FIXLOG: Code:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 08-11-2014 01
Ran by Peter at 2014-11-09 11:04:33 Run:1
Running from C:\Users\Peter\Desktop
Loaded Profile: Peter (Available profiles: Peter)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
C:\Program Files (x86)\GoSave
C:\$Recycle.Bin
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:9880;https=127.0.0.1:9880
BHO: GoSave -> {58906a62-9c8b-4df2-a16b-f41875dea862} -> C:\Program Files (x86)\GoSave\rWFRkBCq6MPEh7.x64.dll ()
BHO: GoSave -> {670f7f5d-5676-42bd-868d-ad0de381d58a} -> C:\Program Files (x86)\GoSave\wqmJb8fCIbp8Aq.x64.dll ()
BHO: GoSave -> {8d7954b2-8848-47aa-a82f-566340a9e249} -> C:\Program Files (x86)\GoSave\p2Xk8Izte1Ac3T.x64.dll ()
BHO: GoSave -> {98133354-0192-4e13-813c-df8c686af727} -> C:\Program Files (x86)\GoSave\wYJ3sUiRQ6gK2L.x64.dll ()
BHO: GoSave -> {a343f700-377c-4ffd-9d27-2179966e2f5c} -> C:\Program Files (x86)\GoSave\P4nPDZUXJXHJvq.x64.dll ()
Tcpip\Parameters: [DhcpNameServer] 83.169.184.161 83.169.184.225 192.168.0.1
CHR Extension: (GoSave) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbmahgeifgdiidibnmphjgfocddpdddg [2014-11-07]
CHR Extension: (GoSave) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmkgibpmgjhnpknlgoajjpabcdkgklff [2014-11-07]
CHR Extension: (GoSave) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbdgihlglhjhlkoendanneemdnpokbji [2014-11-07]
CHR Extension: (GoSave) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjgdmiejcahjhcccmocofhiifpmofepl [2014-11-07]
CHR Extension: (GoSave) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\nhnkdcfbglkgfiafodmdfjmhbocbpona [2014-11-07]
CHR Extension: (GoSave) - C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\piekdadbpdhhnjabkloeecnbcjkajeki [2014-11-07]
R2 Oyridurate; C:\Program Files (x86)\Oyridurate\Oyridurate.exe [4377560 2014-11-03] ()
C:\Program Files (x86)\Oyridurate
C:\ProgramData\GoSave
Emptytemp:
*****************
"C:\Program Files (x86)\GoSave" => File/Directory not found.
C:\$Recycle.Bin => Moved successfully.
C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{58906a62-9c8b-4df2-a16b-f41875dea862}" => Key deleted successfully.
"HKCR\CLSID\{58906a62-9c8b-4df2-a16b-f41875dea862}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{670f7f5d-5676-42bd-868d-ad0de381d58a}" => Key deleted successfully.
"HKCR\CLSID\{670f7f5d-5676-42bd-868d-ad0de381d58a}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8d7954b2-8848-47aa-a82f-566340a9e249}" => Key deleted successfully.
"HKCR\CLSID\{8d7954b2-8848-47aa-a82f-566340a9e249}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{98133354-0192-4e13-813c-df8c686af727}" => Key deleted successfully.
"HKCR\CLSID\{98133354-0192-4e13-813c-df8c686af727}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a343f700-377c-4ffd-9d27-2179966e2f5c}" => Key deleted successfully.
"HKCR\CLSID\{a343f700-377c-4ffd-9d27-2179966e2f5c}" => Key deleted successfully.
HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\\DhcpNameServer => value deleted successfully.
C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbmahgeifgdiidibnmphjgfocddpdddg directory not found.
C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmkgibpmgjhnpknlgoajjpabcdkgklff directory not found.
C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbdgihlglhjhlkoendanneemdnpokbji directory not found.
C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjgdmiejcahjhcccmocofhiifpmofepl directory not found.
C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\nhnkdcfbglkgfiafodmdfjmhbocbpona directory not found.
C:\Users\Peter\AppData\Local\Google\Chrome\User Data\Default\Extensions\piekdadbpdhhnjabkloeecnbcjkajeki directory not found.
Oyridurate => Unable to stop service
Oyridurate => Service deleted successfully.
C:\Program Files (x86)\Oyridurate => Moved successfully.
"C:\ProgramData\GoSave" => File/Directory not found.
EmptyTemp: => Removed 1.9 GB temporary data.
The system needed a reboot.
==== End of Fixlog ====
Google Chrome konnte ich leider nicht finden, daher hab ich das ganze nochmal installiert und wieder komplett gekillt.
