Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Antivirus und andere Programm lassen sich nicht installieren

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 12.01.2015, 15:57   #1
Quella1977
 
Antivirus und andere Programm lassen sich nicht installieren - Standard

Antivirus und andere Programm lassen sich nicht installieren



Hallo!
Habe seit heute morgen ein ziemliches Problem mit meinem PC. Nach Start des PC, bekam ich eine Fehlermeldung, dass der Papierkorb defekt ist. Weiters funktionierte mein Mail nicht mehr. Nach Systemwiederherstellung bekam ich mehrere Fehlermeldungen, die ich in Laufe des Tages beheben konnte.

Versuche nun schon seit Stunden mein Antivirusprogramm zu installieren. Es funkt nicht. Auch nicht, Antivir, Kasperksy, usw ... .

Ich weiß nicht mehr weiter, ich kann kein Programm installieren.

Bitte um eure Hilfe!

Besten Dank!!

Geändert von Quella1977 (12.01.2015 um 16:04 Uhr)

Alt 12.01.2015, 16:12   #2
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Antivirus und andere Programm lassen sich nicht installieren - Standard

Antivirus und andere Programm lassen sich nicht installieren



Hallo und

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!




Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)



Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
__________________

__________________

Alt 12.01.2015, 17:01   #3
Quella1977
 
Antivirus und andere Programm lassen sich nicht installieren - Standard

Antivirus und andere Programm lassen sich nicht installieren



Hallo!

Zuerst möchte ich dir für deine Hilfe danken!!

Nein, ich habe bis jetzt keine Logs. Weiters möchte ich dich darauf hinweisen, dass ich diesen PC privat und beruflich nutze. Gibt es dabei ein Problem?

Vielen lieben Dank,
Susanne


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-01-2015
Ran by susi (administrator) on EMESA_PC-THINK on 12-01-2015 16:55:39
Running from C:\Users\susi\Downloads
Loaded Profile: susi (Available profiles: ***_PC & susi)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(Authentec Inc.) C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
(Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcDeskBandHlpr.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CamMute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe
(Seagate Technology LLC) C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.DASWindowsService.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe
(Seagate Technology LLC) C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\MobileService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe
(Ulead Systems, Inc.) C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\SvcGuiHlpr.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Ricoh co.,Ltd.) C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\Rescue and Recovery\rrservice.exe
(Lenovo Group Limited) C:\Program Files (x86)\Common Files\Lenovo\Scheduler\scheduler_proxy.exe
(Lenovo Group Limited) C:\Program Files (x86)\ThinkPad\Utilities\SCHTASK.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Message Center Plus\MCPLaunch.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Lenovo) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe
(Farbar) C:\Users\susi\Downloads\FRST64 (2).exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2876816 2013-03-12] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13535304 2013-04-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1307720 2013-04-24] (Realtek Semiconductor)
HKLM\...\Run: [TpShocks] => C:\Windows\system32\TpShocks.exe [384344 2014-02-17] (Lenovo.)
HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [295712 2014-08-07] (Lenovo Group Limited)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [AcWin7Hlpr] => C:\Program Files (x86)\Lenovo\Access Connections\AcTBenabler.exe [63776 2014-07-10] (Lenovo)
HKLM-x32\...\Run: [RotateImage] => C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [55808 2008-10-30] (Ricoh co.,Ltd.)
HKLM-x32\...\Run: [PWMTRV] => rundll32 "C:\Program Files (x86)\ThinkPad\Utilities\PWMTR64V.DLL",PwrMgrBkGndMonitor
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-27] (Intel Corporation)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [Lenovo Registration] => C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe [4315872 2011-06-01] (Lenovo, Inc.)
HKLM-x32\...\Run: [Fastboot] => C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [733936 2013-04-12] (Lenovo)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [41360 2014-12-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [840592 2014-12-03] (Adobe Systems Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [189480 2014-02-06] (Geek Software GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [DBAgent] => C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\DBAgent.exe [1519176 2014-02-10] (Seagate Technology LLC)
HKLM-x32\...\Run: [Launch Backup Service Once] => C:\Program Files (x86)\Lenovo\Rescue and Recovery\rrstrigger.exe [135016 2013-09-25] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\psfus: C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll (Authentec Inc.)
Lsa: [Notification Packages] scecli C:\Program Files\ThinkPad\Bluetooth Software\BtwProximityCP.dll C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
HKU\S-1-5-21-1496927015-3491850535-1898123945-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13-comm.msn.com/?pc=LNJB
HKU\S-1-5-21-1496927015-3491850535-1898123945-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13-comm.msn.com/?pc=LNJB
HKU\S-1-5-21-1496927015-3491850535-1898123945-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/welcome/thinkpad
HKU\S-1-5-21-1496927015-3491850535-1898123945-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\susi\AppData\Roaming\Mozilla\Firefox\Profiles\0uplgfza.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_246.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_246.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2013-10-22]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\susi\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\susi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-12]
CHR Extension: (Google Docs) - C:\Users\susi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-01-12]
CHR Extension: (Google Drive) - C:\Users\susi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-12]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\susi\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-01-12]
CHR Extension: (YouTube) - C:\Users\susi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-12]
CHR Extension: (Google-Suche) - C:\Users\susi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-12]
CHR Extension: (Google Tabellen) - C:\Users\susi\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-12]
CHR Extension: (Google Wallet) - C:\Users\susi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-12]
CHR Extension: (Google Mail) - C:\Users\susi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-12]
CHR HKLM-x32\...\Chrome\Extension: [bmiabdepfhhiieiipmeecdmeljggmfee] - No Path
CHR HKLM-x32\...\Chrome\Extension: [dflinnddekagfkncpgojoppgnppfkbkj] - No Path

