:  - SlySoft)
CloneDVD2 (HKLM\...\CloneDVD2) (Version: 2.9.3.0 - Elaborate Bytes)
C-Media PCI Audio (HKLM\...\C-Media PCI Sound) (Version:  - )
Content Manager 2 (HKLM\...\Content Manager 2) (Version: 3.10.0.52790 - NNG Llc.)
Corel PaintShop Pro X4 (HKLM\...\_{00580795-581C-4587-B9F2-37320D7AB37F}) (Version: 14.0.0.345 - Corel Corporation)
Corel PaintShop Pro X4 (Version: 14.0.0.345 - Corel Corporation) Hidden
Corel PaintShop Pro X5 (HKLM\...\_{1563C6F2-E9B5-42DE-9EA6-207C9A8C2DFB}) (Version: 15.0.0.183 - Corel Corporation)
Corel PaintShop Pro X5 (Version: 15.0.0.183 - Corel Corporation) Hidden
Corel PaintShop Pro X6 (HKLM\...\_{166D1CB6-DD8A-40DD-9E25-4D31D2D6DE4D}) (Version: 16.0.0.113 - Corel Corporation)
Corel PaintShop Pro X6 (Version: 16.0.0.113 - Corel Corporation) Hidden
CPUID CPU-Z 1.69.2 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
Curse Client (HKCU\...\101a9f93b8f0bb6f) (Version: 5.1.1.792 - Curse)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
DDBAC (HKLM\...\{8E1246B9-9F66-4303-BF11-212EC2672BBE}) (Version: 5.3.13 - DataDesign)
DivX-Setup (HKLM\...\DivX Setup) (Version: 2.6.1.87 - DivX, LLC)
DriverAgent by eSupport.com (HKLM\...\DriverAgent_is1) (Version:  - Copyright © 2013 eSupport.com, Inc • All Rights Reserved)
eMule (HKLM\...\eMule) (Version:  - )
EPSON BX620FWD Series Handbuch (HKLM\...\EPSON BX620FWD Series Manual) (Version:  - )
EPSON BX620FWD Series Netzwerk-Handbuch (HKLM\...\EPSON BX620FWD Series Network Guide) (Version:  - )
EPSON BX620FWD Series Printer Uninstall (HKLM\...\EPSON BX620FWD Series) (Version:  - SEIKO EPSON Corporation)
Epson Easy Photo Print 2 (HKLM\...\{310C1558-F6B5-4889-98B0-7471966BA7F2}) (Version: 2.2.3.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM\...\{03B8AA32-F23C-4178-B8E6-09ECD07EAA47}) (Version: 2.40.0001 - SEIKO EPSON CORPORATION)
Epson FAX Utility (HKLM\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 1.10.00 - SEIKO EPSON CORPORATION)
Epson PC-FAX Driver (HKLM\...\EPSON PC-FAX Driver 2) (Version:  - )
EPSON Scan (HKLM\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EpsonNet Print (HKLM\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.4i - SEIKO EPSON CORPORATION)
EpsonNet Setup 3.3 (HKLM\...\{C9D8A041-2963-4B31-8FFC-1500F3DB9293}) (Version: 3.3a - SEIKO EPSON CORPORATION)
erLT (Version: 1.20.0137 - Logitech, Inc.) Hidden
erLT (Version: 1.20.138.34 - Logitech, Inc.) Hidden
FARO LS 1.1.501.0 (HKLM\...\{8F196892-666A-4A40-8587-6AE38F78A5C2}) (Version: 5.1.0.30630 - FARO Scanner Production)
Firebird SQL Server - MAGIX Edition (HKLM\...\{39AB2E37-1A55-4292-A5D3-971E9F70D0F8}) (Version: 2.1.32.0 - MAGIX AG)
Free Video to DVD Converter version 5.0.24.422 (HKLM\...\Free Video to DVD Converter_is1) (Version: 5.0.24.422 - DVDVideoSoft Ltd.)
Free YouTube Download version 3.2.20.1230 (HKLM\...\Free YouTube Download_is1) (Version: 3.2.20.1230 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.20.1230 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.20.1230 - DVDVideoSoft Ltd.)
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
Hearthstone (HKLM\...\Hearthstone) (Version:  - Blizzard Entertainment)
ICA (Version: 14.0.0.345 - Corel Corporation) Hidden
ICA (Version: 15.0.0.183 - Corel Corporation) Hidden
ICA (Version: 16.0.0.113 - Corel Corporation) Hidden
IPM_PSP_COM (Version: 14.0.0.345 - Corel Corporation) Hidden
IPM_PSP_COM (Version: 15.0.0.183 - Corel Corporation) Hidden
IPM_PSP_COM (Version: 16.0.0.113 - Corel Corporation) Hidden