FRST:
FRST Logfile:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-11-2014 01
Ran by Peter (administrator) on SCHREIBERLING on 09-11-2014 11:29:57
Running from C:\Users\Peter\Desktop
Loaded Profile: Peter (Available profiles: Peter)
Platform: Windows 8.1 (Update 1) (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAEvent.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Spotify Ltd) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QuickAccess.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(VS Revo Group) C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe
(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_189.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_189.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2462536 2014-10-16] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [124208 2014-10-22] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [703736 2014-10-23] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [193568 2014-10-13] (Geek Software GmbH)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [134784 2014-02-25] ( (Atheros Communications))
HKU\S-1-5-21-3585963361-1982867813-4056610559-1001\...\Run: [Spotify Web Helper] => C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe [1168896 2014-07-11] (Spotify Ltd)
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x254F479DA5F9CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKU\S-1-5-21-3585963361-1982867813-4056610559-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKLM - {B45B1012-F1DD-4239-B168-BDBC05D707FC} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {B45B1012-F1DD-4239-B168-BDBC05D707FC} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKCU - {B45B1012-F1DD-4239-B168-BDBC05D707FC} URL =
BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll No File
BHO-x32: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll No File
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll No File
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll No File
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll No File
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\x64\mcieplg.dll No File
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll No File
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll No File
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 83.169.184.161 83.169.184.225 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\Peter\AppData\Roaming\Mozilla\Firefox\Profiles\z2j4s4ze.default-1415370319740
FF SelectedSearchEngine: Google
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-11-05]
Chrome:
=======
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888 2014-10-23] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888 2014-10-23] (Avira Operations GmbH & Co. KG)
R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [319104 2014-02-25] (Windows (R) Win 7 DDK provider)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [164656 2014-10-22] (Avira Operations GmbH & Co. KG)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573544 2014-03-21] (Acer Incorporated)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-10-16] (NVIDIA Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-03-12] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)
R3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-22] (Microsoft Corporation)
S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-03-18] (Microsoft Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [459496 2014-03-17] (Acer Incorporate)
S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-03-06] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-10-16] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-10-16] (NVIDIA Corporation)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [457960 2014-03-21] (Acer Incorporate)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] ()
R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [449768 2014-03-21] (Acer Incorporate)
S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-22] (Microsoft Corporation)
S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-22] (Microsoft Corporation)
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [222952 2014-01-24] (acer)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [348392 2014-07-11] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-07-11] (Microsoft Corporation)
S2 McAfee SiteAdvisor Service; "C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe" /McCoreSvc [X]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3888640 2014-02-14] (Qualcomm Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-23] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131608 2014-10-23] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-10-23] (Avira Operations GmbH & Co. KG)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-02-25] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
S3 GeneStor; C:\Windows\System32\drivers\GeneStor.sys [111336 2014-04-28] (GenesysLogic)
R3 iaLPSS_GPIO; C:\Windows\System32\drivers\iaLPSS_GPIO.sys [24568 2013-10-03] (Intel Corporation)
R3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [99320 2013-10-03] (Intel Corporation)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-10-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38048 2014-10-16] (NVIDIA Corporation)
S3 QRDCIO; C:\Windows\System32\drivers\QRDCIO.sys [9728 2009-10-20] (QUANTA)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16152 2014-11-06] ()
R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42224 2014-02-20] (Synaptics Incorporated)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124760 2014-07-11] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-09 11:29 - 2014-11-09 11:30 - 00015941 _____ () C:\Users\Peter\Desktop\FRST.txt
2014-11-09 11:25 - 2014-11-09 11:27 - 00000000 ____D () C:\Users\Peter\AppData\Local\Google
2014-11-09 11:25 - 2014-11-09 11:27 - 00000000 ____D () C:\Program Files (x86)\Google
2014-11-09 11:25 - 2014-11-09 11:25 - 00880272 _____ (Google Inc.) C:\Users\Peter\Downloads\ChromeSetup.exe
2014-11-09 11:04 - 2014-11-09 11:04 - 00000000 ____D () C:\Users\Peter\Desktop\FRST-OlderVersion
2014-11-08 17:47 - 2014-11-08 17:47 - 02998656 _____ (Enigma Software Group USA, LLC.) C:\Users\Peter\Downloads\SpyHunter-Installer.exe
2014-11-08 12:48 - 2014-11-08 12:48 - 00001139 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-11-08 12:48 - 2014-11-08 12:48 - 00001127 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-11-08 12:48 - 2014-11-08 12:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-11-08 12:48 - 2014-11-08 12:48 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-11-08 12:47 - 2014-11-08 12:47 - 36249264 _____ () C:\Users\Peter\Downloads\Firefox_Setup_de33.0.3.exe
2014-11-08 11:59 - 2014-11-08 11:59 - 02145792 _____ () C:\Users\Peter\Desktop\adwcleaner_4.100.exe
2014-11-08 11:20 - 2014-11-08 11:20 - 00064930 _____ () C:\Users\Peter\Downloads\FRST.txt
2014-11-08 11:20 - 2014-11-08 11:20 - 00032215 _____ () C:\Users\Peter\Downloads\Addition.txt
2014-11-08 11:19 - 2014-11-09 11:04 - 02115584 _____ (Farbar) C:\Users\Peter\Desktop\FRST64.exe
