Trojaner-Board - Virus/Trojaner: Unmengen Werbung, Pop Ups beim Browsen

[CODE]Additional
FRST Logfile:

Code:

scan result of Farbar Recovery Scan Tool (x64) Version:13-06-2015

Ran by Vincent at 2015-06-14 20:15:20

Running from C:\Users\Vincent\Downloads\FRST-OlderVersion

Boot Mode: Normal

==========================================================
 
 

==================== Accounts: =============================
 

Administrator (S-1-5-21-243792411-4263257777-2185628945-500 - Administrator - Disabled)

Gast (S-1-5-21-243792411-4263257777-2185628945-501 - Limited - Enabled)

HomeGroupUser$ (S-1-5-21-243792411-4263257777-2185628945-1008 - Limited - Enabled)

Vincent (S-1-5-21-243792411-4263257777-2185628945-1001 - Administrator - Enabled) => C:\Users\Vincent
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

Adobe Acrobat 5.0 (HKLM-x32\...\Adobe Acrobat 5.0) (Version: 5.0 - Adobe Systems, Inc.)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 17.0.0.172 - Adobe Systems Incorporated)

Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.188 - Adobe Systems Incorporated)

Age of Empires III - The Asian Dynasties (HKLM-x32\...\InstallShield_{C43C1415-3DFC-4089-9A32-0BECF28A6046}) (Version: 1.00.0000 - Microsoft Game Studios)

Age of Empires III - The Asian Dynasties (x32 Version: 1.00.0000 - Microsoft Game Studios) Hidden

Age of Empires III - The WarChiefs (HKLM-x32\...\InstallShield_{1C08A24C-B168-407E-A826-68FAF5F20710}) (Version: 1.00.0000 - Microsoft Game Studios)

Age of Empires III - The WarChiefs (x32 Version: 1.00.0000 - Microsoft Game Studios) Hidden

Age of Empires III (HKLM-x32\...\InstallShield_{A8CF5C37-8EC5-4C33-BB4A-87F468B77D45}) (Version: 1.00.0000 - Microsoft Game Studios)

Age of Empires III (x32 Version: 1.00.0000 - Microsoft Game Studios) Hidden

Age of Mythology - The Titans Expansion (HKLM-x32\...\Age of Mythology Expansion Pack 1.0) (Version:  - )

Age of Mythology (HKLM-x32\...\Age of Mythology 1.0) (Version:  - )

ANNO 1404 (HKLM-x32\...\{3D9CF3CA-3AB0-4A82-9853-D7C43FD1D775}) (Version: 1.00.0000 - Ubisoft)

Anno 1404 (x32 Version: 1.00.0000 - Ubisoft) Hidden

ANNO 1503 (HKLM-x32\...\{EBBB1DEF-8878-4CB8-BC0D-1196B30E7527}) (Version: 1.05 - )

Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.2.2218 - AVAST Software)

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

Blackguards (HKLM-x32\...\Blackguards_is1) (Version: 1.6 - Daedalic Entertainment GmbH)

Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)

Die Schlacht um Mittelerde(tm) (HKLM-x32\...\{3F290582-3F4E-4B96-009C-E0BABAA40C42}) (Version:  - )

Die Schlacht um Mittelerde™ II (HKLM-x32\...\{2A9F95AB-65A3-432c-8631-B8BC5BF7477A}) (Version:  - )

DIE SIEDLER - Das Erbe der Könige - Gold Edition (HKLM-x32\...\{E08DE897-B6AF-4DFF-9E90-131E80C876B4}) (Version: 1.00.0000 - Blue Byte)

Die Siedler 7 (HKLM-x32\...\{9C916142-C18C-429D-BFED-40094A7E0BEB}) (Version: 1.12.1396 - Ubisoft)

Dungeons 2 (HKLM-x32\...\Steam App 262280) (Version:  - Realmforge Studios)

Flixster (HKLM-x32\...\com.wb.DC2) (Version: 2.2.3 - Warner Bros. Entertainment, Inc.)

Flixster (x32 Version: 2.2.3 - Warner Bros. Entertainment, Inc.) Hidden

GameSpy Arcade (HKLM-x32\...\GameSpy Arcade) (Version:  - )

globalupdate Helper (x32 Version: 1.3.25.0 - globalupdate Inc.) Hidden <==== ATTENTION

Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)

LEGO® Batman™ (HKLM-x32\...\InstallShield_{398AB469-77FC-4935-820B-D419388C0A6A}) (Version: 1.00.0000 - Warner Bros. Interactive Entertainment)

LEGO® Batman™ (x32 Version: 1.00.0000 - Warner Bros. Interactive Entertainment) Hidden

Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)

Medieval II Total War (HKLM-x32\...\{C0698BDA-0D29-40EE-8570-A31106DF9AB1}) (Version: 1.03.000 - SEGA)

Medieval II Total War : Kingdoms : Americas (HKLM-x32\...\{75983B66-804C-40D1-BA13-64DAF652A6F1}) (Version: 1.03.000 - SEGA)

Medieval II Total War : Kingdoms : Britannia (HKLM-x32\...\{CEDDEE73-3D36-41C2-AA40-29355D9FBD63}) (Version: 1.03.000 - SEGA)

Medieval II Total War : Kingdoms : Crusades (HKLM-x32\...\{02A10468-2F1C-447C-AD8E-4DEDDEA25AE2}) (Version: 1.03.000 - SEGA)

Medieval II Total War : Kingdoms : Teutonic (HKLM-x32\...\{7AEE1963-7001-4C37-BC20-2FAEB74AA41C}) (Version: 1.03.000 - SEGA)

Microsoft Age of Empires (HKLM-x32\...\Age of Empires) (Version:  - )

Microsoft Age of Empires Expansion (HKLM-x32\...\Age of Empires Expansion 1.0) (Version:  - )

Microsoft Age of Empires II (HKLM-x32\...\Age of Empires 2.0) (Version:  - )

Microsoft Age of Empires II: The Conquerors Expansion (HKLM-x32\...\Age of Empires II: The Conquerors Expansion 1.0) (Version:  - )

Microsoft Rise Of Nations (HKLM-x32\...\RiseOfNations 1.0) (Version:  - Microsoft)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)

Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation)

Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)

Mount & Blade: Warband (HKLM-x32\...\Steam App 48700) (Version:  - TaleWorlds Entertainment)

Mozilla Firefox 38.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 38.0.5 - Mozilla)

MSXML4 Parser (HKLM-x32\...\{01501EBA-EC35-4F9F-8889-3BE346E5DA13}) (Version: 1.0.0 - Microsoft Game Studios)

Origin (HKLM-x32\...\Origin) (Version: 9.5.12.2862 - Electronic Arts, Inc.)

PVZ Garden Warfare (HKLM-x32\...\{A5AC7D7B-C1D5-4AF9-8829-993DA335BE1B}) (Version: 1.0.3.0 - Electronic Arts)

Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

Rome - Total War - Gold Edition (HKLM-x32\...\{2E97F7E8-ABDE-4E0D-B0AD-B6B4BAD89E24}) (Version: 1.6 - The Creative Assembly)

Star Wars Battlefront (HKLM-x32\...\{C79CB9C7-10A4-4814-8402-F574672C2192}) (Version: 1.0 - LucasArts)

Star Wars Battlefront II (HKLM-x32\...\{3D374523-CFDE-461A-827E-2A102E2AB365}) (Version: 1.0 - LucasArts)

Star Wars Galactic Battlegrounds (HKLM-x32\...\{A202BDBA-753F-41B9-B649-CFB0B45FC03E}) (Version:  - )

StarCraft II (HKLM-x32\...\StarCraft II) (Version:  - Blizzard Entertainment)

Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)

Stronghold (HKLM-x32\...\{C917BA70-28A3-4C74-B163-41FD8C8E1A5A}) (Version: 1.20.0000 - Firefly Studios)

Stronghold 2 (HKLM-x32\...\{16D2C649-CBA8-44EE-B730-12584667D487}) (Version: 1.40.1000 - Firefly Studios)

Stronghold 3 (HKLM-x32\...\Steam App 47400) (Version:  - FireFly Studios)

Stronghold Crusader 2 (HKLM-x32\...\Steam App 232890) (Version:  - FireFly Studios)

