Trojaner-Board - Windows 7: Häufiger Bluescreen sowie unbekannter Fehler in Antivirenprogramm

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - Windows 7: Häufiger Bluescreen sowie unbekannter Fehler in Antivirenprogramm (https://www.trojaner-board.de/169718-windows-7-haeufiger-bluescreen-unbekannter-fehler-antivirenprogramm.html)

Windows 7: Häufiger Bluescreen sowie unbekannter Fehler in Antivirenprogramm

Seit einer Weile stürzt mein PC immer wieder ab und es erscheint ein Bluescreen mit Fehlermeldungen wie z.B. PAGE_FAULT_IN_NONPAGED_AREA, BAD_POOL_HEADER oder IRQL_NOT_LESS_OR_EQUAL. Außerdem zeigt mein Antivirenprogramm (AVG) an, dass ein unbekannter Fehler in einer von deren Dateien vorliegt (mehrere verschiedene Dateien nacheinander). Auch kommt oft eine Fehlermeldung bei meinem Browser auf verschiedenen Websites, sodass ich diese einfach nochmal neu laden muss, kurz nachdem ich sie erst geöffnet habe. Ich denke, ich habe mir damit einen Virus / Trojaner eingefangen und frage hiermit nach einem gescheiterem Hirn als meinem, welches mir in dieser Situation weiterhelfen könnte. Vielen Dank schonmal im Voraus. :dankeschoen: (PS: im Anhang ist die FRST.txt Datei in 2 Teilen, da sie zu groß war um sie hier hinein zu schreiben)

Code:

defogger_disable by jpshortstuff (23.02.10.1)

Log created at 02:42 on 14/08/2015 (D4sherInc)
 

Checking for autostart values...

HKCU\~\Run values retrieved.

HKLM\~\Run values retrieved.
 

Checking for services/drivers...
 
 

-=E.O.F=-

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:13-08-2015

durchgeführt von D4sherInc (2015-08-14 02:56:00)

Gestartet von C:\Users\D4sherInc\Desktop

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-4293377608-3333764666-2683399837-500 - Administrator - Disabled)

D4sherInc (S-1-5-21-4293377608-3333764666-2683399837-1000 - Administrator - Enabled) => C:\Users\D4sherInc

Gast (S-1-5-21-4293377608-3333764666-2683399837-501 - Limited - Disabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: AVG AntiVirus 2015 (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: AVG AntiVirus 2015 (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

µTorrent (HKU\S-1-5-21-4293377608-3333764666-2683399837-1000\...\uTorrent) (Version: 3.4.3.40298 - BitTorrent Inc.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)

ACPI Driver Installer (HKLM-x32\...\553E35CD-0415-41bc-B39A-410375E88534) (Version: 2.1 - Intel Corporation)

Adobe Reader XI (11.0.12) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated)

AlienFX for KoneXTD (HKLM-x32\...\InstallShield_{48725548-E470-4816-99DD-6667EABAB982}) (Version: 1.02 - Roccat GmbH)

AlienFX for KoneXTD (Version: 1.02 - Roccat GmbH) Hidden

Arma 2 (HKLM-x32\...\Steam App 33910) (Version:  - Bohemia Interactive)

Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version:  - Bohemia Interactive)

Arma 2: Operation Arrowhead Beta (Obsolete) (HKLM-x32\...\Steam App 219540) (Version:  - )

AVG 2015 (HKLM\...\AVG) (Version: 2015.0.6125 - AVG Technologies)

AVG 2015 (Version: 15.0.4401 - AVG Technologies) Hidden

AVG 2015 (Version: 15.0.6125 - AVG Technologies) Hidden

AVG Web TuneUp (HKLM-x32\...\AVG Web TuneUp) (Version: 4.1.5.143 - AVG Technologies)

BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version:  - )

BattlEye Uninstall (HKLM-x32\...\BattlEye for A2) (Version:  - )

Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)

Creative Systeminformationen (HKLM-x32\...\SysInfo) (Version: 1.10 - Creative Technology Limited)

Curse (HKLM-x32\...\{1F2611FB-6F69-4AA8-BECD-243BD8CB45F3}) (Version: 6.0.0.0 - Curse)

DayZLauncher version 0.0.0.15 (HKLM-x32\...\{E31045B4-9DB5-9EBD-44DF-BD4E6CFD40DF}_is1) (Version: 0.0.0.15 - Maca134)

FINAL FANTASY VII (HKLM-x32\...\Steam App 39140) (Version:  - Square Enix)

FINAL FANTASY XIII-2 (HKLM-x32\...\Steam App 292140) (Version:  - SQUARE ENIX)

Free Audio Editor version 1.0.9.616 (HKLM-x32\...\Free Audio Editor_is1) (Version: 1.0.9.616 - DVDVideoSoft Ltd.)

Free Video to Flash Converter version 5.0.59.525 (HKLM-x32\...\Free Video to Flash Converter_is1) (Version: 5.0.59.525 - DVDVideoSoft Ltd.)

Free YouTube Download version 3.2.56.324 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.56.324 - DVDVideoSoft Ltd.)

Free YouTube to MP3 Converter version 3.12.59.616 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.59.616 - DVDVideoSoft Ltd.)

GIGABYTE OC_GURU II (HKLM-x32\...\InstallShield_{EA298EC1-2B8F-4DA9-8C5B-BC1FCBBAD72F}) (Version: 1.69.0000 - GIGABYTE Technology Co.,Ltd.)

GIGABYTE OC_GURU II (x32 Version: 1.69.0000 - GIGABYTE Technology Co.,Ltd.) Hidden

GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 44.0.2403.155 - Google Inc.)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.28.1 - Google Inc.) Hidden

Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)

Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.1.1000 - Intel Corporation)

Intel(R) Small Business Advantage (HKLM-x32\...\{6A6D86CD-B004-46b7-8951-7BB75A776F8C}) (Version: 2.2.51.8439 - Intel(R) Corporation)

Intel(R) Smart Connect Technology (HKLM\...\{74FD6129-2935-4EA2-93A6-A0588933EEA9}) (Version: 5.0.10.2832 - Intel Corporation)

Intel(R) Update Manager (x32 Version: 1.0.0.36888 - Intel Corporation) Hidden

Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.0.19 - Intel Corporation)

Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.17 - Intel(R) Corporation) Hidden

Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\{3FD0C489-0F02-481a-A3E1-9754CD396761}) (Version:  - Intel Corporation)

Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\3FD0C489-0F02-481a-A3E1-9754CD396761) (Version:  - Intel Corporation)

Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)

League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )

League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden

Little Fighter 2 version 2.0a (HKLM-x32\...\Little Fighter 2) (Version: version 2.0a - )

LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.383 - LogMeIn, Inc.)

LogMeIn Hamachi (x32 Version: 2.2.0.383 - LogMeIn, Inc.) Hidden

m.objects v7.0 (2330) (HKU\S-1-5-21-4293377608-3333764666-2683399837-1000\...\m.objects v7.0 (2330) 7.0.2330.0) (Version: 7.0.2330.0 - m.objects)

m.objects v7.0 (2330) (x32 Version: 7.0.2330.0 - m.objects) Hidden

Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Mozilla Firefox 38.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 38.0.5 - Mozilla)

MSI Command Center (HKLM-x32\...\{85A2564E-9ED9-448A-91E4-B9211EE58A08}_is1) (Version: 1.0.0.67 - MSI)

MSI Fast Boot (HKLM-x32\...\{0F212E7A-65EB-4668-A8D7-749026A64F8E}_is1) (Version: 1.0.1.3 - MSI)

MSI Intel Extreme Tuning Utility (HKLM-x32\...\{fbd55c4e-e884-4210-a79b-5f158834b133}) (Version: 4.4.0.103 - Intel Corporation)

MSI Intel Extreme Tuning Utility (x32 Version: 4.4.0.103 - Intel Corporation) Hidden

MSI Live Update (HKLM-x32\...\{4F46CF54-47D2-41F4-B230-B0954C544420}}_is1) (Version: 6.0.005 - MSI)

MSI Smart Utilities (HKLM-x32\...\{009E5DF2-3F97-480B-89DA-F2D5E672E14A}_is1) (Version: 2.0.0.06 - MSI)

MSI Super Charger (HKLM-x32\...\{7CDF10DD-A9B5-4DA3-AB95-E193248D4369}_is1) (Version: 1.2.025 - MSI)

NetworkGenie (HKLM-x32\...\{B416A23D-C2BD-4956-8BAE-5C3BAFF1AC1E}) (Version: 1.0.0.8 - MSI)

Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.6 - Notepad++ Team)

NVIDIA 3D Vision Controller-Treiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.11 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 344.11 - NVIDIA Corporation)

NVIDIA Grafiktreiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.11 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)

Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )

osu! (HKLM-x32\...\{991307f8-d555-4011-be4a-2e354df99a94}) (Version: latest - ppy Pty Ltd)

Overwolf (HKLM-x32\...\Overwolf) (Version: 0.88.41.0 - Overwolf Ltd.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.77.1126.2013 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7245 - Realtek Semiconductor Corp.)

RealWorld Cursor Editor (HKLM-x32\...\{2F083216-8203-4E94-8C7C-EDF1C91D037D}) (Version: 9.1.0 - RealWorld Graphics)

ROCCAT Kone XTD Mouse Driver (HKLM-x32\...\{7133137D-DF48-4522-AD88-13C82B7D0A63}) (Version:  - Roccat GmbH)

Roccat Talk (HKLM-x32\...\{605D671E-1D1E-4840-84D9-BFACE17F160D}) (Version: 1.00.0013 - Roccat GmbH)

Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.6.1 - Rockstar Games)

Search App by Ask (HKLM-x32\...\{4F524A2D-5350-4500-76A7-A758B70C1D00}) (Version: 12.29.0.197 - APN, LLC) <==== ACHTUNG

Skype™ 7.6 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.6.105 - Skype Technologies S.A.)

Sound Blaster Tactic(3D) (HKLM-x32\...\{92000C16-939B-44CA-802F-0D552019D7C8}) (Version: 1.0 - Creative Technology Limited)

Spotify (HKU\S-1-5-21-4293377608-3333764666-2683399837-1000\...\Spotify) (Version: 1.0.11.134.ga37df67b - Spotify AB)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)

Terraria (HKLM-x32\...\Steam App 105600) (Version:  - Re-Logic)

VGA Boost (HKLM-x32\...\{809ACFAE-9A4D-4C60-9223-D8B615CD8CBA}}_is1) (Version: 1.0.0.7 - MSI)

Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)

Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)

VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)

WavePad Audio-Editor (HKLM-x32\...\WavePad) (Version: 6.12 - NCH Software)

Wooxy version 1.0.1.1 (HKLM-x32\...\{4096013E-16CD-4165-9AD9-535C61E833DC}_is1) (Version: 1.0.1.1 - Chewy)

YTD Video Downloader 4.9 (HKLM-x32\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 4.9 - GreenTree Applications SRL) <==== ACHTUNG
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Wiederherstellungspunkte =========================
 
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {082DDE90-641B-4E79-ADFE-18904C9FE55A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-01-15] (Google Inc.)

Task: {0AC7C6FD-8565-4BF5-9B56-C7AD5EEC3ED9} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser

Task: {42890AAC-65C1-4F0B-B8F9-5E44F6F9C484} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-01-15] (Google Inc.)

Task: {4B4F3CB5-0042-48B6-8ABE-8F3FCC7A02F8} - System32\Tasks\{95ECF52E-DFFF-4DE2-B9EF-286766ACD134} => pcalua.exe -a G:\xampp-win32-1.7.7-usb-lite.exe -d G:\

Task: {8EFE1D34-C970-451D-943E-4074F7086219} - System32\Tasks\AVG_SYS_TASK_1014av_RUN => C:\ProgramData\Avg_Update_1014av\AVG-Secure-Search-Update_1014av.exe

Task: {94F2B49F-0A5D-415D-96F1-11C7B673A676} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)

Task: {A4B22C36-2C23-44C9-BD36-D0F4602186E0} - System32\Tasks\RtlNetworkGenieVistaStart => C:\Program Files (x86)\MSI\NetworkGenie\NetworkGenie.exe [2014-04-23] (Realtek Semiconductor)

Task: {A4D42DD1-4546-4CF5-8D94-65A481FDE0C1} - System32\Tasks\{EC17989B-172E-4B65-A11D-AC4E5DC951F1} => pcalua.exe -a C:\Users\D4sherInc\Downloads\LeagueofLegends_EUW_Installer_9_15_2014.exe -d C:\Windows\SysWOW64 -c /groupsextract:100;101;102; /out:"C:\Users\D4sherInc\AppData\Roaming\Riot Games\League of Legends\prerequisites" /callbackid:1888

Task: {AE6CCA7E-AB32-4852-BEAB-992E9E440AB6} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2015-08-09] (Overwolf LTD)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\RtlNetworkGenieVistaStart.job => C:\Program Files (x86)\MSI\NetworkGenie\NetworkGenie.exe
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2015-02-25 22:07 - 2015-07-23 15:51 - 01195920 _____ () C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe

2015-01-15 23:45 - 2014-09-13 23:53 - 00116880 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2014-04-24 13:24 - 2014-04-24 13:24 - 00209712 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe

2014-04-24 13:24 - 2014-04-24 13:24 - 00057648 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\NetworkHeuristic.dll

2014-04-24 13:24 - 2014-04-24 13:24 - 00037168 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTNetMon.dll

2014-04-24 13:24 - 2014-04-24 13:24 - 00057648 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTEncryptionCheck.dll

2015-01-16 00:05 - 2014-06-03 18:37 - 01990144 _____ () C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe

2015-07-23 15:51 - 2015-07-23 15:51 - 00168336 _____ () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.8.0\loggingserver.exe

2015-01-16 09:25 - 2015-07-23 15:51 - 03175312 _____ () C:\Program Files (x86)\AVG Web TuneUp\vprot.exe

2015-01-16 00:08 - 2014-04-21 09:09 - 00150528 ____R () C:\Program Files (x86)\MSI\NetworkGenie\gep.dll

2015-01-16 00:07 - 2014-04-30 11:15 - 01723888 _____ () C:\MSI\Smart Utilities\SuperRAIDExt.DLL

2015-07-23 15:51 - 2015-07-23 15:51 - 00528272 _____ () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.8.0\log4cplusU.dll

2015-03-12 17:06 - 2015-08-11 18:15 - 45066808 _____ () C:\Users\D4sherInc\AppData\Roaming\Spotify\libcef.dll

2015-01-20 22:23 - 2015-06-23 13:15 - 00393608 _____ () C:\Users\D4sherInc\AppData\Roaming\Curse Client\Bin\opus.dll

2015-01-20 22:23 - 2015-06-23 13:15 - 00443272 _____ () C:\Users\D4sherInc\AppData\Roaming\Curse Client\Bin\WebRTC_CSharpWrapper.dll

2015-01-28 01:15 - 2012-06-17 12:20 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\hiddriver.dll

2015-01-16 09:25 - 2015-07-23 15:51 - 40638864 _____ () C:\Program Files (x86)\AVG Web TuneUp\libcef.dll

2015-03-12 17:06 - 2015-08-11 18:15 - 01649208 _____ () C:\Users\D4sherInc\AppData\Roaming\Spotify\libglesv2.dll

2015-03-12 17:06 - 2015-08-11 18:15 - 00080952 _____ () C:\Users\D4sherInc\AppData\Roaming\Spotify\libegl.dll

2015-08-12 02:13 - 2015-08-08 02:13 - 01405768 _____ () C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.155\libglesv2.dll

2015-08-12 02:13 - 2015-08-08 02:13 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.155\libegl.dll

2015-08-12 02:13 - 2015-08-08 02:13 - 16393032 _____ () C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.155\PepperFlash\pepflashplayer.dll

2014-04-03 17:48 - 2014-04-03 17:48 - 01241560 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
 

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-4293377608-3333764666-2683399837-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\D4sherInc\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.1.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^GIGABYTE OC_GURU.lnk => C:\Windows\pss\GIGABYTE OC_GURU.lnk.CommonStartup

MSCONFIG\startupreg: Command Center => C:\Program Files (x86)\MSI\Command Center\StartCommandCenter.exe

MSCONFIG\startupreg: Fast Boot => C:\Program Files (x86)\MSI\Fast Boot\StartFastBoot.exe

MSCONFIG\startupreg: IMSS => "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe" "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe" 60

MSCONFIG\startupreg: ISCT Tray => C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe

MSCONFIG\startupreg: Live Update => C:\Program Files (x86)\MSI\Live Update\StartLiveUpdate.exe /REMINDER

MSCONFIG\startupreg: Overwolf => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent

MSCONFIG\startupreg: RTHDVCPL => "C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s

MSCONFIG\startupreg: Sound Blaster Tactic3D Control Panel => "C:\Program Files (x86)\Creative\Sound Blaster Tactic(3D)\Sound Blaster Tactic(3D) Control Panel\Tactic3D.exe" /r

MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\steam.exe" -silent

MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

MSCONFIG\startupreg: Super Charger => C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe

MSCONFIG\startupreg: USB3MON => "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"

MSCONFIG\startupreg: vProt => "C:\Program Files (x86)\AVG Web TuneUp\vprot.exe"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [VirtualPC-In-UDP-1] => (Allow) %SystemRoot%\System32\vpc.exe

FirewallRules: [VirtualPC-In-UDP-2] => (Allow) %SystemRoot%\System32\vpc.exe

FirewallRules: [VirtualPC-In-TCP-1] => (Allow) %SystemRoot%\System32\vpc.exe

FirewallRules: [{EF50C99A-A11B-4FBF-BF49-E87B56FD9D40}] => (Allow) C:\Program Files (x86)\Intel\Extreme Tuning Utility\Client\PerfTune.exe

FirewallRules: [{FA7587DC-90EF-41BB-B418-8CCEC70A8E74}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{05F1A9D9-1D2D-4083-9C22-35D3215942F1}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{0B7CBB9B-EAB5-4380-9C8C-8A52D33AB935}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{AFF3155F-CA09-461B-8A15-3BD129946CE2}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [TCP Query User{660D89E9-DF7F-431B-A3EA-EE9F4F357CB4}C:\users\d4sherinc\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\d4sherinc\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{E4D17CBD-A56F-4FAF-9E6A-E9BF7FC08487}C:\users\d4sherinc\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\d4sherinc\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{E638BDF3-2ABF-4B2F-8977-EF7722B905DA}C:\users\d4sherinc\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\d4sherinc\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [UDP Query User{42BAD5D5-88B8-4ADB-9F31-DB897A39B970}C:\users\d4sherinc\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\d4sherinc\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [{10F8CD7B-B4A9-4BCC-8ABD-7A86B53C2A42}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [TCP Query User{FFD1F21C-29FA-4810-8CF5-C56703D502F2}E:\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) E:\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [UDP Query User{AB400310-7A26-4EAB-AA71-F5DCC5626C49}E:\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) E:\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [TCP Query User{C3D56126-608D-4D49-97FD-7A1AD8600F04}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe

FirewallRules: [UDP Query User{2D8B3518-109B-4818-BCFE-A7DC299E2EFB}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe

FirewallRules: [TCP Query User{8C2F7712-3DAD-4D70-AD57-5E7840627105}E:\lol\replays\lolreplay\lolreplay.exe] => (Allow) E:\lol\replays\lolreplay\lolreplay.exe

FirewallRules: [UDP Query User{DA2150B1-C4AF-43D9-81F7-0AA51B817FE0}E:\lol\replays\lolreplay\lolreplay.exe] => (Allow) E:\lol\replays\lolreplay\lolreplay.exe

FirewallRules: [{735593C3-84CE-448F-BA68-434EBB021891}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FINAL FANTASY XIII-2\FFXiii2Launcher.exe

FirewallRules: [{260E774B-FC63-4926-B558-3CFB8E88E73A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FINAL FANTASY XIII-2\FFXiii2Launcher.exe

FirewallRules: [{D016B7A0-37BF-4531-B31F-ED8B43F2D2D8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FINAL FANTASY VII\FF7_Launcher.exe

FirewallRules: [{C4A1D594-B512-4AD9-8C37-4B995BB88D8A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FINAL FANTASY VII\FF7_Launcher.exe

FirewallRules: [TCP Query User{C14ABC31-DB3D-4C83-9F2E-62E875175971}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe

FirewallRules: [UDP Query User{FE27B682-B96A-4FAA-B61E-BF37674BB76F}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe

FirewallRules: [{421FB52A-1015-4B61-A47F-704D91792312}] => (Allow) C:\Users\D4sherInc\AppData\Roaming\uTorrent\uTorrent.exe

FirewallRules: [{AE0B6401-6A2D-4221-9989-C7C05C51B609}] => (Allow) C:\Users\D4sherInc\AppData\Roaming\uTorrent\uTorrent.exe

FirewallRules: [{3F12B2B0-35E2-47F0-BA08-AE0B147D9688}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{63587189-01C4-493F-ABDE-48AC23591A1C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [TCP Query User{C3C66032-2998-4AED-A055-700EADF311C6}G:\xampp\apache\bin\httpd.exe] => (Allow) G:\xampp\apache\bin\httpd.exe

FirewallRules: [UDP Query User{F17CD8CE-17E8-4729-B266-E6BC9E86485F}G:\xampp\apache\bin\httpd.exe] => (Allow) G:\xampp\apache\bin\httpd.exe

FirewallRules: [TCP Query User{D2E54FA9-E64A-408C-8E3A-DE2E14672C36}F:\xampp\apache\bin\httpd.exe] => (Allow) F:\xampp\apache\bin\httpd.exe

FirewallRules: [UDP Query User{9CDD0D8D-D355-4CDC-9CBD-110289C8F6CC}F:\xampp\apache\bin\httpd.exe] => (Allow) F:\xampp\apache\bin\httpd.exe

FirewallRules: [{971E813D-6532-428C-9B02-9616023D203F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{FDD8DB24-3602-434D-9CE5-B62EB13158DA}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [TCP Query User{30C4821D-7B77-4E5D-BF16-61BC67225325}F:\xampp\mysql\bin\mysqld.exe] => (Allow) F:\xampp\mysql\bin\mysqld.exe

FirewallRules: [UDP Query User{65DCB4AC-A656-4458-860F-873EDCDA3797}F:\xampp\mysql\bin\mysqld.exe] => (Allow) F:\xampp\mysql\bin\mysqld.exe

FirewallRules: [{7895220F-CE0F-4C5B-8A1C-990705A8D0D2}] => (Allow) E:\SteamLibrary\steamapps\common\Terraria\Terraria.exe

FirewallRules: [{0AE1352D-6E3F-40AE-9FB2-BA7920754C67}] => (Allow) E:\SteamLibrary\steamapps\common\Terraria\Terraria.exe

FirewallRules: [{9FAF85FB-2518-46D1-B39C-E72E221D0327}] => (Allow) E:\SteamLibrary\steamapps\common\Arma 2\arma2.exe

FirewallRules: [{357F93E8-EFBC-4014-9F3C-08180AA420F2}] => (Allow) E:\SteamLibrary\steamapps\common\Arma 2\arma2.exe

FirewallRules: [{2E555588-7D18-4BBB-89AB-3E0184DFDD19}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 2 Operation Arrowhead\ArmA2OA_BE.exe

FirewallRules: [{24828DE2-A1B9-45AF-99BA-EEC3445F225F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 2 Operation Arrowhead\ArmA2OA_BE.exe

FirewallRules: [{DB72A704-E692-4223-A8B1-2F6AEB38C49D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe

FirewallRules: [{19EF5A08-1255-47AA-B9D6-32DD735E75CE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe

FirewallRules: [{B2D1831E-1D42-4BAF-96D9-7215F285117F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 2 Operation Arrowhead\Expansion\beta\Arma2OA.exe

FirewallRules: [{41E190C0-697B-4F69-B952-CE52767724FB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 2 Operation Arrowhead\Expansion\beta\Arma2OA.exe

FirewallRules: [TCP Query User{62949A57-8EDD-4B8D-B38E-4C452067B31E}C:\program files (x86)\dayzlauncher\dayzlauncher.exe] => (Allow) C:\program files (x86)\dayzlauncher\dayzlauncher.exe

FirewallRules: [UDP Query User{80B8470D-4C4D-4D0C-AEA2-02E81915D61B}C:\program files (x86)\dayzlauncher\dayzlauncher.exe] => (Allow) C:\program files (x86)\dayzlauncher\dayzlauncher.exe

FirewallRules: [{D7A28BF8-AA92-408C-AE40-F75FD71D9FDE}] => (Allow) C:\Program Files\Rockstar Games\Grand Theft Auto V\GTA5.exe

FirewallRules: [{B5F607BC-4D38-4462-9335-AA04CE88269E}] => (Allow) C:\Program Files\Rockstar Games\Grand Theft Auto V\GTA5.exe

FirewallRules: [{2F73B070-21A7-4E5A-8B74-914EBFF42512}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe

FirewallRules: [{60BE7034-5757-4A77-B349-56D32CB49083}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe

FirewallRules: [{0FC2EE91-E67A-49A5-B305-BEE6E5A49591}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe

FirewallRules: [{12F61519-EDB1-4862-8E36-925FF69D02D3}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe

FirewallRules: [{AD3241FA-25B7-459A-BB9A-5A0E0E6D9D8D}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgdiagex.exe

FirewallRules: [{F1443284-361E-49D9-8EC8-614162C04A8C}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgdiagex.exe

FirewallRules: [{D6C3407C-D8EB-40A6-92C3-2651E109D7DE}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe

FirewallRules: [{06C40E72-EC9B-4029-B74E-6749AEEC3C49}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe

FirewallRules: [{F69DC3D9-3FD1-4E02-887A-FF70923B22E9}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (08/14/2015 02:56:00 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 256) (User: )

Description: Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert werden. Fehler: 1392 (0x570) : Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.

.
 

Error: (08/14/2015 02:56:00 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 256) (User: )

Description: Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert werden. Fehler: 1392 (0x570) : Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.

.
 

Error: (08/14/2015 02:55:59 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 256) (User: )

Description: Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert werden. Fehler: 1392 (0x570) : Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.

.
 

Error: (08/14/2015 02:55:59 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 256) (User: )

Description: Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert werden. Fehler: 1392 (0x570) : Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.

.
 

Error: (08/14/2015 02:55:59 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 256) (User: )

Description: Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert werden. Fehler: 1392 (0x570) : Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.

.
 

Error: (08/14/2015 02:55:58 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 256) (User: )

Description: Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert werden. Fehler: 1392 (0x570) : Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.

.
 

Error: (08/14/2015 02:55:58 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 256) (User: )

Description: Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert werden. Fehler: 1392 (0x570) : Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.

.
 

Error: (08/14/2015 02:55:58 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 256) (User: )

Description: Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert werden. Fehler: 1392 (0x570) : Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.

.
 

Error: (08/14/2015 02:55:57 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 256) (User: )

Description: Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert werden. Fehler: 1392 (0x570) : Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.

.
 

Error: (08/14/2015 02:55:57 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 256) (User: )

Description: Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert werden. Fehler: 1392 (0x570) : Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.

.
 
 

Systemfehler:

=============

Error: (08/14/2015 02:56:00 AM) (Source: Ntfs) (EventID: 55) (User: )

Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.

Führen Sie auf dem Volume "Windows" den Befehl "chkdsk" aus.
 

Error: (08/14/2015 02:56:00 AM) (Source: Ntfs) (EventID: 55) (User: )

Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.

Führen Sie auf dem Volume "Windows" den Befehl "chkdsk" aus.
 

Error: (08/14/2015 02:55:59 AM) (Source: Ntfs) (EventID: 55) (User: )

Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.

Führen Sie auf dem Volume "Windows" den Befehl "chkdsk" aus.
 

Error: (08/14/2015 02:55:59 AM) (Source: Ntfs) (EventID: 55) (User: )

Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.

Führen Sie auf dem Volume "Windows" den Befehl "chkdsk" aus.
 

Error: (08/14/2015 02:55:59 AM) (Source: Ntfs) (EventID: 55) (User: )

Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.

Führen Sie auf dem Volume "Windows" den Befehl "chkdsk" aus.
 

Error: (08/14/2015 02:55:58 AM) (Source: Ntfs) (EventID: 55) (User: )

Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.

Führen Sie auf dem Volume "Windows" den Befehl "chkdsk" aus.
 

Error: (08/14/2015 02:55:58 AM) (Source: Ntfs) (EventID: 55) (User: )

Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.

Führen Sie auf dem Volume "Windows" den Befehl "chkdsk" aus.
 

Error: (08/14/2015 02:55:58 AM) (Source: Ntfs) (EventID: 55) (User: )

Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.

Führen Sie auf dem Volume "Windows" den Befehl "chkdsk" aus.
 

Error: (08/14/2015 02:55:57 AM) (Source: Ntfs) (EventID: 55) (User: )

Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.

Führen Sie auf dem Volume "Windows" den Befehl "chkdsk" aus.
 

Error: (08/14/2015 02:55:57 AM) (Source: Ntfs) (EventID: 55) (User: )

Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.

Führen Sie auf dem Volume "Windows" den Befehl "chkdsk" aus.
 
 

Microsoft Office:

=========================

Error: (08/14/2015 02:56:00 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 256) (User: )

Description: 1392 (0x570)Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.
 

Error: (08/14/2015 02:56:00 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 256) (User: )

Description: 1392 (0x570)Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.
 

Error: (08/14/2015 02:55:59 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 256) (User: )

Description: 1392 (0x570)Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.
 

Error: (08/14/2015 02:55:59 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 256) (User: )

Description: 1392 (0x570)Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.
 

Error: (08/14/2015 02:55:59 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 256) (User: )

Description: 1392 (0x570)Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.
 

Error: (08/14/2015 02:55:58 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 256) (User: )

Description: 1392 (0x570)Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.
 

Error: (08/14/2015 02:55:58 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 256) (User: )

Description: 1392 (0x570)Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.
 

Error: (08/14/2015 02:55:58 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 256) (User: )

Description: 1392 (0x570)Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.
 

Error: (08/14/2015 02:55:57 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 256) (User: )

Description: 1392 (0x570)Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.
 

Error: (08/14/2015 02:55:57 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 256) (User: )

Description: 1392 (0x570)Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.
 