2014-11-08 11:12 - 2014-11-08 11:12 - 00854448 _____ () C:\Users\Peter\Downloads\SecurityCheck.exe
2014-11-07 19:40 - 2014-11-07 19:40 - 02347384 _____ (ESET) C:\Users\Peter\Downloads\esetsmartinstaller_deu.exe
2014-11-07 17:21 - 2014-11-07 17:21 - 09556849 _____ () C:\Users\Peter\Downloads\TouchPad_ALPS_7.2.2002.208_W7x86W7x64_A.zip
2014-11-07 17:20 - 2014-11-07 17:20 - 29634220 _____ () C:\Users\Peter\Downloads\TouchPad_Synaptics_13.2.2.0_W7x86W7x64_A.zip
2014-11-07 16:46 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-11-07 16:28 - 2014-11-07 16:41 - 00000180 _____ () C:\Users\Peter\Desktop.lnk
2014-11-07 15:51 - 2014-11-07 15:52 - 00000000 ___SD () C:\Users\Peter\Documents\Meine Shapes
2014-11-07 15:19 - 2014-11-09 11:05 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\Peter\AppData\Local\Comodo
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\Gast
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-11-07 15:19 - 2014-11-07 15:19 - 00000000 ____D () C:\Users\Administrator
2014-11-06 20:42 - 2014-11-06 20:42 - 00000000 ____D () C:\Windows\ERUNT
2014-11-06 20:41 - 2014-11-06 20:41 - 01706359 _____ (Thisisu) C:\Users\Peter\Downloads\JRT_6.3.5.exe
2014-11-06 20:41 - 2014-11-05 23:14 - 01706939 _____ (Thisisu) C:\Users\Peter\Desktop\JRT_NEW.exe
2014-11-06 19:47 - 2014-11-06 19:47 - 36250792 _____ () C:\Users\Peter\Downloads\Firefox_Setup_33.0.2DE.exe
2014-11-06 19:47 - 2014-11-06 19:47 - 00000190 _____ () C:\Users\Peter\Downloads\acv.js
2014-11-06 19:42 - 2014-11-09 11:29 - 00000000 ____D () C:\FRST
2014-11-06 19:25 - 2014-11-06 19:25 - 00244392 _____ () C:\Users\Peter\Downloads\Firefox Setup Stub 33.0.2 (1).exe
2014-11-06 19:12 - 2014-11-06 19:12 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Peter\Downloads\revosetup95.exe
2014-11-06 19:12 - 2014-11-06 19:12 - 00001248 _____ () C:\Users\Peter\Desktop\Revo Uninstaller.lnk
2014-11-06 19:12 - 2014-11-06 19:12 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-11-06 18:21 - 2014-11-06 18:21 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Peter\Downloads\mbam-setup-2.0.3.1025.exe
2014-11-06 17:49 - 2014-11-06 17:49 - 00004144 _____ () C:\Users\Peter\Downloads\adwcleaner_3.311 - Verknüpfung.lnk
2014-11-06 16:24 - 2014-11-06 16:24 - 00244392 _____ () C:\Users\Peter\Downloads\Firefox Setup Stub 33.0.2.exe
2014-11-06 16:05 - 2014-11-06 18:46 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Acer
2014-11-06 11:51 - 2014-11-08 12:54 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-06 11:51 - 2014-11-06 11:51 - 00001082 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-11-06 11:51 - 2014-11-06 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-11-06 11:51 - 2014-11-06 11:51 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-11-06 11:51 - 2014-11-06 11:51 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-11-06 11:51 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-11-06 11:51 - 2014-10-01 11:11 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-11-06 11:51 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-11-06 11:24 - 2014-11-09 10:56 - 00000000 ____D () C:\AdwCleaner
2014-11-06 11:15 - 2013-08-22 14:25 - 00000824 _____ () C:\Windows\system32\Drivers\etc\hosts.20141106-111532.backup
2014-11-06 10:34 - 2014-11-06 10:33 - 00043064 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-11-06 09:09 - 2014-11-06 09:09 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-11-06 09:08 - 2014-11-06 18:55 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-11-06 09:08 - 2014-11-06 18:55 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-11-05 22:38 - 2014-11-06 10:38 - 00000064 _____ () C:\Users\Peter\AppData\Roaming\WB.CFG
2014-11-05 22:28 - 2014-11-05 22:28 - 00000000 _____ () C:\autoexec.bat
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Programme
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-11-05 22:27 - 2014-11-05 22:27 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-11-05 21:53 - 2014-11-05 21:53 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\mp3DirectCut
2014-11-05 21:02 - 2014-11-05 21:02 - 00613042 _____ (CMI Limited) C:\Users\Peter\AppData\Local\nshC9BF.tmp
2014-11-05 20:58 - 2014-11-05 20:58 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-11-05 20:58 - 2014-11-05 20:58 - 00000000 ____D () C:\Program Files\Realtek
2014-11-05 20:56 - 2000-01-01 01:00 - 60955136 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2014-11-05 20:56 - 2000-01-01 01:00 - 28343384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 14863448 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 12894808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-11-05 20:56 - 2000-01-01 01:00 - 05751048 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 03959384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 03956056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-11-05 20:56 - 2000-01-01 01:00 - 02834648 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 02800344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 02162992 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 02117424 _____ () C:\Windows\system32\SStudio.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 02041432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01959128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-11-05 20:56 - 2000-01-01 01:00 - 01934424 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01313904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01063512 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01057494 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-11-05 20:56 - 2000-01-01 01:00 - 01048824 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 01022168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00956504 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00948952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00947760 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00942384 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00906800 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00900696 _____ (Waves Audio Ltd.) C:\Windows\SysWOW64\MaxxAudioAPOShell.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00889592 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00871856 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00724728 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00662784 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00628952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00582056 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00246008 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00162224 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2014-11-05 20:56 - 2000-01-01 01:00 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2014-11-05 20:55 - 2014-11-05 20:55 - 00002242 _____ () C:\Windows\patsearch.bin
2014-11-05 20:55 - 2014-11-05 20:55 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstrNew_01009.Wdf