Stronghold Crusader Extreme (HKLM-x32\...\{8C3727F2-8E37-49E4-820C-03B1677F53B6}) (Version: 1.20.0000 - Firefly Studios)

Stronghold Crusader Extreme HD (HKLM-x32\...\Steam App 16700) (Version:  - Firefly Studios)

Stronghold Crusader HD (HKLM-x32\...\Steam App 40970) (Version:  - FireFly Studios)

Stronghold Legends (HKLM-x32\...\{66A405D2-BA14-4594-BF36-B3B544F0754E}) (Version: 1.20.0000 - Firefly Studios)

Total War: ROME II - Emperor Edition (HKLM-x32\...\Steam App 214950) (Version:  - Creative Assembly)

Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)

Uplay (HKLM-x32\...\Uplay) (Version: 4.9 - Ubisoft)

VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)

Warcraft III (HKLM-x32\...\Warcraft III) (Version:  - Blizzard Entertainment)
 

==================== Custom CLSID (Whitelisted): ==========================
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 

CustomCLSID: HKU\S-1-5-21-243792411-4263257777-2185628945-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Vincent\AppData\Roaming\Dropbox\bin\Dropbox.exe /autoplay No File
 

==================== Restore Points =========================
 

31-05-2015 14:33:45 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501

07-06-2015 18:12:35 Geplanter Prüfpunkt

10-06-2015 19:18:52 Windows Update
 

==================== Hosts content: ===============================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (Whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 

Task: {0847CADE-EE92-489F-A4EB-A918603B6C8E} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-05-06] (Microsoft Corporation)

Task: {1CFA5016-F4CC-465F-9108-646BBB5348D8} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-05-22] (Avast Software s.r.o.)

Task: {2380A4CA-6E19-4FD7-8252-48935201E699} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)

Task: {29C3A8B9-9D4C-4A48-AFF7-951031372074} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-06-09] (Adobe Systems Incorporated)

Task: {3B026C8F-91A4-4F3B-970A-084DBA9C2EF6} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => C:\Windows\system32\compattel\DiagTrackRunner.exe [2015-03-16] (Microsoft Corporation)

Task: {438CBD3D-793A-4502-84B6-913BBE63B40A} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => schtasks

Task: {64B79851-4BF5-44CD-99B8-7C244D7BF3E6} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)

Task: {9370FBC6-A1C4-46E8-9DA3-855364B25294} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Logon => C:\Windows\system32\GWX\GWX.exe [2015-05-06] (Microsoft Corporation)

Task: {95EFF1A8-A016-47E9-84CB-9D5E5A3EFB4C} - System32\Tasks\{70A02D90-5A4C-46E4-8077-5A170D31A7F0} => pcalua.exe -a "C:\Program Files (x86)\GameSpy Arcade\Aphex.exe" -d C:\PROGRA~2\GAMESP~1

Task: {A856AFFA-9461-4435-A6AE-59566298AE59} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle => C:\Windows\system32\GWX\GWX.exe [2015-05-06] (Microsoft Corporation)

Task: {AE7E3ED9-968C-476E-9B6D-517402D45320} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)

Task: {B2D8D1C0-6A15-4FE5-BC7C-BA5291FA7CF2} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2014-03-19] (Microsoft)

Task: {B7A69212-A4E0-41E6-97E9-8EBC7AA399D4} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-06-10] (Microsoft Corporation)

Task: {D2835AA9-6FC5-4876-AEDC-03A8A13BB8F5} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)

Task: {D33F8A31-4239-4E2D-B417-BC09A480DF55} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-06] (Microsoft Corporation)

Task: {E3952D91-B33C-44E5-B56A-B25FD5B00CE5} - System32\Tasks\{6ED4FF27-5538-417B-AD71-7227F10A1E87} => pcalua.exe -a "C:\Program Files (x86)\LucasArts\Star Wars Galactic Battlegrounds\swgbg.exe" -d C:\Users\Vincent\Desktop

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
 

==================== Loaded Modules (Whitelisted) ==============
 

2015-05-22 20:18 - 2015-05-22 20:18 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll

2015-05-22 20:18 - 2015-05-22 20:18 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll

2015-06-14 14:55 - 2015-06-14 14:55 - 02954752 _____ () C:\Program Files\AVAST Software\Avast\defs\15061400\algo.dll

2015-06-14 20:14 - 2015-06-14 20:14 - 02954752 _____ () C:\Program Files\AVAST Software\Avast\defs\15061401\algo.dll

2015-05-22 20:18 - 2015-05-22 20:18 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

2015-05-09 21:17 - 2015-06-14 15:32 - 01007104 _____ () C:\Program Files (x86)\Origin\platforms\qwindows.dll

2015-05-09 21:17 - 2015-06-14 15:32 - 00023552 _____ () C:\Program Files (x86)\Origin\imageformats\qgif.dll

2015-05-09 21:17 - 2015-06-14 15:32 - 00024576 _____ () C:\Program Files (x86)\Origin\imageformats\qico.dll

2015-05-09 21:17 - 2015-06-14 15:32 - 00216576 _____ () C:\Program Files (x86)\Origin\imageformats\qjpeg.dll

2015-05-09 21:17 - 2015-06-14 15:32 - 00261120 _____ () C:\Program Files (x86)\Origin\imageformats\qmng.dll

2015-05-09 21:17 - 2015-06-14 15:32 - 00019456 _____ () C:\Program Files (x86)\Origin\imageformats\qtga.dll

2015-05-09 21:17 - 2015-06-14 15:32 - 00337408 _____ () C:\Program Files (x86)\Origin\imageformats\qtiff.dll

2015-05-09 21:17 - 2015-06-14 15:32 - 00018944 _____ () C:\Program Files (x86)\Origin\imageformats\qwbmp.dll

2015-05-09 21:17 - 2015-06-14 15:32 - 00228352 _____ () C:\Program Files (x86)\Origin\mediaservice\wmfengine.dll

2015-06-06 08:00 - 2015-04-16 19:40 - 00776192 _____ () C:\Program Files (x86)\Steam\SDL2.dll

2015-06-06 08:00 - 2015-04-23 04:16 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll

2015-06-06 08:00 - 2015-06-04 20:56 - 02407104 _____ () C:\Program Files (x86)\Steam\video.dll

2015-06-06 08:00 - 2015-04-23 04:16 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll

2015-06-06 08:00 - 2015-04-23 04:16 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll

2014-12-01 14:31 - 2014-12-01 23:31 - 02396672 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll

2014-12-01 14:31 - 2014-12-01 23:31 - 00479744 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll

2014-12-01 14:31 - 2014-12-01 23:31 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll

2014-12-01 14:31 - 2014-12-01 23:31 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll

2014-12-01 14:31 - 2014-12-01 23:31 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll

2015-06-06 08:00 - 2015-06-04 20:56 - 00703168 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL

2015-01-15 16:42 - 2015-05-11 21:01 - 36302728 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll

2015-06-06 08:00 - 2015-05-11 21:01 - 08958344 _____ () C:\Program Files (x86)\Steam\bin\pdf.dll
 

==================== Alternate Data Streams (Whitelisted) =========
 

(If an entry is included in the fixlist, only the ADS will be removed.)
 

AlternateDataStreams: C:\Users\Vincent\SkyDrive:ms-properties
 

==================== Safe Mode (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 

==================== EXE Association (Whitelisted) ===============
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
 
 

==================== Internet Explorer trusted/restricted ===============
 

(If an entry is included in the fixlist, it will be removed from the registry.)
 
 

==================== Other Areas ============================
 

(Currently there is no automatic fix for this section.)
 

HKU\S-1-5-21-243792411-4263257777-2185628945-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Vincent\AppData\Roaming\Microsoft\Windows Photo Viewer\Hintergrundbild der Windows-Fotoanzeige.jpg

DNS Servers: 192.168.178.1
 

==================== MSCONFIG/TASK MANAGER disabled items ==
 

(Currently there is no automatic fix for this section.)
 