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 AeLookupSvc; C:\Windows\System32\aelupsvc.dll [72192 2009-07-14] (Microsoft Corporation) [File not signed]
S3 ALG; C:\Windows\System32\alg.exe [79360 2009-07-14] (Microsoft Corporation) [File not signed]
S3 AppIDSvc; C:\Windows\System32\appidsvc.dll [32256 2014-08-19] (Microsoft Corporation) [File not signed]
R3 Appinfo; C:\Windows\System32\appinfo.dll [70144 2013-02-27] (Microsoft Corporation) [File not signed]
S3 AppMgmt; C:\Windows\System32\appmgmts.dll [193536 2009-07-14] (Microsoft Corporation) [File not signed]
S3 AppMgmt; C:\Windows\SysWOW64\appmgmts.dll [149504 2009-07-14] (Microsoft Corporation) [File not signed]
R2 AudioEndpointBuilder; C:\Windows\System32\Audiosrv.dll [680960 2014-10-03] (Microsoft Corporation) [File not signed]
R2 AudioSrv; C:\Windows\System32\Audiosrv.dll [680960 2014-10-03] (Microsoft Corporation) [File not signed]
S3 AxInstSV; C:\Windows\System32\AxInstSV.dll [114688 2010-11-21] (Microsoft Corporation) [File not signed]
S3 BDESVC; C:\Windows\System32\bdesvc.dll [100864 2009-07-14] (Microsoft Corporation) [File not signed]
R2 BFE; C:\Windows\System32\bfe.dll [705024 2010-11-21] (Microsoft Corporation) [File not signed]
R2 BITS; C:\Windows\System32\qmgr.dll [849920 2010-11-21] (Microsoft Corporation) [File not signed]
R3 Browser; C:\Windows\System32\browser.dll [136704 2013-02-11] (Microsoft Corporation) [File not signed]
S3 bthserv; C:\Windows\system32\bthserv.dll [83968 2009-07-14] (Microsoft Corporation) [File not signed]
S3 CertPropSvc; C:\Windows\System32\certprop.dll [80384 2010-11-21] (Microsoft Corporation) [File not signed]
R2 CryptSvc; C:\Windows\system32\cryptsvc.dll [187904 2014-07-07] (Microsoft Corporation) [File not signed]
R2 CryptSvc; C:\Windows\SysWOW64\cryptsvc.dll [143872 2014-07-07] (Microsoft Corporation) [File not signed]
R2 CscService; C:\Windows\System32\cscsvc.dll [692224 2010-11-21] (Microsoft Corporation) [File not signed]
R2 DcomLaunch; C:\Windows\system32\rpcss.dll [512000 2010-11-21] (Microsoft Corporation) [File not signed]
S3 defragsvc; C:\Windows\System32\defragsvc.dll [291328 2009-07-14] (Microsoft Corporation) [File not signed]
R2 Dhcp; C:\Windows\system32\dhcpcore.dll [317952 2010-11-21] (Microsoft Corporation) [File not signed]
R2 Dhcp; C:\Windows\SysWOW64\dhcpcore.dll [254464 2010-11-21] (Microsoft Corporation) [File not signed]
R2 Dnscache; C:\Windows\System32\dnsrslvr.dll [183296 2013-02-11] (Microsoft Corporation) [File not signed]
S3 dot3svc; C:\Windows\System32\dot3svc.dll [252416 2010-11-21] (Microsoft Corporation) [File not signed]
S3 DozeSvc; C:\Program Files (x86)\ThinkPad\Utilities\DZSVC64.EXE [320576 2012-05-15] (Lenovo.)
R2 DPS; C:\Windows\system32\dps.dll [162816 2010-11-21] (Microsoft Corporation) [File not signed]
R3 EapHost; C:\Windows\System32\eapsvc.dll [111104 2009-07-14] (Microsoft Corporation) [File not signed]
R2 EFS; C:\Windows\System32\lsass.exe [31232 2014-04-12] (Microsoft Corporation) [File not signed]
S3 ehRecvr; C:\Windows\ehome\ehRecvr.exe [696832 2010-11-21] (Microsoft Corporation) [File not signed]
S3 ehSched; C:\Windows\ehome\ehsched.exe [127488 2009-07-14] (Microsoft Corporation) [File not signed]
R2 eventlog; C:\Windows\System32\wevtsvc.dll [1646080 2010-11-21] (Microsoft Corporation) [File not signed]
R2 EventSystem; C:\Windows\system32\es.dll [402944 2009-07-14] (Microsoft Corporation) [File not signed]
R2 EventSystem; C:\Windows\SysWOW64\es.dll [271360 2009-07-14] (Microsoft Corporation) [File not signed]
R2 FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [140016 2013-04-12] (Lenovo)
S3 Fax; C:\Windows\system32\fxssvc.exe [689152 2010-11-21] (Microsoft Corporation) [File not signed]
R3 fdPHost; C:\Windows\system32\fdPHost.dll [16384 2009-07-14] (Microsoft Corporation) [File not signed]
R2 FDResPub; C:\Windows\system32\fdrespub.dll [34816 2009-07-14] (Microsoft Corporation) [File not signed]
R2 FontCache; C:\Windows\system32\FntCache.dll [1175552 2013-09-11] (Microsoft Corporation) [File not signed]
R2 gpsvc; C:\Windows\System32\gpsvc.dll [777728 2010-11-21] (Microsoft Corporation) [File not signed]
R3 hidserv; C:\Windows\system32\hidserv.dll [38912 2009-07-14] (Microsoft Corporation) [File not signed]
R3 hidserv; C:\Windows\SysWOW64\hidserv.dll [49152 2009-07-14] (Microsoft Corporation) [File not signed]
S3 hkmsvc; C:\Windows\system32\kmsvc.dll [90624 2010-11-21] (Microsoft Corporation) [File not signed]
S3 HomeGroupListener; C:\Windows\system32\ListSvc.dll [232448 2010-11-21] (Microsoft Corporation) [File not signed]
S3 HomeGroupProvider; C:\Windows\system32\provsvc.dll [187904 2010-11-21] (Microsoft Corporation) [File not signed]
S3 HomeGroupProvider; C:\Windows\SysWOW64\provsvc.dll [165376 2010-11-21] (Microsoft Corporation) [File not signed]
S3 IEEtwCollectorService; C:\Windows\system32\IEEtwCollector.exe [114688 2014-11-22] (Microsoft Corporation) [File not signed]
R2 IKEEXT; C:\Windows\System32\ikeext.dll [859648 2013-10-12] (Microsoft Corporation) [File not signed]
R2 IPBusEnum; C:\Windows\system32\ipbusenum.dll [101888 2009-07-14] (Microsoft Corporation) [File not signed]
R2 iphlpsvc; C:\Windows\System32\iphlpsvc.dll [569344 2013-02-11] (Microsoft Corporation) [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-29] (Intel Corporation)
R3 KeyIso; C:\Windows\system32\lsass.exe [31232 2014-04-12] (Microsoft Corporation) [File not signed]
S3 KtmRm; C:\Windows\system32\msdtckrm.dll [368640 2009-07-14] (Microsoft Corporation) [File not signed]
R2 LanmanServer; C:\Windows\system32\srvsvc.dll [236032 2010-11-21] (Microsoft Corporation) [File not signed]
R2 LanmanWorkstation; C:\Windows\System32\wkssvc.dll [118784 2010-11-21] (Microsoft Corporation) [File not signed]
S3 Lenovo EasyPlus Hotspot; C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin\EPHotspot64.exe [619776 2014-12-05] (Lenovo)
R2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [197408 2014-08-07] (Lenovo Group Limited)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited)
S3 lltdsvc; C:\Windows\System32\lltdsvc.dll [300032 2009-07-14] (Microsoft Corporation) [File not signed]
R2 lmhosts; C:\Windows\System32\lmhsvc.dll [23552 2009-07-14] (Microsoft Corporation) [File not signed]
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [272776 2014-10-16] ()
S4 Mcx2Svc; C:\Windows\system32\Mcx2Svc.dll [84992 2010-11-21] (Microsoft Corporation) [File not signed]
R2 MMCSS; C:\Windows\system32\mmcss.dll [67584 2009-07-14] (Microsoft Corporation) [File not signed]
R2 MpsSvc; C:\Windows\system32\mpssvc.dll [828416 2010-11-21] (Microsoft Corporation) [File not signed]
S3 MSDTC; C:\Windows\System32\msdtc.exe [141824 2009-07-14] (Microsoft Corporation) [File not signed]
S3 MSiSCSI; C:\Windows\system32\iscsiexe.dll [156672 2009-07-14] (Microsoft Corporation) [File not signed]
S3 msiserver; C:\Windows\System32\msiexec.exe [128000 2010-11-21] (Microsoft Corporation) [File not signed]
S3 msiserver; C:\WINDOWS\SysWOW64\msiexec.exe [73216 2010-11-21] (Microsoft Corporation) [File not signed]
S3 napagent; C:\Windows\system32\qagentRT.dll [476160 2010-11-21] (Microsoft Corporation) [File not signed]
S3 Netlogon; C:\Windows\system32\lsass.exe [31232 2014-04-12] (Microsoft Corporation) [File not signed]
R3 Netman; C:\Windows\System32\netman.dll [360448 2009-07-14] (Microsoft Corporation) [File not signed]
R3 netprofm; C:\Windows\System32\netprofm.dll [459776 2009-07-14] (Microsoft Corporation) [File not signed]
R3 netprofm; C:\Windows\SysWOW64\netprofm.dll [360448 2009-07-14] (Microsoft Corporation) [File not signed]
R2 NlaSvc; C:\Windows\System32\nlasvc.dll [303104 2013-02-11] (Microsoft Corporation) [File not signed]
R2 nsi; C:\Windows\system32\nsisvc.dll [25600 2009-07-14] (Microsoft Corporation) [File not signed]
S3 p2pimsvc; C:\Windows\system32\pnrpsvc.dll [327168 2009-07-14] (Microsoft Corporation) [File not signed]
S3 p2psvc; C:\Windows\system32\p2psvc.dll [438784 2009-07-14] (Microsoft Corporation) [File not signed]
R2 PcaSvc; C:\Windows\System32\pcasvc.dll [188416 2014-07-07] (Microsoft Corporation) [File not signed]
S3 PeerDistSvc; C:\Windows\system32\peerdistsvc.dll [1361920 2009-07-14] (Microsoft Corporation) [File not signed]
S3 PerfHost; C:\Windows\SysWow64\perfhost.exe [20992 2009-07-14] (Microsoft Corporation) [File not signed]
S3 pla; C:\Windows\system32\pla.dll [1389056 2010-11-21] (Microsoft Corporation) [File not signed]
S3 pla; C:\Windows\SysWOW64\pla.dll [1508864 2010-11-21] (Microsoft Corporation) [File not signed]
R2 PlugPlay; C:\Windows\system32\umpnpmgr.dll [404480 2013-02-11] (Microsoft Corporation) [File not signed]
S3 PNRPAutoReg; C:\Windows\system32\pnrpauto.dll [25088 2009-07-14] (Microsoft Corporation) [File not signed]
S3 PNRPsvc; C:\Windows\system32\pnrpsvc.dll [327168 2009-07-14] (Microsoft Corporation) [File not signed]
R3 PolicyAgent; C:\Windows\System32\ipsecsvc.dll [501248 2010-11-21] (Microsoft Corporation) [File not signed]
R2 Power; C:\Windows\system32\umpo.dll [163840 2013-09-11] (Microsoft Corporation) [File not signed]
R2 ProfSvc; C:\Windows\system32\profsvc.dll [209920 2013-02-11] (Microsoft Corporation) [File not signed]
S3 ProtectedStorage; C:\Windows\system32\lsass.exe [31232 2014-04-12] (Microsoft Corporation) [File not signed]
S3 QWAVE; C:\Windows\system32\qwave.dll [242688 2009-07-14] (Microsoft Corporation) [File not signed]
S3 RasAuto; C:\Windows\System32\rasauto.dll [99328 2009-07-14] (Microsoft Corporation) [File not signed]
S3 RasMan; C:\Windows\System32\rasmans.dll [344064 2010-11-21] (Microsoft Corporation) [File not signed]
S4 RemoteAccess; C:\Windows\System32\mprdim.dll [97792 2009-07-14] (Microsoft Corporation) [File not signed]
S4 RemoteAccess; C:\Windows\SysWOW64\mprdim.dll [75264 2009-07-14] (Microsoft Corporation) [File not signed]
S3 RemoteRegistry; C:\Windows\system32\regsvc.dll [159232 2009-07-14] (Microsoft Corporation) [File not signed]
R2 RpcEptMapper; C:\Windows\System32\RpcEpMap.dll [67072 2009-07-14] (Microsoft Corporation) [File not signed]