2014-11-05 20:55 - 2000-01-01 01:00 - 06218072 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01939800 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01317976 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01168472 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 01136728 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00663296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00501184 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00487360 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00415680 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00315736 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00291488 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00261464 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00109848 _____ () C:\Windows\system32\AcpiServiceVnA64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-11-05 20:55 - 2000-01-01 01:00 - 00033592 _____ () C:\Windows\system32\audioLibVc.dll
2014-11-05 20:54 - 2014-11-05 20:54 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\AdvancedSystemProtector
2014-11-05 20:41 - 2014-11-05 20:41 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\WildTangent
2014-11-05 20:35 - 2014-11-05 20:35 - 00001075 _____ () C:\Users\Peter\Desktop\mp3DirectCut.lnk
2014-11-05 20:35 - 2014-11-05 20:35 - 00000000 ____D () C:\Program Files (x86)\mp3DirectCut
2014-11-05 19:35 - 2014-11-05 19:35 - 00000424 _____ () C:\Users\Peter\Desktop\Computer.lnk
2014-11-05 19:26 - 2014-11-05 19:26 - 00000000 ____D () C:\Users\Peter\AppData\Local\Cyberlink
2014-11-05 19:21 - 2014-11-05 19:21 - 00001556 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-11-05 19:21 - 2014-11-05 19:21 - 00001263 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-11-05 19:21 - 2014-11-05 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-11-05 19:20 - 2014-11-05 19:21 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-11-05 19:20 - 2014-11-05 19:20 - 00000000 ____D () C:\Program Files (x86)\Free Codec Pack
2014-11-05 19:19 - 2014-11-05 19:20 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\DVDVideoSoft
2014-11-05 19:18 - 2014-11-05 19:18 - 00000000 ____D () C:\Users\Peter\AppData\Local\PDF24
2014-11-05 19:16 - 2014-11-05 19:16 - 00001099 _____ () C:\Users\Public\Desktop\PDF24 Creator.lnk
2014-11-05 19:16 - 2014-11-05 19:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24
2014-11-05 19:07 - 2014-11-05 19:16 - 00000000 ____D () C:\Program Files (x86)\PDF24
2014-11-05 19:03 - 2014-11-05 19:03 - 00003042 _____ () C:\Windows\System32\Tasks\{5E866BDC-A4D5-4B4E-AEB9-317C2CA84F30}
2014-11-05 18:33 - 2014-11-05 18:33 - 00000000 ____D () C:\Users\Peter\AppData\Local\Macromedia
2014-11-05 18:20 - 2014-11-08 18:33 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-05 18:20 - 2014-11-05 18:21 - 00000000 ____D () C:\Users\Peter\AppData\Local\Adobe
2014-11-05 18:20 - 2014-11-05 18:20 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-11-05 18:17 - 2014-11-05 18:17 - 00000000 ____D () C:\Users\Peter\AppData\Local\Acer Aspire R7 Tutorial
2014-11-05 18:02 - 2014-11-05 18:02 - 00000000 ____D () C:\Users\Peter\AppData\Local\NVIDIA Corporation
2014-11-05 18:02 - 2014-11-05 18:02 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-11-05 18:02 - 2014-11-05 18:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-11-05 18:02 - 2014-11-05 18:02 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-11-05 18:02 - 2014-10-16 17:54 - 02800296 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-11-05 18:02 - 2014-10-16 17:54 - 02197680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-11-05 18:02 - 2014-10-16 17:54 - 01715224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2014-11-05 18:02 - 2014-10-16 17:54 - 01291280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2014-11-05 18:02 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-11-05 18:02 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-11-05 18:02 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 06883136 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 03533632 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 02559808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 01089736 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 00933064 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-11-05 18:01 - 2014-10-16 15:11 - 00384200 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 00067072 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2014-11-05 18:01 - 2014-10-16 15:11 - 00061640 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-11-05 18:01 - 2014-10-15 01:48 - 04047877 _____ () C:\Windows\system32\nvcoproc.bin
2014-11-05 18:00 - 2014-10-16 17:54 - 31890064 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 24555840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 20968040 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 18499648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 14029400 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 13190288 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-11-05 18:00 - 2014-10-16 17:54 - 11395672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00962376 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00931984 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00921928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00392008 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00348488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00174856 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00156840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00038048 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-11-05 18:00 - 2014-10-16 17:54 - 00034976 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00032416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-11-05 18:00 - 2014-10-16 17:54 - 00027024 _____ () C:\Windows\system32\nvinfo.pb
2014-11-05 17:59 - 2014-10-16 17:54 - 20922696 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 19966856 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 17260864 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 16886168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 13942368 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 11333848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 04289856 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 04009672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 03237528 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 02849224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 01876296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434448.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 01539272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434448.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 00895176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 00500880 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2014-11-05 17:59 - 2014-10-16 17:54 - 00418112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2014-11-05 17:57 - 2014-11-05 17:57 - 00000000 ____D () C:\NVIDIA