Java 7 Update 45 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.450 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JavaFX 2.1.1 (HKLM\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
Junk Mail filter update (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
KhalInstallWrapper (Version: 2.00.0000 - Logitech) Hidden
LastPass (nur deinstallieren) (HKLM\...\LastPass) (Version:  - LastPass)
Logitech SetPoint (HKLM\...\{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}) (Version: 4.80 - Logitech)
Logitech Vid HD (HKLM\...\Logitech Vid) (Version: 7.2 (7259) - Logitech Inc..)
Logitech Webcam-Software (HKLM\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.31 - Logitech Inc.)
LWS Facebook (Version: 13.50.854.0 - Logitech) Hidden
LWS Gallery (Version: 13.50.854.0 - Logitech) Hidden
LWS Help_main (Version: 13.50.862.0 - Logitech) Hidden
LWS Launcher (Version: 13.50.859.0 - Logitech) Hidden
LWS Motion Detection (Version: 13.30.1395.0 - Logitech) Hidden
LWS Pictures And Video (Version: 13.50.861.0 - Logitech) Hidden
LWS Twitter (Version: 13.30.1346.0 - Logitech) Hidden
LWS Video Mask Maker (Version: 13.30.1379.0 - Logitech) Hidden
LWS VideoEffects (Version: 13.30.1379.0 - Logitech) Hidden
LWS Webcam Software (Version: 13.31.1038.0 - Logitech) Hidden
LWS WLM Plugin (Version: 1.30.1201.0 - Logitech) Hidden
LWS YouTube Plugin (Version: 13.31.1038.0 - Logitech) Hidden
MagicTune Premium (HKLM\...\{69F962F7-3761-4704-9E4B-24FF10F77111}) (Version: 4.0.12 - Samsung Electronics Co. Ltd.)
MAGIX Fotos auf DVD 2014 Deluxe (HKLM\...\MX.{D7951A7D-D2B7-494B-BFA8-0EC07C00EBDC}) (Version: 13.0.2.87 - MAGIX AG)
MAGIX Fotos auf DVD 2014 Deluxe (Version: 13.0.2.87 - MAGIX AG) Hidden
MAGIX Speed burnR (MSI) (HKLM\...\MX.{294792A1-CA9A-459E-8F78-3C96FD3A3EC4}) (Version: 7.0.2.6 - MAGIX AG)
MAGIX Speed burnR (MSI) (Version: 7.0.2.6 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
MediaMonkey 4.0 (HKLM\...\MediaMonkey_is1) (Version: 4.0 - Ventis Media Inc.)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Primary Interoperability Assemblies 2005 (HKLM\...\{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft_VC100_CRT_SP1_x86 (Version: 10.0.40219.1 - Nokia) Hidden
Mozilla Firefox 29.0.1 (x86 de) (HKLM\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSVC80_x86_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x86 (Version: 1.0.1.2 - Nokia) Hidden
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MyFreeCodec (HKCU\...\MyFreeCodec) (Version:  - )
MyPhoneExplorer (HKLM\...\MPE) (Version: 1.8.5 - F.J. Wechselberger)
Naviextras Toolbox Prerequesities (HKLM\...\{537575D6-3B96-474C-BD8F-DFF667363DBD}) (Version: 1.0.0 - Nav N Go Ltd.)
Nero 2014 (HKLM\...\{F384C1E1-3A16-4073-95C3-7271FE0ED4C2}) (Version: 15.0.02200 - Nero AG)
Nero 2014 Content Pack (HKLM\...\{204A26F0-01B8-4656-8607-5CCEDE820BC2}) (Version: 15.0.00200 - Nero AG)
Nero Abstract Themes (Version: 12.0.11500 - Nero AG) Hidden
Nero Audio Pack 1 (Version: 11.0.11500.110.0 - Nero AG) Hidden
Nero Blu-ray Player (Version: 12.0.20031 - Nero AG) Hidden
Nero Blu-ray Player Help (CHM) (Version: 15.0.00015 - Nero AG) Hidden
Nero Burning Core (Version: 15.0.19000 - Nero AG) Hidden
Nero Burning ROM (Version: 15.0.19000 - Nero AG) Hidden
Nero Burning ROM Help (CHM) (Version: 15.0.00018 - Nero AG) Hidden
Nero Cliparts (Version: 12.0.11500 - Nero AG) Hidden
Nero ControlCenter (Version: 11.0.16700 - Nero AG) Hidden
Nero ControlCenter Help (CHM) (Version: 15.0.00015 - Nero AG) Hidden