HKU\S-1-5-21-243792411-4263257777-2185628945-1001\...\StartupApproved\Run: => "Steam"

HKU\S-1-5-21-243792411-4263257777-2185628945-1001\...\StartupApproved\Run: => "EADM"
 

==================== FirewallRules (Whitelisted) ===============
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139

FirewallRules: [{655A5CA9-5227-42AE-B870-F3038AD25A43}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold\Stronghold.exe

FirewallRules: [{533EDF36-AA91-446E-8DF0-7B0EA6AAF6FA}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold\Stronghold.exe

FirewallRules: [{B2D53930-4751-4C27-867F-6B0B3841A1D9}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold Crusader\Stronghold_Crusader_Extreme.exe

FirewallRules: [{D6D77E9C-A9BA-479A-B4DC-C7334D901AD5}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold Crusader\Stronghold Crusader.exe

FirewallRules: [{3A78495F-A65D-4564-8E27-D48FD6052B0C}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold Crusader\Stronghold_Crusader_Extreme.exe

FirewallRules: [{035F9ED8-9E86-4395-99E4-A3D0BC259D2F}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold Crusader\Stronghold Crusader.exe

FirewallRules: [{D8CF07A2-6696-44C3-A278-8987168E88EA}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold 2\Stronghold2.exe

FirewallRules: [{792BC7E3-82FB-4071-9431-146C00B69BEE}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold 2\Stronghold2.exe

FirewallRules: [{88E56166-9D3B-4CA2-B7E4-EF2F54B213FB}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold Legends\StrongholdLegends.exe

FirewallRules: [{B579CDC2-B632-4356-8EA8-CB9328DF29FB}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold Legends\StrongholdLegends.exe

FirewallRules: [{57EC213A-5070-48EB-BF29-85EC6D9EB294}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{52D54CAD-B1C4-4A38-817F-397A31457999}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{16B906C4-9EDD-46C9-A2D9-BD1F7A9C058A}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{ACDB80D6-472D-4C42-B959-3EDD14B2B499}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{0AAD92AF-D35B-4B73-80BF-EF92CB15598F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Stronghold3\bin\win32_release\Stronghold3.exe

FirewallRules: [{99A67DC3-E181-4936-8F16-ACE22560A9E6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Stronghold3\bin\win32_release\Stronghold3.exe

FirewallRules: [{D2A04E48-7DBA-4199-B342-C9182C0BA0E2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Stronghold Crusader Extreme\Stronghold Crusader.exe

FirewallRules: [{D4D357CE-AAE1-4892-B28C-ABCA070C4368}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Stronghold Crusader Extreme\Stronghold Crusader.exe

FirewallRules: [{670E460A-BE06-492E-A3FA-980306D8A49A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Stronghold Crusader Extreme\Stronghold_Crusader_Extreme.exe

FirewallRules: [{45184B51-B45C-4699-BF3F-DC1958D25266}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Stronghold Crusader Extreme\Stronghold_Crusader_Extreme.exe

FirewallRules: [{D2919507-38C2-40BA-B25C-975253F0CF6F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Stronghold Crusader 2\bin\win32_release\Crusader2.exe

FirewallRules: [{08595D49-9849-4A3E-91BD-B91A7875C228}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Stronghold Crusader 2\bin\win32_release\Crusader2.exe

FirewallRules: [{A917BE6C-4A81-4C45-ABCF-3AAE3750F7C8}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe

FirewallRules: [{8AB3E38A-B238-482A-ACD9-AB69CE2C8989}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe

FirewallRules: [{666BD4F8-D1D8-4806-A8D7-C7854E86B0BB}] => (Allow) C:\Program Files (x86)\Ubisoft\Die Siedler 7\Data\Base\_Dbg\Bin\Release\Settlers7R.exe

FirewallRules: [{67A598C9-E680-484A-94AA-CF154AFC9D9D}] => (Allow) C:\Program Files (x86)\Ubisoft\Die Siedler 7\Data\Base\_Dbg\Bin\Release\Settlers7R.exe

FirewallRules: [{63AB0F4F-2B12-4CF8-9BBB-7EE7CD9020DA}] => (Allow) C:\Program Files (x86)\LucasArts\Star Wars Battlefront\GameData\battlefront.exe

FirewallRules: [{BBC92D0F-4F9A-42C9-BAC2-6DECD7646E0E}] => (Allow) C:\Program Files (x86)\LucasArts\Star Wars Battlefront\GameData\battlefront.exe

FirewallRules: [{7B3A2EFF-DA3E-4AEB-8ACA-451BE44FE94B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\MountBlade Warband\mb_warband.exe

FirewallRules: [{51D56E46-AF05-44DF-9DFD-F748425DFF0C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\MountBlade Warband\mb_warband.exe

FirewallRules: [TCP Query User{33F4679B-360A-4CD2-BE01-F687683E5C24}C:\program files (x86)\microsoft games\age of empires iii\age3.exe] => (Allow) C:\program files (x86)\microsoft games\age of empires iii\age3.exe

FirewallRules: [UDP Query User{C2B16ECE-53AE-4749-8EB9-1FBF87E33C4A}C:\program files (x86)\microsoft games\age of empires iii\age3.exe] => (Allow) C:\program files (x86)\microsoft games\age of empires iii\age3.exe

FirewallRules: [TCP Query User{78079710-721E-4AAE-8A80-635838DDAC8C}C:\program files (x86)\microsoft games\age of empires ii\empires2.exe] => (Allow) C:\program files (x86)\microsoft games\age of empires ii\empires2.exe

FirewallRules: [UDP Query User{90E18BC3-2977-456E-A85C-B6104849C65D}C:\program files (x86)\microsoft games\age of empires ii\empires2.exe] => (Allow) C:\program files (x86)\microsoft games\age of empires ii\empires2.exe

FirewallRules: [TCP Query User{1D162339-B8C5-4FD4-8887-ABD19EE25B01}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe

FirewallRules: [UDP Query User{C1FDAC44-0CC6-4FFE-B5A6-91989E76A3D9}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe

FirewallRules: [TCP Query User{6E79DFAC-F910-4EC2-AB0C-A7ACDA18003A}C:\program files (x86)\microsoft games\age of mythology\aom.exe] => (Allow) C:\program files (x86)\microsoft games\age of mythology\aom.exe

FirewallRules: [UDP Query User{21ECBFE4-9DAD-40EF-A4CB-A4056121566F}C:\program files (x86)\microsoft games\age of mythology\aom.exe] => (Allow) C:\program files (x86)\microsoft games\age of mythology\aom.exe

FirewallRules: [TCP Query User{2A604A86-C5BA-4843-ABAA-79EF91F6AE0A}C:\program files (x86)\microsoft games\age of mythology\aomx.exe] => (Allow) C:\program files (x86)\microsoft games\age of mythology\aomx.exe

FirewallRules: [UDP Query User{5E8543E8-5509-4D22-8ED2-AD33DC8E1267}C:\program files (x86)\microsoft games\age of mythology\aomx.exe] => (Allow) C:\program files (x86)\microsoft games\age of mythology\aomx.exe

FirewallRules: [{1DAAF84F-B208-40AD-AC59-EB9A7DF01699}] => (Allow) C:\Program Files (x86)\Microsoft Games\Age of Empires III\age3y.exe

FirewallRules: [{F27143C0-CFD5-423A-BB9A-09AAE88C3AC5}] => (Allow) C:\Program Files (x86)\Microsoft Games\Age of Empires III\age3y.exe

FirewallRules: [{3164554B-C8BB-4D27-8ED7-050CC4805768}] => (Allow) C:\Program Files (x86)\Microsoft Games\Age of Empires III\age3x.exe

FirewallRules: [{ECE2AD2D-4433-44BA-AE79-50C4D7CC2DD0}] => (Allow) C:\Program Files (x86)\Microsoft Games\Age of Empires III\age3x.exe

FirewallRules: [TCP Query User{8C42B46B-5D79-4B69-B570-FCD1BFEF2BBD}C:\program files (x86)\ubisoft\related designs\anno 1404\tools\anno4web.exe] => (Allow) C:\program files (x86)\ubisoft\related designs\anno 1404\tools\anno4web.exe

FirewallRules: [UDP Query User{AE6E5C64-5BCD-47F5-AC36-7D4F9749827C}C:\program files (x86)\ubisoft\related designs\anno 1404\tools\anno4web.exe] => (Allow) C:\program files (x86)\ubisoft\related designs\anno 1404\tools\anno4web.exe

FirewallRules: [{8673CCC2-0ECF-4A46-891F-B04BC4F968CC}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe

FirewallRules: [{2ADFCF85-87CD-4FFD-99AC-4C9D60F775E7}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe

FirewallRules: [{317388C9-6330-415E-871D-6CB5492FAA54}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II.exe

FirewallRules: [{8749C39C-9A0D-44A3-8C97-ECF7466AE741}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II.exe

FirewallRules: [{3FF348D0-80A6-4418-8573-B056191F6EE8}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II Public Test.exe

FirewallRules: [{E88455B2-52F2-4D11-A0BB-CC6F1B9EF026}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II Public Test.exe

FirewallRules: [TCP Query User{86D9548D-DAAB-49CF-B04E-0A4F28D94EA8}C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe

FirewallRules: [UDP Query User{74760B33-0DE3-44B4-9151-C622505AD17D}C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe

FirewallRules: [{E677380E-542D-43E4-968C-109657FD78EF}] => (Allow) C:\Program Files (x86)\EA GAMES\Die Schlacht um Mittelerde(tm)\game.dat

FirewallRules: [{834D6913-892E-49E8-B5AE-3C3A5E426496}] => (Allow) C:\Program Files (x86)\EA GAMES\Die Schlacht um Mittelerde(tm)\game.dat

FirewallRules: [{92CB0909-1AFB-4204-A65D-7B5CCFF97C51}] => (Allow) C:\Program Files (x86)\Electronic Arts\Die Schlacht um Mittelerde II\game.dat

FirewallRules: [{B1DB9C4A-041C-4C21-A919-7BFBB2565916}] => (Allow) C:\Program Files (x86)\Electronic Arts\Die Schlacht um Mittelerde II\game.dat

FirewallRules: [TCP Query User{9D1057C4-3303-4693-8428-0E9A9147F915}C:\program files (x86)\lucasarts\star wars galactic battlegrounds\game\battlegrounds.exe] => (Allow) C:\program files (x86)\lucasarts\star wars galactic battlegrounds\game\battlegrounds.exe

FirewallRules: [UDP Query User{0967BEEE-8AAB-44A5-9158-BE9CBDBB298C}C:\program files (x86)\lucasarts\star wars galactic battlegrounds\game\battlegrounds.exe] => (Allow) C:\program files (x86)\lucasarts\star wars galactic battlegrounds\game\battlegrounds.exe

FirewallRules: [{EDD6D580-3266-4322-B86C-7761D164887D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\launcher\launcher.exe

FirewallRules: [{734CE331-9CE4-4350-9049-8B1A6A57501D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\launcher\launcher.exe

FirewallRules: [TCP Query User{BAD72A3C-8ACB-4F02-8C72-4B8779FF1FCA}C:\program files (x86)\warcraft iii\war3.exe] => (Allow) C:\program files (x86)\warcraft iii\war3.exe

FirewallRules: [UDP Query User{2720E92E-972F-43F9-AD71-4EB9ED0051A7}C:\program files (x86)\warcraft iii\war3.exe] => (Allow) C:\program files (x86)\warcraft iii\war3.exe

FirewallRules: [{F36CBF3A-0B34-4E43-ADB1-73B11CCDD3D0}] => (Allow) C:\Program Files (x86)\GameSpy Arcade\Aphex.exe

FirewallRules: [{9843E0A4-6300-4D33-8615-A6DE4EF9389C}] => (Allow) C:\Program Files (x86)\GameSpy Arcade\Aphex.exe

FirewallRules: [TCP Query User{9EAE8C1C-4800-4964-AE09-7BE2D8950F5F}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [UDP Query User{E2617BB9-6BB0-401B-92E3-7682B67DD1D3}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [TCP Query User{4143E2CD-EB61-4477-B80C-17F26CD5F784}C:\sierra\empire earth\empire earth.exe] => (Block) C:\sierra\empire earth\empire earth.exe

FirewallRules: [UDP Query User{E8561262-2F92-4326-8578-564088383159}C:\sierra\empire earth\empire earth.exe] => (Block) C:\sierra\empire earth\empire earth.exe

FirewallRules: [TCP Query User{01973275-E8E6-432D-B380-A201E4981BAA}C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.icd] => (Allow) C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.icd

FirewallRules: [UDP Query User{2AD5A3C4-B96B-49A9-918C-B2F6749F8C97}C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.icd] => (Allow) C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.icd

FirewallRules: [TCP Query User{6F3C6E33-F460-4874-BFB7-6445EBDB1D9B}C:\program files (x86)\microsoft games\age of empires\empiresx.exe] => (Allow) C:\program files (x86)\microsoft games\age of empires\empiresx.exe

FirewallRules: [UDP Query User{3B9E86A7-D33C-4530-9917-614AA5DB21CA}C:\program files (x86)\microsoft games\age of empires\empiresx.exe] => (Allow) C:\program files (x86)\microsoft games\age of empires\empiresx.exe

FirewallRules: [TCP Query User{CEBA6682-4D1B-4737-BBF0-D9A1976BFA2B}C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe

FirewallRules: [UDP Query User{1935BCE0-8BAC-4761-9FE5-C411A75FAC77}C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe

FirewallRules: [TCP Query User{1701FC18-0729-45A1-8AB8-EEBD3D4D8E45}C:\program files (x86)\steam\steamapps\common\total war rome ii\rome2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\total war rome ii\rome2.exe

FirewallRules: [UDP Query User{02C845F7-AC90-4C43-9C0D-6EA39F8263AF}C:\program files (x86)\steam\steamapps\common\total war rome ii\rome2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\total war rome ii\rome2.exe

FirewallRules: [{EA7BB35E-F58B-47AA-8C44-207675F1B658}] => (Allow) C:\Program Files (x86)\Origin Games\Plants vs Zombies Garden Warfare\PVZ.Main_Win64_Retail.exe

FirewallRules: [{D1406348-ED8C-4EE0-9E20-80F76BBCA929}] => (Allow) C:\Program Files (x86)\Origin Games\Plants vs Zombies Garden Warfare\PVZ.Main_Win64_Retail.exe

FirewallRules: [TCP Query User{F624F077-C22D-4067-9C61-8AC1ADD20439}C:\program files (x86)\flixster\flixster.exe] => (Allow) C:\program files (x86)\flixster\flixster.exe

FirewallRules: [UDP Query User{88E9C3F1-1A25-48F1-BBBA-F9DEF4B67691}C:\program files (x86)\flixster\flixster.exe] => (Allow) C:\program files (x86)\flixster\flixster.exe

FirewallRules: [{6EBA3F01-9812-45FE-8CC6-F11371457E66}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dungeons2\Dungeons2.exe

FirewallRules: [{9D276DAE-F21A-4BE2-B8D1-9D1E4D305D3B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dungeons2\Dungeons2.exe

FirewallRules: [{F8DB26E8-25F7-45D6-B8AE-A898A99F1B0F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dungeons2\mono\bin\mono.exe

FirewallRules: [{2B5037E9-603B-43A9-A128-24848C8D1731}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dungeons2\mono\bin\mono.exe

FirewallRules: [{285652E0-63D3-44B5-8A06-6CFA4825D279}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{D6BCB099-7779-439B-A592-EB70C5668A9E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (06/14/2015 03:00:10 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm firefox.exe, Version 38.0.5.5623 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: be0
 

Startzeit: 01d0a6a17cabb222
 

Endzeit: 4294967295
 

Anwendungspfad: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 

Berichts-ID: edd1abee-1294-11e5-82a4-001966dbda5f
 

Vollständiger Name des fehlerhaften Pakets: 
 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (06/14/2015 00:22:55 PM) (Source:  ) (EventID: 0) (User: )

Description: 1
 

Error: (06/13/2015 10:25:07 PM) (Source:  ) (EventID: 0) (User: )

Description: 1
 

Error: (06/13/2015 06:21:26 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: age3x.exe, Version: 5.106.906.424, Zeitstempel: 0x45006db1

Name des fehlerhaften Moduls: user32.dll, Version: 6.3.9600.17415, Zeitstempel: 0x54503d20

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00000005

ID des fehlerhaften Prozesses: 0xecc

Startzeit der fehlerhaften Anwendung: 0xage3x.exe0

Pfad der fehlerhaften Anwendung: age3x.exe1

Pfad des fehlerhaften Moduls: age3x.exe2

Berichtskennung: age3x.exe3

Vollständiger Name des fehlerhaften Pakets: age3x.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: age3x.exe5
 

Error: (06/13/2015 06:21:25 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: insC212.tmp, Version: 3.0.0.0, Zeitstempel: 0x40daa4fa

Name des fehlerhaften Moduls: ntdll.dll, Version: 6.3.9600.17736, Zeitstempel: 0x550f42c2

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00041192

ID des fehlerhaften Prozesses: 0x584

Startzeit der fehlerhaften Anwendung: 0xinsC212.tmp0

Pfad der fehlerhaften Anwendung: insC212.tmp1

Pfad des fehlerhaften Moduls: insC212.tmp2

Berichtskennung: insC212.tmp3

Vollständiger Name des fehlerhaften Pakets: insC212.tmp4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: insC212.tmp5
 

Error: (06/13/2015 02:29:43 PM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifest.

Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifest.
 

Error: (06/08/2015 09:03:31 PM) (Source: Winlogon) (EventID: 4005) (User: )

Description: Der Windows-Anmeldeprozess wurde unerwartet beendet.
 

Error: (06/05/2015 10:32:00 PM) (Source: Winlogon) (EventID: 4005) (User: )

Description: Der Windows-Anmeldeprozess wurde unerwartet beendet.
 

Error: (06/04/2015 02:07:24 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Dungeons2.exe, Version: 5.0.1.11919, Zeitstempel: 0x5515372e

Name des fehlerhaften Moduls: ntdll.dll, Version: 6.3.9600.17736, Zeitstempel: 0x550f42c2

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00040fb2

ID des fehlerhaften Prozesses: 0xf5c

Startzeit der fehlerhaften Anwendung: 0xDungeons2.exe0

Pfad der fehlerhaften Anwendung: Dungeons2.exe1

Pfad des fehlerhaften Moduls: Dungeons2.exe2

Berichtskennung: Dungeons2.exe3

Vollständiger Name des fehlerhaften Pakets: Dungeons2.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Dungeons2.exe5
 

Error: (06/04/2015 00:13:14 PM) (Source: Desktop Window Manager) (EventID: 9020) (User: )

Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x8898008d) festgestellt.
 
 

System errors:

=============

Error: (06/14/2015 02:57:38 PM) (Source: DCOM) (EventID: 10010) (User: VINCENT-PC)

Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}
 

Error: (06/14/2015 02:57:19 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Windows Defender-Dienst" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%577
 

Error: (06/14/2015 02:51:45 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 6) (User: NT-AUTORITÄT)

Description: Einige Features zur Energieverwaltung im Leistungsstatus wurden im Prozessor aufgrund eines bekannten Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten.
 

Error: (06/14/2015 02:52:04 PM) (Source: EventLog) (EventID: 6008) (User: )

Description: Das System wurde zuvor am ‎14.‎06.‎2015 um 13:43:20 unerwartet heruntergefahren.
 

Error: (06/13/2015 10:40:31 PM) (Source: DCOM) (EventID: 10016) (User: VINCENT-PC)

Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}Vincent-PCVincentS-1-5-21-243792411-4263257777-2185628945-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
 

Error: (06/13/2015 10:40:31 PM) (Source: DCOM) (EventID: 10016) (User: VINCENT-PC)

Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}Vincent-PCVincentS-1-5-21-243792411-4263257777-2185628945-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
 

Error: (06/13/2015 10:40:31 PM) (Source: DCOM) (EventID: 10016) (User: VINCENT-PC)

Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}Vincent-PCVincentS-1-5-21-243792411-4263257777-2185628945-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
 

Error: (06/13/2015 10:40:31 PM) (Source: DCOM) (EventID: 10016) (User: VINCENT-PC)

Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}Vincent-PCVincentS-1-5-21-243792411-4263257777-2185628945-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
 

Error: (06/13/2015 10:40:31 PM) (Source: DCOM) (EventID: 10016) (User: VINCENT-PC)

Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}Vincent-PCVincentS-1-5-21-243792411-4263257777-2185628945-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
 

Error: (06/13/2015 10:40:31 PM) (Source: DCOM) (EventID: 10016) (User: VINCENT-PC)

Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}Vincent-PCVincentS-1-5-21-243792411-4263257777-2185628945-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
 
 

Microsoft Office:

=========================

Error: (06/14/2015 03:00:10 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: firefox.exe38.0.5.5623be001d0a6a17cabb2224294967295C:\Program Files (x86)\Mozilla Firefox\firefox.exeedd1abee-1294-11e5-82a4-001966dbda5f
 

Error: (06/14/2015 00:22:55 PM) (Source:  ) (EventID: 0) (User: )

Description: 1
 

Error: (06/13/2015 10:25:07 PM) (Source:  ) (EventID: 0) (User: )

Description: 1
 

Error: (06/13/2015 06:21:26 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: age3x.exe5.106.906.42445006db1user32.dll6.3.9600.1741554503d20c000000500000005ecc01d0a5f4f24e52eeC:\Program Files (x86)\Microsoft Games\Age of Empires III\age3x.exeC:\WINDOWS\SYSTEM32\user32.dll3cbf98f8-11e8-11e5-82a2-001966dbda5f
 

Error: (06/13/2015 06:21:25 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: insC212.tmp3.0.0.040daa4fantdll.dll6.3.9600.17736550f42c2c00000050004119258401d0a5f4f96e3b13C:\Users\Vincent\AppData\Local\Temp\insC212.tmpC:\WINDOWS\SYSTEM32\ntdll.dll3c355076-11e8-11e5-82a2-001966dbda5f
 

Error: (06/13/2015 02:29:43 PM) (Source: SideBySide) (EventID: 78) (User: )

Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_6240b9c7ecbd0bda.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17810_none_a9edf09f013934e0.manifestc:\users\vincent\downloads\esetsmartinstaller_deu.exe
 

Error: (06/08/2015 09:03:31 PM) (Source: Winlogon) (EventID: 4005) (User: )

Description: 
 

Error: (06/05/2015 10:32:00 PM) (Source: Winlogon) (EventID: 4005) (User: )

Description: 
 

Error: (06/04/2015 02:07:24 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Dungeons2.exe5.0.1.119195515372entdll.dll6.3.9600.17736550f42c2c000000500040fb2f5c01d09eba633700b3C:\Program Files (x86)\Steam\steamapps\common\Dungeons2\Dungeons2.exeC:\WINDOWS\SYSTEM32\ntdll.dll420c2067-0ab2-11e5-829a-001966dbda5f
 

Error: (06/04/2015 00:13:14 PM) (Source: Desktop Window Manager) (EventID: 9020) (User: )

Description: 0x8898008d
 
 

CodeIntegrity Errors:

===================================

  Date: 2015-06-14 14:57:19.813

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2015-06-13 22:40:08.368

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2015-06-11 16:17:54.961

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2015-06-07 16:23:06.006

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2015-06-07 09:25:32.009

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2015-06-06 18:18:42.102

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2015-06-06 09:06:18.103

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2015-06-04 18:26:37.605

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2015-06-04 18:17:12.355

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2015-06-04 18:06:40.321

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Core(TM)2 Duo CPU E7400 @ 2.80GHz

Percentage of memory in use: 51%

Total physical RAM: 3263.3 MB

Available physical RAM: 1568.45 MB

Total Pagefile: 4479.3 MB

Available Pagefile: 2214.78 MB

Total Virtual: 131072 MB

Available Virtual: 131071.85 MB
 

==================== Drives ================================
 

Drive c: (Volume) (Fixed) (Total:232.88 GB) (Free:27.03 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive d: (Laufwerk) (Fixed) (Total:93.16 GB) (Free:10.9 GB) NTFS

Drive h: (LOTRBFME2) (CDROM) (Total:5.54 GB) (Free:0 GB) UDF
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 93.2 GB) (Disk ID: B4E7F548)

Partition 1: (Not Active) - (Size=93.2 GB) - (Type=07 NTFS)
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 1F6756F2)

Partition 1: (Active) - (Size=232.9 GB) - (Type=07 NTFS)
 

==================== End of log ============================

--- --- ---

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:13-06-2015

Ran by Vincent (administrator) on VINCENT-PC on 14-06-2015 20:11:15

Running from C:\Users\Vincent\Downloads\FRST-OlderVersion

Loaded Profiles: Vincent (Available Profiles: Vincent)

Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: FF)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(AMD) C:\Windows\System32\atiesrxx.exe

(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe

(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe

(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20856_x64__8wekyb3d8bbwe\livecomm.exe

(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe

(Electronic Arts) C:\Program Files (x86)\Origin\OriginClientService.exe

(Mozilla Corporation) C:\Users\Vincent\Desktop\Tor Browser\Browser\firefox.exe

(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766688 2014-07-04] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-22] (Avast Software s.r.o.)