2014-11-05 17:56 - 2014-11-05 17:56 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2014-11-05 17:53 - 2014-11-05 17:53 - 00001033 _____ () C:\Users\Public\Desktop\Kobo.lnk
2014-11-05 17:53 - 2014-11-05 17:53 - 00000000 ____D () C:\Windows\tmp
2014-11-05 17:53 - 2014-11-05 17:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kobo
2014-11-05 17:53 - 2014-11-05 17:53 - 00000000 ____D () C:\Program Files (x86)\Kobo
2014-11-05 17:49 - 2014-11-06 13:05 - 00016152 _____ () C:\Windows\system32\Drivers\SWDUMon.sys
2014-11-05 17:46 - 2014-11-05 17:46 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Spotify
2014-11-05 17:46 - 2014-11-05 17:46 - 00000000 ____D () C:\Users\Peter\AppData\Local\Spotify
2014-11-05 17:43 - 2014-11-05 17:43 - 00001045 _____ () C:\Users\Public\Desktop\Biet-O-Matic.lnk
2014-11-05 17:42 - 2014-11-05 17:43 - 00000000 ____D () C:\Program Files (x86)\Biet-O-Matic
2014-11-05 17:42 - 2014-11-05 17:42 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\BOM
2014-11-05 17:42 - 2014-11-05 17:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Biet-O-Matic
2014-11-05 17:42 - 2003-01-07 02:22 - 00015873 _____ () C:\Windows\SysWOW64\Inetde.dll
2014-11-05 17:42 - 2000-12-05 23:00 - 00109248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mswinsck.ocx
2014-11-05 17:42 - 2000-10-01 23:00 - 00125712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vb6de.dll
2014-11-05 17:42 - 2000-05-22 15:58 - 00115920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinet.ocx
2014-11-05 17:42 - 2000-05-21 23:00 - 01066176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mscomctl.ocx
2014-11-05 17:42 - 2000-04-03 19:06 - 00016896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winskde.dll
2014-11-05 17:42 - 2000-04-03 19:05 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msstdfmt.dll
2014-11-05 17:42 - 1999-07-14 13:07 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stdftde.dll
2014-11-05 17:42 - 1998-07-05 23:00 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mscmcde.dll
2014-11-05 17:42 - 1998-07-05 23:00 - 00022528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Tabctde.dll
2014-11-05 17:42 - 1998-06-23 23:00 - 00209192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Tabctl32.ocx
2014-11-05 17:41 - 2011-05-13 11:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\SysWOW64\dhRichClient3.dll
2014-11-05 17:41 - 2011-03-25 19:42 - 00338432 _____ () C:\Windows\SysWOW64\sqlite36_engine.dll
2014-11-05 17:31 - 2014-11-05 17:31 - 00000000 ____D () C:\Users\Public\Documents\Downloaded Installers
2014-11-05 17:16 - 2014-11-05 17:16 - 00000466 _____ () C:\Users\Peter\Desktop\Eigene Dateien.lnk
2014-11-05 17:15 - 2014-11-05 17:15 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-11-05 17:14 - 2014-11-05 17:14 - 00001799 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-11-05 17:14 - 2014-11-05 17:14 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Apple Computer
2014-11-05 17:14 - 2014-11-05 17:14 - 00000000 ____D () C:\Users\Peter\AppData\Local\Apple Computer
2014-11-05 17:14 - 2014-11-05 17:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-11-05 17:14 - 2012-10-03 16:14 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys
2014-11-05 17:13 - 2014-11-05 17:14 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2014-11-05 17:13 - 2014-11-05 17:14 - 00000000 ____D () C:\Program Files\iTunes
2014-11-05 17:13 - 2014-11-05 17:14 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-11-05 17:13 - 2014-11-05 17:13 - 00002535 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\Windows\System32\Tasks\Apple
2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\Users\Peter\AppData\Local\Apple
2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\Program Files\iPod
2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-11-05 17:13 - 2014-11-05 17:13 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-11-05 17:12 - 2014-11-05 17:13 - 00000000 ____D () C:\ProgramData\Apple
2014-11-05 17:01 - 2014-11-05 17:01 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Avira
2014-11-05 17:00 - 2014-10-23 14:02 - 00131608 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-11-05 17:00 - 2014-10-23 14:02 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-11-05 17:00 - 2014-10-23 14:01 - 00119272 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-11-05 16:58 - 2014-11-05 17:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-11-05 16:58 - 2014-11-05 17:00 - 00000000 ____D () C:\ProgramData\Avira
2014-11-05 16:58 - 2014-11-05 17:00 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-11-05 16:58 - 2014-11-05 16:58 - 00000000 ____D () C:\ProgramData\Package Cache
2014-11-05 16:54 - 2014-11-05 17:07 - 00000000 ____D () C:\Users\Peter\AppData\Local\Acer
2014-11-05 16:54 - 2014-11-05 16:54 - 00000000 ____D () C:\Users\Peter\AppData\Local\AcerMedia
2014-11-05 16:53 - 2014-11-05 21:47 - 00000000 ____D () C:\Users\Public\OEM
2014-11-05 16:47 - 2014-11-09 11:10 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3585963361-1982867813-4056610559-1001
2014-11-05 16:47 - 2014-11-05 16:48 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Mozilla
2014-11-05 16:47 - 2014-11-05 16:48 - 00000000 ____D () C:\Users\Peter\AppData\Local\Mozilla
2014-11-05 16:47 - 2014-11-05 16:47 - 00000000 ____D () C:\ProgramData\Mozilla
2014-11-05 16:46 - 2014-11-05 16:46 - 00002027 _____ () C:\Users\Public\Desktop\abDocs.lnk
2014-11-05 16:45 - 2014-11-09 11:23 - 00003950 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{03F41291-BAE8-4D20-A116-55AAC744BEE2}
2014-11-05 16:45 - 2014-11-06 10:31 - 00002170 _____ () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokki Start Menu.lnk
2014-11-05 16:45 - 2014-11-05 18:07 - 00002341 _____ () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
2014-11-05 16:45 - 2014-11-05 16:45 - 00000000 __SHD () C:\Users\Peter\AppData\Local\EmieUserList
2014-11-05 16:45 - 2014-11-05 16:45 - 00000000 __SHD () C:\Users\Peter\AppData\Local\EmieSiteList
2014-11-05 16:45 - 2014-11-05 16:45 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Macromedia
2014-11-05 16:44 - 2014-11-06 13:26 - 00000000 ____D () C:\Users\Peter\AppData\Local\clear.fi
2014-11-05 16:44 - 2014-11-05 16:44 - 00000000 ____D () C:\Users\Peter\PicStream
2014-11-05 16:43 - 2014-11-09 11:05 - 00000000 __RDO () C:\Users\Peter\OneDrive
2014-11-05 16:43 - 2014-11-05 16:43 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Atheros
2014-11-05 16:43 - 2014-11-05 16:43 - 00000000 ____D () C:\Users\Peter\AppData\Local\NVIDIA
2014-11-05 16:43 - 2014-11-05 16:43 - 00000000 ____D () C:\Program Files (x86)\OEM
2014-11-05 16:42 - 2014-11-07 16:41 - 00000000 ____D () C:\Users\Peter
2014-11-05 16:42 - 2014-11-05 18:57 - 00000000 ____D () C:\Users\Peter\AppData\Local\Packages
2014-11-05 16:42 - 2014-11-05 16:42 - 00001458 _____ () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-11-05 16:42 - 2014-11-05 16:42 - 00000180 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2014-11-05 16:42 - 2014-11-05 16:42 - 00000020 ___SH () C:\Users\Peter\ntuser.ini
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Vorlagen