Nero Core Components (Version: 11.0.22500 - Nero AG) Hidden
Nero Disc Menus 1 (Version: 12.0.11500 - Nero AG) Hidden
Nero Disc Menus 2 (Version: 12.0.11500 - Nero AG) Hidden
Nero Disc Menus 3 (Version: 12.0.11500 - Nero AG) Hidden
Nero Disc Menus Basic (Version: 12.0.11500 - Nero AG) Hidden
Nero Disc to Device (Version: 15.0.12010 - Nero AG) Hidden
Nero Effects Basic (Version: 15.0.10011 - Nero AG) Hidden
Nero Express (Version: 15.0.19000 - Nero AG) Hidden
Nero Express Help (CHM) (Version: 15.0.00018 - Nero AG) Hidden
Nero Family and Events Themes (Version: 12.0.11500 - Nero AG) Hidden
Nero Football (Soccer) Themes (Version: 12.0.11500 - Nero AG) Hidden
Nero Holiday and Sports Themes (Version: 12.0.11500 - Nero AG) Hidden
Nero Image Samples (Version: 15.0.10008 - Nero AG) Hidden
Nero Info (Version: 15.1.0023 - Nero AG) Hidden
Nero Kwik Themes Basic (Version: 12.0.11500 - Nero AG) Hidden
Nero Launcher (Version: 15.0.8000 - Nero AG) Hidden
Nero MediaHome (Version: 1.20.8200 - Nero AG) Hidden
Nero MediaHome Help (CHM) (Version: 15.0.00018 - Nero AG) Hidden
Nero PiP Effects 1 (Version: 12.0.11500 - Nero AG) Hidden
Nero PiP Effects Basic (Version: 15.0.10008 - Nero AG) Hidden
Nero Platinum Effects 12 (Version: 15.0.10011 - Nero AG) Hidden
Nero Recode (Version: 15.0.14000 - Nero AG) Hidden
Nero Recode Help (CHM) (Version: 15.0.00018 - Nero AG) Hidden
Nero RescueAgent (Version: 15.0.2000 - Nero AG) Hidden
Nero RescueAgent Help (CHM) (Version: 15.0.00015 - Nero AG) Hidden
Nero Retro Film Themes (Version: 12.0.11700 - Nero AG) Hidden
Nero SharedVideoCodecs (Version: 1.0.15003 - Nero AG) Hidden
Nero Update (Version: 11.0.13300.42.0 - Nero AG) Hidden
Nero Video (Version: 15.0.12000 - Nero AG) Hidden
Nero Video Help (CHM) (Version: 15.0.00015 - Nero AG) Hidden
Nero Video Samples (Version: 12.0.11500 - Nero AG) Hidden
Nero Video Transitions 1 (Version: 12.0.11500 - Nero AG) Hidden
Nokia Connectivity Cable Driver (HKLM\...\{6FE12C01-2FBC-42E2-AEB9-4CA2238C462F}) (Version: 7.1.101.0 - Nokia)
Nokia Suite (HKLM\...\Nokia Suite) (Version: 3.7.22.0 - Nokia)
Nokia Suite (Version: 3.7.22.0 - Nokia) Hidden
NVIDIA 3D Vision Controller-Treiber 335.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 335.21 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.8.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.147.1067 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA ShadowPlay 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.3523 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden
NVIDIA Update 10.11.15 (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 10.11.15 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.19 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.19 - NVIDIA Corporation)
O&O Defrag Professional (HKLM\...\{9A111B78-51E3-48ED-B3CF-F76E004C2CA9}) (Version: 17.0.504 - O&O Software GmbH)
OpenOffice.org 3.4 (HKLM\...\{4C552FD3-2CCD-4E00-AC64-0681DBB3F8B5}) (Version: 3.4.9590 - OpenOffice.org)
PC Connectivity Solution (HKLM\...\{6B722793-E77B-41F5-BAB3-6C9832274E75}) (Version: 12.0.76.0 - Nokia)
Prerequisite installer (Version: 15.0.0005 - Nero AG) Hidden
PSPPContent (Version: 14.0.0.345 - Corel Corporation) Hidden
PSPPContent (Version: 15.0.0.183 - Corel Corporation) Hidden
PSPPContent (Version: 16.0.0.113 - Corel Corporation) Hidden
PSPPHelp (Version: 14.0.0.345 - Corel Corporation) Hidden
PSPPHelp (Version: 15.0.0.183 - Corel Corporation) Hidden
PSPPHelp (Version: 16.0.0.113 - Corel Corporation) Hidden