HKU\S-1-5-21-243792411-4263257777-2185628945-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [2892992 2015-06-04] (Valve Corporation)

HKU\S-1-5-21-243792411-4263257777-2185628945-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3632472 2015-06-14] (Electronic Arts)

HKU\S-1-5-21-243792411-4263257777-2185628945-1001\...\RunOnce: [FlashPlayerUpdate] => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_17_0_0_188_Plugin.exe [927920 2015-06-09] (Adobe Systems Incorporated)

HKU\S-1-5-21-243792411-4263257777-2185628945-1001\...\MountPoints2: {33bf4f3f-2704-11e4-824c-806e6f6e6963} - "H:\Autorun.exe" 

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-05-22] (Avast Software s.r.o.)

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-05-22] (Avast Software s.r.o.)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-05-17] (Oracle Corporation)

BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-05-22] (Avast Software s.r.o.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-05-17] (Oracle Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

StartMenuInternet: IEXPLORE.EXE - iexplore.exe
 

FireFox:

========

FF ProfilePath: C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\om2neqz6.default

FF DefaultSearchEngine: Ecosia

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_17_0_0_188.dll [2015-06-09] ()

FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)

FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_188.dll [2015-06-09] ()

FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-05-17] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-05-17] (Oracle Corporation)

FF Plugin HKU\S-1-5-21-243792411-4263257777-2185628945-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2015-01-21] ()

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2001-09-10] (Adobe Systems Inc.)

FF SearchPlugin: C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\om2neqz6.default\searchplugins\ecosia.xml [2015-06-10]

FF Extension: No Name - C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\om2neqz6.default\Extensions\1427228675_xpi [2015-03-24]

FF Extension: WOT - C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\om2neqz6.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-06-10]

FF Extension: Ecosia — The search engine that plants trees! - C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\om2neqz6.default\Extensions\{d04b0b40-3dab-4f0b-97a6-04ec3eddbfb0}.xpi [2015-02-21]

FF Extension: Adblock Plus - C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\om2neqz6.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-21]

FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF

FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-05-22]
 

Chrome: 

=======

CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-05-22]
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-05-22] (Avast Software s.r.o.)

S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)

S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]

R3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1997168 2015-06-14] (Electronic Arts)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)

S2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-05-22] ()

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-05-22] (Avast Software s.r.o.)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-05-22] (Avast Software s.r.o.)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-05-22] ()

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-05-22] (Avast Software s.r.o.)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-05-22] (Avast Software s.r.o.)

R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-05-22] (Avast Software s.r.o.)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-05-22] ()

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2015-02-08] ()

R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2015-02-08] ()

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)

R3 xusb22; C:\Windows\System32\drivers\xusb22.sys [87040 2014-03-18] (Microsoft Corporation)
 

==================== NetSvcs (Whitelisted) ===================
 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 

==================== One Month Created files and folders ========
 

(If an entry is included in the fixlist, the file/folder will be moved.)
 

2015-06-11 16:20 - 2015-06-11 16:20 - 00000000 ____D C:\Users\Vincent\AppData\Local\GWX

2015-06-11 16:18 - 2015-06-03 18:18 - 00792568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2015-06-11 16:18 - 2015-06-03 18:18 - 00178168 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2015-06-10 20:29 - 2015-06-10 20:29 - 00001177 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2015-06-10 20:29 - 2015-06-10 20:29 - 00001165 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk

2015-06-10 20:29 - 2015-06-10 20:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2015-06-10 20:26 - 2015-06-10 20:26 - 06162288 _____ ( ) C:\Users\Vincent\Downloads\adblockplusie-1.4.exe

2015-06-10 19:17 - 2015-05-25 15:23 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcResources.dll

2015-06-10 19:17 - 2015-05-25 15:07 - 01430528 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll

2015-06-10 19:17 - 2015-05-22 15:08 - 00700416 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll

2015-06-10 19:17 - 2015-05-21 15:08 - 01119232 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll

2015-06-10 19:17 - 2015-05-21 15:08 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll

2015-06-10 19:17 - 2015-05-21 15:08 - 00756736 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll

2015-06-10 19:17 - 2015-05-21 15:08 - 00422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll

2015-06-10 19:17 - 2015-05-21 15:08 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll

2015-06-10 19:17 - 2015-05-21 15:08 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll

2015-06-10 19:17 - 2015-04-25 04:34 - 00653824 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll

2015-06-10 19:17 - 2015-04-25 04:33 - 00549888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll

2015-06-10 19:17 - 2015-04-17 00:07 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll

2015-06-10 19:17 - 2015-04-16 08:17 - 00325464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS

2015-06-10 19:17 - 2015-04-14 00:37 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\authz.dll

2015-06-10 19:17 - 2015-04-14 00:34 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authz.dll

2015-06-10 19:17 - 2015-04-10 02:40 - 01249280 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll

2015-06-10 19:17 - 2015-04-10 02:17 - 01018880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll

2015-06-10 19:17 - 2015-04-09 00:41 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rgb9rast.dll

2015-06-10 19:17 - 2015-04-09 00:07 - 00410336 _____ C:\WINDOWS\system32\ApnDatabase.xml

2015-06-10 19:17 - 2015-04-02 00:42 - 03097600 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll

2015-06-10 19:17 - 2015-04-02 00:30 - 02483712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll

2015-06-10 19:17 - 2015-04-01 06:21 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe

2015-06-10 19:17 - 2015-04-01 06:18 - 00468480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll

2015-06-10 19:17 - 2015-04-01 06:17 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssphtb.dll

2015-06-10 19:17 - 2015-04-01 06:08 - 00774144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll

2015-06-10 19:17 - 2015-04-01 05:46 - 03633664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll

2015-06-10 19:17 - 2015-04-01 05:17 - 02551808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll

2015-06-10 19:17 - 2015-04-01 05:17 - 00903168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe

2015-06-10 19:17 - 2015-04-01 04:53 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll

2015-06-10 19:17 - 2015-04-01 04:53 - 00272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe

2015-06-10 19:17 - 2015-04-01 04:45 - 02749952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll

2015-06-10 19:17 - 2015-04-01 04:45 - 00699392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll

2015-06-10 19:17 - 2015-04-01 04:14 - 01920000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll

2015-06-10 19:17 - 2015-04-01 04:12 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe

2015-06-10 19:17 - 2015-03-20 05:49 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll

2015-06-10 19:17 - 2015-03-20 05:08 - 00477184 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll

2015-06-10 19:17 - 2015-03-20 04:37 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll

2015-06-10 19:17 - 2015-03-20 04:07 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll

2015-06-10 19:17 - 2015-03-02 03:43 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastapi.dll

2015-06-10 19:17 - 2015-03-02 03:21 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastapi.dll

2015-06-10 19:16 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2015-06-10 19:16 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2015-06-10 19:16 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2015-06-10 19:16 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec

2015-06-10 19:16 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2015-06-10 19:16 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll

2015-06-10 19:16 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll

2015-06-10 19:16 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll

2015-06-10 19:16 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2015-06-10 19:16 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll

2015-06-10 19:16 - 2015-05-23 04:47 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll

2015-06-10 19:16 - 2015-05-23 04:43 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll

2015-06-10 19:16 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2015-06-10 19:16 - 2015-05-23 04:38 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll

2015-06-10 19:16 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2015-06-10 19:16 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2015-06-10 19:16 - 2015-05-23 04:28 - 01042944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll

2015-06-10 19:16 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2015-06-10 19:16 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2015-06-10 19:16 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

2015-06-10 19:16 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2015-06-10 19:16 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2015-06-10 19:16 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec

2015-06-10 19:16 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2015-06-10 19:16 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll

2015-06-10 19:16 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll

2015-06-10 19:16 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll

2015-06-10 19:16 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll

2015-06-10 19:16 - 2015-05-22 20:23 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll

2015-06-10 19:16 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll

2015-06-10 19:16 - 2015-05-22 20:15 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll

2015-06-10 19:16 - 2015-05-22 20:09 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll

2015-06-10 19:16 - 2015-05-22 20:08 - 00374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll

2015-06-10 19:16 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2015-06-10 19:16 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2015-06-10 19:16 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2015-06-10 19:16 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2015-06-10 19:16 - 2015-05-22 19:49 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll

2015-06-10 19:16 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2015-06-10 19:16 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll

2015-06-10 19:16 - 2015-05-21 18:47 - 04177920 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys

2015-06-07 21:06 - 2015-06-08 18:42 - 00000000 ____D C:\Program Files (x86)\World of Warcraft

2015-06-06 22:13 - 2015-06-06 22:13 - 00000000 ____D C:\AVAST Software

2015-05-31 15:56 - 2015-05-31 15:57 - 04697768 _____ () C:\Users\Vincent\Downloads\TechnicLauncher.exe

2015-05-31 14:34 - 2015-05-31 14:34 - 00000000 ____D C:\Users\Vincent\AppData\Roaming\Kalypso Media

2015-05-31 14:34 - 2015-05-31 14:34 - 00000000 ____D C:\Users\Vincent\AppData\Roaming\.mono

2015-05-31 14:34 - 2015-05-31 14:34 - 00000000 ____D C:\ProgramData\.mono

2015-05-31 14:13 - 2015-05-31 14:13 - 00000222 _____ C:\Users\Vincent\Desktop\Dungeons 2.url

2015-05-30 10:23 - 2015-05-30 10:23 - 00000857 _____ C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Tor Browser.lnk

2015-05-30 10:23 - 2015-05-30 10:23 - 00000809 _____ C:\Users\Vincent\Desktop\Start Tor Browser.lnk

2015-05-30 10:22 - 2015-05-30 10:23 - 00000000 ____D C:\Users\Vincent\Desktop\Tor Browser

2015-05-27 21:02 - 2015-05-27 21:02 - 00000901 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Flixster.lnk

2015-05-27 21:02 - 2015-05-27 21:02 - 00000889 _____ C:\Users\Public\Desktop\Flixster.lnk

2015-05-27 21:02 - 2015-05-27 21:02 - 00000000 ____D C:\Users\Vincent\AppData\Roaming\com.wb.DC2

2015-05-27 21:02 - 2015-05-27 21:02 - 00000000 ____D C:\Program Files (x86)\Flixster

2015-05-27 21:01 - 2015-05-27 21:01 - 01477254 _____ C:\Users\Vincent\Downloads\Flixster.air

2015-05-27 21:01 - 2015-05-27 21:01 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia

2015-05-27 21:01 - 2015-05-27 21:01 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia

2015-05-27 21:01 - 2015-05-27 21:01 - 00000000 ____D C:\ProgramData\Adobe

2015-05-27 21:00 - 2015-05-27 21:01 - 17721768 _____ (Adobe Systems Inc.) C:\Users\Vincent\Downloads\AdobeAIRInstaller.exe

2015-05-26 10:51 - 2015-05-26 10:51 - 00852630 _____ C:\Users\Vincent\Downloads\SecurityCheck.exe

2015-05-26 10:33 - 2015-05-26 10:33 - 02347384 _____ (ESET) C:\Users\Vincent\Downloads\esetsmartinstaller_deu.exe

2015-05-22 20:23 - 2015-05-29 20:47 - 00000000 ____D C:\Users\Vincent\AppData\Roaming\Dropbox

2015-05-22 20:21 - 2015-05-22 20:21 - 00000000 ____D C:\Users\Vincent\AppData\Roaming\AVAST Software

2015-05-22 20:20 - 2015-05-22 20:20 - 00001944 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk

2015-05-22 20:20 - 2015-05-22 20:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software

2015-05-22 20:19 - 2015-06-14 14:59 - 00004182 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update

2015-05-22 20:19 - 2015-05-22 20:19 - 00442264 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswSP.sys

2015-05-22 20:19 - 2015-05-22 20:19 - 00364472 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\aswBoot.exe

2015-05-22 20:19 - 2015-05-22 20:19 - 00272248 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys

2015-05-22 20:19 - 2015-05-22 20:19 - 00137288 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswStm.sys

2015-05-22 20:19 - 2015-05-22 20:19 - 00093528 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswRdr2.sys

2015-05-22 20:19 - 2015-05-22 20:19 - 00089944 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswMonFlt.sys

2015-05-22 20:19 - 2015-05-22 20:19 - 00065736 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys

2015-05-22 20:19 - 2015-05-22 20:19 - 00029168 _____ C:\WINDOWS\system32\Drivers\aswHwid.sys

2015-05-22 20:19 - 2015-05-22 20:18 - 01047320 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswSnx.sys

2015-05-22 20:18 - 2015-05-22 20:18 - 00043112 _____ (Avast Software s.r.o.) C:\WINDOWS\avastSS.scr

2015-05-22 20:17 - 2015-05-22 20:17 - 00000000 ____D C:\Program Files\AVAST Software

2015-05-22 20:15 - 2015-05-22 20:15 - 05481344 _____ (Avast Software s.r.o.) C:\Users\Vincent\Downloads\avast_free_antivirus_setup.exe

2015-05-22 20:15 - 2015-05-22 20:15 - 00000000 ____D C:\ProgramData\AVAST Software

2015-05-22 16:43 - 2015-06-10 20:49 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-243792411-4263257777-2185628945-1001

2015-05-22 16:43 - 2015-05-22 16:43 - 00000886 _____ C:\Users\Vincent\Desktop\JRT.txt

2015-05-22 16:42 - 2015-06-14 20:11 - 00000000 ____D C:\Users\Vincent\Downloads\FRST-OlderVersion

2015-05-22 16:42 - 2015-05-26 10:58 - 02108928 _____ (Farbar) C:\Users\Vincent\Downloads\FRST64.exe

2015-05-22 16:41 - 2015-05-22 16:41 - 00000207 _____ C:\WINDOWS\tweaking.com-regbackup-VINCENT-PC-Windows-8.1-(64-bit).dat

2015-05-22 16:41 - 2015-05-22 16:41 - 00000000 ____D C:\RegBackup

2015-05-21 20:04 - 2015-05-21 20:04 - 02720009 _____ (Thisisu) C:\Users\Vincent\Downloads\JRT.exe

2015-05-21 20:04 - 2015-05-21 20:04 - 02222592 _____ C:\Users\Vincent\Downloads\AdwCleaner_4.205.exe

2015-05-21 17:47 - 2015-05-21 17:47 - 00001286 _____ C:\Users\Vincent\Desktop\Revo Uninstaller.lnk

2015-05-21 17:47 - 2015-05-21 17:47 - 00000000 ____D C:\Program Files (x86)\VS Revo Group

2015-05-21 17:46 - 2015-05-21 17:46 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Vincent\Downloads\revosetup95.exe

2015-05-21 17:46 - 2015-05-21 17:46 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Vincent\Downloads\revosetup95 (1).exe

2015-05-17 14:51 - 2015-06-14 20:11 - 00000000 ____D C:\FRST
 

==================== One Month Modified files and folders ========
 

(If an entry is included in the fixlist, the file/folder will be moved.)
 