S3 RpcLocator; C:\Windows\system32\locator.exe [10240 2009-07-14] (Microsoft Corporation) [File not signed]
R2 RpcSs; C:\Windows\system32\rpcss.dll [512000 2010-11-21] (Microsoft Corporation) [File not signed]
R2 SamSs; C:\Windows\system32\lsass.exe [31232 2014-04-12] (Microsoft Corporation) [File not signed]
S3 SCardSvr; C:\Windows\System32\SCardSvr.dll [190976 2009-07-14] (Microsoft Corporation) [File not signed]
R2 Schedule; C:\Windows\system32\schedsvc.dll [1110016 2010-11-21] (Microsoft Corporation) [File not signed]
S3 SCPolicySvc; C:\Windows\System32\certprop.dll [80384 2010-11-21] (Microsoft Corporation) [File not signed]
R3 SDRSVC; C:\Windows\System32\SDRSVC.dll [170496 2010-11-21] (Microsoft Corporation) [File not signed]
R2 Seagate Dashboard Services; C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.DASWindowsService.exe [16000 2014-02-10] (Seagate Technology LLC)
R2 Seagate MobileBackup Service; C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\MobileService.exe [157264 2014-02-10] (Seagate Technology LLC)
S3 seclogon; C:\Windows\system32\seclogon.dll [30720 2010-11-21] (Microsoft Corporation) [File not signed]
R2 SENS; C:\Windows\System32\sens.dll [64512 2009-07-14] (Microsoft Corporation) [File not signed]
R2 SENS; C:\Windows\SysWOW64\sens.dll [49664 2009-07-14] (Microsoft Corporation) [File not signed]
S3 SensrSvc; C:\Windows\system32\sensrsvc.dll [29184 2009-07-14] (Microsoft Corporation) [File not signed]
S3 SessionEnv; C:\Windows\system32\sessenv.dll [121856 2010-11-21] (Microsoft Corporation) [File not signed]
S3 SessionEnv; C:\Windows\SysWOW64\sessenv.dll [113664 2010-11-21] (Microsoft Corporation) [File not signed]
S3 SharedAccess; C:\Windows\System32\ipnathlp.dll [359424 2009-07-14] (Microsoft Corporation) [File not signed]
R2 ShellHWDetection; C:\Windows\System32\shsvcs.dll [370688 2010-11-21] (Microsoft Corporation) [File not signed]
R2 ShellHWDetection; C:\Windows\SysWOW64\shsvcs.dll [328192 2010-11-21] (Microsoft Corporation) [File not signed]
S3 SNMPTRAP; C:\Windows\System32\snmptrap.exe [14336 2009-07-14] (Microsoft Corporation) [File not signed]
R2 Spooler; C:\Windows\System32\spoolsv.exe [559104 2013-02-11] (Microsoft Corporation) [File not signed]
R2 sppsvc; C:\Windows\system32\sppsvc.exe [3524608 2010-11-21] (Microsoft Corporation) [File not signed]
S3 sppuinotify; C:\Windows\system32\sppuinotify.dll [65536 2009-07-14] (Microsoft Corporation) [File not signed]
R3 SSDPSRV; C:\Windows\System32\ssdpsrv.dll [193024 2009-07-14] (Microsoft Corporation) [File not signed]
S3 SstpSvc; C:\Windows\system32\sstpsvc.dll [75264 2009-07-14] (Microsoft Corporation) [File not signed]
R2 stisvc; C:\Windows\System32\wiaservc.dll [580096 2010-11-21] (Microsoft Corporation) [File not signed]
S3 StorSvc; C:\Windows\system32\storsvc.dll [17920 2009-07-14] (Microsoft Corporation) [File not signed]
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [24560 2014-06-18] ()
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 swprv; C:\Windows\System32\swprv.dll [524288 2009-07-14] (Microsoft Corporation) [File not signed]
R2 SysMain; C:\Windows\system32\sysmain.dll [1743360 2010-11-21] (Microsoft Corporation) [File not signed]
S3 TabletInputService; C:\Windows\System32\TabSvc.dll [92672 2010-11-21] (Microsoft Corporation) [File not signed]
S3 TapiSrv; C:\Windows\System32\tapisrv.dll [316928 2010-11-21] (Microsoft Corporation) [File not signed]
S3 TapiSrv; C:\Windows\SysWOW64\tapisrv.dll [242176 2010-11-21] (Microsoft Corporation) [File not signed]
S3 TBS; C:\Windows\System32\tbssvc.dll [65536 2009-07-14] (Microsoft Corporation) [File not signed]
S3 TermService; C:\Windows\System32\termsrv.dll [683520 2014-10-14] (Microsoft Corporation) [File not signed]
R2 Themes; C:\Windows\system32\themeservice.dll [44544 2009-07-14] (Microsoft Corporation) [File not signed]
S4 ThinkVantage Registry Monitor Service; C:\Program Files (x86)\Common Files\Lenovo\tvt_reg_monitor_svc.exe [1028096 2010-08-31] (Lenovo Group Limited) [File not signed]
S3 THREADORDER; C:\Windows\system32\mmcss.dll [67584 2009-07-14] (Microsoft Corporation) [File not signed]
R2 TrkWks; C:\Windows\System32\trkwks.dll [119808 2009-07-14] (Microsoft Corporation) [File not signed]
R3 TrustedInstaller; C:\Windows\servicing\TrustedInstaller.exe [194048 2010-11-21] (Microsoft Corporation) [File not signed]
R3 TVT Backup Service; C:\Program Files (x86)\Lenovo\Rescue and Recovery\rrservice.exe [1526120 2013-09-25] (Lenovo Group Limited)
S3 UI0Detect; C:\Windows\system32\UI0Detect.exe [40960 2009-07-14] (Microsoft Corporation) [File not signed]
R2 UleadBurningHelper; C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [61440 2008-01-10] (Ulead Systems, Inc.) [File not signed]
S3 UmRdpService; C:\Windows\System32\umrdp.dll [214528 2010-11-21] (Microsoft Corporation) [File not signed]
S3 upnphost; C:\Windows\System32\upnphost.dll [353792 2009-07-14] (Microsoft Corporation) [File not signed]
S3 upnphost; C:\Windows\SysWOW64\upnphost.dll [266752 2009-07-14] (Microsoft Corporation) [File not signed]
R2 UxSms; C:\Windows\System32\uxsms.dll [38912 2009-07-14] (Microsoft Corporation) [File not signed]
S3 VaultSvc; C:\Windows\system32\lsass.exe [31232 2014-04-12] (Microsoft Corporation) [File not signed]
S3 vds; C:\Windows\System32\vds.exe [533504 2010-11-21] (Microsoft Corporation) [File not signed]
S3 VSS; C:\Windows\system32\vssvc.exe [1600512 2010-11-21] (Microsoft Corporation) [File not signed]
S3 W32Time; C:\Windows\system32\w32time.dll [381952 2009-07-14] (Microsoft Corporation) [File not signed]
S3 wbengine; C:\Windows\system32\wbengine.exe [1504256 2010-11-21] (Microsoft Corporation) [File not signed]
S3 WbioSrvc; C:\Windows\System32\wbiosrvc.dll [202240 2009-07-14] (Microsoft Corporation) [File not signed]
S3 wcncsvc; C:\Windows\System32\wcncsvc.dll [367104 2010-11-21] (Microsoft Corporation) [File not signed]
S3 wcncsvc; C:\Windows\SysWOW64\wcncsvc.dll [276992 2010-11-21] (Microsoft Corporation) [File not signed]
S3 WcsPlugInService; C:\Windows\System32\WcsPlugInService.dll [40960 2009-07-14] (Microsoft Corporation) [File not signed]
S3 WcsPlugInService; C:\Windows\SysWOW64\WcsPlugInService.dll [32768 2009-07-14] (Microsoft Corporation) [File not signed]
R3 WdiServiceHost; C:\Windows\system32\wdi.dll [90624 2009-07-14] (Microsoft Corporation) [File not signed]
R3 WdiServiceHost; C:\Windows\SysWOW64\wdi.dll [76288 2009-07-14] (Microsoft Corporation) [File not signed]
R3 WdiSystemHost; C:\Windows\system32\wdi.dll [90624 2009-07-14] (Microsoft Corporation) [File not signed]
R3 WdiSystemHost; C:\Windows\SysWOW64\wdi.dll [76288 2009-07-14] (Microsoft Corporation) [File not signed]
S3 WebClient; C:\Windows\System32\webclnt.dll [259584 2013-07-04] (Microsoft Corporation) [File not signed]
S3 WebClient; C:\Windows\SysWOW64\webclnt.dll [205824 2013-07-04] (Microsoft Corporation) [File not signed]
S3 Wecsvc; C:\Windows\system32\wecsvc.dll [237568 2009-07-14] (Microsoft Corporation) [File not signed]
S3 wercplsupport; C:\Windows\System32\wercplsupport.dll [84480 2009-07-14] (Microsoft Corporation) [File not signed]
S3 WerSvc; C:\Windows\System32\WerSvc.dll [76800 2009-07-14] (Microsoft Corporation) [File not signed]
S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) [File not signed]
R3 WinHttpAutoProxySvc; C:\Windows\system32\winhttp.dll [444416 2010-11-21] (Microsoft Corporation) [File not signed]
R3 WinHttpAutoProxySvc; C:\Windows\SysWOW64\winhttp.dll [351232 2010-11-21] (Microsoft Corporation) [File not signed]
R2 Winmgmt; C:\Windows\system32\wbem\WMIsvc.dll [242688 2009-07-14] (Microsoft Corporation) [File not signed]
S3 WinRM; C:\Windows\system32\WsmSvc.dll [2020352 2014-10-03] (Microsoft Corporation) [File not signed]
S3 WinRM; C:\Windows\SysWOW64\WsmSvc.dll [1177088 2014-10-03] (Microsoft Corporation) [File not signed]
R2 Wlansvc; C:\Windows\System32\wlansvc.dll [886784 2009-07-14] (Microsoft Corporation) [File not signed]
S3 wmiApSrv; C:\Windows\system32\wbem\WmiApSrv.exe [203264 2009-07-14] (Microsoft Corporation) [File not signed]
S3 WMPNetworkSvc; C:\Program Files\Windows Media Player\wmpnetwk.exe [1525248 2010-11-21] (Microsoft Corporation) [File not signed]
S3 WPCSvc; C:\Windows\System32\wpcsvc.dll [12288 2009-07-14] (Microsoft Corporation) [File not signed]
S3 WPCSvc; C:\Windows\SysWOW64\wpcsvc.dll [10752 2009-07-14] (Microsoft Corporation) [File not signed]
S3 WPDBusEnum; C:\Windows\system32\wpdbusenum.dll [117248 2010-11-21] (Microsoft Corporation) [File not signed]
R2 wscsvc; C:\Windows\System32\wscsvc.dll [97280 2009-07-14] (Microsoft Corporation) [File not signed]
R2 WSearch; C:\Windows\system32\SearchIndexer.exe [591872 2013-02-11] (Microsoft Corporation) [File not signed]
R2 WSearch; C:\Windows\SysWOW64\SearchIndexer.exe [427520 2013-02-11] (Microsoft Corporation) [File not signed]
R3 wudfsvc; C:\Windows\System32\WUDFSvc.dll [84992 2012-07-26] (Microsoft Corporation) [File not signed]
S3 WwanSvc; C:\Windows\System32\wwansvc.dll [228864 2014-01-28] (Microsoft Corporation) [File not signed]
S3 COMSysApp; %SystemRoot%\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 1394ohci; C:\Windows\system32\drivers\1394ohci.sys [229888 2010-11-21] (Microsoft Corporation) [File not signed]
R3 5U877; C:\Windows\System32\DRIVERS\5U877.sys [214912 2012-01-25] (Ricoh co.,Ltd.) [File not signed]
S3 AcpiPmi; C:\Windows\system32\drivers\acpipmi.sys [12800 2010-11-21] (Microsoft Corporation) [File not signed]
R1 AFD; C:\Windows\system32\drivers\afd.sys [497152 2014-05-30] (Microsoft Corporation) [File not signed]
S3 AmdK8; C:\Windows\system32\drivers\amdk8.sys [64512 2009-07-14] (Microsoft Corporation) [File not signed]
S3 AmdPPM; C:\Windows\system32\drivers\amdppm.sys [60928 2009-07-14] (Microsoft Corporation) [File not signed]
S3 AppID; C:\Windows\system32\drivers\appid.sys [61440 2014-08-19] (Microsoft Corporation) [File not signed]
