Trojaner/Malware verdacht: WIN Sicherheitscenter immer deaktiviert

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 22:42 on 02/12/2013 (Kerem)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
HKCU:DAEMON Tools Lite -> Removed

Checking for services/drivers...


-=E.O.F=-
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-12-2013
Ran by Kerem at 2013-12-02 22:44:12
Running from C:\Users\Kerem\Desktop\ergr
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Disabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

3D Ripper DX v1.8.2 (x32)
3dem (x32 Version: 20.7)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
Acrobat.com (x32 Version: 1.6.65)
Ad-Aware Browsing Protection (x32 Version: 1.0.1.110)
Adobe AIR (x32 Version: 1.5.3.9130)
Adobe Community Help (x32 Version: 3.2.1)
Adobe Community Help (x32 Version: 3.2.1.650)
Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.152)
Adobe Photoshop Elements 9 (x32 Version: 9.0)
Adobe Premiere Elements 9 (x32 Version: 9.0)
Adobe Reader 9.5.5 MUI (x32 Version: 9.5.5)
Adobe Shockwave Player 12.0 (x32 Version: 12.0.0.112)
Agatha Christie - 4:50 from Paddington (x32 Version: 2.2.0.95)
Akamai NetSession Interface (HKCU)
AMD APP SDK Runtime (Version: 2.4.650.9)
Amnesia - The Dark Descent  (x32 Version: 1.2)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
AquaNox 2: Revelation (x32)
Argazki Galeria (x32 Version: 16.4.3508.0205)
Arma 2 (x32)
Arma 2: DayZ Mod (x32)
Arma 2: Operation Arrowhead (x32)
Arma 2: Operation Arrowhead Beta (x32)
Ask Toolbar (x32 Version: 1.15.24.0)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.36)
ATI Catalyst Install Manager (Version: 3.0.829.0)
Audacity 2.0.3 (x32 Version: 2.0.3)
Autodesk Material Library 2013 (x32 Version: 3.0.13)
Autodesk Material Library Base Resolution Image Library 2013 (x32 Version: 3.0.13)
Autodesk Material Library Medium Resolution Image Library 2013 (x32 Version: 3.0.13)
Avira Free Antivirus (x32 Version: 13.0.0.4052)
Avira SearchFree Toolbar plus Web Protection Updater (HKCU Version: 1.2.5.42066)
Backup Manager V3 (x32 Version: 3.0.0.90)
BattlEye for OA Uninstall (x32)
BattlEye Uninstall (x32)
BBrowse22saave (x32 Version: )
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95)
BioShock 2 (x32 Version: 1.0.0005.131)
BitTorrent (x32 Version: 7.8.0.29676)
Blender (Version: 2.68a)
Bonjour (Version: 3.0.0.10)
Bruteforce Save Data (x32)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center (x32 Version: 2011.0524.2352.41027)
Catalyst Control Center InstallProxy (x32 Version: 2011.0524.2352.41027)
Catalyst Control Center Localization All (x32 Version: 2011.0524.2352.41027)
Catalyst Control Center Profiles Mobile (x32 Version: 2011.0524.2352.41027)
CCC Help Chinese Standard (x32 Version: 2011.0524.2351.41027)
CCC Help Chinese Traditional (x32 Version: 2011.0524.2351.41027)
CCC Help Czech (x32 Version: 2011.0524.2351.41027)
CCC Help Danish (x32 Version: 2011.0524.2351.41027)
CCC Help Dutch (x32 Version: 2011.0524.2351.41027)
CCC Help English (x32 Version: 2011.0524.2351.41027)
CCC Help Finnish (x32 Version: 2011.0524.2351.41027)
CCC Help French (x32 Version: 2011.0524.2351.41027)
CCC Help German (x32 Version: 2011.0524.2351.41027)
CCC Help Greek (x32 Version: 2011.0524.2351.41027)
CCC Help Hungarian (x32 Version: 2011.0524.2351.41027)
CCC Help Italian (x32 Version: 2011.0524.2351.41027)
CCC Help Japanese (x32 Version: 2011.0524.2351.41027)
CCC Help Korean (x32 Version: 2011.0524.2351.41027)
CCC Help Norwegian (x32 Version: 2011.0524.2351.41027)
CCC Help Polish (x32 Version: 2011.0524.2351.41027)
CCC Help Portuguese (x32 Version: 2011.0524.2351.41027)
CCC Help Russian (x32 Version: 2011.0524.2351.41027)
CCC Help Spanish (x32 Version: 2011.0524.2351.41027)
CCC Help Swedish (x32 Version: 2011.0524.2351.41027)
CCC Help Thai (x32 Version: 2011.0524.2351.41027)
CCC Help Turkish (x32 Version: 2011.0524.2351.41027)
ccc-utility64 (Version: 2011.0524.2352.41027)
CCleaner (Version: 4.06)
Chuzzle Deluxe (x32 Version: 2.2.0.95)
Clonk Endeavour 4.95.5 (x32 Version: 4.95.5)
Community Map packs 1-4 for soulstorm  (x32)
Cossacks: Back to War (x32)
Counter-Strike: Global Offensive - SDK (x32)
Counter-Strike: Global Offensive (x32)
Crazy Chicken Kart 2 (x32 Version: 2.2.0.95)
Crazybump (remove only) (x32)
CyberLink MediaEspresso (x32 Version: 6.5.1615_36053b)
D3DX10 (x32 Version: 15.4.2368.0902)
DAEMON Tools Lite (x32 Version: 4.46.1.0328)
Dark Souls: Prepare to Die Edition (x32)
Dawn of War - Tyranid Mod v0.45SS (x32 Version: "0.45SS")
DayZ Commander (x32 Version: 0.92.91)
DDS Converter 2.1 (x32)
Defraggler (Version: 2.15)
Deus Ex: Human Revolution - Director's Cut (x32)
Deus Ex: Human Revolution (x32)
Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.95)
DoWpro 3.59 Full Installer (x32 Version: 3.59 Full Installer)
Dragon UnPACKer 5 (x32 Version: 5.6.2 Exedra Chac)
Dual-Core Optimizer (x32 Version: 1.1.4.0169)
Dungeon Defenders (x32)
Earth 2150 Trilogy (x32)
Easy Video to Gif Converter V3.0 (x32)
Easy2Convert PNG to DDS 1.1 (x32 Version: 1.1)
EasyLife Search 1.74 (x32)
EasyLife Updater (Version: 1.0)
Elements 9 Organizer (x32 Version: 9.0)
Elements STI Installer (x32 Version: 1.0)
ETDWare PS/2-X64 8.0.6.0_WHQL (Version: 8.0.6.0)
Fallout 3 - Game of the Year Edition (x32)
Fallout Mod Manager 0.13.21 (x32)
Fallout: New Vegas (x32)
FATE (x32 Version: 2.2.0.95)
FileZilla Client 3.6.0.2 (x32 Version: 3.6.0.2)
Fotogaléria (x32 Version: 16.4.3508.0205)
Fotogalerie (x32 Version: 16.4.3508.0205)
Fotogalerija (x32 Version: 16.4.3508.0205)
Fotogalleri (x32 Version: 16.4.3508.0205)
Fotogalleriet (x32 Version: 16.4.3508.0205)
Fotoğraf Galerisi (x32 Version: 16.4.3508.0205)
Fotótár (x32 Version: 16.4.3508.0205)
Fraps (remove only) (x32)
Free YouTube Download version 3.2.0.128 (x32 Version: 3.2.0.128)
Free YouTube to MP3 Converter version 3.12.16.1030 (x32 Version: 3.12.16.1030)
Galeria de Fotografias (x32 Version: 16.4.3508.0205)
Galeria de Fotos (x32 Version: 16.4.3508.0205)
Galería de fotos (x32 Version: 16.4.3508.0205)
Galeria fotogràfica (x32 Version: 16.4.3508.0205)
Galeria fotografii (x32 Version: 16.4.3508.0205)
Galerie de photos (x32 Version: 16.4.3508.0205)
Galerie foto (x32 Version: 16.4.3508.0205)
Galerija fotografija (x32 Version: 16.4.3508.0205)
Garry's Mod (x32)
GCFScape 1.8.4
GECK - New Vegas Edition (x32)
gmax (x32 Version: 4.4.0.125)
GoldWave v5.68 (x32 Version: 5.68)
Google Chrome (x32 Version: 31.0.1650.57)
Google Earth (x32 Version: 7.1.2.2041)
Google Update Helper (x32 Version: 1.3.22.3)
Gothic (x32)
Gothic 3 (x32)
Half-Life (x32)
Half-Life 2 (x32)
Half-Life 2: Episode One (x32)
Half-Life 2: Episode Two (x32)
Haunted Memories (x32)
HomeMedia (x32 Version: 2.0.8520)
Identity Card (x32 Version: 1.00.3006)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144)
Intel(R) Rapid Storage Technology (x32 Version: 10.1.2.1004)
iTunes (Version: 11.0.3.42)
Java 7 Update 25 (64-bit) (Version: 7.0.250)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
JDownloader 0.9 (x32 Version: 0.9)
Jewel Quest Solitaire (x32 Version: 2.2.0.95)
John Deere Drive Green (x32 Version: 2.2.0.95)
Junk Mail filter update (x32 Version: 16.4.3508.0205)
Killing Floor (x32)
K-Lite Mega Codec Pack 5.4.4 (x32 Version: 5.4.4)
KrxImpExp for Blender 2.49b (x32)
LameXP (x32)
Launch Manager (x32 Version: 5.1.4)
Lexmark S600 Series
Litecoin (HKCU Version: 0.8.5.1)
Metro: Last Light (c) Deep Silver version 1 (x32 Version: 1)