2015-06-14 20:03 - 2015-01-30 22:29 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

2015-06-14 20:00 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\sru

2015-06-14 16:03 - 2014-08-18 20:41 - 00000000 ___DO C:\Users\Vincent\SkyDrive

2015-06-14 15:43 - 2015-01-30 18:07 - 00000000 ____D C:\Program Files (x86)\Steam

2015-06-14 15:34 - 2015-05-09 21:17 - 00000000 ____D C:\Users\Vincent\AppData\Roaming\Origin

2015-06-14 15:33 - 2015-05-09 21:15 - 00000000 ____D C:\ProgramData\Origin

2015-06-14 15:33 - 2015-05-09 21:15 - 00000000 ____D C:\Program Files (x86)\Origin

2015-06-14 14:53 - 2015-01-29 21:29 - 00000000 ____D C:\Users\Vincent

2015-06-14 14:52 - 2013-08-22 16:46 - 00044234 _____ C:\WINDOWS\setupact.log

2015-06-14 14:52 - 2013-08-22 16:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2015-06-14 13:38 - 2015-01-29 21:32 - 01094568 _____ C:\WINDOWS\WindowsUpdate.log

2015-06-13 22:34 - 2013-08-22 15:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI

2015-06-13 16:11 - 2015-02-08 20:50 - 00000000 ____D C:\Users\Vincent\AppData\Local\Battle.net

2015-06-13 15:44 - 2015-01-29 21:34 - 01776918 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2015-06-13 15:44 - 2013-08-23 01:24 - 00764340 _____ C:\WINDOWS\system32\perfh007.dat

2015-06-13 15:44 - 2013-08-23 01:24 - 00159160 _____ C:\WINDOWS\system32\perfc007.dat

2015-06-13 15:44 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\rescache

2015-06-11 16:17 - 2013-08-22 16:44 - 00357640 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2015-06-10 20:56 - 2015-02-04 22:12 - 00000000 ___SD C:\WINDOWS\system32\CompatTel

2015-06-10 20:56 - 2015-02-04 22:12 - 00000000 ____D C:\WINDOWS\system32\appraiser

2015-06-10 20:56 - 2013-08-22 17:36 - 00000000 ___RD C:\WINDOWS\ToastData

2015-06-10 20:56 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\PolicyDefinitions

2015-06-10 20:35 - 2015-04-03 20:40 - 00000000 ____D C:\Program Files (x86)\Google

2015-06-10 20:34 - 2015-04-03 20:40 - 00000000 ____D C:\Users\Vincent\AppData\Local\Google

2015-06-10 20:31 - 2015-05-09 10:41 - 00000000 ____D C:\Users\Vincent\AppData\Roaming\Opera Software

2015-06-10 20:31 - 2015-05-09 10:41 - 00000000 ____D C:\Users\Vincent\AppData\Local\Opera Software

2015-06-10 20:31 - 2015-05-09 10:39 - 00000000 ____D C:\Program Files (x86)\Opera

2015-06-10 20:30 - 2015-03-21 21:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2015-06-10 19:39 - 2013-08-22 17:20 - 00000000 ____D C:\WINDOWS\CbsTemp

2015-06-10 19:37 - 2015-01-31 16:57 - 00000000 ____D C:\WINDOWS\system32\MRT

2015-06-10 19:32 - 2015-01-31 16:57 - 140135120 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2015-06-09 20:04 - 2015-01-30 22:29 - 00003772 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater

2015-06-09 15:49 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\AppReadiness

2015-06-07 20:57 - 2015-02-08 20:50 - 00000000 ____D C:\Program Files (x86)\Battle.net

2015-06-05 17:28 - 2015-05-09 10:44 - 00136408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys

2015-06-04 12:15 - 2014-08-27 16:32 - 00248320 ___SH C:\Users\Vincent\Desktop\Thumbs.db

2015-06-02 21:17 - 2015-01-29 22:00 - 00000000 ____D C:\Users\Vincent\AppData\Roaming\vlc

2015-05-31 14:34 - 2015-01-29 21:46 - 00000000 ____D C:\ProgramData\Package Cache

2015-05-31 14:32 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared

2015-05-31 14:13 - 2015-01-30 18:22 - 00000000 ____D C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2015-05-30 20:46 - 2015-01-29 21:23 - 00159222 _____ C:\WINDOWS\PFRO.log

2015-05-30 20:44 - 2014-11-18 18:35 - 00000000 ____D C:\AdwCleaner

2015-05-27 21:01 - 2015-02-09 13:40 - 00000000 ____D C:\Program Files (x86)\Adobe

2015-05-27 21:01 - 2015-01-30 21:19 - 00000000 ____D C:\Users\Vincent\AppData\Local\Adobe

2015-05-27 21:01 - 2015-01-29 21:36 - 00000000 ____D C:\Users\Vincent\AppData\Roaming\Adobe

2015-05-22 20:44 - 2015-01-29 21:59 - 00000893 _____ C:\Users\Public\Desktop\VLC media player.lnk

2015-05-22 20:44 - 2015-01-29 21:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN

2015-05-22 15:56 - 2015-01-29 21:36 - 00001017 _____ C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2015-05-21 20:53 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\InputMethod

2015-05-21 20:50 - 2015-05-09 10:40 - 00000000 ____D C:\Program Files (x86)\d139cb3b-b0c8-4ed2-b3eb-be3ff920eb9e

2015-05-21 20:50 - 2015-05-07 18:54 - 00000000 ____D C:\Program Files (x86)\CNN News

2015-05-21 20:50 - 2015-02-09 13:41 - 00000000 ____D C:\Program Files (x86)\ANNO 1503

2015-05-21 18:03 - 2015-04-04 13:59 - 00000000 ___SD C:\WINDOWS\SysWOW64\GWX

2015-05-21 18:03 - 2015-04-04 13:59 - 00000000 ___SD C:\WINDOWS\system32\GWX

2015-05-17 10:17 - 2015-02-08 20:54 - 00000000 ____D C:\Program Files (x86)\StarCraft II

2015-05-17 10:07 - 2015-04-11 15:44 - 00000000 ____D C:\ProgramData\Oracle

2015-05-17 10:07 - 2015-04-11 15:44 - 00000000 ____D C:\Program Files (x86)\Java

2015-05-17 10:06 - 2015-04-11 15:45 - 00097888 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
 

==================== Files in the root of some directories =======
 

2015-04-14 19:33 - 2015-05-12 15:27 - 0000020 _____ () C:\Users\Vincent\AppData\Roaming\appdataFr3.bin
 

Some files in TEMP:

====================

C:\Users\Vincent\AppData\Local\Temp\AutoRun.exe

C:\Users\Vincent\AppData\Local\Temp\AutoRunGUI.dll

C:\Users\Vincent\AppData\Local\Temp\CmdLineExt02.dll

C:\Users\Vincent\AppData\Local\Temp\comver.dll

C:\Users\Vincent\AppData\Local\Temp\drm_dialogs.dll

C:\Users\Vincent\AppData\Local\Temp\drm_dyndata_7270014.dll

C:\Users\Vincent\AppData\Local\Temp\drm_dyndata_7380006.dll

C:\Users\Vincent\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpm10umo.dll

C:\Users\Vincent\AppData\Local\Temp\EBU5A94.exe

C:\Users\Vincent\AppData\Local\Temp\EBU76B4.exe

C:\Users\Vincent\AppData\Local\Temp\EBU925D.exe

C:\Users\Vincent\AppData\Local\Temp\EBUA20D.DLL

C:\Users\Vincent\AppData\Local\Temp\EBUF1E3.exe

C:\Users\Vincent\AppData\Local\Temp\jre-8u45-windows-au.exe

C:\Users\Vincent\AppData\Local\Temp\MouseKeyboardCenterx64_1031.exe

C:\Users\Vincent\AppData\Local\Temp\SIntf16.dll

C:\Users\Vincent\AppData\Local\Temp\SIntf32.dll

C:\Users\Vincent\AppData\Local\Temp\SIntfNT.dll

C:\Users\Vincent\AppData\Local\Temp\sqlite3.dll

C:\Users\Vincent\AppData\Local\Temp\supoptsetup.exe

C:\Users\Vincent\AppData\Local\Temp\ubi9AE6.tmp.exe

C:\Users\Vincent\AppData\Local\Temp\_is2D.exe

C:\Users\Vincent\AppData\Local\Temp\_is4286.exe

C:\Users\Vincent\AppData\Local\Temp\_is4708.exe

C:\Users\Vincent\AppData\Local\Temp\_is5546.exe

C:\Users\Vincent\AppData\Local\Temp\_is583E.exe

C:\Users\Vincent\AppData\Local\Temp\_is68E5.exe

C:\Users\Vincent\AppData\Local\Temp\_is6A9D.exe

C:\Users\Vincent\AppData\Local\Temp\_isA3F2.exe

C:\Users\Vincent\AppData\Local\Temp\_isB718.exe

C:\Users\Vincent\AppData\Local\Temp\_isBB92.exe

C:\Users\Vincent\AppData\Local\Temp\_isC1E9.exe

C:\Users\Vincent\AppData\Local\Temp\_isF172.exe

C:\Users\Vincent\AppData\Local\Temp\_isFA7D.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-06-09 21:08
 

==================== End of log ============================