Ralink Wireless LAN (HKLM\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 1.00.0000 - RaLink)
Samsung AllShare (HKLM\...\InstallShield_{DF47ACA3-7C78-4C08-8007-AC682563C9F1}) (Version: 2.1.0.12031_10 - Samsung Electronics Co., Ltd.)
Samsung AllShare (Version: 2.1.0.12031_10 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.5.1.12123_2 - Samsung Electronics Co., Ltd.)
Samsung Kies (Version: 2.5.1.12123_2 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies3 (HKLM\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14034.17 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (Version: 3.2.14034.17 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.29.0 - SAMSUNG Electronics Co., Ltd.)
Setup (Version: 14.0.0.345 - Ihr Firmenname) Hidden
Setup (Version: 15.0.0.183 - Ihr Firmenname) Hidden
Setup (Version: 16.0.0.113 - Ihr Firmenname) Hidden
Shared Add-in Extensibility Update for Microsoft .NET Framework 2.0 (KB908002) (HKLM\...\{09959E11-AD5D-408E-96AF-E3346954D6B8}) (Version: 1.0.0 - Microsoft)
Shared Add-in Support Update for Microsoft .NET Framework 2.0 (KB908002) (HKLM\...\{64F3B15C-24C7-4B2B-9B72-65CCBBD7F06B}) (Version: 1.0.0 - Microsoft)
SHIELD Streaming (Version: 1.6.85 - NVIDIA Corporation) Hidden
SketchUp Import for AutoCAD 2014 (HKLM\...\{644E9589-F73A-49A4-AC61-A953B9DE5669}) (Version: 1.1.0 - Autodesk)
Star Wars: The Old Republic (HKLM\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.)
StarCraft II (HKLM\...\StarCraft II) (Version:  - Blizzard Entertainment)
Steam (HKLM\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.13.1 - TeamSpeak Systems GmbH)
TuneUp Utilities 2013 (HKLM\...\TuneUp Utilities 2013) (Version: 13.0.4000.245 - TuneUp Software)
TuneUp Utilities 2013 (Version: 13.0.4000.245 - TuneUp Software) Hidden
TuneUp Utilities 2013 13.0.2013.194 (HKLM\...\TuneUp Utilities 2013 13.0.2013.194) (Version:  - )
TuneUp Utilities Language Pack (de-DE) (Version: 10.0.1000.47 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (Version: 12.0.3500.13 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (Version: 13.0.4000.245 - TuneUp Software) Hidden
Uplay (HKLM\...\Uplay) (Version: 3.0 - Ubisoft)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
VirtualCloneDrive (HKLM\...\VirtualCloneDrive) (Version:  - Elaborate Bytes)
VLC media player 2.1.0 (HKLM\...\VLC media player) (Version: 2.1.0 - VideoLAN)
Vuze (HKLM\...\8461-7759-5462-8226) (Version: 5.2.0.0 - Azureus Software, Inc.)
Winamp (HKLM\...\Winamp) (Version: 5.63  - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows Live Communications Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Essentials (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mail (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Media Player Firefox Plugin (HKLM\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
Windows Utils (HKLM\...\Windows Utils) (Version:  - )
Windows-Treiberpaket - Nokia pccsmcfd “LegacyDriver”  (05/31/2012 7.1.2.0) (HKLM\...\17D063A0A9F5D5A225B76B1D9BCB5ADBE85C8382) (Version: 05/31/2012 7.1.2.0 - Nokia)
WinRAR 4.00 (32-bit) (HKLM\...\WinRAR archiver) (Version: 4.00.0 - win.rar GmbH)
World of Warcraft (HKLM\...\World of Warcraft) (Version:  - Blizzard Entertainment)
Xilisoft Video Converter Ultimate (HKLM\...\Xilisoft Video Converter Ultimate) (Version: 7.7.3.20131014 - Xilisoft)
XP Codec Pack (HKLM\...\XP Codec Pack) (Version:  - )
YGOPro DevPro Version 1.9.2r2 (HKLM\...\{3CF2634F-3F38-4DD3-9201-CB2FE6B5FF23}_is1) (Version: 1.9.2r2 - YGOPro DevPro Online)