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Startmenü
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Netzwerkumgebung
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Lokale Einstellungen
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Eigene Dateien
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Druckumgebung
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Documents\Eigene Musik
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Documents\Eigene Bilder
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\AppData\Local\Verlauf
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\AppData\Local\Anwendungsdaten
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 _SHDL () C:\Users\Peter\Anwendungsdaten
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Adobe
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 ____D () C:\Users\Peter\AppData\Local\VirtualStore
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 ____D () C:\ProgramData\OEM_YAHOO
2014-11-05 16:42 - 2014-11-05 16:42 - 00000000 ____D () C:\Program Files\Accessory Store
2014-11-05 16:42 - 2014-07-11 21:18 - 00000000 ___RD () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-05 16:42 - 2014-03-18 11:33 - 00000000 ___RD () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-11-05 16:42 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-11-05 16:42 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-11-05 16:42 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-05 16:42 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-11-05 16:35 - 2014-11-09 11:05 - 01932245 _____ () C:\Windows\WindowsUpdate.log
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-09 11:12 - 2014-07-11 21:14 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2014-11-09 11:12 - 2014-07-11 21:14 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2014-11-09 11:12 - 2014-03-18 11:03 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-09 11:05 - 2014-03-18 10:54 - 00222172 _____ () C:\Windows\PFRO.log
2014-11-09 11:05 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-09 11:05 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-11-09 11:04 - 2013-08-22 16:36 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-11-09 11:00 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sru
2014-11-07 18:12 - 2013-08-22 15:44 - 00358992 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-07 17:20 - 2014-07-11 11:43 - 00022462 _____ () C:\Windows\DPINST.LOG
2014-11-07 16:26 - 2014-06-11 11:06 - 00000000 ____D () C:\Program Files (x86)\Acer
2014-11-07 15:19 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-11-07 14:43 - 2014-07-11 21:11 - 00000000 ____D () C:\Windows\NAPP_Dism_Log
2014-11-06 18:45 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\registration
2014-11-06 16:30 - 2014-06-11 11:19 - 00000000 ____D () C:\ProgramData\McAfee
2014-11-06 16:10 - 2014-07-11 11:43 - 00001508 _____ () C:\Windows\Synaptics.log
2014-11-06 13:26 - 2014-06-11 11:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2014-11-06 13:26 - 2014-06-11 11:06 - 00000000 ____D () C:\ProgramData\Acer
2014-11-06 12:11 - 2013-08-22 16:36 - 00000000 ___HD () C:\Windows\ELAMBKUP
2014-11-05 22:28 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\rescache
2014-11-05 22:27 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-11-05 22:27 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default
2014-11-05 20:59 - 2014-07-11 11:35 - 00000000 ___HD () C:\Program Files (x86)\Temp
2014-11-05 20:58 - 2013-08-22 15:46 - 00023730 _____ () C:\Windows\setupact.log
2014-11-05 20:55 - 2014-07-11 11:35 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-11-05 20:41 - 2014-06-11 11:06 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-11-05 20:41 - 2014-06-11 11:06 - 00000000 ____D () C:\ProgramData\WildTangent
2014-11-05 20:41 - 2014-06-11 11:06 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games
2014-11-05 19:26 - 2014-07-11 12:07 - 00000000 ____D () C:\Users\Public\CyberLink
2014-11-05 19:26 - 2014-07-11 12:00 - 00000000 ____D () C:\ProgramData\CyberLink
2014-11-05 19:03 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-11-05 18:06 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-11-05 18:05 - 2014-07-11 11:37 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-11-05 18:03 - 2014-07-11 11:37 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-11-05 18:02 - 2014-07-11 11:37 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-11-05 18:01 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\Help
2014-11-05 17:46 - 2014-06-11 11:35 - 00000000 ___HD () C:\OEM
2014-11-05 17:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\NDF
2014-11-05 17:13 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\restore
2014-11-05 16:42 - 2014-06-11 11:42 - 00000000 ____D () C:\Windows\Panther
Some content of TEMP:
====================
C:\Users\Peter\AppData\Local\Temp\avgnt.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-06-11 10:43
==================== End Of Log ============================
--- --- ---
--- --- ---
FRST Addition: Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-11-2014 01
Ran by Peter at 2014-11-09 11:30:24
Running from C:\Users\Peter\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
abDocs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.04.3005 - Acer Incorporated)
abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 3.00.2013.0 - Acer Incorporated)
Acer Explorer Agent (HKLM\...\{4D0F42CF-1693-43D9-BDC8-19141D023EE0}) (Version: 2.00.3000 - Acer Incorporated)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8105 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8104 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.01.3012 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8106 - Acer Incorporated)
Acer Remote Files (HKLM\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 1.02.2003 - Acer Incorporated)
Acer System Information (HKLM-x32\...\{72199E33-4F2A-4B7F-8E25-95DDDD50A678}) (Version: 1.0.0 - Acer)
Acer User Experience Improvement Program App Monitor Plugin (HKLM\...\{978724F6-1863-4DD5-9E66-FB77F5AB5613}) (Version: 1.01.3003 - Acer Incorporated)
Acer User Experience Improvement Program Framework (HKLM\...\{12A718F2-2357-4D41-9E1F-18583A4745F7}) (Version: 1.01.3003 - Acer Incorporated)
Acer Video Player (HKLM-x32\...\{B6846F20-4821-11E3-8F96-0800200C9A66}) (Version: 1.00.2001.4 - Acer Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.189 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.04) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AB0000000001}) (Version: 11.0.04 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avira (HKLM-x32\...\{9480d4af-12b9-4e56-8034-4031ef6ab39d}) (Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.342 - Avira)
Biet-O-Matic v2.14.12 (HKLM-x32\...\Biet-O-Matic v2.14.12) (Version: 2.14.12 - BOM Development Team)
CyberLink PhotoDirector 3 (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.1.4917 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.3721 - CyberLink Corp.)