S3 AsyncMac; C:\Windows\System32\DRIVERS\asyncmac.sys [23040 2009-07-14] (Microsoft Corporation) [File not signed]
S3 b06bdrv; C:\Windows\system32\drivers\bxvbda.sys [468480 2009-06-10] (Broadcom Corporation) [File not signed]
S3 b57nd60a; C:\Windows\System32\DRIVERS\b57nd60a.sys [270848 2009-06-10] (Broadcom Corporation) [File not signed]
S3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [163368 2012-04-01] (Broadcom Corporation.)
R1 Beep; C:\Windows\System32\Drivers\Beep.sys [6656 2009-07-14] (Microsoft Corporation) [File not signed]
R1 blbdrive; C:\Windows\System32\DRIVERS\blbdrive.sys [45056 2009-07-14] (Microsoft Corporation) [File not signed]
R3 bowser; C:\Windows\System32\DRIVERS\bowser.sys [90624 2011-02-23] (Microsoft Corporation) [File not signed]
S3 BrFiltLo; C:\Windows\system32\drivers\BrFiltLo.sys [18432 2009-06-10] (Brother Industries, Ltd.) [File not signed]
S3 BrFiltUp; C:\Windows\system32\drivers\BrFiltUp.sys [8704 2009-06-10] (Brother Industries, Ltd.) [File not signed]
S3 Brserid; C:\Windows\System32\Drivers\Brserid.sys [286720 2009-07-14] (Brother Industries Ltd.) [File not signed]
S3 BrSerWdm; C:\Windows\System32\Drivers\BrSerWdm.sys [47104 2009-06-10] (Brother Industries Ltd.) [File not signed]
S3 BrUsbMdm; C:\Windows\System32\Drivers\BrUsbMdm.sys [14976 2009-06-10] (Brother Industries Ltd.) [File not signed]
S3 BrUsbSer; C:\Windows\System32\Drivers\BrUsbSer.sys [14720 2009-06-10] (Brother Industries Ltd.) [File not signed]
S3 BthEnum; C:\Windows\System32\DRIVERS\BthEnum.sys [41984 2009-07-14] (Microsoft Corporation) [File not signed]
S3 BTHMODEM; C:\Windows\system32\drivers\bthmodem.sys [72192 2009-07-14] (Microsoft Corporation) [File not signed]
S3 BthPan; C:\Windows\System32\DRIVERS\bthpan.sys [118784 2009-07-14] (Microsoft Corporation) [File not signed]
S3 BTHPORT; C:\Windows\System32\Drivers\BTHport.sys [552960 2013-02-11] (Microsoft Corporation) [File not signed]
S3 BTHUSB; C:\Windows\System32\Drivers\BTHUSB.sys [80384 2013-02-11] (Microsoft Corporation) [File not signed]
S4 cdfs; C:\Windows\System32\DRIVERS\cdfs.sys [92160 2009-07-14] (Microsoft Corporation) [File not signed]
S1 cdrom; C:\Windows\System32\DRIVERS\cdrom.sys [147456 2010-11-21] (Microsoft Corporation) [File not signed]
S3 circlass; C:\Windows\system32\drivers\circlass.sys [45568 2009-07-14] (Microsoft Corporation) [File not signed]
R3 CmBatt; C:\Windows\System32\DRIVERS\CmBatt.sys [17664 2009-07-14] (Microsoft Corporation) [File not signed]
R3 CompositeBus; C:\Windows\System32\DRIVERS\CompositeBus.sys [38912 2010-11-21] (Microsoft Corporation) [File not signed]
R1 CSC; C:\Windows\System32\drivers\csc.sys [514560 2010-11-21] (Microsoft Corporation) [File not signed]
R1 DfsC; C:\Windows\System32\Drivers\dfsc.sys [102400 2010-11-21] (Microsoft Corporation) [File not signed]
R1 discache; C:\Windows\System32\drivers\discache.sys [40448 2009-07-14] (Microsoft Corporation) [File not signed]
S3 dmvsc; C:\Windows\system32\drivers\dmvsc.sys [71168 2010-11-21] (Microsoft Corporation) [File not signed]
S3 drmkaud; C:\Windows\system32\drivers\drmkaud.sys [5632 2009-07-14] (Microsoft Corporation) [File not signed]
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) [File not signed]
S3 ErrDev; C:\Windows\system32\drivers\errdev.sys [9728 2009-07-14] (Microsoft Corporation) [File not signed]
S3 exfat; C:\Windows\System32\Drivers\exfat.sys [195072 2009-07-14] (Microsoft Corporation) [File not signed]
S3 Fastboot; C:\Windows\System32\DRIVERS\fastboot.sys [55536 2013-04-12] (Windows (R) Win 7 DDK provider)
R3 fastfat; C:\Windows\System32\Drivers\fastfat.sys [204800 2009-07-14] (Microsoft Corporation) [File not signed]
S3 fdc; C:\Windows\system32\drivers\fdc.sys [29696 2009-07-14] (Microsoft Corporation) [File not signed]
S3 Filetrace; C:\Windows\System32\drivers\filetrace.sys [34304 2009-07-14] (Microsoft Corporation) [File not signed]
S3 flpydisk; C:\Windows\system32\drivers\flpydisk.sys [24576 2009-07-14] (Microsoft Corporation) [File not signed]
S3 hcw85cir; C:\Windows\system32\drivers\hcw85cir.sys [31232 2009-06-10] (Hauppauge Computer Works, Inc.) [File not signed]
S3 HdAudAddService; C:\Windows\System32\drivers\HdAudio.sys [350208 2010-11-21] (Microsoft Corporation) [File not signed]
R3 HDAudBus; C:\Windows\System32\DRIVERS\HDAudBus.sys [122368 2010-11-21] (Microsoft Corporation) [File not signed]
S3 HidBatt; C:\Windows\system32\drivers\HidBatt.sys [26624 2009-07-14] (Microsoft Corporation) [File not signed]
S3 HidBth; C:\Windows\system32\drivers\hidbth.sys [100864 2009-07-14] (Microsoft Corporation) [File not signed]
S3 HidIr; C:\Windows\system32\drivers\hidir.sys [46592 2009-07-14] (Microsoft Corporation) [File not signed]
R3 HidUsb; C:\Windows\System32\DRIVERS\hidusb.sys [30208 2010-11-21] (Microsoft Corporation) [File not signed]
R3 HTTP; C:\Windows\System32\drivers\HTTP.sys [753664 2010-11-21] (Microsoft Corporation) [File not signed]
R3 i8042prt; C:\Windows\System32\DRIVERS\i8042prt.sys [105472 2009-07-14] (Microsoft Corporation) [File not signed]
R3 igfx; C:\Windows\System32\DRIVERS\igdkmd64.sys [9000256 2013-02-19] (Intel Corporation) [File not signed]
R3 IntcDAud; C:\Windows\System32\DRIVERS\IntcDAud.sys [331264 2011-12-05] (Intel(R) Corporation) [File not signed]
R3 intelppm; C:\Windows\System32\DRIVERS\intelppm.sys [62464 2009-07-14] (Microsoft Corporation) [File not signed]
S3 IpFilterDriver; C:\Windows\System32\DRIVERS\ipfltdrv.sys [82944 2010-11-21] (Microsoft Corporation) [File not signed]
S3 IPMIDRV; C:\Windows\system32\drivers\IPMIDrv.sys [78848 2010-11-21] (Microsoft Corporation) [File not signed]
S3 IPNAT; C:\Windows\System32\drivers\ipnat.sys [116224 2009-07-14] (Microsoft Corporation) [File not signed]
S3 IRENUM; C:\Windows\System32\drivers\irenum.sys [17920 2009-07-14] (Microsoft Corporation) [File not signed]
R3 kbdhid; C:\Windows\System32\DRIVERS\kbdhid.sys [33280 2010-11-21] (Microsoft Corporation) [File not signed]
R3 ksthunk; C:\Windows\system32\drivers\ksthunk.sys [20992 2009-07-14] (Microsoft Corporation) [File not signed]
R2 lltdio; C:\Windows\System32\DRIVERS\lltdio.sys [60928 2009-07-14] (Microsoft Corporation) [File not signed]
R2 luafv; C:\Windows\system32\drivers\luafv.sys [113152 2009-07-14] (Microsoft Corporation) [File not signed]
S3 Modem; C:\Windows\System32\drivers\modem.sys [40448 2009-07-14] (Microsoft Corporation) [File not signed]
R3 monitor; C:\Windows\System32\DRIVERS\monitor.sys [30208 2009-07-14] (Microsoft Corporation) [File not signed]
R3 mouhid; C:\Windows\System32\DRIVERS\mouhid.sys [31232 2009-07-14] (Microsoft Corporation) [File not signed]
R3 mpsdrv; C:\Windows\System32\drivers\mpsdrv.sys [77312 2009-07-14] (Microsoft Corporation) [File not signed]
S3 MRxDAV; C:\Windows\system32\drivers\mrxdav.sys [140800 2013-07-04] (Microsoft Corporation) [File not signed]
R3 mrxsmb; C:\Windows\System32\DRIVERS\mrxsmb.sys [158208 2013-02-11] (Microsoft Corporation) [File not signed]
R3 mrxsmb10; C:\Windows\System32\DRIVERS\mrxsmb10.sys [288768 2013-02-11] (Microsoft Corporation) [File not signed]
R3 mrxsmb20; C:\Windows\System32\DRIVERS\mrxsmb20.sys [128000 2013-02-11] (Microsoft Corporation) [File not signed]
R1 Msfs; C:\Windows\System32\Drivers\Msfs.sys [26112 2009-07-14] (Microsoft Corporation) [File not signed]
S3 mshidkmdf; C:\Windows\System32\drivers\mshidkmdf.sys [8192 2009-07-14] (Microsoft Corporation) [File not signed]
S3 MSKSSRV; C:\Windows\System32\drivers\MSKSSRV.sys [11136 2009-07-14] (Microsoft Corporation) [File not signed]
S3 MSPCLOCK; C:\Windows\System32\drivers\MSPCLOCK.sys [7168 2009-07-14] (Microsoft Corporation) [File not signed]
S3 MSPQM; C:\Windows\System32\drivers\MSPQM.sys [6784 2009-07-14] (Microsoft Corporation) [File not signed]
S3 MSTEE; C:\Windows\System32\drivers\MSTEE.sys [8064 2009-07-14] (Microsoft Corporation) [File not signed]
S3 MTConfig; C:\Windows\system32\drivers\MTConfig.sys [15360 2009-07-14] (Microsoft Corporation) [File not signed]
R3 NativeWifiP; C:\Windows\System32\DRIVERS\nwifi.sys [318976 2009-07-14] (Microsoft Corporation) [File not signed]
S3 NdisCap; C:\Windows\System32\DRIVERS\ndiscap.sys [35328 2009-07-14] (Microsoft Corporation) [File not signed]
R3 NdisTapi; C:\Windows\System32\DRIVERS\ndistapi.sys [24064 2009-07-14] (Microsoft Corporation) [File not signed]
R3 Ndisuio; C:\Windows\System32\DRIVERS\ndisuio.sys [56832 2010-11-21] (Microsoft Corporation) [File not signed]
R3 NdisWan; C:\Windows\System32\DRIVERS\ndiswan.sys [164352 2010-11-21] (Microsoft Corporation) [File not signed]
R3 NDProxy; C:\Windows\System32\Drivers\NDProxy.sys [57856 2010-11-21] (Microsoft Corporation) [File not signed]
S3 Netaapl; C:\Windows\System32\DRIVERS\netaapl64.sys [23040 2013-08-06] (Apple Inc.) [File not signed]
R1 NetBIOS; C:\Windows\System32\DRIVERS\netbios.sys [44544 2009-07-14] (Microsoft Corporation) [File not signed]
R1 NetBT; C:\Windows\System32\DRIVERS\netbt.sys [261632 2010-11-21] (Microsoft Corporation) [File not signed]
R1 Npfs; C:\Windows\System32\Drivers\Npfs.sys [44032 2009-07-14] (Microsoft Corporation) [File not signed]
R1 nsiproxy; C:\Windows\System32\drivers\nsiproxy.sys [24576 2009-07-14] (Microsoft Corporation) [File not signed]
R1 Null; C:\Windows\System32\Drivers\Null.sys [6144 2009-07-14] (Microsoft Corporation) [File not signed]
S3 ohci1394; C:\Windows\system32\drivers\ohci1394.sys [72832 2009-07-14] (Microsoft Corporation) [File not signed]
S3 Parport; C:\Windows\system32\drivers\parport.sys [97280 2009-07-14] (Microsoft Corporation) [File not signed]
R2 PEAUTH; C:\Windows\System32\drivers\peauth.sys [663552 2014-07-07] (Microsoft Corporation) [File not signed]
R3 PptpMiniport; C:\Windows\System32\DRIVERS\raspptp.sys [111104 2010-11-21] (Microsoft Corporation) [File not signed]
S3 Processor; C:\Windows\system32\drivers\processr.sys [60416 2009-07-14] (Microsoft Corporation) [File not signed]
R1 Psched; C:\Windows\System32\DRIVERS\pacer.sys [131584 2010-11-21] (Microsoft Corporation) [File not signed]