==================== Restore Points  =========================


==================== Hosts content: ==========================

2009-07-14 04:04 - 2012-09-02 22:41 - 00000864 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 validation.sls.microsoft.com

==================== Scheduled Tasks (whitelisted) =============

Task: {16D215CA-419C-4602-8AD3-A58D5AEDBC78} - System32\Tasks\{1C598B69-0DED-476D-A610-8DCF4E823F83} => E:\Setup.exe
Task: {2799E072-9B31-4692-AD33-7AD098E9AB5A} - System32\Tasks\WindowsUpdate => Rundll32.exe C:\Windows\wupd.dll, xmlcreate
Task: {5AB47F9B-9F25-4A0B-850F-A4A0F22C4E7D} - System32\Tasks\DivX-Online-Aktualisierungsprogramm => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2013-02-13] ()
Task: {5CCE5702-887E-43C8-800D-3633A19E580C} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files\TuneUp Utilities 2013\OneClick.exe [2014-01-28] (TuneUp Software)
Task: {647E4BEB-321B-4C5D-B920-2A42EB30CD7A} - System32\Tasks\{826E6F22-6BEF-4E3F-9E6E-9D6411AE80C9} => G:\Crysis 3\Bin32\Crysis3.exe
Task: {6A0C2E99-4F8A-4F46-8C1A-BB46D7F4DD4D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {A5112FBA-DEA6-425C-8F95-0702FD0A160A} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {AB743BE2-4380-4CDE-A962-DA9C5F72C813} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {CDCB5DC2-38B6-42DB-A248-58AD121EA492} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {D964EF81-ADD5-4668-A81B-567640DD7D6E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-15] (Adobe Systems Incorporated)
Task: {E74890E7-A596-4D04-A39D-CC7C930BF174} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\WindowsUpdate.job => C:\Windows\wupd.dll

