Hier die FRST.txt
FRST Logfile:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-06-2013
Ran by User (administrator) on 15-06-2013 15:31:59
Running from C:\Users\User\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Samsung India Software Center) C:\Program Files\Samsung\FrameManager\sam_service.exe
(Samsung Electronics Co. Ltd) C:\Program Files\Samsung\FrameManager\sam_controller.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\avp.exe
(Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe
(Logitech Inc.) C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.145\GoogleCrashHandler.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.145\GoogleCrashHandler64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Kone Pure Mouse\KonePureMonitor.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\avp.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(TeamSpeak Systems GmbH) C:\Program Files (x86)\Teamspeak3 Client\ts3client_win64.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Dropbox, Inc.) C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [12445288 2012-01-16] (Realtek Semiconductor)
Winlogon\Notify\klogon: %SystemRoot%\System32\klogon.dll (Kaspersky Lab ZAO)
HKCU\...\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun [19603048 2013-06-03] (Skype Technologies S.A.)
HKCU\...\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun [1475584 2010-11-21] (Microsoft Corporation)
HKCU\...\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun [3672640 2013-03-14] (Disc Soft Ltd)
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKLM-x32\...\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [291608 2012-01-05] (Intel Corporation)
HKLM-x32\...\Run: [RoccatKonePure] "C:\Program Files (x86)\ROCCAT\Kone Pure Mouse\KonePureMonitor.EXE" [569040 2012-11-30] (ROCCAT GmbH)
HKLM-x32\...\Run: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\avp.exe" [202328 2012-08-30] (Kaspersky Lab ZAO)
HKU\Default\...\Run: [Duden Korrektor SysTray] C:\Program Files (x86)\Duden\Duden Korrektor\DKTray.exe [336560 2010-10-04] (Expert System S.p.A.)
HKU\Default User\...\Run: [Duden Korrektor SysTray] C:\Program Files (x86)\Duden\Duden Korrektor\DKTray.exe [336560 2010-10-04] (Expert System S.p.A.)
HKU\Gast\...\Run: [Start WingMan Profiler] "C:\Program Files (x86)\Logitech\Profiler\lwemon.exe" /noui [77824 2004-04-23] (Logitech Inc.)
HKU\Gast\...\Run: [Duden Korrektor SysTray] C:\Program Files (x86)\Duden\Duden Korrektor\DKTray.exe [336560 2010-10-04] (Expert System S.p.A.)
HKU\Gast\...\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun [19603048 2013-06-03] (Skype Technologies S.A.)
HKU\Gast\...\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun [3672640 2013-03-14] (Disc Soft Ltd)
HKU\Gast\...\Policies\system: [LogonHoursAction] 2
HKU\Gast\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\UpdatusUser\...\Run: [StartWMDriverWiz] C:\Windows\system32\rundll32.exe C:\PROGRA~2\COMMON~1\Logitech\WmDrivers\wmwizard.dll,WMWizardMain [356352 2004-04-23] (Logitech Inc.)
HKU\UpdatusUser\...\Run: [Duden Korrektor SysTray] C:\Program Files (x86)\Duden\Duden Korrektor\DKTray.exe [336560 2010-10-04] (Expert System S.p.A.)
HKU\UpdatusUser\...\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun [19603048 2013-06-03] (Skype Technologies S.A.)
HKU\UpdatusUser\...\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun [3672640 2013-03-14] (Disc Soft Ltd)
HKU\UpdatusUser\...\Policies\system: [LogonHoursAction] 2
HKU\UpdatusUser\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM-x32 - {721061fb-eb79-4568-a03c-3ce26d68dae9} URL = hxxp://de.search.yahoo.com/search/?p={searchTerms}&fr=vc_trans_de_8197
SearchScopes: HKCU - {721061fb-eb79-4568-a03c-3ce26d68dae9} URL = hxxp://de.search.yahoo.com/search/?p={searchTerms}&fr=vc_trans_de_8197
BHO: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\x64\ievkbd.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: FilterBHO Class - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\x64\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\ievkbd.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: DNS Error Helper - {9B6B03F1-16CF-4491-BBBB-E872802DD717} - C:\ProgramData\DNSErrorHelper\bho.dll ()
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: FilterBHO Class - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\klwtbbho.dll (Kaspersky Lab ZAO)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 217.0.43.97 217.0.43.113
FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\g2d9gli4.defaultextensions.ini
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
Chrome:
=======
CHR RestoreOnStartup: "hxxp://google.de/"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.110\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.110\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.110\pdf.dll ()
CHR Plugin: (Foxit Reader Plugin for Mozilla) - C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.210.11) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Windows Activation Technologies) - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
CHR Extension: (ProxTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek\1.1.0_0
CHR Extension: (Docs) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0
CHR Extension: (Google Drive) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: (Kaspersky URL Advisor) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\12.0.2.733_0
CHR Extension: (Virtual Keyboard) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\12.0.2.733_0
CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR Extension: (Anti-Banner) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\12.0.2.733_0
==================== Services (Whitelisted) =================
R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\avp.exe [202328 2012-08-30] (Kaspersky Lab ZAO)
R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [743992 2009-12-21] (Infowatch)
R4 FrameManager Service; C:\Program Files\Samsung\FrameManager\sam_service.exe [182784 2010-03-03] (Samsung India Software Center)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-04-24] ()