 

CodeIntegrity:

===================================

  Date: 2015-08-04 22:56:16.867

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\srv.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-08-04 22:56:16.836

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\srv.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 
 

==================== Speicherinformationen =========================== 
 

Processor: Intel(R) Core(TM) i5-4690 CPU @ 3.50GHz

Prozentuale Nutzung des RAM: 35%

Installierter physikalischer RAM: 8120 MB

Verfügbarer physikalischer RAM: 5271.18 MB

Summe virtueller Speicher: 16238.2 MB

Verfügbarer virtueller Speicher: 13034.06 MB
 

==================== Laufwerke ================================
 

Drive c: (Windows) (Fixed) (Total:232.79 GB) (Free:50.53 GB) NTFS

Drive e: (Daten) (Fixed) (Total:931.51 GB) (Free:690.04 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: E31368D0)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=232.8 GB) - (Type=07 NTFS)
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 9C319823)

Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
 

==================== Ende von Ergebnis ============================

Code:

GMER 2.1.19357 - hxxp://www.gmer.net

Rootkit scan 2015-08-14 03:22:02

Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 Samsung_SSD_840_EVO_250GB rev.EXT0CB6Q 232,89GB

Running: Gmer-19357.exe; Driver: C:\Users\D4SHER~1\AppData\Local\Temp\uxtcruoc.sys
 
 

---- User code sections - GMER 2.1 ----
 

.text  C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe[3784] C:\Windows\syswow64\PsApi.dll!GetModuleFileNameExW + 17                      0000000076861401 2 bytes JMP 7532b20b C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe[3784] C:\Windows\syswow64\PsApi.dll!EnumProcessModules + 17                        0000000076861419 2 bytes JMP 7532b336 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe[3784] C:\Windows\syswow64\PsApi.dll!GetModuleInformation + 17                      0000000076861431 2 bytes JMP 753a8f39 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe[3784] C:\Windows\syswow64\PsApi.dll!GetModuleInformation + 42                      000000007686144a 2 bytes CALL 75304885 C:\Windows\syswow64\kernel32.dll

.text  ...                                                                                                                                        * 9

.text  C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe[3784] C:\Windows\syswow64\PsApi.dll!EnumDeviceDrivers + 17                         00000000768614dd 2 bytes JMP 753a8832 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe[3784] C:\Windows\syswow64\PsApi.dll!GetDeviceDriverBaseNameA + 17                  00000000768614f5 2 bytes JMP 753a8a08 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe[3784] C:\Windows\syswow64\PsApi.dll!QueryWorkingSetEx + 17                         000000007686150d 2 bytes JMP 753a8728 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe[3784] C:\Windows\syswow64\PsApi.dll!GetDeviceDriverBaseNameW + 17                  0000000076861525 2 bytes JMP 753a8af2 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe[3784] C:\Windows\syswow64\PsApi.dll!GetModuleBaseNameW + 17                        000000007686153d 2 bytes JMP 7531fc98 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe[3784] C:\Windows\syswow64\PsApi.dll!EnumProcesses + 17                             0000000076861555 2 bytes JMP 753268df C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe[3784] C:\Windows\syswow64\PsApi.dll!GetProcessMemoryInfo + 17                      000000007686156d 2 bytes JMP 753a8ff1 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe[3784] C:\Windows\syswow64\PsApi.dll!GetPerformanceInfo + 17                        0000000076861585 2 bytes JMP 753a8b52 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe[3784] C:\Windows\syswow64\PsApi.dll!QueryWorkingSet + 17                           000000007686159d 2 bytes JMP 753a86ec C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe[3784] C:\Windows\syswow64\PsApi.dll!GetModuleBaseNameA + 17                        00000000768615b5 2 bytes JMP 7531fd31 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe[3784] C:\Windows\syswow64\PsApi.dll!GetModuleFileNameExA + 17                      00000000768615cd 2 bytes JMP 7532b2cc C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe[3784] C:\Windows\syswow64\PsApi.dll!GetProcessImageFileNameW + 20                  00000000768616b2 2 bytes JMP 753a8eb4 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe[3784] C:\Windows\syswow64\PsApi.dll!GetProcessImageFileNameW + 31                  00000000768616bd 2 bytes JMP 753a8681 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4716] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17      0000000076861401 2 bytes JMP 7532b20b C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4716] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17        0000000076861419 2 bytes JMP 7532b336 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4716] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17      0000000076861431 2 bytes JMP 753a8f39 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4716] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42      000000007686144a 2 bytes CALL 75304885 C:\Windows\syswow64\kernel32.dll

.text  ...                                                                                                                                        * 9

.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4716] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17         00000000768614dd 2 bytes JMP 753a8832 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4716] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17  00000000768614f5 2 bytes JMP 753a8a08 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4716] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17         000000007686150d 2 bytes JMP 753a8728 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4716] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17  0000000076861525 2 bytes JMP 753a8af2 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4716] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17        000000007686153d 2 bytes JMP 7531fc98 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4716] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17             0000000076861555 2 bytes JMP 753268df C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4716] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17      000000007686156d 2 bytes JMP 753a8ff1 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4716] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17        0000000076861585 2 bytes JMP 753a8b52 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4716] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17           000000007686159d 2 bytes JMP 753a86ec C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4716] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17        00000000768615b5 2 bytes JMP 7531fd31 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4716] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17      00000000768615cd 2 bytes JMP 7532b2cc C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4716] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20  00000000768616b2 2 bytes JMP 753a8eb4 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe[4716] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31  00000000768616bd 2 bytes JMP 753a8681 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AVG Web TuneUp\vprot.exe[4924] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                              0000000076861401 2 bytes JMP 7532b20b C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AVG Web TuneUp\vprot.exe[4924] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                0000000076861419 2 bytes JMP 7532b336 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AVG Web TuneUp\vprot.exe[4924] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                              0000000076861431 2 bytes JMP 753a8f39 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AVG Web TuneUp\vprot.exe[4924] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                              000000007686144a 2 bytes CALL 75304885 C:\Windows\syswow64\kernel32.dll

.text  ...                                                                                                                                        * 9

.text  C:\Program Files (x86)\AVG Web TuneUp\vprot.exe[4924] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                 00000000768614dd 2 bytes JMP 753a8832 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AVG Web TuneUp\vprot.exe[4924] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                          00000000768614f5 2 bytes JMP 753a8a08 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AVG Web TuneUp\vprot.exe[4924] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                 000000007686150d 2 bytes JMP 753a8728 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AVG Web TuneUp\vprot.exe[4924] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                          0000000076861525 2 bytes JMP 753a8af2 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AVG Web TuneUp\vprot.exe[4924] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                000000007686153d 2 bytes JMP 7531fc98 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AVG Web TuneUp\vprot.exe[4924] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                     0000000076861555 2 bytes JMP 753268df C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AVG Web TuneUp\vprot.exe[4924] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                              000000007686156d 2 bytes JMP 753a8ff1 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AVG Web TuneUp\vprot.exe[4924] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                0000000076861585 2 bytes JMP 753a8b52 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AVG Web TuneUp\vprot.exe[4924] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                   000000007686159d 2 bytes JMP 753a86ec C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AVG Web TuneUp\vprot.exe[4924] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                00000000768615b5 2 bytes JMP 7531fd31 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AVG Web TuneUp\vprot.exe[4924] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                              00000000768615cd 2 bytes JMP 7532b2cc C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AVG Web TuneUp\vprot.exe[4924] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                          00000000768616b2 2 bytes JMP 753a8eb4 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AVG Web TuneUp\vprot.exe[4924] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                          00000000768616bd 2 bytes JMP 753a8681 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AVG Web TuneUp\avgcefrend.exe[5912] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                         0000000076861401 2 bytes JMP 7532b20b C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AVG Web TuneUp\avgcefrend.exe[5912] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                           0000000076861419 2 bytes JMP 7532b336 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AVG Web TuneUp\avgcefrend.exe[5912] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                         0000000076861431 2 bytes JMP 753a8f39 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AVG Web TuneUp\avgcefrend.exe[5912] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                         000000007686144a 2 bytes CALL 75304885 C:\Windows\syswow64\kernel32.dll

.text  ...                                                                                                                                        * 9

.text  C:\Program Files (x86)\AVG Web TuneUp\avgcefrend.exe[5912] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                            00000000768614dd 2 bytes JMP 753a8832 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AVG Web TuneUp\avgcefrend.exe[5912] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                     00000000768614f5 2 bytes JMP 753a8a08 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AVG Web TuneUp\avgcefrend.exe[5912] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                            000000007686150d 2 bytes JMP 753a8728 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AVG Web TuneUp\avgcefrend.exe[5912] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                     0000000076861525 2 bytes JMP 753a8af2 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AVG Web TuneUp\avgcefrend.exe[5912] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                           000000007686153d 2 bytes JMP 7531fc98 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AVG Web TuneUp\avgcefrend.exe[5912] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                0000000076861555 2 bytes JMP 753268df C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AVG Web TuneUp\avgcefrend.exe[5912] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                         000000007686156d 2 bytes JMP 753a8ff1 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AVG Web TuneUp\avgcefrend.exe[5912] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                           0000000076861585 2 bytes JMP 753a8b52 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AVG Web TuneUp\avgcefrend.exe[5912] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                              000000007686159d 2 bytes JMP 753a86ec C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AVG Web TuneUp\avgcefrend.exe[5912] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                           00000000768615b5 2 bytes JMP 7531fd31 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AVG Web TuneUp\avgcefrend.exe[5912] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                         00000000768615cd 2 bytes JMP 7532b2cc C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AVG Web TuneUp\avgcefrend.exe[5912] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                     00000000768616b2 2 bytes JMP 753a8eb4 C:\Windows\syswow64\kernel32.dll

.text  C:\Program Files (x86)\AVG Web TuneUp\avgcefrend.exe[5912] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                     00000000768616bd 2 bytes JMP 753a8681 C:\Windows\syswow64\kernel32.dll
 

---- EOF - GMER 2.1 ----

Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.
Ich kann auf Arbeit keine Anhänge öffnen, danke.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

http://www.trojaner-board.de/picture...&pictureid=307

Hier wäre der restliche Teil, d.h. Die FRST.txt Datei

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:13-08-2015

durchgeführt von D4sherInc (Administrator) auf D4SHERINC-PC (14-08-2015 02:50:14)

Gestartet von C:\Users\D4sherInc\Desktop

Geladene Profile: D4sherInc (Verfügbare Profile: D4sherInc)

Platform: Windows 7 Ultimate Service Pack 1 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: Chrome)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgrsa.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe

() C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe

(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe

(Realtek Semiconductor) C:\Program Files (x86)\MSI\NetworkGenie\NetworkGenie.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe

() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

() C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe

(MSI) C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe

(Micro-Star International) C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe

(MSI) C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe

(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe

(Micro-Star International) C:\MSI\Smart Utilities\SuperRAIDSvc.exe

(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.8.0\ToolbarUpdater.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

() C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.8.0\loggingserver.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe

(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Spotify Ltd) C:\Users\D4sherInc\AppData\Roaming\Spotify\Spotify.exe

(Spotify Ltd) C:\Users\D4sherInc\AppData\Roaming\Spotify\SpotifyWebHelper.exe

(ROCCAT GmbH Co., Ltd.) C:\Program Files (x86)\ROCCAT\Roccat Talk\Roccat Talk.exe

(Curse, Inc) C:\Users\D4sherInc\AppData\Roaming\Curse Client\Bin\Curse.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgui.exe

(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe

(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\KoneXTDMonitor.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

() C:\Program Files (x86)\AVG Web TuneUp\vprot.exe

(Spotify Ltd) C:\Users\D4sherInc\AppData\Roaming\Spotify\SpotifyCrashService.exe

(Spotify Ltd) C:\Users\D4sherInc\AppData\Roaming\Spotify\Spotify.exe

(Spotify Ltd) C:\Users\D4sherInc\AppData\Roaming\Spotify\Spotify.exe

(AVG Secure Search) C:\Program Files (x86)\AVG Web TuneUp\avgcefrend.exe

(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe

(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2015\avgui.exe [3780520 2015-07-31] (AVG Technologies CZ, s.r.o.)

HKLM-x32\...\Run: [ApnTBMon] => C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1684360 2015-05-26] (APN)

HKLM-x32\...\Run: [RoccatKoneXTD] => C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\KoneXTDMonitor.EXE [552960 2014-10-19] (ROCCAT GmbH)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [508800 2014-12-17] (Oracle Corporation)

HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [3175312 2015-07-23] ()

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5579624 2015-08-03] (LogMeIn Inc.)

HKU\S-1-5-21-4293377608-3333764666-2683399837-1000\...\Run: [SkinsSpotlightsReplay] => E:\LOL Aufnahme\SkinSpotlightsReplays.RELEASE.exe

HKU\S-1-5-21-4293377608-3333764666-2683399837-1000\...\Run: [Spotify] => C:\Users\D4sherInc\AppData\Roaming\Spotify\Spotify.exe [7675448 2015-08-11] (Spotify Ltd)

HKU\S-1-5-21-4293377608-3333764666-2683399837-1000\...\Run: [Spotify Web Helper] => C:\Users\D4sherInc\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2018360 2015-08-11] (Spotify Ltd)

HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2015-01-16] (Microsoft Corporation)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Roccat Talk.lnk [2015-01-28]

ShortcutTarget: Roccat Talk.lnk -> C:\Program Files (x86)\ROCCAT\Roccat Talk\Roccat Talk.exe (ROCCAT GmbH Co., Ltd.)

Startup: C:\Users\D4sherInc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Curse.lnk [2015-02-20]

ShortcutTarget: Curse.lnk -> C:\Users\D4sherInc\AppData\Roaming\Curse Client\Bin\Curse.exe (Curse, Inc)
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)
 

HKU\S-1-5-21-4293377608-3333764666-2683399837-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://mysearch.avg.com/?cid={1FC37DD4-FB7C-4FA0-A419-D019249F6353}&mid=9ad3bceb931f47cd886f95c31d30750c-0feb8c7ac14c1b2cd72bacde056afd16e2299c89&lang=de&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2015-01-16 08:25:29&v=4.1.4.948&pid=wtu&sg=&sap=hp

SearchScopes: HKU\S-1-5-21-4293377608-3333764666-2683399837-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={1FC37DD4-FB7C-4FA0-A419-D019249F6353}&mid=9ad3bceb931f47cd886f95c31d30750c-0feb8c7ac14c1b2cd72bacde056afd16e2299c89&lang=de&ds=AVG&coid=avgtbavg&cmpid=0715tb&pr=fr&d=2015-01-16 08:25:29&v=4.1.4.948&pid=wtu&sg=&sap=dsp&q={searchTerms}

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-01-31] (Oracle Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-31] (Oracle Corporation)

BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll [2015-03-01] (DVDVideoSoft Ltd.)

BHO-x32: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG Web TuneUp\4.1.5.143\AVG Web TuneUp.dll [2015-07-23] (AVG)

BHO-x32: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll [2015-03-01] (DVDVideoSoft Ltd.)

DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab

DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab

Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.2.0\ViProtocol.dll [2015-01-16] (AVG Secure Search)

Tcpip\..\Interfaces\{42F055A5-083D-4A4A-AB58-B67DA785EC67}: [DhcpNameServer] 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\D4sherInc\AppData\Roaming\Mozilla\Firefox\Profiles\yfhhsv33.default

FF Homepage: https://mysearch.avg.com/?cid={1FC37DD4-FB7C-4FA0-A419-D019249F6353}&mid=9ad3bceb931f47cd886f95c31d30750c-0feb8c7ac14c1b2cd72bacde056afd16e2299c89&lang=de&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2015-01-16 08:25:29&v=4.1.4.948&pid=wtu&sg=&sap=hp

FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-31] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-31] (Oracle Corporation)

FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.8.0\\npsitesafety.dll [Keine Datei]

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-04-03] (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-04-03] (Intel Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-09-13] (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-09-13] (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)

FF SearchPlugin: C:\Users\D4sherInc\AppData\Roaming\Mozilla\Firefox\Profiles\yfhhsv33.default\searchplugins\avg-secure-search.xml [2015-07-16]

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wtu-secure-search.xml [2015-07-23]

FF Extension: AVG Web TuneUp - C:\Users\D4sherInc\AppData\Roaming\Mozilla\Firefox\Profiles\yfhhsv33.default\Extensions\avg@toolbar [2015-07-16]
 

Chrome: 

=======

CHR Profile: C:\Users\D4sherInc\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Adblock Plus) - C:\Users\D4sherInc\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-05-11]

CHR Extension: (Hatsune Miku) - C:\Users\D4sherInc\AppData\Local\Google\Chrome\User Data\Default\Extensions\kigfdicgjnpjkhbnngdfgjfffmdaonfg [2015-01-16]

CHR Extension: (Chrome Hotword Shared Module) - C:\Users\D4sherInc\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-12]

CHR Extension: (Chrome Web Store Payments) - C:\Users\D4sherInc\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-16]

CHR HKLM\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaaiabcopkplhgaedhbloeejhhankf.crx [2015-05-26]

CHR HKLM-x32\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaaiabcopkplhgaedhbloeejhhankf.crx [2015-05-26]
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R3 AeLookupSvc; C:\Windows\System32\aelupsvc.dll [72192 2015-03-04] (Microsoft Corporation) [Datei ist nicht signiert]

S3 ALG; C:\Windows\System32\alg.exe [79360 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [178568 2015-04-28] (APN LLC.)

S3 AppIDSvc; C:\Windows\System32\appidsvc.dll [32256 2015-02-03] (Microsoft Corporation) [Datei ist nicht signiert]

R3 Appinfo; C:\Windows\System32\appinfo.dll [70656 2015-06-15] (Microsoft Corporation) [Datei ist nicht signiert]

S3 AppMgmt; C:\Windows\System32\appmgmts.dll [193536 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 AppMgmt; C:\Windows\SysWOW64\appmgmts.dll [149504 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R2 AudioEndpointBuilder; C:\Windows\System32\Audiosrv.dll [680960 2015-02-03] (Microsoft Corporation) [Datei ist nicht signiert]

R2 AudioSrv; C:\Windows\System32\Audiosrv.dll [680960 2015-02-03] (Microsoft Corporation) [Datei ist nicht signiert]

S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [3633576 2015-07-31] (AVG Technologies CZ, s.r.o.)

R2 avgwd; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [335656 2015-07-31] (AVG Technologies CZ, s.r.o.)

S3 AxInstSV; C:\Windows\System32\AxInstSV.dll [114688 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 BDESVC; C:\Windows\System32\bdesvc.dll [100864 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1115136 2015-07-05] ()

R2 BFE; C:\Windows\System32\bfe.dll [705024 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S2 BITS; C:\Windows\System32\qmgr.dll [849920 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R3 Browser; C:\Windows\System32\browser.dll [136704 2012-07-05] (Microsoft Corporation) [Datei ist nicht signiert]

S3 bthserv; C:\Windows\system32\bthserv.dll [83968 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 CertPropSvc; C:\Windows\System32\certprop.dll [80384 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R2 CryptSvc; C:\Windows\system32\cryptsvc.dll [188416 2015-04-27] (Microsoft Corporation) [Datei ist nicht signiert]

R2 CryptSvc; C:\Windows\SysWOW64\cryptsvc.dll [143872 2015-04-27] (Microsoft Corporation) [Datei ist nicht signiert]

R2 CscService; C:\Windows\System32\cscsvc.dll [692224 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [423424 2011-10-19] (Creative Technology Ltd) [Datei ist nicht signiert]

R2 DcomLaunch; C:\Windows\system32\rpcss.dll [512000 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 defragsvc; C:\Windows\System32\defragsvc.dll [291328 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R2 Dhcp; C:\Windows\system32\dhcpcore.dll [317952 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R2 Dhcp; C:\Windows\SysWOW64\dhcpcore.dll [254464 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R2 DiagTrack; C:\Windows\system32\diagtrack.dll [1255424 2015-05-25] (Microsoft Corporation) [Datei ist nicht signiert]

R2 Dnscache; C:\Windows\System32\dnsrslvr.dll [183296 2011-03-03] (Microsoft Corporation) [Datei ist nicht signiert]

S3 dot3svc; C:\Windows\System32\dot3svc.dll [252416 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R2 DPS; C:\Windows\system32\dps.dll [162816 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 EapHost; C:\Windows\System32\eapsvc.dll [111104 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [235744 2015-06-22] (EasyAntiCheat Ltd)

R2 EFS; C:\Windows\System32\lsass.exe [31232 2015-07-15] (Microsoft Corporation) [Datei ist nicht signiert]

S3 ehRecvr; C:\Windows\ehome\ehRecvr.exe [696832 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 ehSched; C:\Windows\ehome\ehsched.exe [127488 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R2 eventlog; C:\Windows\System32\wevtsvc.dll [1646080 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R2 EventSystem; C:\Windows\system32\es.dll [402944 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R2 EventSystem; C:\Windows\SysWOW64\es.dll [271360 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 Fax; C:\Windows\system32\fxssvc.exe [689152 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 fdPHost; C:\Windows\system32\fdPHost.dll [16384 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 FDResPub; C:\Windows\system32\fdrespub.dll [34816 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R2 FontCache; C:\Windows\system32\FntCache.dll [1180160 2015-07-30] (Microsoft Corporation) [Datei ist nicht signiert]

R2 gpsvc; C:\Windows\System32\gpsvc.dll [777728 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R3 hidserv; C:\Windows\system32\hidserv.dll [38912 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R3 hidserv; C:\Windows\SysWOW64\hidserv.dll [49152 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 hkmsvc; C:\Windows\system32\kmsvc.dll [90624 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 HomeGroupListener; C:\Windows\system32\ListSvc.dll [232448 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 HomeGroupProvider; C:\Windows\system32\provsvc.dll [187904 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 HomeGroupProvider; C:\Windows\SysWOW64\provsvc.dll [165376 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [Datei ist nicht signiert]

S3 IEEtwCollectorService; C:\Windows\system32\IEEtwCollector.exe [114688 2015-07-16] (Microsoft Corporation) [Datei ist nicht signiert]

S3 IKEEXT; C:\Windows\System32\ikeext.dll [859648 2013-10-12] (Microsoft Corporation) [Datei ist nicht signiert]

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel(R) Corporation)

S3 intelsba; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [54976 2014-03-27] (Intel Corporation)

S3 IPBusEnum; C:\Windows\system32\ipbusenum.dll [101888 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R2 iphlpsvc; C:\Windows\System32\iphlpsvc.dll [569344 2012-10-03] (Microsoft Corporation) [Datei ist nicht signiert]

R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [209712 2014-04-24] ()

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-04-03] (Intel Corporation)

S3 KeyIso; C:\Windows\system32\lsass.exe [31232 2015-07-15] (Microsoft Corporation) [Datei ist nicht signiert]

S3 KtmRm; C:\Windows\system32\msdtckrm.dll [368640 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R2 LanmanServer; C:\Windows\system32\srvsvc.dll [236032 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R2 LanmanWorkstation; C:\Windows\System32\wkssvc.dll [118784 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 lltdsvc; C:\Windows\System32\lltdsvc.dll [300032 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R2 lmhosts; C:\Windows\System32\lmhsvc.dll [23552 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-08-03] (LogMeIn, Inc.)

S4 Mcx2Svc; C:\Windows\system32\Mcx2Svc.dll [84992 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R2 MMCSS; C:\Windows\system32\mmcss.dll [67584 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R2 MpsSvc; C:\Windows\system32\mpssvc.dll [828416 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 MSDTC; C:\Windows\System32\msdtc.exe [141824 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 MSIBIOSData_CC; C:\Program Files (x86)\MSI\Command Center\BIOSData\MSIBIOSDataService.exe [2100736 2014-06-04] (MSI) [Datei ist nicht signiert]

S3 MSIClock_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\MSIClockService.exe [4023296 2014-06-03] (MSI) [Datei ist nicht signiert]

S3 MSICOMM_CC; C:\Program Files (x86)\MSI\Command Center\MSICommService.exe [2118144 2014-06-03] () [Datei ist nicht signiert]

S3 MSICPU_CC; C:\Program Files (x86)\MSI\Command Center\CPU\MSICPUService.exe [4157440 2014-06-04] () [Datei ist nicht signiert]

R2 MSICTL_CC; C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe [1990144 2014-06-03] () [Datei ist nicht signiert]

S3 MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\MSIDDRService.exe [2250240 2014-06-06] () [Datei ist nicht signiert]

S3 MSiSCSI; C:\Windows\system32\iscsiexe.dll [156672 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 msiserver; C:\Windows\System32\msiexec.exe [128000 2015-06-15] (Microsoft Corporation) [Datei ist nicht signiert]

S3 msiserver; C:\Windows\SysWOW64\msiexec.exe [73216 2015-06-15] (Microsoft Corporation) [Datei ist nicht signiert]

S3 MSISMB_CC; C:\Program Files (x86)\MSI\Command Center\SMBus\MSISMBService.exe [2063360 2014-06-04] () [Datei ist nicht signiert]

S3 MSISuperIO_CC; C:\Program Files (x86)\MSI\Command Center\SuperIO\MSISuperIOService.exe [544256 2014-06-06] () [Datei ist nicht signiert]

R2 MSI_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe [103992 2012-10-26] (MSI)

R2 MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [83952 2014-03-27] (Micro-Star International)

R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [162800 2014-03-17] (MSI)

S3 napagent; C:\Windows\system32\qagentRT.dll [476160 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 Netlogon; C:\Windows\system32\lsass.exe [31232 2015-07-15] (Microsoft Corporation) [Datei ist nicht signiert]

R3 Netman; C:\Windows\System32\netman.dll [360448 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R3 netprofm; C:\Windows\System32\netprofm.dll [459776 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R3 netprofm; C:\Windows\SysWOW64\netprofm.dll [360448 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R2 NlaSvc; C:\Windows\System32\nlasvc.dll [303616 2014-12-06] (Microsoft Corporation) [Datei ist nicht signiert]

R2 nsi; C:\Windows\system32\nsisvc.dll [25600 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [995568 2015-08-09] (Overwolf LTD)

S3 p2pimsvc; C:\Windows\system32\pnrpsvc.dll [327168 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 p2psvc; C:\Windows\system32\p2psvc.dll [438784 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R2 PcaSvc; C:\Windows\System32\pcasvc.dll [188416 2015-02-03] (Microsoft Corporation) [Datei ist nicht signiert]

S3 PeerDistSvc; C:\Windows\system32\peerdistsvc.dll [1361920 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 PerfHost; C:\Windows\SysWow64\perfhost.exe [20992 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 pla; C:\Windows\system32\pla.dll [1389056 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 pla; C:\Windows\SysWOW64\pla.dll [1508864 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R2 PlugPlay; C:\Windows\system32\umpnpmgr.dll [404480 2011-05-24] (Microsoft Corporation) [Datei ist nicht signiert]

S3 PNRPAutoReg; C:\Windows\system32\pnrpauto.dll [25088 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 PNRPsvc; C:\Windows\system32\pnrpsvc.dll [327168 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 PolicyAgent; C:\Windows\System32\ipsecsvc.dll [501248 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R2 Power; C:\Windows\system32\umpo.dll [163840 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R2 ProfSvc; C:\Windows\system32\profsvc.dll [210432 2014-12-19] (Microsoft Corporation) [Datei ist nicht signiert]

S3 ProtectedStorage; C:\Windows\system32\lsass.exe [31232 2015-07-15] (Microsoft Corporation) [Datei ist nicht signiert]

S3 QWAVE; C:\Windows\system32\qwave.dll [242688 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 RasAuto; C:\Windows\System32\rasauto.dll [99328 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 RasMan; C:\Windows\System32\rasmans.dll [344064 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S4 RemoteAccess; C:\Windows\System32\mprdim.dll [97792 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S4 RemoteAccess; C:\Windows\SysWOW64\mprdim.dll [75264 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 RemoteRegistry; C:\Windows\system32\regsvc.dll [159232 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R2 RpcEptMapper; C:\Windows\System32\RpcEpMap.dll [67072 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 RpcLocator; C:\Windows\system32\locator.exe [10240 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R2 RpcSs; C:\Windows\system32\rpcss.dll [512000 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R2 SamSs; C:\Windows\system32\lsass.exe [31232 2015-07-15] (Microsoft Corporation) [Datei ist nicht signiert]

S3 SCardSvr; C:\Windows\System32\SCardSvr.dll [190976 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R2 Schedule; C:\Windows\system32\schedsvc.dll [1110016 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 SCPolicySvc; C:\Windows\System32\certprop.dll [80384 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R3 SDRSVC; C:\Windows\System32\SDRSVC.dll [170496 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 seclogon; C:\Windows\system32\seclogon.dll [30720 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R2 SENS; C:\Windows\System32\sens.dll [64512 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R2 SENS; C:\Windows\SysWOW64\sens.dll [49664 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 SensrSvc; C:\Windows\system32\sensrsvc.dll [29184 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 SessionEnv; C:\Windows\system32\sessenv.dll [121856 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 SessionEnv; C:\Windows\SysWOW64\sessenv.dll [113664 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S4 SharedAccess; C:\Windows\System32\ipnathlp.dll [359424 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R2 ShellHWDetection; C:\Windows\System32\shsvcs.dll [370688 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R2 ShellHWDetection; C:\Windows\SysWOW64\shsvcs.dll [328192 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 SNMPTRAP; C:\Windows\System32\snmptrap.exe [14336 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R2 Spooler; C:\Windows\System32\spoolsv.exe [559104 2012-02-11] (Microsoft Corporation) [Datei ist nicht signiert]

R2 sppsvc; C:\Windows\system32\sppsvc.exe [3524608 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 sppuinotify; C:\Windows\system32\sppuinotify.dll [65536 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R3 SSDPSRV; C:\Windows\System32\ssdpsrv.dll [193024 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 SstpSvc; C:\Windows\system32\sstpsvc.dll [75264 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R2 stisvc; C:\Windows\System32\wiaservc.dll [580096 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R2 SuperRAIDSvc; C:\MSI\Smart Utilities\SuperRAIDSvc.exe [27632 2014-04-30] (Micro-Star International)

S3 swprv; C:\Windows\System32\swprv.dll [524288 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 SysMain; C:\Windows\system32\sysmain.dll [1743360 2015-07-15] (Microsoft Corporation) [Datei ist nicht signiert]

S3 TabletInputService; C:\Windows\System32\TabSvc.dll [92672 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 TapiSrv; C:\Windows\System32\tapisrv.dll [316928 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 TapiSrv; C:\Windows\SysWOW64\tapisrv.dll [242176 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 TBS; C:\Windows\System32\tbssvc.dll [65536 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 TermService; C:\Windows\System32\termsrv.dll [683520 2014-10-14] (Microsoft Corporation) [Datei ist nicht signiert]

R2 Themes; C:\Windows\system32\themeservice.dll [44544 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 THREADORDER; C:\Windows\system32\mmcss.dll [67584 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R2 TrkWks; C:\Windows\System32\trkwks.dll [119808 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 TrustedInstaller; C:\Windows\servicing\TrustedInstaller.exe [194048 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 UI0Detect; C:\Windows\system32\UI0Detect.exe [40960 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 UmRdpService; C:\Windows\System32\umrdp.dll [214528 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 upnphost; C:\Windows\System32\upnphost.dll [353792 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 upnphost; C:\Windows\SysWOW64\upnphost.dll [266752 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R2 UxSms; C:\Windows\System32\uxsms.dll [38912 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 VaultSvc; C:\Windows\system32\lsass.exe [31232 2015-07-15] (Microsoft Corporation) [Datei ist nicht signiert]

S3 vds; C:\Windows\System32\vds.exe [533504 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 VSS; C:\Windows\system32\vssvc.exe [1600512 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R2 vToolbarUpdater18.8.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.8.0\ToolbarUpdater.exe [1874320 2015-07-23] (AVG Secure Search)

S3 W32Time; C:\Windows\system32\w32time.dll [381952 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 wbengine; C:\Windows\system32\wbengine.exe [1504256 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 WbioSrvc; C:\Windows\System32\wbiosrvc.dll [202240 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 wcncsvc; C:\Windows\System32\wcncsvc.dll [367104 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 wcncsvc; C:\Windows\SysWOW64\wcncsvc.dll [276992 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 WcsPlugInService; C:\Windows\System32\WcsPlugInService.dll [40960 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 WcsPlugInService; C:\Windows\SysWOW64\WcsPlugInService.dll [32768 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R3 WdiServiceHost; C:\Windows\system32\wdi.dll [91136 2015-01-09] (Microsoft Corporation) [Datei ist nicht signiert]

R3 WdiServiceHost; C:\Windows\SysWOW64\wdi.dll [76800 2015-01-09] (Microsoft Corporation) [Datei ist nicht signiert]

R3 WdiSystemHost; C:\Windows\system32\wdi.dll [91136 2015-01-09] (Microsoft Corporation) [Datei ist nicht signiert]

R3 WdiSystemHost; C:\Windows\SysWOW64\wdi.dll [76800 2015-01-09] (Microsoft Corporation) [Datei ist nicht signiert]

S3 WebClient; C:\Windows\System32\webclnt.dll [260096 2015-07-01] (Microsoft Corporation) [Datei ist nicht signiert]

S3 WebClient; C:\Windows\SysWOW64\webclnt.dll [206848 2015-07-01] (Microsoft Corporation) [Datei ist nicht signiert]

S3 Wecsvc; C:\Windows\system32\wecsvc.dll [237568 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 wercplsupport; C:\Windows\System32\wercplsupport.dll [84480 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 WerSvc; C:\Windows\System32\WerSvc.dll [76800 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) [Datei ist nicht signiert]

R3 WinHttpAutoProxySvc; C:\Windows\system32\winhttp.dll [444416 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R3 WinHttpAutoProxySvc; C:\Windows\SysWOW64\winhttp.dll [351232 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R2 Winmgmt; C:\Windows\system32\wbem\WMIsvc.dll [242688 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 WinRM; C:\Windows\system32\WsmSvc.dll [2020352 2014-10-03] (Microsoft Corporation) [Datei ist nicht signiert]

S3 WinRM; C:\Windows\SysWOW64\WsmSvc.dll [1177088 2014-10-03] (Microsoft Corporation) [Datei ist nicht signiert]

S3 Wlansvc; C:\Windows\System32\wlansvc.dll [886784 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R3 wmiApSrv; C:\Windows\system32\wbem\WmiApSrv.exe [203264 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 WMPNetworkSvc; C:\Program Files\Windows Media Player\wmpnetwk.exe [1525248 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 WPCSvc; C:\Windows\System32\wpcsvc.dll [12288 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 WPCSvc; C:\Windows\SysWOW64\wpcsvc.dll [10752 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 WPDBusEnum; C:\Windows\system32\wpdbusenum.dll [117248 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R2 wscsvc; C:\Windows\System32\wscsvc.dll [97280 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R2 WSearch; C:\Windows\system32\SearchIndexer.exe [591872 2011-05-04] (Microsoft Corporation) [Datei ist nicht signiert]

R2 WSearch; C:\Windows\SysWOW64\SearchIndexer.exe [427520 2011-05-04] (Microsoft Corporation) [Datei ist nicht signiert]

R2 WtuSystemSupport; C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe [1195920 2015-07-23] ()

R2 wuauserv; C:\Windows\system32\wuaueng.dll [2606080 2015-07-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 wudfsvc; C:\Windows\System32\WUDFSvc.dll [84992 2012-07-26] (Microsoft Corporation) [Datei ist nicht signiert]

S3 WwanSvc; C:\Windows\System32\wwansvc.dll [228864 2014-01-28] (Microsoft Corporation) [Datei ist nicht signiert]

R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [18384 2014-03-14] (Intel(R) Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S3 1394ohci; C:\Windows\system32\drivers\1394ohci.sys [229888 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R3 AcpiCtlDrv; C:\Windows\System32\DRIVERS\AcpiCtlDrv.sys [25880 2012-07-17] (Intel Corporation)

S3 AcpiPmi; C:\Windows\system32\drivers\acpipmi.sys [12800 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R1 AFD; C:\Windows\system32\drivers\afd.sys [497152 2014-05-30] (Microsoft Corporation) [Datei ist nicht signiert]

S3 AmdK8; C:\Windows\system32\DRIVERS\amdk8.sys [64512 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 AmdPPM; C:\Windows\system32\DRIVERS\amdppm.sys [60928 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 AppID; C:\Windows\system32\drivers\appid.sys [61440 2015-02-03] (Microsoft Corporation) [Datei ist nicht signiert]

S3 AsyncMac; C:\Windows\System32\DRIVERS\asyncmac.sys [23040 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [162784 2015-03-11] (AVG Technologies CZ, s.r.o.)