==================== Loaded Modules (whitelisted) =============

2012-08-01 00:47 - 2014-03-04 14:34 - 00109000 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2013-10-09 11:36 - 2013-09-30 11:01 - 00394824 _____ () C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll
2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-01-28 10:37 - 2014-01-28 10:37 - 00607032 _____ () C:\Program Files\TuneUp Utilities 2013\avgreplibx.dll
2012-08-01 00:02 - 2009-10-05 16:36 - 00036864 _____ () C:\Program Files\MagicTune Premium\GammaTray.exe
2012-12-25 03:38 - 2009-07-20 13:27 - 00017936 _____ () C:\Program Files\Logitech\SetPoint\khalwrapper.dll
2012-08-01 00:02 - 2011-01-04 09:30 - 00065024 _____ () C:\Program Files\MagicTune Premium\VESADll.dll
2012-08-01 00:02 - 2011-01-04 09:30 - 00064512 _____ () C:\Program Files\MagicTune Premium\IPROFILE.dll
2012-08-01 00:02 - 2011-01-04 09:31 - 00054272 _____ () C:\Program Files\MagicTune Premium\DPROFILE.dll
2012-08-01 00:02 - 2011-01-04 09:30 - 00056320 _____ () C:\Program Files\MagicTune Premium\EPROFILE.dll
2012-08-01 00:02 - 2011-01-04 09:30 - 00053248 _____ () C:\Program Files\MagicTune Premium\DEVICEINTERFACE.dll
2012-08-01 00:02 - 2011-01-04 09:31 - 00023552 _____ () C:\Program Files\MagicTune Premium\HzZone.dll
2012-08-01 00:02 - 2011-01-04 09:31 - 00023040 _____ () C:\Program Files\MagicTune Premium\Highlight.dll
2012-08-01 00:02 - 2011-01-04 09:31 - 00052224 _____ () C:\Program Files\MagicTune Premium\MTResGer.dll
2014-03-31 18:59 - 2014-05-12 23:10 - 03839088 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2014-03-21 11:01 - 2014-03-21 11:01 - 01020928 _____ () C:\Users\Pascal\AppData\Roaming\Mozilla\Firefox\Profiles\24te1tav.default\extensions\support@lastpass.com\platform\WINNT_x86-msvc\components\lpxpcom.dll
2013-08-21 15:58 - 2013-08-21 15:58 - 00245072 _____ () C:\Program Files\Nero\Nero 2014\Nero Vision\DotNetProxy.dll
2013-06-05 12:45 - 2013-06-05 12:45 - 00071504 _____ () C:\Program Files\Nero\Nero 2014\Nero Vision\Nero3D\zlib1.dll
2013-06-05 12:45 - 2013-06-05 12:45 - 00091984 _____ () C:\Program Files\Nero\Nero 2014\Nero Vision\Nero3D\lib3ds-1.3.dll
2013-08-21 15:59 - 2013-08-21 15:59 - 00858008 _____ () C:\Program Files\Nero\Nero 2014\Nero Vision\System.Data.SQLite.dll
2012-08-01 00:17 - 2011-03-02 12:40 - 00140288 _____ () C:\Program Files\WinRAR\rarext.dll
2014-01-14 12:26 - 2013-12-10 04:15 - 00081184 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\gamecaster32.dll
2014-01-14 12:26 - 2013-12-10 04:15 - 00758048 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\twitchsdk32.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (05/21/2014 10:25:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvBackend.exe, Version: 10.11.15.0, Zeitstempel: 0x52a6776c
Name des fehlerhaften Moduls: nvspcap.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x52a67618
Ausnahmecode: 0xc0000005
Fehleroffset: 0x100077e2
ID des fehlerhaften Prozesses: 0x17c8
Startzeit der fehlerhaften Anwendung: 0xNvBackend.exe0
Pfad der fehlerhaften Anwendung: NvBackend.exe1
Pfad des fehlerhaften Moduls: NvBackend.exe2
Berichtskennung: NvBackend.exe3

Error: (05/21/2014 10:24:44 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvBackend.exe, Version: 10.11.15.0, Zeitstempel: 0x52a6776c
Name des fehlerhaften Moduls: nvspcap.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x52a67618
Ausnahmecode: 0xc0000005
Fehleroffset: 0x100be510
ID des fehlerhaften Prozesses: 0x17c8
Startzeit der fehlerhaften Anwendung: 0xNvBackend.exe0
Pfad der fehlerhaften Anwendung: NvBackend.exe1
Pfad des fehlerhaften Moduls: NvBackend.exe2
Berichtskennung: NvBackend.exe3

Error: (05/21/2014 09:25:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvBackend.exe, Version: 10.11.15.0, Zeitstempel: 0x52a6776c
Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00033a96
ID des fehlerhaften Prozesses: 0xd98
Startzeit der fehlerhaften Anwendung: 0xNvBackend.exe0
Pfad der fehlerhaften Anwendung: NvBackend.exe1
Pfad des fehlerhaften Moduls: NvBackend.exe2
Berichtskennung: NvBackend.exe3

Error: (05/21/2014 09:24:34 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvBackend.exe, Version: 10.11.15.0, Zeitstempel: 0x52a6776c
Name des fehlerhaften Moduls: nvspcap.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x52a67618
Ausnahmecode: 0xc0000005
Fehleroffset: 0x100be510
ID des fehlerhaften Prozesses: 0xd98
Startzeit der fehlerhaften Anwendung: 0xNvBackend.exe0
Pfad der fehlerhaften Anwendung: NvBackend.exe1
Pfad des fehlerhaften Moduls: NvBackend.exe2
Berichtskennung: NvBackend.exe3

Error: (05/21/2014 08:15:37 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: OneClick.exe, Version: 13.0.4000.245, Zeitstempel: 0x52e76b11
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea91c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00052ca9
ID des fehlerhaften Prozesses: 0x16b0
Startzeit der fehlerhaften Anwendung: 0xOneClick.exe0
Pfad der fehlerhaften Anwendung: OneClick.exe1
Pfad des fehlerhaften Moduls: OneClick.exe2
Berichtskennung: OneClick.exe3