S3 Samsung UPD Service2; C:\Windows\System32\SUPDSvc2.exe [165456 2011-12-02] (Samsung Electronics)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [746392 2013-03-20] (Tunngle.net GmbH)
==================== Drivers (Whitelisted) ====================
R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [85048 2009-12-14] (Infowatch)
R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66104 2009-12-14] (Infowatch)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-04-02] (DT Soft Ltd)
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [458032 2011-10-20] (Kaspersky Lab ZAO)
R1 kl2; C:\Windows\System32\DRIVERS\kl2.sys [13616 2011-10-20] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [636760 2013-03-02] (Kaspersky Lab)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29488 2011-03-10] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [22544 2009-11-02] (Kaspersky Lab)
R3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S3 miniusb; C:\Windows\System32\DRIVERS\sam_miniusb.sys [23480 2010-03-04] (Samsung India Software Center)
R3 SODI; C:\Windows\System32\DRIVERS\sam_miniport.sys [30776 2010-03-04] (Samsung India Software Center)
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
S3 vvftav; C:\Windows\System32\drivers\vvftav.sys [300800 2007-02-02] (Vimicro Corporation)
S3 ZSMC0305; C:\Windows\System32\Drivers\usbVM305.sys [1541120 2007-03-08] (Vimicro Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 gdrv; \??\C:\Windows\gdrv.sys [x]
S3 papycpu; No ImagePath
S0x01000000 papycpu2; \SystemRoot\System32\DRIVERS\papycpu2.sys [x]
S0x01000000 papyjoy; \SystemRoot\System32\DRIVERS\papyjoy.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
S3 WinRing0_1_2_0; \??\C:\Users\User\AppData\Local\Temp\tmp624B.tmp [x]
S1 XSpaceWg; \??\C:\Windows\system32\drivers\XSpaceWg.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-06-15 15:31 - 2013-06-15 15:31 - 00000000 ____D C:\FRST
2013-06-15 15:30 - 2013-06-15 15:30 - 01920398 ____A (Farbar) C:\Users\User\Desktop\FRST64.exe
2013-06-15 14:18 - 2013-06-15 14:18 - 00000000 ____D C:\Users\User\Documents\Minecraft
2013-06-15 13:20 - 2013-06-15 13:20 - 00000000 ____D C:\ProgramData\VS Revo Group
2013-06-15 13:09 - 2013-06-15 13:09 - 00001109 ____A C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-06-15 13:09 - 2013-06-15 13:09 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-06-15 13:09 - 2013-04-04 14:50 - 00025928 ____A (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbam.sys
2013-06-15 12:56 - 2013-06-15 12:56 - 00001063 ____A C:\AdwCleaner[S3].txt
2013-06-15 12:55 - 2013-06-15 12:55 - 00001001 ____A C:\AdwCleaner[R3].txt
2013-06-13 17:48 - 2013-06-08 16:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-13 17:48 - 2013-06-08 16:07 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-13 17:48 - 2013-06-08 16:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-13 17:48 - 2013-06-08 16:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-13 17:48 - 2013-06-08 16:06 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-13 17:48 - 2013-06-08 14:28 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-13 17:48 - 2013-06-08 13:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-13 17:48 - 2013-06-08 13:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-13 17:48 - 2013-06-08 13:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-13 17:48 - 2013-06-08 13:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-13 17:48 - 2013-06-08 13:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-13 17:48 - 2013-06-08 13:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-12 17:16 - 2013-05-17 03:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-12 17:16 - 2013-05-17 03:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-12 17:16 - 2013-05-17 03:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-12 17:16 - 2013-05-17 03:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-12 17:16 - 2013-05-17 03:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-12 17:16 - 2013-05-17 03:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-12 17:16 - 2013-05-17 03:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-12 17:16 - 2013-05-17 03:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-12 17:16 - 2013-05-17 02:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-12 17:16 - 2013-05-17 02:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-12 17:16 - 2013-05-17 02:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-12 17:16 - 2013-05-17 02:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-12 17:16 - 2013-05-17 02:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-12 17:16 - 2013-05-17 02:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-12 17:16 - 2013-05-17 02:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-12 17:16 - 2013-05-17 02:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-12 17:16 - 2013-05-17 02:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-12 17:16 - 2013-05-14 14:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-12 17:16 - 2013-05-14 10:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-12 16:16 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 16:16 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 16:16 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 16:16 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 16:16 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-12 16:16 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-12 16:16 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 16:16 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 16:16 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-12 16:16 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-12 16:16 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-12 16:16 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-12 16:16 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 16:16 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 16:16 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-06-12 16:16 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-12 16:16 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-12 16:16 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-12 16:16 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-08 20:44 - 2013-06-08 20:47 - 00000000 ____D C:\Users\User\AppData\Roaming\.technic - Kopie