R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [312752 2015-07-28] (AVG Technologies CZ, s.r.o.)

R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [253408 2015-05-12] (AVG Technologies CZ, s.r.o.)

R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [259040 2015-06-16] (AVG Technologies CZ, s.r.o.)

R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [378336 2015-05-07] (AVG Technologies CZ, s.r.o.)

R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [245680 2015-07-28] (AVG Technologies CZ, s.r.o.)

R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [40928 2015-03-20] (AVG Technologies CZ, s.r.o.)

R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [281568 2015-05-12] (AVG Technologies CZ, s.r.o.)

S3 b06bdrv; C:\Windows\system32\DRIVERS\bxvbda.sys [468480 2009-06-10] (Broadcom Corporation) [Datei ist nicht signiert]

S3 b57nd60a; C:\Windows\System32\DRIVERS\b57nd60a.sys [270848 2009-06-10] (Broadcom Corporation) [Datei ist nicht signiert]

R1 blbdrive; C:\Windows\System32\DRIVERS\blbdrive.sys [45056 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R3 bowser; C:\Windows\System32\DRIVERS\bowser.sys [90624 2011-02-23] (Microsoft Corporation) [Datei ist nicht signiert]

S3 BrFiltLo; C:\Windows\system32\DRIVERS\BrFiltLo.sys [18432 2009-06-10] (Brother Industries, Ltd.) [Datei ist nicht signiert]

S3 BrFiltUp; C:\Windows\system32\DRIVERS\BrFiltUp.sys [8704 2009-06-10] (Brother Industries, Ltd.) [Datei ist nicht signiert]

S3 Brserid; C:\Windows\System32\Drivers\Brserid.sys [286720 2009-07-14] (Brother Industries Ltd.) [Datei ist nicht signiert]

S3 BrSerWdm; C:\Windows\System32\Drivers\BrSerWdm.sys [47104 2009-06-10] (Brother Industries Ltd.) [Datei ist nicht signiert]

S3 BrUsbMdm; C:\Windows\System32\Drivers\BrUsbMdm.sys [14976 2009-06-10] (Brother Industries Ltd.) [Datei ist nicht signiert]

S3 BrUsbSer; C:\Windows\System32\Drivers\BrUsbSer.sys [14720 2009-06-10] (Brother Industries Ltd.) [Datei ist nicht signiert]

S3 BTHMODEM; C:\Windows\system32\DRIVERS\bthmodem.sys [72192 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S4 cdfs; C:\Windows\System32\DRIVERS\cdfs.sys [92160 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R1 cdrom; C:\Windows\System32\DRIVERS\cdrom.sys [147456 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 circlass; C:\Windows\system32\DRIVERS\circlass.sys [45568 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 CmBatt; C:\Windows\system32\DRIVERS\CmBatt.sys [17664 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R3 CompositeBus; C:\Windows\system32\drivers\CompositeBus.sys [38912 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R1 CSC; C:\Windows\System32\drivers\csc.sys [514560 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R1 DfsC; C:\Windows\System32\Drivers\dfsc.sys [102400 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R1 discache; C:\Windows\System32\drivers\discache.sys [40448 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 drmkaud; C:\Windows\system32\drivers\drmkaud.sys [5632 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) [Datei ist nicht signiert]

S3 ErrDev; C:\Windows\system32\drivers\errdev.sys [9728 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 exfat; C:\Windows\System32\Drivers\exfat.sys [195072 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 fastfat; C:\Windows\System32\Drivers\fastfat.sys [204800 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 fdc; C:\Windows\system32\DRIVERS\fdc.sys [29696 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 Filetrace; C:\Windows\System32\drivers\filetrace.sys [34304 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 flpydisk; C:\Windows\system32\DRIVERS\flpydisk.sys [24576 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 hcw85cir; C:\Windows\system32\drivers\hcw85cir.sys [31232 2009-06-10] (Hauppauge Computer Works, Inc.) [Datei ist nicht signiert]

S3 HdAudAddService; C:\Windows\system32\drivers\HdAudio.sys [350208 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R3 HDAudBus; C:\Windows\system32\drivers\HDAudBus.sys [122368 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 HidBatt; C:\Windows\system32\DRIVERS\HidBatt.sys [26624 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 HidBth; C:\Windows\system32\DRIVERS\hidbth.sys [100864 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 HidIr; C:\Windows\system32\DRIVERS\hidir.sys [46592 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R3 HidUsb; C:\Windows\System32\DRIVERS\hidusb.sys [30208 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R3 HTTP; C:\Windows\System32\drivers\HTTP.sys [754688 2015-02-25] (Microsoft Corporation) [Datei ist nicht signiert]

S3 i8042prt; C:\Windows\system32\drivers\i8042prt.sys [105472 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [22216 2014-02-03] ()

R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [22728 2014-02-03] ()

R3 INETMON; C:\Windows\System32\Drivers\INETMON.sys [25800 2014-04-03] ()

R3 intelppm; C:\Windows\System32\DRIVERS\intelppm.sys [62464 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [28912 2014-02-18] (Intel Corporation)

S3 IpFilterDriver; C:\Windows\System32\DRIVERS\ipfltdrv.sys [82944 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 IPMIDRV; C:\Windows\system32\drivers\IPMIDrv.sys [78848 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 IPNAT; C:\Windows\System32\drivers\ipnat.sys [116224 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 IRENUM; C:\Windows\System32\drivers\irenum.sys [17920 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD.sys [44744 2014-02-03] ()

R3 kbdhid; C:\Windows\System32\DRIVERS\kbdhid.sys [33280 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R3 ksthunk; C:\Windows\system32\drivers\ksthunk.sys [20992 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R2 lltdio; C:\Windows\System32\DRIVERS\lltdio.sys [60928 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R2 luafv; C:\Windows\system32\drivers\luafv.sys [113152 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [118272 2014-04-03] (Intel Corporation)

S3 Modem; C:\Windows\System32\drivers\modem.sys [40448 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R3 monitor; C:\Windows\System32\DRIVERS\monitor.sys [30208 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R3 mouhid; C:\Windows\System32\DRIVERS\mouhid.sys [31232 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R3 mpsdrv; C:\Windows\System32\drivers\mpsdrv.sys [77312 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 MRxDAV; C:\Windows\system32\drivers\mrxdav.sys [141312 2014-12-19] (Microsoft Corporation) [Datei ist nicht signiert]

R3 mrxsmb; C:\Windows\System32\DRIVERS\mrxsmb.sys [159232 2015-07-15] (Microsoft Corporation) [Datei ist nicht signiert]

R3 mrxsmb10; C:\Windows\System32\DRIVERS\mrxsmb10.sys [290816 2015-07-15] (Microsoft Corporation) [Datei ist nicht signiert]

R3 mrxsmb20; C:\Windows\System32\DRIVERS\mrxsmb20.sys [129024 2015-07-15] (Microsoft Corporation) [Datei ist nicht signiert]

S3 mshidkmdf; C:\Windows\System32\drivers\mshidkmdf.sys [8192 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 MSKSSRV; C:\Windows\System32\drivers\MSKSSRV.sys [11136 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 MSPCLOCK; C:\Windows\System32\drivers\MSPCLOCK.sys [7168 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 MSPQM; C:\Windows\System32\drivers\MSPQM.sys [6784 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 MSTEE; C:\Windows\System32\drivers\MSTEE.sys [8064 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 MTConfig; C:\Windows\system32\DRIVERS\MTConfig.sys [15360 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 NativeWifiP; C:\Windows\System32\DRIVERS\nwifi.sys [318976 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 NdisCap; C:\Windows\System32\DRIVERS\ndiscap.sys [35328 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R3 NdisTapi; C:\Windows\System32\DRIVERS\ndistapi.sys [24064 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 Ndisuio; C:\Windows\System32\DRIVERS\ndisuio.sys [56832 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R3 NdisWan; C:\Windows\System32\DRIVERS\ndiswan.sys [164352 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R1 NetBIOS; C:\Windows\System32\DRIVERS\netbios.sys [44544 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R1 NetBT; C:\Windows\System32\DRIVERS\netbt.sys [261632 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R1 nsiproxy; C:\Windows\System32\drivers\nsiproxy.sys [24576 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\Super Charger\NTIOLib_X64.sys [13368 2012-10-25] (MSI)

S3 NTIOLib_1_0_4; C:\Program Files (x86)\MSI\Live Update\NTIOLib_X64.sys [14136 2010-10-22] (MSI)

R3 NTIOLib_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\NTIOLib_X64.sys [13368 2012-10-26] (MSI)

S3 NTIOLib_MSIClock_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\NTIOLib_X64.sys [13368 2012-11-20] (MSI)

S3 NTIOLib_MSICOMM_CC; C:\Program Files (x86)\MSI\Command Center\NTIOLib_X64.sys [13368 2012-11-19] (MSI)

S3 NTIOLib_MSICPU_CC; C:\Program Files (x86)\MSI\Command Center\CPU\NTIOLib_X64.sys [13368 2012-11-20] (MSI)

S3 NTIOLib_MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\NTIOLib_X64.sys [13368 2012-11-26] (MSI)

S3 NTIOLib_MSIRatio_CC; C:\Program Files (x86)\MSI\Command Center\CPU\CPU_Ratio\NTIOLib_X64.sys [13368 2012-11-20] (MSI)

S3 NTIOLib_MSISMB_CC; C:\Program Files (x86)\MSI\Command Center\SMBus\NTIOLib_X64.sys [13368 2012-11-19] (MSI)

S3 NTIOLib_MSISuperIO_CC; C:\Program Files (x86)\MSI\Command Center\SuperIO\NTIOLib_X64.sys [13368 2012-11-19] (MSI)

R3 NTIOLib_MSI_RAID; C:\MSI\Smart Utilities\NTIOLib_X64.sys [13808 2014-03-17] (MSI)

R1 Null; C:\Windows\System32\Drivers\Null.sys [6144 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 ohci1394; C:\Windows\system32\drivers\ohci1394.sys [72832 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R3 Parport; C:\Windows\System32\DRIVERS\parport.sys [97280 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R2 PEAUTH; C:\Windows\System32\drivers\peauth.sys [663552 2015-02-03] (Microsoft Corporation) [Datei ist nicht signiert]

R3 PptpMiniport; C:\Windows\System32\DRIVERS\raspptp.sys [111104 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 Processor; C:\Windows\system32\DRIVERS\processr.sys [60416 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R1 Psched; C:\Windows\System32\DRIVERS\pacer.sys [131584 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 QWAVEdrv; C:\Windows\system32\drivers\qwavedrv.sys [46592 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 RasAcd; C:\Windows\System32\DRIVERS\rasacd.sys [14848 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R3 RasAgileVpn; C:\Windows\System32\DRIVERS\AgileVpn.sys [60416 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R3 Rasl2tp; C:\Windows\System32\DRIVERS\rasl2tp.sys [129536 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R3 RasPppoe; C:\Windows\System32\DRIVERS\raspppoe.sys [92672 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R3 RasSstp; C:\Windows\System32\DRIVERS\rassstp.sys [83968 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R1 rdbss; C:\Windows\System32\DRIVERS\rdbss.sys [309248 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R3 rdpbus; C:\Windows\System32\DRIVERS\rdpbus.sys [24064 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R1 RDPCDD; C:\Windows\System32\DRIVERS\RDPCDD.sys [7680 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 RDPDR; C:\Windows\System32\drivers\rdpdr.sys [165888 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R1 RDPENCDD; C:\Windows\System32\drivers\rdpencdd.sys [7680 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R1 RDPREFMP; C:\Windows\System32\drivers\rdprefmp.sys [8192 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 RdpVideoMiniport; C:\Windows\System32\drivers\rdpvideominiport.sys [20992 2015-06-11] (Microsoft Corporation) [Datei ist nicht signiert]

R2 rspndr; C:\Windows\System32\DRIVERS\rspndr.sys [76800 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 s3cap; C:\Windows\system32\drivers\vms3cap.sys [6656 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 scfilter; C:\Windows\System32\DRIVERS\scfilter.sys [29696 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R3 Serenum; C:\Windows\System32\DRIVERS\serenum.sys [23552 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 sermouse; C:\Windows\system32\DRIVERS\sermouse.sys [26624 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 sffdisk; C:\Windows\system32\drivers\sffdisk.sys [14336 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 sffp_mmc; C:\Windows\system32\drivers\sffp_mmc.sys [13824 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 sffp_sd; C:\Windows\system32\drivers\sffp_sd.sys [14336 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 sfloppy; C:\Windows\system32\DRIVERS\sfloppy.sys [16896 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 Smb; C:\Windows\System32\DRIVERS\smb.sys [93184 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R3 srv; C:\Windows\System32\DRIVERS\srv.sys [467456 2011-04-29] (Microsoft Corporation) [Datei ist nicht signiert]

R3 srv2; C:\Windows\System32\DRIVERS\srv2.sys [410112 2011-04-29] (Microsoft Corporation) [Datei ist nicht signiert]

R3 srvnet; C:\Windows\System32\DRIVERS\srvnet.sys [168448 2011-04-29] (Microsoft Corporation) [Datei ist nicht signiert]

R2 tcpipreg; C:\Windows\System32\drivers\tcpipreg.sys [45568 2012-10-03] (Microsoft Corporation) [Datei ist nicht signiert]

S3 TDPIPE; C:\Windows\System32\drivers\tdpipe.sys [15872 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 TDTCP; C:\Windows\System32\drivers\tdtcp.sys [23552 2012-02-17] (Microsoft Corporation) [Datei ist nicht signiert]

R1 tdx; C:\Windows\System32\DRIVERS\tdx.sys [119296 2014-11-11] (Microsoft Corporation) [Datei ist nicht signiert]

S3 tssecsrv; C:\Windows\System32\DRIVERS\tssecsrv.sys [39936 2014-07-17] (Microsoft Corporation) [Datei ist nicht signiert]

S3 TsUsbFlt; C:\Windows\System32\drivers\tsusbflt.sys [59392 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R3 tunnel; C:\Windows\System32\DRIVERS\tunnel.sys [125440 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S4 udfs; C:\Windows\System32\DRIVERS\udfs.sys [328192 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R3 UHSfiltv; C:\Windows\System32\drivers\UHSfiltv.sys [23552 2014-12-22] (Creative Technology Ltd.) [Datei ist nicht signiert]

R3 umbus; C:\Windows\System32\DRIVERS\umbus.sys [48640 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 UmPass; C:\Windows\system32\DRIVERS\umpass.sys [9728 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R3 usbaudio; C:\Windows\System32\drivers\usbaudio.sys [109824 2013-07-12] (Microsoft Corporation) [Datei ist nicht signiert]

R3 usbccgp; C:\Windows\System32\DRIVERS\usbccgp.sys [99840 2013-11-27] (Microsoft Corporation) [Datei ist nicht signiert]

S3 usbcir; C:\Windows\system32\drivers\usbcir.sys [100864 2013-07-12] (Microsoft Corporation) [Datei ist nicht signiert]

R3 usbehci; C:\Windows\System32\DRIVERS\usbehci.sys [53248 2013-11-27] (Microsoft Corporation) [Datei ist nicht signiert]

R3 usbhub; C:\Windows\System32\DRIVERS\usbhub.sys [343040 2013-11-27] (Microsoft Corporation) [Datei ist nicht signiert]

S3 usbohci; C:\Windows\system32\drivers\usbohci.sys [25600 2013-11-27] (Microsoft Corporation) [Datei ist nicht signiert]

S3 usbprint; C:\Windows\system32\DRIVERS\usbprint.sys [25088 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 USBSTOR; C:\Windows\System32\DRIVERS\USBSTOR.SYS [91648 2011-03-11] (Microsoft Corporation) [Datei ist nicht signiert]

S3 usbuhci; C:\Windows\system32\drivers\usbuhci.sys [30720 2013-11-27] (Microsoft Corporation) [Datei ist nicht signiert]

S3 vga; C:\Windows\System32\DRIVERS\vgapnp.sys [29184 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R1 VgaSave; C:\Windows\System32\drivers\vga.sys [29184 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [21760 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R1 vpcnfltr; C:\Windows\System32\DRIVERS\vpcnfltr.sys [59392 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R3 vpcusb; C:\Windows\System32\DRIVERS\vpcusb.sys [95232 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

S3 vwifibus; C:\Windows\System32\drivers\vwifibus.sys [24576 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 WacomPen; C:\Windows\system32\DRIVERS\wacompen.sys [27776 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 WANARP; C:\Windows\System32\DRIVERS\wanarp.sys [88576 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R1 Wanarpv6; C:\Windows\System32\DRIVERS\wanarp.sys [88576 2010-11-20] (Microsoft Corporation) [Datei ist nicht signiert]

R1 WfpLwf; C:\Windows\System32\DRIVERS\wfplwf.sys [12800 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

R3 WmiAcpi; C:\Windows\system32\drivers\wmiacpi.sys [14336 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S4 ws2ifsl; C:\Windows\system32\drivers\ws2ifsl.sys [21504 2009-07-14] (Microsoft Corporation) [Datei ist nicht signiert]

S3 WudfPf; C:\Windows\System32\drivers\WudfPf.sys [87040 2012-07-26] (Microsoft Corporation) [Datei ist nicht signiert]

S3 WUDFRd; C:\Windows\System32\DRIVERS\WUDFRd.sys [198656 2012-07-26] (Microsoft Corporation) [Datei ist nicht signiert]

S3 MSICDSetup; \??\D:\CDriver64.sys [X]

S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]

S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]

S3 tsusbhub; system32\drivers\tsusbhub.sys [X]

S3 VGPU; System32\drivers\rdvgkmd.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-08-14 02:49 - 2015-08-14 02:49 - 00293312 _____ C:\Windows\Minidump\081415-11232-01.dmp

2015-08-14 02:48 - 2015-08-14 02:48 - 00293504 _____ C:\Windows\Minidump\081415-10467-01.dmp

2015-08-14 02:47 - 2015-08-14 02:55 - 00056230 _____ C:\Users\D4sherInc\Desktop\FRST.txt

2015-08-14 02:46 - 2015-08-14 02:50 - 00000000 ____D C:\FRST

2015-08-14 02:46 - 2015-08-14 02:46 - 02173952 _____ (Farbar) C:\Users\D4sherInc\Desktop\FRST64.exe

2015-08-14 02:42 - 2015-08-14 02:42 - 00050477 _____ C:\Users\D4sherInc\Desktop\Defogger.exe

2015-08-14 02:42 - 2015-08-14 02:42 - 00000480 _____ C:\Users\D4sherInc\Desktop\defogger_disable.log

2015-08-14 02:42 - 2015-08-14 02:42 - 00000000 _____ C:\Users\D4sherInc\defogger_reenable

2015-08-14 02:26 - 2015-08-14 02:26 - 00293496 _____ C:\Windows\Minidump\081415-10717-01.dmp

2015-08-14 01:50 - 2015-08-14 01:50 - 00293120 _____ C:\Windows\Minidump\081415-7971-01.dmp

2015-08-13 20:44 - 2015-08-13 20:44 - 00292968 _____ C:\Windows\Minidump\081315-11294-01.dmp

2015-08-13 14:18 - 2015-08-13 14:18 - 00293024 _____ C:\Windows\Minidump\081315-7878-01.dmp

2015-08-13 14:11 - 2015-08-13 14:11 - 00293440 _____ C:\Windows\Minidump\081315-8096-01.dmp

2015-08-13 02:15 - 2015-08-13 02:15 - 00000000 __SHD C:\found.002

2015-08-13 02:11 - 2015-08-13 02:11 - 00000000 __SHD C:\found.001

2015-08-13 02:07 - 2015-08-13 02:07 - 00293152 _____ C:\Windows\Minidump\081315-7394-01.dmp

2015-08-13 02:06 - 2015-08-13 02:06 - 00293496 _____ C:\Windows\Minidump\081315-7753-01.dmp

2015-08-12 22:25 - 2015-08-12 22:25 - 00292920 _____ C:\Windows\Minidump\081215-9126-01.dmp

2015-08-12 22:24 - 2015-08-12 22:24 - 00293512 _____ C:\Windows\Minidump\081215-9438-01.dmp

2015-08-12 13:16 - 2015-08-12 13:16 - 00000000 __SHD C:\found.000

2015-08-12 03:29 - 2015-08-12 03:29 - 00293448 _____ C:\Windows\Minidump\081215-8845-01.dmp

2015-08-12 03:02 - 2015-07-30 15:13 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll

2015-08-12 03:02 - 2015-07-30 15:13 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

2015-08-11 20:13 - 2015-08-11 20:13 - 00293440 _____ C:\Windows\Minidump\081115-6770-01.dmp

2015-08-11 20:01 - 2015-07-28 22:09 - 00017344 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe

2015-08-11 20:01 - 2015-07-28 22:05 - 01116672 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2015-08-11 20:01 - 2015-07-28 22:05 - 00774656 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2015-08-11 20:01 - 2015-07-28 22:05 - 00743424 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2015-08-11 20:01 - 2015-07-28 22:05 - 00437760 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2015-08-11 20:01 - 2015-07-28 22:05 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2015-08-11 20:01 - 2015-07-28 22:05 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

2015-08-11 20:01 - 2015-07-28 21:55 - 01148416 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2015-08-11 20:01 - 2015-07-15 20:15 - 05568960 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-08-11 20:01 - 2015-07-15 20:15 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-08-11 20:01 - 2015-07-15 20:15 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-08-11 20:01 - 2015-07-15 20:15 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys

2015-08-11 20:01 - 2015-07-15 20:12 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2015-08-11 20:01 - 2015-07-15 20:11 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2015-08-11 20:01 - 2015-07-15 20:11 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2015-08-11 20:01 - 2015-07-15 20:11 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2015-08-11 20:01 - 2015-07-15 20:11 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-08-11 20:01 - 2015-07-15 20:11 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 01743360 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-08-11 20:01 - 2015-07-15 20:10 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2015-08-11 20:01 - 2015-07-15 20:10 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-08-11 20:01 - 2015-07-15 20:10 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll

2015-08-11 20:01 - 2015-07-15 20:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2015-08-11 20:01 - 2015-07-15 20:09 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-08-11 20:01 - 2015-07-15 20:05 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-08-11 20:01 - 2015-07-15 20:05 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:59 - 03989952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2015-08-11 20:01 - 2015-07-15 19:59 - 03934656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2015-08-11 20:01 - 2015-07-15 19:56 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2015-08-11 20:01 - 2015-07-15 19:55 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2015-08-11 20:01 - 2015-07-15 19:55 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2015-08-11 20:01 - 2015-07-15 19:55 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2015-08-11 20:01 - 2015-07-15 19:55 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2015-08-11 20:01 - 2015-07-15 19:55 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2015-08-11 20:01 - 2015-07-15 19:54 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-08-11 20:01 - 2015-07-15 19:54 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2015-08-11 20:01 - 2015-07-15 19:54 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2015-08-11 20:01 - 2015-07-15 19:54 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll

2015-08-11 20:01 - 2015-07-15 19:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2015-08-11 20:01 - 2015-07-15 19:54 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2015-08-11 20:01 - 2015-07-15 19:54 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2015-08-11 20:01 - 2015-07-15 19:53 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2015-08-11 20:01 - 2015-07-15 19:53 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2015-08-11 20:01 - 2015-07-15 19:53 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2015-08-11 20:01 - 2015-07-15 19:53 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2015-08-11 20:01 - 2015-07-15 19:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2015-08-11 20:01 - 2015-07-15 19:53 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2015-08-11 20:01 - 2015-07-15 19:49 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2015-08-11 20:01 - 2015-07-15 19:48 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 18:46 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2015-08-11 20:01 - 2015-07-15 18:46 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2015-08-11 20:01 - 2015-07-15 18:46 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2015-08-11 20:01 - 2015-07-15 18:37 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2015-08-11 20:01 - 2015-07-15 18:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2015-08-11 20:01 - 2015-07-15 18:34 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 18:34 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 18:34 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 18:34 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2015-08-11 20:01 - 2015-07-10 19:51 - 03722752 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2015-08-11 20:01 - 2015-07-10 19:51 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll

2015-08-11 20:01 - 2015-07-10 19:51 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

2015-08-11 20:01 - 2015-07-10 19:34 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2015-08-11 20:01 - 2015-07-10 19:34 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll

2015-08-11 20:01 - 2015-07-10 19:33 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll

2015-08-11 20:00 - 2015-07-21 02:39 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-08-11 20:00 - 2015-07-21 02:12 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2015-08-11 20:00 - 2015-07-16 23:14 - 25192448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-08-11 20:00 - 2015-07-16 22:54 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-08-11 20:00 - 2015-07-16 22:54 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-08-11 20:00 - 2015-07-16 22:37 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-08-11 20:00 - 2015-07-16 22:36 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-08-11 20:00 - 2015-07-16 22:36 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2015-08-11 20:00 - 2015-07-16 22:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-08-11 20:00 - 2015-07-16 22:35 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-08-11 20:00 - 2015-07-16 22:35 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-08-11 20:00 - 2015-07-16 22:27 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-08-11 20:00 - 2015-07-16 22:26 - 05923328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-08-11 20:00 - 2015-07-16 22:26 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-08-11 20:00 - 2015-07-16 22:23 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-08-11 20:00 - 2015-07-16 22:21 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2015-08-11 20:00 - 2015-07-16 22:21 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-08-11 20:00 - 2015-07-16 22:21 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-08-11 20:00 - 2015-07-16 22:21 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-08-11 20:00 - 2015-07-16 22:20 - 19870208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-08-11 20:00 - 2015-07-16 22:12 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-08-11 20:00 - 2015-07-16 22:08 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-08-11 20:00 - 2015-07-16 22:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2015-08-11 20:00 - 2015-07-16 22:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-08-11 20:00 - 2015-07-16 21:55 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-08-11 20:00 - 2015-07-16 21:54 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-08-11 20:00 - 2015-07-16 21:51 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-08-11 20:00 - 2015-07-16 21:51 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-08-11 20:00 - 2015-07-16 21:51 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2015-08-11 20:00 - 2015-07-16 21:50 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2015-08-11 20:00 - 2015-07-16 21:50 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2015-08-11 20:00 - 2015-07-16 21:49 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2015-08-11 20:00 - 2015-07-16 21:45 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-08-11 20:00 - 2015-07-16 21:43 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2015-08-11 20:00 - 2015-07-16 21:43 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2015-08-11 20:00 - 2015-07-16 21:41 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2015-08-11 20:00 - 2015-07-16 21:39 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2015-08-11 20:00 - 2015-07-16 21:39 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2015-08-11 20:00 - 2015-07-16 21:38 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2015-08-11 20:00 - 2015-07-16 21:36 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-08-11 20:00 - 2015-07-16 21:35 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-08-11 20:00 - 2015-07-16 21:34 - 14451200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-08-11 20:00 - 2015-07-16 21:33 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-08-11 20:00 - 2015-07-16 21:32 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-08-11 20:00 - 2015-07-16 21:29 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2015-08-11 20:00 - 2015-07-16 21:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2015-08-11 20:00 - 2015-07-16 21:20 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2015-08-11 20:00 - 2015-07-16 21:19 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-08-11 20:00 - 2015-07-16 21:17 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-08-11 20:00 - 2015-07-16 21:12 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-08-11 20:00 - 2015-07-16 21:12 - 02427904 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-08-11 20:00 - 2015-07-16 21:10 - 12856832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-08-11 20:00 - 2015-07-16 21:06 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-08-11 20:00 - 2015-07-16 21:06 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-08-11 20:00 - 2015-07-16 21:05 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2015-08-11 20:00 - 2015-07-16 21:01 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-08-11 20:00 - 2015-07-16 20:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-08-11 20:00 - 2015-07-16 20:42 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-08-11 20:00 - 2015-07-16 20:38 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-08-11 20:00 - 2015-07-16 20:37 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2015-08-11 20:00 - 2015-07-15 05:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll

2015-08-11 19:59 - 2015-07-30 20:06 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2015-08-11 19:59 - 2015-07-30 20:06 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2015-08-11 19:59 - 2015-07-30 20:06 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2015-08-11 19:59 - 2015-07-30 20:06 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2015-08-11 19:59 - 2015-07-30 20:06 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2015-08-11 19:59 - 2015-07-30 20:06 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll

2015-08-11 19:59 - 2015-07-30 20:06 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll

2015-08-11 19:59 - 2015-07-30 19:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2015-08-11 19:59 - 2015-07-30 19:57 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll

2015-08-11 19:59 - 2015-07-30 19:57 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll

2015-08-11 19:59 - 2015-07-30 19:57 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2015-08-11 19:59 - 2015-07-30 19:57 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll

2015-08-11 19:59 - 2015-07-30 19:55 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll

2015-08-11 19:59 - 2015-07-30 18:56 - 03208192 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-08-11 19:59 - 2015-07-30 18:52 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2015-08-11 19:59 - 2015-07-30 18:49 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2015-08-11 19:59 - 2015-07-20 19:56 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2015-08-11 19:59 - 2015-07-20 19:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2015-08-11 19:59 - 2015-07-20 19:56 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2015-08-11 19:59 - 2015-07-20 19:56 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2015-08-11 19:59 - 2015-07-20 19:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2015-08-11 19:59 - 2015-07-15 05:19 - 02004992 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll

2015-08-11 19:59 - 2015-07-15 05:19 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2015-08-11 19:59 - 2015-07-15 05:14 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll

2015-08-11 19:59 - 2015-07-15 05:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2015-08-11 19:59 - 2015-07-15 04:55 - 01390592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll

2015-08-11 19:59 - 2015-07-15 04:55 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2015-08-11 19:59 - 2015-07-15 04:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll

2015-08-11 19:59 - 2015-07-15 04:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2015-08-11 19:59 - 2015-07-01 22:49 - 00260096 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll

2015-08-11 19:59 - 2015-07-01 22:48 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll

2015-08-11 19:59 - 2015-07-01 22:30 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll

2015-08-11 19:59 - 2015-07-01 22:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll

2015-08-11 19:58 - 2015-07-20 20:12 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-08-11 19:58 - 2015-07-20 20:12 - 02606080 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-08-11 19:58 - 2015-07-20 20:12 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-08-11 19:58 - 2015-07-20 20:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-08-11 19:58 - 2015-07-20 20:12 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-08-11 19:58 - 2015-07-20 20:12 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-08-11 19:58 - 2015-07-20 20:12 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll

2015-08-11 19:58 - 2015-07-20 20:12 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2015-08-11 19:58 - 2015-07-20 20:12 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-08-11 19:58 - 2015-07-20 20:12 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2015-08-11 19:58 - 2015-07-20 20:12 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll

2015-08-11 19:58 - 2015-07-10 19:51 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2015-08-11 19:58 - 2015-07-10 19:34 - 12875776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2015-08-11 19:58 - 2015-07-09 19:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe

2015-08-11 19:58 - 2015-07-09 19:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\notepad.exe

2015-08-11 19:58 - 2015-07-09 19:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe

2015-08-11 19:51 - 2015-08-11 19:51 - 00293512 _____ C:\Windows\Minidump\081115-6988-01.dmp

2015-08-11 18:15 - 2015-08-11 18:15 - 00293016 _____ C:\Windows\Minidump\081115-7612-01.dmp

2015-08-11 18:14 - 2015-08-11 18:14 - 00293456 _____ C:\Windows\Minidump\081115-7566-01.dmp

2015-08-11 18:14 - 2015-08-11 18:14 - 00293160 _____ C:\Windows\Minidump\081115-8174-01.dmp

2015-08-05 02:12 - 2015-08-05 02:12 - 00293464 _____ C:\Windows\Minidump\080515-7035-01.dmp

2015-08-04 22:56 - 2015-08-04 22:56 - 00293448 _____ C:\Windows\Minidump\080415-6864-01.dmp

2015-08-04 22:20 - 2015-08-04 22:20 - 00293480 _____ C:\Windows\Minidump\080415-7113-01.dmp

2015-08-04 21:01 - 2015-08-04 21:01 - 00293456 _____ C:\Windows\Minidump\080415-6910-01.dmp

2015-08-04 15:28 - 2015-08-04 15:28 - 00293504 _____ C:\Windows\Minidump\080415-8392-01.dmp

2015-08-04 15:28 - 2015-08-04 15:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

2015-08-04 15:28 - 2015-08-04 15:28 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi

2015-08-04 08:07 - 2015-08-04 08:07 - 00001613 _____ C:\Users\Public\Desktop\League of Legends.lnk

2015-08-04 08:07 - 2015-08-04 08:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends

2015-08-04 07:40 - 2015-08-04 07:40 - 00293368 _____ C:\Windows\Minidump\080415-12370-01.dmp

2015-08-04 07:39 - 2015-08-04 07:39 - 00293480 _____ C:\Windows\Minidump\080415-12823-01.dmp

2015-08-04 07:16 - 2015-08-04 07:16 - 00293416 _____ C:\Windows\Minidump\080415-5304-01.dmp

2015-08-04 07:16 - 2015-08-04 07:16 - 00293072 _____ C:\Windows\Minidump\080415-4633-01.dmp

2015-08-04 07:13 - 2015-08-04 07:13 - 00293056 _____ C:\Windows\Minidump\080415-5444-01.dmp

2015-08-04 07:12 - 2015-08-04 07:12 - 00293352 _____ C:\Windows\Minidump\080415-4773-01.dmp

2015-08-03 14:06 - 2015-08-14 02:49 - 395465425 _____ C:\Windows\MEMORY.DMP

2015-08-03 14:06 - 2015-08-14 02:49 - 00000000 ____D C:\Windows\Minidump

2015-08-03 14:06 - 2015-08-03 14:06 - 00293280 _____ C:\Windows\Minidump\080315-6536-01.dmp

2015-08-03 14:05 - 2015-08-03 14:05 - 00027392 ____N C:\bootsqm.dat

2015-07-28 11:02 - 2015-07-28 11:02 - 00312752 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys

2015-07-28 11:01 - 2015-07-28 11:01 - 00245680 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgmfx64.sys

2015-07-26 03:17 - 2015-08-04 06:44 - 00000000 ____D C:\Wooxy

2015-07-26 03:17 - 2015-08-04 06:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wooxy

2015-07-23 13:16 - 2015-07-23 13:16 - 00000000 ____D C:\Users\D4sherInc\AppData\Local\CEF

2015-07-17 20:07 - 2015-08-03 12:12 - 00033856 ____H (LogMeIn, Inc.) C:\Windows\system32\hamachi.sys

2015-07-15 11:23 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2015-07-15 11:23 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2015-07-15 11:23 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll

2015-07-15 11:23 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll

2015-07-15 11:21 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll

2015-07-15 11:21 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll

2015-07-15 11:21 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2015-07-15 11:21 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2015-07-15 11:21 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2015-07-15 11:21 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll

2015-07-15 11:21 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll

2015-07-15 11:21 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe

2015-07-15 11:21 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2015-07-15 11:21 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2015-07-15 11:21 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll

2015-07-15 11:21 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe

2015-07-15 11:21 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll

2015-07-15 11:21 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll

2015-07-15 11:21 - 2015-06-11 19:56 - 01112576 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2015-07-15 11:21 - 2015-06-11 19:16 - 00162816 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll

2015-07-15 11:21 - 2015-06-11 19:15 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys

2015-07-15 11:21 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2015-07-15 11:21 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2015-07-15 11:21 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2015-07-15 11:21 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2015-07-15 11:21 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll

2015-07-15 11:21 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2015-07-15 11:21 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll

2015-07-15 11:21 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-08-14 02:54 - 2015-01-16 02:53 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\Spotify

2015-08-14 02:52 - 2015-01-15 23:39 - 01224596 _____ C:\Windows\WindowsUpdate.log

2015-08-14 02:51 - 2015-01-16 00:01 - 00063294 _____ C:\Windows\SysWOW64\Gms.log

2015-08-14 02:49 - 2015-06-27 00:00 - 00000000 ____D C:\Users\D4sherInc\AppData\Local\LogMeIn Hamachi

2015-08-14 02:49 - 2015-01-16 02:53 - 00000000 ____D C:\Users\D4sherInc\AppData\Local\Spotify

2015-08-14 02:49 - 2015-01-16 00:08 - 00000284 _____ C:\Windows\Tasks\RtlNetworkGenieVistaStart.job

2015-08-14 02:49 - 2015-01-15 23:45 - 00000000 ____D C:\ProgramData\NVIDIA

2015-08-14 02:49 - 2015-01-15 23:42 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-08-14 02:49 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2015-08-14 02:49 - 2009-07-14 06:51 - 00260065 _____ C:\Windows\setupact.log

2015-08-14 02:42 - 2015-01-15 23:39 - 00000000 ____D C:\Users\D4sherInc

2015-08-14 02:41 - 2009-07-14 06:45 - 00013728 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-08-14 02:41 - 2009-07-14 06:45 - 00013728 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-08-14 02:40 - 2015-01-15 23:46 - 00003962 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{3AF67803-2CA0-49F2-9A86-433755C59022}

2015-08-14 02:34 - 2009-07-14 19:58 - 00701146 _____ C:\Windows\system32\perfh007.dat

2015-08-14 02:34 - 2009-07-14 19:58 - 00150046 _____ C:\Windows\system32\perfc007.dat

2015-08-14 02:34 - 2009-07-14 07:13 - 01619928 _____ C:\Windows\system32\PerfStringBackup.INI

2015-08-14 02:28 - 2015-01-16 00:42 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\TS3Client

2015-08-14 02:09 - 2015-01-15 23:42 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-08-14 01:25 - 2015-01-16 00:17 - 00000000 ____D C:\ProgramData\MFAData

2015-08-14 00:58 - 2015-01-16 03:19 - 00000000 ____D C:\Users\D4sherInc\Desktop\osu

2015-08-13 20:45 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2015-08-13 20:44 - 2015-02-20 06:15 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\Curse Client

2015-08-13 14:23 - 2015-01-16 00:53 - 00000000 ____D C:\Program Files (x86)\Steam

2015-08-13 00:43 - 2015-01-16 00:43 - 00000000 ____D C:\Program Files (x86)\Overwolf

2015-08-12 20:48 - 2015-01-16 22:38 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\Skype

2015-08-12 03:20 - 2015-01-15 23:39 - 00000000 ___RD C:\Users\D4sherInc\Virtual Machines

2015-08-12 03:20 - 2009-07-14 06:45 - 00267816 _____ C:\Windows\system32\FNTCACHE.DAT

2015-08-12 03:17 - 2015-01-16 00:22 - 00000000 ___SD C:\Windows\system32\CompatTel

2015-08-12 03:17 - 2015-01-16 00:22 - 00000000 ____D C:\Windows\system32\appraiser

2015-08-12 02:13 - 2015-01-15 23:42 - 00002182 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2015-08-11 10:39 - 2015-01-16 00:21 - 00000988 _____ C:\Users\Public\Desktop\AVG 2015.lnk

2015-08-11 10:39 - 2015-01-16 00:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG

2015-08-11 01:06 - 2015-06-16 16:37 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client

2015-08-04 23:45 - 2015-07-11 18:15 - 00000080 _____ C:\Users\D4sherInc\AppData\Local???????????????????

2015-08-04 06:51 - 2015-06-19 12:38 - 00000000 ____D C:\Program Files\Common Files\AV

2015-08-04 06:44 - 2015-07-11 18:15 - 00000000 ____D C:\Program Files (x86)\Rockstar Games

2015-08-04 06:44 - 2015-07-11 18:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games

2015-08-04 06:44 - 2015-07-11 18:14 - 00000000 ____D C:\Program Files\Rockstar Games

2015-08-04 06:44 - 2015-07-06 20:03 - 00000000 ____D C:\Program Files (x86)\FreeCodecPack

2015-08-04 06:44 - 2015-07-05 03:31 - 00000000 ____D C:\Users\D4sherInc\AppData\Local\Maca134

2015-08-04 06:44 - 2015-07-05 03:26 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive

2015-08-04 06:44 - 2015-07-05 03:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive

2015-08-04 06:44 - 2015-07-05 03:24 - 00000000 ____D C:\Program Files (x86)\DayZLauncher

2015-08-04 06:44 - 2015-07-01 04:29 - 00000000 ____D C:\Program Files\GIMP 2

2015-08-04 06:44 - 2015-06-29 13:48 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\m.objects

2015-08-04 06:44 - 2015-06-29 13:48 - 00000000 ____D C:\Program Files (x86)\m.objects

2015-08-04 06:44 - 2015-06-25 00:08 - 00000000 ____D C:\Users\D4sherInc\AppData\Local\Microsoft Games

2015-08-04 06:44 - 2015-06-21 17:39 - 00000000 ____D C:\Windows\SysWOW64\Macromed

2015-08-04 06:44 - 2015-06-21 17:30 - 00000000 ____D C:\Users\D4sherInc\AppData\Local\Purplizer

2015-08-04 06:44 - 2015-06-19 06:00 - 00000000 ____D C:\ProgramData\NCH Software

2015-08-04 06:44 - 2015-06-19 06:00 - 00000000 ____D C:\Program Files (x86)\NCH Software

2015-08-04 06:44 - 2015-06-03 18:12 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\Mozilla

2015-08-04 06:44 - 2015-05-27 01:55 - 00000000 ____D C:\Program Files (x86)\VideoLAN

2015-08-04 06:44 - 2015-05-27 01:50 - 00000000 ____D C:\Users\D4sherInc\AppData\Local\Movavi

2015-08-04 06:44 - 2015-05-27 01:44 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\Xilisoft

2015-08-04 06:44 - 2015-05-24 03:11 - 00000000 ____D C:\Users\D4sherInc\Documents\Square Enix

2015-08-04 06:44 - 2015-05-11 17:37 - 00000000 ____D C:\Users\D4sherInc\AppData\Local\SkinSpotlightsReplays

2015-08-04 06:44 - 2015-05-03 20:23 - 00000000 ____D C:\Program Files (x86)\LittleFighter2

2015-08-04 06:44 - 2015-04-15 23:42 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\Notepad++

2015-08-04 06:44 - 2015-04-15 23:42 - 00000000 ____D C:\Program Files (x86)\Notepad++

2015-08-04 06:44 - 2015-04-13 16:36 - 00000000 ____D C:\Users\D4sherInc\Documents\My Games

2015-08-04 06:44 - 2015-04-05 03:00 - 00000000 ___SD C:\Windows\system32\GWX

2015-08-04 06:44 - 2015-04-01 19:54 - 00000000 ____D C:\Users\D4sherInc\Desktop\FeedTheBeast#

2015-08-04 06:44 - 2015-03-14 03:10 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\uTorrent

2015-08-04 06:44 - 2015-03-07 05:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2015-08-04 06:44 - 2015-03-07 05:20 - 00000000 ____D C:\Program Files (x86)\Free Codec Pack

2015-08-04 06:44 - 2015-03-07 05:20 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft

2015-08-04 06:44 - 2015-03-07 05:19 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\DVDVideoSoft

2015-08-04 06:44 - 2015-02-17 07:54 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\OBS

2015-08-04 06:44 - 2015-02-17 07:54 - 00000000 ____D C:\Program Files\OBS

2015-08-04 06:44 - 2015-02-17 07:54 - 00000000 ____D C:\Program Files (x86)\OBS

2015-08-04 06:44 - 2015-02-17 07:27 - 00000000 ____D C:\Users\D4sherInc\AppData\Local\SkinSpotlights

2015-08-04 06:44 - 2015-02-17 05:37 - 00000000 ____D C:\Users\D4sherInc\AppData\Local\LeagueReplays

2015-08-04 06:44 - 2015-02-11 04:48 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\RealWorld

2015-08-04 06:44 - 2015-02-11 04:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealWorld

2015-08-04 06:44 - 2015-01-31 19:22 - 00000000 ____D C:\Program Files\Java

2015-08-04 06:44 - 2015-01-31 18:54 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\ftblauncher

2015-08-04 06:44 - 2015-01-28 01:17 - 00000000 ____D C:\ProgramData\ROCCAT

2015-08-04 06:44 - 2015-01-28 01:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ROCCAT

2015-08-04 06:44 - 2015-01-28 01:15 - 00000000 ____D C:\Program Files (x86)\ROCCAT

2015-08-04 06:44 - 2015-01-28 01:13 - 00000000 ____D C:\Program Files\Alienware

2015-08-04 06:44 - 2015-01-25 16:59 - 00000000 ____D C:\Program Files (x86)\Adobe

2015-08-04 06:44 - 2015-01-25 16:58 - 00000000 ____D C:\ProgramData\Adobe

2015-08-04 06:44 - 2015-01-25 16:49 - 00000000 ____D C:\Users\D4sherInc\AppData\Local\pdfforge

2015-08-04 06:44 - 2015-01-18 04:18 - 00000000 ____D C:\Users\D4sherInc\Documents\LOLReplay

2015-08-04 06:44 - 2015-01-18 04:18 - 00000000 ____D C:\Program Files (x86)\LOLReplay

2015-08-04 06:44 - 2015-01-16 22:59 - 00000000 ____D C:\Windows\system32\SPReview

2015-08-04 06:44 - 2015-01-16 22:59 - 00000000 ____D C:\Windows\system32\EventProviders

2015-08-04 06:44 - 2015-01-16 22:38 - 00000000 ___RD C:\Program Files (x86)\Skype

2015-08-04 06:44 - 2015-01-16 22:38 - 00000000 ____D C:\Users\D4sherInc\AppData\Local\Skype

2015-08-04 06:44 - 2015-01-16 22:38 - 00000000 ____D C:\ProgramData\Skype

2015-08-04 06:44 - 2015-01-16 14:07 - 00000000 ___HD C:\Program Files (x86)\Creative Installation Information

2015-08-04 06:44 - 2015-01-16 01:32 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\Riot Games

2015-08-04 06:44 - 2015-01-16 00:20 - 00000000 ____D C:\ProgramData\AVG2015

2015-08-04 06:44 - 2015-01-16 00:20 - 00000000 ____D C:\Program Files (x86)\AVG

2015-08-04 06:44 - 2015-01-16 00:04 - 00000000 ___HD C:\SuperChargerProfile

2015-08-04 06:44 - 2009-07-14 20:18 - 00000000 ___RD C:\Users\Public\Recorded TV

2015-08-04 06:44 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration

2015-08-04 06:27 - 2015-01-16 00:20 - 00000000 ___HD C:\$AVG

2015-08-04 06:20 - 2015-01-16 00:17 - 00000000 ____D C:\Users\D4sherInc\AppData\Local\Avg2015

2015-08-03 18:58 - 2015-01-15 23:57 - 00000000 ___HD C:\Program Files (x86)\Temp

2015-08-01 13:04 - 2015-01-15 23:42 - 00000000 ____D C:\Users\D4sherInc\AppData\Local\Google

2015-07-29 16:31 - 2015-01-16 01:03 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\.minecraft

2015-07-23 15:51 - 2015-01-16 09:25 - 00000000 ____D C:\Program Files (x86)\AVG Web TuneUp

2015-07-22 09:18 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2015-07-19 08:53 - 2015-01-16 00:42 - 00000000 ____D C:\Users\D4sherInc\AppData\Local\Overwolf

2015-07-17 00:34 - 2015-01-25 16:59 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk

2015-07-17 00:33 - 2015-01-26 03:34 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task

2015-07-16 05:21 - 2015-01-16 09:25 - 00000000 ____D C:\ProgramData\AVG Web TuneUp

2015-07-16 04:04 - 2015-01-15 23:42 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2015-07-16 04:04 - 2015-01-15 23:42 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2015-07-16 03:20 - 2015-04-05 03:00 - 00000000 ___SD C:\Windows\SysWOW64\GWX

2015-07-16 03:20 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions

2015-07-16 03:03 - 2015-01-16 00:16 - 00000000 ____D C:\Windows\system32\MRT
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2015-03-26 13:48 - 2015-03-26 13:48 - 2174976 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\Common Files\atimpenc.dll

2015-06-29 18:26 - 2015-06-29 18:26 - 0201882 _____ () C:\Users\D4sherInc\AppData\Local\2B763BC1_stp.CIS

2015-06-29 18:26 - 2015-06-29 18:26 - 0000290 _____ () C:\Users\D4sherInc\AppData\Local\2B763BC1_stp.CIS.part

2015-06-29 18:26 - 2015-06-29 18:26 - 1753194 _____ () C:\Users\D4sherInc\AppData\Local\316F70D7_stp.CIS

2015-06-29 18:26 - 2015-06-29 18:26 - 0000286 _____ () C:\Users\D4sherInc\AppData\Local\316F70D7_stp.CIS.part

2015-07-01 05:52 - 2015-07-01 05:52 - 0007273 _____ () C:\Users\D4sherInc\AppData\Local\recently-used.xbel

2015-01-16 00:25 - 2015-01-16 00:25 - 0000017 _____ () C:\Users\D4sherInc\AppData\Local\resmon.resmoncfg
 

Einige Dateien in TEMP:

====================

C:\Users\D4sherInc\AppData\Local\Temp\APNSetup.exe

C:\Users\D4sherInc\AppData\Local\Temp\AutoWifi.exe

C:\Users\D4sherInc\AppData\Local\Temp\devcon64.exe

C:\Users\D4sherInc\AppData\Local\Temp\install_flash_player.exe

C:\Users\D4sherInc\AppData\Local\Temp\SkypeSetup.exe

C:\Users\D4sherInc\AppData\Local\Temp\tmd_34017897.exe

C:\Users\D4sherInc\AppData\Local\Temp\xmlUpdater.exe
 
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\Windows\system32\winlogon.exe => MD5 ist legitim

C:\Windows\system32\wininit.exe => MD5 ist legitim

C:\Windows\SysWOW64\wininit.exe => MD5 ist legitim

C:\Windows\explorer.exe => MD5 ist legitim

C:\Windows\SysWOW64\explorer.exe => MD5 ist legitim

C:\Windows\system32\svchost.exe => MD5 ist legitim

C:\Windows\SysWOW64\svchost.exe => MD5 ist legitim

C:\Windows\system32\services.exe => MD5 ist legitim

C:\Windows\system32\User32.dll => MD5 ist legitim

C:\Windows\SysWOW64\User32.dll => MD5 ist legitim

C:\Windows\system32\userinit.exe => MD5 ist legitim

C:\Windows\SysWOW64\userinit.exe => MD5 ist legitim

C:\Windows\system32\rpcss.dll => MD5 ist legitim

C:\Windows\system32\dnsapi.dll => MD5 ist legitim

C:\Windows\SysWOW64\dnsapi.dll => MD5 ist legitim

C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2015-08-05 20:57
 

==================== Ende von Ergebnis ============================

Lade Dir bitte von hier

Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.

Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
Klicke auf Optionen und wähle als Sprache Deutsch.
Suche im Uninstallerfeld nach den Programmen:

Search App by Ask

YTD Video Downloader 4.9
Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
Wähle anschließend den Modus "Moderat" aus.
Reste löschen:
Klicke auf dann auf und dann auf .

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Lade Dir bitte Bluescreenview und installiere es:
BlueScreenView - Download - Filepony

Öffnen und den aktuellsten Dump analysieren lassen (macht das Tool automatisch).
Output hier posten.

Hi,

ich habe alle deine Schritte beachtet und nach einander ausgeführt. Dies ist der Combofix.txt - log:

Code:

ComboFix 15-08-14.01 - D4sherInc 15.08.2015  13:57:55.1.4 - x64

Microsoft Windows 7 Ultimate   6.1.7601.1.1252.49.1031.18.8120.6102 [GMT 2:00]

ausgeführt von:: c:\users\D4sherInc\Desktop\ComboFix.exe

AV: AVG AntiVirus 2015 *Enabled/Updated* {4D41356F-32AD-7C42-C820-63775EE4F413}

SP: AVG AntiVirus 2015 *Enabled/Updated* {F620D48B-1497-73CC-F290-58052563BEAE}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\windows\SysWow64\1

c:\windows\SysWow64\2

c:\windows\SysWow64\3

.

.

(((((((((((((((((((((((   Dateien erstellt von 2015-07-15 bis 2015-08-15  ))))))))))))))))))))))))))))))

.

.

2015-08-15 12:01 . 2015-08-15 12:01        --------        d-----w-        c:\users\Default\AppData\Local\temp

2015-08-15 11:47 . 2015-08-15 11:47        --------        d-----w-        c:\program files (x86)\VS Revo Group

2015-08-14 14:24 . 2015-08-14 14:24        --------        d-----w-        c:\program files (x86)\Ambient Design

2015-08-14 14:24 . 2015-08-14 14:27        --------        d-----w-        c:\users\D4sherInc\AppData\Roaming\Ambient Design

2015-08-14 13:09 . 2015-08-14 13:09        --------        d-----w-        c:\users\D4sherInc\.android

2015-08-14 12:33 . 2015-08-14 12:33        --------        d-----w-        c:\users\D4sherInc\AppData\Local\Wacom

2015-08-14 01:23 . 2015-08-14 01:23        --------        d-----w-        C:\found.003

2015-08-14 00:46 . 2015-08-14 00:56        --------        d-----w-        C:\FRST

2015-08-13 11:58 . 2015-05-09 18:26        493504        ----a-w-        c:\windows\system32\mcupdate_GenuineIntel.dll

2015-08-13 00:15 . 2015-08-13 00:15        --------        d-----w-        C:\found.002

2015-08-13 00:11 . 2015-08-13 00:11        --------        d-----w-        C:\found.001

2015-08-12 11:16 . 2015-08-12 11:16        --------        d-----w-        C:\found.000

2015-08-12 01:02 . 2015-07-30 13:13        103120        ----a-w-        c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll

2015-08-12 01:02 . 2015-07-30 13:13        124624        ----a-w-        c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll

2015-08-11 18:00 . 2015-07-15 03:19        52736        ----a-w-        c:\windows\system32\basesrv.dll

2015-08-11 17:59 . 2015-07-15 03:19        2004992        ----a-w-        c:\windows\system32\msxml6.dll

2015-08-11 17:58 . 2015-07-20 18:12        98304        ----a-w-        c:\windows\system32\wudriver.dll

2015-08-11 10:47 . 2015-07-21 05:25        12222168        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{91A3C32B-54EE-4674-8399-B32E6ACC5E10}\mpengine.dll

2015-08-04 13:28 . 2015-08-04 13:28        --------        d-----w-        c:\program files (x86)\LogMeIn Hamachi

2015-07-28 09:02 . 2015-07-28 09:02        312752        ----a-w-        c:\windows\system32\drivers\avgidsdrivera.sys

2015-07-28 09:01 . 2015-07-28 09:01        245680        ----a-w-        c:\windows\system32\drivers\avgmfx64.sys

2015-07-26 01:17 . 2015-08-04 04:44        --------        d-----w-        C:\Wooxy

2015-07-23 11:16 . 2015-07-23 11:16        --------        d-----w-        c:\users\D4sherInc\AppData\Local\CEF

2015-07-17 18:07 . 2015-08-03 10:12        33856        ---ha-w-        c:\windows\system32\hamachi.sys

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2015-07-15 17:54 . 2015-08-11 18:01        44032        ----a-w-        c:\windows\apppatch\acwow64.dll

2015-07-04 18:07 . 2015-07-15 09:21        2087424        ----a-w-        c:\windows\system32\ole32.dll

2015-07-04 17:48 . 2015-07-15 09:21        1414656        ----a-w-        c:\windows\SysWow64\ole32.dll

2015-07-03 06:43 . 2015-01-15 22:16        130333168        ----a-w-        c:\windows\system32\MRT.exe

2015-06-23 11:30 . 2015-01-15 22:16        300704        ------w-        c:\windows\system32\MpSigStub.exe

2015-06-22 01:57 . 2015-06-22 02:00        235744        ----a-w-        c:\windows\SysWow64\EasyAntiCheat.exe

2015-06-17 17:47 . 2015-07-15 09:23        404992        ----a-w-        c:\windows\system32\gdi32.dll

2015-06-17 17:37 . 2015-07-15 09:23        312320        ----a-w-        c:\windows\SysWow64\gdi32.dll

2015-06-16 13:55 . 2015-06-16 13:55        259040        ----a-w-        c:\windows\system32\drivers\avgldx64.sys

2015-06-15 21:50 . 2015-07-15 09:21        112064        ----a-w-        c:\windows\system32\consent.exe

2015-06-15 21:45 . 2015-07-15 09:21        504320        ----a-w-        c:\windows\system32\msihnd.dll

2015-06-15 21:45 . 2015-07-15 09:21        3242496        ----a-w-        c:\windows\system32\msi.dll

2015-06-15 21:45 . 2015-07-15 09:21        70656        ----a-w-        c:\windows\system32\appinfo.dll

2015-06-15 21:45 . 2015-07-15 09:21        1941504        ----a-w-        c:\windows\system32\authui.dll

2015-06-15 21:44 . 2015-07-15 09:21        128000        ----a-w-        c:\windows\system32\msiexec.exe

2015-06-15 21:43 . 2015-07-15 09:21        337408        ----a-w-        c:\windows\SysWow64\msihnd.dll

2015-06-15 21:43 . 2015-07-15 09:21        2364416        ----a-w-        c:\windows\SysWow64\msi.dll

2015-06-15 21:43 . 2015-07-15 09:21        1805824        ----a-w-        c:\windows\SysWow64\authui.dll

2015-06-15 21:42 . 2015-07-15 09:21        73216        ----a-w-        c:\windows\SysWow64\msiexec.exe

2015-06-15 21:42 . 2015-07-15 09:21        25088        ----a-w-        c:\windows\system32\msimsg.dll

2015-06-15 21:37 . 2015-07-15 09:21        25088        ----a-w-        c:\windows\SysWow64\msimsg.dll

2015-06-11 17:56 . 2015-07-15 09:21        1112576        ----a-w-        c:\windows\system32\rdpcorets.dll

2015-06-11 17:16 . 2015-07-15 09:21        162816        ----a-w-        c:\windows\system32\rdpudd.dll

2015-06-11 17:15 . 2015-07-15 09:21        20992        ----a-w-        c:\windows\system32\drivers\rdpvideominiport.sys

2015-06-02 00:07 . 2015-07-15 09:23        254976        ----a-w-        c:\windows\system32\cewmdm.dll

2015-06-01 23:47 . 2015-07-15 09:23        210432        ----a-w-        c:\windows\SysWow64\cewmdm.dll

2015-05-25 18:19 . 2015-06-10 14:32        1255424        ----a-w-        c:\windows\system32\diagtrack.dll

2015-05-25 18:19 . 2015-06-10 14:32        879104        ----a-w-        c:\windows\system32\tdh.dll

2015-05-25 18:19 . 2015-06-10 14:32        113664        ----a-w-        c:\windows\system32\sechost.dll

2015-05-25 18:18 . 2015-06-10 14:32        879104        ----a-w-        c:\windows\system32\advapi32.dll

2015-05-25 18:18 . 2015-06-10 14:32        404992        ----a-w-        c:\windows\system32\tracerpt.exe

2015-05-25 18:18 . 2015-06-10 14:32        47104        ----a-w-        c:\windows\system32\typeperf.exe

2015-05-25 18:18 . 2015-06-10 14:32        43008        ----a-w-        c:\windows\system32\relog.exe

2015-05-25 18:18 . 2015-06-10 14:32        104448        ----a-w-        c:\windows\system32\logman.exe

2015-05-25 18:18 . 2015-06-10 14:32        19456        ----a-w-        c:\windows\system32\diskperf.exe

2015-05-25 18:01 . 2015-06-10 14:32        635392        ----a-w-        c:\windows\SysWow64\tdh.dll

2015-05-25 18:01 . 2015-06-10 14:32        92160        ----a-w-        c:\windows\SysWow64\sechost.dll

2015-05-25 18:01 . 2015-06-10 14:32        641536        ----a-w-        c:\windows\SysWow64\advapi32.dll

2015-05-25 18:00 . 2015-06-10 14:32        40448        ----a-w-        c:\windows\SysWow64\typeperf.exe

2015-05-25 18:00 . 2015-06-10 14:32        364544        ----a-w-        c:\windows\SysWow64\tracerpt.exe

2015-05-25 18:00 . 2015-06-10 14:32        37888        ----a-w-        c:\windows\SysWow64\relog.exe

2015-05-25 18:00 . 2015-06-10 14:32        82944        ----a-w-        c:\windows\SysWow64\logman.exe

2015-05-25 18:00 . 2015-06-10 14:32        17408        ----a-w-        c:\windows\SysWow64\diskperf.exe

2015-05-25 17:00 . 2015-06-10 14:32        36864        ----a-w-        c:\windows\system32\UtcResources.dll

2015-05-21 13:19 . 2015-06-10 14:32        193536        ----a-w-        c:\windows\system32\aepic.dll

2015-03-26 11:48 . 2015-03-26 11:48        2174976        ----a-w-        c:\program files (x86)\Common Files\atimpenc.dll

.

.

------- Sigcheck -------

Note: Unsigned files aren't necessarily malware.

.