Error: (05/21/2014 08:03:40 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: OneClick.exe, Version: 13.0.4000.245, Zeitstempel: 0x52e76b11
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea91c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00052ca9
ID des fehlerhaften Prozesses: 0x464
Startzeit der fehlerhaften Anwendung: 0xOneClick.exe0
Pfad der fehlerhaften Anwendung: OneClick.exe1
Pfad des fehlerhaften Moduls: OneClick.exe2
Berichtskennung: OneClick.exe3

Error: (05/21/2014 06:48:47 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]

Error: (05/21/2014 06:48:47 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]

Error: (05/21/2014 06:48:47 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD endpoint registration failed [0]

Error: (05/20/2014 07:25:05 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]


System errors:
=============
Error: (05/21/2014 06:48:42 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎21.‎05.‎2014 um 00:02:50 unerwartet heruntergefahren.

Error: (05/20/2014 09:14:29 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (05/15/2014 05:23:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Avira Browser-Schutz" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (05/15/2014 05:23:07 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Browser-Schutz erreicht.

Error: (05/15/2014 05:21:22 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎15.‎05.‎2014 um 01:50:34 unerwartet heruntergefahren.

Error: (05/14/2014 06:29:58 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Avira Browser-Schutz" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (05/14/2014 06:29:58 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Browser-Schutz erreicht.

Error: (05/13/2014 05:25:56 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden.

Error: (05/13/2014 05:25:54 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden.

Error: (05/13/2014 05:25:54 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden.


Microsoft Office Sessions:
=========================
Error: (05/21/2014 10:25:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: NvBackend.exe10.11.15.052a6776cnvspcap.dll_unloaded0.0.0.052a67618c0000005100077e217c801cf75326f01538dC:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exenvspcap.dll016bacfc-e126-11e3-9e3f-001e8c836755

Error: (05/21/2014 10:24:44 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: NvBackend.exe10.11.15.052a6776cnvspcap.dll_unloaded0.0.0.052a67618c0000005100be51017c801cf75326f01538dC:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exenvspcap.dllf19a5f32-e125-11e3-9e3f-001e8c836755

Error: (05/21/2014 09:25:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: NvBackend.exe10.11.15.052a6776cole32.dll6.1.7601.175144ce7b96fc000000500033a96d9801cf7515ebe231d7C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exeC:\Windows\system32\ole32.dll99c99485-e11d-11e3-9e3f-001e8c836755

Error: (05/21/2014 09:24:34 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: NvBackend.exe10.11.15.052a6776cnvspcap.dll_unloaded0.0.0.052a67618c0000005100be510d9801cf7515ebe231d7C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exenvspcap.dll89a5b8b5-e11d-11e3-9e3f-001e8c836755

Error: (05/21/2014 08:15:37 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: OneClick.exe13.0.4000.24552e76b11ntdll.dll6.1.7601.18247521ea91cc000000500052ca916b001cf751fa09fa37cC:\Program Files\TuneUp Utilities 2013\OneClick.exeC:\Windows\SYSTEM32\ntdll.dlle7e1353a-e113-11e3-9e3f-001e8c836755

Error: (05/21/2014 08:03:40 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: OneClick.exe13.0.4000.24552e76b11ntdll.dll6.1.7601.18247521ea91cc000000500052ca946401cf751d843911f2C:\Program Files\TuneUp Utilities 2013\OneClick.exeC:\Windows\SYSTEM32\ntdll.dll3c86215e-e112-11e3-9e3f-001e8c836755

Error: (05/21/2014 06:48:47 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]

Error: (05/21/2014 06:48:47 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]

Error: (05/21/2014 06:48:47 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD endpoint registration failed [0]

Error: (05/20/2014 07:25:05 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]


==================== Memory info =========================== 

Percentage of memory in use: 78%
Total physical RAM: 3070.49 MB
Available physical RAM: 664.21 MB
Total Pagefile: 6139.27 MB
Available Pagefile: 3217.13 MB
Total Virtual: 2047.88 MB
Available Virtual: 1883.67 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:149.05 GB) (Free:69.33 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Volume) (Fixed) (Total:186.31 GB) (Free:39.79 GB) NTFS
Drive g: (My Book) (Fixed) (Total:931.51 GB) (Free:196.8 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149 GB) (Disk ID: 2AE0CD32)
Partition 1: (Active) - (Size=149 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 186 GB) (Disk ID: 08D39400)
Partition 1: (Not Active) - (Size=186 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 932 GB) (Disk ID: E8900690)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Geändert von Ironforge (21.05.2014 um 22:12 Uhr)