S3 QWAVEdrv; C:\Windows\system32\drivers\qwavedrv.sys [46592 2009-07-14] (Microsoft Corporation) [File not signed]
S3 RasAcd; C:\Windows\System32\DRIVERS\rasacd.sys [14848 2009-07-14] (Microsoft Corporation) [File not signed]
R3 RasAgileVpn; C:\Windows\System32\DRIVERS\AgileVpn.sys [60416 2009-07-14] (Microsoft Corporation) [File not signed]
R3 Rasl2tp; C:\Windows\System32\DRIVERS\rasl2tp.sys [129536 2010-11-21] (Microsoft Corporation) [File not signed]
R3 RasPppoe; C:\Windows\System32\DRIVERS\raspppoe.sys [92672 2009-07-14] (Microsoft Corporation) [File not signed]
R3 RasSstp; C:\Windows\System32\DRIVERS\rassstp.sys [83968 2009-07-14] (Microsoft Corporation) [File not signed]
R1 rdbss; C:\Windows\System32\DRIVERS\rdbss.sys [309248 2010-11-21] (Microsoft Corporation) [File not signed]
R3 rdpbus; C:\Windows\System32\DRIVERS\rdpbus.sys [24064 2009-07-14] (Microsoft Corporation) [File not signed]
R1 RDPCDD; C:\Windows\System32\DRIVERS\RDPCDD.sys [7680 2009-07-14] (Microsoft Corporation) [File not signed]
S3 RDPDR; C:\Windows\System32\drivers\rdpdr.sys [165888 2010-11-21] (Microsoft Corporation) [File not signed]
R1 RDPENCDD; C:\Windows\System32\drivers\rdpencdd.sys [7680 2009-07-14] (Microsoft Corporation) [File not signed]
R1 RDPREFMP; C:\Windows\System32\drivers\rdprefmp.sys [8192 2009-07-14] (Microsoft Corporation) [File not signed]
S3 RdpVideoMiniport; C:\Windows\System32\drivers\rdpvideominiport.sys [19456 2012-08-23] (Microsoft Corporation) [File not signed]
S3 RDPWD; C:\Windows\System32\Drivers\RDPWD.sys [212480 2014-07-17] (Microsoft Corporation) [File not signed]
S3 RFCOMM; C:\Windows\System32\DRIVERS\rfcomm.sys [158720 2009-07-14] (Microsoft Corporation) [File not signed]
S3 RSP2STOR; C:\Windows\System32\DRIVERS\RtsP2Stor.sys [260712 2012-01-30] (Realtek Semiconductor Corp.)
R2 rspndr; C:\Windows\System32\DRIVERS\rspndr.sys [76800 2009-07-14] (Microsoft Corporation) [File not signed]
S3 s3cap; C:\Windows\system32\drivers\vms3cap.sys [6656 2010-11-21] (Microsoft Corporation) [File not signed]
S3 scfilter; C:\Windows\System32\DRIVERS\scfilter.sys [29696 2010-11-21] (Microsoft Corporation) [File not signed]
R2 secdrv; C:\Windows\System32\Drivers\secdrv.sys [23040 2009-06-10] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [File not signed]
S3 Serenum; C:\Windows\system32\drivers\serenum.sys [23552 2009-07-14] (Microsoft Corporation) [File not signed]
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Microsoft Corporation) [File not signed]
S3 sermouse; C:\Windows\system32\drivers\sermouse.sys [26624 2009-07-14] (Microsoft Corporation) [File not signed]
S3 sffdisk; C:\Windows\system32\drivers\sffdisk.sys [14336 2009-07-14] (Microsoft Corporation) [File not signed]
S3 sffp_mmc; C:\Windows\system32\drivers\sffp_mmc.sys [13824 2009-07-14] (Microsoft Corporation) [File not signed]
S3 sffp_sd; C:\Windows\system32\drivers\sffp_sd.sys [14336 2010-11-21] (Microsoft Corporation) [File not signed]
S3 sfloppy; C:\Windows\system32\drivers\sfloppy.sys [16896 2009-07-14] (Microsoft Corporation) [File not signed]
S3 Smb; C:\Windows\System32\DRIVERS\smb.sys [93184 2009-07-14] (Microsoft Corporation) [File not signed]
R2 smihlp2; C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [13128 2011-05-30] (Authentec Inc.)
R3 srv; C:\Windows\System32\DRIVERS\srv.sys [467456 2013-02-11] (Microsoft Corporation) [File not signed]
R3 srv2; C:\Windows\System32\DRIVERS\srv2.sys [410112 2013-02-11] (Microsoft Corporation) [File not signed]
R3 srvnet; C:\Windows\System32\DRIVERS\srvnet.sys [168448 2013-02-11] (Microsoft Corporation) [File not signed]
R3 StillCam; C:\Windows\System32\DRIVERS\serscan.sys [12288 2009-07-14] (Microsoft Corporation) [File not signed]
R2 tcpipreg; C:\Windows\System32\drivers\tcpipreg.sys [45568 2013-02-11] (Microsoft Corporation) [File not signed]
S3 TDPIPE; C:\Windows\System32\drivers\tdpipe.sys [15872 2009-07-14] (Microsoft Corporation) [File not signed]
S3 TDTCP; C:\Windows\System32\drivers\tdtcp.sys [23552 2012-02-17] (Microsoft Corporation) [File not signed]
R1 tdx; C:\Windows\System32\DRIVERS\tdx.sys [119296 2014-11-11] (Microsoft Corporation) [File not signed]
R3 TPM; C:\Windows\System32\drivers\tpm.sys [38400 2009-07-14] (Microsoft Corporation) [File not signed]
S3 tssecsrv; C:\Windows\System32\DRIVERS\tssecsrv.sys [39936 2014-07-17] (Microsoft Corporation) [File not signed]
S3 TsUsbFlt; C:\Windows\System32\drivers\tsusbflt.sys [56832 2013-10-02] (Microsoft Corporation) [File not signed]
S3 TsUsbGD; C:\Windows\system32\drivers\TsUsbGD.sys [30208 2012-08-23] (Microsoft Corporation) [File not signed]
R3 tunnel; C:\Windows\System32\DRIVERS\tunnel.sys [125440 2010-11-21] (Microsoft Corporation) [File not signed]
R3 TVTI2C; C:\Windows\System32\DRIVERS\Tvti2c.sys [40248 2011-05-29] (Lenovo Information Product(ShenZhen China) Inc.)
R3 tvtvcamd; C:\Windows\System32\DRIVERS\tvtvcamd.sys [27432 2011-12-08] (ThinkVantage Communications Utility)
S4 udfs; C:\Windows\System32\DRIVERS\udfs.sys [328192 2010-11-21] (Microsoft Corporation) [File not signed]
R3 umbus; C:\Windows\System32\DRIVERS\umbus.sys [48640 2010-11-21] (Microsoft Corporation) [File not signed]
S3 UmPass; C:\Windows\System32\DRIVERS\umpass.sys [9728 2009-07-14] (Microsoft Corporation) [File not signed]
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2013-03-18] (Apple, Inc.) [File not signed]
R3 usbccgp; C:\Windows\System32\DRIVERS\usbccgp.sys [99840 2013-11-27] (Microsoft Corporation) [File not signed]
S3 usbcir; C:\Windows\system32\drivers\usbcir.sys [100864 2013-07-12] (Microsoft Corporation) [File not signed]
R3 usbehci; C:\Windows\system32\drivers\usbehci.sys [53248 2013-11-27] (Microsoft Corporation) [File not signed]
R3 usbhub; C:\Windows\System32\DRIVERS\usbhub.sys [343040 2013-11-27] (Microsoft Corporation) [File not signed]
S3 usbohci; C:\Windows\system32\drivers\usbohci.sys [25600 2013-11-27] (Microsoft Corporation) [File not signed]
S3 usbprint; C:\Windows\system32\drivers\usbprint.sys [25088 2009-07-14] (Microsoft Corporation) [File not signed]
R3 USBSTOR; C:\Windows\System32\DRIVERS\USBSTOR.SYS [91648 2013-02-11] (Microsoft Corporation) [File not signed]
S3 usbuhci; C:\Windows\system32\drivers\usbuhci.sys [30720 2013-11-27] (Microsoft Corporation) [File not signed]
S3 usbvideo; C:\Windows\System32\Drivers\usbvideo.sys [185344 2013-07-12] (Microsoft Corporation) [File not signed]
S3 vga; C:\Windows\System32\DRIVERS\vgapnp.sys [29184 2009-07-14] (Microsoft Corporation) [File not signed]
R1 VgaSave; C:\Windows\System32\drivers\vga.sys [29184 2009-07-14] (Microsoft Corporation) [File not signed]
S3 VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [21760 2010-11-21] (Microsoft Corporation) [File not signed]
R3 vwifibus; C:\Windows\System32\DRIVERS\vwifibus.sys [24576 2009-07-14] (Microsoft Corporation) [File not signed]
R1 vwififlt; C:\Windows\System32\DRIVERS\vwififlt.sys [59904 2009-07-14] (Microsoft Corporation) [File not signed]
R3 vwifimp; C:\Windows\System32\DRIVERS\vwifimp.sys [17920 2009-07-14] (Microsoft Corporation) [File not signed]
S3 WacomPen; C:\Windows\system32\drivers\wacompen.sys [27776 2009-07-14] (Microsoft Corporation) [File not signed]
S3 WANARP; C:\Windows\System32\DRIVERS\wanarp.sys [88576 2010-11-21] (Microsoft Corporation) [File not signed]
R1 Wanarpv6; C:\Windows\System32\DRIVERS\wanarp.sys [88576 2010-11-21] (Microsoft Corporation) [File not signed]
R1 WfpLwf; C:\Windows\System32\DRIVERS\wfplwf.sys [12800 2009-07-14] (Microsoft Corporation) [File not signed]
R3 WinUsb; C:\Windows\System32\DRIVERS\WinUSB.sys [41984 2010-11-21] (Microsoft Corporation) [File not signed]
R3 WmiAcpi; C:\Windows\System32\DRIVERS\wmiacpi.sys [14336 2009-07-14] (Microsoft Corporation) [File not signed]
S4 ws2ifsl; C:\Windows\system32\drivers\ws2ifsl.sys [21504 2009-07-14] (Microsoft Corporation) [File not signed]
S3 WSDPrintDevice; C:\Windows\System32\DRIVERS\WSDPrint.sys [23040 2009-07-14] (Microsoft Corporation) [File not signed]
S3 WSDScan; C:\Windows\system32\drivers\WSDScan.sys [25088 2009-07-14] (Microsoft Corporation) [File not signed]
R3 WudfPf; C:\Windows\System32\drivers\WudfPf.sys [87040 2012-07-26] (Microsoft Corporation) [File not signed]
R3 WUDFRd; C:\Windows\System32\DRIVERS\WUDFRd.sys [198656 2012-07-26] (Microsoft Corporation) [File not signed]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
U2 TMAgent; No ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-12 16:55 - 2015-01-12 16:55 - 02124288 _____ (Farbar) C:\Users\susi\Downloads\FRST64 (2).exe
2015-01-12 16:13 - 2015-01-12 16:13 - 00000000 ____D () C:\Users\susi\AppData\Roaming\PowerFolder
2015-01-12 16:10 - 2015-01-12 16:10 - 26316120 _____ (Mozilla) C:\Users\susi\Downloads\Thunderbird Setup 31.3.0.exe
2015-01-12 16:10 - 2015-01-12 16:10 - 00000000 ____D () C:\Users\susi\AppData\Roaming\Thunderbird
2015-01-12 16:10 - 2015-01-12 16:10 - 00000000 ____D () C:\Users\susi\AppData\Local\Thunderbird
2015-01-12 16:09 - 2015-01-12 16:09 - 00000000 ____D () C:\Users\susi\AppData\Roaming\Mozilla
2015-01-12 16:09 - 2015-01-12 16:09 - 00000000 ____D () C:\Users\susi\AppData\Local\Mozilla
2015-01-12 16:07 - 2015-01-12 16:07 - 04187592 _____ (Kaspersky Lab ZAO) C:\Users\susi\Downloads\tdsskiller.exe
2015-01-12 15:54 - 2015-01-12 15:54 - 02124288 _____ (Farbar) C:\Users\susi\Downloads\FRST64 (1).exe
2015-01-12 15:53 - 2015-01-12 15:53 - 00000000 _____ () C:\Users\susi\defogger_reenable
2015-01-12 15:52 - 2015-01-12 15:53 - 00000470 _____ () C:\Users\susi\Downloads\defogger_disable.log
2015-01-12 15:52 - 2015-01-12 15:53 - 00000242 _____ () C:\Users\susi\Downloads\defogger_enable.log
2015-01-12 15:52 - 2015-01-12 15:52 - 00050477 _____ () C:\Users\susi\Downloads\Defogger.exe
2015-01-12 15:16 - 2015-01-12 15:16 - 291313628 ____C () C:\Registirerungsdatei 12.01.2015.reg
2015-01-12 14:48 - 2015-01-12 14:51 - 63320784 _____ (Microsoft Corporation) C:\Users\susi\Downloads\IE11-Windows6.1-x64-de-de.exe