[7] 2015-07-02 . 116F506573B59B85CD0DC18527E9951A . 19877376 . . [11.00.9600.17842] .. c:\windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17923_none_ffb9342e6bc07774\mshtml.dll

[7] 2015-06-25 . FA9DFDAF0D0BA0F2E5BF85C2AA557A6F . 19877376 . . [11.00.9600.17842] .. c:\windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17914_none_ffb81d1c6bc177be\mshtml.dll

[7] 2015-05-27 . 975421AC32F9F6E27A58F75DAB4B5871 . 19607040 . . [11.00.9600.17842] .. c:\windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17843_none_ffc604ae6bb68e31\mshtml.dll

[7] 2015-04-21 . D74445161E58644309F858342F5E265C . 19691008 . . [11.00.9600.17842] .. c:\windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17801_none_ffc231166bb9f593\mshtml.dll

[7] 2015-03-13 . 2F42037DD6F2831332653EB7F35D7E9A . 19695616 . . [11.00.9600.17842] .. c:\windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17728_none_ffce621e6bb0bfb7\mshtml.dll

[7] 2015-02-21 . 95CB6079B3E62D4301958023C2070A48 . 19720192 . . [11.00.9600.17842] .. c:\windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17691_none_ffe0d3886ba1a1c0\mshtml.dll

[7] 2015-01-18 . 220505B0B3E96C857DD01729AF0CD369 . 19749376 . . [11.00.9600.17842] .. c:\windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17501_none_ffe2a0da6ba1a1c0\mshtml.dll

[7] 2015-01-12 . 61C74D794C14E9FC94D93F5F0F72A3F9 . 19740160 . . [11.00.9600.17842] .. c:\windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17633_none_ffdaa43c6ba73cf8\mshtml.dll

[7] 2014-11-21 . C71C9127001A85A2D8841754CB8F040E . 6027264 . . [8.00.7601.22874] .. c:\windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.7601.22874_none_96c0b3dbfd7a1b34\mshtml.dll

[7] 2014-11-21 . 5EAF586E2065835E49FC3DE5C5241B0F . 6026240 . . [8.00.7601.18667] .. c:\windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.7601.18667_none_9644e5f4e451ae57\mshtml.dll

[7] 2014-11-20 . 852D96FE40C2E7CA149947216729A9E0 . 6026240 . . [8.00.7601.22867] .. c:\windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.7601.22867_none_96ce84a5fd6f4b48\mshtml.dll

[7] 2014-11-20 . 9AE03025A3002B1F89C046B122B1D4B8 . 6025728 . . [8.00.7601.18660] .. c:\windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.7601.18660_none_963de3eee457fcf6\mshtml.dll

[7] 2014-07-25 . 8453DDF167CE2986AA4AB04BC6824925 . 17524224 . . [11.00.9600.17842] .. c:\windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17239_none_00055b3c6b8766fa\mshtml.dll

[7] 2010-11-20 . C50799F0D47DFB9774F721521B6C41D5 . 5977600 . . [8.00.7601.17514] .. c:\windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.7601.17514_none_96780994e42bbfd5\mshtml.dll

[7] 2009-11-04 . 56F5053760581989A9BC7A47E916F661 . 5958656 . . [8.00.7600.16419] .. c:\windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.7600.16419_none_9496a84ee700db27\mshtml.dll

[7] 2009-11-04 . A89E3948B2EFC55F642FE1FE2CDA2D9E . 5958656 . . [8.00.7600.20521] .. c:\windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.7600.20521_none_950d72de002dcc2a\mshtml.dll

[7] 2009-07-14 . 43592D31AFF84DD957199248898D9430 . 5957632 . . [8.00.7600.16385] .. c:\windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.7600.16385_none_9446f5cce73d3c3b\mshtml.dll

[-] 1601-01-01 00:00 . !HASH: COULD NOT OPEN FILE !!!!! . 0 . . [------] .. c:\windows\SysWOW64\mshtml.dll

[-] 1601-01-01 00:00 . !HASH: COULD NOT OPEN FILE !!!!! . 0 . . [------] .. c:\windows\winsxs\wow64_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_11.2.9600.17959_none_ffbbac5c6bbe5d3f\mshtml.dll

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]

2015-07-23 13:51        2426256        ----a-w-        c:\program files (x86)\AVG Web TuneUp\4.1.5.143\AVG Web TuneUp.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]

2015-03-01 16:33        297128        ----a-w-        c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]

"Spotify"="c:\users\D4sherInc\AppData\Roaming\Spotify\Spotify.exe" [2015-08-11 7675448]

"Spotify Web Helper"="c:\users\D4sherInc\AppData\Roaming\Spotify\SpotifyWebHelper.exe" [2015-08-11 2018360]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"AVG_UI"="c:\program files (x86)\AVG\AVG2015\avgui.exe" [2015-07-31 3780520]

"RoccatKoneXTD"="c:\program files (x86)\ROCCAT\Kone XTD Mouse\KoneXTDMonitor.EXE" [2014-10-19 552960]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2014-12-17 508800]

"vProt"="c:\program files (x86)\AVG Web TuneUp\vprot.exe" [2015-07-23 3175312]

"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2015-08-03 5579624]

.

c:\users\D4sherInc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

Curse.lnk - c:\users\D4sherInc\AppData\Roaming\Curse Client\Bin\Curse.exe /startup [2015-1-22 7119752]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Roccat Talk.lnk - c:\program files (x86)\ROCCAT\Roccat Talk\Roccat Talk.exe [2014-10-31 2420736]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

R2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2015\avgidsagent.exe;c:\program files (x86)\AVG\AVG2015\avgidsagent.exe [x]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]

R2 MSICTL_CC;MSICTL_CC;c:\program files (x86)\MSI\Command Center\MSIControlService.exe;c:\program files (x86)\MSI\Command Center\MSIControlService.exe [x]

R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]

R3 BEService;BattlEye Service;c:\program files (x86)\Common Files\BattlEye\BEService.exe;c:\program files (x86)\Common Files\BattlEye\BEService.exe [x]

R3 EasyAntiCheat;EasyAntiCheat;c:\windows\system32\EasyAntiCheat.exe;c:\windows\SYSNATIVE\EasyAntiCheat.exe [x]

R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]

R3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface;c:\program files\Intel\iCLS Client\SocketHeciServer.exe;c:\program files\Intel\iCLS Client\SocketHeciServer.exe [x]

R3 intelsba;Intel(R) Small Business Advantage;c:\program files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe;c:\program files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [x]

R3 MSIBIOSData_CC;MSIBIOSData_CC;c:\program files (x86)\MSI\Command Center\BIOSData\MSIBIOSDataService.exe;c:\program files (x86)\MSI\Command Center\BIOSData\MSIBIOSDataService.exe [x]

R3 MSICDSetup;MSICDSetup;d:\cdriver64.sys;d:\CDriver64.sys [x]

R3 MSIClock_CC;MSIClock_CC;c:\program files (x86)\MSI\Command Center\ClockGen\MSIClockService.exe;c:\program files (x86)\MSI\Command Center\ClockGen\MSIClockService.exe [x]

R3 MSICOMM_CC;MSICOMM_CC;c:\program files (x86)\MSI\Command Center\MSICommService.exe;c:\program files (x86)\MSI\Command Center\MSICommService.exe [x]

R3 MSICPU_CC;MSICPU_CC;c:\program files (x86)\MSI\Command Center\CPU\MSICPUService.exe;c:\program files (x86)\MSI\Command Center\CPU\MSICPUService.exe [x]

R3 MSIDDR_CC;MSIDDR_CC;c:\program files (x86)\MSI\Command Center\DDR\MSIDDRService.exe;c:\program files (x86)\MSI\Command Center\DDR\MSIDDRService.exe [x]

R3 MSISMB_CC;MSISMB_CC;c:\program files (x86)\MSI\Command Center\SMBus\MSISMBService.exe;c:\program files (x86)\MSI\Command Center\SMBus\MSISMBService.exe [x]

R3 MSISuperIO_CC;MSISuperIO_CC;c:\program files (x86)\MSI\Command Center\SuperIO\MSISuperIOService.exe;c:\program files (x86)\MSI\Command Center\SuperIO\MSISuperIOService.exe [x]

R3 NTIOLib_1_0_4;NTIOLib_1_0_4;c:\program files (x86)\MSI\Live Update\NTIOLib_X64.sys;c:\program files (x86)\MSI\Live Update\NTIOLib_X64.sys [x]

R3 NTIOLib_1_0_C;NTIOLib_1_0_C;d:\ntiolib_x64.sys;d:\NTIOLib_X64.sys [x]

R3 NTIOLib_MSIClock_CC;NTIOLib_MSIClock_CC;c:\program files (x86)\MSI\Command Center\ClockGen\NTIOLib_X64.sys;c:\program files (x86)\MSI\Command Center\ClockGen\NTIOLib_X64.sys [x]

R3 NTIOLib_MSICOMM_CC;NTIOLib_MSICOMM_CC;c:\program files (x86)\MSI\Command Center\NTIOLib_X64.sys;c:\program files (x86)\MSI\Command Center\NTIOLib_X64.sys [x]

R3 NTIOLib_MSICPU_CC;NTIOLib_MSICPU_CC;c:\program files (x86)\MSI\Command Center\CPU\NTIOLib_X64.sys;c:\program files (x86)\MSI\Command Center\CPU\NTIOLib_X64.sys [x]

R3 NTIOLib_MSIDDR_CC;NTIOLib_MSIDDR_CC;c:\program files (x86)\MSI\Command Center\DDR\NTIOLib_X64.sys;c:\program files (x86)\MSI\Command Center\DDR\NTIOLib_X64.sys [x]

R3 NTIOLib_MSIRatio_CC;NTIOLib_MSIRatio_CC;c:\program files (x86)\MSI\Command Center\CPU\CPU_Ratio\NTIOLib_X64.sys;c:\program files (x86)\MSI\Command Center\CPU\CPU_Ratio\NTIOLib_X64.sys [x]

R3 NTIOLib_MSISMB_CC;NTIOLib_MSISMB_CC;c:\program files (x86)\MSI\Command Center\SMBus\NTIOLib_X64.sys;c:\program files (x86)\MSI\Command Center\SMBus\NTIOLib_X64.sys [x]

R3 NTIOLib_MSISuperIO_CC;NTIOLib_MSISuperIO_CC;c:\program files (x86)\MSI\Command Center\SuperIO\NTIOLib_X64.sys;c:\program files (x86)\MSI\Command Center\SuperIO\NTIOLib_X64.sys [x]

R3 OverwolfUpdater;Overwolf Updater Windows SCM;c:\program files (x86)\Overwolf\OverwolfUpdater.exe;c:\program files (x86)\Overwolf\OverwolfUpdater.exe [x]

R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]

R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]

R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]

R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]

S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsha.sys [x]

S0 Avgloga;AVG Logging Driver;c:\windows\system32\DRIVERS\avgloga.sys;c:\windows\SYSNATIVE\DRIVERS\avgloga.sys [x]

S0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgmfx64.sys [x]

S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgrkx64.sys [x]

S0 iusb3hcs;Intel(R) USB 3.0 Hostcontroller-Switchtreiber;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]

S1 Avgdiska;AVG Disk Driver;c:\windows\system32\DRIVERS\avgdiska.sys;c:\windows\SYSNATIVE\DRIVERS\avgdiska.sys [x]

S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsdrivera.sys [x]

S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgldx64.sys [x]

S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys;c:\windows\SYSNATIVE\DRIVERS\avgtdia.sys [x]

S1 ndisrd;WinpkFilter LightWeight Filter;c:\windows\system32\DRIVERS\ndisrd.sys;c:\windows\SYSNATIVE\DRIVERS\ndisrd.sys [x]

S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2015\avgwdsvc.exe;c:\program files (x86)\AVG\AVG2015\avgwdsvc.exe [x]

S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]

S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x]

S2 iocbios2;iocbios2;c:\program files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys;c:\program files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [x]

S2 ISCTAgent;Intel(R) Smart Connect Technology Agent;c:\program files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe ;c:\program files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe  [x]

S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]

S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [x]

S2 MSI_FastBoot;MSI_FastBoot;c:\program files (x86)\MSI\Fast Boot\FastBootService.exe;c:\program files (x86)\MSI\Fast Boot\FastBootService.exe [x]

S2 MSI_LiveUpdate_Service;MSI_LiveUpdate_Service;c:\program files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe;c:\program files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [x]

S2 MSI_SuperCharger;MSI_SuperCharger;c:\program files (x86)\MSI\Super Charger\ChargeService.exe;c:\program files (x86)\MSI\Super Charger\ChargeService.exe [x]

S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]

S2 SuperRAIDSvc;SuperRAIDSvc;c:\msi\Smart Utilities\SuperRAIDSvc.exe;c:\msi\Smart Utilities\SuperRAIDSvc.exe [x]

S2 vToolbarUpdater18.8.0;vToolbarUpdater18.8.0;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.8.0\ToolbarUpdater.exe;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.8.0\ToolbarUpdater.exe [x]

S2 WTabletServicePro;Wacom Professional Service;c:\program files\Tablet\Wacom\WTabletServicePro.exe;c:\program files\Tablet\Wacom\WTabletServicePro.exe [x]

S2 WtuSystemSupport;WtuSystemSupport;c:\program files (x86)\AVG Web TuneUp\WtuSystemSupport.exe;c:\program files (x86)\AVG Web TuneUp\WtuSystemSupport.exe [x]

S2 XTU3SERVICE;Intel(R) Extreme Tuning Utility Service;c:\program files (x86)\Intel\Extreme Tuning Utility\XtuService.exe;c:\program files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [x]

S3 AcpiCtlDrv;AcpiCtlDrv;c:\windows\system32\DRIVERS\AcpiCtlDrv.sys;c:\windows\SYSNATIVE\DRIVERS\AcpiCtlDrv.sys [x]

S3 hidkmdf;KMDF Driver;c:\windows\system32\DRIVERS\hidkmdf.sys;c:\windows\SYSNATIVE\DRIVERS\hidkmdf.sys [x]

S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [x]

S3 ICCWDT;Intel(R) Watchdog Timer Driver (Intel(R) WDT);c:\windows\system32\DRIVERS\ICCWDT.sys;c:\windows\SYSNATIVE\DRIVERS\ICCWDT.sys [x]

S3 ikbevent;Intel Upper keyboard Class Filter Driver;c:\windows\system32\DRIVERS\ikbevent.sys;c:\windows\SYSNATIVE\DRIVERS\ikbevent.sys [x]

S3 imsevent;Intel Upper Mouse Class Filter Driver;c:\windows\system32\DRIVERS\imsevent.sys;c:\windows\SYSNATIVE\DRIVERS\imsevent.sys [x]

S3 INETMON;INETMON;c:\windows\System32\Drivers\INETMON.sys;c:\windows\SYSNATIVE\Drivers\INETMON.sys [x]

S3 ISCT;Intel(R) Smart Connect Technology Device Driver;c:\windows\system32\DRIVERS\ISCTD.sys;c:\windows\SYSNATIVE\DRIVERS\ISCTD.sys [x]

S3 iusb3hub;Intel(R) USB 3.0-Hubtreiber;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]

S3 iusb3xhc;Intel(R) USB 3.0 eXtensible-Hostcontrollertreiber;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]

S3 MBfilt;MBfilt;c:\windows\system32\drivers\MBfilt64.sys;c:\windows\SYSNATIVE\drivers\MBfilt64.sys [x]

S3 NTIOLib_1_0_3;NTIOLib_1_0_3;c:\program files (x86)\MSI\Super Charger\NTIOLib_X64.sys;c:\program files (x86)\MSI\Super Charger\NTIOLib_X64.sys [x]

S3 NTIOLib_MSI_RAID;NTIOLib_MSI_RAID;c:\msi\Smart Utilities\NTIOLib_X64.sys;c:\msi\Smart Utilities\NTIOLib_X64.sys [x]

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]

S3 UHSfiltv;UHSfiltv;c:\windows\system32\drivers\UHSfiltv.sys;c:\windows\SYSNATIVE\drivers\UHSfiltv.sys [x]

S3 WacHidRouter;Wacom Hid Router;c:\windows\system32\DRIVERS\wachidrouter.sys;c:\windows\SYSNATIVE\DRIVERS\wachidrouter.sys [x]

S3 wacomrouterfilter;Wacom Router Filter Driver;c:\windows\system32\DRIVERS\wacomrouterfilter.sys;c:\windows\SYSNATIVE\DRIVERS\wacomrouterfilter.sys [x]

.

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]

2015-08-12 00:12        995144        ----a-w-        c:\program files (x86)\Google\Chrome\Application\44.0.2403.155\Installer\chrmstp.exe

.

Inhalt des "geplante Tasks" Ordners

.

2015-08-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2015-01-15 21:42]

.

2015-08-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2015-01-15 21:42]

.

2015-08-15 c:\windows\Tasks\RtlNetworkGenieVistaStart.job

- c:\program files (x86)\MSI\NetworkGenie\NetworkGenie.exe [2015-01-15 14:45]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]

2015-03-01 15:10        357376        ----a-w-        c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll

.

------- Zusätzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = https://mysearch.avg.com/?cid={1FC37DD4-FB7C-4FA0-A419-D019249F6353}&mid=9ad3bceb931f47cd886f95c31d30750c-0feb8c7ac14c1b2cd72bacde056afd16e2299c89&lang=de&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2015-01-16 08:25&v=4.1.4.948&pid=wtu&sg=&sap=hp

mLocal Page = c:\windows\SysWOW64\blank.htm

IE: Free YouTube Download - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm

IE: {{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll

Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.2.0\ViProtocol.dll

FF - ProfilePath - c:\users\D4sherInc\AppData\Roaming\Mozilla\Firefox\Profiles\yfhhsv33.default\

FF - prefs.js: browser.startup.homepage - hxxps://mysearch.avg.com/?cid={1FC37DD4-FB7C-4FA0-A419-D019249F6353}&mid=9ad3bceb931f47cd886f95c31d30750c-0feb8c7ac14c1b2cd72bacde056afd16e2299c89&lang=de&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2015-01-16 08:25&v=4.1.4.948&pid=wtu&sg=&sap=hp

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

Wow6432Node-HKCU-Run-SkinsSpotlightsReplay - e:\lol aufnahme\SkinSpotlightsReplays.RELEASE.exe

Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe

AddRemove-553E35CD-0415-41bc-B39A-410375E88534 - c:\program files (x86)\Intel\ACPI Driver Installer\Uninstall\setup.exe

AddRemove-BattlEye for A2 - e:\steamlibrary\steamapps\common\Arma 2BattlEye\UnInstallBE.exe

.

.

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Zeit der Fertigstellung: 2015-08-15  14:03:01

ComboFix-quarantined-files.txt  2015-08-15 12:03

.

Vor Suchlauf: 12 Verzeichnis(se), 53.096.759.296 Bytes frei

Nach Suchlauf: 23 Verzeichnis(se), 55.747.002.368 Bytes frei

.

- - End Of File - - 79A6E6BA8D1F40834FD1F8D692EBC591

A36C5E4F47E84449FF07ED3517B43A31

Un hier vom Bluescreenview (ich habe die angezeigten .dmp-dateien als .txt abgespeichert, ich weiß jedoch nicht ob das in dieser Form richtig ist.)

Code:

==================================================

Dump File         : 081515-8970-01.dmp

Crash Time        : 15.08.2015 14:08:42

Bug Check String  : DRIVER_IRQL_NOT_LESS_OR_EQUAL

Bug Check Code    : 0x000000d1

Parameter 1       : 00000000`00000000

Parameter 2       : 00000000`00000002

Parameter 3       : 00000000`00000008

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081515-8970-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.336

Dump File Time    : 15.08.2015 14:09:35

==================================================
 

==================================================

Dump File         : 081515-11029-01.dmp

Crash Time        : 15.08.2015 11:24:41

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a25270

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081515-11029-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.488

Dump File Time    : 15.08.2015 11:25:17

==================================================
 

==================================================

Dump File         : 081415-15896-01.dmp

Crash Time        : 14.08.2015 23:36:46

Bug Check String  : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code    : 0x00000050

Parameter 1       : fffff8a0`052dbb9c

Parameter 2       : 00000000`00000000

Parameter 3       : fffff800`0335b89e

Parameter 4       : 00000000`00000002

Caused By Driver  : msahci.sys

Caused By Address : msahci.sys+4739

File Description  : 

Product Name      : 

Company           : 

File Version      : 

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081415-15896-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.208

Dump File Time    : 14.08.2015 23:37:40

==================================================
 

==================================================

Dump File         : 081415-7753-01.dmp

Crash Time        : 14.08.2015 23:35:02

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00000030

Parameter 2       : fffffa80`099567a0

Parameter 3       : fffff880`048aa000

Parameter 4       : fffff8a0`04217310

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081415-7753-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.536

Dump File Time    : 14.08.2015 23:35:45

==================================================
 

==================================================

Dump File         : 081415-8065-01.dmp

Crash Time        : 14.08.2015 23:34:17

Bug Check String  : PFN_LIST_CORRUPT

Bug Check Code    : 0x0000004e

Parameter 1       : 00000000`00000099

Parameter 2       : 00000000`0012e153

Parameter 3       : 00000000`00000000

Parameter 4       : 00000000`00061853

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081415-8065-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.624

Dump File Time    : 14.08.2015 23:34:54

==================================================
 

==================================================

Dump File         : 081415-8408-01.dmp

Crash Time        : 14.08.2015 14:53:15

Bug Check String  : SYSTEM_SERVICE_EXCEPTION

Bug Check Code    : 0x0000003b

Parameter 1       : 00000000`c0000005

Parameter 2       : fffff880`0121e7c5

Parameter 3       : fffff880`09265c80

Parameter 4       : 00000000`00000000

Caused By Driver  : Ntfs.sys

Caused By Address : Ntfs.sys+107c5

File Description  : 

Product Name      : 

Company           : 

File Version      : 

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081415-8408-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.472

Dump File Time    : 14.08.2015 14:54:43

==================================================
 

==================================================

Dump File         : 081415-11232-01.dmp

Crash Time        : 14.08.2015 02:48:45

Bug Check String  : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code    : 0x00000050

Parameter 1       : fffff8a0`04e77134

Parameter 2       : 00000000`00000000

Parameter 3       : fffff800`0333f89e

Parameter 4       : 00000000`00000002

Caused By Driver  : msahci.sys

Caused By Address : msahci.sys+4739

File Description  : 

Product Name      : 

Company           : 

File Version      : 

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081415-11232-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.312

Dump File Time    : 14.08.2015 02:49:23

==================================================
 

==================================================

Dump File         : 081415-10717-01.dmp

Crash Time        : 14.08.2015 02:25:50

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a252d0

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : Ntfs.sys

Caused By Address : Ntfs.sys+a3b80

File Description  : 

Product Name      : 

Company           : 

File Version      : 

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081415-10717-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.496

Dump File Time    : 14.08.2015 02:26:32

==================================================
 

==================================================

Dump File         : 081415-7971-01.dmp

Crash Time        : 14.08.2015 01:50:15

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00000031

Parameter 2       : fffffa80`094e20b0

Parameter 3       : fffff880`00b0a000

Parameter 4       : fffff8a0`03916fb4

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081415-7971-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.120

Dump File Time    : 14.08.2015 01:50:49

==================================================
 

==================================================

Dump File         : 081315-11294-01.dmp

Crash Time        : 13.08.2015 20:42:52

Bug Check String  : IRQL_NOT_LESS_OR_EQUAL

Bug Check Code    : 0x0000000a

Parameter 1       : fffff700`01180580

Parameter 2       : 00000000`00000000

Parameter 3       : 00000000`00000000

Parameter 4       : fffff800`030dafba

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081315-11294-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 292.968

Dump File Time    : 13.08.2015 20:44:42

==================================================
 

==================================================

Dump File         : 081315-7878-01.dmp

Crash Time        : 13.08.2015 14:11:25

Bug Check String  : BAD_POOL_CALLER

Bug Check Code    : 0x000000c2

Parameter 1       : 00000000`00000007

Parameter 2       : 00000000`0000109b

Parameter 3       : 00000000`00000000

Parameter 4       : fffff8a0`04281b50

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081315-7878-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.024

Dump File Time    : 13.08.2015 14:18:25

==================================================
 

==================================================

Dump File         : 081315-8096-01.dmp

Crash Time        : 13.08.2015 14:08:22

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a252d0

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081315-8096-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.440

Dump File Time    : 13.08.2015 14:11:20

==================================================
 

==================================================

Dump File         : 081315-7394-01.dmp

Crash Time        : 13.08.2015 02:06:40

Bug Check String  : SYSTEM_SERVICE_EXCEPTION

Bug Check Code    : 0x0000003b

Parameter 1       : 00000000`c0000005

Parameter 2       : fffff800`0334189e

Parameter 3       : fffff880`08ac15d0

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081315-7394-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.152

Dump File Time    : 13.08.2015 02:07:44

==================================================
 

==================================================

Dump File         : 081315-7753-01.dmp

Crash Time        : 13.08.2015 02:05:41

Bug Check String  : IRQL_NOT_LESS_OR_EQUAL

Bug Check Code    : 0x0000000a

Parameter 1       : 00000000`00800040

Parameter 2       : 00000000`00000002

Parameter 3       : 00000000`00000001

Parameter 4       : fffff800`03084fbc

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081315-7753-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.496

Dump File Time    : 13.08.2015 02:06:37

==================================================
 

==================================================

Dump File         : 081215-9126-01.dmp

Crash Time        : 12.08.2015 22:24:53

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a25240

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081215-9126-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 292.920

Dump File Time    : 12.08.2015 22:25:50

==================================================
 

==================================================

Dump File         : 081215-8845-01.dmp

Crash Time        : 12.08.2015 03:25:03

Bug Check String  : BAD_POOL_HEADER

Bug Check Code    : 0x00000019

Parameter 1       : 00000000`00000003

Parameter 2       : fffffa80`06637020

Parameter 3       : fffffa80`06637020

Parameter 4       : fffffa80`06eb7020

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081215-8845-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.448

Dump File Time    : 12.08.2015 03:29:17

==================================================
 

==================================================

Dump File         : 081115-6770-01.dmp

Crash Time        : 11.08.2015 20:12:59

Bug Check String  : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code    : 0x00000050

Parameter 1       : fffff8a0`03cfd948

Parameter 2       : 00000000`00000000

Parameter 3       : fffff800`0347b47f

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+748c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081115-6770-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.440

Dump File Time    : 11.08.2015 20:13:25

==================================================
 

==================================================

Dump File         : 081115-6988-01.dmp

Crash Time        : 11.08.2015 19:51:30

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041201

Parameter 2       : fffff680`0000c010

Parameter 3       : a8000000`95413867

Parameter 4       : fffffa80`09a80450

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+748c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081115-6988-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.512

Dump File Time    : 11.08.2015 19:51:56

==================================================
 

==================================================

Dump File         : 081115-7612-01.dmp

Crash Time        : 11.08.2015 18:14:50

Bug Check String  : SYSTEM_THREAD_EXCEPTION_NOT_HANDLED

Bug Check Code    : 0x1000007e

Parameter 1       : ffffffff`c0000005

Parameter 2       : fffff800`031c0aab

Parameter 3       : fffff880`031cb768

Parameter 4       : fffff880`031cafc0

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+1acaab

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+1acaab

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081115-7612-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.016

Dump File Time    : 11.08.2015 18:15:14

==================================================
 

==================================================

Dump File         : 081115-8174-01.dmp

Crash Time        : 11.08.2015 18:14:17

Bug Check String  : DRIVER_OVERRAN_STACK_BUFFER

Bug Check Code    : 0x000000f7

Parameter 1       : 00000200`00c8ed10

Parameter 2       : 0000f880`01056147

Parameter 3       : ffff077f`fefa9eb8

Parameter 4       : 00000000`00000000

Caused By Driver  : fltmgr.sys

Caused By Address : fltmgr.sys+93d6

File Description  : 

Product Name      : 

Company           : 

File Version      : 

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081115-8174-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.160

Dump File Time    : 11.08.2015 18:14:44

==================================================
 

==================================================

Dump File         : 080515-7035-01.dmp

Crash Time        : 05.08.2015 02:11:35

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a25270

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : Ntfs.sys

Caused By Address : Ntfs.sys+a3b80

File Description  : 

Product Name      : 

Company           : 

File Version      : 

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\080515-7035-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.464

Dump File Time    : 05.08.2015 02:12:03

==================================================
 

==================================================

Dump File         : 080415-6864-01.dmp

Crash Time        : 04.08.2015 22:55:39

Bug Check String  : PFN_LIST_CORRUPT

Bug Check Code    : 0x0000004e

Parameter 1       : 00000000`00000099

Parameter 2       : 00000000`000762a9

Parameter 3       : 00000000`00000002

Parameter 4       : 00000000`0006bfa8

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+748c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\080415-6864-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.448

Dump File Time    : 04.08.2015 22:56:08

==================================================
 

==================================================

Dump File         : 080415-7113-01.dmp

Crash Time        : 04.08.2015 22:19:58

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a25270

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : Ntfs.sys

Caused By Address : Ntfs.sys+a3b80

File Description  : 

Product Name      : 

Company           : 

File Version      : 

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\080415-7113-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.480

Dump File Time    : 04.08.2015 22:20:26

==================================================
 

==================================================

Dump File         : 080415-6910-01.dmp

Crash Time        : 04.08.2015 21:01:20

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041201

Parameter 2       : fffff680`0000c0e0

Parameter 3       : f6500000`3962c867

Parameter 4       : fffffa80`0a068a30

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+748c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\080415-6910-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.456

Dump File Time    : 04.08.2015 21:01:48

==================================================
 

==================================================

Dump File         : 080415-8392-01.dmp

Crash Time        : 04.08.2015 15:27:21

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a25270

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+748c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\080415-8392-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.504

Dump File Time    : 04.08.2015 15:28:11

==================================================
 

==================================================

Dump File         : 080415-12370-01.dmp

Crash Time        : 04.08.2015 07:39:58

Bug Check String  : SYSTEM_SERVICE_EXCEPTION

Bug Check Code    : 0x0000003b

Parameter 1       : 00000000`c0000005

Parameter 2       : fffff800`033989c9

Parameter 3       : fffff880`08325840

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+748c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\080415-12370-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.368

Dump File Time    : 04.08.2015 07:40:29

==================================================
 

==================================================

Dump File         : 080415-12823-01.dmp

Crash Time        : 04.08.2015 07:39:20

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a25270

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+748c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\080415-12823-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.480

Dump File Time    : 04.08.2015 07:39:52

==================================================
 

==================================================

Dump File         : 080415-5304-01.dmp

Crash Time        : 04.08.2015 07:16:10

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a252a0

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+748c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\080415-5304-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.416

Dump File Time    : 04.08.2015 07:16:34

==================================================
 

==================================================

Dump File         : 080415-4633-01.dmp

Crash Time        : 04.08.2015 07:15:41

Bug Check String  : SYSTEM_SERVICE_EXCEPTION

Bug Check Code    : 0x0000003b

Parameter 1       : 00000000`c0000005

Parameter 2       : fffff800`0331882f

Parameter 3       : fffff880`07d90e90

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+748c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\080415-4633-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.072

Dump File Time    : 04.08.2015 07:16:03

==================================================
 

==================================================

Dump File         : 080415-5444-01.dmp

Crash Time        : 04.08.2015 07:12:55

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a25240

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+748c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\080415-5444-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.056

Dump File Time    : 04.08.2015 07:13:46

==================================================
 

==================================================

Dump File         : 080415-4773-01.dmp

Crash Time        : 04.08.2015 07:11:58

Bug Check String  : BAD_POOL_HEADER

Bug Check Code    : 0x00000019

Parameter 1       : 00000000`00000003

Parameter 2       : fffffa80`06634be0

Parameter 3       : fffffa80`06e34be0

Parameter 4       : fffffa80`06e34be0

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+748c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\080415-4773-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.352

Dump File Time    : 04.08.2015 07:12:48

==================================================
 

==================================================

Dump File         : 080315-6536-01.dmp

Crash Time        : 03.08.2015 14:05:32

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a25270

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+748c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\080315-6536-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.280

Dump File Time    : 03.08.2015 14:06:01

==================================================

Mit freundlichen Grüßen

D4sherInc

PS: es erschien die Fehlermeldung bei Combofix, auch nachdem ich AVG bei mir deaktiviert habe

RAM testen mit Memtest86+

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Hier sind die gewünschten Dateien:

mbam.txt:

Code:

Malwarebytes Anti-Malware

www.malwarebytes.org
 

Suchlaufdatum: 17.08.2015

Suchlaufzeit: 01:19

Protokolldatei: mbamlog.txt

Administrator: Ja
 

Version: 2.1.8.1057

Malware-Datenbank: v2015.08.16.03

Rootkit-Datenbank: v2015.08.16.01

Lizenz: Testversion

Malware-Schutz: Aktiviert

Schutz vor bösartigen Websites: Aktiviert

Selbstschutz: Deaktiviert
 

Betriebssystem: Windows 7 Service Pack 1

CPU: x64

Dateisystem: NTFS

Benutzer: D4sherInc
 

Suchlauftyp: Bedrohungssuchlauf

Ergebnis: Abgeschlossen

Durchsuchte Objekte: 370657

Abgelaufene Zeit: 3 Min., 37 Sek.
 

Speicher: Aktiviert

Start: Aktiviert

Dateisystem: Aktiviert

Archive: Aktiviert

Rootkits: Deaktiviert

Heuristik: Aktiviert

PUP: Aktiviert

PUM: Aktiviert
 

Prozesse: 0

(keine bösartigen Elemente erkannt)
 

Module: 0

(keine bösartigen Elemente erkannt)
 

Registrierungsschlüssel: 1

PUP.Optional.APNToolBar.Gen, HKU\S-1-5-18\SOFTWARE\AskPartnerNetwork, , [f88b30d9028958de08fb48d558ab7c84], 
 

Registrierungswerte: 0

(keine bösartigen Elemente erkannt)
 

Registrierungsdaten: 0

(keine bösartigen Elemente erkannt)
 

Ordner: 0

(keine bösartigen Elemente erkannt)
 

Dateien: 0

(keine bösartigen Elemente erkannt)
 

Physische Sektoren: 0

(keine bösartigen Elemente erkannt)
 
 

(end)

AdwCleaner[C1].txt: AdwCleaner Logfile:

Code:

# AdwCleaner v5.000 - Logfile created 16/08/2015 at 14:01:25

# Updated 14/08/2015 by Xplode

# Database : 2015-08-16.1 [Server]

# Operating system : Windows 7 Ultimate Service Pack 1 (x64)

# Username : D4sherInc - D4SHERINC-PC

# Running from : E:\Downloads\AdwCleaner_5.000.exe

# Option : Cleaning
 

***** [ Services ] *****
 

[-] Service Deleted : vToolbarUpdater18.8.0
 

***** [ Folders ] *****
 

[-] Folder Deleted : C:\Program Files (x86)\Common Files\AVG Secure Search

[-] Folder Deleted : C:\ProgramData\apn

[-] Folder Deleted : C:\ProgramData\AVG Secure Search

[-] Folder Deleted : C:\ProgramData\AVG Security Toolbar

[-] Folder Deleted : C:\ProgramData\Avg_Update_0215tb

[-] Folder Deleted : C:\Users\D4sherInc\AppData\Local\pdfforge

[-] Folder Deleted : C:\Users\D4sherInc\AppData\Roaming\Mozilla\Firefox\Profiles\yfhhsv33.default\Extensions\Avg@toolbar
 

***** [ Files ] *****
 

[-] File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\wtu-secure-search.xml

[-] File Deleted : C:\Users\D4sherInc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage

[-] File Deleted : C:\Users\D4sherInc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal

[-] File Deleted : C:\Users\D4sherInc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.veoh.com_0.localstorage

[-] File Deleted : C:\Users\D4sherInc\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.veoh.com_0.localstorage-journal

[-] File Deleted : C:\Users\D4sherInc\AppData\Roaming\Mozilla\Firefox\Profiles\yfhhsv33.default\searchplugins\avg-secure-search.xml
 

***** [ Shortcuts ] *****
 
 

***** [ Scheduled tasks ] *****
 
 

***** [ Registry ] *****
 

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL

[-] Key Deleted : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol

[-] Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi

[-] Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE

[-] Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1

[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}

[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}

[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}

[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

[-] Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}

[-] Key Deleted : HKU\.DEFAULT\Software\Avg Secure Update

[-] Key Deleted : HKCU\Software\OCS

[-] Key Deleted : HKCU\Software\Avg Secure Update

[!] Key Not Deleted : [x64] HKCU\Software\OCS

[!] Key Not Deleted : [x64] HKCU\Software\Avg Secure Update
 

***** [ Web browsers ] *****
 
 

*************************
 

:: Proxy settings cleared

:: Winsock settings cleared

:: Internet Explorer policies deleted

!! Unable to delete Chrome policies
 

*************************
 

C:\AdwCleaner[C1].txt - [5050 octets] - [16/08/2015 14:01:25]

C:\AdwCleaner[S1].txt - [4749 octets] - [16/08/2015 13:59:18]

C:\AdwCleaner[S2].txt - [4812 octets] - [16/08/2015 14:00:20]
 

########## EOF - C:\AdwCleaner[C1].txt - [5239 octets] ##########

--- --- ---
AdwCleaner Logfile:

Code:

# AdwCleaner v5.000 - Logfile created 17/08/2015 at 02:10:19

# Updated 14/08/2015 by Xplode

# Database : 2015-08-16.2 [Server]

# Operating system : Windows 7 Ultimate Service Pack 1 (x64)

# Username : D4sherInc - D4SHERINC-PC

# Running from : E:\Downloads\AdwCleaner_5.000 (1).exe

# Option : Cleaning
 

***** [ Services ] *****
 

[-] Service Deleted : vToolbarUpdater18.8.0
 

***** [ Folders ] *****
 

[-] Folder Deleted : C:\Program Files (x86)\Common Files\AVG Secure Search

[-] Folder Deleted : C:\ProgramData\AVG Secure Search

[-] Folder Deleted : C:\ProgramData\Avg_Update_0215tb

[-] Folder Deleted : C:\Users\D4sherInc\AppData\Local\pdfforge

[-] Folder Deleted : C:\Users\D4sherInc\AppData\Roaming\Mozilla\Firefox\Profiles\yfhhsv33.default\Extensions\Avg@toolbar
 

***** [ Files ] *****
 
 

***** [ Shortcuts ] *****
 
 

***** [ Scheduled tasks ] *****
 
 

***** [ Registry ] *****
 

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL

[-] Key Deleted : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol

[-] Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi

[-] Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE

[-] Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1

[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}

[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}

[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}

[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

[-] Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}

[-] Key Deleted : HKU\.DEFAULT\Software\Avg Secure Update

[-] Key Deleted : HKCU\Software\OCS

[-] Key Deleted : HKCU\Software\Avg Secure Update

[!] Key Not Deleted : [x64] HKCU\Software\OCS

[!] Key Not Deleted : [x64] HKCU\Software\Avg Secure Update
 

***** [ Web browsers ] *****
 

[-] [C:\Users\D4sherInc\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : hamachi.de.softonic.com
 

*************************
 

:: Proxy settings cleared

:: Winsock settings cleared

:: Internet Explorer policies deleted

!! Unable to delete Chrome policies
 

*************************
 

C:\AdwCleaner[C1].txt - [9646 octets] - [16/08/2015 14:01:25]

C:\AdwCleaner[S1].txt - [8918 octets] - [16/08/2015 13:59:18]

C:\AdwCleaner[S2].txt - [4812 octets] - [16/08/2015 14:00:20]
 

########## EOF - C:\AdwCleaner[C1].txt - [9835 octets] ##########

--- --- ---

JRT.txt:

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Malwarebytes

Version: 7.5.6 (08.10.2015:1)

OS: Windows 7 Ultimate x64

Ran by D4sherInc on 17.08.2015 at  2:14:18,15

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Tasks
 
 
 

~~~ Registry Values
 

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Start Page

Successfully repaired: [Registry Value] HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page

Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main\\Start Page

Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Start Page

Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Start Page

Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-21-4293377608-3333764666-2683399837-1000\Software\Microsoft\Internet Explorer\Main\\Start Page
 
 
 

~~~ Registry Keys
 

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer
 
 
 

~~~ Files
 

Successfully deleted: [File] C:\Users\D4sherInc\Appdata\Local\google\chrome\user data\default\local storage\hxxp_lyrics.wikia.com_0.localstorage

Successfully deleted: [File] C:\Users\D4sherInc\Appdata\Local\google\chrome\user data\default\local storage\hxxp_lyrics.wikia.com_0.localstorage-journal
 
 
 

~~~ Folders
 
 
 

~~~ FireFox
 

Successfully deleted the following from C:\Users\D4sherInc\AppData\Roaming\mozilla\firefox\profiles\yfhhsv33.default\prefs.js
 

user_pref(browser.startup.homepage, hxxps://mysearch.avg.com/?cid={1FC37DD4-FB7C-4FA0-A419-D019249F6353}&mid=9ad3bceb931f47cd886f95c31d30750c-0feb8c7ac14c1b2cd72bacde056afd
 
 
 

~~~ Chrome
 
 

[C:\Users\D4sherInc\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset
 

[C:\Users\D4sherInc\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:
 

[C:\Users\D4sherInc\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset
 

[C:\Users\D4sherInc\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:

[]
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 17.08.2015 at  2:15:45,67

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST.txt:

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:16-08-2015

durchgeführt von D4sherInc (Administrator) auf D4SHERINC-PC (17-08-2015 02:16:16)

Gestartet von C:\Users\D4sherInc\Desktop

Geladene Profile: D4sherInc (Verfügbare Profile: D4sherInc)

Platform: Windows 7 Ultimate Service Pack 1 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: Chrome)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Microsoft Corporation) C:\Windows\System32\wisptis.exe

(Microsoft Corporation) C:\Windows\System32\wisptis.exe

() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM-x32\...\Run: [RoccatKoneXTD] => C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\KoneXTDMonitor.EXE [552960 2014-10-19] (ROCCAT GmbH)

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5579624 2015-08-03] (LogMeIn Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)

HKU\S-1-5-21-4293377608-3333764666-2683399837-1000\...\Run: [Spotify Web Helper] => C:\Users\D4sherInc\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2018360 2015-08-11] (Spotify Ltd)

HKU\S-1-5-21-4293377608-3333764666-2683399837-1000\...\Run: [Spotify] => C:\Users\D4sherInc\AppData\Roaming\Spotify\Spotify.exe [7675448 2015-08-11] (Spotify Ltd)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Roccat Talk.lnk [2015-01-28]

ShortcutTarget: Roccat Talk.lnk -> C:\Program Files (x86)\ROCCAT\Roccat Talk\Roccat Talk.exe (ROCCAT GmbH Co., Ltd.)

Startup: C:\Users\D4sherInc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Curse.lnk [2015-02-20]

ShortcutTarget: Curse.lnk -> C:\Users\D4sherInc\AppData\Roaming\Curse Client\Bin\Curse.exe (Curse, Inc)
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)
 

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\S-1-5-21-4293377608-3333764666-2683399837-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll [2015-08-16] (Oracle Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-08-16] (Oracle Corporation)

DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab

DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{42F055A5-083D-4A4A-AB58-B67DA785EC67}: [DhcpNameServer] 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\D4sherInc\AppData\Roaming\Mozilla\Firefox\Profiles\yfhhsv33.default

FF Plugin: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-08-16] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-08-16] (Oracle Corporation)

FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)

FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-04-03] (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-04-03] (Intel Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-09-13] (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-09-13] (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)

FF Plugin-x32: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
 

Chrome: 

=======

CHR Profile: C:\Users\D4sherInc\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Adblock Plus) - C:\Users\D4sherInc\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-05-11]

CHR Extension: (Hatsune Miku) - C:\Users\D4sherInc\AppData\Local\Google\Chrome\User Data\Default\Extensions\kigfdicgjnpjkhbnngdfgjfffmdaonfg [2015-01-16]

CHR Extension: (Chrome Hotword Shared Module) - C:\Users\D4sherInc\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-12]

CHR Extension: (Chrome Web Store Payments) - C:\Users\D4sherInc\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-16]
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1115136 2015-07-05] ()

S2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [423424 2011-10-19] (Creative Technology Ltd) [Datei ist nicht signiert]

S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [235744 2015-06-22] (EasyAntiCheat Ltd)

S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [Datei ist nicht signiert]

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel(R) Corporation)

S3 intelsba; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [54976 2014-03-27] (Intel Corporation)

R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [209712 2014-04-24] ()

S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-04-03] (Intel Corporation)

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-08-03] (LogMeIn, Inc.)

S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)

S3 MSIBIOSData_CC; C:\Program Files (x86)\MSI\Command Center\BIOSData\MSIBIOSDataService.exe [2100736 2014-06-04] (MSI) [Datei ist nicht signiert]

S3 MSIClock_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\MSIClockService.exe [4023296 2014-06-03] (MSI) [Datei ist nicht signiert]

S3 MSICOMM_CC; C:\Program Files (x86)\MSI\Command Center\MSICommService.exe [2118144 2014-06-03] () [Datei ist nicht signiert]

S3 MSICPU_CC; C:\Program Files (x86)\MSI\Command Center\CPU\MSICPUService.exe [4157440 2014-06-04] () [Datei ist nicht signiert]

S2 MSICTL_CC; C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe [1990144 2014-06-03] () [Datei ist nicht signiert]

S3 MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\MSIDDRService.exe [2250240 2014-06-06] () [Datei ist nicht signiert]

S3 MSISMB_CC; C:\Program Files (x86)\MSI\Command Center\SMBus\MSISMBService.exe [2063360 2014-06-04] () [Datei ist nicht signiert]

S3 MSISuperIO_CC; C:\Program Files (x86)\MSI\Command Center\SuperIO\MSISuperIOService.exe [544256 2014-06-06] () [Datei ist nicht signiert]

S2 MSI_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe [103992 2012-10-26] (MSI)

S2 MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [83952 2014-03-27] (Micro-Star International)

S2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [162800 2014-03-17] (MSI)

S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [995568 2015-08-09] (Overwolf LTD)

S2 SuperRAIDSvc; C:\MSI\Smart Utilities\SuperRAIDSvc.exe [27632 2014-04-30] (Micro-Star International)

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

S2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [655040 2015-07-08] (Wacom Technology, Corp.)

S2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [18384 2014-03-14] (Intel(R) Corporation)

S2 WtuSystemSupport; C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe [X]
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R3 AcpiCtlDrv; C:\Windows\System32\DRIVERS\AcpiCtlDrv.sys [25880 2012-07-17] (Intel Corporation)

R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [22216 2014-02-03] ()

R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [22728 2014-02-03] ()

R3 INETMON; C:\Windows\System32\Drivers\INETMON.sys [25800 2014-04-03] ()

R2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [28912 2014-02-18] (Intel Corporation)

R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD.sys [44744 2014-02-03] ()

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-08-17] (Malwarebytes Corporation)

S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)

R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [118272 2014-04-03] (Intel Corporation)

R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\Super Charger\NTIOLib_X64.sys [13368 2012-10-25] (MSI)

S3 NTIOLib_1_0_4; C:\Program Files (x86)\MSI\Live Update\NTIOLib_X64.sys [14136 2010-10-22] (MSI)

R3 NTIOLib_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\NTIOLib_X64.sys [13368 2012-10-26] (MSI)

S3 NTIOLib_MSIClock_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\NTIOLib_X64.sys [13368 2012-11-20] (MSI)

S3 NTIOLib_MSICOMM_CC; C:\Program Files (x86)\MSI\Command Center\NTIOLib_X64.sys [13368 2012-11-19] (MSI)

S3 NTIOLib_MSICPU_CC; C:\Program Files (x86)\MSI\Command Center\CPU\NTIOLib_X64.sys [13368 2012-11-20] (MSI)

S3 NTIOLib_MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\NTIOLib_X64.sys [13368 2012-11-26] (MSI)

S3 NTIOLib_MSIRatio_CC; C:\Program Files (x86)\MSI\Command Center\CPU\CPU_Ratio\NTIOLib_X64.sys [13368 2012-11-20] (MSI)

S3 NTIOLib_MSISMB_CC; C:\Program Files (x86)\MSI\Command Center\SMBus\NTIOLib_X64.sys [13368 2012-11-19] (MSI)

S3 NTIOLib_MSISuperIO_CC; C:\Program Files (x86)\MSI\Command Center\SuperIO\NTIOLib_X64.sys [13368 2012-11-19] (MSI)

R3 NTIOLib_MSI_RAID; C:\MSI\Smart Utilities\NTIOLib_X64.sys [13808 2014-03-17] (MSI)

R3 UHSfiltv; C:\Windows\System32\drivers\UHSfiltv.sys [23552 2014-12-22] (Creative Technology Ltd.)

S3 MSICDSetup; \??\D:\CDriver64.sys [X]

S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]

S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]

S3 tsusbhub; system32\drivers\tsusbhub.sys [X]

S3 VGPU; System32\drivers\rdvgkmd.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-08-17 02:16 - 2015-08-17 02:16 - 00013753 _____ C:\Users\D4sherInc\Desktop\FRST.txt

2015-08-17 02:16 - 2015-08-17 02:16 - 00000000 ____D C:\Users\D4sherInc\Desktop\FRST-OlderVersion

2015-08-17 02:15 - 2015-08-17 02:15 - 00002537 _____ C:\Users\D4sherInc\Desktop\JRT.txt

2015-08-17 02:11 - 2015-08-17 02:11 - 450315129 _____ C:\Windows\MEMORY.DMP

2015-08-17 02:11 - 2015-08-17 02:11 - 00293424 _____ C:\Windows\Minidump\081715-5787-01.dmp

2015-08-17 02:11 - 2015-08-17 02:11 - 00009940 _____ C:\Users\D4sherInc\Desktop\AdwCleaner[C1].txt

2015-08-17 01:58 - 2015-08-17 01:58 - 00293592 _____ C:\Windows\Minidump\081715-6505-01.dmp

2015-08-17 01:56 - 2015-08-17 01:56 - 00000000 __SHD C:\found.006

2015-08-17 01:26 - 2015-08-17 01:26 - 00001278 _____ C:\Users\D4sherInc\Desktop\mbam.txt

2015-08-17 01:17 - 2015-08-17 02:11 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-08-17 01:17 - 2015-08-17 01:17 - 00001113 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2015-08-17 01:17 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2015-08-17 01:17 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2015-08-17 01:17 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2015-08-16 23:29 - 2015-08-16 23:29 - 00293384 _____ C:\Windows\Minidump\081615-9469-01.dmp

2015-08-16 23:29 - 2015-08-16 23:29 - 00293200 _____ C:\Windows\Minidump\081615-12620-01.dmp

2015-08-16 23:09 - 2015-08-16 23:09 - 00006688 ____N C:\bootsqm.dat

2015-08-16 15:02 - 2015-08-16 15:02 - 00000000 __SHD C:\found.005

2015-08-16 14:01 - 2015-08-17 02:10 - 00009940 _____ C:\AdwCleaner[C1].txt

2015-08-16 14:00 - 2015-08-16 14:00 - 00004812 _____ C:\AdwCleaner[S2].txt

2015-08-16 13:59 - 2015-08-17 02:09 - 00008918 _____ C:\AdwCleaner[S1].txt

2015-08-16 13:59 - 2015-08-16 14:01 - 00000000 ____D C:\AdwCleaner

2015-08-16 13:52 - 2015-08-17 01:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-08-16 13:52 - 2015-08-17 01:17 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware

2015-08-16 13:52 - 2015-08-16 13:52 - 00000000 ____D C:\ProgramData\Malwarebytes

2015-08-16 12:31 - 2015-08-16 12:31 - 00293328 _____ C:\Windows\Minidump\081615-7425-01.dmp

2015-08-16 12:29 - 2015-08-16 12:29 - 00293608 _____ C:\Windows\Minidump\081615-6302-01.dmp

2015-08-16 01:41 - 2015-08-16 01:41 - 00293288 _____ C:\Windows\Minidump\081615-8096-01.dmp

2015-08-15 14:12 - 2015-08-15 14:13 - 00000000 ____D C:\Users\D4sherInc\Desktop\bluescreens

2015-08-15 14:09 - 2015-08-15 14:09 - 00293336 _____ C:\Windows\Minidump\081515-8970-01.dmp

2015-08-15 14:07 - 2015-08-15 14:07 - 00000000 __SHD C:\found.004

2015-08-15 14:05 - 2015-08-15 14:05 - 00027491 _____ C:\Users\D4sherInc\Desktop\Combofix.txt

2015-08-15 14:03 - 2015-08-15 14:03 - 00027491 _____ C:\ComboFix.txt

2015-08-15 13:57 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe

2015-08-15 13:57 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe

2015-08-15 13:57 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2015-08-15 13:57 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2015-08-15 13:57 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2015-08-15 13:57 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe

2015-08-15 13:57 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe

2015-08-15 13:57 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe

2015-08-15 13:53 - 2015-08-16 15:18 - 00000000 ____D C:\Windows\erdnt

2015-08-15 13:53 - 2015-08-16 15:18 - 00000000 ____D C:\Qoobox

2015-08-15 13:53 - 2015-08-15 13:53 - 05634818 ____R (Swearware) C:\Users\D4sherInc\Desktop\ComboFix.exe

2015-08-15 13:47 - 2015-08-16 15:18 - 00000000 ____D C:\Program Files (x86)\VS Revo Group

2015-08-15 13:47 - 2015-08-15 13:47 - 00001275 _____ C:\Users\D4sherInc\Desktop\Revo Uninstaller.lnk

2015-08-15 11:25 - 2015-08-15 11:25 - 00293488 _____ C:\Windows\Minidump\081515-11029-01.dmp

2015-08-15 11:24 - 2015-08-15 11:24 - 00293560 _____ C:\Windows\Minidump\081515-16224-01.dmp

2015-08-14 23:37 - 2015-08-14 23:37 - 00293208 _____ C:\Windows\Minidump\081415-15896-01.dmp

2015-08-14 23:36 - 2015-08-14 23:36 - 00293344 _____ C:\Windows\Minidump\081415-11434-01.dmp

2015-08-14 23:35 - 2015-08-14 23:35 - 00293536 _____ C:\Windows\Minidump\081415-7753-01.dmp

2015-08-14 23:34 - 2015-08-14 23:34 - 00293624 _____ C:\Windows\Minidump\081415-8065-01.dmp

2015-08-14 17:12 - 2015-08-14 17:12 - 00000000 ____D C:\Users\D4sherInc\Documents\ArtRage Paintings

2015-08-14 16:24 - 2015-08-16 15:18 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\Ambient Design

2015-08-14 16:24 - 2015-08-16 15:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArtRage Studio

2015-08-14 16:24 - 2015-08-16 15:18 - 00000000 ____D C:\Program Files (x86)\Ambient Design

2015-08-14 16:24 - 2015-08-14 16:24 - 00001189 _____ C:\Users\Public\Desktop\ArtRage Studio.lnk

2015-08-14 15:09 - 2015-08-14 15:09 - 00000000 ____D C:\Users\D4sherInc\.android

2015-08-14 14:54 - 2015-08-14 14:54 - 00293472 _____ C:\Windows\Minidump\081415-8408-01.dmp

2015-08-14 14:45 - 2015-08-14 14:45 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wacom Tablett

2015-08-14 14:33 - 2015-08-14 14:33 - 00000000 ____D C:\Users\D4sherInc\AppData\Local\Wacom

2015-08-14 14:29 - 2015-08-16 15:18 - 00000000 ____D C:\Program Files\Tablet

2015-08-14 14:29 - 2015-08-14 22:05 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\WTablet

2015-08-14 14:29 - 2015-08-14 14:29 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_wacomrouterfilter_01009.Wdf

2015-08-14 14:29 - 2015-08-14 14:29 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_wachidrouter_01009.Wdf

2015-08-14 14:29 - 2015-08-14 14:29 - 00000000 ____D C:\Program Files\TabletPlugins

2015-08-14 14:29 - 2015-08-14 14:29 - 00000000 ____D C:\Program Files (x86)\TabletPlugins

2015-08-14 14:29 - 2015-07-08 00:26 - 02004160 _____ (Wacom Technology, Corp.) C:\Windows\system32\WacomMT.dll

2015-08-14 14:29 - 2015-07-08 00:26 - 01961152 _____ (Wacom Technology, Corp.) C:\Windows\system32\Wacom_Tablet.dll

2015-08-14 14:29 - 2015-07-08 00:26 - 01953984 _____ (Wacom Technology, Corp.) C:\Windows\system32\Wacom_Touch_Tablet.dll

2015-08-14 14:29 - 2015-07-08 00:26 - 01832128 _____ (Wacom Technology, Corp.) C:\Windows\system32\Wintab32.dll

2015-08-14 14:29 - 2015-07-08 00:26 - 01607872 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\WacomMT.dll

2015-08-14 14:29 - 2015-07-08 00:26 - 01591488 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wacom_Tablet.dll

2015-08-14 14:29 - 2015-07-08 00:26 - 01584832 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wacom_Touch_Tablet.dll

2015-08-14 14:29 - 2015-07-08 00:26 - 01472704 _____ (Wacom Technology, Corp.) C:\Windows\SysWOW64\Wintab32.dll

2015-08-14 14:29 - 2015-04-28 19:08 - 00103192 _____ (Wacom Technology) C:\Windows\system32\Drivers\wachidrouter.sys

2015-08-14 14:29 - 2015-04-28 19:08 - 00015128 _____ (Wacom Technology) C:\Windows\system32\Drivers\wacomrouterfilter.sys

2015-08-14 14:29 - 2015-04-28 19:08 - 00014104 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\hidkmdf.sys

2015-08-14 14:29 - 2012-12-12 00:12 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wdfcoinstaller01009.dll

2015-08-14 03:56 - 2015-08-14 03:57 - 00050827 _____ C:\Users\D4sherInc\Desktop\FRST_2.txt

2015-08-14 03:23 - 2015-08-14 03:23 - 00000000 ____D C:\found.003

2015-08-14 03:22 - 2015-08-14 03:22 - 00015803 _____ C:\Users\D4sherInc\Desktop\Gmer.txt

2015-08-14 02:58 - 2015-08-14 02:57 - 00380416 _____ C:\Users\D4sherInc\Desktop\Gmer-19357.exe

2015-08-14 02:56 - 2015-08-14 02:56 - 00039457 _____ C:\Users\D4sherInc\Desktop\Addition.txt

2015-08-14 02:49 - 2015-08-14 02:49 - 00293312 _____ C:\Windows\Minidump\081415-11232-01.dmp

2015-08-14 02:48 - 2015-08-14 02:48 - 00293504 _____ C:\Windows\Minidump\081415-10467-01.dmp

2015-08-14 02:47 - 2015-08-14 03:56 - 00055982 _____ C:\Users\D4sherInc\Desktop\FRST_1.txt

2015-08-14 02:46 - 2015-08-17 02:16 - 02173440 _____ (Farbar) C:\Users\D4sherInc\Desktop\FRST64.exe

2015-08-14 02:46 - 2015-08-17 02:16 - 00000000 ____D C:\FRST

2015-08-14 02:42 - 2015-08-14 02:42 - 00050477 _____ C:\Users\D4sherInc\Desktop\Defogger.exe

2015-08-14 02:42 - 2015-08-14 02:42 - 00000480 _____ C:\Users\D4sherInc\Desktop\defogger_disable.log

2015-08-14 02:42 - 2015-08-14 02:42 - 00000000 _____ C:\Users\D4sherInc\defogger_reenable

2015-08-14 02:26 - 2015-08-14 02:26 - 00293496 _____ C:\Windows\Minidump\081415-10717-01.dmp

2015-08-14 01:50 - 2015-08-14 01:50 - 00293120 _____ C:\Windows\Minidump\081415-7971-01.dmp

2015-08-13 20:44 - 2015-08-13 20:44 - 00292968 _____ C:\Windows\Minidump\081315-11294-01.dmp

2015-08-13 14:18 - 2015-08-13 14:18 - 00293024 _____ C:\Windows\Minidump\081315-7878-01.dmp

2015-08-13 14:11 - 2015-08-13 14:11 - 00293440 _____ C:\Windows\Minidump\081315-8096-01.dmp

2015-08-13 13:58 - 2015-05-09 20:26 - 00493504 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll

2015-08-13 02:15 - 2015-08-13 02:15 - 00000000 ____D C:\found.002

2015-08-13 02:11 - 2015-08-13 02:11 - 00000000 ____D C:\found.001

2015-08-13 02:07 - 2015-08-13 02:07 - 00293152 _____ C:\Windows\Minidump\081315-7394-01.dmp

2015-08-13 02:06 - 2015-08-13 02:06 - 00293496 _____ C:\Windows\Minidump\081315-7753-01.dmp

2015-08-12 22:25 - 2015-08-12 22:25 - 00292920 _____ C:\Windows\Minidump\081215-9126-01.dmp

2015-08-12 22:24 - 2015-08-12 22:24 - 00293512 _____ C:\Windows\Minidump\081215-9438-01.dmp

2015-08-12 13:16 - 2015-08-16 15:18 - 00000000 ____D C:\found.000

2015-08-12 03:29 - 2015-08-12 03:29 - 00293448 _____ C:\Windows\Minidump\081215-8845-01.dmp

2015-08-12 03:02 - 2015-07-30 15:13 - 00124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll

2015-08-12 03:02 - 2015-07-30 15:13 - 00103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

2015-08-11 20:13 - 2015-08-11 20:13 - 00293440 _____ C:\Windows\Minidump\081115-6770-01.dmp

2015-08-11 20:01 - 2015-07-28 22:09 - 00017344 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe

2015-08-11 20:01 - 2015-07-28 22:05 - 01116672 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2015-08-11 20:01 - 2015-07-28 22:05 - 00774656 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2015-08-11 20:01 - 2015-07-28 22:05 - 00743424 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2015-08-11 20:01 - 2015-07-28 22:05 - 00437760 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2015-08-11 20:01 - 2015-07-28 22:05 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2015-08-11 20:01 - 2015-07-28 22:05 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

2015-08-11 20:01 - 2015-07-28 21:55 - 01148416 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2015-08-11 20:01 - 2015-07-15 20:15 - 05568960 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-08-11 20:01 - 2015-07-15 20:15 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-08-11 20:01 - 2015-07-15 20:15 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-08-11 20:01 - 2015-07-15 20:15 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys

2015-08-11 20:01 - 2015-07-15 20:12 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2015-08-11 20:01 - 2015-07-15 20:11 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2015-08-11 20:01 - 2015-07-15 20:11 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2015-08-11 20:01 - 2015-07-15 20:11 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2015-08-11 20:01 - 2015-07-15 20:11 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-08-11 20:01 - 2015-07-15 20:11 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 01743360 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-08-11 20:01 - 2015-07-15 20:10 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2015-08-11 20:01 - 2015-07-15 20:10 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-08-11 20:01 - 2015-07-15 20:10 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2015-08-11 20:01 - 2015-07-15 20:10 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll

2015-08-11 20:01 - 2015-07-15 20:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2015-08-11 20:01 - 2015-07-15 20:09 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-08-11 20:01 - 2015-07-15 20:05 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-08-11 20:01 - 2015-07-15 20:05 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 20:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:59 - 03989952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2015-08-11 20:01 - 2015-07-15 19:59 - 03934656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2015-08-11 20:01 - 2015-07-15 19:56 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2015-08-11 20:01 - 2015-07-15 19:55 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2015-08-11 20:01 - 2015-07-15 19:55 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2015-08-11 20:01 - 2015-07-15 19:55 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2015-08-11 20:01 - 2015-07-15 19:55 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2015-08-11 20:01 - 2015-07-15 19:55 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2015-08-11 20:01 - 2015-07-15 19:54 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-08-11 20:01 - 2015-07-15 19:54 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2015-08-11 20:01 - 2015-07-15 19:54 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2015-08-11 20:01 - 2015-07-15 19:54 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll

2015-08-11 20:01 - 2015-07-15 19:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2015-08-11 20:01 - 2015-07-15 19:54 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2015-08-11 20:01 - 2015-07-15 19:54 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2015-08-11 20:01 - 2015-07-15 19:53 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2015-08-11 20:01 - 2015-07-15 19:53 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2015-08-11 20:01 - 2015-07-15 19:53 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2015-08-11 20:01 - 2015-07-15 19:53 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2015-08-11 20:01 - 2015-07-15 19:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2015-08-11 20:01 - 2015-07-15 19:53 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2015-08-11 20:01 - 2015-07-15 19:49 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2015-08-11 20:01 - 2015-07-15 19:48 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 19:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 18:46 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2015-08-11 20:01 - 2015-07-15 18:46 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2015-08-11 20:01 - 2015-07-15 18:46 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2015-08-11 20:01 - 2015-07-15 18:37 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2015-08-11 20:01 - 2015-07-15 18:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2015-08-11 20:01 - 2015-07-15 18:34 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 18:34 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 18:34 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2015-08-11 20:01 - 2015-07-15 18:34 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2015-08-11 20:01 - 2015-07-10 19:51 - 03722752 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2015-08-11 20:01 - 2015-07-10 19:51 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll

2015-08-11 20:01 - 2015-07-10 19:51 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

2015-08-11 20:01 - 2015-07-10 19:34 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2015-08-11 20:01 - 2015-07-10 19:34 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll

2015-08-11 20:01 - 2015-07-10 19:33 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll

2015-08-11 20:00 - 2015-07-21 02:39 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-08-11 20:00 - 2015-07-21 02:12 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2015-08-11 20:00 - 2015-07-16 23:14 - 25192448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-08-11 20:00 - 2015-07-16 22:54 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-08-11 20:00 - 2015-07-16 22:54 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-08-11 20:00 - 2015-07-16 22:37 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-08-11 20:00 - 2015-07-16 22:36 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-08-11 20:00 - 2015-07-16 22:36 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2015-08-11 20:00 - 2015-07-16 22:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-08-11 20:00 - 2015-07-16 22:35 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-08-11 20:00 - 2015-07-16 22:35 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-08-11 20:00 - 2015-07-16 22:27 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-08-11 20:00 - 2015-07-16 22:26 - 05923328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-08-11 20:00 - 2015-07-16 22:26 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-08-11 20:00 - 2015-07-16 22:23 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-08-11 20:00 - 2015-07-16 22:21 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2015-08-11 20:00 - 2015-07-16 22:21 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-08-11 20:00 - 2015-07-16 22:21 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-08-11 20:00 - 2015-07-16 22:21 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-08-11 20:00 - 2015-07-16 22:12 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-08-11 20:00 - 2015-07-16 22:08 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-08-11 20:00 - 2015-07-16 22:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2015-08-11 20:00 - 2015-07-16 22:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-08-11 20:00 - 2015-07-16 21:55 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-08-11 20:00 - 2015-07-16 21:54 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-08-11 20:00 - 2015-07-16 21:51 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-08-11 20:00 - 2015-07-16 21:51 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-08-11 20:00 - 2015-07-16 21:51 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2015-08-11 20:00 - 2015-07-16 21:50 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2015-08-11 20:00 - 2015-07-16 21:50 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2015-08-11 20:00 - 2015-07-16 21:49 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2015-08-11 20:00 - 2015-07-16 21:45 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-08-11 20:00 - 2015-07-16 21:43 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2015-08-11 20:00 - 2015-07-16 21:43 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2015-08-11 20:00 - 2015-07-16 21:41 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2015-08-11 20:00 - 2015-07-16 21:39 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2015-08-11 20:00 - 2015-07-16 21:39 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2015-08-11 20:00 - 2015-07-16 21:38 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2015-08-11 20:00 - 2015-07-16 21:36 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-08-11 20:00 - 2015-07-16 21:35 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-08-11 20:00 - 2015-07-16 21:34 - 14451200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-08-11 20:00 - 2015-07-16 21:33 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-08-11 20:00 - 2015-07-16 21:32 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-08-11 20:00 - 2015-07-16 21:29 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2015-08-11 20:00 - 2015-07-16 21:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2015-08-11 20:00 - 2015-07-16 21:20 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2015-08-11 20:00 - 2015-07-16 21:19 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-08-11 20:00 - 2015-07-16 21:17 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-08-11 20:00 - 2015-07-16 21:12 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-08-11 20:00 - 2015-07-16 21:12 - 02427904 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-08-11 20:00 - 2015-07-16 21:10 - 12856832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-08-11 20:00 - 2015-07-16 21:06 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-08-11 20:00 - 2015-07-16 21:06 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-08-11 20:00 - 2015-07-16 21:05 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2015-08-11 20:00 - 2015-07-16 21:01 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-08-11 20:00 - 2015-07-16 20:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-08-11 20:00 - 2015-07-16 20:42 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-08-11 20:00 - 2015-07-16 20:38 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-08-11 20:00 - 2015-07-16 20:37 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2015-08-11 20:00 - 2015-07-15 05:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll

2015-08-11 19:59 - 2015-07-30 20:06 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2015-08-11 19:59 - 2015-07-30 20:06 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2015-08-11 19:59 - 2015-07-30 20:06 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2015-08-11 19:59 - 2015-07-30 20:06 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2015-08-11 19:59 - 2015-07-30 20:06 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2015-08-11 19:59 - 2015-07-30 20:06 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll

2015-08-11 19:59 - 2015-07-30 20:06 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll

2015-08-11 19:59 - 2015-07-30 19:57 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2015-08-11 19:59 - 2015-07-30 19:57 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll

2015-08-11 19:59 - 2015-07-30 19:57 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll

2015-08-11 19:59 - 2015-07-30 19:57 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2015-08-11 19:59 - 2015-07-30 19:57 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll

2015-08-11 19:59 - 2015-07-30 19:55 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll

2015-08-11 19:59 - 2015-07-30 18:56 - 03208192 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-08-11 19:59 - 2015-07-30 18:52 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2015-08-11 19:59 - 2015-07-30 18:49 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2015-08-11 19:59 - 2015-07-20 19:56 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2015-08-11 19:59 - 2015-07-20 19:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2015-08-11 19:59 - 2015-07-20 19:56 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2015-08-11 19:59 - 2015-07-20 19:56 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2015-08-11 19:59 - 2015-07-20 19:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2015-08-11 19:59 - 2015-07-15 05:19 - 02004992 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll

2015-08-11 19:59 - 2015-07-15 05:19 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2015-08-11 19:59 - 2015-07-15 05:14 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll

2015-08-11 19:59 - 2015-07-15 05:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2015-08-11 19:59 - 2015-07-15 04:55 - 01390592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll

2015-08-11 19:59 - 2015-07-15 04:55 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2015-08-11 19:59 - 2015-07-15 04:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll

2015-08-11 19:59 - 2015-07-15 04:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2015-08-11 19:59 - 2015-07-01 22:49 - 00260096 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll

2015-08-11 19:59 - 2015-07-01 22:48 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll

2015-08-11 19:59 - 2015-07-01 22:30 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll

2015-08-11 19:59 - 2015-07-01 22:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll

2015-08-11 19:58 - 2015-07-20 20:12 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-08-11 19:58 - 2015-07-20 20:12 - 02606080 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-08-11 19:58 - 2015-07-20 20:12 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-08-11 19:58 - 2015-07-20 20:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-08-11 19:58 - 2015-07-20 20:12 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-08-11 19:58 - 2015-07-20 20:12 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-08-11 19:58 - 2015-07-20 20:12 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll

2015-08-11 19:58 - 2015-07-20 20:12 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2015-08-11 19:58 - 2015-07-20 20:12 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-08-11 19:58 - 2015-07-20 20:12 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2015-08-11 19:58 - 2015-07-20 20:12 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll

2015-08-11 19:58 - 2015-07-10 19:51 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2015-08-11 19:58 - 2015-07-10 19:34 - 12875776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2015-08-11 19:58 - 2015-07-09 19:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe

2015-08-11 19:58 - 2015-07-09 19:57 - 00193536 _____ (Microsoft Corporation) C:\Windows\notepad.exe

2015-08-11 19:58 - 2015-07-09 19:42 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe

2015-08-11 19:51 - 2015-08-11 19:51 - 00293512 _____ C:\Windows\Minidump\081115-6988-01.dmp

2015-08-11 18:15 - 2015-08-11 18:15 - 00293016 _____ C:\Windows\Minidump\081115-7612-01.dmp

2015-08-11 18:14 - 2015-08-11 18:14 - 00293456 _____ C:\Windows\Minidump\081115-7566-01.dmp

2015-08-11 18:14 - 2015-08-11 18:14 - 00293160 _____ C:\Windows\Minidump\081115-8174-01.dmp

2015-08-05 02:12 - 2015-08-05 02:12 - 00293464 _____ C:\Windows\Minidump\080515-7035-01.dmp

2015-08-04 22:56 - 2015-08-04 22:56 - 00293448 _____ C:\Windows\Minidump\080415-6864-01.dmp

2015-08-04 22:20 - 2015-08-04 22:20 - 00293480 _____ C:\Windows\Minidump\080415-7113-01.dmp

2015-08-04 21:01 - 2015-08-04 21:01 - 00293456 _____ C:\Windows\Minidump\080415-6910-01.dmp

2015-08-04 15:28 - 2015-08-16 15:18 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi

2015-08-04 15:28 - 2015-08-04 15:28 - 00293504 _____ C:\Windows\Minidump\080415-8392-01.dmp

2015-08-04 15:28 - 2015-08-04 15:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

2015-08-04 08:07 - 2015-08-04 08:07 - 00001613 _____ C:\Users\Public\Desktop\League of Legends.lnk

2015-08-04 08:07 - 2015-08-04 08:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends

2015-08-04 07:40 - 2015-08-04 07:40 - 00293368 _____ C:\Windows\Minidump\080415-12370-01.dmp

2015-08-04 07:39 - 2015-08-04 07:39 - 00293480 _____ C:\Windows\Minidump\080415-12823-01.dmp

2015-08-04 07:16 - 2015-08-04 07:16 - 00293416 _____ C:\Windows\Minidump\080415-5304-01.dmp

2015-08-04 07:16 - 2015-08-04 07:16 - 00293072 _____ C:\Windows\Minidump\080415-4633-01.dmp

2015-08-04 07:13 - 2015-08-04 07:13 - 00293056 _____ C:\Windows\Minidump\080415-5444-01.dmp

2015-08-04 07:12 - 2015-08-04 07:12 - 00293352 _____ C:\Windows\Minidump\080415-4773-01.dmp

2015-08-03 14:06 - 2015-08-17 02:11 - 00000000 ____D C:\Windows\Minidump

2015-08-03 14:06 - 2015-08-03 14:06 - 00293280 _____ C:\Windows\Minidump\080315-6536-01.dmp

2015-07-26 03:17 - 2015-08-04 06:44 - 00000000 ____D C:\Wooxy

2015-07-26 03:17 - 2015-08-04 06:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wooxy

2015-07-23 13:16 - 2015-07-23 13:16 - 00000000 ____D C:\Users\D4sherInc\AppData\Local\CEF
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-08-17 02:14 - 2015-01-16 00:08 - 00000284 _____ C:\Windows\Tasks\RtlNetworkGenieVistaStart.job

2015-08-17 02:14 - 2009-07-14 06:45 - 00013728 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-08-17 02:14 - 2009-07-14 06:45 - 00013728 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-08-17 02:13 - 2015-01-16 00:01 - 00063970 _____ C:\Windows\SysWOW64\Gms.log

2015-08-17 02:11 - 2015-06-27 00:00 - 00000000 ____D C:\Users\D4sherInc\AppData\Local\LogMeIn Hamachi

2015-08-17 02:11 - 2015-02-20 06:15 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\Curse Client

2015-08-17 02:11 - 2015-01-15 23:45 - 00000000 ____D C:\ProgramData\NVIDIA

2015-08-17 02:11 - 2015-01-15 23:42 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-08-17 02:11 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2015-08-17 02:11 - 2009-07-14 06:51 - 00287113 _____ C:\Windows\setupact.log

2015-08-17 02:10 - 2015-01-15 23:39 - 01777714 _____ C:\Windows\WindowsUpdate.log

2015-08-17 02:09 - 2015-01-15 23:42 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-08-17 02:07 - 2015-01-16 02:53 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\Spotify

2015-08-17 02:02 - 2015-01-16 02:53 - 00000000 ____D C:\Users\D4sherInc\AppData\Local\Spotify

2015-08-17 01:52 - 2015-01-16 00:00 - 00146704 _____ C:\Windows\PFRO.log

2015-08-16 15:18 - 2015-04-05 03:00 - 00000000 ___SD C:\Windows\system32\GWX

2015-08-16 15:18 - 2015-01-16 00:20 - 00000000 ____D C:\ProgramData\AVG2015

2015-08-16 15:18 - 2015-01-16 00:20 - 00000000 ____D C:\Program Files (x86)\AVG

2015-08-16 15:18 - 2015-01-16 00:17 - 00000000 ____D C:\ProgramData\MFAData

2015-08-16 15:18 - 2015-01-16 00:04 - 00000000 ____D C:\SuperChargerProfile

2015-08-16 15:18 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Sidebar

2015-08-16 15:18 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\servicing

2015-08-16 15:18 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration

2015-08-16 14:19 - 2015-01-15 23:39 - 00000000 ____D C:\Users\D4sherInc

2015-08-16 13:27 - 2015-06-19 12:38 - 00000000 ____D C:\Program Files\Common Files\AV

2015-08-16 13:27 - 2015-01-16 00:20 - 00000000 ___HD C:\$AVG

2015-08-16 13:25 - 2015-01-16 09:25 - 00000000 ____D C:\Program Files (x86)\AVG Web TuneUp

2015-08-16 13:23 - 2015-01-16 09:25 - 00000000 ____D C:\Users\D4sherInc\AppData\Local\AVG Web TuneUp

2015-08-16 13:23 - 2015-01-16 09:25 - 00000000 ____D C:\ProgramData\AVG Web TuneUp

2015-08-16 13:22 - 2015-01-15 23:46 - 00003962 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{3AF67803-2CA0-49F2-9A86-433755C59022}

2015-08-16 13:20 - 2015-01-16 00:17 - 00000000 ____D C:\Users\D4sherInc\AppData\Local\Avg2015

2015-08-16 13:12 - 2015-01-31 19:22 - 00110688 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll

2015-08-16 13:12 - 2015-01-31 19:22 - 00000000 ____D C:\Program Files\Java

2015-08-16 01:55 - 2015-01-16 03:19 - 00000000 ____D C:\Users\D4sherInc\Desktop\osu

2015-08-16 01:40 - 2015-01-16 00:42 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\TS3Client

2015-08-16 01:21 - 2015-01-16 22:38 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\Skype

2015-08-16 01:12 - 2015-06-21 17:30 - 00000000 ____D C:\Users\D4sherInc\AppData\Local\Purplizer

2015-08-16 00:34 - 2015-01-16 00:43 - 00000000 ____D C:\Program Files (x86)\Overwolf

2015-08-16 00:34 - 2015-01-16 00:42 - 00000000 ____D C:\Users\D4sherInc\AppData\Local\Overwolf

2015-08-15 14:03 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default

2015-08-15 14:01 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini

2015-08-15 11:32 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2015-08-14 22:19 - 2015-01-16 00:53 - 00000000 ____D C:\Program Files (x86)\Steam

2015-08-14 10:52 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2015-08-14 02:34 - 2009-07-14 19:58 - 00701146 _____ C:\Windows\system32\perfh007.dat

2015-08-14 02:34 - 2009-07-14 19:58 - 00150046 _____ C:\Windows\system32\perfc007.dat

2015-08-14 02:34 - 2009-07-14 07:13 - 01619928 _____ C:\Windows\system32\PerfStringBackup.INI

2015-08-12 03:20 - 2015-01-15 23:39 - 00000000 ___RD C:\Users\D4sherInc\Virtual Machines

2015-08-12 03:20 - 2009-07-14 06:45 - 00267816 _____ C:\Windows\system32\FNTCACHE.DAT

2015-08-12 03:17 - 2015-01-16 00:22 - 00000000 ___SD C:\Windows\system32\CompatTel

2015-08-12 03:17 - 2015-01-16 00:22 - 00000000 ____D C:\Windows\system32\appraiser

2015-08-12 02:13 - 2015-01-15 23:42 - 00002182 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2015-08-11 01:06 - 2015-06-16 16:37 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client

2015-08-04 23:45 - 2015-07-11 18:15 - 00000080 _____ C:\Users\D4sherInc\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦

2015-08-04 06:44 - 2015-07-11 18:15 - 00000000 ____D C:\Program Files (x86)\Rockstar Games

2015-08-04 06:44 - 2015-07-11 18:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games

2015-08-04 06:44 - 2015-07-11 18:14 - 00000000 ____D C:\Program Files\Rockstar Games

2015-08-04 06:44 - 2015-07-06 20:03 - 00000000 ____D C:\Program Files (x86)\FreeCodecPack

2015-08-04 06:44 - 2015-07-05 03:31 - 00000000 ____D C:\Users\D4sherInc\AppData\Local\Maca134

2015-08-04 06:44 - 2015-07-05 03:26 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive

2015-08-04 06:44 - 2015-07-05 03:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive

2015-08-04 06:44 - 2015-07-05 03:24 - 00000000 ____D C:\Program Files (x86)\DayZLauncher

2015-08-04 06:44 - 2015-07-01 04:29 - 00000000 ____D C:\Program Files\GIMP 2

2015-08-04 06:44 - 2015-06-29 13:48 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\m.objects

2015-08-04 06:44 - 2015-06-29 13:48 - 00000000 ____D C:\Program Files (x86)\m.objects

2015-08-04 06:44 - 2015-06-25 00:08 - 00000000 ____D C:\Users\D4sherInc\AppData\Local\Microsoft Games

2015-08-04 06:44 - 2015-06-21 17:39 - 00000000 ____D C:\Windows\SysWOW64\Macromed

2015-08-04 06:44 - 2015-06-19 06:00 - 00000000 ____D C:\ProgramData\NCH Software

2015-08-04 06:44 - 2015-06-19 06:00 - 00000000 ____D C:\Program Files (x86)\NCH Software

2015-08-04 06:44 - 2015-06-03 18:12 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\Mozilla

2015-08-04 06:44 - 2015-05-27 01:55 - 00000000 ____D C:\Program Files (x86)\VideoLAN

2015-08-04 06:44 - 2015-05-27 01:50 - 00000000 ____D C:\Users\D4sherInc\AppData\Local\Movavi

2015-08-04 06:44 - 2015-05-27 01:44 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\Xilisoft

2015-08-04 06:44 - 2015-05-24 03:11 - 00000000 ____D C:\Users\D4sherInc\Documents\Square Enix

2015-08-04 06:44 - 2015-05-11 17:37 - 00000000 ____D C:\Users\D4sherInc\AppData\Local\SkinSpotlightsReplays

2015-08-04 06:44 - 2015-05-03 20:23 - 00000000 ____D C:\Program Files (x86)\LittleFighter2

2015-08-04 06:44 - 2015-04-15 23:42 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\Notepad++

2015-08-04 06:44 - 2015-04-15 23:42 - 00000000 ____D C:\Program Files (x86)\Notepad++

2015-08-04 06:44 - 2015-04-13 16:36 - 00000000 ____D C:\Users\D4sherInc\Documents\My Games

2015-08-04 06:44 - 2015-04-01 19:54 - 00000000 ____D C:\Users\D4sherInc\Desktop\FeedTheBeast#

2015-08-04 06:44 - 2015-03-14 03:10 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\uTorrent

2015-08-04 06:44 - 2015-03-07 05:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2015-08-04 06:44 - 2015-03-07 05:20 - 00000000 ____D C:\Program Files (x86)\Free Codec Pack

2015-08-04 06:44 - 2015-03-07 05:20 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft

2015-08-04 06:44 - 2015-03-07 05:19 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\DVDVideoSoft

2015-08-04 06:44 - 2015-02-17 07:54 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\OBS

2015-08-04 06:44 - 2015-02-17 07:54 - 00000000 ____D C:\Program Files\OBS

2015-08-04 06:44 - 2015-02-17 07:54 - 00000000 ____D C:\Program Files (x86)\OBS

2015-08-04 06:44 - 2015-02-17 07:27 - 00000000 ____D C:\Users\D4sherInc\AppData\Local\SkinSpotlights

2015-08-04 06:44 - 2015-02-17 05:37 - 00000000 ____D C:\Users\D4sherInc\AppData\Local\LeagueReplays

2015-08-04 06:44 - 2015-02-11 04:48 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\RealWorld

2015-08-04 06:44 - 2015-02-11 04:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealWorld

2015-08-04 06:44 - 2015-01-31 18:54 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\ftblauncher

2015-08-04 06:44 - 2015-01-28 01:17 - 00000000 ____D C:\ProgramData\ROCCAT

2015-08-04 06:44 - 2015-01-28 01:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ROCCAT

2015-08-04 06:44 - 2015-01-28 01:15 - 00000000 ____D C:\Program Files (x86)\ROCCAT

2015-08-04 06:44 - 2015-01-28 01:13 - 00000000 ____D C:\Program Files\Alienware

2015-08-04 06:44 - 2015-01-25 16:59 - 00000000 ____D C:\Program Files (x86)\Adobe

2015-08-04 06:44 - 2015-01-25 16:58 - 00000000 ____D C:\ProgramData\Adobe

2015-08-04 06:44 - 2015-01-18 04:18 - 00000000 ____D C:\Users\D4sherInc\Documents\LOLReplay

2015-08-04 06:44 - 2015-01-18 04:18 - 00000000 ____D C:\Program Files (x86)\LOLReplay

2015-08-04 06:44 - 2015-01-16 22:59 - 00000000 ____D C:\Windows\system32\SPReview

2015-08-04 06:44 - 2015-01-16 22:59 - 00000000 ____D C:\Windows\system32\EventProviders

2015-08-04 06:44 - 2015-01-16 22:38 - 00000000 ___RD C:\Program Files (x86)\Skype

2015-08-04 06:44 - 2015-01-16 22:38 - 00000000 ____D C:\Users\D4sherInc\AppData\Local\Skype

2015-08-04 06:44 - 2015-01-16 22:38 - 00000000 ____D C:\ProgramData\Skype

2015-08-04 06:44 - 2015-01-16 14:07 - 00000000 ___HD C:\Program Files (x86)\Creative Installation Information

2015-08-04 06:44 - 2015-01-16 01:32 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\Riot Games

2015-08-04 06:44 - 2009-07-14 20:18 - 00000000 ___RD C:\Users\Public\Recorded TV

2015-08-03 18:58 - 2015-01-15 23:57 - 00000000 ___HD C:\Program Files (x86)\Temp

2015-08-03 12:12 - 2015-07-17 20:07 - 00033856 ____H (LogMeIn, Inc.) C:\Windows\system32\hamachi.sys

2015-08-01 13:04 - 2015-01-15 23:42 - 00000000 ____D C:\Users\D4sherInc\AppData\Local\Google

2015-07-29 16:31 - 2015-01-16 01:03 - 00000000 ____D C:\Users\D4sherInc\AppData\Roaming\.minecraft
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2015-03-26 13:48 - 2015-03-26 13:48 - 2174976 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\Common Files\atimpenc.dll

2015-06-29 18:26 - 2015-06-29 18:26 - 0201882 _____ () C:\Users\D4sherInc\AppData\Local\2B763BC1_stp.CIS

2015-06-29 18:26 - 2015-06-29 18:26 - 0000290 _____ () C:\Users\D4sherInc\AppData\Local\2B763BC1_stp.CIS.part

2015-06-29 18:26 - 2015-06-29 18:26 - 1753194 _____ () C:\Users\D4sherInc\AppData\Local\316F70D7_stp.CIS

2015-06-29 18:26 - 2015-06-29 18:26 - 0000286 _____ () C:\Users\D4sherInc\AppData\Local\316F70D7_stp.CIS.part

2015-07-01 05:52 - 2015-07-01 05:52 - 0007273 _____ () C:\Users\D4sherInc\AppData\Local\recently-used.xbel

2015-01-16 00:25 - 2015-01-16 00:25 - 0000017 _____ () C:\Users\D4sherInc\AppData\Local\resmon.resmoncfg
 

Einige Dateien in TEMP:

====================

C:\Users\D4sherInc\AppData\Local\Temp\go4tlcb6.dll

C:\Users\D4sherInc\AppData\Local\Temp\hv8u2wdu.dll

C:\Users\D4sherInc\AppData\Local\Temp\jre-8u51-windows-au.exe

C:\Users\D4sherInc\AppData\Local\Temp\ntckoxkd.dll

C:\Users\D4sherInc\AppData\Local\Temp\sqlite3.dll

C:\Users\D4sherInc\AppData\Local\Temp\ui-r9rcf.dll
 
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\Windows\system32\winlogon.exe => Datei ist digital signiert

C:\Windows\system32\wininit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert

C:\Windows\explorer.exe => Datei ist digital signiert

C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert

C:\Windows\system32\svchost.exe => Datei ist digital signiert

C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert

C:\Windows\system32\services.exe => Datei ist digital signiert

C:\Windows\system32\User32.dll => Datei ist digital signiert

C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert

C:\Windows\system32\userinit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert

C:\Windows\system32\rpcss.dll => Datei ist digital signiert

C:\Windows\system32\dnsapi.dll => Datei ist digital signiert

C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2015-08-14 10:45
 

==================== Ende von Ergebnis ============================

PS: es kam erneut und nun häufiger zu Bluescreens, daher schicke ich einen aktuelleren Log hinterher:

Code:

==================================================

Dump File         : 081715-5787-01.dmp

Crash Time        : 17.08.2015 02:10:57

Bug Check String  : SYSTEM_SERVICE_EXCEPTION

Bug Check Code    : 0x0000003b

Parameter 1       : 00000000`c0000005

Parameter 2       : fffff800`0320eb05

Parameter 3       : fffff880`08136030

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081715-5787-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.424

Dump File Time    : 17.08.2015 02:11:28

==================================================
 

==================================================

Dump File         : 081715-6505-01.dmp

Crash Time        : 17.08.2015 01:57:37

Bug Check String  : PFN_LIST_CORRUPT

Bug Check Code    : 0x0000004e

Parameter 1       : 00000000`00000099

Parameter 2       : 00000000`001be4d2

Parameter 3       : 00000000`00000002

Parameter 4       : 00000000`0012002b

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081715-6505-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.592

Dump File Time    : 17.08.2015 01:58:20

==================================================
 

==================================================

Dump File         : 081615-12620-01.dmp

Crash Time        : 16.08.2015 23:29:05

Bug Check String  : NTFS_FILE_SYSTEM

Bug Check Code    : 0x00000024

Parameter 1       : 00000000`001904fb

Parameter 2       : fffff880`0b65db08

Parameter 3       : fffff880`0b65d360

Parameter 4       : fffff880`01343355

Caused By Driver  : Ntfs.sys

Caused By Address : Ntfs.sys+fc355

File Description  : 

Product Name      : 

Company           : 

File Version      : 

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081615-12620-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.200

Dump File Time    : 16.08.2015 23:29:56

==================================================
 

==================================================

Dump File         : 081615-9469-01.dmp

Crash Time        : 16.08.2015 23:28:27

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a252d0

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081615-9469-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.384

Dump File Time    : 16.08.2015 23:29:00

==================================================
 

==================================================

Dump File         : 081615-7425-01.dmp

Crash Time        : 16.08.2015 12:29:39

Bug Check String  : IRQL_NOT_LESS_OR_EQUAL

Bug Check Code    : 0x0000000a

Parameter 1       : 00000000`00000000

Parameter 2       : 00000000`00000002

Parameter 3       : 00000000`00000001

Parameter 4       : fffff800`030e2ffc

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081615-7425-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.328

Dump File Time    : 16.08.2015 12:31:15

==================================================
 

==================================================

Dump File         : 081615-6302-01.dmp

Crash Time        : 16.08.2015 07:17:30

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a25240

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : Ntfs.sys

Caused By Address : Ntfs.sys+a3b80

File Description  : 

Product Name      : 

Company           : 

File Version      : 

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081615-6302-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.608

Dump File Time    : 16.08.2015 12:29:33

==================================================
 

==================================================

Dump File         : 081615-8096-01.dmp

Crash Time        : 16.08.2015 01:40:46

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`048e78d0

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081615-8096-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.288

Dump File Time    : 16.08.2015 01:41:44

==================================================
 

==================================================

Dump File         : 081515-8970-01.dmp

Crash Time        : 15.08.2015 14:08:42

Bug Check String  : DRIVER_IRQL_NOT_LESS_OR_EQUAL

Bug Check Code    : 0x000000d1

Parameter 1       : 00000000`00000000

Parameter 2       : 00000000`00000002

Parameter 3       : 00000000`00000008

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081515-8970-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.336

Dump File Time    : 15.08.2015 14:09:35

==================================================
 

==================================================

Dump File         : 081515-11029-01.dmp

Crash Time        : 15.08.2015 11:24:41

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a25270

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081515-11029-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.488

Dump File Time    : 15.08.2015 11:25:17

==================================================
 

==================================================

Dump File         : 081415-15896-01.dmp

Crash Time        : 14.08.2015 23:36:46

Bug Check String  : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code    : 0x00000050

Parameter 1       : fffff8a0`052dbb9c

Parameter 2       : 00000000`00000000

Parameter 3       : fffff800`0335b89e

Parameter 4       : 00000000`00000002

Caused By Driver  : msahci.sys

Caused By Address : msahci.sys+4739

File Description  : 

Product Name      : 

Company           : 

File Version      : 

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081415-15896-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.208

Dump File Time    : 14.08.2015 23:37:40

==================================================
 

==================================================

Dump File         : 081415-7753-01.dmp

Crash Time        : 14.08.2015 23:35:02

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00000030

Parameter 2       : fffffa80`099567a0

Parameter 3       : fffff880`048aa000

Parameter 4       : fffff8a0`04217310

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081415-7753-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.536

Dump File Time    : 14.08.2015 23:35:45

==================================================
 

==================================================

Dump File         : 081415-8065-01.dmp

Crash Time        : 14.08.2015 23:34:17

Bug Check String  : PFN_LIST_CORRUPT

Bug Check Code    : 0x0000004e

Parameter 1       : 00000000`00000099

Parameter 2       : 00000000`0012e153

Parameter 3       : 00000000`00000000

Parameter 4       : 00000000`00061853

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081415-8065-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.624

Dump File Time    : 14.08.2015 23:34:54

==================================================
 

==================================================

Dump File         : 081415-8408-01.dmp

Crash Time        : 14.08.2015 14:53:15

Bug Check String  : SYSTEM_SERVICE_EXCEPTION

Bug Check Code    : 0x0000003b

Parameter 1       : 00000000`c0000005

Parameter 2       : fffff880`0121e7c5

Parameter 3       : fffff880`09265c80

Parameter 4       : 00000000`00000000

Caused By Driver  : Ntfs.sys

Caused By Address : Ntfs.sys+107c5

File Description  : 

Product Name      : 

Company           : 

File Version      : 

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081415-8408-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.472

Dump File Time    : 14.08.2015 14:54:43

==================================================
 

==================================================

Dump File         : 081415-11232-01.dmp

Crash Time        : 14.08.2015 02:48:45

Bug Check String  : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code    : 0x00000050

Parameter 1       : fffff8a0`04e77134

Parameter 2       : 00000000`00000000

Parameter 3       : fffff800`0333f89e

Parameter 4       : 00000000`00000002

Caused By Driver  : msahci.sys

Caused By Address : msahci.sys+4739

File Description  : 

Product Name      : 

Company           : 

File Version      : 

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081415-11232-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.312

Dump File Time    : 14.08.2015 02:49:23

==================================================
 

==================================================

Dump File         : 081415-10717-01.dmp

Crash Time        : 14.08.2015 02:25:50

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a252d0

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : Ntfs.sys

Caused By Address : Ntfs.sys+a3b80

File Description  : 

Product Name      : 

Company           : 

File Version      : 

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081415-10717-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.496

Dump File Time    : 14.08.2015 02:26:32

==================================================
 

==================================================

Dump File         : 081415-7971-01.dmp

Crash Time        : 14.08.2015 01:50:15

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00000031

Parameter 2       : fffffa80`094e20b0

Parameter 3       : fffff880`00b0a000

Parameter 4       : fffff8a0`03916fb4

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081415-7971-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.120

Dump File Time    : 14.08.2015 01:50:49

==================================================
 

==================================================

Dump File         : 081315-11294-01.dmp

Crash Time        : 13.08.2015 20:42:52

Bug Check String  : IRQL_NOT_LESS_OR_EQUAL

Bug Check Code    : 0x0000000a

Parameter 1       : fffff700`01180580

Parameter 2       : 00000000`00000000

Parameter 3       : 00000000`00000000

Parameter 4       : fffff800`030dafba

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081315-11294-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 292.968