2013-06-08 20:44 - 2013-06-08 20:44 - 00000000 ____D C:\Users\User\AppData\Roaming\.techniclauncher - Kopie
2013-06-08 16:15 - 2013-06-08 16:15 - 00108448 ____A (Oracle Corporation) C:\Windows\System32\WindowsAccessBridge-64.dll
2013-06-08 16:15 - 2013-06-08 16:14 - 00311200 ____A (Oracle Corporation) C:\Windows\System32\javaws.exe
2013-06-08 16:15 - 2013-06-08 16:14 - 00188832 ____A (Oracle Corporation) C:\Windows\System32\javaw.exe
2013-06-08 16:15 - 2013-06-08 16:14 - 00188320 ____A (Oracle Corporation) C:\Windows\System32\java.exe
2013-06-08 16:14 - 2013-06-08 16:14 - 00000000 ____D C:\Program Files\Java
2013-06-08 16:14 - 2013-06-08 16:13 - 00263584 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-06-08 16:13 - 2013-06-08 16:13 - 00174496 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-06-08 16:13 - 2013-06-08 16:13 - 00174496 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-06-08 16:13 - 2013-06-08 16:13 - 00095648 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-06-08 16:13 - 2013-06-08 16:13 - 00000000 ____D C:\Program Files (x86)\Java
2013-06-08 16:11 - 2013-06-08 16:11 - 00000810 ____A C:\Windows\System32\cc_20130608_161137.reg
2013-06-08 15:44 - 2013-06-15 13:20 - 00001077 ____A C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2013-06-08 15:44 - 2013-06-08 15:44 - 00000000 ____D C:\Users\User\AppData\Local\VS Revo Group
2013-06-08 15:44 - 2013-06-08 15:44 - 00000000 ____D C:\Program Files\VS Revo Group
2013-06-08 15:44 - 2009-12-30 11:21 - 00031800 ____A (VS Revo Group) C:\Windows\System32\Drivers\revoflt.sys
2013-06-08 13:56 - 2013-06-08 13:56 - 00056159 ____A C:\Users\User\Desktop\1.5.1 Car mod v3.0.zip
2013-06-08 12:30 - 2013-06-08 12:30 - 00001836 ____A C:\Windows\System32\cc_20130608_123004.reg
2013-06-08 12:27 - 2013-06-08 12:27 - 00002758 ____A C:\Windows\System32\cc_20130608_122715.reg
2013-06-08 12:26 - 2013-06-08 12:26 - 00032032 ____A C:\Windows\System32\cc_20130608_122655.reg
2013-06-08 12:11 - 2013-06-08 12:11 - 00000942 ____A C:\AdwCleaner[R2].txt
2013-06-08 12:05 - 2013-06-08 12:05 - 00001799 ____A C:\AdwCleaner[S2].txt
2013-06-08 12:05 - 2013-06-08 12:05 - 00001737 ____A C:\AdwCleaner[R1].txt
2013-06-08 11:47 - 2013-06-08 11:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-06-07 13:44 - 2013-06-08 11:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-06-03 16:36 - 2013-06-08 11:43 - 00000000 ____D C:\Program Files (x86)\Aurora
2013-06-03 16:19 - 2013-06-12 16:11 - 02527522 ____A () C:\Users\User\Desktop\TechnicLauncher.exe
2013-06-01 19:10 - 2013-06-01 19:10 - 00000000 ____D C:\ProgramData\Caphyon
2013-06-01 19:09 - 2013-06-01 19:09 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2013-06-01 19:09 - 2013-06-01 19:09 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2013-06-01 19:06 - 2013-06-01 19:06 - 00000000 ____D C:\Users\User\AppData\Roaming\TJMM Assemblys
2013-05-31 23:25 - 2013-05-31 23:25 - 00000000 ____D C:\Users\User\AppData\Roaming\.mc3totalconversion
2013-05-31 23:24 - 2013-06-15 12:44 - 00000000 ____D C:\Users\User\AppData\Roaming\.techniclauncher
2013-05-31 23:24 - 2013-05-31 23:24 - 00703117 ____A C:\Users\User\AppData\Roaming\technic-launcher.jar
2013-05-29 22:14 - 2013-05-29 22:14 - 00000000 ____D C:\Program Files\K-Lite Codec Pack x64
2013-05-29 22:14 - 2012-06-25 20:00 - 00092160 ____A C:\Windows\System32\ff_vfw.dll
2013-05-29 22:14 - 2012-06-09 19:21 - 00206336 ____A C:\Windows\System32\unrar.dll
2013-05-29 17:45 - 2013-05-29 17:45 - 00000000 ____D C:\Windows\de
2013-05-29 17:44 - 2013-05-29 17:44 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-05-29 17:43 - 2013-05-29 17:44 - 00000000 ____D C:\Program Files (x86)\Windows Live
2013-05-29 17:39 - 2013-05-29 22:04 - 00000000 ____D C:\Users\User\AppData\Local\Windows Live
2013-05-29 16:38 - 2013-05-29 18:42 - 00000000 ____D C:\Users\User\Desktop\bandischeiß
2013-05-29 16:32 - 2013-05-29 16:32 - 00000988 ____A C:\Users\UpdatusUser\Desktop\Bandicam.lnk
2013-05-29 16:32 - 2013-05-29 16:32 - 00000988 ____A C:\Users\Gast\Desktop\Bandicam.lnk
2013-05-29 16:32 - 2013-05-29 16:32 - 00000000 ____D C:\Program Files (x86)\Bandicam
2013-05-29 16:25 - 2013-05-29 16:32 - 00000000 ____D C:\Program Files (x86)\BandiMPEG1
2013-05-29 16:15 - 2013-05-29 16:17 - 00000000 ____D C:\Fraps
2013-05-29 16:15 - 2013-05-29 16:15 - 00000572 ____A C:\Users\Public\Desktop\Fraps.lnk
2013-05-29 15:33 - 2013-05-29 15:33 - 05366380 ____A C:\Users\User\Desktop\minecraft.jar
2013-05-29 14:30 - 2013-05-29 14:30 - 00001865 ____A C:\Users\UpdatusUser\Desktop\rFactor.lnk
2013-05-29 14:30 - 2013-05-29 14:30 - 00001865 ____A C:\Users\Gast\Desktop\rFactor.lnk
2013-05-29 14:26 - 2013-05-29 17:55 - 00000000 ____D C:\Program Files (x86)\rFactor
2013-05-29 13:43 - 2013-05-29 17:45 - 00001103 ____A C:\Users\Public\Desktop\Craften Terminal.lnk
2013-05-29 13:43 - 2013-05-29 17:45 - 00000000 ____D C:\Program Files (x86)\Craften Terminal
2013-05-29 13:43 - 2013-05-29 13:43 - 00000000 ____D C:\Users\User\AppData\Local\Craften_Dev_Team
2013-05-28 16:30 - 2013-05-29 17:42 - 00000000 ____D C:\Users\User\Downloads\rfactor
2013-05-23 16:19 - 2013-05-31 13:08 - 00000000 ____D C:\Users\User\Desktop\BombermanV096Beta
2013-05-22 16:04 - 2013-05-22 16:11 - 00000000 ____D C:\Users\User\Downloads\gilde2
2013-05-21 21:29 - 2013-05-21 21:29 - 00000044 ____A C:\Users\User\Documents\kaspersky lizenzkey.txt
2013-05-21 16:10 - 2013-05-21 16:10 - 00000000 ____D C:\Program Files (x86)\Convar
2013-05-21 16:10 - 2003-07-18 13:58 - 00516784 ___RA (Xceed Software Inc (450) 442-2626 support@xceedsoft.com www.xceedsoft.com) C:\Windows\SysWOW64\XceedCry.dll
2013-05-21 16:10 - 2002-04-12 13:19 - 00028672 ____A C:\Windows\SysWOW64\DartWeb.oca
2013-05-21 16:10 - 2002-02-28 09:46 - 00217088 ____A (Dart Communications) C:\Windows\SysWOW64\DartSock.dll
2013-05-21 16:10 - 2002-02-21 10:12 - 00118784 ____A (Dart Communications) C:\Windows\SysWOW64\DartWeb.dll
2013-05-21 16:10 - 2002-02-04 02:43 - 00044544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msxml4a.dll
2013-05-21 16:10 - 1998-06-18 00:00 - 00089360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\VB5DB.DLL