2015-01-12 14:48 - 2015-01-12 14:50 - 36904648 _____ (Microsoft Corporation) C:\Users\susi\Downloads\Windows-KB890830-x64-V5.19.exe
2015-01-12 14:40 - 2015-01-12 14:40 - 00347816 _____ (Microsoft Corporation) C:\Users\susi\Downloads\MicrosoftFixit.ProgramInstallUninstall.FISC.199344494501377141.1.4.Run.exe
2015-01-12 14:32 - 2015-01-12 14:32 - 01205440 _____ (Microsoft Corporation) C:\Users\susi\Downloads\NDP453-KB2969353-Web.exe
2015-01-12 14:29 - 2015-01-12 14:29 - 00347816 _____ (Microsoft Corporation) C:\Users\susi\Downloads\MicrosoftFixit.ProgramInstallUninstall.MATSKB.Run.exe
2015-01-12 14:27 - 2015-01-12 14:27 - 03327000 _____ () C:\Users\susi\Downloads\WindowsXP-KB942288-v3-x86.exe
2015-01-12 14:24 - 2015-01-12 14:28 - 205268600 _____ (Symantec Corporation) C:\Users\susi\Downloads\NIS2014_Lenovo_OEM.exe
2015-01-12 14:19 - 2015-01-12 14:20 - 14107296 _____ (Microsoft Corporation) C:\Users\susi\Downloads\mseinstall.exe
2015-01-12 14:17 - 2015-01-12 14:17 - 00347816 _____ (Microsoft Corporation) C:\Users\susi\Downloads\MicrosoftFixit.WinSecurity.FISC.199344494501377141.1.3.Run.exe
2015-01-12 13:57 - 2015-01-12 13:57 - 00347816 _____ (Microsoft Corporation) C:\Users\susi\Downloads\MicrosoftFixit.maintenance.FISC.199344494501377141.1.2.Run.exe
2015-01-12 13:55 - 2015-01-12 13:55 - 00347816 _____ (Microsoft Corporation) C:\Users\susi\Downloads\MicrosoftFixit.WinFileFolder.FISC.199344494501377141.1.1.Run.exe
2015-01-12 13:55 - 2015-01-12 13:55 - 00347816 _____ (Microsoft Corporation) C:\Users\susi\Downloads\MicrosoftFixit.WinFileFolder.FISC.199344494501377141.1.1.Run (1).exe
2015-01-12 13:51 - 2015-01-12 13:56 - 00000000 ____D () C:\Program Files (x86)\Free Window Registry Repair
2015-01-12 13:51 - 2015-01-12 13:51 - 00001046 _____ () C:\Users\TEMP.Emesa_PC-THINK.003\Desktop\Free Window Registry Repair.lnk
2015-01-12 13:51 - 2015-01-12 13:51 - 00001046 _____ () C:\Users\susi\Desktop\Free Window Registry Repair.lnk
2015-01-12 13:51 - 2015-01-12 13:51 - 00000000 ____D () C:\Users\susi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Window Registry Repair
2015-01-12 13:51 - 2015-01-12 13:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Window Registry Repair
2015-01-12 13:49 - 2015-01-12 13:50 - 00804985 _____ () C:\Users\susi\Downloads\RegpairSetup_CB-DL-Manager.exe
2015-01-12 13:49 - 2015-01-12 13:49 - 00823792 _____ ( ) C:\Users\susi\Downloads\RegpairSetup_CB-DL-Manager (1).exe
2015-01-12 13:48 - 2015-01-12 13:48 - 00000000 ____D () C:\Users\susi\AppData\Local\CrashDumps
2015-01-12 13:36 - 2015-01-12 13:40 - 00004144 _____ () C:\Windows\system32\ASOROSet.bin
2015-01-12 13:36 - 2015-01-12 13:36 - 00000000 ____D () C:\Windows\system32\config\RCCBakup
2015-01-12 13:35 - 2015-01-12 15:15 - 00000000 ____D () C:\Users\susi\AppData\Roaming\Ipswitch
2015-01-12 13:35 - 2015-01-12 13:35 - 00000000 ____D () C:\Users\susi\AppData\Roaming\reaper
2015-01-12 13:31 - 2015-01-12 13:49 - 00000000 ____D () C:\Users\susi\AppData\Roaming\Solvusoft
2015-01-12 13:31 - 2015-01-12 13:31 - 03894696 _____ (solvusoft Corporation ) C:\Users\susi\Downloads\Setup_WinThruster_2015.exe
2015-01-12 13:31 - 2012-10-15 17:02 - 00019888 _____ (solvusoft) C:\Windows\system32\roboot64.exe
2015-01-12 13:18 - 2015-01-12 13:18 - 00495712 _____ (Kaspersky Lab) C:\Users\susi\Downloads\setup.exe
2015-01-12 13:18 - 2015-01-12 13:18 - 00035283 _____ () C:\Users\susi\Downloads\Addition.txt
2015-01-12 13:16 - 2015-01-12 16:55 - 00055329 _____ () C:\Users\susi\Downloads\FRST.txt
2015-01-12 13:15 - 2015-01-12 16:55 - 00000000 ___DC () C:\FRST
2015-01-12 13:15 - 2015-01-12 13:15 - 02124288 _____ (Farbar) C:\Users\susi\Downloads\FRST64.exe
2015-01-12 13:13 - 2015-01-12 13:13 - 04549888 _____ (Avira Operations & Co. KG) C:\Users\susi\Downloads\avira_de_av_5777685461__ws.exe
2015-01-12 13:13 - 2015-01-12 13:13 - 00000000 ___DC () C:\OETemp
2015-01-12 13:09 - 2015-01-12 16:51 - 00013982 _____ () C:\Windows\PFRO.log
2015-01-12 13:07 - 2015-01-12 13:08 - 12327440 _____ (Trend Micro Inc.) C:\Users\susi\Downloads\TiUnTool_60_MUI.exe
2015-01-12 13:01 - 2015-01-12 13:01 - 00000036 _____ () C:\Users\susi\AppData\Local\housecall.guid.cache
2015-01-12 13:00 - 2015-01-12 13:00 - 00000000 ____D () C:\Users\susi\AppData\Roaming\PwrMgr
2015-01-12 13:00 - 2015-01-12 13:00 - 00000000 ____D () C:\Users\susi\AppData\Local\Trend Micro
2015-01-12 12:57 - 2015-01-12 14:21 - 00000000 ____D () C:\Users\susi\AppData\Roaming\LSC
2015-01-12 12:47 - 2015-01-12 14:21 - 00000000 ____D () C:\Users\susi\AppData\Roaming\Adobe
2015-01-12 12:47 - 2015-01-12 14:21 - 00000000 ____D () C:\Users\susi\AppData\Local\Adobe
2015-01-12 12:47 - 2015-01-12 14:08 - 00000000 ____D () C:\Users\susi\AppData\Local\Lenovo
2015-01-12 12:47 - 2015-01-12 12:47 - 00122624 _____ () C:\Users\susi\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-12 12:47 - 2015-01-12 12:47 - 00001436 _____ () C:\Users\susi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-12 12:47 - 2015-01-12 12:47 - 00000000 ____D () C:\Users\susi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-01-12 12:47 - 2015-01-12 12:47 - 00000000 ____D () C:\Users\susi\AppData\Roaming\Leadertech
2015-01-12 12:47 - 2015-01-12 12:47 - 00000000 ____D () C:\Users\susi\AppData\Local\Google
2015-01-12 12:46 - 2015-01-12 15:53 - 00000000 ____D () C:\Users\susi
2015-01-12 12:46 - 2015-01-12 12:46 - 00000020 ___SH () C:\Users\susi\ntuser.ini
2015-01-12 12:46 - 2015-01-12 12:46 - 00000000 _SHDL () C:\Users\susi\Vorlagen
2015-01-12 12:46 - 2015-01-12 12:46 - 00000000 _SHDL () C:\Users\susi\Startmenü
2015-01-12 12:46 - 2015-01-12 12:46 - 00000000 _SHDL () C:\Users\susi\Netzwerkumgebung
2015-01-12 12:46 - 2015-01-12 12:46 - 00000000 _SHDL () C:\Users\susi\Lokale Einstellungen
2015-01-12 12:46 - 2015-01-12 12:46 - 00000000 _SHDL () C:\Users\susi\Eigene Dateien
2015-01-12 12:46 - 2015-01-12 12:46 - 00000000 _SHDL () C:\Users\susi\Druckumgebung
2015-01-12 12:46 - 2015-01-12 12:46 - 00000000 _SHDL () C:\Users\susi\Documents\Eigene Musik
2015-01-12 12:46 - 2015-01-12 12:46 - 00000000 _SHDL () C:\Users\susi\Documents\Eigene Bilder
2015-01-12 12:46 - 2015-01-12 12:46 - 00000000 _SHDL () C:\Users\susi\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-01-12 12:46 - 2015-01-12 12:46 - 00000000 _SHDL () C:\Users\susi\AppData\Local\Verlauf
2015-01-12 12:46 - 2015-01-12 12:46 - 00000000 _SHDL () C:\Users\susi\AppData\Local\Anwendungsdaten
2015-01-12 12:46 - 2015-01-12 12:46 - 00000000 _SHDL () C:\Users\susi\Anwendungsdaten
2015-01-12 12:46 - 2015-01-12 12:46 - 00000000 ____D () C:\Users\susi\AppData\Local\VirtualStore
2015-01-12 12:46 - 2013-10-16 13:18 - 00000000 ____D () C:\Users\susi\AppData\Local\Microsoft Help
2015-01-12 12:46 - 2013-09-11 04:28 - 00000000 ____D () C:\Users\susi\AppData\Roaming\Macromedia
2015-01-12 12:46 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\susi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-01-12 12:46 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\susi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-01-12 12:45 - 2015-01-12 14:21 - 00002122 _____ () C:\Windows\epplauncher.mif
2015-01-12 12:45 - 2015-01-12 12:45 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Roaming\PwrMgr
2015-01-12 12:35 - 2015-01-12 12:35 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Roaming\LSC
2015-01-12 12:32 - 2015-01-12 12:32 - 00001378 _____ () C:\Users\Public\Desktop\Installationsprogramm für Trend Micro Titanium Maximum Security.lnk
2015-01-12 12:30 - 2015-01-12 12:30 - 00000000 __SHD () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Local\EmieUserList
2015-01-12 12:30 - 2015-01-12 12:30 - 00000000 __SHD () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Local\EmieSiteList
2015-01-12 12:30 - 2015-01-12 12:30 - 00000000 __SHD () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Local\EmieBrowserModeList
2015-01-12 12:27 - 2015-01-12 12:27 - 00122624 _____ () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-12 12:27 - 2015-01-12 12:27 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Roaming\PowerFolder
2015-01-12 12:27 - 2015-01-12 12:27 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Roaming\Leadertech
2015-01-12 12:27 - 2015-01-12 12:27 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Local\Lenovo
2015-01-12 12:27 - 2015-01-12 12:27 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Local\Adobe
2015-01-12 12:26 - 2015-01-12 12:27 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Roaming\Adobe
2015-01-12 12:26 - 2015-01-12 12:26 - 00001436 _____ () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-12 12:26 - 2015-01-12 12:26 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-01-12 12:26 - 2015-01-12 12:26 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Local\Google
2015-01-12 12:24 - 2015-01-12 12:26 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK.003
2015-01-12 12:24 - 2015-01-12 12:24 - 00000020 ___SH () C:\Users\TEMP.Emesa_PC-THINK.003\ntuser.ini
2015-01-12 12:24 - 2015-01-12 12:24 - 00000000 _SHDL () C:\Users\TEMP.Emesa_PC-THINK.003\Vorlagen
2015-01-12 12:24 - 2015-01-12 12:24 - 00000000 _SHDL () C:\Users\TEMP.Emesa_PC-THINK.003\Startmenü
2015-01-12 12:24 - 2015-01-12 12:24 - 00000000 _SHDL () C:\Users\TEMP.Emesa_PC-THINK.003\Netzwerkumgebung
2015-01-12 12:24 - 2015-01-12 12:24 - 00000000 _SHDL () C:\Users\TEMP.Emesa_PC-THINK.003\Lokale Einstellungen
2015-01-12 12:24 - 2015-01-12 12:24 - 00000000 _SHDL () C:\Users\TEMP.Emesa_PC-THINK.003\Eigene Dateien
2015-01-12 12:24 - 2015-01-12 12:24 - 00000000 _SHDL () C:\Users\TEMP.Emesa_PC-THINK.003\Druckumgebung
2015-01-12 12:24 - 2015-01-12 12:24 - 00000000 _SHDL () C:\Users\TEMP.Emesa_PC-THINK.003\Documents\Eigene Musik
2015-01-12 12:24 - 2015-01-12 12:24 - 00000000 _SHDL () C:\Users\TEMP.Emesa_PC-THINK.003\Documents\Eigene Bilder
2015-01-12 12:24 - 2015-01-12 12:24 - 00000000 _SHDL () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-01-12 12:24 - 2015-01-12 12:24 - 00000000 _SHDL () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Local\Verlauf
2015-01-12 12:24 - 2015-01-12 12:24 - 00000000 _SHDL () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Local\Anwendungsdaten
2015-01-12 12:24 - 2015-01-12 12:24 - 00000000 _SHDL () C:\Users\TEMP.Emesa_PC-THINK.003\Anwendungsdaten
2015-01-12 12:24 - 2015-01-12 12:24 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Local\VirtualStore
2015-01-12 12:24 - 2013-10-16 13:18 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Local\Microsoft Help
2015-01-12 12:24 - 2013-09-11 04:28 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Roaming\Macromedia
2015-01-12 12:24 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-01-12 12:24 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\TEMP.Emesa_PC-THINK.003\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-01-12 11:21 - 2015-01-12 11:24 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK.002
2015-01-12 11:13 - 2015-01-12 11:19 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK.001
2015-01-12 10:55 - 2015-01-12 11:29 - 00000000 ____D () C:\Program Files (x86)\MyPC Backup
2015-01-12 10:55 - 2015-01-12 11:23 - 00000278 _____ () C:\Windows\Tasks\PC-Mechanic Startup.job
2015-01-12 10:54 - 2015-01-12 11:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue
2015-01-12 10:54 - 2015-01-12 10:54 - 00000000 ____D () C:\Program Files (x86)\Uniblue
2015-01-12 10:36 - 2015-01-12 11:01 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK.000
2015-01-12 08:47 - 2015-01-12 08:51 - 00000000 ____D () C:\Users\TEMP.Emesa_PC-THINK
2015-01-12 08:31 - 2015-01-12 08:39 - 00000000 ____D () C:\Users\TEMP
2015-01-07 12:18 - 2015-01-07 12:18 - 00000000 ____D () C:\Users\Emesa_PC\Desktop\2015-01-07 Vertrag EA Speed Wash
2015-01-02 20:17 - 2015-01-12 16:58 - 00000000 ____D () C:\Users\Emesa_PC\AppData\Roaming\vlc
2015-01-02 20:16 - 2015-01-12 16:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-01-02 20:16 - 2015-01-02 20:16 - 00000000 ____D () C:\Program Files\VideoLAN
2015-01-02 11:05 - 2015-01-02 11:05 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2015-01-02 10:51 - 2012-05-30 13:42 - 00569152 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStor.sys
2015-01-02 10:44 - 2013-04-30 21:12 - 03388744 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2015-01-02 10:44 - 2013-04-30 19:53 - 03693640 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\SET4373.tmp
2015-01-02 10:44 - 2013-04-30 17:37 - 00551917 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2015-01-02 10:44 - 2013-04-30 17:32 - 00140872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2015-01-02 10:44 - 2013-04-30 14:28 - 00916016 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2015-01-02 10:44 - 2013-04-29 18:27 - 23609344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2015-01-02 10:44 - 2013-04-24 17:16 - 01662024 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2015-01-02 10:44 - 2013-04-24 09:38 - 01002056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2015-01-02 10:44 - 2013-04-23 00:40 - 02735648 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2015-01-02 10:44 - 2013-04-15 11:19 - 02103040 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2015-01-02 10:44 - 2013-04-10 17:22 - 02802760 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2015-01-02 10:44 - 2013-03-23 03:43 - 00208072 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2015-01-02 10:44 - 2013-02-20 18:55 - 01284680 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2015-01-02 10:44 - 2012-10-02 14:41 - 00501192 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
2015-01-02 10:44 - 2012-10-02 14:41 - 00487368 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
2015-01-02 10:44 - 2012-10-02 14:41 - 00415688 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
2015-01-02 10:44 - 2012-08-31 19:18 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2015-01-02 10:44 - 2012-08-31 19:17 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\SET48CA.tmp
2015-01-02 10:44 - 2012-08-31 19:17 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\SET47EE.tmp
2015-01-02 10:44 - 2012-08-31 19:17 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\SET4A71.tmp
2015-01-02 10:44 - 2012-08-31 19:17 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2015-01-02 10:44 - 2012-06-20 17:26 - 00110592 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2015-01-02 10:34 - 2015-01-12 11:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo
2015-01-02 10:34 - 2015-01-02 10:34 - 00001215 _____ () C:\Users\Public\Desktop\SHAREit.lnk
2014-12-26 09:30 - 2014-12-26 09:30 - 00003886 _____ () C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2014-12-19 08:04 - 2014-12-19 08:04 - 01054912 _____ (Adobe) C:\Users\Emesa_PC\Downloads\install_flashplayer16x32au_mssa_aaa_aih.exe
2014-12-18 15:45 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-12-18 15:45 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-12-15 09:21 - 2014-12-15 09:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-13 01:37 - 2013-09-11 04:33 - 00000000 ____D () C:\swshare
2015-01-12 16:58 - 2013-02-11 19:28 - 00000000 ___RD () C:\Users\Public\Recorded TV
2015-01-12 16:55 - 2013-09-11 13:59 - 00699342 _____ () C:\Windows\system32\perfh007.dat
2015-01-12 16:55 - 2013-09-11 13:59 - 00149450 _____ () C:\Windows\system32\perfc007.dat
2015-01-12 16:55 - 2009-07-14 06:13 - 01619284 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-12 16:51 - 2013-10-15 16:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-12 16:51 - 2013-10-15 11:07 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-12 16:51 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-12 16:51 - 2009-07-14 05:51 - 00127134 _____ () C:\Windows\setupact.log
2015-01-12 16:25 - 2013-09-11 04:15 - 01588576 _____ () C:\Windows\WindowsUpdate.log
2015-01-12 16:21 - 2009-07-14 05:45 - 00034432 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-12 16:21 - 2009-07-14 05:45 - 00034432 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-12 16:10 - 2014-06-11 08:09 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2015-01-12 16:10 - 2013-10-15 16:37 - 00002101 _____ () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2015-01-12 16:08 - 2013-12-04 08:49 - 00000000 ____D () C:\ProgramData\Trend Micro
2015-01-12 16:08 - 2013-10-15 11:07 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-12 15:42 - 2013-10-15 11:07 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-12 13:40 - 2009-07-14 03:34 - 82051072 _____ () C:\Windows\system32\config\software.bak
2015-01-12 13:40 - 2009-07-14 03:34 - 21495808 _____ () C:\Windows\system32\config\system.bak
2015-01-12 13:40 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\security.bak
2015-01-12 13:37 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\sam.bak
2015-01-12 13:24 - 2013-10-16 10:35 - 00000000 ____D () C:\Windows\system32\appmgmt
2015-01-12 13:00 - 2013-12-04 08:49 - 00000000 ____D () C:\Program Files\Trend Micro
2015-01-12 12:50 - 2013-12-04 08:50 - 00000418 __RSH () C:\ProgramData\ntuser.pol
2015-01-12 11:30 - 2013-12-04 09:47 - 00000000 ____D () C:\Users\Emesa_PC\AppData\Roaming\PSpad
2015-01-12 11:30 - 2013-11-05 08:26 - 00000000 ____D () C:\Users\Emesa_PC\AppData\Roaming\PowerFolder
2015-01-12 11:30 - 2013-10-15 16:07 - 00000000 ____D () C:\Users\Emesa_PC
2015-01-12 11:30 - 2013-10-15 11:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-01-12 11:30 - 2013-09-11 04:41 - 00000000 ____D () C:\Windows\System32\Tasks\TVT
2015-01-12 11:30 - 2013-09-11 04:25 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2015-01-12 11:30 - 2013-09-11 04:23 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2015-01-12 11:30 - 2013-09-11 04:18 - 00000000 ____D () C:\Program Files\Elantech
2015-01-12 11:30 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-01-12 11:30 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2015-01-12 11:30 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\security
2015-01-12 11:30 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2015-01-12 11:29 - 2014-03-19 09:28 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird.bak
2015-01-12 11:29 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2015-01-12 11:28 - 2013-10-15 10:21 - 00000000 ____D () C:\Users\Emesa_PC\AppData\Local\Adobe
2015-01-12 11:28 - 2013-09-10 21:49 - 00000000 ____D () C:\ProgramData\Lenovo
2015-01-12 11:27 - 2013-09-11 04:22 - 00000000 ____D () C:\Program Files (x86)\Realtek
2015-01-12 11:27 - 2013-09-11 04:20 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-01-12 08:02 - 2014-02-27 08:03 - 00000000 ____D () C:\temp
2015-01-09 10:33 - 2013-10-15 09:55 - 00002332 ____H () C:\Users\Emesa_PC\Documents\Default.rdp
2015-01-09 08:44 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2015-01-08 11:20 - 2014-09-15 08:36 - 00000000 ____D () C:\Users\Emesa_PC\Documents\MailStore Home
2015-01-08 11:20 - 2014-05-13 13:33 - 00000000 ____D () C:\ProgramData\firebird
2015-01-08 08:11 - 2013-10-15 16:38 - 00000000 ____D () C:\Users\Emesa_PC\AppData\Local\Thunderbird
2015-01-02 20:18 - 2013-10-17 10:59 - 00000000 ____D () C:\Users\Emesa_PC\AppData\Local\CrashDumps
2015-01-02 10:49 - 2013-09-11 04:28 - 00000000 ____D () C:\Windows\Downloaded Installations
2015-01-02 10:48 - 2013-09-11 04:27 - 00003020 _____ () C:\Windows\System32\Tasks\PMTask
2015-01-02 10:48 - 2009-07-14 04:20 - 00000000 __RSD () C:\Windows\Media
2015-01-02 10:45 - 2013-09-11 04:23 - 00002556 ____C () C:\RHDSetup.log
2015-01-02 10:45 - 2013-09-11 04:23 - 00000000 ___HD () C:\Program Files (x86)\Temp
2015-01-02 10:35 - 2014-12-10 08:17 - 00000000 ____D () C:\Users\Emesa_PC\AppData\Roaming\LSC
2014-12-23 09:10 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-12-17 08:03 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\spool
2014-12-16 09:13 - 2013-10-16 10:30 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-12-15 09:10 - 2013-10-15 11:07 - 00002186 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.6376.dll