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322)
Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319)
Microsoft .NET Framework 4.5 (Version: 4.5.50709)
Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (x32 Version: 3.5.30730.0)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0)
Microsoft Help Viewer 1.0 (Version: 1.0.30319)
Microsoft Help Viewer 1.0 Language Pack - DEU (Version: 1.0.30319)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.5128.5002)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft SkyDrive (HKCU Version: 16.4.6013.0910)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft SQL Server Compact 3.5 SP2 DEU (x32 Version: 3.5.8080.0)
Microsoft SQL Server Compact 3.5 SP2 x64 DEU (Version: 3.5.8080.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2010 Express - DEU (x32 Version: 10.0.30319)
Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (Version: 10.0.30319)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053)
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)
Moonbase Alpha (x32)
MorphVOX Pro (x32 Version: 4.3.2)
MotioninJoy Gamepad tool 0.7.0000 (Version: 0.7.0000)
Movie Maker (x32 Version: 16.4.3508.0205)
Mozilla Firefox 25.0.1 (x86 de) (x32 Version: 25.0.1)
Mozilla Maintenance Service (x32 Version: 25.0.1)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT Redists (Version: 1.0)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSVCRT110 (x32 Version: 16.4.1108.0727)
MSVCRT110_amd64 (Version: 16.4.1109.0912)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
Mystery P.I. - The London Caper (x32 Version: 2.2.0.95)
Nero Control Center 10 (x32 Version: 10.2.11100.1.1)
Nero ControlCenter 10 Help (CHM) (x32 Version: 10.5.10000)
Nero Core Components 10 (x32 Version: 2.0.18100.8.8)
Nero DiscSpeed 10 (x32 Version: 6.2.10500.2.100)
Nero DiscSpeed 10 Help (CHM) (x32 Version: 10.5.10000)
Nero Express 10 (x32 Version: 10.2.12000.21.100)
Nero Express 10 Help (CHM) (x32 Version: 10.5.10200)
Nero Multimedia Suite 10 Essentials (x32 Version: 10.5.10300)
Nero StartSmart 10 (x32 Version: 10.2.11600.14.100)
Nero StartSmart 10 Help (CHM) (x32 Version: 10.5.10000)
Nero Update (x32 Version: 1.0.0018)
Nexus Mod Manager (Version: 0.45.6)
NifSkope (remove only) (x32)
No More Room in Hell (x32)
Norton Online Backup (x32 Version: 2.1.17869)
Notepad++ (x32 Version: 6.3.2)
NVIDIA PhysX v8.10.29 (x32 Version: 8.10.29)
OpenAL (x32)
OpenOffice.org 3.4.1 (x32 Version: 3.41.9593)
Overlord (x32 Version: 1.00.0606)
Packard Bell Games (x32 Version: 1.0.2.4)
Packard Bell MyBackup (x32 Version: 3.0.0.90)
Packard Bell Power Management (x32 Version: 6.00.3006)
Packard Bell Recovery Management (x32 Version: 5.00.3002)
Packard Bell Registration (x32 Version: 1.04.3501)
Packard Bell ScreenSaver (x32 Version: 1.1.1025.2010)
Packard Bell Social Networks (x32 Version: 2.0.2913)
Packard Bell Updater (x32 Version: 1.02.3005)
Penguins! (x32 Version: 2.2.0.95)
Photo Common (x32 Version: 16.4.3508.0205)
Photo Gallery (x32 Version: 16.4.3508.0205)
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.95)
Poczta usługi Windows Live (x32 Version: 16.4.3508.0205)
Podstawowe programy Windows Live (x32 Version: 16.4.3508.0205)
Polar Bowler (x32 Version: 2.2.0.95)
Pošta Windows Live (x32 Version: 16.4.3508.0205)
PPÖúÊÖ PC°æ 1.0.7.2 (x32 Version: 1.0.7.2)
PunkBuster Services (x32 Version: 0.993)
PX Profile Update (x32 Version: 1.00.1.)
Python 2.6.6 (x32 Version: 2.6.6150)
Python 3.3.1 (64-bit) (Version: 3.3.1150)
QuickTime (x32 Version: 7.74.80.86)
Raccolta foto (x32 Version: 16.4.3508.0205)
RadeonPro 1.0 (Build 1.1.1.0) (x32)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6329)
Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30123)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.26.0)
Resident Evil, The Awakening Part 1 1.2 (x32)
S.T.A.L.K.E.R. - Call Of Pripyat [v1.6.01] (x32 Version: 1.6.01)
S.T.A.L.K.E.R. - Shadow of Chernobyl [v1.0004] (x32 Version: 1.0004)
Search Assistant WebSearch 1.74 (x32)
SearchNewTab (x32 Version: )
Skype™ 6.10 (x32 Version: 6.10.104)
Slingo Deluxe (x32 Version: 2.2.0.95)
Softonic toolbar  on IE and Chrome (x32 Version: 1.8.21.14)
soProject 1.0.1 (x32 Version: 1.0.1)
Source Filmmaker (x32)
Source SDK (x32)
Source SDK Base 2013 Multiplayer (x32)
Source SDK Base 2013 Singleplayer (x32)
Stalker Complete 2009 (x32)
STALKER utilities pack (x32)
Steam (x32 Version: 1.0.0.0)
StudioCompiler v0.4A (x32 Version: v0.4A)
Surgeon Simulator 2013 (x32)
swMSM (x32 Version: 12.0.0.1)
System Requirements Lab CYRI (x32 Version: 6.0.3.0)
TeamSpeak 3 Client (Version: 3.0.13)
Terrain Generator 3.0.5 (x32)
Torchlight (x32 Version: 2.2.0.95)
TortoiseSVN 1.7.12.24070 (64 bit) (Version: 1.7.24070)
Transformers: War for Cybertron (x32)
Tyranid Mod 0.5b2 for Soulstorm (x32)
UA Grand Release (x32)
UA Map Pack (x32)
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (Version: 2.1.23.0)
Universal Extractor 1.6.1 (x32 Version: 1.6.1)
Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1)
Update Installer for WildTangent Games App (x32)
Ut Video Codec Suite (x32 Version: 1.01.0302)
Valokuvavalikoima (x32 Version: 16.4.3508.0205)
Vegas Pro 12.0 (64-bit) (Version: 12.0.486)
Video Web Camera (x32 Version: 1.0.1523)
Virtual Villagers - The Secret City (x32 Version: 2.2.0.95)
VLC media player 2.0.5 (x32 Version: 2.0.5)
VTFEdit 1.2.5 (x32)
War Thunder (x32)
War Thunder Launcher 1.0.1.199 (x32)
Wedding Dash (x32 Version: 2.2.0.95)
Welcome Center (x32 Version: 1.02.3102)
WildTangent Games App (Packard Bell Games) (x32 Version: 4.0.3.57)
Windows Live Communications Platform (x32 Version: 16.4.3508.0205)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 16.4.3508.0205)
Windows Live Fotogalleri (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)
Windows Live Installer (x32 Version: 16.4.3508.0205)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mail (x32 Version: 16.4.3508.0205)
Windows Live Messenger (x32 Version: 15.4.3502.0922)
Windows Live Messenger (x32 Version: 16.4.3508.0205)
Windows Live MIME IFilter (Version: 16.4.3508.0205)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 16.4.3508.0205)
Windows Live PIMT Platform (x32 Version: 16.4.3508.0205)
Windows Live SOXE (x32 Version: 16.4.3508.0205)
Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205)
Windows Live Temel Parçalar (x32 Version: 16.4.3508.0205)
Windows Live UX Platform (x32 Version: 16.4.3508.0205)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer (x32 Version: 16.4.3508.0205)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 16.4.3508.0205)
Windows Live 程式集 (x32 Version: 16.4.3508.0205)
Windows Liven peruspaketti (x32 Version: 16.4.3508.0205)
Windows Liven sähköposti (x32 Version: 16.4.3508.0205)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)
World of Tanks - Common Test (x32)
World of Tanks (x32)
World of Warplanes (x32)
Zuma Deluxe (x32 Version: 2.2.0.95)
Συλλογή φωτογραφιών (x32 Version: 16.4.3508.0205)
Основные компоненты Windows Live (x32 Version: 16.4.3508.0205)
Почта Windows Live (x32 Version: 16.4.3508.0205)
Фотоальбом (x32 Version: 16.4.3508.0205)
Фотогалерия (x32 Version: 16.4.3508.0205)
Фотографии (общедоступная версия) (x32 Version: 16.4.3508.0205)
גלריית התמונות (x32 Version: 16.4.3508.0205)
بريد Windows Live (x32 Version: 16.4.3508.0205)
معرض الصور (x32 Version: 16.4.3508.0205)
影像中心 (x32 Version: 16.4.3508.0205)

==================== Restore Points  =========================

26-11-2013 15:44:38 Windows Update
30-11-2013 22:52:50 DirectX wurde installiert
30-11-2013 22:58:22 Gerätetreiber-Paketinstallation: Echobit LLC Netzwerkadapter
01-12-2013 18:36:02 DirectX wurde installiert
02-12-2013 19:24:35 Removed Autodesk Backburner 2013.0.0
02-12-2013 19:28:10 Removed Autodesk Essential Skills Movies for 3ds Max 2013 64-bit.
02-12-2013 19:28:46 Removed Autodesk Softimage Mod Tool 7.5
02-12-2013 19:31:39 Removed Autodesk Inventor Server Engine for 3ds Max 2013 64-bit
02-12-2013 19:34:00 Removed Autodesk Revit Interoperability for 3ds Max and 3ds Max Design 2013 64-bit

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {00BFA5EF-DA5E-4518-B37D-7A96690B6E7B} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-09-19] (Piriform Ltd)
Task: {088482FA-65B8-4E17-9ABF-1DCD48E8D373} - System32\Tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 => Rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem
Task: {09F06BFE-A3C8-40E3-846A-6E6F4000C238} - System32\Tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 => Rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem
Task: {20437ED2-10C5-4BA5-BA84-090E7826D2CF} - System32\Tasks\BitGuard => Sc.exe start BitGuard
Task: {27B45CD1-4C78-4BDE-A667-9D7333EC7D7E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-11-14] (Adobe Systems Incorporated)
Task: {3292B701-2982-4957-AA25-6E620A81DB5E} - System32\Tasks\AdobeAAMUpdater-1.0-Kerem-PC-Kerem => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [2010-07-29] (Adobe Systems Incorporated)
Task: {6D4FD970-749A-4C04-AFC1-892BE56FF290} - System32\Tasks\{73A5EB49-A2CB-4B1F-BCEB-0EB01C42BEAE} => Chrome.exe hxxp://ui.skype.com/ui/0/5.0.0.152.370/de/go/help.faq.installer?LastError=1618
Task: {79156A14-8E91-418E-8EBA-AA0F80099A9F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-09] (Google Inc.)
Task: {86B85E8E-C839-4898-B225-D37642301C73} - System32\Tasks\Razer_Game_Booster_AutoUpdate => C:\Program Files (x86)\Razer\Razer Game Booster\AutoUpdate.exe
Task: {88D26882-EA9D-4063-BC81-6DCB77663132} - System32\Tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector => Rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
Task: {994C86AD-A929-4B2C-88A0-4E25A107A029} - System32\Tasks\Microsoft\Windows\SystemRestore\SR => Rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation
Task: {9BFB3BA1-0125-4ACA-814E-ED48B26DF861} - System32\Tasks\EPUpdater => C:\Users\Kerem\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe
Task: {A7C73732-9F11-4281-8D19-764D4EC9D94D} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe aepdu.dll,AePduRunUpdate
Task: {A9DE6837-51D2-4EFB-85C4-0F667E189617} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2011-04-15] (CyberLink)
Task: {AC4E5ACF-89F7-4220-BA21-81EE183975E2} - System32\Tasks\Microsoft\Windows\Application Experience\AitAgent => aitagent.exe
Task: {CA0C549A-B0CA-42CB-918A-3CA7456F7E73} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {CDEC52B8-B664-41B2-81FC-A5A40455F310} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-09] (Google Inc.)
Task: {D65373A3-2845-4704-B36D-D1CDB23EEA79} - System32\Tasks\AdobeFlashPlayerUpdate => C:\Windows\SysWOW64\FlashPlayerUpdateService.exe
Task: {D7B6E81D-3CF4-432C-84D2-24213F4316E6} - System32\Tasks\Microsoft\Windows\Autochk\Proxy => Rundll32.exe /d acproxy.dll,PerformAutochkOperations
Task: {E0463C29-13D9-4720-80BB-005C74C523D7} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe [2013-04-01] ()
Task: {E22A8667-F75B-4BA9-BA46-067ED4429DE8} - System32\Tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange => Rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
Task: {E3163C33-301D-4730-A266-5518C5ED3967} - System32\Tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask => BthUdTask.exe
Task: {E9314976-9FCB-4FCB-AF53-AE3CC0EF186C} - System32\Tasks\AdobeFlashPlayerUpdate 2 => C:\Windows\SysWOW64\FlashPlayerUpdateService.exe
Task: {F27EC297-BE36-4BA2-B3E0-3D35B49F481D} - System32\Tasks\LyricXeeker Update => C:\Program Files (x86)\LyriXeeker\LyriXupdate.exe
Task: {F3505156-E461-40BE-8A2A-9A654CD890EC} - System32\Tasks\Ad-Aware Antivirus Scheduled Scan => C:\PROGRA~2\AD-AWA~1\AdAwareLauncher.exe
Task: {FF0DF8EB-ABB6-45FD-89DC-2E5E68706A82} - System32\Tasks\schedule!1818212897 => C:\ProgramData\BetterSoft\EasyLife Updater\EasyLife Updater.exe
Task: {FFFAFF31-EE1D-4A67-9FD7-07F054091207} - System32\Tasks\WPD\SqmUpload_S-1-5-21-999702643-3820063141-1782019841-1001 => Rundll32.exe portabledeviceapi.dll,#1
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cee6f4d25ef716.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\LyricXeeker Update.job => C:\Program Files (x86)\LyriXeeker\LyriXupdate.exe
Task: C:\Windows\Tasks\schedule!1818212897.job => C:\ProgramData\BetterSoft\EasyLife Updater\EasyLife Updater.exe

==================== Loaded Modules (whitelisted) =============

2013-03-29 10:01 - 2013-03-29 10:01 - 00088968 _____ () C:\Program Files\TortoiseSVN\bin\libsasl.dll
2010-01-02 15:42 - 2010-01-02 15:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2012-06-18 16:24 - 2012-06-18 16:24 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_05.dll
2011-05-24 23:50 - 2011-05-24 23:50 - 00243712 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2011-03-14 14:21 - 2011-03-14 14:21 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2013-05-09 00:27 - 2013-01-25 09:25 - 00397704 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2012-10-11 20:56 - 2012-10-11 20:56 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-10-11 20:56 - 2012-10-11 20:56 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2011-03-09 18:13 - 2011-03-09 18:13 - 00465640 _____ () C:\Program Files (x86)\NTI\Packard Bell MyBackup\sqlite3.dll
2011-03-09 18:12 - 2011-03-09 18:12 - 01081664 _____ () C:\Program Files (x86)\NTI\Packard Bell MyBackup\ACE.dll
2011-03-09 18:12 - 2011-03-09 18:12 - 00125760 _____ () C:\Program Files (x86)\NTI\Packard Bell MyBackup\MailConverter32.dll
2013-05-10 18:43 - 2010-04-01 11:23 - 00389120 _____ () C:\Program Files (x86)\Lexmark S600 Series\lxedscw.dll
2013-05-10 18:43 - 2009-05-27 06:16 - 00192512 _____ () C:\Program Files (x86)\Lexmark S600 Series\lxeddatr.dll
2013-05-10 18:43 - 2010-04-01 11:24 - 01159168 _____ () C:\Program Files (x86)\Lexmark S600 Series\lxedDRS.dll
2013-05-10 18:43 - 2009-03-09 23:43 - 00155648 _____ () C:\Program Files (x86)\Lexmark S600 Series\lxedcaps.dll
2013-05-10 18:43 - 2009-02-20 02:48 - 00381440 _____ () C:\Windows\system32\lxedsm.dll
2013-05-10 18:43 - 2009-04-28 01:56 - 00024064 _____ () C:\Windows\system32\lxedsmr.dll
2013-05-10 18:43 - 2010-04-05 04:56 - 00716954 _____ () C:\Program Files (x86)\Lexmark S600 Series\Epwizard.DLL
2013-05-10 18:43 - 2010-04-05 04:55 - 00159890 _____ () C:\Program Files (x86)\Lexmark S600 Series\customui.dll
2013-05-10 18:43 - 2010-04-05 04:54 - 00123033 _____ () C:\Program Files (x86)\Lexmark S600 Series\Eputil.DLL
2013-05-10 18:43 - 2010-04-05 04:54 - 00143502 _____ () C:\Program Files (x86)\Lexmark S600 Series\Imagutil.DLL
2013-05-10 18:43 - 2010-04-05 04:55 - 00061604 _____ () C:\Program Files (x86)\Lexmark S600 Series\Epfunct.DLL
2013-05-10 18:43 - 2009-06-23 05:09 - 02203648 _____ () C:\Program Files (x86)\Lexmark S600 Series\EPWizRes.dll
2013-05-10 18:43 - 2009-06-23 05:10 - 00045056 _____ () C:\Program Files (x86)\Lexmark S600 Series\epstring.dll
2013-05-10 18:43 - 2009-06-23 05:11 - 00102400 _____ () C:\Program Files (x86)\Lexmark S600 Series\EPOEMDll.dll
2013-05-10 18:43 - 2009-04-07 13:25 - 00409600 _____ () C:\Program Files (x86)\Lexmark S600 Series\iptk.dll
2013-05-10 18:43 - 2009-03-02 08:25 - 00151552 _____ () C:\Program Files (x86)\Lexmark S600 Series\lxedptp.dll
2013-08-18 16:20 - 2013-08-18 16:20 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\9ab0e818cb3d1b6930eba54179f89300\IsdiInterop.ni.dll
2011-06-03 04:28 - 2011-01-13 01:56 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: Microsoft-Adapter für Miniports virtueller WiFis
Description: Microsoft-Adapter für Miniports virtueller WiFis
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: vwifimp
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (12/02/2013 10:25:49 PM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.

Error: (12/02/2013 10:15:30 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/02/2013 07:03:52 PM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.

Error: (12/02/2013 06:53:21 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/01/2013 03:58:35 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/30/2013 08:01:42 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/30/2013 00:39:40 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/29/2013 08:32:10 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/29/2013 03:48:31 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 9017

Error: (11/29/2013 03:48:31 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 9017


System errors:
=============
Error: (12/02/2013 10:38:32 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (12/02/2013 10:38:32 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (12/02/2013 10:38:31 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (12/02/2013 10:38:31 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (12/02/2013 10:14:24 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (12/02/2013 10:13:51 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "RadeonPro Support Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (12/02/2013 10:13:51 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst RadeonPro Support Service erreicht.

Error: (12/02/2013 10:13:21 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "lxedCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (12/02/2013 10:13:21 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst lxedCATSCustConnectService erreicht.

Error: (12/02/2013 08:49:55 PM) (Source: DCOM) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}


Microsoft Office Sessions:
=========================
Error: (12/02/2013 10:25:49 PM) (Source: CVHSVC)(User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.

Error: (12/02/2013 10:15:30 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/02/2013 07:03:52 PM) (Source: CVHSVC)(User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.

Error: (12/02/2013 06:53:21 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/01/2013 03:58:35 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/30/2013 08:01:42 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/30/2013 00:39:40 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/29/2013 08:32:10 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/29/2013 03:48:31 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 9017

Error: (11/29/2013 03:48:31 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 9017


==================== Memory info =========================== 

Percentage of memory in use: 23%
Total physical RAM: 8173.86 MB
Available physical RAM: 6272.38 MB
Total Pagefile: 15172.04 MB
Available Pagefile: 13118.18 MB
Total Virtual: 8192 MB
Available Virtual: 8191.79 MB

==================== Drives ================================

Drive c: (Packard Bell) (Fixed) (Total:576.07 GB) (Free:87.45 GB) NTFS
Drive e: (USB DISK) (Removable) (Total:1.89 GB) (Free:1.55 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596 GB) (Disk ID: B64ACC9B)
Partition 1: (Not Active) - (Size=20 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=576 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 2 GB) (Disk ID: 257D8817)
Partition 1: (Active) - (Size=2 GB) - (Type=0B)

==================== End Of Log ============================
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-12-2013
Ran by Kerem (administrator) on KEREM-PC on 02-12-2013 22:43:10
Running from C:\Users\Kerem\Desktop\ergr
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Acer Incorporated) C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
( ) C:\Windows\System32\lxedcoms.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Packard Bell MyBackup\IScheduleSvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
() C:\Program Files (x86)\Lexmark S600 Series\lxedmon.exe
() C:\Program Files (x86)\Lexmark S600 Series\ezprint.exe
(Akamai Technologies, Inc.) C:\Users\Kerem\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\Kerem\AppData\Local\Akamai\netsession_win.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Packard Bell MyBackup\BackupManagerTray.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Ask) C:\Program Files (x86)\Ask.com\Updater\Updater.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Lavasoft) C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
() C:\Program Files (x86)\Tor\tor.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11785832 2011-03-10] (Realtek Semiconductor)
HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4526 2010-11-29] ()
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2588968 2010-11-12] (ELAN Microelectronics Corp.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [497648 2010-07-29] (Adobe Systems Incorporated)
HKLM\...\Run: [Power Management] - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [1796200 2011-02-22] (Acer Incorporated)
HKLM\...\Run: [lxedmon.exe] - C:\Program Files (x86)\Lexmark S600 Series\lxedmon.exe [772712 2013-01-23] ()
HKLM\...\Run: [EzPrint] - C:\Program Files (x86)\Lexmark S600 Series\ezprint.exe [150264 2013-01-23] ()
HKLM-x32\...\Winlogon: [Userinit] C:\Windows\sysWOW64\userinit.exe [26624 2010-11-21] (Microsoft Corporation)
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1820584 2013-10-30] (Valve Corporation)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20549280 2013-10-21] (Skype Technologies S.A.)
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Kerem\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-01-13] (Intel Corporation)
HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NTI\Packard Bell MyBackup\BackupManagerTray.exe [295744 2011-03-09] (NTI Corporation)
HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-01] (Symantec Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1081424 2011-03-14] (Dritek System Inc.)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-05-24] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [ApnUpdater] - C:\Program Files (x86)\Ask.com\Updater\Updater.exe [1646216 2013-04-01] (Ask)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-04] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-15] (Apple Inc.)
HKLM-x32\...\Run: [Ad-Aware Browsing Protection] - C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe [554384 2013-07-15] (Lavasoft)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [amd_dc_opt] - C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
Startup: C:\Users\Kerem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.softonic.com/MOY00621/tb_v1?SearchSource=10&cc=&mi=0a4355e8000000000000ccaf782f7fa2
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://packardbell.msn.com
URLSearchHook: HKCU - UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
SearchScopes: HKLM-x32 - {01bd49d7-c76b-4310-8beb-14d7e5f322c6} URL = hxxp://search.easylifeapp.com/?q={searchTerms}&pid=34&src=ie2&r=2013/04/04&hid=3727834479&lg=EN&cc=DE
SearchScopes: HKLM-x32 - {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = hxxp://websearch.youwillfind.info/?l=1&q={searchTerms}&pid=512&r=2013/04/27&hid=3727834479&lg=EN&cc=DE
SearchScopes: HKCU - DefaultScope {D49B2F3F-DC78-494F-AD36-531962926C6E} URL = hxxp://search.softonic.com/MOY00621/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=0a4355e8000000000000ccaf782f7fa2&r=533
SearchScopes: HKCU - {01bd49d7-c76b-4310-8beb-14d7e5f322c6} URL = hxxp://search.easylifeapp.com/?q={searchTerms}&pid=34&src=ie2&r=2013/04/04&hid=3727834479&lg=EN&cc=DE
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=0A43DEAF782F7FA2&affID=121565&tsp=5003
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKCU - {7068FD3E-8A3D-4B30-944C-FF4A4E5D586B} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=933a0042-6d81-42dc-ac57-b6b33491ba8d&apn_sauid=9520F0D7-71E3-41E2-80A9-A00A065FEC15
SearchScopes: HKCU - {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = hxxp://websearch.youwillfind.info/?l=1&q={searchTerms}&pid=512&r=2013/04/27&hid=3727834479&lg=EN&cc=DE
SearchScopes: HKCU - {D49B2F3F-DC78-494F-AD36-531962926C6E} URL = hxxp://search.softonic.com/MOY00621/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=0a4355e8000000000000ccaf782f7fa2&r=533
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll No File
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.24.6\bh\delta.dll No File
BHO-x32: Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Softonic Helper Object - {E87806B5-E908-45FD-AF5E-957D83E58E68} - C:\Program Files (x86)\Softonic\Softonic\1.8.21.14\bh\Softonic.dll (Softonic.com)
BHO-x32: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll No File
Toolbar: HKLM-x32 - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.24.6\deltaTlbr.dll No File
Toolbar: HKLM-x32 - Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
Toolbar: HKLM-x32 - Softonic Toolbar - {5018CFD2-804D-4C99-9F81-25EAEA2769DE} - C:\Program Files (x86)\Softonic\Softonic\1.8.21.14\SoftonicTlbr.dll (Softonic.com)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File

FireFox:
========
FF ProfilePath: C:\Users\Kerem\AppData\Roaming\Mozilla\Firefox\Profiles\dsrzqudh.default-1381436729081
FF user.js: detected! => C:\Users\Kerem\AppData\Roaming\Mozilla\Firefox\Profiles\dsrzqudh.default-1381436729081\user.js
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=6.0.12.449 - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Kerem\AppData\Roaming\Mozilla\Firefox\Profiles\dsrzqudh.default-1381436729081\searchplugins\softonic.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: GFACE Experience Plugin - C:\Users\Kerem\AppData\Roaming\Mozilla\Firefox\Profiles\dsrzqudh.default-1381436729081\Extensions\cryenginebrowserplugin@crytek.com
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\ffxtlbr@babylon.com
FF HKCU\...\Firefox\Extensions: [{60525b7e-56a2-4031-a4f4-35eb2c9dd4d8}] - C:\Program Files (x86)\LyriXeeker\130.xpi

Chrome: 
=======
CHR Extension: (Softonic Chrome Toolbar) - C:\Users\Kerem\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0
CHR Extension: (AdBlock) - C:\Users\Kerem\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.14_0
CHR Extension: (Google Wallet) - C:\Users\Kerem\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR HKLM-x32\...\Chrome\Extension: [aaaaabfjnbeinlpljodiajipidiompfl] - C:\Users\Kerem\AppData\Local\APN\GoogleCRXs\aaaaabfjnbeinlpljodiajipidiompfl_7.15.24.0.crx
CHR HKLM-x32\...\Chrome\Extension: [elchiiiejkobdbblfejjkbphbddgmljf] - C:\Program Files (x86)\Softonic\Softonic\1.8.21.14\Softonic.crx
CHR HKLM-x32\...\Chrome\Extension: [epojlgbehpaeekopencdagbdamnkppci] - C:\Program Files (x86)\LyriXeeker\130.crx
CHR HKLM-x32\...\Chrome\Extension: [nbmafkdmkkckhggblphicnnhlgljnoje] - C:\Program Files (x86)\TornTV.com\torn2_10.crx
CHR HKLM-x32\...\Chrome\Extension: [oejkcgajlodefenbbjdnaiahmbnnoole] - C:\Program Files (x86)\Lavasoft\AdAware SecureSearch Toolbar\chrome-newtab-search.crx

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-09-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-09-04] (Avira Operations GmbH & Co. KG)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-10-17] ()
R2 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [873064 2011-02-22] (Acer Incorporated)
R2 GREGService; C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe [29696 2011-05-26] (Acer Incorporated)
R2 Live Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [244624 2011-01-31] (Acer Incorporated)
S2 lxedCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxedserv.exe [45736 2010-04-14] (Lexmark International, Inc.)
R2 lxed_device; C:\Windows\system32\lxedcoms.exe [1052328 2010-04-14] ( )
R2 lxed_device; C:\Windows\SysWow64\lxedcoms.exe [598696 2010-04-14] ( )
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Packard Bell MyBackup\IScheduleSvc.exe [257344 2011-03-09] (NTI Corporation)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-10-15] ()
S2 RadeonPro Support Service; C:\Program Files (x86)\RadeonPro\RadeonProSupport.exe [20608 2013-04-13] (Mr. John aka japamd)
R2 tor; C:\Program Files (x86)\Tor\tor.exe [3233806 2013-09-05] ()

==================== Drivers (Whitelisted) ====================

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-03-10] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-04] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-09-04] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-06] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-03-10] (DT Soft Ltd)
S3 EvolveVirtualAdapter; C:\Windows\System32\DRIVERS\evolve.sys [21656 2013-11-30] (Echobit, LLC)
R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2013-08-12] (GFI Software)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-03-10] ()
S3 WinRing0_1_2_0; \??\C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-02 22:42 - 2013-12-02 22:42 - 00000168 _____ C:\Users\Kerem\defogger_reenable
2013-12-02 22:42 - 2013-12-02 22:42 - 00000000 ____D C:\FRST
2013-12-02 22:41 - 2013-12-02 22:43 - 00000000 ____D C:\Users\Kerem\Desktop\ergr
2013-12-02 22:38 - 2013-09-24 13:33 - 00401205 _____ C:\Users\Kerem\Desktop\harvester - Kopie (2).vmx
2013-12-01 19:39 - 2013-12-01 19:39 - 00000000 ____D C:\Users\Kerem\AppData\Local\Downloaded Installations
2013-12-01 19:39 - 2013-12-01 19:39 - 00000000 ____D C:\Program Files (x86)\AMD
2013-12-01 19:38 - 2013-12-01 19:38 - 00000000 ____D C:\Windows\SysWOW64\AGEIA
2013-12-01 19:38 - 2013-12-01 19:38 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-12-01 19:37 - 2008-07-12 08:18 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2013-12-01 19:37 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2013-12-01 19:37 - 2008-07-12 08:18 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2013-12-01 19:37 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2013-12-01 19:37 - 2008-07-12 08:18 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2013-12-01 19:37 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2013-11-30 23:51 - 2013-11-30 23:51 - 00021656 _____ (Echobit, LLC) C:\Windows\system32\Drivers\evolve.sys
2013-11-30 23:50 - 2013-11-30 23:50 - 03258328 _____ (Echobit LLC) C:\Users\Kerem\Downloads\EvolveSetup.exe
2013-11-30 23:50 - 2013-11-30 23:50 - 00000000 ____D C:\Users\Kerem\AppData\Local\Echobit
2013-11-30 23:50 - 2013-11-30 23:50 - 00000000 ____D C:\ProgramData\Echobit
2013-11-30 20:04 - 2013-11-30 22:20 - 105152277 _____ C:\Windows\SysWOW64\혲枙B
2013-11-29 20:29 - 2013-12-02 22:12 - 00012974 _____ C:\Windows\PFRO.log
2013-11-27 22:29 - 2013-11-27 22:29 - 24814961 _____ C:\Users\Kerem\Downloads\guiminer-scrypt_win32_binaries_v0.04.zip
2013-11-27 22:14 - 2013-11-27 22:38 - 00000000 ____D C:\Users\Kerem\AppData\Roaming\Litecoin
2013-11-27 22:12 - 2013-11-28 03:34 - 106533507 _____ C:\Windows\SysWOW64\蒏눈—
2013-11-27 22:10 - 2013-11-27 22:10 - 00000000 ____D C:\Users\Kerem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Litecoin
2013-11-27 22:10 - 2013-11-27 22:10 - 00000000 ____D C:\Program Files (x86)\Litecoin
2013-11-27 20:43 - 2013-11-27 20:46 - 13633097 _____ (Litecoin project) C:\Users\Kerem\Downloads\litecoin-0.8.5.1-win32-setup.exe
2013-11-27 20:22 - 2013-11-27 20:22 - 06578559 _____ C:\Users\Kerem\Desktop\fordasboost.7z
2013-11-27 20:11 - 2013-11-27 20:13 - 00000000 ____D C:\Users\Kerem\Desktop\fordasboost
2013-11-24 23:37 - 2013-11-24 23:37 - 03686042 _____ C:\Users\Kerem\Downloads\20101226.7z
2013-11-24 23:32 - 2013-11-24 23:32 - 00870886 _____ C:\Users\Kerem\Downloads\acdcfull.7z
2013-11-24 23:29 - 2013-11-24 23:29 - 00000222 _____ C:\Windows\STALKER_utilities_pack.ini
2013-11-24 23:28 - 2013-11-24 23:28 - 00419840 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2013-11-24 23:28 - 2013-11-24 23:28 - 00413696 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2013-11-24 23:28 - 2013-11-24 23:28 - 00133632 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2013-11-24 23:28 - 2013-11-24 23:28 - 00110592 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2013-11-24 23:28 - 2013-11-24 23:28 - 00000000 ____D C:\Program Files (x86)\OpenAL
2013-11-24 23:26 - 2013-11-24 23:26 - 00001101 _____ C:\Users\Kerem\Desktop\SUP launcher.lnk
2013-11-24 23:26 - 2013-11-24 23:26 - 00001101 _____ C:\Users\Kerem\Desktop\STALKER utilities pack HELP.lnk
2013-11-24 23:26 - 2013-11-24 23:26 - 00000000 ____D C:\Users\Kerem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\STALKER utilities pack
2013-11-24 23:25 - 2013-11-24 23:25 - 08537619 _____ C:\Users\Kerem\Downloads\S.T.A.L.K.E.R.utilitiespackv0.5.rar
2013-11-24 23:10 - 2013-11-24 23:12 - 08119139 _____ C:\Users\Kerem\Downloads\20130630.7z
2013-11-24 23:07 - 2013-11-24 23:08 - 04315916 _____ C:\Users\Kerem\Downloads\20120731.7z
2013-11-24 22:57 - 2013-11-24 23:26 - 00000000 ____D C:\Users\Kerem\Desktop\ogfviewer
2013-11-24 22:46 - 2013-11-24 23:17 - 00000000 ____D C:\Users\Kerem\Desktop\stalker_extracted
2013-11-24 22:45 - 2013-11-24 22:45 - 00053212 _____ C:\Users\Kerem\Downloads\stalker_data_upacker.zip
2013-11-24 22:42 - 2013-11-24 22:42 - 00053212 _____ C:\Users\Kerem\Downloads\s.t.a.l.k.e.r._data_upacker.zip
2013-11-24 22:39 - 2013-11-24 22:39 - 00341249 _____ C:\Users\Kerem\Downloads\ogfviewer_v104.rar
2013-11-24 14:00 - 2013-11-24 14:00 - 00000000 ____D C:\Users\Kerem\AppData\Roaming\Softonic
2013-11-24 14:00 - 2013-11-24 14:00 - 00000000 ____D C:\Program Files (x86)\Softonic
2013-11-24 13:58 - 2013-11-24 13:59 - 32206488 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Kerem\Downloads\FreeYouTubeToMP3Converter.exe
2013-11-22 21:32 - 2013-11-22 21:32 - 00000000 ____D C:\Users\Kerem\Downloads\105_PANA
2013-11-22 21:32 - 2013-11-22 21:32 - 00000000 ____D C:\Users\Kerem\Downloads\104_PANA
2013-11-22 03:57 - 2013-11-22 03:57 - 00000000 ____D C:\ProgramData\GFACE
2013-11-22 00:24 - 2013-11-22 00:24 - 00625173 _____ C:\Users\Kerem\Downloads\htd-stk4.rar
2013-11-22 00:23 - 2013-11-22 00:23 - 00000668 _____ C:\Windows\DXError.log
2013-11-22 00:22 - 2013-12-01 19:37 - 00019070 _____ C:\Windows\DirectX.log
2013-11-22 00:07 - 2013-11-22 00:08 - 20010640 _____ (THQ                                                         ) C:\Users\Kerem\Downloads\stalker-ww-10004.exe
2013-11-21 21:15 - 2013-11-21 21:15 - 105611834 _____ C:\Windows\SysWOW64\⩳࠷¯
2013-11-21 21:04 - 2013-11-21 21:04 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cee6f4d25ef716.job
2013-11-20 04:32 - 2013-11-20 04:34 - 09173675 _____ C:\Users\Kerem\Documents\deusexshort.wmv
2013-11-20 03:30 - 2013-11-20 04:30 - 00027128 _____ C:\Users\Kerem\Desktop\deusexshort.veg
2013-11-20 03:30 - 2013-11-20 04:21 - 00027128 _____ C:\Users\Kerem\Desktop\deusexshort.veg.bak
2013-11-20 03:12 - 2013-11-20 03:44 - 00000000 ____D C:\Users\Kerem\Desktop\deusexextract
2013-11-20 02:35 - 2013-11-20 02:35 - 00000000 ____D C:\Program Files (x86)\utvideo
2013-11-20 02:33 - 2013-11-20 02:33 - 00000000 ____D C:\Users\Kerem\Desktop\utvideo-1.1.3
2013-11-20 02:00 - 2013-11-20 02:01 - 00002479 _____ C:\Users\Kerem\Desktop\deusex_kerem-pc.txt
2013-11-20 01:54 - 2013-11-27 17:45 - 00000000 ____D C:\Users\Kerem\Desktop\deusexmovie
2013-11-20 01:48 - 2013-11-20 01:49 - 00004615 _____ C:\Users\Kerem\Desktop\deusexmovie_kerem-pc.txt
2013-11-19 14:32 - 2013-11-20 02:37 - 08544893 _____ C:\Users\Kerem\Desktop\deusex.dmx
2013-11-19 03:11 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-11-19 03:04 - 2013-11-19 03:04 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-19 03:04 - 2013-11-19 03:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-19 03:04 - 2013-11-19 03:04 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-19 03:04 - 2013-11-19 03:04 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-19 03:04 - 2013-11-19 03:04 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-19 03:04 - 2013-11-19 03:04 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-19 03:04 - 2013-11-19 03:04 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-19 03:04 - 2013-11-19 03:04 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-19 03:04 - 2013-11-19 03:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-19 03:04 - 2013-11-19 03:04 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-19 03:04 - 2013-11-19 03:04 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-19 03:01 - 2013-11-19 03:11 - 00010277 _____ C:\Windows\IE11_main.log
2013-11-18 23:07 - 2012-09-08 15:43 - 00073216 _____ (hxxp://blackninja2000.narod.ru) C:\Users\Kerem\Desktop\d3d11.dll
2013-11-18 16:31 - 2013-11-18 16:31 - 00000000 ____D C:\Crash
2013-11-17 23:40 - 2013-11-17 23:40 - 00000086 _____ C:\Users\Kerem\Desktop\mojavedetailsprite.vmt
2013-11-17 16:16 - 2013-11-17 21:27 - 00000000 ____D C:\Users\Kerem\Desktop\detailprop2
2013-11-16 10:17 - 2013-11-16 10:17 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-15 14:48 - 2013-11-15 14:48 - 00000088 _____ C:\Users\Kerem\Desktop\greyscale.dat
2013-11-15 14:36 - 2013-11-15 14:36 - 00002224 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-11-14 18:42 - 2013-11-14 18:42 - 104278918 _____ C:\Windows\SysWOW64\旋涪˜
2013-11-13 21:59 - 2013-11-18 23:03 - 00002639 _____ C:\Users\Kerem\Desktop\facepunch DEM.txt
2013-11-13 21:56 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-13 21:56 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-13 21:56 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-13 21:56 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-13 21:56 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-13 21:56 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-13 21:56 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-13 21:56 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-13 21:56 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-13 21:56 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-13 21:56 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-13 21:56 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-13 21:56 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-13 21:56 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-13 21:56 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-13 21:56 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-13 21:56 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-13 21:56 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-13 21:56 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-13 21:56 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-13 21:56 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-13 21:56 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-13 21:56 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-13 21:56 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-13 21:56 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-13 21:56 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-13 21:56 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-13 21:56 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-13 21:56 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-13 21:56 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-13 13:32 - 2013-11-13 13:32 - 00000000 ____D C:\Users\Kerem\deusex
2013-11-13 12:41 - 2013-11-13 13:31 - 00000000 ____D C:\Users\Kerem\Desktop\decompile
2013-11-12 14:53 - 2013-11-29 00:44 - 00000000 ____D C:\Users\Kerem\Desktop\Neuer Ordner
2013-11-08 09:52 - 2013-11-08 23:22 - 00000000 ____D C:\Users\Kerem\Desktop\tropical
2013-11-06 17:11 - 2013-11-18 22:58 - 00000000 ____D C:\Users\Kerem\Desktop\terrainmapping
2013-11-06 17:10 - 2013-11-06 17:10 - 00001667 _____ C:\Users\Kerem\Desktop\3dem - Verknüpfung.lnk
2013-11-06 01:31 - 2013-11-06 01:31 - 00000000 ____D C:\Users\Kerem\AppData\Local\licensecb
2013-11-06 01:31 - 2013-11-06 01:31 - 00000000 ____D C:\Users\Kerem\AppData\Local\CrazyBump
2013-11-06 01:31 - 2013-11-06 01:31 - 00000000 ____D C:\ProgramData\licensecb
2013-11-06 01:31 - 2013-11-06 01:31 - 00000000 ____D C:\ProgramData\CrazyBump
2013-11-04 21:53 - 2013-11-04 21:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf
2013-11-04 21:53 - 2013-11-04 21:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_MijXfilt_01009.Wdf
2013-11-04 21:50 - 2013-11-04 21:50 - 00000935 _____ C:\Users\Public\Desktop\DS3 Tool.lnk
2013-11-04 21:50 - 2013-11-04 21:50 - 00000000 ____D C:\Users\Kerem\AppData\Roaming\MotioninJoy
2013-11-04 21:50 - 2013-11-04 21:50 - 00000000 ____D C:\Program Files\MotioninJoy
2013-11-04 21:50 - 2012-03-25 10:26 - 00115272 _____ (MotioninJoy) C:\Windows\system32\Drivers\MijXfilt.sys
2013-11-04 21:50 - 2011-12-07 19:42 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll
2013-11-04 21:50 - 2011-12-07 19:42 - 00328712 _____ (Logitech Inc.) C:\Windows\system32\MijFrc.dll
2013-11-04 21:50 - 2011-12-07 19:42 - 00074960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\xusb21.sys
2013-11-02 19:30 - 2013-11-02 19:30 - 00000000 ____D C:\Users\Kerem\AppData\Local\238010
2013-11-02 19:29 - 2013-11-02 19:29 - 00000000 ____D C:\ProgramData\Intel

==================== One Month Modified Files and Folders =======

2013-12-02 22:43 - 2013-12-02 22:41 - 00000000 ____D C:\Users\Kerem\Desktop\ergr
2013-12-02 22:42 - 2013-12-02 22:42 - 00000168 _____ C:\Users\Kerem\defogger_reenable
2013-12-02 22:42 - 2013-12-02 22:42 - 00000000 ____D C:\FRST
2013-12-02 22:42 - 2013-03-09 21:45 - 00000000 ____D C:\Users\Kerem
2013-12-02 22:41 - 2013-03-10 05:22 - 00710724 _____ C:\Windows\system32\perfh007.dat
2013-12-02 22:41 - 2013-03-10 05:22 - 00154764 _____ C:\Windows\system32\perfc007.dat
2013-12-02 22:41 - 2009-07-14 06:13 - 01651278 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-02 22:40 - 2013-07-31 17:58 - 00000000 ____D C:\Users\Kerem\Desktop\NVprops
2013-12-02 22:23 - 2009-07-14 05:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-02 22:23 - 2009-07-14 05:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-02 22:22 - 2013-03-09 23:25 - 00000000 ____D C:\Program Files (x86)\Steam
2013-12-02 22:21 - 2013-03-09 23:23 - 00000000 ____D C:\Users\Kerem\AppData\Roaming\Skype
2013-12-02 22:19 - 2013-03-09 20:34 - 01630622 _____ C:\Windows\WindowsUpdate.log
2013-12-02 22:13 - 2013-10-30 01:30 - 00006051 _____ C:\Windows\setupact.log
2013-12-02 22:13 - 2013-05-10 18:44 - 00008947 _____ C:\ProgramData\lxedscan.log
2013-12-02 22:12 - 2013-11-29 20:29 - 00012974 _____ C:\Windows\PFRO.log
2013-12-02 20:34 - 2013-04-09 16:28 - 00000000 ____D C:\ProgramData\Autodesk
2013-12-02 20:33 - 2013-05-19 22:31 - 00002184 _____ C:\ProgramData\lxed.log
2013-12-02 20:27 - 2013-04-09 19:53 - 00000000 ____D C:\Users\Kerem\AppData\Local\Autodesk
2013-12-02 20:25 - 2013-09-11 21:20 - 00000000 ____D C:\Users\Kerem\AppData\Local\backburner
2013-12-02 20:25 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-12-02 03:19 - 2013-03-31 02:53 - 00000000 ____D C:\HammerAutosave
2013-12-02 02:20 - 2013-03-15 23:07 - 00000000 ____D C:\Users\Kerem\AppData\Roaming\TS3Client
2013-12-01 20:46 - 2013-07-02 17:29 - 00000000 ____D C:\Users\Kerem\AppData\Roaming\.minecraft
2013-12-01 19:39 - 2013-12-01 19:39 - 00000000 ____D C:\Users\Kerem\AppData\Local\Downloaded Installations
2013-12-01 19:39 - 2013-12-01 19:39 - 00000000 ____D C:\Program Files (x86)\AMD
2013-12-01 19:39 - 2013-03-23 01:36 - 00000000 ____D C:\Users\Kerem\Documents\My Games
2013-12-01 19:38 - 2013-12-01 19:38 - 00000000 ____D C:\Windows\SysWOW64\AGEIA
2013-12-01 19:38 - 2013-12-01 19:38 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-12-01 19:37 - 2013-11-22 00:22 - 00019070 _____ C:\Windows\DirectX.log
2013-11-30 23:51 - 2013-11-30 23:51 - 00021656 _____ (Echobit, LLC) C:\Windows\system32\Drivers\evolve.sys
2013-11-30 23:50 - 2013-11-30 23:50 - 03258328 _____ (Echobit LLC) C:\Users\Kerem\Downloads\EvolveSetup.exe
2013-11-30 23:50 - 2013-11-30 23:50 - 00000000 ____D C:\Users\Kerem\AppData\Local\Echobit
2013-11-30 23:50 - 2013-11-30 23:50 - 00000000 ____D C:\ProgramData\Echobit
2013-11-30 22:20 - 2013-11-30 20:04 - 105152277 _____ C:\Windows\SysWOW64\혲枙B
2013-11-29 00:44 - 2013-11-12 14:53 - 00000000 ____D C:\Users\Kerem\Desktop\Neuer Ordner
2013-11-28 17:41 - 2013-03-10 22:21 - 00000000 ____D C:\Users\Kerem\AppData\Local\CrashDumps
2013-11-28 03:34 - 2013-11-27 22:12 - 106533507 _____ C:\Windows\SysWOW64\蒏눈—
2013-11-27 22:38 - 2013-11-27 22:14 - 00000000 ____D C:\Users\Kerem\AppData\Roaming\Litecoin
2013-11-27 22:29 - 2013-11-27 22:29 - 24814961 _____ C:\Users\Kerem\Downloads\guiminer-scrypt_win32_binaries_v0.04.zip
2013-11-27 22:10 - 2013-11-27 22:10 - 00000000 ____D C:\Users\Kerem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Litecoin
2013-11-27 22:10 - 2013-11-27 22:10 - 00000000 ____D C:\Program Files (x86)\Litecoin
2013-11-27 20:46 - 2013-11-27 20:43 - 13633097 _____ (Litecoin project) C:\Users\Kerem\Downloads\litecoin-0.8.5.1-win32-setup.exe
2013-11-27 20:22 - 2013-11-27 20:22 - 06578559 _____ C:\Users\Kerem\Desktop\fordasboost.7z
2013-11-27 20:13 - 2013-11-27 20:11 - 00000000 ____D C:\Users\Kerem\Desktop\fordasboost
2013-11-27 17:59 - 2013-11-01 19:31 - 42661843 _____ C:\Users\Kerem\Documents\Ohne Titel.wmv
2013-11-27 17:45 - 2013-11-20 01:54 - 00000000 ____D C:\Users\Kerem\Desktop\deusexmovie
2013-11-24 23:37 - 2013-11-24 23:37 - 03686042 _____ C:\Users\Kerem\Downloads\20101226.7z
2013-11-24 23:32 - 2013-11-24 23:32 - 00870886 _____ C:\Users\Kerem\Downloads\acdcfull.7z
2013-11-24 23:29 - 2013-11-24 23:29 - 00000222 _____ C:\Windows\STALKER_utilities_pack.ini
2013-11-24 23:28 - 2013-11-24 23:28 - 00419840 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2013-11-24 23:28 - 2013-11-24 23:28 - 00413696 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2013-11-24 23:28 - 2013-11-24 23:28 - 00133632 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2013-11-24 23:28 - 2013-11-24 23:28 - 00110592 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2013-11-24 23:28 - 2013-11-24 23:28 - 00000000 ____D C:\Program Files (x86)\OpenAL
2013-11-24 23:26 - 2013-11-24 23:26 - 00001101 _____ C:\Users\Kerem\Desktop\SUP launcher.lnk
2013-11-24 23:26 - 2013-11-24 23:26 - 00001101 _____ C:\Users\Kerem\Desktop\STALKER utilities pack HELP.lnk
2013-11-24 23:26 - 2013-11-24 23:26 - 00000000 ____D C:\Users\Kerem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\STALKER utilities pack
2013-11-24 23:26 - 2013-11-24 22:57 - 00000000 ____D C:\Users\Kerem\Desktop\ogfviewer
2013-11-24 23:25 - 2013-11-24 23:25 - 08537619 _____ C:\Users\Kerem\Downloads\S.T.A.L.K.E.R.utilitiespackv0.5.rar
2013-11-24 23:17 - 2013-11-24 22:46 - 00000000 ____D C:\Users\Kerem\Desktop\stalker_extracted
2013-11-24 23:12 - 2013-11-24 23:10 - 08119139 _____ C:\Users\Kerem\Downloads\20130630.7z
2013-11-24 23:08 - 2013-11-24 23:07 - 04315916 _____ C:\Users\Kerem\Downloads\20120731.7z
2013-11-24 22:45 - 2013-11-24 22:45 - 00053212 _____ C:\Users\Kerem\Downloads\stalker_data_upacker.zip
2013-11-24 22:42 - 2013-11-24 22:42 - 00053212 _____ C:\Users\Kerem\Downloads\s.t.a.l.k.e.r._data_upacker.zip
2013-11-24 22:39 - 2013-11-24 22:39 - 00341249 _____ C:\Users\Kerem\Downloads\ogfviewer_v104.rar
2013-11-24 14:00 - 2013-11-24 14:00 - 00000000 ____D C:\Users\Kerem\AppData\Roaming\Softonic
2013-11-24 14:00 - 2013-11-24 14:00 - 00000000 ____D C:\Program Files (x86)\Softonic
2013-11-24 14:00 - 2013-05-02 20:53 - 00000000 ____D C:\Users\Kerem\AppData\Roaming\OpenCandy
2013-11-24 14:00 - 2013-05-02 20:53 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-11-24 14:00 - 2013-03-13 18:09 - 00000000 ____D C:\Users\Kerem\AppData\Roaming\DVDVideoSoft
2013-11-24 13:59 - 2013-11-24 13:58 - 32206488 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Kerem\Downloads\FreeYouTubeToMP3Converter.exe
2013-11-24 02:24 - 2013-09-11 22:33 - 00716012 _____ C:\Users\Kerem\Desktop\untitled.blend
2013-11-23 19:00 - 2013-05-26 01:53 - 00000000 ____D C:\Users\Kerem\Desktop\Irgendwas
2013-11-22 21:32 - 2013-11-22 21:32 - 00000000 ____D C:\Users\Kerem\Downloads\105_PANA
2013-11-22 21:32 - 2013-11-22 21:32 - 00000000 ____D C:\Users\Kerem\Downloads\104_PANA
2013-11-22 03:57 - 2013-11-22 03:57 - 00000000 ____D C:\ProgramData\GFACE
2013-11-22 01:37 - 2013-03-09 21:47 - 00001433 _____ C:\Users\Kerem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-22 01:34 - 2013-08-12 11:58 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-22 01:34 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-11-22 00:44 - 2013-03-14 18:47 - 00000000 ____D C:\Users\Public\Documents\STALKER-SHOC
2013-11-22 00:24 - 2013-11-22 00:24 - 00625173 _____ C:\Users\Kerem\Downloads\htd-stk4.rar
2013-11-22 00:23 - 2013-11-22 00:23 - 00000668 _____ C:\Windows\DXError.log
2013-11-22 00:13 - 2013-04-21 19:01 - 00000000 ____D C:\Program Files (x86)\THQ
2013-11-22 00:08 - 2013-11-22 00:07 - 20010640 _____ (THQ                                                         ) C:\Users\Kerem\Downloads\stalker-ww-10004.exe
2013-11-22 00:03 - 2013-03-10 16:11 - 00000000 ____D C:\Users\Kerem\AppData\Roaming\DAEMON Tools Lite
2013-11-21 21:15 - 2013-11-21 21:15 - 105611834 _____ C:\Windows\SysWOW64\⩳࠷¯
2013-11-21 21:04 - 2013-11-21 21:04 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cee6f4d25ef716.job
2013-11-20 15:25 - 2013-03-13 19:58 - 00000000 ____D C:\Users\Kerem\AppData\Local\dxhr
2013-11-20 15:19 - 2013-06-30 15:18 - 00000000 ____D C:\Users\Kerem\AppData\Roaming\BitTorrent
2013-11-20 04:34 - 2013-11-20 04:32 - 09173675 _____ C:\Users\Kerem\Documents\deusexshort.wmv
2013-11-20 04:30 - 2013-11-20 03:30 - 00027128 _____ C:\Users\Kerem\Desktop\deusexshort.veg
2013-11-20 04:21 - 2013-11-20 03:30 - 00027128 _____ C:\Users\Kerem\Desktop\deusexshort.veg.bak
2013-11-20 04:03 - 2013-03-18 22:12 - 00000000 ____D C:\Users\Kerem\AppData\Roaming\vlc
2013-11-20 03:44 - 2013-11-20 03:12 - 00000000 ____D C:\Users\Kerem\Desktop\deusexextract
2013-11-20 02:37 - 2013-11-19 14:32 - 08544893 _____ C:\Users\Kerem\Desktop\deusex.dmx
2013-11-20 02:35 - 2013-11-20 02:35 - 00000000 ____D C:\Program Files (x86)\utvideo
2013-11-20 02:33 - 2013-11-20 02:33 - 00000000 ____D C:\Users\Kerem\Desktop\utvideo-1.1.3
2013-11-20 02:01 - 2013-11-20 02:00 - 00002479 _____ C:\Users\Kerem\Desktop\deusex_kerem-pc.txt
2013-11-20 01:49 - 2013-11-20 01:48 - 00004615 _____ C:\Users\Kerem\Desktop\deusexmovie_kerem-pc.txt
2013-11-19 03:11 - 2013-11-19 03:01 - 00010277 _____ C:\Windows\IE11_main.log
2013-11-19 03:04 - 2013-11-19 03:04 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-19 03:04 - 2013-11-19 03:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-19 03:04 - 2013-11-19 03:04 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-19 03:04 - 2013-11-19 03:04 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-19 03:04 - 2013-11-19 03:04 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-19 03:04 - 2013-11-19 03:04 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-19 03:04 - 2013-11-19 03:04 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-19 03:04 - 2013-11-19 03:04 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-19 03:04 - 2013-11-19 03:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-19 03:04 - 2013-11-19 03:04 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-19 03:04 - 2013-11-19 03:04 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-19 03:04 - 2013-11-19 03:04 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-19 03:04 - 2013-11-19 03:04 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-18 23:03 - 2013-11-13 21:59 - 00002639 _____ C:\Users\Kerem\Desktop\facepunch DEM.txt
2013-11-18 22:58 - 2013-11-06 17:11 - 00000000 ____D C:\Users\Kerem\Desktop\terrainmapping
2013-11-18 16:31 - 2013-11-18 16:31 - 00000000 ____D C:\Crash
2013-11-17 23:40 - 2013-11-17 23:40 - 00000086 _____ C:\Users\Kerem\Desktop\mojavedetailsprite.vmt
2013-11-17 21:27 - 2013-11-17 16:16 - 00000000 ____D C:\Users\Kerem\Desktop\detailprop2
2013-11-17 13:57 - 2013-03-09 23:00 - 00002187 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-11-16 10:17 - 2013-11-16 10:17 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-15 14:48 - 2013-11-15 14:48 - 00000088 _____ C:\Users\Kerem\Desktop\greyscale.dat
2013-11-15 14:36 - 2013-11-15 14:36 - 00002224 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-11-15 14:36 - 2013-03-09 22:59 - 00000000 ____D C:\Users\Kerem\AppData\Local\Google
2013-11-15 14:36 - 2013-03-09 22:59 - 00000000 ____D C:\Program Files (x86)\Google
2013-11-14 21:48 - 2013-10-10 01:06 - 00000000 ____D C:\Windows\system32\MRT
2013-11-14 18:42 - 2013-11-14 18:42 - 104278918 _____ C:\Windows\SysWOW64\旋涪˜
2013-11-14 15:13 - 2013-03-09 23:40 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-11-14 15:13 - 2013-03-09 23:40 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-14 15:13 - 2013-03-09 23:40 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-14 15:13 - 2013-03-09 21:48 - 00000000 ____D C:\Users\Kerem\AppData\Local\Adobe
2013-11-14 14:43 - 2007-07-12 02:49 - 00000000 ____D C:\Windows\Panther
2013-11-14 14:16 - 2013-10-10 01:06 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-13 20:11 - 2013-08-29 20:23 - 00000940 _____ C:\Users\Kerem\Desktop\StudioCompiler.lnk
2013-11-13 13:32 - 2013-11-13 13:32 - 00000000 ____D C:\Users\Kerem\deusex
2013-11-13 13:31 - 2013-11-13 12:41 - 00000000 ____D C:\Users\Kerem\Desktop\decompile
2013-11-12 16:02 - 2013-03-15 13:59 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-11-12 16:02 - 2011-06-03 05:00 - 00000000 ____D C:\ProgramData\Skype
2013-11-12 15:51 - 2013-05-13 14:26 - 00000000 ____D C:\Users\Kerem\AppData\Roaming\SoftGrid Client
2013-11-12 15:18 - 2013-03-16 21:50 - 00033774 _____ C:\Users\Kerem\AppData\Local\HWVendorDetection.log
2013-11-11 12:17 - 2013-08-15 01:57 - 00000000 ____D C:\Users\Kerem\Desktop\falloutport
2013-11-11 05:50 - 2010-11-21 04:27 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-11-08 23:22 - 2013-11-08 09:52 - 00000000 ____D C:\Users\Kerem\Desktop\tropical
2013-11-08 06:51 - 2013-03-09 22:12 - 00000000 ____D C:\Users\Kerem\AppData\Roaming\Adobe
2013-11-08 03:19 - 2013-07-09 14:51 - 00001040 _____ C:\Users\Kerem\Desktop\Terrain Generator.lnk
2013-11-08 03:19 - 2013-07-09 14:51 - 00000000 ____D C:\Program Files (x86)\Terrain Generator
2013-11-07 18:44 - 2013-07-28 03:34 - 00000000 ____D C:\Users\Kerem\AppData\Roaming\ihelper
2013-11-06 17:10 - 2013-11-06 17:10 - 00001667 _____ C:\Users\Kerem\Desktop\3dem - Verknüpfung.lnk
2013-11-06 01:34 - 2013-10-11 14:07 - 00000000 ____D C:\Users\Kerem\Desktop\normals
2013-11-06 01:31 - 2013-11-06 01:31 - 00000000 ____D C:\Users\Kerem\AppData\Local\licensecb
2013-11-06 01:31 - 2013-11-06 01:31 - 00000000 ____D C:\Users\Kerem\AppData\Local\CrazyBump
2013-11-06 01:31 - 2013-11-06 01:31 - 00000000 ____D C:\ProgramData\licensecb
2013-11-06 01:31 - 2013-11-06 01:31 - 00000000 ____D C:\ProgramData\CrazyBump
2013-11-06 01:31 - 2013-10-06 02:26 - 00000000 ____D C:\Program Files (x86)\Crazybump
2013-11-04 21:53 - 2013-11-04 21:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf
2013-11-04 21:53 - 2013-11-04 21:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_MijXfilt_01009.Wdf
2013-11-04 21:50 - 2013-11-04 21:50 - 00000935 _____ C:\Users\Public\Desktop\DS3 Tool.lnk
2013-11-04 21:50 - 2013-11-04 21:50 - 00000000 ____D C:\Users\Kerem\AppData\Roaming\MotioninJoy
2013-11-04 21:50 - 2013-11-04 21:50 - 00000000 ____D C:\Program Files\MotioninJoy
2013-11-02 19:30 - 2013-11-02 19:30 - 00000000 ____D C:\Users\Kerem\AppData\Local\238010
2013-11-02 19:29 - 2013-11-02 19:29 - 00000000 ____D C:\ProgramData\Intel

Some content of TEMP:
====================
C:\Users\Kerem\AppData\Local\Temp\AcDeltree.exe
C:\Users\Kerem\AppData\Local\Temp\catalyst_mobility_64-bit_util.exe
C:\Users\Kerem\AppData\Local\Temp\drm_dialogs.dll
C:\Users\Kerem\AppData\Local\Temp\uninst1.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-21 23:01

==================== End Of Log ============================
         

GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-12-02 22:52:13
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 WDC_WD64 rev.01.0 596,17GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\Kerem\AppData\Local\Temp\agdoqpow.sys


---- User code sections - GMER 2.1 ----

.text  C:\Program Files (x86)\NTI\Packard Bell MyBackup\IScheduleSvc.exe[484] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                         0000000077131465 2 bytes [13, 77]
.text  C:\Program Files (x86)\NTI\Packard Bell MyBackup\IScheduleSvc.exe[484] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                        00000000771314bb 2 bytes [13, 77]
.text  ...                                                                                                                                                    * 2
.text  C:\Windows\SysWOW64\PnkBstrA.exe[2060] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 322                                                                0000000073671a22 2 bytes [67, 73]
.text  C:\Windows\SysWOW64\PnkBstrA.exe[2060] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 496                                                                0000000073671ad0 2 bytes [67, 73]
.text  C:\Windows\SysWOW64\PnkBstrA.exe[2060] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 552                                                                0000000073671b08 2 bytes [67, 73]
.text  C:\Windows\SysWOW64\PnkBstrA.exe[2060] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 730                                                                0000000073671bba 2 bytes [67, 73]
.text  C:\Windows\SysWOW64\PnkBstrA.exe[2060] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 762                                                                0000000073671bda 2 bytes [67, 73]
.text  C:\Windows\SysWOW64\PnkBstrA.exe[2060] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                         0000000077131465 2 bytes [13, 77]
.text  C:\Windows\SysWOW64\PnkBstrA.exe[2060] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                        00000000771314bb 2 bytes [13, 77]
.text  ...                                                                                                                                                    * 2
.text  C:\Users\Kerem\AppData\Local\Akamai\netsession_win.exe[2684] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                   0000000077131465 2 bytes [13, 77]
.text  C:\Users\Kerem\AppData\Local\Akamai\netsession_win.exe[2684] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                  00000000771314bb 2 bytes [13, 77]
.text  ...                                                                                                                                                    * 2
.text  C:\Users\Kerem\AppData\Local\Akamai\netsession_win.exe[2756] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                   0000000077131465 2 bytes [13, 77]
.text  C:\Users\Kerem\AppData\Local\Akamai\netsession_win.exe[2756] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                  00000000771314bb 2 bytes [13, 77]
.text  ...                                                                                                                                                    * 2
.text  C:\Program Files (x86)\NTI\Packard Bell MyBackup\BackupManagerTray.exe[2124] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                   0000000077131465 2 bytes [13, 77]
.text  C:\Program Files (x86)\NTI\Packard Bell MyBackup\BackupManagerTray.exe[2124] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                  00000000771314bb 2 bytes [13, 77]
.text  ...                                                                                                                                                    * 2
.text  C:\Program Files (x86)\Launch Manager\LManager.exe[1736] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                       0000000077131465 2 bytes [13, 77]
.text  C:\Program Files (x86)\Launch Manager\LManager.exe[1736] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                      00000000771314bb 2 bytes [13, 77]
.text  ...                                                                                                                                                    * 2
.text  C:\Program Files (x86)\Ask.com\Updater\Updater.exe[2584] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                       0000000077131465 2 bytes [13, 77]
.text  C:\Program Files (x86)\Ask.com\Updater\Updater.exe[2584] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                      00000000771314bb 2 bytes [13, 77]
.text  ...                                                                                                                                                    * 2
.text  C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe[2924] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                0000000077131465 2 bytes [13, 77]
.text  C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe[2924] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                               00000000771314bb 2 bytes [13, 77]
.text  ...                                                                                                                                                    * 2
.text  C:\Program Files (x86)\Tor\tor.exe[3788] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                       0000000077131465 2 bytes [13, 77]
.text  C:\Program Files (x86)\Tor\tor.exe[3788] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                      00000000771314bb 2 bytes [13, 77]
.text  ...                                                                                                                                                    * 2
.text  C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[4924] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   0000000077131465 2 bytes [13, 77]
.text  C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[4924] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  00000000771314bb 2 bytes [13, 77]
.text  ...                                                                                                                                                    * 2

---- EOF - GMER 2.1 ----