2013-05-21 16:10 - 1998-06-13 22:53 - 00044544 ____A () C:\Windows\SysWOW64\Gif89.dll
2013-05-17 21:55 - 2013-05-17 22:01 - 00000000 ____D C:\Program Files (x86)\The Guild 2 - Renaissance
2013-05-17 18:09 - 2013-05-17 18:09 - 00000000 ____D C:\Users\User\Documents\Eden Games
2013-05-17 18:07 - 2013-05-17 18:07 - 00000000 ____D C:\Users\User\AppData\Local\CrashRpt
2013-05-17 17:38 - 2013-05-17 17:38 - 00000000 ____D C:\Program Files (x86)\Atari
2013-05-17 16:21 - 2013-04-10 08:01 - 00983400 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-05-17 16:21 - 2013-04-10 08:01 - 00265064 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgmms1.sys
2013-05-17 16:21 - 2013-02-27 08:02 - 00111448 ____A (Microsoft Corporation) C:\Windows\System32\consent.exe
2013-05-17 16:21 - 2013-02-27 07:52 - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll
2013-05-17 16:21 - 2013-02-27 07:52 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\shdocvw.dll
2013-05-17 16:21 - 2013-02-27 07:48 - 01930752 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll
2013-05-17 16:21 - 2013-02-27 07:47 - 00070144 ____A (Microsoft Corporation) C:\Windows\System32\appinfo.dll
2013-05-17 16:21 - 2013-02-27 06:55 - 12872704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-05-17 16:21 - 2013-02-27 06:55 - 00180224 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-05-17 16:21 - 2013-02-27 06:49 - 01796096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-05-17 16:21 - 2011-02-03 13:25 - 00144384 ____A (Microsoft Corporation) C:\Windows\System32\cdd.dll
2013-05-17 16:20 - 2013-04-10 05:30 - 03153920 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-05-17 16:20 - 2013-03-19 07:53 - 00230400 ____A (Microsoft Corporation) C:\Windows\System32\wwansvc.dll
2013-05-17 16:20 - 2013-03-19 07:53 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\wwanprotdim.dll
==================== One Month Modified Files and Folders =======
2013-06-15 15:31 - 2013-06-15 15:31 - 00000000 ____D C:\FRST
2013-06-15 15:31 - 2012-03-17 01:19 - 00000000 ____D C:\Windows\Panther
2013-06-15 15:30 - 2013-06-15 15:30 - 01920398 ____A (Farbar) C:\Users\User\Desktop\FRST64.exe
2013-06-15 15:28 - 2013-03-27 17:19 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-06-15 15:28 - 2012-07-10 22:37 - 00001106 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-06-15 15:16 - 2012-06-28 19:31 - 00000000 ____D C:\Users\User\AppData\Roaming\Skype
2013-06-15 15:10 - 2012-06-30 13:57 - 00000000 ____D C:\Users\User\AppData\Roaming\TS3Client
2013-06-15 15:08 - 2012-12-16 00:07 - 00000000 ___RD C:\Users\User\Dropbox
2013-06-15 15:08 - 2012-12-16 00:04 - 00000000 ____D C:\Users\User\AppData\Roaming\Dropbox
2013-06-15 15:03 - 2013-03-06 17:09 - 00000000 ____D C:\Users\User\AppData\Roaming\.minecraft
2013-06-15 15:00 - 2012-12-23 12:23 - 01681464 ____N C:\Windows\WindowsUpdate.log
2013-06-15 14:58 - 2013-03-02 18:32 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-06-15 14:18 - 2013-06-15 14:18 - 00000000 ____D C:\Users\User\Documents\Minecraft
2013-06-15 14:10 - 2013-04-23 21:49 - 00478584 ____A C:\Users\User\Desktop\MinecraftDev.exe
2013-06-15 13:25 - 2013-01-13 01:48 - 01601946 ____A C:\Windows\SysWOW64\PerfStringBackup.INI
2013-06-15 13:25 - 2011-04-12 09:43 - 00702062 ____A C:\Windows\System32\perfh007.dat
2013-06-15 13:25 - 2011-04-12 09:43 - 00149618 ____A C:\Windows\System32\perfc007.dat
2013-06-15 13:24 - 2009-07-14 07:13 - 01601946 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-15 13:20 - 2013-06-15 13:20 - 00000000 ____D C:\ProgramData\VS Revo Group
2013-06-15 13:20 - 2013-06-08 15:44 - 00001077 ____A C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2013-06-15 13:19 - 2012-07-03 12:33 - 00000000 ____D C:\Users\User\Desktop\Dienstprogramme
2013-06-15 13:09 - 2013-06-15 13:09 - 00001109 ____A C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-06-15 13:09 - 2013-06-15 13:09 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-06-15 13:08 - 2012-09-27 18:18 - 00000000 ____D C:\Users\User\Downloads\setup dienstprogramme
2013-06-15 13:05 - 2009-07-14 06:45 - 00022080 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-15 13:05 - 2009-07-14 06:45 - 00022080 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-15 12:58 - 2012-07-10 22:37 - 00001102 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-06-15 12:57 - 2012-03-19 20:39 - 00000000 ____D C:\ProgramData\NVIDIA
2013-06-15 12:57 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-15 12:56 - 2013-06-15 12:56 - 00001063 ____A C:\AdwCleaner[S3].txt
2013-06-15 12:55 - 2013-06-15 12:55 - 00001001 ____A C:\AdwCleaner[R3].txt
2013-06-15 12:47 - 2013-04-14 12:51 - 00000000 ____D C:\Users\User\AppData\Roaming\Minecraft Version Changer
2013-06-15 12:44 - 2013-05-31 23:24 - 00000000 ____D C:\Users\User\AppData\Roaming\.techniclauncher
2013-06-13 17:41 - 2013-03-13 21:15 - 00000000 ____D C:\Users\User\AppData\Roaming\.spoutcraft
2013-06-13 17:40 - 2012-06-30 12:51 - 00000000 ____D C:\Users\User\Desktop\Spiele
2013-06-12 17:16 - 2012-03-30 22:40 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-12 16:59 - 2013-03-13 21:45 - 00000000 ____D C:\Users\User\AppData\Roaming\.technic
2013-06-12 16:28 - 2013-02-27 21:10 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-12 16:28 - 2013-02-27 21:10 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-12 16:11 - 2013-06-03 16:19 - 02527522 ____A () C:\Users\User\Desktop\TechnicLauncher.exe
2013-06-10 15:22 - 2013-04-14 18:38 - 00282104 ____A C:\Windows\SysWOW64\PnkBstrB.xtr
2013-06-10 15:22 - 2013-04-14 18:28 - 00282104 ____A C:\Windows\SysWOW64\PnkBstrB.exe
2013-06-10 15:22 - 2013-04-14 18:28 - 00234768 ____A C:\Windows\SysWOW64\PnkBstrB.ex0
2013-06-08 20:47 - 2013-06-08 20:44 - 00000000 ____D C:\Users\User\AppData\Roaming\.technic - Kopie
2013-06-08 20:44 - 2013-06-08 20:44 - 00000000 ____D C:\Users\User\AppData\Roaming\.techniclauncher - Kopie
2013-06-08 16:15 - 2013-06-08 16:15 - 00108448 ____A (Oracle Corporation) C:\Windows\System32\WindowsAccessBridge-64.dll
2013-06-08 16:14 - 2013-06-08 16:15 - 00311200 ____A (Oracle Corporation) C:\Windows\System32\javaws.exe
2013-06-08 16:14 - 2013-06-08 16:15 - 00188832 ____A (Oracle Corporation) C:\Windows\System32\javaw.exe
2013-06-08 16:14 - 2013-06-08 16:15 - 00188320 ____A (Oracle Corporation) C:\Windows\System32\java.exe
2013-06-08 16:14 - 2013-06-08 16:14 - 00000000 ____D C:\Program Files\Java
2013-06-08 16:14 - 2012-03-28 15:36 - 01092512 ____A (Oracle Corporation) C:\Windows\System32\npdeployJava1.dll
2013-06-08 16:14 - 2012-03-28 15:36 - 00971680 ____A (Oracle Corporation) C:\Windows\System32\deployJava1.dll
2013-06-08 16:13 - 2013-06-08 16:14 - 00263584 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-06-08 16:13 - 2013-06-08 16:13 - 00174496 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-06-08 16:13 - 2013-06-08 16:13 - 00174496 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-06-08 16:13 - 2013-06-08 16:13 - 00095648 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-06-08 16:13 - 2013-06-08 16:13 - 00000000 ____D C:\Program Files (x86)\Java
2013-06-08 16:13 - 2012-04-30 14:04 - 00866720 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2013-06-08 16:13 - 2012-03-28 15:37 - 00788896 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-06-08 16:11 - 2013-06-08 16:11 - 00000810 ____A C:\Windows\System32\cc_20130608_161137.reg
2013-06-08 16:10 - 2012-09-12 14:35 - 00000000 ____D C:\Program Files (x86)\Steam
2013-06-08 16:10 - 2012-08-13 14:15 - 00000000 ____D C:\Users\User\Documents\Schulunterlagen
2013-06-08 16:10 - 2012-04-17 19:14 - 00000000 ____D C:\Users\User\Documents\Add-in Express
2013-06-08 16:08 - 2013-06-13 17:48 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-08 16:07 - 2013-06-13 17:48 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-08 16:06 - 2013-06-13 17:48 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-08 16:06 - 2013-06-13 17:48 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-08 16:06 - 2013-06-13 17:48 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-08 15:44 - 2013-06-08 15:44 - 00000000 ____D C:\Users\User\AppData\Local\VS Revo Group
2013-06-08 15:44 - 2013-06-08 15:44 - 00000000 ____D C:\Program Files\VS Revo Group
2013-06-08 15:44 - 2012-07-26 19:45 - 00000000 ____D C:\Users\User\Downloads\Samsung Photo Frame
2013-06-08 14:28 - 2013-06-13 17:48 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-08 13:56 - 2013-06-08 13:56 - 00056159 ____A C:\Users\User\Desktop\1.5.1 Car mod v3.0.zip
2013-06-08 13:42 - 2013-06-13 17:48 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-08 13:40 - 2013-06-13 17:48 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-08 13:40 - 2013-06-13 17:48 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-08 13:40 - 2013-06-13 17:48 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-08 13:40 - 2013-06-13 17:48 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-08 13:13 - 2013-06-13 17:48 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-08 12:30 - 2013-06-08 12:30 - 00001836 ____A C:\Windows\System32\cc_20130608_123004.reg
2013-06-08 12:27 - 2013-06-08 12:27 - 00002758 ____A C:\Windows\System32\cc_20130608_122715.reg
2013-06-08 12:26 - 2013-06-08 12:26 - 00032032 ____A C:\Windows\System32\cc_20130608_122655.reg
2013-06-08 12:26 - 2012-09-21 20:54 - 00000000 ____D C:\Program Files (x86)\PDFCreator
2013-06-08 12:25 - 2012-07-11 19:28 - 00000000 ____D C:\Program Files\CCleaner
2013-06-08 12:24 - 2012-06-28 19:31 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-06-08 12:24 - 2012-06-28 19:31 - 00000000 ____D C:\ProgramData\Skype
2013-06-08 12:11 - 2013-06-08 12:11 - 00000942 ____A C:\AdwCleaner[R2].txt
2013-06-08 12:05 - 2013-06-08 12:05 - 00001799 ____A C:\AdwCleaner[S2].txt
2013-06-08 12:05 - 2013-06-08 12:05 - 00001737 ____A C:\AdwCleaner[R1].txt
2013-06-08 11:47 - 2013-06-08 11:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-06-08 11:47 - 2013-06-07 13:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-06-08 11:43 - 2013-06-03 16:36 - 00000000 ____D C:\Program Files (x86)\Aurora
2013-06-03 21:54 - 2013-02-18 18:35 - 00000000 ____D C:\ProgramData\Tunngle
2013-06-03 18:20 - 2013-01-09 17:25 - 00000000 ____D C:\Users\User\AppData\Roaming\Tunngle
2013-06-01 19:10 - 2013-06-01 19:10 - 00000000 ____D C:\ProgramData\Caphyon
2013-06-01 19:09 - 2013-06-01 19:09 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2013-06-01 19:09 - 2013-06-01 19:09 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2013-06-01 19:09 - 2012-04-02 13:05 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-06-01 19:06 - 2013-06-01 19:06 - 00000000 ____D C:\Users\User\AppData\Roaming\TJMM Assemblys
2013-06-01 19:06 - 2013-01-24 18:56 - 00000000 ____D C:\Users\User\Downloads\sims3
2013-05-31 23:25 - 2013-05-31 23:25 - 00000000 ____D C:\Users\User\AppData\Roaming\.mc3totalconversion
2013-05-31 23:24 - 2013-05-31 23:24 - 00703117 ____A C:\Users\User\AppData\Roaming\technic-launcher.jar
2013-05-31 22:30 - 2012-04-02 09:59 - 00000000 ____D C:\Program Files (x86)\Electronic Arts
2013-05-31 22:30 - 2012-03-17 01:27 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-05-31 13:08 - 2013-05-23 16:19 - 00000000 ____D C:\Users\User\Desktop\BombermanV096Beta
2013-05-29 22:15 - 2013-05-04 20:33 - 00000000 ____D C:\Users\User\AppData\Roaming\vlc
2013-05-29 22:14 - 2013-05-29 22:14 - 00000000 ____D C:\Program Files\K-Lite Codec Pack x64
2013-05-29 22:04 - 2013-05-29 17:39 - 00000000 ____D C:\Users\User\AppData\Local\Windows Live
2013-05-29 18:42 - 2013-05-29 16:38 - 00000000 ____D C:\Users\User\Desktop\bandischeiß
2013-05-29 17:55 - 2013-05-29 14:26 - 00000000 ____D C:\Program Files (x86)\rFactor
2013-05-29 17:45 - 2013-05-29 17:45 - 00000000 ____D C:\Windows\de
2013-05-29 17:45 - 2013-05-29 13:43 - 00001103 ____A C:\Users\Public\Desktop\Craften Terminal.lnk
2013-05-29 17:45 - 2013-05-29 13:43 - 00000000 ____D C:\Program Files (x86)\Craften Terminal
2013-05-29 17:44 - 2013-05-29 17:44 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-05-29 17:44 - 2013-05-29 17:43 - 00000000 ____D C:\Program Files (x86)\Windows Live
2013-05-29 17:44 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-05-29 17:42 - 2013-05-28 16:30 - 00000000 ____D C:\Users\User\Downloads\rfactor
2013-05-29 16:37 - 2012-08-26 17:43 - 00000000 ____D C:\Users\User\Documents\Bandicam
2013-05-29 16:32 - 2013-05-29 16:32 - 00000988 ____A C:\Users\UpdatusUser\Desktop\Bandicam.lnk
2013-05-29 16:32 - 2013-05-29 16:32 - 00000988 ____A C:\Users\Gast\Desktop\Bandicam.lnk
2013-05-29 16:32 - 2013-05-29 16:32 - 00000000 ____D C:\Program Files (x86)\Bandicam
2013-05-29 16:32 - 2013-05-29 16:25 - 00000000 ____D C:\Program Files (x86)\BandiMPEG1
2013-05-29 16:17 - 2013-05-29 16:15 - 00000000 ____D C:\Fraps
2013-05-29 16:15 - 2013-05-29 16:15 - 00000572 ____A C:\Users\Public\Desktop\Fraps.lnk
2013-05-29 15:33 - 2013-05-29 15:33 - 05366380 ____A C:\Users\User\Desktop\minecraft.jar
2013-05-29 14:30 - 2013-05-29 14:30 - 00001865 ____A C:\Users\UpdatusUser\Desktop\rFactor.lnk
2013-05-29 14:30 - 2013-05-29 14:30 - 00001865 ____A C:\Users\Gast\Desktop\rFactor.lnk
2013-05-29 13:43 - 2013-05-29 13:43 - 00000000 ____D C:\Users\User\AppData\Local\Craften_Dev_Team
2013-05-28 20:36 - 2012-07-10 22:37 - 00000000 ____D C:\Program Files (x86)\Google
2013-05-28 20:36 - 2012-07-10 22:36 - 00000000 ____D C:\Users\User\AppData\Local\Google
2013-05-26 12:18 - 2012-08-24 23:46 - 00000000 ____D C:\Users\User\AppData\Roaming\xVideoServiceThief
2013-05-25 19:55 - 2012-12-27 14:06 - 00000000 ____D C:\Users\User\Documents\FIFA 13
2013-05-24 21:49 - 2013-01-13 18:45 - 00000000 ___RD C:\Users\User\Virtual Machines
2013-05-22 16:11 - 2013-05-22 16:04 - 00000000 ____D C:\Users\User\Downloads\gilde2
2013-05-21 21:29 - 2013-05-21 21:29 - 00000044 ____A C:\Users\User\Documents\kaspersky lizenzkey.txt
2013-05-21 17:10 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-05-21 16:10 - 2013-05-21 16:10 - 00000000 ____D C:\Program Files (x86)\Convar
2013-05-17 22:01 - 2013-05-17 21:55 - 00000000 ____D C:\Program Files (x86)\The Guild 2 - Renaissance
2013-05-17 18:09 - 2013-05-17 18:09 - 00000000 ____D C:\Users\User\Documents\Eden Games
2013-05-17 18:07 - 2013-05-17 18:07 - 00000000 ____D C:\Users\User\AppData\Local\CrashRpt
2013-05-17 17:38 - 2013-05-17 17:38 - 00000000 ____D C:\Program Files (x86)\Atari
2013-05-17 16:52 - 2013-02-21 17:03 - 00438424 ____A C:\Windows\System32\FNTCACHE.DAT
2013-05-17 16:29 - 2012-03-19 22:36 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-05-17 03:25 - 2013-06-12 17:16 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-05-17 03:25 - 2013-06-12 17:16 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-05-17 03:25 - 2013-06-12 17:16 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-05-17 03:25 - 2013-06-12 17:16 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-05-17 03:25 - 2013-06-12 17:16 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-05-17 03:25 - 2013-06-12 17:16 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-05-17 03:25 - 2013-06-12 17:16 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-05-17 03:25 - 2013-06-12 17:16 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-05-17 02:59 - 2013-06-12 17:16 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-05-17 02:59 - 2013-06-12 17:16 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-05-17 02:58 - 2013-06-12 17:16 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-05-17 02:58 - 2013-06-12 17:16 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-05-17 02:58 - 2013-06-12 17:16 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-05-17 02:58 - 2013-06-12 17:16 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-05-17 02:58 - 2013-06-12 17:16 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-05-17 02:58 - 2013-06-12 17:16 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-05-17 02:58 - 2013-06-12 17:16 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
Files to move or delete:
====================
C:\ProgramData\ntuser.dat
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-06-06 20:57
==================== End Of Log ============================ --- --- ---
--- --- ---
Und hier die Addition.txt Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-06-2013
Ran by User at 2013-06-15 15:32:43 Run:
Running from C:\Users\User\Desktop
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
@BIOS (Version: 2.30)
2.2
64 Bit HP CIO Components Installer (Version: 7.2.4)
A321 Repaint Pack
Adobe AIR (Version: 3.7.0.1860)
Adobe Community Help (Version: 3.2.1)
Adobe Community Help (Version: 3.2.1.650)
Adobe Flash Player 11 Plugin (Version: 11.7.700.224)
Adobe Photoshop Elements 9 (Version: 9.0.3.0)
Adobe Shockwave Player 12.0 (Version: 12.0.2.122)
Aerosoft's - German Airfields FREE - Wasserkuppe (Version: 1.00)
Age of Empires II - The Conquerors - 1.0e Patch FINAL (Version: 1.0e)
Alarm für Cobra 11 - Das Syndikat
Alcor Micro USB Card Reader (Version: 3.10.142.72249)
Bandicam (Version: 1.8.7.347)
Bandisoft MPEG-1 Decoder
Battlefield Play4Free
C9
CCleaner (Version: 4.02)
CDBurnerXP (Version: 4.5.0.3717)
Cities in Motion
Cobra 11 - Crash Time (remove only)
concept/design onlineTV 8 (Version: 8.0.0.0)
Craften Terminal 3.3.4897.28268 (Version: 3.3.4897.28268)
D3DX10 (Version: 15.4.2368.0902)
DAEMON Tools Lite (Version: 4.47.1.0333)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
DIE SIEDLER - Das Erbe der Könige - Gold Edition (Version: 1.00.0000)
Die Sims™ 3 "Erstelle eine Welt"-Tool - Beta (Version: 1.18.8)
Die Sims™ 3 (Version: 1.50.56)
Die Sims™ 3 70er, 80er & 90er Accessoires (Version: 17.0.77)
Die Sims™ 3 Design-Garten-Accessoires (Version: 7.0.55)
Die Sims™ 3 Diesel Accessoires (Version: 14.0.48)
Die Sims™ 3 Einfach tierisch (Version: 10.0.96)
Die Sims™ 3 Gib Gas-Accessoires (Version: 5.0.44)
Die Sims™ 3 Jahreszeiten (Version: 16.0.136)
Die Sims™ 3 Late Night (Version: 6.0.81)
Die Sims™ 3 Lebensfreude (Version: 8.0.152)
Die Sims™ 3 Luxus-Accessoires (Version: 3.0.38)
Die Sims™ 3 Reiseabenteuer (Version: 2.0.86)
Die Sims™ 3 Showtime (Version: 12.0.273)
Die Sims™ 3 Stadt-Accessoires (Version: 9.0.73)
Die Sims™ 3 Supernatural (Version: 15.0.135)
Die Sims™ 3 Traumkarrieren (Version: 4.0.87)
Die Sims™ 3 Traumsuite-Accessoires (Version: 11.0.84)
Dropbox (Version: 2.0.22)
Duden Korrektor Standard (Version: 7.00.0000)
Elements 9 Organizer (Version: 9.0)
Elements STI Installer (Version: 1.0)
Emergency4 (Version: 1.03.001)
Empire Earth
Empire Earth II (Version: 1.20)
Empire: Total War
F1 2012
FIFA 12 (Version: 1.0.0.0)
FIFA 13 (Version: 1.0.0.0)
Fotogalerie (Version: 16.4.3508.0205)
Foxit Reader (Version: 6.0.3.524)
FrameManager (Version: 3.00.0000)
Fraps (remove only)
GameShadow (Version: 2.03.0000)
GEM+/iGOR & Lee's GPL Setup Manager 2.5.0.32
German Truck Simulator 1.00 (Version: 1.00)
Google Chrome (Version: 27.0.1453.110)
Google Earth (Version: 7.0.3.8542)
Google Update Helper (Version: 1.3.21.145)
HiSuite (Version: 32.300.12.00.06)
HP LaserJet Professional CP1520 Series
Intel(R) Management Engine Components (Version: 8.0.0.1351)
Intel(R) USB 3.0 eXtensible Host Controller Driver (Version: 1.0.1.209)
Java 7 Update 21 (64-bit) (Version: 7.0.210)
Java 7 Update 21 (Version: 7.0.210)
Java Auto Updater (Version: 2.1.9.5)
Kaspersky PURE 2.0 (Version: 12.0.2.733)
K-Lite Codec Pack 6.4.5 (64-bit) (Version: 6.4.5)
Logitech Gaming Software (Version: 4.40)
Logitech Gaming Software 5.10 (Version: 5.10.127)
Logitech Webcam Software (Version: 12.10.1113)
Logitech Webcam Software-Treiberpaket (Version: 12.10.1110)
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300)
MeatWater FO Altitude Callouts v1.0
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Age of Empires II
Microsoft Age of Empires II: The Conquerors Expansion
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Flight Simulator X (Version: 10.0.60905)
Microsoft Flight Simulator X SDK (Version: 1.00.0000)
Microsoft Flight Simulator X: Acceleration (Version: 10.0.61637.0)
Microsoft Games for Windows - LIVE (Version: 3.1.186.0)
Microsoft Games for Windows - LIVE Redistributable (Version: 3.1.99.0)
Microsoft Mathematics (Version: 4.0)
Microsoft Office 2010 Service Pack 1 (SP1)
Microsoft Office Access MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Outlook Connector (Version: 14.0.6123.5001)
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Professional 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office ScreenTip Language 2010 - Español (Version: 14.0.4763.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Single Image 2010 (Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Silverlight (Version: 5.1.20125.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (Version: 11.0.50727.1)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (Version: 11.0.50727)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (Version: 11.0.50727)
Microsoft WSE 3.0 Runtime (Version: 3.0.5305.0)
Microsoft_VC80_CRT_x86 (Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86 (Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86 (Version: 8.0.50727.4053)
Microsoft_VC90_CRT_x86 (Version: 1.00.0000)
Movie Maker (Version: 16.4.3508.0205)
Mozilla Firefox 21.0 (x86 de) (Version: 21.0)
Mozilla Maintenance Service (Version: 21.0)
MSVCRT (Version: 15.4.2862.0708)
MSVCRT110 (Version: 16.4.1108.0727)
MSVCRT110_amd64 (Version: 16.4.1109.0912)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MSXML 4.0 SP2 Parser und SDK (Version: 4.20.9818.0)
Napoleon: Total War
NASCAR® Racing 2002 Season
NASCAR® Racing 2003 Season
Need for Speed™ Most Wanted (Version: 1.5.0.0)
Need For Speed™ World (Version: 1.0.0.1166)
Notepad++ (Version: 6.3.2)
NVIDIA 3D Vision Controller Driver (Version: 275.33)
NVIDIA 3D Vision Controller-Treiber 314.22 (Version: 314.22)
NVIDIA 3D Vision Treiber 314.22 (Version: 314.22)
NVIDIA Grafiktreiber 314.22 (Version: 314.22)
NVIDIA HD-Audiotreiber 1.3.23.1 (Version: 1.3.23.1)
NVIDIA Install Application (Version: 2.1002.115.743)
NVIDIA PhysX (Version: 9.12.1031)
NVIDIA PhysX-Systemsoftware 9.12.1031 (Version: 9.12.1031)
NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.1422)
NVIDIA Systemsteuerung 314.22 (Version: 314.22)
NVIDIA Update 1.12.12 (Version: 1.12.12)
NVIDIA Update Components (Version: 1.12.12)
NYCv3.0
ON_OFF Charge B11.1102.1 (Version: 1.00.0001)
OpenAL
OpenTTD 1.2.3 (Version: 1.2.3)
Origin (Version: 8.6.0.357)
PC Inspector smart recovery (Version: 4.50)
PDFCreator (Version: 1.5.0)
Photo Common (Version: 16.4.3508.0205)
Photo Gallery (Version: 16.4.3508.0205)
ProtectDisc Driver, Version 11 (Version: 11.0.0.14)
PunkBuster Services (Version: 0.990)
RaceRoom Racing Experience
Real Environment Xtreme (Version: 1.0.2008.1128)
Realtek Ethernet Controller Driver (Version: 7.67.1226.2012)
Realtek High Definition Audio Driver (Version: 6.0.1.6554)
Revo Uninstaller Pro 3.0.5 (Version: 3.0.5)
rFactor (remove only)
ROCCAT Kone Pure Mouse Driver
Samsung Universal Print Driver PCL 6 (Version: 2.03.01.00:36)
Sierra Utilities
Silent Hunter 4 Wolves of the Pacific (Version: 1.05.0000)
Silent Hunter 5 (Version: 1.2.0)
Skype™ 6.5 (Version: 6.5.158)
Steam (Version: 1.0.0.0)
Stronghold Crusader Extreme (Version: 1.20.0000)
swMSM (Version: 12.0.0.1)
TeamSpeak 3 Client (Version: 3.0.10.1)
Test Drive Unlimited 2
The Guild 2 - Renaissance
TOYv2.0
TRFormersMOD (Version: 1.7.5a)
Tunngle beta
Ubisoft Game Launcher (Version: 1.0.0.0)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (Version: 1)
Update for Microsoft Office 2010 (KB2553065)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition
Update for Microsoft Office 2010 (KB2566458)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition
Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition
USB PC Camera VC305 (Version: 1.45.060824)
VLC media player 2.0.6 (Version: 2.0.6)
Windows Installer Clean Up (Version: 3.00.00.0000)
Windows Live Communications Platform (Version: 16.4.3508.0205)
Windows Live Essentials (Version: 16.4.3508.0205)
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)
Windows Live Installer (Version: 16.4.3508.0205)
Windows Live Photo Common (Version: 16.4.3508.0205)
Windows Live PIMT Platform (Version: 16.4.3508.0205)
Windows Live SOXE (Version: 16.4.3508.0205)
Windows Live SOXE Definitions (Version: 16.4.3508.0205)
Windows Live UX Platform (Version: 16.4.3508.0205)
Windows Live UX Platform Language Pack (Version: 16.4.3508.0205)
Windows XP Mode (Version: 1.3.7600.16422)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)
Winterberg Configurator Version WEM Confi 8.8 (Version: WEM Confi 8.8)
Worms Revolution
xVideoServiceThief (Version: 2.4.1)
==================== Restore Points =========================
08-06-2013 10:13:31 Removed Java 7 Update 21
08-06-2013 10:17:37 Removed Java 7 Update 21 (64-bit)
08-06-2013 10:18:52 Removed Java 7 Update 21
08-06-2013 10:27:44 Installed Java 7 Update 21
08-06-2013 10:29:11 Removed Java 7 Update 21
08-06-2013 10:30:28 Installed Java 7 Update 21 (64-bit)
08-06-2013 10:31:08 Installed Java 7 Update 21
08-06-2013 13:47:04 Revo Uninstaller Pro's restore point - F1 2010 Textures Edito 0.5
08-06-2013 13:49:30 Revo Uninstaller Pro's restore point - Java 7 Update 9
08-06-2013 13:50:06 Revo Uninstaller Pro's restore point - Java(TM) 6 Update 26
08-06-2013 13:51:03 Revo Uninstaller Pro's restore point - Java 7 Update 9
08-06-2013 13:52:34 Revo Uninstaller Pro's restore point - Java 7 Update 21
08-06-2013 13:53:08 Removed Java 7 Update 21
08-06-2013 13:54:27 Revo Uninstaller Pro's restore point - Java 7 Update 21 (64-bit)
08-06-2013 13:55:06 Removed Java 7 Update 21 (64-bit)
08-06-2013 13:56:33 Revo Uninstaller Pro's restore point - Java(TM) 6 Update 26
08-06-2013 14:13:19 Installed Java 7 Update 21
08-06-2013 14:14:48 Installed Java 7 Update 21 (64-bit)
12-06-2013 14:16:10 Windows Update
12-06-2013 15:15:28 Windows Update
13-06-2013 15:48:20 Windows Update
15-06-2013 11:19:56 Windows Update
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (06/15/2013 01:19:53 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: nvtray.exe, Version: 7.17.13.1422, Zeitstempel: 0x51428f51
Name des fehlerhaften Moduls: nvtray.exe, Version: 7.17.13.1422, Zeitstempel: 0x51428f51
Ausnahmecode: 0x40000015
Fehleroffset: 0x0000000000154f89
ID des fehlerhaften Prozesses: 0xad8
Startzeit der fehlerhaften Anwendung: 0xnvtray.exe0
Pfad der fehlerhaften Anwendung: nvtray.exe1
Pfad des fehlerhaften Moduls: nvtray.exe2
Berichtskennung: nvtray.exe3
Error: (06/15/2013 01:18:01 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: nvtray.exe, Version: 7.17.13.1422, Zeitstempel: 0x51428f51
Name des fehlerhaften Moduls: nvtray.exe, Version: 7.17.13.1422, Zeitstempel: 0x51428f51
Ausnahmecode: 0x40000015
Fehleroffset: 0x0000000000154f89
ID des fehlerhaften Prozesses: 0xda0
Startzeit der fehlerhaften Anwendung: 0xnvtray.exe0
Pfad der fehlerhaften Anwendung: nvtray.exe1
Pfad des fehlerhaften Moduls: nvtray.exe2
Berichtskennung: nvtray.exe3
Error: (06/15/2013 00:59:05 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/15/2013 00:42:14 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/13/2013 06:01:38 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/13/2013 03:37:08 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/12/2013 05:49:18 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/12/2013 04:09:10 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/10/2013 08:10:23 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Das Stammelement der Manifestdatei muss assembliert sein.
Error: (06/10/2013 01:32:01 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (06/15/2013 01:19:53 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Error: (06/15/2013 01:19:53 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (06/15/2013 01:18:00 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Error: (06/15/2013 01:18:00 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (06/15/2013 01:00:25 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Error: (06/15/2013 01:00:25 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (06/15/2013 00:57:47 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
papycpu2
papyjoy
XSpaceWg
Error: (06/15/2013 00:57:13 PM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\DRIVERS\papyjoy.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (06/15/2013 00:57:13 PM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\DRIVERS\papycpu2.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (06/15/2013 00:43:24 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Microsoft Office Sessions:
=========================
Error: (06/15/2013 01:19:53 PM) (Source: Application Error)(User: )
Description: nvtray.exe7.17.13.142251428f51nvtray.exe7.17.13.142251428f51400000150000000000154f89ad801ce69ba2abdad2eC:\Program Files\NVIDIA Corporation\Display\nvtray.exeC:\Program Files\NVIDIA Corporation\Display\nvtray.exe7fba9d11-d5ad-11e2-9b80-902b3410c704
Error: (06/15/2013 01:18:01 PM) (Source: Application Error)(User: )
Description: nvtray.exe7.17.13.142251428f51nvtray.exe7.17.13.142251428f51400000150000000000154f89da001ce69b731f6f52bC:\Program Files\NVIDIA Corporation\Display\nvtray.exeC:\Program Files\NVIDIA Corporation\Display\nvtray.exe3ceac37e-d5ad-11e2-9b80-902b3410c704
Error: (06/15/2013 00:59:05 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/15/2013 00:42:14 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/13/2013 06:01:38 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/13/2013 03:37:08 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/12/2013 05:49:18 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/12/2013 04:09:10 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (06/10/2013 08:10:23 PM) (Source: SideBySide)(User: )
Description: C:\Program Files (x86)\Duden\Duden Korrektor\adxloader.dll.ManifestC:\Program Files (x86)\Duden\Duden Korrektor\adxloader.dll.Manifest2
Error: (06/10/2013 01:32:01 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
CodeIntegrity Errors:
===================================
Date: 2013-02-27 15:45:18.691
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-02-27 15:45:18.660
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-02-27 15:45:18.629
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-02-27 15:45:18.613
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-02-27 15:06:43.817
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-02-27 15:06:43.786
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 20%
Total physical RAM: 16330.14 MB
Available physical RAM: 12987.02 MB
Total Pagefile: 32658.46 MB
Available Pagefile: 29372.78 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:1862.79 GB) (Free:1413.33 GB) NTFS (Disk=0 Partition=3)
Drive d: (Sims3SP08) (CDROM) (Total:3.08 GB) (Free:0 GB) UDF
Drive i: (EEARTH) (CDROM) (Total:0.54 GB) (Free:0 GB) CDFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 00000000)
Partition: GPT Partition Type
==================== End Of Log ============================ |