 

Themen zu Mail Delivery Service seit mehr als 1 Monat wie bekomme ich das Problem aus der Welt
amazon-icon, association, bat/trojandownloader.ftp.nnp, browser, conduit.search, conduit.search entfernen, converter, cpu-z, dvdvideosoft ltd., email, explorer, homepage, install.exe, mp3, nvbackend, problem gelöst, pup.optional.conduit.a, reg/runkeys.nai, secure search, services.exe, svchost.exe, vtoolbarupdater, win32/adware.adon, win32/adware.multiplug.h, win32/conduit.searchprotect.a, win32/conduit.searchprotect.n, win32/pricegong.a, win32/toolbar.conduit.b, win32/toolbar.conduit.p, win32/toolbar.conduit.w, win32/toolbar.conduit.x, win64/toolbar.conduit.a, windows




Ähnliche Themen: Mail Delivery Service seit mehr als 1 Monat wie bekomme ich das Problem aus der Welt


  1. Bekomme massen E-Mail "This message was created automatically by mail delivery software."
    Plagegeister aller Art und deren Bekämpfung - 31.08.2015 (2)
  2. Mail Delivery System <mailer-daemon@kundenserver.de> mailrücklauf auf nicht gesendete mail
    Überwachung, Datenschutz und Spam - 26.03.2015 (4)
  3. Bekomme seit diesem Monat sehr viele Spam Mails
    Überwachung, Datenschutz und Spam - 19.06.2014 (4)
  4. Seit gestern 800 Emails mit Mail delivery failed​: returning message ​to sender​
    Log-Analyse und Auswertung - 27.03.2014 (9)
  5. Mail Delivery System Mails... Mail-Konto gehackt?
    Plagegeister aller Art und deren Bekämpfung - 06.03.2014 (7)
  6. E-Mail-Problem bei WEB.DE (Mail delivery failed: returning message to sender - keineantwortadresse@web.de )
    Plagegeister aller Art und deren Bekämpfung - 12.10.2013 (11)
  7. Mail delivery failed, aber nur in Windows live mail
    Plagegeister aller Art und deren Bekämpfung - 15.08.2013 (8)
  8. Guv und E-Mail Delivery Problem
    Plagegeister aller Art und deren Bekämpfung - 30.05.2013 (14)
  9. Mail delivery failed: returning message to sender, obwohl keine mail versendet
    Plagegeister aller Art und deren Bekämpfung - 15.05.2013 (0)
  10. Mail delivery failed Emails - vermutlich Maleware Problem
    Plagegeister aller Art und deren Bekämpfung - 09.04.2013 (16)
  11. Letzter Support-Monat für Windows 7 ohne Service Pack
    Nachrichten - 19.03.2013 (0)
  12. Mail delivery failed-SPAM Mails. E-Mail-Acc kompromittiert?
    Plagegeister aller Art und deren Bekämpfung - 14.02.2013 (1)
  13. Seit ca. 7 Tagen: web.de - mail delivery failed returning message to sender
    Plagegeister aller Art und deren Bekämpfung - 16.12.2012 (13)
  14. Seit ca. 1 Monat Internet erheblich langsam
    Plagegeister aller Art und deren Bekämpfung - 11.04.2012 (9)
  15. Mail delivery system meldet unzustellbare E-Mail
    Überwachung, Datenschutz und Spam - 27.03.2012 (4)
  16. Letzter Support-Monat für Windows 2000 sowie das Service Pack 2 für Windows XP
    Nachrichten - 13.06.2010 (0)
  17. Heute schon über 30 "Mail Delivery System "Mail Delivery System" Mail bekommen
    Log-Analyse und Auswertung - 26.05.2008 (4)

Zum Thema Mail Delivery Service seit mehr als 1 Monat wie bekomme ich das Problem aus der Welt - Guten Abend, Ich hoffe ihr könnt mir helfen. Ich bekomme seit mehr als 1. Monat jeden Tag locker 50 Mails mit dem Inhalt Mail Delivery Service und ich weiß partu - Mail Delivery Service seit mehr als 1 Monat wie bekomme ich das Problem aus der Welt...
Archiv
Du betrachtest: Mail Delivery Service seit mehr als 1 Monat wie bekomme ich das Problem aus der Welt auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.