Dump File Time    : 13.08.2015 20:44:42

==================================================
 

==================================================

Dump File         : 081315-7878-01.dmp

Crash Time        : 13.08.2015 14:11:25

Bug Check String  : BAD_POOL_CALLER

Bug Check Code    : 0x000000c2

Parameter 1       : 00000000`00000007

Parameter 2       : 00000000`0000109b

Parameter 3       : 00000000`00000000

Parameter 4       : fffff8a0`04281b50

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081315-7878-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.024

Dump File Time    : 13.08.2015 14:18:25

==================================================
 

==================================================

Dump File         : 081315-8096-01.dmp

Crash Time        : 13.08.2015 14:08:22

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a252d0

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081315-8096-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.440

Dump File Time    : 13.08.2015 14:11:20

==================================================
 

==================================================

Dump File         : 081315-7394-01.dmp

Crash Time        : 13.08.2015 02:06:40

Bug Check String  : SYSTEM_SERVICE_EXCEPTION

Bug Check Code    : 0x0000003b

Parameter 1       : 00000000`c0000005

Parameter 2       : fffff800`0334189e

Parameter 3       : fffff880`08ac15d0

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081315-7394-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.152

Dump File Time    : 13.08.2015 02:07:44

==================================================
 

==================================================

Dump File         : 081315-7753-01.dmp

Crash Time        : 13.08.2015 02:05:41

Bug Check String  : IRQL_NOT_LESS_OR_EQUAL

Bug Check Code    : 0x0000000a

Parameter 1       : 00000000`00800040

Parameter 2       : 00000000`00000002

Parameter 3       : 00000000`00000001

Parameter 4       : fffff800`03084fbc

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081315-7753-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.496

Dump File Time    : 13.08.2015 02:06:37

==================================================
 

==================================================

Dump File         : 081215-9126-01.dmp

Crash Time        : 12.08.2015 22:24:53

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a25240

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081215-9126-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 292.920

Dump File Time    : 12.08.2015 22:25:50

==================================================
 

==================================================

Dump File         : 081215-8845-01.dmp

Crash Time        : 12.08.2015 03:25:03

Bug Check String  : BAD_POOL_HEADER

Bug Check Code    : 0x00000019

Parameter 1       : 00000000`00000003

Parameter 2       : fffffa80`06637020

Parameter 3       : fffffa80`06637020

Parameter 4       : fffffa80`06eb7020

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081215-8845-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.448

Dump File Time    : 12.08.2015 03:29:17

==================================================
 

==================================================

Dump File         : 081115-6770-01.dmp

Crash Time        : 11.08.2015 20:12:59

Bug Check String  : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code    : 0x00000050

Parameter 1       : fffff8a0`03cfd948

Parameter 2       : 00000000`00000000

Parameter 3       : fffff800`0347b47f

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+748c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081115-6770-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.440

Dump File Time    : 11.08.2015 20:13:25

==================================================
 

==================================================

Dump File         : 081115-6988-01.dmp

Crash Time        : 11.08.2015 19:51:30

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041201

Parameter 2       : fffff680`0000c010

Parameter 3       : a8000000`95413867

Parameter 4       : fffffa80`09a80450

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+748c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081115-6988-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.512

Dump File Time    : 11.08.2015 19:51:56

==================================================
 

==================================================

Dump File         : 081115-7612-01.dmp

Crash Time        : 11.08.2015 18:14:50

Bug Check String  : SYSTEM_THREAD_EXCEPTION_NOT_HANDLED

Bug Check Code    : 0x1000007e

Parameter 1       : ffffffff`c0000005

Parameter 2       : fffff800`031c0aab

Parameter 3       : fffff880`031cb768

Parameter 4       : fffff880`031cafc0

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+1acaab

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+1acaab

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081115-7612-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.016

Dump File Time    : 11.08.2015 18:15:14

==================================================
 

==================================================

Dump File         : 081115-8174-01.dmp

Crash Time        : 11.08.2015 18:14:17

Bug Check String  : DRIVER_OVERRAN_STACK_BUFFER

Bug Check Code    : 0x000000f7

Parameter 1       : 00000200`00c8ed10

Parameter 2       : 0000f880`01056147

Parameter 3       : ffff077f`fefa9eb8

Parameter 4       : 00000000`00000000

Caused By Driver  : fltmgr.sys

Caused By Address : fltmgr.sys+93d6

File Description  : 

Product Name      : 

Company           : 

File Version      : 

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081115-8174-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.160

Dump File Time    : 11.08.2015 18:14:44

==================================================
 

==================================================

Dump File         : 080515-7035-01.dmp

Crash Time        : 05.08.2015 02:11:35

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a25270

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : Ntfs.sys

Caused By Address : Ntfs.sys+a3b80

File Description  : 

Product Name      : 

Company           : 

File Version      : 

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\080515-7035-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.464

Dump File Time    : 05.08.2015 02:12:03

==================================================
 

==================================================

Dump File         : 080415-6864-01.dmp

Crash Time        : 04.08.2015 22:55:39

Bug Check String  : PFN_LIST_CORRUPT

Bug Check Code    : 0x0000004e

Parameter 1       : 00000000`00000099

Parameter 2       : 00000000`000762a9

Parameter 3       : 00000000`00000002

Parameter 4       : 00000000`0006bfa8

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+748c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\080415-6864-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.448

Dump File Time    : 04.08.2015 22:56:08

==================================================
 

==================================================

Dump File         : 080415-7113-01.dmp

Crash Time        : 04.08.2015 22:19:58

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a25270

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : Ntfs.sys

Caused By Address : Ntfs.sys+a3b80

File Description  : 

Product Name      : 

Company           : 

File Version      : 

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\080415-7113-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.480

Dump File Time    : 04.08.2015 22:20:26

==================================================
 

==================================================

Dump File         : 080415-6910-01.dmp

Crash Time        : 04.08.2015 21:01:20

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041201

Parameter 2       : fffff680`0000c0e0

Parameter 3       : f6500000`3962c867

Parameter 4       : fffffa80`0a068a30

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+748c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\080415-6910-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.456

Dump File Time    : 04.08.2015 21:01:48

==================================================
 

==================================================

Dump File         : 080415-8392-01.dmp

Crash Time        : 04.08.2015 15:27:21

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a25270

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+748c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\080415-8392-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.504

Dump File Time    : 04.08.2015 15:28:11

==================================================
 

==================================================

Dump File         : 080415-12370-01.dmp

Crash Time        : 04.08.2015 07:39:58

Bug Check String  : SYSTEM_SERVICE_EXCEPTION

Bug Check Code    : 0x0000003b

Parameter 1       : 00000000`c0000005

Parameter 2       : fffff800`033989c9

Parameter 3       : fffff880`08325840

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+748c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\080415-12370-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.368

Dump File Time    : 04.08.2015 07:40:29

==================================================
 

==================================================

Dump File         : 080415-12823-01.dmp

Crash Time        : 04.08.2015 07:39:20

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a25270

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+748c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\080415-12823-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.480

Dump File Time    : 04.08.2015 07:39:52

==================================================
 

==================================================

Dump File         : 080415-5304-01.dmp

Crash Time        : 04.08.2015 07:16:10

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a252a0

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+748c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\080415-5304-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.416

Dump File Time    : 04.08.2015 07:16:34

==================================================
 

==================================================

Dump File         : 080415-4633-01.dmp

Crash Time        : 04.08.2015 07:15:41

Bug Check String  : SYSTEM_SERVICE_EXCEPTION

Bug Check Code    : 0x0000003b

Parameter 1       : 00000000`c0000005

Parameter 2       : fffff800`0331882f

Parameter 3       : fffff880`07d90e90

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+748c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\080415-4633-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.072

Dump File Time    : 04.08.2015 07:16:03

==================================================
 

==================================================

Dump File         : 080415-5444-01.dmp

Crash Time        : 04.08.2015 07:12:55

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a25240

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+748c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\080415-5444-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.056

Dump File Time    : 04.08.2015 07:13:46

==================================================
 

==================================================

Dump File         : 080415-4773-01.dmp

Crash Time        : 04.08.2015 07:11:58

Bug Check String  : BAD_POOL_HEADER

Bug Check Code    : 0x00000019

Parameter 1       : 00000000`00000003

Parameter 2       : fffffa80`06634be0

Parameter 3       : fffffa80`06e34be0

Parameter 4       : fffffa80`06e34be0

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+748c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\080415-4773-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.352

Dump File Time    : 04.08.2015 07:12:48

==================================================
 

==================================================

Dump File         : 080315-6536-01.dmp

Crash Time        : 03.08.2015 14:05:32

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a25270

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+748c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\080315-6536-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.280

Dump File Time    : 03.08.2015 14:06:01

==================================================

Windows Repair Tool laufen lassen:
Windows reparieren - so geht's - Anleitungen

Mir ist es nicht möglich, dieses Programm (selbst im abgesicherten Modus!!) bis zum Ende erfolgreich arbeiten zu lassen, da mein PC immer an der gleichen Stelle abstürzt und ein Bluescreen erscheint

Code:

==================================================

Dump File         : 081815-9422-01.dmp

Crash Time        : 18.08.2015 00:07:02

Bug Check String  : SYSTEM_SERVICE_EXCEPTION

Bug Check Code    : 0x0000003b

Parameter 1       : 00000000`c0000005

Parameter 2       : fffff800`033b8307

Parameter 3       : fffff880`0bc4eec0

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081815-9422-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.568

Dump File Time    : 18.08.2015 00:07:35

==================================================
 

==================================================

Dump File         : 081815-8470-01.dmp

Crash Time        : 18.08.2015 00:05:17

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`048e7840

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : Ntfs.sys

Caused By Address : Ntfs.sys+a3b80

File Description  : 

Product Name      : 

Company           : 

File Version      : 

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081815-8470-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.616

Dump File Time    : 18.08.2015 00:05:49

==================================================
 

==================================================

Dump File         : 081715-10452-01.dmp

Crash Time        : 17.08.2015 23:41:35

Bug Check String  : NTFS_FILE_SYSTEM

Bug Check Code    : 0x00000024

Parameter 1       : 00000000`001904fb

Parameter 2       : fffff880`01fa7728

Parameter 3       : fffff880`01fa6f80

Parameter 4       : fffff880`0128e019

Caused By Driver  : Ntfs.sys

Caused By Address : Ntfs.sys+8b019

File Description  : 

Product Name      : 

Company           : 

File Version      : 

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081715-10452-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 272.856

Dump File Time    : 17.08.2015 23:42:21

==================================================
 

==================================================

Dump File         : 081715-7191-01.dmp

Crash Time        : 17.08.2015 22:30:59

Bug Check String  : NTFS_FILE_SYSTEM

Bug Check Code    : 0x00000024

Parameter 1       : 00000000`001904fb

Parameter 2       : fffff880`03f57ea8

Parameter 3       : fffff880`03f57700

Parameter 4       : fffff880`01246c25

Caused By Driver  : Ntfs.sys

Caused By Address : Ntfs.sys+fc25

File Description  : 

Product Name      : 

Company           : 

File Version      : 

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081715-7191-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 272.856

Dump File Time    : 17.08.2015 22:31:35

==================================================
 

==================================================

Dump File         : 081715-5007-01.dmp

Crash Time        : 17.08.2015 21:56:01

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a252a0

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081715-5007-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 272.856

Dump File Time    : 17.08.2015 22:28:10

==================================================
 

==================================================

Dump File         : 081715-6427-01.dmp

Crash Time        : 17.08.2015 21:49:55

Bug Check String  : NTFS_FILE_SYSTEM

Bug Check Code    : 0x00000024

Parameter 1       : 00000000`001904fb

Parameter 2       : fffff880`01fae5a8

Parameter 3       : fffff880`01fade00

Parameter 4       : fffff800`02489469

Caused By Driver  : Ntfs.sys

Caused By Address : Ntfs.sys+4211

File Description  : 

Product Name      : 

Company           : 

File Version      : 

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081715-6427-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 272.856

Dump File Time    : 17.08.2015 21:52:40

==================================================
 

==================================================

Dump File         : 081715-6708-01.dmp

Crash Time        : 17.08.2015 21:46:38

Bug Check String  : BAD_POOL_HEADER

Bug Check Code    : 0x00000019

Parameter 1       : 00000000`00000003

Parameter 2       : fffff8a0`0c6d2090

Parameter 3       : fffffa80`084a8ba0

Parameter 4       : 3f3f3f3f`3f3f3f3f

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081715-6708-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 272.856

Dump File Time    : 17.08.2015 21:47:17

==================================================
 

==================================================

Dump File         : 081715-5881-01.dmp

Crash Time        : 17.08.2015 21:04:34

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a25270

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081715-5881-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.560

Dump File Time    : 17.08.2015 21:05:03

==================================================
 

==================================================

Dump File         : 081715-6146-01.dmp

Crash Time        : 17.08.2015 21:03:59

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a252d0

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : Ntfs.sys

Caused By Address : Ntfs.sys+a3b80

File Description  : 

Product Name      : 

Company           : 

File Version      : 

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081715-6146-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.616

Dump File Time    : 17.08.2015 21:04:31

==================================================
 

==================================================

Dump File         : 081715-5772-01.dmp

Crash Time        : 17.08.2015 02:24:47

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a25270

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081715-5772-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.304

Dump File Time    : 17.08.2015 13:47:35

==================================================
 

==================================================

Dump File         : 081715-5787-01.dmp

Crash Time        : 17.08.2015 02:10:57

Bug Check String  : SYSTEM_SERVICE_EXCEPTION

Bug Check Code    : 0x0000003b

Parameter 1       : 00000000`c0000005

Parameter 2       : fffff800`0320eb05

Parameter 3       : fffff880`08136030

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081715-5787-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.424

Dump File Time    : 17.08.2015 02:11:28

==================================================
 

==================================================

Dump File         : 081715-6505-01.dmp

Crash Time        : 17.08.2015 01:57:37

Bug Check String  : PFN_LIST_CORRUPT

Bug Check Code    : 0x0000004e

Parameter 1       : 00000000`00000099

Parameter 2       : 00000000`001be4d2

Parameter 3       : 00000000`00000002

Parameter 4       : 00000000`0012002b

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081715-6505-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.592

Dump File Time    : 17.08.2015 01:58:20

==================================================
 

==================================================

Dump File         : 081615-12620-01.dmp

Crash Time        : 16.08.2015 23:29:05

Bug Check String  : NTFS_FILE_SYSTEM

Bug Check Code    : 0x00000024

Parameter 1       : 00000000`001904fb

Parameter 2       : fffff880`0b65db08

Parameter 3       : fffff880`0b65d360

Parameter 4       : fffff880`01343355

Caused By Driver  : Ntfs.sys

Caused By Address : Ntfs.sys+fc355

File Description  : 

Product Name      : 

Company           : 

File Version      : 

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081615-12620-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.200

Dump File Time    : 16.08.2015 23:29:56

==================================================
 

==================================================

Dump File         : 081615-9469-01.dmp

Crash Time        : 16.08.2015 23:28:27

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a252d0

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081615-9469-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.384

Dump File Time    : 16.08.2015 23:29:00

==================================================
 

==================================================

Dump File         : 081615-7425-01.dmp

Crash Time        : 16.08.2015 12:29:39

Bug Check String  : IRQL_NOT_LESS_OR_EQUAL

Bug Check Code    : 0x0000000a

Parameter 1       : 00000000`00000000

Parameter 2       : 00000000`00000002

Parameter 3       : 00000000`00000001

Parameter 4       : fffff800`030e2ffc

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081615-7425-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.328

Dump File Time    : 16.08.2015 12:31:15

==================================================
 

==================================================

Dump File         : 081615-6302-01.dmp

Crash Time        : 16.08.2015 07:17:30

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a25240

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : Ntfs.sys

Caused By Address : Ntfs.sys+a3b80

File Description  : 

Product Name      : 

Company           : 

File Version      : 

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081615-6302-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.608

Dump File Time    : 16.08.2015 12:29:33

==================================================
 

==================================================

Dump File         : 081615-8096-01.dmp

Crash Time        : 16.08.2015 01:40:46

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`048e78d0

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081615-8096-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.288

Dump File Time    : 16.08.2015 01:41:44

==================================================
 

==================================================

Dump File         : 081515-8970-01.dmp

Crash Time        : 15.08.2015 14:08:42

Bug Check String  : DRIVER_IRQL_NOT_LESS_OR_EQUAL

Bug Check Code    : 0x000000d1

Parameter 1       : 00000000`00000000

Parameter 2       : 00000000`00000002

Parameter 3       : 00000000`00000008

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081515-8970-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.336

Dump File Time    : 15.08.2015 14:09:35

==================================================
 

==================================================

Dump File         : 081515-11029-01.dmp

Crash Time        : 15.08.2015 11:24:41

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a25270

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081515-11029-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.488

Dump File Time    : 15.08.2015 11:25:17

==================================================
 

==================================================

Dump File         : 081415-15896-01.dmp

Crash Time        : 14.08.2015 23:36:46

Bug Check String  : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code    : 0x00000050

Parameter 1       : fffff8a0`052dbb9c

Parameter 2       : 00000000`00000000

Parameter 3       : fffff800`0335b89e

Parameter 4       : 00000000`00000002

Caused By Driver  : msahci.sys

Caused By Address : msahci.sys+4739

File Description  : 

Product Name      : 

Company           : 

File Version      : 

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081415-15896-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.208

Dump File Time    : 14.08.2015 23:37:40

==================================================
 

==================================================

Dump File         : 081415-7753-01.dmp

Crash Time        : 14.08.2015 23:35:02

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00000030

Parameter 2       : fffffa80`099567a0

Parameter 3       : fffff880`048aa000

Parameter 4       : fffff8a0`04217310

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081415-7753-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.536

Dump File Time    : 14.08.2015 23:35:45

==================================================
 

==================================================

Dump File         : 081415-8065-01.dmp

Crash Time        : 14.08.2015 23:34:17

Bug Check String  : PFN_LIST_CORRUPT

Bug Check Code    : 0x0000004e

Parameter 1       : 00000000`00000099

Parameter 2       : 00000000`0012e153

Parameter 3       : 00000000`00000000

Parameter 4       : 00000000`00061853

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081415-8065-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.624

Dump File Time    : 14.08.2015 23:34:54

==================================================
 

==================================================

Dump File         : 081415-8408-01.dmp

Crash Time        : 14.08.2015 14:53:15

Bug Check String  : SYSTEM_SERVICE_EXCEPTION

Bug Check Code    : 0x0000003b

Parameter 1       : 00000000`c0000005

Parameter 2       : fffff880`0121e7c5

Parameter 3       : fffff880`09265c80

Parameter 4       : 00000000`00000000

Caused By Driver  : Ntfs.sys

Caused By Address : Ntfs.sys+107c5

File Description  : 

Product Name      : 

Company           : 

File Version      : 

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081415-8408-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.472

Dump File Time    : 14.08.2015 14:54:43

==================================================
 

==================================================

Dump File         : 081415-11232-01.dmp

Crash Time        : 14.08.2015 02:48:45

Bug Check String  : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code    : 0x00000050

Parameter 1       : fffff8a0`04e77134

Parameter 2       : 00000000`00000000

Parameter 3       : fffff800`0333f89e

Parameter 4       : 00000000`00000002

Caused By Driver  : msahci.sys

Caused By Address : msahci.sys+4739

File Description  : 

Product Name      : 

Company           : 

File Version      : 

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081415-11232-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.312

Dump File Time    : 14.08.2015 02:49:23

==================================================
 

==================================================

Dump File         : 081415-10717-01.dmp

Crash Time        : 14.08.2015 02:25:50

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a252d0

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : Ntfs.sys

Caused By Address : Ntfs.sys+a3b80

File Description  : 

Product Name      : 

Company           : 

File Version      : 

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081415-10717-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.496

Dump File Time    : 14.08.2015 02:26:32

==================================================
 

==================================================

Dump File         : 081415-7971-01.dmp

Crash Time        : 14.08.2015 01:50:15

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00000031

Parameter 2       : fffffa80`094e20b0

Parameter 3       : fffff880`00b0a000

Parameter 4       : fffff8a0`03916fb4

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081415-7971-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.120

Dump File Time    : 14.08.2015 01:50:49

==================================================
 

==================================================

Dump File         : 081315-11294-01.dmp

Crash Time        : 13.08.2015 20:42:52

Bug Check String  : IRQL_NOT_LESS_OR_EQUAL

Bug Check Code    : 0x0000000a

Parameter 1       : fffff700`01180580

Parameter 2       : 00000000`00000000

Parameter 3       : 00000000`00000000

Parameter 4       : fffff800`030dafba

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081315-11294-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 292.968

Dump File Time    : 13.08.2015 20:44:42

==================================================
 

==================================================

Dump File         : 081315-7878-01.dmp

Crash Time        : 13.08.2015 14:11:25

Bug Check String  : BAD_POOL_CALLER

Bug Check Code    : 0x000000c2

Parameter 1       : 00000000`00000007

Parameter 2       : 00000000`0000109b

Parameter 3       : 00000000`00000000

Parameter 4       : fffff8a0`04281b50

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081315-7878-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.024

Dump File Time    : 13.08.2015 14:18:25

==================================================
 

==================================================

Dump File         : 081315-8096-01.dmp

Crash Time        : 13.08.2015 14:08:22

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a252d0

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081315-8096-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.440

Dump File Time    : 13.08.2015 14:11:20

==================================================
 

==================================================

Dump File         : 081315-7394-01.dmp

Crash Time        : 13.08.2015 02:06:40

Bug Check String  : SYSTEM_SERVICE_EXCEPTION

Bug Check Code    : 0x0000003b

Parameter 1       : 00000000`c0000005

Parameter 2       : fffff800`0334189e

Parameter 3       : fffff880`08ac15d0

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081315-7394-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.152

Dump File Time    : 13.08.2015 02:07:44

==================================================
 

==================================================

Dump File         : 081315-7753-01.dmp

Crash Time        : 13.08.2015 02:05:41

Bug Check String  : IRQL_NOT_LESS_OR_EQUAL

Bug Check Code    : 0x0000000a

Parameter 1       : 00000000`00800040

Parameter 2       : 00000000`00000002

Parameter 3       : 00000000`00000001

Parameter 4       : fffff800`03084fbc

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081315-7753-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.496

Dump File Time    : 13.08.2015 02:06:37

==================================================
 

==================================================

Dump File         : 081215-9126-01.dmp

Crash Time        : 12.08.2015 22:24:53

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a25240

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081215-9126-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 292.920

Dump File Time    : 12.08.2015 22:25:50

==================================================
 

==================================================

Dump File         : 081215-8845-01.dmp

Crash Time        : 12.08.2015 03:25:03

Bug Check String  : BAD_POOL_HEADER

Bug Check Code    : 0x00000019

Parameter 1       : 00000000`00000003

Parameter 2       : fffffa80`06637020

Parameter 3       : fffffa80`06637020

Parameter 4       : fffffa80`06eb7020

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+735c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+735c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081215-8845-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.448

Dump File Time    : 12.08.2015 03:29:17

==================================================
 

==================================================

Dump File         : 081115-6770-01.dmp

Crash Time        : 11.08.2015 20:12:59

Bug Check String  : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code    : 0x00000050

Parameter 1       : fffff8a0`03cfd948

Parameter 2       : 00000000`00000000

Parameter 3       : fffff800`0347b47f

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+748c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081115-6770-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.440

Dump File Time    : 11.08.2015 20:13:25

==================================================
 

==================================================

Dump File         : 081115-6988-01.dmp

Crash Time        : 11.08.2015 19:51:30

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041201

Parameter 2       : fffff680`0000c010

Parameter 3       : a8000000`95413867

Parameter 4       : fffffa80`09a80450

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+748c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081115-6988-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.512

Dump File Time    : 11.08.2015 19:51:56

==================================================
 

==================================================

Dump File         : 081115-7612-01.dmp

Crash Time        : 11.08.2015 18:14:50

Bug Check String  : SYSTEM_THREAD_EXCEPTION_NOT_HANDLED

Bug Check Code    : 0x1000007e

Parameter 1       : ffffffff`c0000005

Parameter 2       : fffff800`031c0aab

Parameter 3       : fffff880`031cb768

Parameter 4       : fffff880`031cafc0

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+1acaab

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+1acaab

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081115-7612-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.016

Dump File Time    : 11.08.2015 18:15:14

==================================================
 

==================================================

Dump File         : 081115-8174-01.dmp

Crash Time        : 11.08.2015 18:14:17

Bug Check String  : DRIVER_OVERRAN_STACK_BUFFER

Bug Check Code    : 0x000000f7

Parameter 1       : 00000200`00c8ed10

Parameter 2       : 0000f880`01056147

Parameter 3       : ffff077f`fefa9eb8

Parameter 4       : 00000000`00000000

Caused By Driver  : fltmgr.sys

Caused By Address : fltmgr.sys+93d6

File Description  : 

Product Name      : 

Company           : 

File Version      : 

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\081115-8174-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.160

Dump File Time    : 11.08.2015 18:14:44

==================================================
 

==================================================

Dump File         : 080515-7035-01.dmp

Crash Time        : 05.08.2015 02:11:35

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a25270

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : Ntfs.sys

Caused By Address : Ntfs.sys+a3b80

File Description  : 

Product Name      : 

Company           : 

File Version      : 

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\080515-7035-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.464

Dump File Time    : 05.08.2015 02:12:03

==================================================
 

==================================================

Dump File         : 080415-6864-01.dmp

Crash Time        : 04.08.2015 22:55:39

Bug Check String  : PFN_LIST_CORRUPT

Bug Check Code    : 0x0000004e

Parameter 1       : 00000000`00000099

Parameter 2       : 00000000`000762a9

Parameter 3       : 00000000`00000002

Parameter 4       : 00000000`0006bfa8

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+748c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\080415-6864-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.448

Dump File Time    : 04.08.2015 22:56:08

==================================================
 

==================================================

Dump File         : 080415-7113-01.dmp

Crash Time        : 04.08.2015 22:19:58

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a25270

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : Ntfs.sys

Caused By Address : Ntfs.sys+a3b80

File Description  : 

Product Name      : 

Company           : 

File Version      : 

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\080415-7113-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.480

Dump File Time    : 04.08.2015 22:20:26

==================================================
 

==================================================

Dump File         : 080415-6910-01.dmp

Crash Time        : 04.08.2015 21:01:20

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041201

Parameter 2       : fffff680`0000c0e0

Parameter 3       : f6500000`3962c867

Parameter 4       : fffffa80`0a068a30

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+748c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\080415-6910-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.456

Dump File Time    : 04.08.2015 21:01:48

==================================================
 

==================================================

Dump File         : 080415-8392-01.dmp

Crash Time        : 04.08.2015 15:27:21

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a25270

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+748c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\080415-8392-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.504

Dump File Time    : 04.08.2015 15:28:11

==================================================
 

==================================================

Dump File         : 080415-12370-01.dmp

Crash Time        : 04.08.2015 07:39:58

Bug Check String  : SYSTEM_SERVICE_EXCEPTION

Bug Check Code    : 0x0000003b

Parameter 1       : 00000000`c0000005

Parameter 2       : fffff800`033989c9

Parameter 3       : fffff880`08325840

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+748c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\080415-12370-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.368

Dump File Time    : 04.08.2015 07:40:29

==================================================
 

==================================================

Dump File         : 080415-12823-01.dmp

Crash Time        : 04.08.2015 07:39:20

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a25270

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+748c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\080415-12823-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.480

Dump File Time    : 04.08.2015 07:39:52

==================================================
 

==================================================

Dump File         : 080415-5304-01.dmp

Crash Time        : 04.08.2015 07:16:10

Bug Check String  : MEMORY_MANAGEMENT

Bug Check Code    : 0x0000001a

Parameter 1       : 00000000`00041790

Parameter 2       : fffffa80`04a252a0

Parameter 3       : 00000000`0000ffff

Parameter 4       : 00000000`00000000

Caused By Driver  : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+748c0

File Description  : NT Kernel & System

Product Name      : Microsoft® Windows® Operating System

Company           : Microsoft Corporation

File Version      : 6.1.7601.18933 (win7sp1_gdr.150715-0600)

Processor         : x64

Crash Address     : ntoskrnl.exe+748c0

Stack Address 1   : 

Stack Address 2   : 

Stack Address 3   : 

Computer Name     : 

Full Path         : C:\Windows\Minidump\080415-5304-01.dmp

Processors Count  : 4

Major Version     : 15

Minor Version     : 7601

Dump File Size    : 293.416

Dump File Time    : 04.08.2015 07:16:34

==================================================

Gruß

D4sherInc

Dann hilft nur ein Inplace Upgrade. Windows DVD da?

Windows DVD ist vorhanden.

Gruß

D4sherInc

Dann bitte mal ein Inplace Upgrade machen :)
Inplace Upgrade - Windows reparieren - Anleitungen

Fehlermeldung:
"Die Antwortdatei für die unbeaufsichtigte Installation [D:\unattend.xml] konnte nicht analysiert oder verarbeitet werden. Die angegebene Datei ist nicht vorhanden."

bzw.:
"Es konnten keine Informationen für [OSImage] gesammelt werden, da die angegebene Abbilddatei [install.wim] nicht vorhanden ist." beim starten des Setups.

Dadurch kann ich kein Upgrade auf x64 machen. Mit x32 komme ich bis zum Upgrade, bei dem es natürlich bei der Kompatibilität hapert.

Gruß

D4sherInc

Ehm....ja. Dann werden die Optionen schon weniger.

Gibt es eine möglichkeit, meine Software komplett zu Nullen, also zu resetten, wo ich dann Windows mitsamt Hardware Treibern neu auflege? Benötigte Software zur neuinstallation ist dafür vorhanden, ich bräuchte nur einen weg, alles zu resetten. Verluste von Dateien sind zweitrangig.

Gruß

D4sherInc

EInfach von der Windows DVD booten und formatieren, dann neu installieren :)

Selbst nach kompletter formatierung aller meiner festplatten (mit starthilfe/installations-menü und mitsamt cmd befehl "format fs=ntfs label="..." " und darauffolgender neuinstallation von Windows treten immer noch ähnliche symptome auf wie z.B. bluescreens oder "er ist tot, jimmy" im browser. Ich hätte 2 vermutungen:
1) virus ist im Bios
2)hardware ist beschädigt

An der hardware hab ich jedoch nichts genaueres gefunden (wüsste auch nicht, was unnormal erscheinen würde).

Grüße

D4sherInc

Zitat:

1) virus ist im Bios
2)hardware ist beschädigt

3) Treiber

ich setz nen Monatslohn auf 2 oder 3, denn 1 gibt es nicht :)

Ich habe die Vermutung es könnte am RAM liegen, da immer wieder bluescreens mit BAD_POOL_HEADER sowie MEMORY_MANAGEMENT als fehlermeldungen erscheinen. Auch glaube ich dass das crashen der Browsertabs damit zusammenhängt.
was kann ich diesbezüglich mit dem RAM machen, um ihn zu checken / reparieren? oder muss ich ihn eventuell ersetzen?

Gruß

D4sherInc

Teste den RAM mal mit dem Tool Memtest86+

Getan, jedoch verpasst den Report abzuschicken (hab ihn jedoch fotografiert und abgeschrieben):

Code:

Test Start Time  :  2015-09-02 18:40:00

Elapsed Time  :  6:08:38

# Tests Passed:  4/48 (8%)
 

Lowest Error Address:  0x26D465F8 (621MB)

Highest Error Address:  0X1FC4462C0 (8132MB)

Bits in Error Mask:  0000000000BB4000

Bits in Error - Total:  7  Min: 0   Max:  4   Avg:  1

Max Contiguous Errors:  1
 

<Press any kay to continue>
 

----------------------------------------------------------
 

Test        Errors

0        0

1        3755

2        3757

3        75948

4        301860        

5        374895

6        26658

7        1223074

8        149363

9        17663

10        7736

13        7788

Das erschien am Ende des MemTest86+ auf meinem Bildschirm, ich kann jedoch nichts mit den ausgegebenen Daten anfangen. Was genau sagen mir diese Daten und was soll ich als nächstes machen?

Gruß

D4sherInc

Sind schon viele Fehler drin.....