Some content of TEMP:
====================
C:\Users\Emesa_PC\AppData\Local\Temp\desktoputils.dll
C:\Users\Emesa_PC\AppData\Local\Temp\jnotify.dll
C:\Users\Emesa_PC\AppData\Local\Temp\udt.dll
C:\Users\Emesa_PC\AppData\Local\Temp\udt4j.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-08 12:19

==================== End Of Log ============================
         
--- --- ---

--- --- ---
__________________

Alt 12.01.2015, 17:02   #4
Quella1977
 
Antivirus und andere Programm lassen sich nicht installieren - Standard

Antivirus und andere Programm lassen sich nicht installieren



ddd

Alt 12.01.2015, 19:08   #5
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Antivirus und andere Programm lassen sich nicht installieren - Standard

Antivirus und andere Programm lassen sich nicht installieren



Zitat:
dass ich diesen PC privat und beruflich nutze. Gibt es dabei ein Problem?
Dann möchtest du bitte das hier lesen => http://www.trojaner-board.de/108422-...-anfragen.html

"Bei Kleinunternehmen, welche keinen eigenen IT Support haben, machen wir da eine Ausnahme und helfen gerne (kleine Spende hilft auch uns). Voraussetzung: Ihr teilt uns dies in eurer ersten Antwort mit. Bedenkt jedoch, dass Logfiles viele heikle Informationen enthalten können (Kundendaten, Bankdaten, etc.) sowie das Malware genauso wie unsere Scanner die Möglichkeit besitzt, diese auszuspähen und zu missbrauchen. Hier legen wir euch ein Formatieren und Neuaufsetzen nahe. Hier gilt insbesondere, dass wir im Nachhinein keine Logfiles löschen werden, egal wie sehr "euer Chef das auch will".


Gelesen und verstanden?

__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 12.01.2015, 19:25   #6
Quella1977
 
Antivirus und andere Programm lassen sich nicht installieren - Standard

Antivirus und andere Programm lassen sich nicht installieren



Hallo!

Danke für deinen Hinweis. Dann werde ich eure Hilfe wohl doch nicht in Anspruch nehmen können. Schade!

Warum kann ich meinen Beitrag mit dem Logfile nicht mehr löschen?

Besten Dank für die Antwort!!

Geändert von Quella1977 (12.01.2015 um 19:37 Uhr)

Alt 12.01.2015, 19:37   #7
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Antivirus und andere Programm lassen sich nicht installieren - Standard

Antivirus und andere Programm lassen sich nicht installieren



Hast du mal deine Beiträge gelesen

Ich steig bei deiner letzten Antwort nicht mehr durch....die Vorschaufunktion ist hier auch nur aus Spaß da
__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 12.01.2015, 19:50   #8
Quella1977
 
Antivirus und andere Programm lassen sich nicht installieren - Standard

Antivirus und andere Programm lassen sich nicht installieren



Ich meinte damit, dass wenn ... " Logfiles viele heikle Informationen enthalten können (Kundendaten, Bankdaten, etc.) sowie das Malware genauso wie unsere Scanner die Möglichkeit besitzt, diese auszuspähen und zu missbrauchen." ich das Risiko, dass jemand diese Daten von mir benutzen kann, mir dann doch zu gefährlich ist.

Sorry für mein unklares Posting.

Kann ich nun meinen Beitrag mit der Logfiledatei nachträglich bearbeiten?

Dank!

Alt 12.01.2015, 20:00   #9
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Antivirus und andere Programm lassen sich nicht installieren - Standard

Antivirus und andere Programm lassen sich nicht installieren



Zitat:
Kann ich nun meinen Beitrag mit der Logfiledatei nachträglich bearbeiten?
Soviel zum Thema "Lesen von verlinkten Artikel"

Es steht alles da.

Es ist deine Pflicht vorher zu prüfen was in den Logs steht. Nachträglich können zB Nachnamen entfernt werden, wenn du GuRu eine PN schickst.

Was hast du jetzt vor? Weitermachen oder des Thema jetzt beenden?
__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 12.01.2015, 20:11   #10
Quella1977
 
Antivirus und andere Programm lassen sich nicht installieren - Standard

Antivirus und andere Programm lassen sich nicht installieren



Es tut mir leid, das ich dich verärgert habe. Es stehen so viele Infos auf eurer Seite, das man da schon mal etwas überlesen kann. Ich bin ein Laie in solchen Sachen, daher habe ich mich auch an Euch gewandt.

Danke, aber ich werde das Thema beenden.

Alt 12.01.2015, 20:31   #11
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Antivirus und andere Programm lassen sich nicht installieren - Standard

Antivirus und andere Programm lassen sich nicht installieren



Bin nicht verärgert...merk auch grade, dass mein Beitrag zu schroff rüberkommt war nicht meine Absicht
__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Antwort

Themen zu Antivirus und andere Programm lassen sich nicht installieren
andere, antivirus, antivirusprogramm, beheben, defekt, ellung, fehlermeldung, fehlermeldungen, funktionier, heute, hilfe, installiere, installieren, laufe, mail, morgen, nach start, papierkorb, problem, programm, start, stunde, stunden, systemwiederherstellung



Ähnliche Themen: Antivirus und andere Programm lassen sich nicht installieren


  1. Avira Antivir lässt sich nicht mehr installieren/ Programme lassen sich nicht öffnen
    Antiviren-, Firewall- und andere Schutzprogramme - 23.03.2015 (10)
  2. Zone Alarm Antivirus wird ausgeschaltet und lässt sich nicht einschalten/ Online Games und Webseiten mit Passwort lassen sich nicht besuchen
    Log-Analyse und Auswertung - 14.11.2014 (26)
  3. Zone Alarm Antivirus wird ausgeschaltet und lässt sich nicht einschalten/ Online Games und Webseiten mit Passwort lassen sich nicht besuchen
    Plagegeister aller Art und deren Bekämpfung - 05.10.2014 (4)
  4. CSC.exe popup, malwarebytes, SD lassen sich nicht installieren
    Plagegeister aller Art und deren Bekämpfung - 31.03.2014 (1)
  5. Antivirenprogramme lassen sich nicht installieren/starten
    Plagegeister aller Art und deren Bekämpfung - 29.10.2013 (7)
  6. Antivirenprogramme lassen sich nicht installieren/updaten
    Antiviren-, Firewall- und andere Schutzprogramme - 23.09.2013 (4)
  7. Antivirenprogramme lassen sich nicht installieren/updaten und LyriXeeker
    Log-Analyse und Auswertung - 18.09.2013 (5)
  8. Virenprogramme lassen sich nicht installieren
    Plagegeister aller Art und deren Bekämpfung - 30.03.2013 (3)
  9. Virenprogramme lassen sich nicht mehr installieren
    Log-Analyse und Auswertung - 06.11.2012 (7)
  10. virus programme lassen sich nicht installieren, pc ist extrem langsam
    Plagegeister aller Art und deren Bekämpfung - 29.10.2012 (7)
  11. Antivieren-,Programme und Spiele lassen sich nicht Installieren
    Log-Analyse und Auswertung - 14.03.2011 (4)
  12. ccleaner und mbam lassen sich nicht installieren - rootkit?
    Plagegeister aller Art und deren Bekämpfung - 19.02.2010 (5)
  13. IE7 und Service Pack 3 lassen sich nicht installieren :(
    Alles rund um Windows - 01.12.2008 (10)
  14. bitte überprüfen, programme lassen sich nicht mehr installieren...
    Log-Analyse und Auswertung - 13.12.2007 (2)
  15. Antivirenprog. lassen sich nicht installieren!
    Log-Analyse und Auswertung - 04.12.2007 (6)
  16. pdf-plug-ins lassen sich nicht installieren
    Alles rund um Windows - 14.09.2006 (2)
  17. Foren lassen sich nicht öffnen, Anti Viren Progs nicht installieren..
    Plagegeister aller Art und deren Bekämpfung - 02.07.2006 (1)

Zum Thema Antivirus und andere Programm lassen sich nicht installieren - Hallo! Habe seit heute morgen ein ziemliches Problem mit meinem PC. Nach Start des PC, bekam ich eine Fehlermeldung, dass der Papierkorb defekt ist. Weiters funktionierte mein Mail nicht mehr. - Antivirus und andere Programm lassen sich nicht installieren...
Archiv
Du betrachtest: Antivirus und andere Programm lassen sich nicht installieren auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.