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3914.57 - CyberLink Corp.)
eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)
Free YouTube to MP3 Converter version 3.12.49.1022 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.49.1022 - DVDVideoSoft Ltd.)
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.3.2.1 - Genesys Logic)
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.8101 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3496 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 1.1.165.1 - Intel Corporation)
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Kobo (HKLM-x32\...\Kobo) (Version: 3.6.0 - Kobo Inc.)
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.8100 - Acer Incorporated)
Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 33.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.0.3 (x86 de)) (Version: 33.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.0.3 - Mozilla)
Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{551AC8F2-FEA2-4B45-ACF7-C98681233CC9}) (Version: 12.5.01200 - Nero AG)
NVIDIA GeForce Experience 2.1.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.3 - NVIDIA Corporation)
NVIDIA Grafiktreiber 344.48 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.48 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
PDF24 Creator 6.8.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.318 - Qualcomm Atheros Communications)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 12.29 - Qualcomm Atheros)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.31.423.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7240 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
SHIELD Streaming (Version: 3.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.13.56 - NVIDIA Corporation) Hidden
Spotify (HKLM-x32\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-3585963361-1982867813-4056610559-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
==================== Restore Points =========================
06-11-2014 17:36:51 Wiederherstellungsvorgang
06-11-2014 18:20:04 Revo Uninstaller's restore point - Mozilla Maintenance Service
06-11-2014 18:20:52 Revo Uninstaller's restore point - Mozilla Firefox 33.0.2 (x86 de)
09-11-2014 09:54:25 Revo Uninstaller's restore point - SpyHunter 4
09-11-2014 10:27:00 Revo Uninstaller's restore point - Google Chrome
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 14:25 - 2014-11-06 11:15 - 00450713 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123moviedownload.com
There are 1000 more lines.
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {02686A44-510D-4FFE-99A4-041543659CC8} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2014-03-17] (Acer Incorporate)
Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {22A9A091-6A47-4678-B9FF-CF3754ED3B0D} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTrayLauncher.exe [2014-03-21] (Acer Incorporated)
Task: {337BFE19-BD4F-41FC-9E3B-FEDC50BB759A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-05] (Adobe Systems Incorporated)
Task: {6DD03667-4424-4D20-89CA-296485F9DFB3} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-07-08] ()
Task: {B0D9628A-7251-4606-A034-6F00EF25E986} - System32\Tasks\Quick Access Quick Launcher => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-03-21] (Acer Incorporate)
Task: {BDD7E3DA-F247-47E7-801E-AE69337BBED2} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] ()
Task: {C907D47F-769C-4156-97F0-4CEBDE33A7DE} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2014-03-18] (Acer Incorporated)
Task: {D0D94DBC-EFEA-47B5-993C-8CA15FC16D6A} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {DD78B00E-7325-43AE-A4A3-AC2C2B092A72} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-03-21] (Acer Incorporate)
Task: {E661A666-E4A2-4336-8876-9CCDE4A10367} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [2014-01-24] (TODO: <Company name>)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) =============
2014-11-05 18:01 - 2014-10-16 15:11 - 00116880 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-07-11 12:03 - 2012-04-24 11:43 - 00254512 ____N () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
2014-07-11 12:10 - 2014-01-03 13:13 - 00111872 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\Clearfishellext_x64.dll
2014-02-25 21:14 - 2014-02-25 21:14 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2014-02-25 21:11 - 2014-02-25 21:11 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll
2014-02-25 21:17 - 2014-02-25 21:17 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
2014-06-11 11:38 - 2014-03-07 17:21 - 00080312 _____ () C:\Windows\system32\igfxexps.dll
2014-10-11 13:06 - 2014-10-11 13:06 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-11-08 12:48 - 2014-11-06 12:09 - 03649648 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-07-11 11:58 - 2014-09-16 10:19 - 00494336 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\AcerSplitter.ax
2014-07-11 11:58 - 2014-09-16 10:19 - 01200384 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\avformat-lav-55.dll
2014-07-11 11:58 - 2014-09-16 10:19 - 00367872 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\avutil-lav-52.dll
2014-07-11 11:58 - 2014-09-16 10:19 - 08122112 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\avcodec-lav-55.dll
2014-07-11 11:58 - 2014-09-16 10:19 - 00833280 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\libbluray.dll
2014-07-11 11:58 - 2014-09-16 10:19 - 00965888 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\AcerSubtitle.dll
2014-07-11 11:58 - 2014-09-16 10:19 - 00374016 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\AcerFLVSplitter.ax
2014-07-11 11:58 - 2014-09-16 10:19 - 00519424 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\AcerMP4Splitter2.ax
2014-07-11 11:58 - 2014-09-16 10:19 - 00640256 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\AcerMP4Splitter.ax
2014-07-11 11:58 - 2014-09-16 10:19 - 00454400 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\AcerMKVSplitter.ax
2014-07-11 11:58 - 2014-09-16 10:19 - 00462592 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\AcerMpegAudioSplitter.ax
2014-07-11 11:58 - 2014-09-16 10:19 - 00385280 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\AcerMpegSplitter.ax
2014-07-11 11:39 - 2013-12-10 00:27 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\Users\Peter\OneDrive:ms-properties
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
========================= Accounts: ==========================
Administrator (S-1-5-21-3585963361-1982867813-4056610559-500 - Administrator - Disabled)
Gast (S-1-5-21-3585963361-1982867813-4056610559-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3585963361-1982867813-4056610559-1003 - Limited - Enabled)
Peter (S-1-5-21-3585963361-1982867813-4056610559-1001 - Administrator - Enabled) => C:\Users\Peter
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (11/09/2014 11:04:33 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 33.0.3.5422, Zeitstempel: 0x545b5277
Name des fehlerhaften Moduls: mozalloc.dll, Version: 33.0.3.5422, Zeitstempel: 0x545b2aeb
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001425
ID des fehlerhaften Prozesses: 0x188c
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3
Vollständiger Name des fehlerhaften Pakets: plugin-container.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: plugin-container.exe5
Error: (11/09/2014 11:02:08 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (11/08/2014 06:05:08 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
Error: (11/08/2014 05:53:51 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 33.0.3.5422, Zeitstempel: 0x545b5277
Name des fehlerhaften Moduls: mozalloc.dll, Version: 33.0.3.5422, Zeitstempel: 0x545b2aeb
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001425
ID des fehlerhaften Prozesses: 0x116c
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3
Vollständiger Name des fehlerhaften Pakets: plugin-container.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: plugin-container.exe5
Error: (11/08/2014 01:14:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.1.711, Zeitstempel: 0x542b53ec
Name des fehlerhaften Moduls: mbam.exe, Version: 1.0.1.711, Zeitstempel: 0x542b53ec
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000c0f7a
ID des fehlerhaften Prozesses: 0x1e90
Startzeit der fehlerhaften Anwendung: 0xmbam.exe0
Pfad der fehlerhaften Anwendung: mbam.exe1
Pfad des fehlerhaften Moduls: mbam.exe2
Berichtskennung: mbam.exe3
Vollständiger Name des fehlerhaften Pakets: mbam.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: mbam.exe5
Error: (11/08/2014 00:46:33 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm iexplore.exe, Version 11.0.9600.17037 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: f34
Startzeit: 01cffb490c30f841
Endzeit: 0
Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe
Berichts-ID: db776e70-673c-11e4-827e-c454449fdb44
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (11/08/2014 00:07:17 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm backgroundTaskHost.exe, Version 6.3.9600.16384 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1140
Startzeit: 01cffb4372744842
Endzeit: 4294967295
Anwendungspfad: C:\Windows\system32\backgroundTaskHost.exe
Berichts-ID: 65ec06f2-6737-11e4-827d-c454449fdb44
Vollständiger Name des fehlerhaften Pakets: Facebook.Facebook_1.4.0.9_x64__8xx8rvfyw5nnt
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: App
Error: (11/08/2014 11:59:52 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
Error: (11/08/2014 11:09:45 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest.
Error: (11/08/2014 10:52:20 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
System errors:
=============
Error: (11/09/2014 11:05:16 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (11/09/2014 10:55:42 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (11/09/2014 10:55:24 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Superfetch" wurde mit folgendem Fehler beendet:
%%1062
Error: (11/08/2014 06:44:04 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (11/08/2014 00:40:42 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (11/08/2014 00:40:25 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Superfetch" wurde mit folgendem Fehler beendet:
%%1062
Error: (11/08/2014 00:01:58 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (11/08/2014 00:01:39 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "User Experience Improvement Program" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (11/08/2014 00:01:39 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (11/08/2014 00:01:39 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Nero Update" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Microsoft Office Sessions:
=========================
Error: (11/09/2014 11:04:33 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe33.0.3.5422545b5277mozalloc.dll33.0.3.5422545b2aeb8000000300001425188c01cffc036e743bd6C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dllcd5da6fe-67f7-11e4-8280-c454449fdb44
Error: (11/09/2014 11:02:08 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (11/08/2014 06:05:08 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\Peter\Downloads\esetsmartinstaller_deu.exe
Error: (11/08/2014 05:53:51 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe33.0.3.5422545b5277mozalloc.dll33.0.3.5422545b2aeb8000000300001425116c01cffb49f8304173C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dlld0b3916f-6767-11e4-827e-c454449fdb44
Error: (11/08/2014 01:14:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.1.711542b53ecmbam.exe1.0.1.711542b53ecc0000005000c0f7a1e9001cffb4aabf12b50C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeC:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exeb988d870-6740-11e4-827e-c454449fdb44
Error: (11/08/2014 00:46:33 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: iexplore.exe11.0.9600.17037f3401cffb490c30f8410C:\Program Files\Internet Explorer\iexplore.exedb776e70-673c-11e4-827e-c454449fdb44
Error: (11/08/2014 00:07:17 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: backgroundTaskHost.exe6.3.9600.16384114001cffb43727448424294967295C:\Windows\system32\backgroundTaskHost.exe65ec06f2-6737-11e4-827d-c454449fdb44Facebook.Facebook_1.4.0.9_x64__8xx8rvfyw5nntApp
Error: (11/08/2014 11:59:52 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Users\Peter\Downloads\esetsmartinstaller_deu.exe
Error: (11/08/2014 11:09:45 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe
Error: (11/08/2014 10:52:20 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i5-4210U CPU @ 1.70GHz
Percentage of memory in use: 25%
Total physical RAM: 8115.27 MB
Available physical RAM: 6068.84 MB
Total Pagefile: 10035.27 MB
Available Pagefile: 7783.97 MB
Total Virtual: 131072 MB
Available Virtual: 131071.82 MB
==================== Drives ================================
Drive c: (Acer) (Fixed) (Total:118.43 GB) (Free:83.03 GB) NTFS
Drive d: (DATA) (Fixed) (Total:914.91 GB) (Free:816.85 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: E2A5DCFC)
Partition: GPT Partition Type.
========================================================
Disk: 1 (Size: 119.2 GB) (Disk ID: E2A5DCCD)
Partition: GPT Partition Type.
==================== End Of Log ============================
Ich glaube es ist geschafft.
Vielen Dank für die schnelle Hilfe!!! :daumenhoc:daumenhoc:daumenhoc |
Malwarebytes Anti-Malware 
AdwCleaner auf deinen Desktop.
SecurityCheck und:
