Guten Tag.

Ich habe das Problem das mein Internet Abends immer sehr langsam ist.
Deswegen kann ich Abends nicht mehr machen, wofür och Internet brauche.

hxxp://www.speedtest.net/my-result/3616872102

Hier alle notwendigen Sachen:

Laufwerksemulationen abschalten mit Defogger - Erledigt

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 22:19 on 10/07/2014 (Administrator)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Systemscan mit FRST - Im Anhang

Scan mit GMER - wird nachgereicht

Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.
Ich kann auf Arbeit keine Anhänge öffnen, danke.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

FRST - Teil 1

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-07-2014
Ran by Administrator (administrator) on MARCEL on 10-07-2014 22:27:20
Running from C:\Users\Administrator\Downloads
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(HP) C:\Program Files (x86)\HP SimplePass\TrueSuiteService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicShellService.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Authentec Inc.) C:\Program Files\Protector Suite\upeksvr.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(AuthenTec Inc.) C:\Program Files (x86)\HP SimplePass\TouchControl.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Bitsum LLC) C:\Program Files\Process Lasso\ProcessGovernor.exe
(Bitsum LLC) C:\Program Files\Process Lasso\ProcessLasso.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Fork Ltd.) C:\Prey\platform\windows\cronsvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(devolo AG) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\nis.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(Softwareentwicklung Remus - ArchiCrypt) C:\Windows\SysWOW64\STGRAMDiskHandler64.exe
(Connectify) C:\Program Files (x86)\Connectify\ConnectifyService.exe
(Connectify) C:\Program Files (x86)\Connectify\Connectifyd.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86)\devolo\plcnetui\plcnetui.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Talk\TalkMonitor.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
() C:\Program Files (x86)\Acronis\DriveMonitor\adm_tray.exe
(CyberLink) C:\Program Files (x86)\CyberLink\SoftDMA\Kernel\DMR\DMREngine_iSale.exe
(Steganos Software GmbH) C:\Program Files (x86)\Steganos Privacy Suite 14\SteganosHotKeyService.exe
(Microsoft Corporation) C:\Windows\System32\msdt.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Steganos Software GmbH) C:\Program Files (x86)\Steganos Privacy Suite 14\fredirstarter.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\nis.exe
(Microsoft Corporation) C:\Windows\System32\sdiagnhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
() C:\Program Files (x86)\HP SimplePass\IEWebSiteLogon.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Clientnew\ts3client_win64.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\SndVol.exe
(Bohemia Interactive) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3.exe
(Valve Corporation) C:\Program Files (x86)\Steam\GameOverlayUI.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Oracle Corporation) C:\Program Files (x86)\Java\jre7\bin\jp2launcher.exe
(Oracle Corporation) C:\Program Files (x86)\Java\jre7\bin\java.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\nvspcap64.dll [1225920 2014-04-30] (NVIDIA Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [478984 2012-12-15] (Adobe Systems Incorporated)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2874168 2012-09-15] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2013-06-03] (IDT, Inc.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2199840 2014-04-30] (NVIDIA Corporation)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [462400 2011-02-12] (Acronis)
HKLM\...\Run: [AdAwareTray] => C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5152.0\AdAwareTray.exe [3987288 2013-12-11] ()
HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [581024 2012-09-07] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285240 2012-09-28] (Intel Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-04-23] (Apple Inc.)
HKLM-x32\...\Run: [ROCCATTalk] => C:\Program Files (x86)\ROCCAT\Talk\TalkMonitor.EXE [2154496 2011-07-12] (ROCCAT GmbH)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-04-10] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-10-26] (cyberlink)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [186408 2013-12-04] (Geek Software GmbH)
HKLM-x32\...\Run: [adm_tray.exe] => C:\Program Files (x86)\Acronis\DriveMonitor\adm_tray.exe [470120 2011-02-24] ()
HKLM-x32\...\Run: [DMREngine_iSale] => C:\Program Files (x86)\CyberLink\SoftDMA\Kernel\DMR\DMREngine_iSale.exe [306024 2013-07-29] (CyberLink)
HKLM-x32\...\Run: [Steganos HotKeys] => C:\Program Files (x86)\Steganos Privacy Suite 14\SteganosHotKeyService.exe [100864 2013-12-18] (Steganos Software GmbH)
HKLM-x32\...\Run: [SSS14 File Redirection Starter] => C:\Program Files (x86)\Steganos Privacy Suite 14\fredirstarter.exe [17920 2013-12-18] (Steganos Software GmbH)
HKLM-x32\...\Run: [WsmUpdater] => C:\Program Files (x86)\Web Solution Mart\Fake Webcam Codecs Pack\Updater.exe [292208 2012-05-18] (Web Solution Mart)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2014-05-27] (Hewlett-Packard)
HKLM\...\Winlogon: [Userinit] c:\windows\system32\userinit.exe,c:\program files\soluto\soluto.exe /userinit,C:\Windows\SysWOW64\MPK\mpk.exe
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\psfus: C:\Program Files\Protector Suite\psqlpwd.dll (Authentec Inc.)
HKU\.DEFAULT\...\Run: [OKAYFREEDOM_Agent] => "C:\Program Files (x86)\OkayFreedom\OkayFreedomClient.exe" -agent
HKU\S-1-5-21-3786530795-813635038-3550015045-500\...\Run: [C:\Program Files (x86)\NetMeter\NetMeter.exe] => C:\Program Files (x86)\NetMeter\NetMeter.exe [293888 2009-08-09] ()
HKU\S-1-5-21-3786530795-813635038-3550015045-500\...\MountPoints2: {1f320137-84ee-11e2-be72-806e6f6e6963} - "E:\autorun.exe" 
AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [166568 2014-06-13] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [146480 2014-06-13] (NVIDIA Corporation)
Lsa: [Notification Packages] scecli C:\Program Files\Protector Suite\psqlpwd.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)
Startup: C:\Users\Marcel-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 2050 J510 series.lnk
ShortcutTarget: Tintenwarnungen überwachen - HP Deskjet 2050 J510 series.lnk -> C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
Startup: C:\Users\Marcel-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\uiStub.exe - Verknüpfung.lnk
ShortcutTarget: uiStub.exe - Verknüpfung.lnk -> C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\uiStub.exe (No File)
ShellIconOverlayIdentifiers:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
ShellIconOverlayIdentifiers:  SkyDrivePro1 (ErrorConflict) -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers:  SkyDrivePro2 (SyncInProgress) -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers:  SkyDrivePro3 (InSync) -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: ShareOverlay -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
ShellIconOverlayIdentifiers: UEAFOverlay -> {F2F31467-B1AC-4df0-AE79-FD5FA085E22B} => C:\Program Files\Protector Suite\farchns.dll (Authentec Inc.)
ShellIconOverlayIdentifiers: UEAFOverlayOpen -> {A3E208F7-0E3A-4182-A7A6-B169D5D691AA} => C:\Program Files\Protector Suite\farchns.dll (Authentec Inc.)
ShellIconOverlayIdentifiers-x32:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers-x32:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers-x32:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
ShellIconOverlayIdentifiers-x32:  SkyDrivePro1 (ErrorConflict) -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32:  SkyDrivePro2 (SyncInProgress) -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32:  SkyDrivePro3 (InSync) -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: ShareOverlay -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)

==================== Internet (Whitelisted) ====================

ProxyServer: http=127.0.0.1:13828
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPNTDFJS
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM - {F4FB02E6-D448-4915-9B53-67D5766FFFFA} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = 
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = 
SearchScopes: HKCU - {F4FB02E6-D448-4915-9B53-67D5766FFFFA} URL = 
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation)
BHO: RoboForm Toolbar Helper - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_64.dll (IvoSoft)
BHO-x32: No Name - {206E52E0-D52E-11D4-AD54-0000E86C26F6} - C:\Program Files (x86)\FreshDevices\FreshDownload\fdcatch.dll (FreshDevices Corp.)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation)
BHO-x32: Pagealicious - {60C07B56-542E-4054-A503-4E9E08DF2F84} - C:\Program Files (x86)\Pagealicious\Pagealicious.dll (TODO: <Company name>)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: RoboForm Toolbar Helper - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: No Name - {C4415769-1588-4AD6-9624-B2E69DB78D1A} -  No File
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM - Steganos Password Manager Toolbar - {9C65D12D-CF9D-454D-8049-61965D8C6FFF} - C:\Program Files (x86)\Steganos Privacy Suite 14\SPMIEToolbar64.dll (Steganos Software GmbH)
Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
Toolbar: HKLM-x32 - FreshDownload Bar - {ED0E8CA5-42FB-4B18-997B-769E0408E79D} - C:\Program Files (x86)\FreshDevices\FreshDownload\fdiebar.dll (FreshDevices Corp.)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Steganos Password Manager Toolbar - {9C65D12D-CF9D-454D-8049-61965D8C6FFF} - C:\Program Files (x86)\Steganos Privacy Suite 14\SPMIEToolbar.dll (Steganos Software GmbH)
Toolbar: HKLM-x32 - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1209149.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @authentec.com/ffwloplugin - C:\Program Files (x86)\HP SimplePass\npffwloplugin.dll ( HP)
FF Plugin-x32: @gametap.com/npdd,version=1.0 - C:\Program Files (x86)\Downloader\npdd.dll (Metaboli)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF [2013-12-26]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn [2014-07-10]
FF HKLM-x32\...\Firefox\Extensions: [{00F0643E-B367-4779-B45D-7046EBA37A88}] - C:\Program Files (x86)\Steganos Privacy Suite 14\spmplugin3
FF Extension: Steganos Password Manager - C:\Program Files (x86)\Steganos Privacy Suite 14\spmplugin3 [2014-01-10]
FF HKLM-x32\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox
FF Extension: RoboForm Toolbar for Firefox - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox [2014-02-05]

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR Extension: (Google Docs) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-05-06]
CHR Extension: (Google Drive) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-06]
CHR Extension: (YouTube) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-06]
CHR Extension: (Adblock Plus) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-06-06]
CHR Extension: (Search) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-06]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2014-05-06]
CHR Extension: (Website Logon) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\kanflfepiobnpjbljmngfgegijhdpljm [2014-05-06]
CHR Extension: (Norton Identity Protection) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2014-05-12]
CHR Extension: (Google Wallet) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-06]
CHR Extension: (Google Mail) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-06]
CHR Extension: (RoboForm) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnlccmojcmeohlpggmfnbbiapkmbliob [2014-05-06]
CHR HKLM-x32\...\Chrome\Extension: [hdokiejnpimakedhajhdlcegeplioahd] - C:\Program Files (x86)\LastPass\lpchrome.crx [2013-07-29]
CHR HKLM-x32\...\Chrome\Extension: [kanflfepiobnpjbljmngfgegijhdpljm] - C:\Program Files (x86)\HP SimplePass\tschrome.crx [2013-04-01]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\Exts\Chrome.crx [2014-05-23]
CHR HKLM-x32\...\Chrome\Extension: [pnlccmojcmeohlpggmfnbbiapkmbliob] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Chrome\rf-chrome.crx [2014-02-05]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2014-07-04] () [File not signed]
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-07-17] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-07-17] (BlueStack Systems, Inc.)
R2 ClassicShellService; C:\Program Files\Classic Shell\ClassicShellService.exe [68608 2013-06-29] (IvoSoft) [File not signed]
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [241776 2013-01-28] (CyberLink)
R2 Connectify; C:\Program Files (x86)\Connectify\ConnectifyService.exe [487936 2013-12-23] (Connectify) [File not signed]
R2 CronService; C:\Prey\platform\windows\cronsvc.exe [23552 2013-05-08] (Fork Ltd.) [File not signed]
R2 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [3128856 2012-02-28] (devolo AG)
S3 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\DfsdkS64.exe [544768 2009-08-24] (mst software GmbH, Germany) [File not signed]
S4 EBOOSTRSVC; C:\Program Files\eBoostr\EBstrSvc.exe [814328 2012-04-17] (eBoostr.com)
R2 FPLService; C:\Program Files (x86)\HP SimplePass\TrueSuiteService.exe [1641768 2013-06-07] (HP)
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [86528 2012-09-27] (Hewlett-Packard Company) [File not signed]
R2 HPConnectedRemote; C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe [38712 2013-01-10] (Hewlett-Packard)
R3 ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2012-02-01] (Intel Corporation) [File not signed]
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-05-09] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-05-09] (Intel Corporation)
S4 lansweeperservice; C:\Program Files (x86)\Lansweeper\Service\Lansweeperservice.exe [8115200 2013-12-12] (Lansweeper) [File not signed]
S4 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5152.0\AdAwareService.exe [513736 2013-12-11] ()
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\NIS.exe [276376 2014-05-11] (Symantec Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21009352 2014-04-30] (NVIDIA Corporation)
S3 OpenVPNService; C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe [14848 2011-12-15] () [File not signed]
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2013-12-29] ()
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013.SP5\RpcAgentSrv.exe [72344 2008-11-25] (SiSoftware) [File not signed]
S4 SBUpd; C:\Program Files\Common Files\SpeedBit\SBUpdate\sbu.exe [2541688 2014-03-04] (Speedbit Ltd.)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia)
S2 sfrem01; C:\Windows\system32\sfrem01.exe [601208 2006-07-05] (Protection Technology (StarForce))
S4 SolutoLauncherService; C:\Program Files\Soluto\SolutoLauncherService.exe [221728 2013-08-17] (Soluto)
S4 SolutoRemoteService; C:\Program Files\Soluto\SolutoRemoteService.exe [1942528 2013-08-17] (GlavSoft LLC.) [File not signed]
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [333824 2013-06-03] (IDT, Inc.) [File not signed]
R2 Steganos Volatile Disk; C:\WINDOWS\SysWOW64\STGRAMDiskHandler64.exe [450560 2013-07-17] (Softwareentwicklung Remus - ArchiCrypt) [File not signed]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 TrueService; C:\Program Files\Common Files\AuthenTec\TrueService.exe [401856 2013-01-07] (AuthenTec, Inc.)
S4 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [28160 2012-09-06] () [File not signed]
S4 VideoAcceleratorService; C:\Program Files (x86)\SpeedBit Video Accelerator\VideoAcceleratorService.exe [298152 2014-03-04] (SPEEDbit)
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2013-11-24] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [18384 2013-09-04] (Intel(R) Corporation)
S2 BetterMarkIt; C:\Program Files (x86)\bettermarkit\BetterMarkIt153.exe [X]
S4 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [X]
S2 MBAMScheduler; "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe" [X]
S2 MBAMService; "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe" [X]

==================== Drivers (Whitelisted) ====================

S3 AIDA64Driver; C:\Program Files (x86)\FinalWire\AIDA64 Extreme\kerneld.x64 [34136 2014-02-11] ()
R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20140703.001\BHDrvx64.sys [1530160 2014-05-10] (Symantec Corporation)
S2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-07-17] (BlueStack Systems)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1503000.00C\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R1 cnnctfy3; C:\Windows\system32\DRIVERS\cnnctfy3.sys [35352 2014-01-10] (Connectify)
R0 eBoost; C:\Windows\System32\drivers\eBoost.sys [189816 2012-04-17] (eBoostr.com)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [486192 2014-06-11] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142128 2014-06-11] (Symantec Corporation)
S3 FreshIO; C:\Program Files (x86)\FreshDevices\FreshDiagnose\FreshIO.sys [2410 2004-10-26] () [File not signed]
S3 fwdrv; C:\Windows\system32\DRIVERS\fwdrv.sys [26320 2012-12-14] (Web Solution Mart)
S3 hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [46136 2013-07-03] (LogMeIn Inc.)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20140709.001\IDSvia64.sys [525016 2014-07-03] (Symantec Corporation)
R2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [26328 2013-07-23] (Intel Corporation)
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115600 2010-01-29] (EZB Systems, Inc.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-08-27] (Intel Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140710.001\ENG64.SYS [126040 2014-07-04] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140710.001\EX64.SYS [2099288 2014-07-04] (Symantec Corporation)
R1 networx; C:\Windows\System32\drivers\networx.sys [43512 2013-10-21] (NetFilterSDK.com)
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2012-01-31] (CACE Technologies)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19744 2014-04-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia)
S3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [47632 2013-04-29] (Panda Security, S.L.)
S3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [273040 2013-07-30] (Realtek Semiconductor Corp.)
R3 rtbth; C:\Windows\System32\drivers\rtbth.sys [1204424 2014-01-30] (Ralink Technology, Corp.)
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013.SP5\WNt500x64\Sandra.sys [23112 2009-08-07] (SiSoftware)
S3 SBUpdd; C:\Program Files\Common Files\SpeedBit\SBUpdate\sbw.sys [41368 2014-03-04] ()
R0 sfdrv01a; C:\Windows\System32\drivers\sfdrv01a.sys [77432 2009-02-03] (Protection Technology (StarForce))
R0 sfvfs02; C:\Windows\System32\drivers\sfvfs02.sys [107384 2007-02-08] (Protection Technology (StarForce))
R1 SLEE_18_DRIVER; C:\WINDOWS\Sleen1864.sys [109144 2013-11-18] (Softwareentwicklung Remus - ArchiCrypt - )
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [41272 2012-09-15] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-09-15] (Synaptics Incorporated)
R1 SRTSP; C:\Windows\System32\Drivers\NISx64\1503000.00C\SRTSP64.SYS [875736 2014-02-13] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1503000.00C\SRTSPX64.SYS [36952 2013-09-10] (Symantec Corporation)
R1 STGMFEngine64; C:\WINDOWS\system32\drivers\STGMFEngine64.sys [28576 2013-07-17] (Softwareentwicklung Remus - ArchiCrypt.com)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1503000.00C\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1503000.00C\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NISx64\1503000.00C\SymELAM.sys [23568 2013-09-10] (Symantec Corporation)
R3 SymEvent; C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-12-26] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1503000.00C\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1503000.00C\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation)
S3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [329800 2013-07-17] (BitDefender S.R.L.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
S3 WinRing0_1_2_0; C:\Program Files (x86)\BatteryCare\WinRing0x64.sys [14544 2008-07-26] (OpenLibSys.org)
R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2012-08-31] (Hewlett-Packard Development Company, L.P.)
S3 ALSysIO; \??\C:\Users\Marcel-\AppData\Local\Temp\ALSysIO64.sys [X]
S3 BtAudioBusSrv; \SystemRoot\System32\Drivers\BtAudioBus.sys [X]
S3 BthL2caScoIfSrv; \SystemRoot\System32\Drivers\BtL2caScoIf.sys [X]
S3 btUrbFilterDrv; \SystemRoot\System32\Drivers\IvtUrbBtFlt.sys [X]
S3 cpuz136; \??\C:\WINDOWS\TEMP\cpuz136\cpuz136_x64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-10 22:27 - 2014-07-10 22:27 - 00000000 _____ () C:\Users\Administrator\Downloads\FRST.txt
2014-07-10 22:26 - 2014-07-10 22:26 - 02084864 _____ (Farbar) C:\Users\Administrator\Downloads\FRST64.exe
2014-07-10 22:19 - 2014-07-10 22:19 - 00000488 _____ () C:\Users\Administrator\Downloads\defogger_disable.log
2014-07-10 22:19 - 2014-07-10 22:19 - 00000000 _____ () C:\Users\Administrator\defogger_reenable
2014-07-10 22:18 - 2014-07-10 22:18 - 00050477 _____ () C:\Users\Administrator\Downloads\Defogger.exe
2014-07-10 22:13 - 2014-07-10 22:13 - 00961360 _____ (Chip Digital GmbH) C:\Users\Administrator\Downloads\HijackThis - CHIP-Installer.exe
2014-07-10 21:58 - 2014-07-10 21:58 - 28013520 _____ (Wireshark development team) C:\Users\Administrator\Downloads\Wireshark-win64-1.10.8.exe
2014-07-09 20:03 - 2014-07-09 20:03 - 07719416 _____ (devolo AG) C:\Users\Administrator\Downloads\software-dlan-500-av-wireless-plus-v3-0-0-firmware-updater.exe
2014-07-09 19:56 - 2014-07-09 19:56 - 00002030 _____ () C:\Users\Public\Desktop\devolo dLAN Cockpit.lnk
2014-07-09 19:56 - 2014-07-09 19:56 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\de.devolo.dLAN.Cockpit
2014-07-09 19:56 - 2014-07-09 19:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\devolo
2014-07-09 19:55 - 2014-07-09 19:56 - 00000000 ____D () C:\Program Files (x86)\devolo
2014-07-09 13:32 - 2014-06-26 22:55 - 00703968 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-07-09 13:32 - 2014-06-26 22:55 - 00105440 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-09 13:23 - 2014-04-14 05:29 - 01018880 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2014-07-09 12:24 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-07-09 12:24 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-07-09 12:24 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-07-09 12:24 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-07-09 12:24 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-07-09 12:24 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-07-09 12:24 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-07-09 12:24 - 2014-06-19 01:46 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-07-09 12:24 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-07-09 12:24 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-07-09 12:24 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-07-09 12:24 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-07-09 12:24 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-07-09 12:24 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-07-09 12:24 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-07-09 12:24 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-07-09 12:24 - 2014-06-19 00:57 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-07-09 12:24 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-07-09 12:24 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-07-09 12:24 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-07-09 12:24 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-07-09 12:24 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-07-09 12:24 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-07-09 12:24 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-07-09 12:24 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-07-09 12:24 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-07-09 12:24 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-07-09 12:24 - 2014-06-17 00:26 - 00779264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osk.exe
2014-07-09 12:24 - 2014-06-17 00:24 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2014-07-09 12:24 - 2014-06-06 16:20 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-07-09 12:24 - 2014-06-06 15:04 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2014-07-09 12:24 - 2014-06-06 14:18 - 00488960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2014-07-09 12:24 - 2014-05-30 05:03 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2014-07-09 12:24 - 2014-05-29 14:02 - 00565576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-07-09 12:24 - 2014-05-29 09:55 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-07-09 12:24 - 2014-05-29 08:40 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-07-09 12:24 - 2014-05-29 08:37 - 00436224 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2014-07-09 12:24 - 2014-05-29 07:34 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2014-07-09 12:24 - 2014-05-29 07:27 - 01417216 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-07-09 12:23 - 2014-05-31 12:07 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-07-09 12:23 - 2014-05-31 12:06 - 00555736 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2014-07-09 12:23 - 2014-05-31 05:40 - 13287936 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-07-09 12:23 - 2014-05-31 05:30 - 11792384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-07-09 12:23 - 2014-05-31 05:12 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-09 12:23 - 2014-05-31 05:06 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-07-09 12:23 - 2014-05-31 05:03 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-07-09 12:23 - 2014-05-31 05:01 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-09 12:23 - 2014-05-31 04:56 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-07-09 12:23 - 2014-05-31 04:54 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-07-09 12:23 - 2014-05-31 04:48 - 03463680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-07-09 12:23 - 2014-05-31 04:37 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-07-09 12:23 - 2014-05-31 04:36 - 00923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-07-09 12:23 - 2014-05-31 04:35 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2014-07-09 12:23 - 2014-05-31 04:32 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-07-08 21:22 - 2014-07-08 21:22 - 00001147 _____ () C:\Users\Administrator\Desktop\FreePortScanner.lnk
2014-07-08 21:22 - 2014-07-08 21:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreePortScanner
2014-07-08 21:22 - 2014-07-08 21:22 - 00000000 ____D () C:\Program Files (x86)\Nsasoft
2014-07-08 21:18 - 2014-07-08 21:18 - 00598416 _____ (Nsasoft LLC. ) C:\Users\Administrator\Downloads\free-port-scanner_10262.exe
2014-07-08 11:51 - 2014-07-08 11:51 - 01017285 _____ () C:\Users\Administrator\Downloads\ARMA III Alpha Super L33T Menu 4.7 SPJESTER_[www.unknowncheats.me]_.zip
2014-07-07 22:34 - 2014-07-07 22:34 - 00019761 _____ () C:\Users\Administrator\Downloads\313_mpgh.net.rar
2014-07-07 22:34 - 2014-07-04 21:48 - 00219645 _____ () C:\Users\Administrator\Desktop\313.sqf
2014-07-07 19:03 - 2014-07-07 19:40 - 00000527 _____ () C:\Users\Administrator\Documents\arma3.CT
2014-07-07 18:59 - 2014-07-07 18:59 - 00001107 _____ () C:\Users\Administrator\Desktop\Cheat Engine.lnk
2014-07-07 18:59 - 2014-07-07 18:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.4
2014-07-07 18:59 - 2014-07-07 18:59 - 00000000 ____D () C:\Program Files (x86)\Cheat Engine 6.4
2014-07-07 18:53 - 2014-07-07 18:53 - 09052432 _____ (Cheat Engine ) C:\Users\Administrator\Downloads\CheatEngine64.exe
2014-07-07 18:46 - 2014-07-07 18:46 - 00017100 _____ () C:\Users\Administrator\Downloads\_src.zip
2014-07-07 17:09 - 2014-07-07 17:11 - 00000000 ____D () C:\Program Files (x86)\Quick Memory Editor
2014-07-07 17:09 - 2014-07-07 17:09 - 02125503 _____ (softcows.com ) C:\Users\Administrator\Downloads\Quick Memory Editor.exe
2014-07-07 17:09 - 2014-07-07 17:09 - 00001111 _____ () C:\Users\Marcel-\Desktop\Quick Memory Editor.lnk
2014-07-07 17:09 - 2014-07-07 17:09 - 00001111 _____ () C:\Users\Administrator\Desktop\Quick Memory Editor.lnk
2014-07-07 17:09 - 2014-07-07 17:09 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Quick Memory Editor
2014-07-07 17:09 - 2014-07-07 17:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Quick Memory Editor
2014-07-05 13:52 - 2014-07-05 13:52 - 00002317 _____ () C:\Users\Administrator\Downloads\DayZ Mod & SA ammo Values by ThirtySix.txt
2014-07-04 17:51 - 2014-07-05 13:22 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-07-04 17:51 - 2014-07-05 13:22 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-07-04 17:50 - 2014-06-13 04:11 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2014-07-04 17:50 - 2014-06-13 04:11 - 00062808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2014-07-04 17:44 - 2014-06-13 04:59 - 01890264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6434043.dll
2014-07-04 17:44 - 2014-06-13 04:59 - 01542088 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6434043.dll
2014-07-04 17:44 - 2014-06-13 04:59 - 00026353 _____ () C:\WINDOWS\system32\nvinfo.pb
2014-07-04 17:44 - 2014-06-13 04:48 - 13911928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 13824408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 11272544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 11211224 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 04248520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 03989464 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 00946120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 00909256 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 00902616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 00869336 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 00391456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 00348120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 31512352 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 24198616 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 18625768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 17553032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 16122344 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 14497528 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 12860888 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2014-07-04 17:44 - 2014-06-13 04:47 - 00502048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 00417568 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 00033736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys
2014-07-04 17:44 - 2014-06-13 04:46 - 22994392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2014-07-04 17:44 - 2014-06-13 04:46 - 15294296 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2014-07-04 17:44 - 2014-06-13 04:46 - 02814120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2014-07-04 17:44 - 2014-06-13 04:46 - 00965312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2014-07-04 17:44 - 2014-06-13 04:46 - 00846832 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2014-07-04 17:44 - 2014-06-13 04:46 - 00354016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2014-07-04 17:44 - 2014-06-13 04:46 - 00305600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2014-07-04 17:44 - 2014-06-13 04:46 - 00166568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2014-07-04 17:44 - 2014-06-13 04:46 - 00146480 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2014-07-04 17:44 - 2014-06-13 04:45 - 03196304 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2014-07-04 15:23 - 2014-07-04 15:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ad-Aware Antivirus
2014-07-04 15:23 - 2014-07-04 15:23 - 00000000 ____D () C:\Program Files\Lavasoft
2014-07-04 15:23 - 2014-07-04 15:23 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft
2014-07-04 15:01 - 2014-07-04 15:01 - 00000000 ____D () C:\WINDOWS\Panther
2014-07-04 14:55 - 2014-07-04 14:55 - 00000842 _____ () C:\WINDOWS\setupact.log
2014-07-04 14:55 - 2014-07-04 14:55 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-07-04 14:35 - 2014-07-04 14:35 - 00002263 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (6).lnk
2014-07-04 14:30 - 2014-07-04 14:30 - 00000000 ____D () C:\Users\Administrator\AppData\Local\NPE
2014-07-04 12:39 - 2014-07-04 12:39 - 03081712 ____N (Symantec Corporation) C:\Users\Administrator\Downloads\NPE.exe
2014-07-04 12:32 - 2014-07-04 12:32 - 00002263 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (5).lnk
2014-07-04 12:20 - 2014-07-04 12:20 - 00002263 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (4).lnk
2014-07-04 12:15 - 2014-07-04 12:37 - 00001436 _____ () C:\Users\Administrator\Desktop\Google Chrome.lnk
2014-07-04 12:15 - 2014-07-04 12:15 - 00002299 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (3).lnk
2014-07-04 12:15 - 2014-07-04 12:15 - 00002299 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (2).lnk
2014-07-04 12:15 - 2014-07-04 12:15 - 00001079 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-07-04 12:15 - 2014-07-04 12:15 - 00001023 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-04 12:13 - 2014-05-09 01:06 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2014-07-04 12:12 - 2014-07-05 13:41 - 00000000 ____D () C:\Users\Administrator\AppData\Local\LogMeIn Rescue Applet
2014-07-04 12:12 - 2014-07-04 12:12 - 00002299 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec.lnk
2014-07-04 12:06 - 2014-04-18 10:21 - 01126912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-07-04 12:06 - 2014-04-18 10:09 - 08652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-07-04 12:06 - 2014-04-18 09:51 - 00836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-07-04 12:06 - 2014-04-18 09:49 - 05833216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-07-04 12:06 - 2014-04-06 18:31 - 21268952 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-07-04 12:06 - 2014-04-06 18:20 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-07-04 12:06 - 2014-04-06 17:22 - 18755672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-07-04 12:06 - 2014-04-06 13:55 - 16872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-07-04 12:06 - 2014-04-06 13:54 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-07-04 12:06 - 2014-04-06 12:52 - 00955904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-07-04 12:06 - 2014-04-06 12:51 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-07-04 12:06 - 2014-04-06 12:37 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-07-04 12:06 - 2014-04-03 10:12 - 02124840 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2014-07-04 12:06 - 2014-04-03 05:53 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2014-07-04 12:06 - 2014-04-03 04:53 - 04269056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-07-04 12:06 - 2014-03-31 07:42 - 07425368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-07-04 12:06 - 2014-03-31 00:54 - 01308160 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2014-07-04 12:06 - 2014-03-20 02:44 - 06645248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-07-04 12:06 - 2014-03-20 01:33 - 05774848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-07-04 12:06 - 2014-03-19 06:18 - 02688000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-07-04 12:06 - 2014-03-18 07:00 - 07173120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2014-07-04 12:06 - 2014-03-18 06:52 - 05104640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2014-07-04 12:05 - 2014-04-18 16:57 - 00032600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-07-04 12:05 - 2014-04-18 16:44 - 01466856 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-07-04 12:05 - 2014-04-18 15:29 - 01200288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-07-04 12:05 - 2014-04-18 11:44 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll
2014-07-04 12:05 - 2014-04-18 10:32 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-07-04 12:05 - 2014-04-14 11:20 - 00324888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2014-07-04 12:05 - 2014-04-14 10:01 - 00285144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2014-07-04 12:05 - 2014-04-11 08:13 - 01200128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2014-07-04 12:05 - 2014-04-11 06:51 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2014-07-04 12:05 - 2014-04-11 06:23 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2014-07-04 12:05 - 2014-04-11 05:30 - 00449536 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2014-07-04 12:05 - 2014-04-09 13:53 - 00337240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-07-04 12:05 - 2014-04-09 08:39 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll
2014-07-04 12:05 - 2014-04-09 07:44 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll
2014-07-04 12:05 - 2014-04-09 05:33 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2014-07-04 12:05 - 2014-04-08 04:01 - 00589656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2014-07-04 12:05 - 2014-04-06 18:34 - 00372568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2014-07-04 12:05 - 2014-04-06 18:34 - 00275800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2014-07-04 12:05 - 2014-04-06 18:32 - 00125496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2014-07-04 12:05 - 2014-04-06 18:30 - 00201920 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2014-07-04 12:05 - 2014-04-06 18:24 - 00360792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2014-07-04 12:05 - 2014-04-06 18:20 - 01403856 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 01379064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00881616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00765408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00609448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00491744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00467496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00463256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00364640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00244880 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-07-04 12:05 - 2014-04-06 18:20 - 00233912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00028408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2014-07-04 12:05 - 2014-04-06 17:23 - 00098584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2014-07-04 12:05 - 2014-04-06 17:22 - 00178184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 01209616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 00707048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 00669856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 00518544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 00406504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 00387896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-07-04 12:05 - 2014-04-06 14:51 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2014-07-04 12:05 - 2014-04-06 14:33 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-07-04 12:05 - 2014-04-06 13:26 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2014-07-04 12:05 - 2014-04-06 13:01 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-07-04 12:05 - 2014-04-06 12:36 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2014-07-04 12:05 - 2014-04-06 12:05 - 01222656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-07-04 12:05 - 2014-04-06 11:59 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2014-07-04 12:05 - 2014-04-03 10:12 - 00307304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2014-07-04 12:05 - 2014-04-03 10:12 - 00130144 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2014-07-04 12:05 - 2014-04-03 06:03 - 00230808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2014-07-04 12:05 - 2014-04-03 06:03 - 00111528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpapi.dll
2014-07-04 12:05 - 2014-04-03 04:53 - 00677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-07-04 12:05 - 2014-04-03 04:51 - 01584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2014-07-04 12:05 - 2014-04-03 04:23 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-07-04 12:05 - 2014-04-03 04:23 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tlscsp.dll
2014-07-04 12:05 - 2014-04-03 04:22 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\tlscsp.dll
2014-07-04 12:05 - 2014-04-01 08:23 - 00384856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-07-04 12:05 - 2014-03-31 02:41 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2014-07-04 12:05 - 2014-03-31 02:01 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2014-07-04 12:05 - 2014-03-31 01:43 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2014-07-04 12:05 - 2014-03-31 00:49 - 01287168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-07-04 12:05 - 2014-03-28 17:58 - 00407016 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2014-07-04 12:05 - 2014-03-27 08:16 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-07-04 12:05 - 2014-03-27 07:36 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2014-07-04 12:05 - 2014-03-27 06:59 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-07-04 12:05 - 2014-03-27 06:48 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2014-07-04 12:05 - 2014-03-27 06:19 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2014-07-04 12:05 - 2014-03-27 05:46 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2014-07-04 12:05 - 2014-03-27 05:15 - 00718336 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2014-07-04 12:05 - 2014-03-27 05:10 - 01436160 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2014-07-04 12:05 - 2014-03-25 00:58 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2014-07-04 12:05 - 2014-03-20 05:48 - 00263424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-07-04 12:05 - 2014-03-19 10:07 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-07-04 12:05 - 2014-03-18 10:19 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2014-07-04 12:05 - 2014-03-17 07:09 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-07-04 12:05 - 2014-03-17 06:11 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-07-04 12:05 - 2014-03-17 05:01 - 00486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2014-07-04 12:05 - 2014-03-17 04:47 - 01025024 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-07-04 12:05 - 2014-03-17 04:45 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2014-07-04 12:05 - 2014-03-14 08:26 - 00491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll
2014-07-04 12:05 - 2014-03-14 08:10 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll
2014-07-04 12:05 - 2014-03-06 14:42 - 00310616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-07-04 12:04 - 2014-04-06 14:58 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll
2014-07-04 12:04 - 2014-04-06 14:24 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2014-07-04 12:04 - 2014-04-06 14:06 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srclient.dll
2014-07-04 12:04 - 2014-04-06 13:20 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-07-04 12:04 - 2014-03-31 00:35 - 01029120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-07-04 12:04 - 2014-03-31 00:11 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-07-04 12:04 - 2014-03-30 23:47 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-07-04 12:04 - 2014-03-19 10:15 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-07-04 12:04 - 2014-03-19 09:24 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-07-04 12:04 - 2014-03-19 09:17 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2014-07-04 12:04 - 2014-03-19 08:36 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-07-04 12:04 - 2014-03-19 07:56 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-07-04 12:04 - 2014-03-19 07:45 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2014-07-04 12:04 - 2014-03-19 07:19 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-07-04 12:04 - 2014-03-19 07:07 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-07-04 12:04 - 2014-03-19 07:02 - 01527296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-07-04 12:04 - 2014-03-19 07:00 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2014-07-04 12:04 - 2014-03-19 06:51 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2014-07-04 12:04 - 2014-03-19 06:31 - 02100736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-07-04 12:01 - 2014-07-04 12:02 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Administrator\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-07-04 11:56 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-07-04 11:56 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-07-04 11:56 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe
2014-07-04 11:56 - 2014-05-01 15:31 - 03048904 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-07-04 11:56 - 2014-05-01 15:31 - 00055328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wpcfltr.sys
2014-07-04 11:56 - 2014-05-01 09:14 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2014-07-04 11:56 - 2014-05-01 09:05 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2014-07-04 11:56 - 2014-05-01 08:51 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2014-07-04 11:56 - 2014-05-01 07:24 - 02834944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll
2014-07-04 01:11 - 2014-07-04 01:11 - 00000000 _____ () C:\Recovery.txt
2014-07-03 23:39 - 2014-07-03 23:39 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Steganos
2014-07-03 23:39 - 2014-07-03 23:39 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Intel Corporation
2014-07-03 23:39 - 2014-07-03 23:39 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\CyberLink
2014-07-03 23:39 - 2014-07-03 23:39 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Adobe
2014-07-03 23:38 - 2014-07-03 23:38 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Synaptics
2014-07-03 23:38 - 2014-07-03 23:38 - 00000000 ____D () C:\Users\Gast\AppData\Local\Adobe
2014-07-03 22:58 - 2014-07-04 01:21 - 00000000 ____D () C:\e6aaee25e6e797ecb198316b31d5ca
2014-07-03 22:36 - 2014-07-03 22:36 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Hewlett-Packard
2014-07-03 22:36 - 2014-07-03 22:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Power2Go8
2014-07-03 22:36 - 2014-07-03 22:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Hewlett-Packard
2014-07-03 22:36 - 2014-07-03 22:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-07-03 22:35 - 2014-07-04 01:20 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-03 22:35 - 2014-07-04 01:20 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-03 22:35 - 2014-07-04 01:20 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-03 22:35 - 2014-07-04 01:20 - 00000000 ____D () C:\Users\Gast
2014-07-03 22:35 - 2014-07-03 23:38 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Apple Computer
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Vorlagen
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Startmenü
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Netzwerkumgebung
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Lokale Einstellungen
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Eigene Dateien
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Druckumgebung
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Documents\Eigene Musik
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Documents\Eigene Bilder
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\AppData\Local\Verlauf
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\AppData\Local\Anwendungsdaten
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Anwendungsdaten
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 ____D () C:\Users\Gast\AppData\Local\NVIDIA Corporation
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 ____D () C:\Users\Gast\AppData\Local\NVIDIA
2014-07-03 22:35 - 2014-01-23 19:01 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Macromedia
2014-07-03 22:35 - 2013-11-24 17:07 - 00000000 ____D () C:\Users\Gast\Documents\hp.system.package.metadata
2014-07-03 22:35 - 2013-11-24 17:07 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\IObit
2014-07-03 22:35 - 2013-11-24 17:07 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Genie9
2014-07-03 22:35 - 2013-11-24 17:07 - 00000000 ____D () C:\Users\Gast\AppData\Local\Microsoft Help
2014-07-03 22:35 - 2013-11-24 17:07 - 00000000 ____D ()
         

Frst - Teil 2

C:\Users\Gast\AppData\Local\Apple Computer
2014-07-03 22:33 - 2014-07-03 22:33 - 00000095 _____ () C:\WINDOWS\general.log
2014-07-03 22:12 - 2012-10-15 13:23 - 00072154 _____ () C:\Users\Administrator\Desktop\procexp.chm
2014-07-03 22:10 - 2014-07-03 22:10 - 01243655 _____ () C:\Users\Administrator\Downloads\ProcessExplorer_16.02.zip
2014-07-03 22:10 - 2014-07-03 22:10 - 01243655 _____ () C:\Users\Administrator\Downloads\ProcessExplorer_16.02 (1).zip
2014-07-03 21:27 - 2014-07-03 21:28 - 00000000 ____D () C:\ProgramData\MicroWorld
2014-07-02 20:08 - 2014-07-02 20:08 - 00000222 _____ () C:\Users\Administrator\Desktop\Warface.url
2014-07-02 17:33 - 2014-07-04 01:20 - 00000000 ____D () C:\Users\Administrator\AppData\Local\MetaGeek,_LLC
2014-07-02 17:31 - 2014-07-02 17:31 - 00000000 ____D () C:\Program Files (x86)\MetaGeek
2014-07-02 17:29 - 2014-07-04 01:49 - 00000000 __SHD () C:\ProgramData\MPK
2014-07-02 14:58 - 2014-07-02 15:00 - 104857600 _____ () C:\Users\Administrator\Downloads\1370091038249.rar
2014-07-01 15:26 - 2014-07-04 17:35 - 00000000 ____D () C:\Users\Administrator\Documents\DayZ
2014-07-01 15:26 - 2014-07-01 17:20 - 00000000 ____D () C:\Users\Administrator\AppData\Local\DayZ
2014-07-01 13:55 - 2014-07-04 01:49 - 00000000 ____D () C:\Users\Administrator\AppData\Local\BrowseEmAll
2014-07-01 13:35 - 2014-07-01 13:36 - 00000658 _____ () C:\WINDOWS\ie7_main.log
2014-07-01 13:35 - 2014-07-01 13:35 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Mozilla
2014-07-01 13:35 - 2014-07-01 13:35 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Mozilla
2014-07-01 13:35 - 2014-07-01 13:35 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Macromedia
2014-07-01 12:31 - 2014-07-01 12:31 - 04229130 _____ () C:\Users\Administrator\Downloads\dsl_803a_752dpw_fw_30.05.219-20121116.bin
2014-07-01 12:29 - 2014-07-01 12:29 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Skype
2014-06-29 14:27 - 2014-06-29 14:27 - 00008446 _____ () C:\Users\Administrator\Downloads\GimmeMoarFrames-master.zip
2014-06-29 14:13 - 2014-06-29 14:13 - 00008195 _____ () C:\Users\Administrator\Downloads\ArmA3mark_28082013.zip (1).7z
2014-06-26 19:56 - 2014-06-27 23:05 - 00000000 ____D () C:\Users\Administrator\Desktop\PDAY+17Tr-LNG_v22.1
2014-06-26 17:23 - 2014-06-26 17:23 - 00000000 ____D () C:\Users\Administrator\Documents\7 Days To Die
2014-06-26 13:53 - 2014-06-26 13:53 - 00328420 _____ () C:\Users\Administrator\Downloads\PAYDAY 2 - Ultimate Trainer v3.0 (Hack&Dev, PierreDjays)_[www.unknowncheats.me]_.rar
2014-06-26 13:48 - 2014-06-26 13:48 - 00337186 _____ () C:\Users\Administrator\Downloads\superficialsuitev26_[www.unknowncheats.me]_.zip
2014-06-26 13:44 - 2014-06-26 13:45 - 16392851 _____ () C:\Users\Administrator\Downloads\PPv15R_[www.unknowncheats.me]_.rar
2014-06-26 13:42 - 2014-06-26 13:42 - 00293691 _____ () C:\Users\Administrator\Downloads\Pay Day 2 Level Hack_[www.unknowncheats.me]_.rar
2014-06-26 13:37 - 2014-06-26 13:37 - 00358029 _____ () C:\Users\Administrator\Downloads\Stealth Suite v0.4_[www.unknowncheats.me]_.rar
2014-06-26 00:54 - 2014-06-26 00:54 - 02521973 _____ () C:\Users\Administrator\Downloads\PDAY+17Tr-LNG_v30.2.rar
2014-06-25 22:50 - 2014-06-25 22:51 - 02463584 _____ () C:\Users\Administrator\Downloads\PDAY+17Tr-LNG_v22.1.rar
2014-06-25 22:28 - 2014-06-25 22:28 - 00304852 _____ () C:\Users\Administrator\Desktop\InjectorPack_[www.unknowncheats.me]_.rar.mwt
2014-06-25 22:27 - 2014-06-25 22:27 - 00328420 _____ () C:\Users\Administrator\Desktop\PAYDAY 2 - Ultimate Trainer v3.0 (Hack&Dev, PierreDjays)_[www.unknowncheats.me]_.rar
2014-06-25 22:23 - 2014-06-25 22:24 - 16392851 _____ () C:\Users\Administrator\Desktop\PPv15R_[www.unknowncheats.me]_.rar
2014-06-25 21:15 - 2014-06-25 22:30 - 00000000 ____D () C:\Users\Administrator\AppData\Local\PAYDAY 2
2014-06-24 16:44 - 2014-06-24 16:44 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Quadriga Games
2014-06-23 16:36 - 2014-06-23 16:36 - 00382459 _____ () C:\Users\Administrator\Downloads\housing.rar
2014-06-23 15:51 - 2014-06-23 15:51 - 00453232 _____ () C:\Users\Administrator\Downloads\CBA_A3_RC1.zip
2014-06-23 15:51 - 2014-06-23 15:51 - 00001682 _____ () C:\Users\Administrator\Downloads\@DEditor_v12.rar
2014-06-23 14:55 - 2014-06-23 14:55 - 00005367 _____ () C:\Users\Administrator\Downloads\@101_editor_vv1.14.0601.rar
2014-06-23 14:00 - 2014-06-23 14:00 - 07563927 _____ () C:\Users\Administrator\Downloads\@mcc_sandbox_r5.rar
2014-06-23 13:59 - 2014-06-23 13:59 - 01413902 _____ () C:\Users\Administrator\Downloads\sample missions.rar
2014-06-21 22:07 - 2014-06-21 22:08 - 22618750 _____ () C:\Users\Administrator\Downloads\MCaRMOD31.7z
2014-06-21 20:06 - 2014-06-21 20:11 - 16970521 _____ () C:\Users\Administrator\Downloads\@DAM.rar
2014-06-17 14:25 - 2014-07-04 12:32 - 00000000 ____D () C:\Users\Administrator\Desktop\11_files
2014-06-17 14:25 - 2014-06-17 14:25 - 00316184 _____ () C:\Users\Administrator\Desktop\11.htm
2014-06-16 15:45 - 2014-06-16 15:46 - 00000470 _____ () C:\Users\Administrator\Downloads\listen-dsl (1).asx
2014-06-16 11:52 - 2014-06-16 11:52 - 00000000 ____D () C:\WINDOWS\system32\Soluto
2014-06-15 14:41 - 2014-06-15 14:54 - 50377528 _____ () C:\Users\Administrator\Downloads\re2-1.0.7.7z.001
2014-06-15 12:40 - 2014-06-15 12:40 - 00000000 ____D () C:\Users\Administrator\.android
2014-06-15 10:49 - 2014-06-15 10:49 - 00000000 ____D () C:\Users\Administrator\VirtualBox VMs
2014-06-15 10:46 - 2014-06-15 15:52 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Genymobile
2014-06-15 10:45 - 2014-06-15 15:52 - 00000000 ____D () C:\Users\Administrator\.VirtualBox
2014-06-15 10:44 - 2014-06-15 10:44 - 00000000 ____D () C:\Program Files\Oracle
2014-06-15 10:42 - 2014-07-09 14:53 - 00001047 _____ () C:\Users\Public\Desktop\Genymotion.lnk
2014-06-15 10:42 - 2014-07-09 14:53 - 00001040 _____ () C:\Users\Public\Desktop\Genymotion Shell.lnk
2014-06-15 10:42 - 2014-07-04 01:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Genymotion
2014-06-15 10:42 - 2014-06-15 10:42 - 00000000 ____D () C:\Program Files\Genymobile
2014-06-15 10:28 - 2014-06-15 10:28 - 02321658 _____ () C:\Users\Administrator\Downloads\de.lotumlabs.questionsforfriendsnorth_quickdownload_330.apk
2014-06-15 10:26 - 2014-06-15 10:39 - 122656544 _____ (Genymobile ) C:\Users\Administrator\Downloads\genymotion-2.2.2-vbox.exe
2014-06-13 21:22 - 2014-06-13 21:22 - 03355384 _____ (Reincubate Ltd) C:\Users\Administrator\Downloads\iphonebackupextractor-latest.exe
2014-06-13 21:22 - 2014-06-13 21:22 - 00001346 _____ () C:\Users\Administrator\Desktop\iPhone Backup Extractor.lnk
2014-06-13 21:22 - 2014-06-13 21:22 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Reincubate
2014-06-13 21:22 - 2014-06-13 21:22 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Reincubate
2014-06-13 20:34 - 2014-07-04 01:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-06-13 20:34 - 2014-06-13 20:34 - 00001795 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-06-13 20:33 - 2014-06-13 20:34 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-06-13 20:33 - 2014-06-13 20:34 - 00000000 ____D () C:\Program Files\iTunes
2014-06-13 20:33 - 2014-06-13 20:34 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-06-13 20:33 - 2014-06-13 20:33 - 00000000 ____D () C:\Program Files\iPod
2014-06-13 20:24 - 2014-06-13 20:24 - 112616784 _____ (Apple Inc.) C:\Users\Administrator\Downloads\iTunes64Setup.exe
2014-06-13 00:55 - 2014-06-13 00:55 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\hpqlog
2014-06-13 00:34 - 2014-06-13 00:34 - 00000924 _____ () C:\Users\Administrator\Downloads\Downloads - Verknüpfung.lnk
2014-06-12 18:26 - 2014-06-12 18:26 - 00001187 _____ () C:\Users\Administrator\Downloads\CarpetBombingAirstrike.rar
2014-06-12 18:13 - 2014-06-12 18:13 - 00000954 _____ () C:\Users\Administrator\Downloads\ccip_arma3.7z
2014-06-12 18:01 - 2014-06-12 18:01 - 00023753 _____ () C:\Users\Administrator\Downloads\dsl_gear_selection_v1-4.Altis.7z
2014-06-12 16:12 - 2014-06-12 16:12 - 00000000 ____D () C:\Users\Administrator\Downloads\[ExpToObj]_v6.Stratis
2014-06-12 16:11 - 2014-06-12 16:11 - 00201024 _____ () C:\Users\Administrator\Downloads\[ExpToObj]_v6.Stratis.zip
2014-06-12 16:05 - 2014-06-12 16:06 - 00000000 ____D () C:\Users\Administrator\Downloads\LKnukev0.9
2014-06-12 15:27 - 2014-06-12 15:27 - 00000000 ____D () C:\Users\Administrator\Downloads\[DEMO]Nuke.Altis
2014-06-12 15:26 - 2014-06-12 15:26 - 00115565 _____ () C:\Users\Administrator\Downloads\[DEMO]Nuke.Altis.rar
2014-06-12 15:23 - 2014-06-12 15:23 - 00007906 _____ () C:\Users\Administrator\Downloads\JEMAND_SCUD.7z
2014-06-12 15:22 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-06-12 15:22 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-06-12 15:22 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-06-12 15:22 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-06-12 15:21 - 2014-06-12 15:21 - 09396076 _____ () C:\Users\Administrator\Downloads\LKnukev0.9.rar
2014-06-12 15:18 - 2014-05-10 05:46 - 02151424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-06-12 15:18 - 2014-05-10 05:22 - 01312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-06-12 15:18 - 2014-04-03 09:59 - 02518872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-06-12 15:18 - 2014-04-03 09:59 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-06-12 15:13 - 2014-05-05 06:02 - 03360256 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-06-12 15:13 - 2014-04-30 13:16 - 01336648 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-06-12 15:13 - 2014-04-30 05:51 - 01064448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2014-06-12 15:02 - 2014-04-30 06:43 - 01975296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2014-06-12 15:02 - 2014-04-30 06:26 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2014-06-12 15:02 - 2014-04-30 05:47 - 01509888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-06-12 14:55 - 2014-06-12 14:55 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-06-12 14:55 - 2014-06-12 14:55 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-06-12 14:55 - 2014-06-12 14:55 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-06-12 14:39 - 2014-06-12 14:39 - 00000470 _____ () C:\Users\Administrator\Downloads\listen-dsl.asx
2014-06-12 14:35 - 2014-06-12 14:35 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-06-11 14:05 - 2014-06-11 14:28 - 50532267 _____ () C:\Users\Administrator\Downloads\WAPMOD.Ver.1.09.zip
2014-06-11 13:59 - 2014-06-11 14:00 - 10625881 _____ () C:\Users\Administrator\Downloads\ArmA_Editing-Guide_Deluxe_Edition.rar
2014-06-10 21:51 - 2014-06-10 21:51 - 00010015 _____ () C:\Users\Administrator\Desktop\1.txt
2014-06-10 01:18 - 2014-06-10 01:18 - 00498949 _____ () C:\Users\Administrator\Downloads\Chat*Logger++*1.2.rar

==================== One Month Modified Files and Folders =======

2015-07-25 04:24 - 2013-08-21 22:41 - 00000000 ____D () C:\Users\Marcel-\Downloads\Guru3D.com
2014-07-10 22:27 - 2014-07-10 22:27 - 00000000 _____ () C:\Users\Administrator\Downloads\FRST.txt
2014-07-10 22:27 - 2013-11-24 13:00 - 00000000 ____D () C:\FRST
2014-07-10 22:26 - 2014-07-10 22:26 - 02084864 _____ (Farbar) C:\Users\Administrator\Downloads\FRST64.exe
2014-07-10 22:26 - 2014-05-07 19:01 - 00003954 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{C9FAFC92-2B20-4764-8366-96A2BE62BCF4}
2014-07-10 22:24 - 2014-05-20 19:55 - 01170485 _____ () C:\WINDOWS\WindowsUpdate.log
2014-07-10 22:21 - 2014-02-08 23:20 - 00000406 _____ () C:\WINDOWS\Tasks\bettermarkit_wd.job
2014-07-10 22:19 - 2014-07-10 22:19 - 00000488 _____ () C:\Users\Administrator\Downloads\defogger_disable.log
2014-07-10 22:19 - 2014-07-10 22:19 - 00000000 _____ () C:\Users\Administrator\defogger_reenable
2014-07-10 22:19 - 2014-05-06 12:14 - 00000000 ____D () C:\Users\Administrator
2014-07-10 22:18 - 2014-07-10 22:18 - 00050477 _____ () C:\Users\Administrator\Downloads\Defogger.exe
2014-07-10 22:13 - 2014-07-10 22:13 - 00961360 _____ (Chip Digital GmbH) C:\Users\Administrator\Downloads\HijackThis - CHIP-Installer.exe
2014-07-10 22:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-07-10 21:58 - 2014-07-10 21:58 - 28013520 _____ (Wireshark development team) C:\Users\Administrator\Downloads\Wireshark-win64-1.10.8.exe
2014-07-10 21:54 - 2014-05-06 14:00 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\TS3Client
2014-07-10 21:52 - 2013-12-30 19:42 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-07-10 21:49 - 2013-07-29 15:12 - 00001126 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-10 21:43 - 2014-05-06 12:26 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Arma 3
2014-07-10 21:43 - 2013-07-29 16:37 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-07-10 21:07 - 2013-09-30 06:14 - 01984420 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-07-10 21:07 - 2013-09-30 05:56 - 00843606 _____ () C:\WINDOWS\system32\perfh007.dat
2014-07-10 21:07 - 2013-09-30 05:56 - 00192300 _____ () C:\WINDOWS\system32\perfc007.dat
2014-07-10 21:05 - 2014-05-06 12:22 - 00003594 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3786530795-813635038-3550015045-500
2014-07-10 21:05 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-07-10 20:59 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-07-10 20:59 - 2013-07-29 15:12 - 00001122 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-10 20:57 - 2014-06-08 11:48 - 00046080 ___SH () C:\Users\Administrator\Desktop\Thumbs.db
2014-07-10 20:52 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-07-10 20:45 - 2013-08-04 01:00 - 00000000 ____D () C:\Program Files (x86)\BlueStacks
2014-07-10 20:45 - 2013-03-04 18:07 - 00000000 ____D () C:\Program Files (x86)\HP SimplePass
2014-07-09 20:15 - 2013-12-26 23:22 - 00000000 ____D () C:\WINDOWS\system32\Drivers\NISx64
2014-07-09 20:03 - 2014-07-09 20:03 - 07719416 _____ (devolo AG) C:\Users\Administrator\Downloads\software-dlan-500-av-wireless-plus-v3-0-0-firmware-updater.exe
2014-07-09 19:56 - 2014-07-09 19:56 - 00002030 _____ () C:\Users\Public\Desktop\devolo dLAN Cockpit.lnk
2014-07-09 19:56 - 2014-07-09 19:56 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\de.devolo.dLAN.Cockpit
2014-07-09 19:56 - 2014-07-09 19:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\devolo
2014-07-09 19:56 - 2014-07-09 19:55 - 00000000 ____D () C:\Program Files (x86)\devolo
2014-07-09 19:55 - 2014-05-06 12:17 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Adobe
2014-07-09 19:55 - 2014-05-06 12:15 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Adobe
2014-07-09 14:53 - 2014-06-15 10:42 - 00001047 _____ () C:\Users\Public\Desktop\Genymotion.lnk
2014-07-09 14:53 - 2014-06-15 10:42 - 00001040 _____ () C:\Users\Public\Desktop\Genymotion Shell.lnk
2014-07-09 14:53 - 2014-04-29 21:18 - 00001062 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2014-07-09 14:45 - 2014-03-30 18:58 - 05113000 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-07-09 14:41 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-07-09 14:41 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-09 14:41 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-09 14:41 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-07-09 14:35 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-07-09 14:31 - 2014-05-29 12:45 - 00006214 _____ () C:\WINDOWS\PFRO.log
2014-07-09 13:32 - 2014-01-15 21:44 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-07-09 13:27 - 2013-10-16 20:51 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-07-09 13:27 - 2013-08-01 19:39 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-09 13:27 - 2013-07-29 19:24 - 96441528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-07-09 13:27 - 2013-07-29 19:24 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-07-09 13:21 - 2013-09-30 05:59 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-09 00:37 - 2013-09-15 22:50 - 00000000 ____D () C:\Users\Marcel-\Desktop\Bilder
2014-07-08 21:22 - 2014-07-08 21:22 - 00001147 _____ () C:\Users\Administrator\Desktop\FreePortScanner.lnk
2014-07-08 21:22 - 2014-07-08 21:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreePortScanner
2014-07-08 21:22 - 2014-07-08 21:22 - 00000000 ____D () C:\Program Files (x86)\Nsasoft
2014-07-08 21:18 - 2014-07-08 21:18 - 00598416 _____ (Nsasoft LLC. ) C:\Users\Administrator\Downloads\free-port-scanner_10262.exe
2014-07-08 11:51 - 2014-07-08 11:51 - 01017285 _____ () C:\Users\Administrator\Downloads\ARMA III Alpha Super L33T Menu 4.7 SPJESTER_[www.unknowncheats.me]_.zip
2014-07-07 22:34 - 2014-07-07 22:34 - 00019761 _____ () C:\Users\Administrator\Downloads\313_mpgh.net.rar
2014-07-07 19:40 - 2014-07-07 19:03 - 00000527 _____ () C:\Users\Administrator\Documents\arma3.CT
2014-07-07 18:59 - 2014-07-07 18:59 - 00001107 _____ () C:\Users\Administrator\Desktop\Cheat Engine.lnk
2014-07-07 18:59 - 2014-07-07 18:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.4
2014-07-07 18:59 - 2014-07-07 18:59 - 00000000 ____D () C:\Program Files (x86)\Cheat Engine 6.4
2014-07-07 18:53 - 2014-07-07 18:53 - 09052432 _____ (Cheat Engine ) C:\Users\Administrator\Downloads\CheatEngine64.exe
2014-07-07 18:46 - 2014-07-07 18:46 - 00017100 _____ () C:\Users\Administrator\Downloads\_src.zip
2014-07-07 17:11 - 2014-07-07 17:09 - 00000000 ____D () C:\Program Files (x86)\Quick Memory Editor
2014-07-07 17:09 - 2014-07-07 17:09 - 02125503 _____ (softcows.com ) C:\Users\Administrator\Downloads\Quick Memory Editor.exe
2014-07-07 17:09 - 2014-07-07 17:09 - 00001111 _____ () C:\Users\Marcel-\Desktop\Quick Memory Editor.lnk
2014-07-07 17:09 - 2014-07-07 17:09 - 00001111 _____ () C:\Users\Administrator\Desktop\Quick Memory Editor.lnk
2014-07-07 17:09 - 2014-07-07 17:09 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Quick Memory Editor
2014-07-07 17:09 - 2014-07-07 17:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Quick Memory Editor
2014-07-05 13:52 - 2014-07-05 13:52 - 00002317 _____ () C:\Users\Administrator\Downloads\DayZ Mod & SA ammo Values by ThirtySix.txt
2014-07-05 13:41 - 2014-07-04 12:12 - 00000000 ____D () C:\Users\Administrator\AppData\Local\LogMeIn Rescue Applet
2014-07-05 13:22 - 2014-07-04 17:51 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-07-05 13:22 - 2014-07-04 17:51 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-07-05 13:20 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-07-05 13:20 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-07-04 21:48 - 2014-07-07 22:34 - 00219645 _____ () C:\Users\Administrator\Desktop\313.sqf
2014-07-04 17:51 - 2013-11-24 16:52 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-07-04 17:51 - 2013-07-31 22:50 - 00000000 ____D () C:\temp
2014-07-04 17:50 - 2013-11-24 16:51 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-07-04 17:50 - 2013-11-24 16:51 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-07-04 17:39 - 2014-05-23 00:16 - 00000000 ____D () C:\NVIDIA
2014-07-04 17:35 - 2014-07-01 15:26 - 00000000 ____D () C:\Users\Administrator\Documents\DayZ
2014-07-04 16:05 - 2014-01-03 18:30 - 00000000 ____D () C:\Program Files\KMSpico
2014-07-04 15:35 - 2014-01-10 23:49 - 00000000 ____D () C:\Program Files (x86)\Connectify
2014-07-04 15:35 - 2014-01-10 18:22 - 00000000 ____D () C:\Program Files (x86)\Steganos Privacy Suite 14
2014-07-04 15:35 - 2013-07-29 15:38 - 00000000 ____D () C:\Program Files\Classic Shell
2014-07-04 15:24 - 2013-07-29 17:23 - 00000000 ____D () C:\Program Files (x86)\SpeedFan
2014-07-04 15:23 - 2014-07-04 15:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ad-Aware Antivirus
2014-07-04 15:23 - 2014-07-04 15:23 - 00000000 ____D () C:\Program Files\Lavasoft
2014-07-04 15:23 - 2014-07-04 15:23 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft
2014-07-04 15:20 - 2014-05-26 16:44 - 00000000 ____D () C:\Users\Administrator\YaCy
2014-07-04 15:01 - 2014-07-04 15:01 - 00000000 ____D () C:\WINDOWS\Panther
2014-07-04 14:55 - 2014-07-04 14:55 - 00000842 _____ () C:\WINDOWS\setupact.log
2014-07-04 14:55 - 2014-07-04 14:55 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-07-04 14:35 - 2014-07-04 14:35 - 00002263 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (6).lnk
2014-07-04 14:30 - 2014-07-04 14:30 - 00000000 ____D () C:\Users\Administrator\AppData\Local\NPE
2014-07-04 12:39 - 2014-07-04 12:39 - 03081712 ____N (Symantec Corporation) C:\Users\Administrator\Downloads\NPE.exe
2014-07-04 12:37 - 2014-07-04 12:15 - 00001436 _____ () C:\Users\Administrator\Desktop\Google Chrome.lnk
2014-07-04 12:32 - 2014-07-04 12:32 - 00002263 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (5).lnk
2014-07-04 12:32 - 2014-06-17 14:25 - 00000000 ____D () C:\Users\Administrator\Desktop\11_files
2014-07-04 12:29 - 2014-01-10 23:45 - 00000000 ____D () C:\ProgramData\eboostr
2014-07-04 12:20 - 2014-07-04 12:20 - 00002263 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (4).lnk
2014-07-04 12:18 - 2012-07-26 10:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP
2014-07-04 12:17 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-07-04 12:15 - 2014-07-04 12:15 - 00002299 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (3).lnk
2014-07-04 12:15 - 2014-07-04 12:15 - 00002299 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (2).lnk
2014-07-04 12:15 - 2014-07-04 12:15 - 00001079 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-07-04 12:15 - 2014-07-04 12:15 - 00001023 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-04 12:15 - 2013-07-29 15:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-04 12:12 - 2014-07-04 12:12 - 00002299 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec.lnk
2014-07-04 12:02 - 2014-07-04 12:01 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Administrator\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-07-04 02:03 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-04 02:03 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-04 02:03 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-04 01:50 - 2014-06-15 10:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Genymotion
2014-07-04 01:50 - 2014-06-13 20:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-07-04 01:50 - 2014-05-29 00:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Process Lasso
2014-07-04 01:50 - 2014-05-29 00:03 - 00000000 ____D () C:\Program Files\Process Lasso
2014-07-04 01:50 - 2014-05-06 16:30 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\vlc
2014-07-04 01:50 - 2014-05-06 12:26 - 00000000 ____D () C:\Users\Administrator\Documents\Arma 3
2014-07-04 01:50 - 2014-05-06 12:18 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Cyberlink SoftDMA
2014-07-04 01:50 - 2014-04-29 21:18 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Clientnew
2014-07-04 01:50 - 2014-03-04 20:12 - 00000000 ____D () C:\ProgramData\SpeedBit
2014-07-04 01:50 - 2014-02-08 23:05 - 00000000 ____D () C:\Users\Marcel-\AppData\Roaming\BitTorrent
2014-07-04 01:50 - 2014-01-19 13:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CasinoClub
2014-07-04 01:50 - 2013-12-26 13:08 - 00000000 ____D () C:\Users\Marcel-\AppData\Local\Cyberlink SoftDMA
2014-07-04 01:50 - 2013-11-24 16:58 - 00000000 ____D () C:\Users\Marcel-
2014-07-04 01:50 - 2013-10-16 17:06 - 00000000 ____D () C:\Users\Marcel-\AppData\Local\Akamai
2014-07-04 01:50 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\WindowsInternal.Inbox.Shared
2014-07-04 01:50 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-07-04 01:50 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-07-04 01:50 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-07-04 01:50 - 2013-08-21 22:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-07-04 01:50 - 2013-07-30 23:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2014-07-04 01:50 - 2013-07-29 17:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-07-04 01:49 - 2014-07-02 17:29 - 00000000 __SHD () C:\ProgramData\MPK
2014-07-04 01:49 - 2014-07-01 13:55 - 00000000 ____D () C:\Users\Administrator\AppData\Local\BrowseEmAll
2014-07-04 01:49 - 2013-07-29 17:33 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-07-04 01:44 - 2014-05-09 15:42 - 00000000 ____D () C:\WINDOWS\Minidump
2014-07-04 01:44 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\registration
2014-07-04 01:42 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2014-07-04 01:40 - 2014-05-29 00:03 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\ProcessLasso
2014-07-04 01:40 - 2014-05-28 09:54 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Skype
2014-07-04 01:39 - 2013-07-29 17:32 - 00000000 ____D () C:\ProgramData\Skype
2014-07-04 01:37 - 2013-08-01 19:39 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-07-04 01:36 - 2014-01-19 13:08 - 00000000 ____D () C:\Program Files (x86)\Casino
2014-07-04 01:21 - 2014-07-03 22:58 - 00000000 ____D () C:\e6aaee25e6e797ecb198316b31d5ca
2014-07-04 01:20 - 2014-07-03 22:35 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-04 01:20 - 2014-07-03 22:35 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-04 01:20 - 2014-07-03 22:35 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-04 01:20 - 2014-07-03 22:35 - 00000000 ____D () C:\Users\Gast
2014-07-04 01:20 - 2014-07-02 17:33 - 00000000 ____D () C:\Users\Administrator\AppData\Local\MetaGeek,_LLC
2014-07-04 01:11 - 2014-07-04 01:11 - 00000000 _____ () C:\Recovery.txt
2014-07-03 23:39 - 2014-07-03 23:39 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Steganos
2014-07-03 23:39 - 2014-07-03 23:39 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Intel Corporation
2014-07-03 23:39 - 2014-07-03 23:39 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\CyberLink
2014-07-03 23:39 - 2014-07-03 23:39 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Adobe
2014-07-03 23:38 - 2014-07-03 23:38 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Synaptics
2014-07-03 23:38 - 2014-07-03 23:38 - 00000000 ____D () C:\Users\Gast\AppData\Local\Adobe
2014-07-03 23:38 - 2014-07-03 22:35 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Apple Computer
2014-07-03 22:36 - 2014-07-03 22:36 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Hewlett-Packard
2014-07-03 22:36 - 2014-07-03 22:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Power2Go8
2014-07-03 22:36 - 2014-07-03 22:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Hewlett-Packard
2014-07-03 22:36 - 2014-07-03 22:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Vorlagen
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Startmenü
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Netzwerkumgebung
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Lokale Einstellungen
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Eigene Dateien
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Druckumgebung
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Documents\Eigene Musik
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Documents\Eigene Bilder
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\AppData\Local\Verlauf
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\AppData\Local\Anwendungsdaten
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Anwendungsdaten
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 ____D () C:\Users\Gast\AppData\Local\NVIDIA Corporation
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 ____D () C:\Users\Gast\AppData\Local\NVIDIA
2014-07-03 22:33 - 2014-07-03 22:33 - 00000095 _____ () C:\WINDOWS\general.log
2014-07-03 22:10 - 2014-07-03 22:10 - 01243655 _____ () C:\Users\Administrator\Downloads\ProcessExplorer_16.02.zip
2014-07-03 22:10 - 2014-07-03 22:10 - 01243655 _____ () C:\Users\Administrator\Downloads\ProcessExplorer_16.02 (1).zip
2014-07-03 21:28 - 2014-07-03 21:27 - 00000000 ____D () C:\ProgramData\MicroWorld
2014-07-02 20:08 - 2014-07-02 20:08 - 00000222 _____ () C:\Users\Administrator\Desktop\Warface.url
2014-07-02 17:31 - 2014-07-02 17:31 - 00000000 ____D () C:\Program Files (x86)\MetaGeek
2014-07-02 15:00 - 2014-07-02 14:58 - 104857600 _____ () C:\Users\Administrator\Downloads\1370091038249.rar
2014-07-02 14:25 - 2013-07-30 12:29 - 00000052 _____ () C:\WINDOWS\SysWOW64\DOErrors.log
2014-07-01 17:20 - 2014-07-01 15:26 - 00000000 ____D () C:\Users\Administrator\AppData\Local\DayZ
2014-07-01 13:36 - 2014-07-01 13:35 - 00000658 _____ () C:\WINDOWS\ie7_main.log
2014-07-01 13:35 - 2014-07-01 13:35 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Mozilla
2014-07-01 13:35 - 2014-07-01 13:35 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Mozilla
2014-07-01 13:35 - 2014-07-01 13:35 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Macromedia
2014-07-01 12:31 - 2014-07-01 12:31 - 04229130 _____ () C:\Users\Administrator\Downloads\dsl_803a_752dpw_fw_30.05.219-20121116.bin
2014-07-01 12:29 - 2014-07-01 12:29 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Skype
2014-06-29 14:27 - 2014-06-29 14:27 - 00008446 _____ () C:\Users\Administrator\Downloads\GimmeMoarFrames-master.zip
2014-06-29 14:13 - 2014-06-29 14:13 - 00008195 _____ () C:\Users\Administrator\Downloads\ArmA3mark_28082013.zip (1).7z
2014-06-27 23:05 - 2014-06-26 19:56 - 00000000 ____D () C:\Users\Administrator\Desktop\PDAY+17Tr-LNG_v22.1
2014-06-26 22:55 - 2014-07-09 13:32 - 00703968 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-06-26 22:55 - 2014-07-09 13:32 - 00105440 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-06-26 17:23 - 2014-06-26 17:23 - 00000000 ____D () C:\Users\Administrator\Documents\7 Days To Die
2014-06-26 16:56 - 2014-01-03 15:09 - 00000000 ____D () C:\Users\Marcel-\Desktop\Bewerbung
2014-06-26 13:53 - 2014-06-26 13:53 - 00328420 _____ () C:\Users\Administrator\Downloads\PAYDAY 2 - Ultimate Trainer v3.0 (Hack&Dev, PierreDjays)_[www.unknowncheats.me]_.rar
2014-06-26 13:48 - 2014-06-26 13:48 - 00337186 _____ () C:\Users\Administrator\Downloads\superficialsuitev26_[www.unknowncheats.me]_.zip
2014-06-26 13:45 - 2014-06-26 13:44 - 16392851 _____ () C:\Users\Administrator\Downloads\PPv15R_[www.unknowncheats.me]_.rar
2014-06-26 13:42 - 2014-06-26 13:42 - 00293691 _____ () C:\Users\Administrator\Downloads\Pay Day 2 Level Hack_[www.unknowncheats.me]_.rar
2014-06-26 13:37 - 2014-06-26 13:37 - 00358029 _____ () C:\Users\Administrator\Downloads\Stealth Suite v0.4_[www.unknowncheats.me]_.rar
2014-06-26 00:54 - 2014-06-26 00:54 - 02521973 _____ () C:\Users\Administrator\Downloads\PDAY+17Tr-LNG_v30.2.rar
2014-06-25 22:51 - 2014-06-25 22:50 - 02463584 _____ () C:\Users\Administrator\Downloads\PDAY+17Tr-LNG_v22.1.rar
2014-06-25 22:30 - 2014-06-25 21:15 - 00000000 ____D () C:\Users\Administrator\AppData\Local\PAYDAY 2
2014-06-25 22:28 - 2014-06-25 22:28 - 00304852 _____ () C:\Users\Administrator\Desktop\InjectorPack_[www.unknowncheats.me]_.rar.mwt
2014-06-25 22:27 - 2014-06-25 22:27 - 00328420 _____ () C:\Users\Administrator\Desktop\PAYDAY 2 - Ultimate Trainer v3.0 (Hack&Dev, PierreDjays)_[www.unknowncheats.me]_.rar
2014-06-25 22:24 - 2014-06-25 22:23 - 16392851 _____ () C:\Users\Administrator\Desktop\PPv15R_[www.unknowncheats.me]_.rar
2014-06-24 16:44 - 2014-06-24 16:44 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Quadriga Games
2014-06-23 16:36 - 2014-06-23 16:36 - 00382459 _____ () C:\Users\Administrator\Downloads\housing.rar
2014-06-23 15:51 - 2014-06-23 15:51 - 00453232 _____ () C:\Users\Administrator\Downloads\CBA_A3_RC1.zip
2014-06-23 15:51 - 2014-06-23 15:51 - 00001682 _____ () C:\Users\Administrator\Downloads\@DEditor_v12.rar
2014-06-23 14:55 - 2014-06-23 14:55 - 00005367 _____ () C:\Users\Administrator\Downloads\@101_editor_vv1.14.0601.rar
2014-06-23 14:00 - 2014-06-23 14:00 - 07563927 _____ () C:\Users\Administrator\Downloads\@mcc_sandbox_r5.rar
2014-06-23 13:59 - 2014-06-23 13:59 - 01413902 _____ () C:\Users\Administrator\Downloads\sample missions.rar
2014-06-21 22:08 - 2014-06-21 22:07 - 22618750 _____ () C:\Users\Administrator\Downloads\MCaRMOD31.7z
2014-06-21 20:11 - 2014-06-21 20:06 - 16970521 _____ () C:\Users\Administrator\Downloads\@DAM.rar
2014-06-19 03:39 - 2014-07-09 12:24 - 23464448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-06-19 02:48 - 2014-07-09 12:24 - 02768384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-06-19 02:16 - 2014-07-09 12:24 - 17276416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-06-19 02:09 - 2014-07-09 12:24 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-06-19 01:51 - 2014-07-09 12:24 - 05721088 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-06-19 01:50 - 2014-07-09 12:24 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-06-19 01:48 - 2014-07-09 12:24 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-06-19 01:46 - 2014-07-09 12:24 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-06-19 01:39 - 2014-07-09 12:24 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-06-19 01:33 - 2014-07-09 12:24 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-06-19 01:32 - 2014-07-09 12:24 - 02179072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-06-19 01:27 - 2014-07-09 12:24 - 02040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-06-19 01:12 - 2014-07-09 12:24 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-06-19 00:59 - 2014-07-09 12:24 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-06-19 00:58 - 2014-07-09 12:24 - 02266112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-06-19 00:58 - 2014-07-09 12:24 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-06-19 00:57 - 2014-07-09 12:24 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-06-19 00:52 - 2014-07-09 12:24 - 04254720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-06-19 00:51 - 2014-07-09 12:24 - 13527040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-06-19 00:49 - 2014-07-09 12:24 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-06-19 00:45 - 2014-07-09 12:24 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-06-19 00:35 - 2014-07-09 12:24 - 11742208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-06-19 00:34 - 2014-07-09 12:24 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-06-19 00:15 - 2014-07-09 12:24 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-06-19 00:13 - 2014-07-09 12:24 - 01791488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-06-19 00:09 - 2014-07-09 12:24 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-06-19 00:07 - 2014-07-09 12:24 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-06-17 14:25 - 2014-06-17 14:25 - 00316184 _____ () C:\Users\Administrator\Desktop\11.htm
2014-06-17 00:26 - 2014-07-09 12:24 - 00779264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osk.exe
2014-06-17 00:24 - 2014-07-09 12:24 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2014-06-16 15:46 - 2014-06-16 15:45 - 00000470 _____ () C:\Users\Administrator\Downloads\listen-dsl (1).asx
2014-06-16 11:52 - 2014-06-16 11:52 - 00000000 ____D () C:\WINDOWS\system32\Soluto
2014-06-15 15:52 - 2014-06-15 10:46 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Genymobile
2014-06-15 15:52 - 2014-06-15 10:45 - 00000000 ____D () C:\Users\Administrator\.VirtualBox
2014-06-15 14:54 - 2014-06-15 14:41 - 50377528 _____ () C:\Users\Administrator\Downloads\re2-1.0.7.7z.001
2014-06-15 14:46 - 2014-01-10 19:24 - 00000022 _____ () C:\Users\Marcel-\Downloads\foto.zip
2014-06-15 14:45 - 2014-04-05 14:29 - 00002816 _____ () C:\Users\Marcel-\Downloads\Nicht bestätigt 90835.crdownload
2014-06-15 12:40 - 2014-06-15 12:40 - 00000000 ____D () C:\Users\Administrator\.android
2014-06-15 10:49 - 2014-06-15 10:49 - 00000000 ____D () C:\Users\Administrator\VirtualBox VMs
2014-06-15 10:44 - 2014-06-15 10:44 - 00000000 ____D () C:\Program Files\Oracle
2014-06-15 10:42 - 2014-06-15 10:42 - 00000000 ____D () C:\Program Files\Genymobile
2014-06-15 10:39 - 2014-06-15 10:26 - 122656544 _____ (Genymobile ) C:\Users\Administrator\Downloads\genymotion-2.2.2-vbox.exe
2014-06-15 10:28 - 2014-06-15 10:28 - 02321658 _____ () C:\Users\Administrator\Downloads\de.lotumlabs.questionsforfriendsnorth_quickdownload_330.apk
2014-06-13 21:22 - 2014-06-13 21:22 - 03355384 _____ (Reincubate Ltd) C:\Users\Administrator\Downloads\iphonebackupextractor-latest.exe
2014-06-13 21:22 - 2014-06-13 21:22 - 00001346 _____ () C:\Users\Administrator\Desktop\iPhone Backup Extractor.lnk
2014-06-13 21:22 - 2014-06-13 21:22 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Reincubate
2014-06-13 21:22 - 2014-06-13 21:22 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Reincubate
2014-06-13 20:35 - 2014-05-06 12:14 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Apple Computer
2014-06-13 20:34 - 2014-06-13 20:34 - 00001795 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-06-13 20:34 - 2014-06-13 20:33 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-06-13 20:34 - 2014-06-13 20:33 - 00000000 ____D () C:\Program Files\iTunes
2014-06-13 20:34 - 2014-06-13 20:33 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-06-13 20:33 - 2014-06-13 20:33 - 00000000 ____D () C:\Program Files\iPod
2014-06-13 20:33 - 2013-08-12 01:06 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-06-13 20:24 - 2014-06-13 20:24 - 112616784 _____ (Apple Inc.) C:\Users\Administrator\Downloads\iTunes64Setup.exe
2014-06-13 04:59 - 2014-07-04 17:44 - 01890264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6434043.dll
2014-06-13 04:59 - 2014-07-04 17:44 - 01542088 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6434043.dll
2014-06-13 04:59 - 2014-07-04 17:44 - 00026353 _____ () C:\WINDOWS\system32\nvinfo.pb
2014-06-13 04:48 - 2014-07-04 17:44 - 13911928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 13824408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 11272544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 11211224 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 04248520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 03989464 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 00946120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 00909256 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 00902616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 00869336 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 00391456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 00348120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 31512352 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 24198616 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 18625768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 17553032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 16122344 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 14497528 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 12860888 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2014-06-13 04:47 - 2014-07-04 17:44 - 00502048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 00417568 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 00033736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys
2014-06-13 04:46 - 2014-07-04 17:44 - 22994392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2014-06-13 04:46 - 2014-07-04 17:44 - 15294296 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2014-06-13 04:46 - 2014-07-04 17:44 - 02814120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2014-06-13 04:46 - 2014-07-04 17:44 - 00965312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2014-06-13 04:46 - 2014-07-04 17:44 - 00846832 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2014-06-13 04:46 - 2014-07-04 17:44 - 00354016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2014-06-13 04:46 - 2014-07-04 17:44 - 00305600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2014-06-13 04:46 - 2014-07-04 17:44 - 00166568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2014-06-13 04:46 - 2014-07-04 17:44 - 00146480 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2014-06-13 04:45 - 2014-07-04 17:44 - 03196304 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2014-06-13 04:11 - 2014-07-04 17:50 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2014-06-13 04:11 - 2014-07-04 17:50 - 00062808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2014-06-13 04:11 - 2013-12-11 20:21 - 01083736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2014-06-13 04:11 - 2013-11-24 16:52 - 06783960 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2014-06-13 04:11 - 2013-11-24 16:52 - 03523360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2014-06-13 04:11 - 2013-11-24 16:52 - 02560968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2014-06-13 04:11 - 2013-11-24 16:52 - 00933208 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2014-06-13 04:11 - 2013-11-24 16:52 - 00387528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2014-06-13 00:55 - 2014-06-13 00:55 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\hpqlog
2014-06-13 00:34 - 2014-06-13 00:34 - 00000924 _____ () C:\Users\Administrator\Downloads\Downloads - Verknüpfung.lnk
2014-06-12 18:26 - 2014-06-12 18:26 - 00001187 _____ () C:\Users\Administrator\Downloads\CarpetBombingAirstrike.rar
2014-06-12 18:13 - 2014-06-12 18:13 - 00000954 _____ () C:\Users\Administrator\Downloads\ccip_arma3.7z
2014-06-12 18:01 - 2014-06-12 18:01 - 00023753 _____ () C:\Users\Administrator\Downloads\dsl_gear_selection_v1-4.Altis.7z
2014-06-12 16:12 - 2014-06-12 16:12 - 00000000 ____D () C:\Users\Administrator\Downloads\[ExpToObj]_v6.Stratis
2014-06-12 16:11 - 2014-06-12 16:11 - 00201024 _____ () C:\Users\Administrator\Downloads\[ExpToObj]_v6.Stratis.zip
2014-06-12 16:06 - 2014-06-12 16:05 - 00000000 ____D () C:\Users\Administrator\Downloads\LKnukev0.9
2014-06-12 15:27 - 2014-06-12 15:27 - 00000000 ____D () C:\Users\Administrator\Downloads\[DEMO]Nuke.Altis
2014-06-12 15:26 - 2014-06-12 15:26 - 00115565 _____ () C:\Users\Administrator\Downloads\[DEMO]Nuke.Altis.rar
2014-06-12 15:23 - 2014-06-12 15:23 - 00007906 _____ () C:\Users\Administrator\Downloads\JEMAND_SCUD.7z
2014-06-12 15:23 - 2014-05-27 11:25 - 00000000 ____D () C:\Users\Administrator\AppData\Local\PboM
2014-06-12 15:21 - 2014-06-12 15:21 - 09396076 _____ () C:\Users\Administrator\Downloads\LKnukev0.9.rar
2014-06-12 14:55 - 2014-06-12 14:55 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-06-12 14:55 - 2014-06-12 14:55 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-06-12 14:55 - 2014-06-12 14:55 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-06-12 14:55 - 2014-06-12 14:55 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-06-12 14:39 - 2014-06-12 14:39 - 00000470 _____ () C:\Users\Administrator\Downloads\listen-dsl.asx
2014-06-12 14:35 - 2014-06-12 14:35 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-06-11 14:28 - 2014-06-11 14:05 - 50532267 _____ () C:\Users\Administrator\Downloads\WAPMOD.Ver.1.09.zip
2014-06-11 14:00 - 2014-06-11 13:59 - 10625881 _____ () C:\Users\Administrator\Downloads\ArmA_Editing-Guide_Deluxe_Edition.rar
2014-06-10 21:51 - 2014-06-10 21:51 - 00010015 _____ () C:\Users\Administrator\Desktop\1.txt
2014-06-10 20:38 - 2013-07-30 12:29 - 00000000 _____ () C:\WINDOWS\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-06-10 01:18 - 2014-06-10 01:18 - 00498949 _____ () C:\Users\Administrator\Downloads\Chat*Logger++*1.2.rar

Files to move or delete:
====================
C:\Users\Marcel-\FireDepartment3_setup.exe


Some content of TEMP:
====================
C:\Users\Marcel-\AppData\Local\Temp\BatteryBarSetup-3.6.3.exe
C:\Users\Marcel-\AppData\Local\Temp\SkypeSetup.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-04 21:14

==================== End Of Log ===========================
         

GMER - hängt sich bei C:\Windows\System32\kernel.appcore.dll auf.
Bleibt Stundenlang bei der Datei.

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-07-11 12:29:50
Windows 6.2.9200  x64 \Device\Harddisk0\DR0 -> \Device\00000036 TOSHIBA_MQ01ABD100 rev.AX001C 931.51GB
Running: Gmer-19357.exe; Driver: C:\Users\Administrator\AppData\Local\Temp\uwldypog.sys


---- Kernel code sections - GMER 2.1 ----

.text  C:\WINDOWS\System32\win32k.sys!W32pServiceTable                                                                                                        fffff96000126600 15 bytes [00, F8, 09, 02, 80, 32, 72, ...]
.text  C:\WINDOWS\System32\win32k.sys!W32pServiceTable + 16                                                                                                   fffff96000126610 11 bytes [00, BC, FB, FF, 00, 77, B2, ...]

---- User code sections - GMER 2.1 ----

.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleInformation                                                              00007ffd5e3028c0 7 bytes JMP 00007ffe5d240260
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\KERNEL32.DLL!RegQueryValueExW                                                                     00007ffd5e3043d8 7 bytes JMP 00007ffe5d240298
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExA                                                                       00007ffd5e3b1f20 7 bytes JMP 00007ffe5d240308
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExW                                                                       00007ffd5e3b40b4 7 bytes JMP 00007ffe5d240340
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\KERNEL32.DLL!RegDeleteValueW                                                                      00007ffd5e3b4510 7 bytes JMP 00007ffe5d2402d0
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\KERNEL32.DLL!K32EnumProcessModulesEx                                                              00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2401f0
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\KERNEL32.DLL!K32GetMappedFileNameW                                                                00007ffd5e3dcf10 7 bytes JMP 00007ffe5d240228
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW                                                                   00007ffd5d252300 7 bytes JMP 00007ffe5d2400d8
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                                                                        00007ffd5d255770 5 bytes JMP 00007ffe5d240180
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW                                                                     00007ffd5d255860 5 bytes JMP 00007ffe5d240148
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW                                                                 00007ffd5d255a30 5 bytes JMP 00007ffe5d240110
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW                                                               00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2401b8
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\USER32.dll!CreateWindowExW                                                                        00007ffd5e08b6f4 10 bytes JMP 00007ffe5d240420
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesW                                                                    00007ffd5e0945d8 5 bytes JMP 00007ffe5d2403e8
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\USER32.dll!DisplayConfigGetDeviceInfo                                                             00007ffd5e094750 9 bytes JMP 00007ffe5d240378
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesA                                                                    00007ffd5e0a4fc0 5 bytes JMP 00007ffe5d2403b0
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\USER32.dll!ChangeDisplaySettingsExW                                                               00007ffd5e0a5cb0 5 bytes JMP 00007ffe5d240458
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList                                                                00007ffd5dc91500 1 byte JMP 00007ffe5d240490
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList + 2                                                            00007ffd5dc91502 6 bytes {JMP 0xffffffffff5aef90}
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\GDI32.dll!D3DKMTQueryAdapterInfo                                                                  00007ffd5dc91750 8 bytes JMP 00007ffe5d2404c8
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleInformation                                 00007ffd5e3028c0 7 bytes JMP 00007ffe5d240260
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\KERNEL32.DLL!RegQueryValueExW                                        00007ffd5e3043d8 7 bytes JMP 00007ffe5d240298
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExA                                          00007ffd5e3b1f20 7 bytes JMP 00007ffe5d240308
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExW                                          00007ffd5e3b40b4 7 bytes JMP 00007ffe5d240340
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\KERNEL32.DLL!RegDeleteValueW                                         00007ffd5e3b4510 7 bytes JMP 00007ffe5d2402d0
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\KERNEL32.DLL!K32EnumProcessModulesEx                                 00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2401f0
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\KERNEL32.DLL!K32GetMappedFileNameW                                   00007ffd5e3dcf10 7 bytes JMP 00007ffe5d240228
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW                                      00007ffd5d252300 7 bytes JMP 00007ffe5d2400d8
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                                           00007ffd5d255770 5 bytes JMP 00007ffe5d240180
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW                                        00007ffd5d255860 5 bytes JMP 00007ffe5d240148
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW                                    00007ffd5d255a30 5 bytes JMP 00007ffe5d240110
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW                                  00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2401b8
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\SYSTEM32\combase.dll!CoSetProxyBlanket                                        00007ffd5d739318 7 bytes JMP 00007ffe5d240538
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\SYSTEM32\combase.dll!CoCreateInstance                                         00007ffd5d73cbe0 7 bytes JMP 00007ffe5d240500
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\USER32.dll!CreateWindowExW                                           00007ffd5e08b6f4 10 bytes JMP 00007ffe5d240420
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesW                                       00007ffd5e0945d8 5 bytes JMP 00007ffe5d2403e8
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\USER32.dll!DisplayConfigGetDeviceInfo                                00007ffd5e094750 9 bytes JMP 00007ffe5d240378
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesA                                       00007ffd5e0a4fc0 5 bytes JMP 00007ffe5d2403b0
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\USER32.dll!ChangeDisplaySettingsExW                                  00007ffd5e0a5cb0 5 bytes JMP 00007ffe5d240458
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList                                   00007ffd5dc91500 1 byte JMP 00007ffe5d240490
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList + 2                               00007ffd5dc91502 6 bytes {JMP 0xffffffffff5aef90}
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\GDI32.dll!D3DKMTQueryAdapterInfo                                     00007ffd5dc91750 8 bytes JMP 00007ffe5d2404c8
.text  C:\WINDOWS\system32\nvvsvc.exe[304] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506                                                             00007ffd5e4b169a 4 bytes [4B, 5E, FD, 7F]
.text  C:\WINDOWS\system32\nvvsvc.exe[304] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514                                                             00007ffd5e4b16a2 4 bytes [4B, 5E, FD, 7F]
.text  C:\WINDOWS\system32\nvvsvc.exe[304] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118                                                                00007ffd5e4b181a 4 bytes [4B, 5E, FD, 7F]
.text  C:\WINDOWS\system32\nvvsvc.exe[304] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142                                                                00007ffd5e4b1832 4 bytes [4B, 5E, FD, 7F]
.text  C:\Windows\System32\WUDFHost.exe[1588] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506                                                          00007ffd5e4b169a 4 bytes [4B, 5E, FD, 7F]
.text  C:\Windows\System32\WUDFHost.exe[1588] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514                                                          00007ffd5e4b16a2 4 bytes [4B, 5E, FD, 7F]
.text  C:\Windows\System32\WUDFHost.exe[1588] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118                                                             00007ffd5e4b181a 4 bytes [4B, 5E, FD, 7F]
.text  C:\Windows\System32\WUDFHost.exe[1588] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142                                                             00007ffd5e4b1832 4 bytes [4B, 5E, FD, 7F]
.text  C:\WINDOWS\System32\spoolsv.exe[1820] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506                                                           00007ffd5e4b169a 4 bytes [4B, 5E, FD, 7F]
.text  C:\WINDOWS\System32\spoolsv.exe[1820] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514                                                           00007ffd5e4b16a2 4 bytes [4B, 5E, FD, 7F]
.text  C:\WINDOWS\System32\spoolsv.exe[1820] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118                                                              00007ffd5e4b181a 4 bytes [4B, 5E, FD, 7F]
.text  C:\WINDOWS\System32\spoolsv.exe[1820] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142                                                              00007ffd5e4b1832 4 bytes [4B, 5E, FD, 7F]
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleInformation                                            00007ffd5e3028c0 7 bytes JMP 00007ffe5d240260
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\KERNEL32.DLL!RegQueryValueExW                                                   00007ffd5e3043d8 7 bytes JMP 00007ffe5d240298
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExA                                                     00007ffd5e3b1f20 7 bytes JMP 00007ffe5d240308
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExW                                                     00007ffd5e3b40b4 7 bytes JMP 00007ffe5d240340
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\KERNEL32.DLL!RegDeleteValueW                                                    00007ffd5e3b4510 7 bytes JMP 00007ffe5d2402d0
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\KERNEL32.DLL!K32EnumProcessModulesEx                                            00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2401f0
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\KERNEL32.DLL!K32GetMappedFileNameW                                              00007ffd5e3dcf10 7 bytes JMP 00007ffe5d240228
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW                                                 00007ffd5d252300 7 bytes JMP 00007ffe5d2400d8
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                                                      00007ffd5d255770 5 bytes JMP 00007ffe5d240180
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW                                                   00007ffd5d255860 5 bytes JMP 00007ffe5d240148
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW                                               00007ffd5d255a30 5 bytes JMP 00007ffe5d240110
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW                                             00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2401b8
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\USER32.dll!CreateWindowExW                                                      00007ffd5e08b6f4 10 bytes JMP 00007ffe5d240420
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesW                                                  00007ffd5e0945d8 5 bytes JMP 00007ffe5d2403e8
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\USER32.dll!DisplayConfigGetDeviceInfo                                           00007ffd5e094750 9 bytes JMP 00007ffe5d240378
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesA                                                  00007ffd5e0a4fc0 5 bytes JMP 00007ffe5d2403b0
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\USER32.dll!ChangeDisplaySettingsExW                                             00007ffd5e0a5cb0 5 bytes JMP 00007ffe5d240458
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList                                              00007ffd5dc91500 1 byte JMP 00007ffe5d240490
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList + 2                                          00007ffd5dc91502 6 bytes {JMP 0xffffffffff5aef90}
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\GDI32.dll!D3DKMTQueryAdapterInfo                                                00007ffd5dc91750 8 bytes JMP 00007ffe5d2404c8
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\SYSTEM32\combase.dll!CoSetProxyBlanket                                                   00007ffd5d739318 7 bytes JMP 00007ffe5d240538
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\SYSTEM32\combase.dll!CoCreateInstance                                                    00007ffd5d73cbe0 7 bytes JMP 00007ffe5d240500
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506                                              00007ffd5e4b169a 4 bytes [4B, 5E, FD, 7F]
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514                                              00007ffd5e4b16a2 4 bytes [4B, 5E, FD, 7F]
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118                                                 00007ffd5e4b181a 4 bytes [4B, 5E, FD, 7F]
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142                                                 00007ffd5e4b1832 4 bytes [4B, 5E, FD, 7F]
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleInformation                                     00007ffd5e3028c0 7 bytes JMP 00007ffe5d240260
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\KERNEL32.DLL!RegQueryValueExW                                            00007ffd5e3043d8 7 bytes JMP 00007ffe5d240298
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExA                                              00007ffd5e3b1f20 7 bytes JMP 00007ffe5d240308
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExW                                              00007ffd5e3b40b4 7 bytes JMP 00007ffe5d240340
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\KERNEL32.DLL!RegDeleteValueW                                             00007ffd5e3b4510 7 bytes JMP 00007ffe5d2402d0
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\KERNEL32.DLL!K32EnumProcessModulesEx                                     00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2401f0
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\KERNEL32.DLL!K32GetMappedFileNameW                                       00007ffd5e3dcf10 7 bytes JMP 00007ffe5d240228
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW                                          00007ffd5d252300 7 bytes JMP 00007ffe5d2400d8
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                                               00007ffd5d255770 5 bytes JMP 00007ffe5d240180
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW                                            00007ffd5d255860 5 bytes JMP 00007ffe5d240148
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW                                        00007ffd5d255a30 5 bytes JMP 00007ffe5d240110
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW                                      00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2401b8
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\USER32.dll!CreateWindowExW                                               00007ffd5e08b6f4 10 bytes JMP 00007ffe5d240420
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesW                                           00007ffd5e0945d8 5 bytes JMP 00007ffe5d2403e8
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\USER32.dll!DisplayConfigGetDeviceInfo                                    00007ffd5e094750 9 bytes JMP 00007ffe5d240378
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesA                                           00007ffd5e0a4fc0 5 bytes JMP 00007ffe5d2403b0
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\USER32.dll!ChangeDisplaySettingsExW                                      00007ffd5e0a5cb0 5 bytes JMP 00007ffe5d240458
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList                                       00007ffd5dc91500 1 byte JMP 00007ffe5d240490
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList + 2                                   00007ffd5dc91502 6 bytes {JMP 0xffffffffff5aef90}
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\GDI32.dll!D3DKMTQueryAdapterInfo                                         00007ffd5dc91750 8 bytes JMP 00007ffe5d2404c8
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\SYSTEM32\combase.dll!CoSetProxyBlanket                                            00007ffd5d739318 7 bytes JMP 00007ffe5d240538
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\SYSTEM32\combase.dll!CoCreateInstance                                             00007ffd5d73cbe0 7 bytes JMP 00007ffe5d240500
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleInformation                                                      00007ffd5e3028c0 7 bytes JMP 00007ffe5d240260
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\system32\KERNEL32.DLL!RegQueryValueExW                                                             00007ffd5e3043d8 7 bytes JMP 00007ffe5d240298
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExA                                                               00007ffd5e3b1f20 7 bytes JMP 00007ffe5d240308
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExW                                                               00007ffd5e3b40b4 7 bytes JMP 00007ffe5d240340
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\system32\KERNEL32.DLL!RegDeleteValueW                                                              00007ffd5e3b4510 7 bytes JMP 00007ffe5d2402d0
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\system32\KERNEL32.DLL!K32EnumProcessModulesEx                                                      00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2401f0
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\system32\KERNEL32.DLL!K32GetMappedFileNameW                                                        00007ffd5e3dcf10 7 bytes JMP 00007ffe5d240228
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW                                                           00007ffd5d252300 7 bytes JMP 00007ffe5d2400d8
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                                                                00007ffd5d255770 5 bytes JMP 00007ffe5d240180
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW                                                             00007ffd5d255860 5 bytes JMP 00007ffe5d240148
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW                                                         00007ffd5d255a30 5 bytes JMP 00007ffe5d240110
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW                                                       00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2401b8
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\SYSTEM32\combase.dll!CoSetProxyBlanket                                                             00007ffd5d739318 7 bytes JMP 00007ffe5d240538
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\SYSTEM32\combase.dll!CoCreateInstance                                                              00007ffd5d73cbe0 7 bytes JMP 00007ffe5d240500
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\SYSTEM32\user32.dll!CreateWindowExW                                                                00007ffd5e08b6f4 10 bytes JMP 00007ffe5d240420
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\SYSTEM32\user32.dll!EnumDisplayDevicesW                                                            00007ffd5e0945d8 5 bytes JMP 00007ffe5d2403e8
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\SYSTEM32\user32.dll!DisplayConfigGetDeviceInfo                                                     00007ffd5e094750 9 bytes JMP 00007ffe5d240378
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\SYSTEM32\user32.dll!EnumDisplayDevicesA                                                            00007ffd5e0a4fc0 5 bytes JMP 00007ffe5d2403b0
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\SYSTEM32\user32.dll!ChangeDisplaySettingsExW                                                       00007ffd5e0a5cb0 5 bytes JMP 00007ffe5d240458
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList                                                        00007ffd5dc91500 1 byte JMP 00007ffe5d240490
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList + 2                                                    00007ffd5dc91502 6 bytes {JMP 0xffffffffff5aef90}
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\system32\GDI32.dll!D3DKMTQueryAdapterInfo                                                          00007ffd5dc91750 8 bytes JMP 00007ffe5d2404c8
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleInformation                                                         00007ffd5e3028c0 7 bytes JMP 00007ffe5d240260
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\KERNEL32.DLL!RegQueryValueExW                                                                00007ffd5e3043d8 7 bytes JMP 00007ffe5d240298
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExA                                                                  00007ffd5e3b1f20 7 bytes JMP 00007ffe5d240308
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExW                                                                  00007ffd5e3b40b4 7 bytes JMP 00007ffe5d240340
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\KERNEL32.DLL!RegDeleteValueW                                                                 00007ffd5e3b4510 7 bytes JMP 00007ffe5d2402d0
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\KERNEL32.DLL!K32EnumProcessModulesEx                                                         00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2401f0
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\KERNEL32.DLL!K32GetMappedFileNameW                                                           00007ffd5e3dcf10 7 bytes JMP 00007ffe5d240228
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW                                                              00007ffd5d252300 7 bytes JMP 00007ffe5d2400d8
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                                                                   00007ffd5d255770 5 bytes JMP 00007ffe5d240180
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW                                                                00007ffd5d255860 5 bytes JMP 00007ffe5d240148
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW                                                            00007ffd5d255a30 5 bytes JMP 00007ffe5d240110
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW                                                          00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2401b8
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\USER32.dll!CreateWindowExW                                                                   00007ffd5e08b6f4 10 bytes JMP 00007ffe5d240420
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesW                                                               00007ffd5e0945d8 5 bytes JMP 00007ffe5d2403e8
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\USER32.dll!DisplayConfigGetDeviceInfo                                                        00007ffd5e094750 9 bytes JMP 00007ffe5d240378
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesA                                                               00007ffd5e0a4fc0 5 bytes JMP 00007ffe5d2403b0
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\USER32.dll!ChangeDisplaySettingsExW                                                          00007ffd5e0a5cb0 5 bytes JMP 00007ffe5d240458
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList                                                           00007ffd5dc91500 1 byte JMP 00007ffe5d240490
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList + 2                                                       00007ffd5dc91502 6 bytes {JMP 0xffffffffff5aef90}
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\GDI32.dll!D3DKMTQueryAdapterInfo                                                             00007ffd5dc91750 8 bytes JMP 00007ffe5d2404c8
.text  C:\Program Files\Process Lasso\processgovernor.exe[2680] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleInformation                                      00007ffd5e3028c0 7 bytes JMP 00007ffe5d240260
.text  C:\Program Files\Process Lasso\processgovernor.exe[2680] C:\WINDOWS\system32\KERNEL32.DLL!RegQueryValueExW                                             00007ffd5e3043d8 7 bytes JMP 00007ffe5d240298
.text  C:\Program Files\Process Lasso\processgovernor.exe[2680] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExA                                               00007ffd5e3b1f20 7 bytes JMP 00007ffe5d240308
.text  C:\Program Files\Process Lasso\processgovernor.exe[2680] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExW                                               00007ffd5e3b40b4 7 bytes JMP 00007ffe5d240340
.text  C:\Program Files\Process Lasso\processgovernor.exe[2680] C:\WINDOWS\system32\KERNEL32.DLL!RegDeleteValueW                                              00007ffd5e3b4510 7 bytes JMP 00007ffe5d2402d0
.text  C:\Program Files\Process Lasso\processgovernor.exe[2680] C:\WINDOWS\system32\KERNEL32.DLL!K32EnumProcessModulesEx                                      00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2401f0
.text  C:\Program Files\Process Lasso\processgovernor.exe[2680] C:\WINDOWS\system32\KERNEL32.DLL!K32GetMappedFileNameW                                        00007ffd5e3dcf10 7 bytes JMP 00007ffe5d240228
.text  C:\Program Files\Process Lasso\processgovernor.exe[2680] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW                                           00007ffd5d252300 7 bytes JMP 00007ffe5d2400d8
.text  C:\Program Files\Process Lasso\processgovernor.exe[2680] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                                                00007ffd5d255770 5 bytes JMP 00007ffe5d240180
.text  C:\Program Files\Process Lasso\processgovernor.exe[2680] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW                                             00007ffd5d255860 5 bytes JMP 00007ffe5d240148
.text  C:\Program Files\Process Lasso\processgovernor.exe[2680] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW                                         00007ffd5d255a30 5 bytes JMP 00007ffe5d240110
.text  C:\Program Files\Process Lasso\processgovernor.exe[2680] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW                                       00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2401b8
.text  C:\Program Files\Process Lasso\processgovernor.exe[2680] C:\WINDOWS\SYSTEM32\combase.dll!CoSetProxyBlanket                                             00007ffd5d739318 7 bytes JMP 00007ffe5d240538
.text  C:\Program Files\Process Lasso\processgovernor.exe[2680] C:\WINDOWS\SYSTEM32\combase.dll!CoCreateInstance                                              00007ffd5d73cbe0 7 bytes JMP 00007ffe5d240500
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleInformation                                  00007ffd5e3028c0 7 bytes JMP 00007ffe5d240260
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\KERNEL32.DLL!RegQueryValueExW                                         00007ffd5e3043d8 7 bytes JMP 00007ffe5d240298
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExA                                           00007ffd5e3b1f20 7 bytes JMP 00007ffe5d240308
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExW                                           00007ffd5e3b40b4 7 bytes JMP 00007ffe5d240340
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\KERNEL32.DLL!RegDeleteValueW                                          00007ffd5e3b4510 7 bytes JMP 00007ffe5d2402d0
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\KERNEL32.DLL!K32EnumProcessModulesEx                                  00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2401f0
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\KERNEL32.DLL!K32GetMappedFileNameW                                    00007ffd5e3dcf10 7 bytes JMP 00007ffe5d240228
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW                                       00007ffd5d252300 7 bytes JMP 00007ffe5d2400d8
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                                            00007ffd5d255770 5 bytes JMP 00007ffe5d240180
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW                                         00007ffd5d255860 5 bytes JMP 00007ffe5d240148
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW                                     00007ffd5d255a30 5 bytes JMP 00007ffe5d240110
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW                                   00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2401b8
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\USER32.dll!CreateWindowExW                                            00007ffd5e08b6f4 10 bytes JMP 00007ffe5d240420
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesW                                        00007ffd5e0945d8 5 bytes JMP 00007ffe5d2403e8
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\USER32.dll!DisplayConfigGetDeviceInfo                                 00007ffd5e094750 9 bytes JMP 00007ffe5d240378
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesA                                        00007ffd5e0a4fc0 5 bytes JMP 00007ffe5d2403b0
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\USER32.dll!ChangeDisplaySettingsExW                                   00007ffd5e0a5cb0 5 bytes JMP 00007ffe5d240458
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList                                    00007ffd5dc91500 1 byte JMP 00007ffe5d240490
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList + 2                                00007ffd5dc91502 6 bytes {JMP 0xffffffffff5aef90}
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\GDI32.dll!D3DKMTQueryAdapterInfo                                      00007ffd5dc91750 8 bytes JMP 00007ffe5d2404c8
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\SYSTEM32\combase.dll!CoSetProxyBlanket                                         00007ffd5d739318 7 bytes JMP 00007ffe5d240538
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\SYSTEM32\combase.dll!CoCreateInstance                                          00007ffd5d73cbe0 7 bytes JMP 00007ffe5d240500
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleInformation                         00007ffd5e3028c0 7 bytes JMP 00007ffe5d220260
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\KERNEL32.DLL!RegQueryValueExW                                00007ffd5e3043d8 7 bytes JMP 00007ffe5d220298
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExA                                  00007ffd5e3b1f20 7 bytes JMP 00007ffe5d220308
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExW                                  00007ffd5e3b40b4 7 bytes JMP 00007ffe5d220340
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\KERNEL32.DLL!RegDeleteValueW                                 00007ffd5e3b4510 7 bytes JMP 00007ffe5d2202d0
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\KERNEL32.DLL!K32EnumProcessModulesEx                         00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2201f0
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\KERNEL32.DLL!K32GetMappedFileNameW                           00007ffd5e3dcf10 7 bytes JMP 00007ffe5d220228
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW                              00007ffd5d252300 7 bytes JMP 00007ffe5d2200d8
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                                   00007ffd5d255770 5 bytes JMP 00007ffe5d220180
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW                                00007ffd5d255860 5 bytes JMP 00007ffe5d220148
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW                            00007ffd5d255a30 5 bytes JMP 00007ffe5d220110
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW                          00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2201b8
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\USER32.dll!CreateWindowExW                                   00007ffd5e08b6f4 10 bytes JMP 00007ffe5d220420
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesW                               00007ffd5e0945d8 5 bytes JMP 00007ffe5d2203e8
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\USER32.dll!DisplayConfigGetDeviceInfo                        00007ffd5e094750 9 bytes JMP 00007ffe5d220378
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesA                               00007ffd5e0a4fc0 5 bytes JMP 00007ffe5d2203b0
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\USER32.dll!ChangeDisplaySettingsExW                          00007ffd5e0a5cb0 5 bytes JMP 00007ffe5d220458
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList                           00007ffd5dc91500 1 byte JMP 00007ffe5d220490
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList + 2                       00007ffd5dc91502 6 bytes {JMP 0xffffffffff58ef90}
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\GDI32.dll!D3DKMTQueryAdapterInfo                             00007ffd5dc91750 8 bytes JMP 00007ffe5d2204c8
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\SYSTEM32\d3d9.dll!Direct3DCreate9Ex                                   00007ffd4f3ca234 5 bytes JMP 00007ffd5d2205a8
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\SYSTEM32\d3d9.dll!Direct3DCreate9                                     00007ffd4f3e2300 6 bytes JMP 00007ffd5d220570
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\SYSTEM32\combase.dll!CoSetProxyBlanket                                00007ffd5d739318 7 bytes JMP 00007ffe5d220538
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\SYSTEM32\combase.dll!CoCreateInstance                                 00007ffd5d73cbe0 7 bytes JMP 00007ffe5d220500
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleInformation                                                   00007ffd5e3028c0 7 bytes JMP 00007ffe5d240260
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\system32\KERNEL32.DLL!RegQueryValueExW                                                          00007ffd5e3043d8 7 bytes JMP 00007ffe5d240298
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExA                                                            00007ffd5e3b1f20 7 bytes JMP 00007ffe5d240308
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExW                                                            00007ffd5e3b40b4 7 bytes JMP 00007ffe5d240340
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\system32\KERNEL32.DLL!RegDeleteValueW                                                           00007ffd5e3b4510 7 bytes JMP 00007ffe5d2402d0
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\system32\KERNEL32.DLL!K32EnumProcessModulesEx                                                   00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2401f0
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\system32\KERNEL32.DLL!K32GetMappedFileNameW                                                     00007ffd5e3dcf10 7 bytes JMP 00007ffe5d240228
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW                                                        00007ffd5d252300 7 bytes JMP 00007ffe5d2400d8
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                                                             00007ffd5d255770 5 bytes JMP 00007ffe5d240180
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW                                                          00007ffd5d255860 5 bytes JMP 00007ffe5d240148
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW                                                      00007ffd5d255a30 5 bytes JMP 00007ffe5d240110
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW                                                    00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2401b8
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\SYSTEM32\user32.dll!CreateWindowExW                                                             00007ffd5e08b6f4 10 bytes JMP 00007ffe5d240420
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\SYSTEM32\user32.dll!EnumDisplayDevicesW                                                         00007ffd5e0945d8 5 bytes JMP 00007ffe5d2403e8
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\SYSTEM32\user32.dll!DisplayConfigGetDeviceInfo                                                  00007ffd5e094750 9 bytes JMP 00007ffe5d240378
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\SYSTEM32\user32.dll!EnumDisplayDevicesA                                                         00007ffd5e0a4fc0 5 bytes JMP 00007ffe5d2403b0
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\SYSTEM32\user32.dll!ChangeDisplaySettingsExW                                                    00007ffd5e0a5cb0 5 bytes JMP 00007ffe5d240458
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList                                                     00007ffd5dc91500 1 byte JMP 00007ffe5d240490
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList + 2                                                 00007ffd5dc91502 6 bytes {JMP 0xffffffffff5aef90}
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\system32\GDI32.dll!D3DKMTQueryAdapterInfo                                                       00007ffd5dc91750 8 bytes JMP 00007ffe5d2404c8
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleInformation                                           00007ffd5e3028c0 7 bytes JMP 00007ffe5d240260
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\KERNEL32.DLL!RegQueryValueExW                                                  00007ffd5e3043d8 7 bytes JMP 00007ffe5d240298
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExA                                                    00007ffd5e3b1f20 7 bytes JMP 00007ffe5d240308
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExW                                                    00007ffd5e3b40b4 7 bytes JMP 00007ffe5d240340
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\KERNEL32.DLL!RegDeleteValueW                                                   00007ffd5e3b4510 7 bytes JMP 00007ffe5d2402d0
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\KERNEL32.DLL!K32EnumProcessModulesEx                                           00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2401f0
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\KERNEL32.DLL!K32GetMappedFileNameW                                             00007ffd5e3dcf10 7 bytes JMP 00007ffe5d240228
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW                                                00007ffd5d252300 7 bytes JMP 00007ffe5d2400d8
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                                                     00007ffd5d255770 5 bytes JMP 00007ffe5d240180
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW                                                  00007ffd5d255860 5 bytes JMP 00007ffe5d240148
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW                                              00007ffd5d255a30 5 bytes JMP 00007ffe5d240110
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW                                            00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2401b8
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506                                             00007ffd5e4b169a 4 bytes [4B, 5E, FD, 7F]
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514                                             00007ffd5e4b16a2 4 bytes [4B, 5E, FD, 7F]
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118                                                00007ffd5e4b181a 4 bytes [4B, 5E, FD, 7F]
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142                                                00007ffd5e4b1832 4 bytes [4B, 5E, FD, 7F]
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\USER32.dll!CreateWindowExW                                                     00007ffd5e08b6f4 10 bytes JMP 00007ffe5d240420
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesW                                                 00007ffd5e0945d8 5 bytes JMP 00007ffe5d2403e8
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\USER32.dll!DisplayConfigGetDeviceInfo                                          00007ffd5e094750 9 bytes JMP 00007ffe5d240378
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesA                                                 00007ffd5e0a4fc0 5 bytes JMP 00007ffe5d2403b0
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\USER32.dll!ChangeDisplaySettingsExW                                            00007ffd5e0a5cb0 5 bytes JMP 00007ffe5d240458
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList                                             00007ffd5dc91500 1 byte JMP 00007ffe5d240490
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList + 2                                         00007ffd5dc91502 6 bytes {JMP 0xffffffffff5aef90}
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\GDI32.dll!D3DKMTQueryAdapterInfo                                               00007ffd5dc91750 8 bytes JMP 00007ffe5d2404c8
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\SYSTEM32\combase.dll!CoSetProxyBlanket                                                  00007ffd5d739318 7 bytes JMP 00007ffe5d240538
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\SYSTEM32\combase.dll!CoCreateInstance                                                   00007ffd5d73cbe0 7 bytes JMP 00007ffe5d240500
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleInformation                                                   00007ffd5e3028c0 7 bytes JMP 00007ffe5d240260
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\KERNEL32.DLL!RegQueryValueExW                                                          00007ffd5e3043d8 7 bytes JMP 00007ffe5d240298
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExA                                                            00007ffd5e3b1f20 7 bytes JMP 00007ffe5d240308
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExW                                                            00007ffd5e3b40b4 7 bytes JMP 00007ffe5d240340
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\KERNEL32.DLL!RegDeleteValueW                                                           00007ffd5e3b4510 7 bytes JMP 00007ffe5d2402d0
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\KERNEL32.DLL!K32EnumProcessModulesEx                                                   00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2401f0
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\KERNEL32.DLL!K32GetMappedFileNameW                                                     00007ffd5e3dcf10 7 bytes JMP 00007ffe5d240228
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW                                                        00007ffd5d252300 7 bytes JMP 00007ffe5d2400d8
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                                                             00007ffd5d255770 5 bytes JMP 00007ffe5d240180
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW                                                          00007ffd5d255860 5 bytes JMP 00007ffe5d240148
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW                                                      00007ffd5d255a30 5 bytes JMP 00007ffe5d240110
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW                                                    00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2401b8
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList                                                     00007ffd5dc91500 1 byte JMP 00007ffe5d240490
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList + 2                                                 00007ffd5dc91502 6 bytes {JMP 0xffffffffff5aef90}
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\GDI32.dll!D3DKMTQueryAdapterInfo                                                       00007ffd5dc91750 8 bytes JMP 00007ffe5d2404c8
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\USER32.dll!CreateWindowExW                                                             00007ffd5e08b6f4 10 bytes JMP 00007ffe5d240420
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesW                                                         00007ffd5e0945d8 5 bytes JMP 00007ffe5d2403e8
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\USER32.dll!DisplayConfigGetDeviceInfo                                                  00007ffd5e094750 9 bytes JMP 00007ffe5d240378
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesA                                                         00007ffd5e0a4fc0 5 bytes JMP 00007ffe5d2403b0
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\USER32.dll!ChangeDisplaySettingsExW                                                    00007ffd5e0a5cb0 5 bytes JMP 00007ffe5d240458
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\SYSTEM32\combase.dll!CoSetProxyBlanket                                                          00007ffd5d739318 7 bytes JMP 00007ffe5d240538
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\SYSTEM32\combase.dll!CoCreateInstance                                                           00007ffd5d73cbe0 7 bytes JMP 00007ffe5d240500
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleInformation                      00007ffd5e3028c0 7 bytes JMP 00007ffe5d240260
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\KERNEL32.DLL!RegQueryValueExW                             00007ffd5e3043d8 7 bytes JMP 00007ffe5d240298
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExA                               00007ffd5e3b1f20 7 bytes JMP 00007ffe5d240308
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExW                               00007ffd5e3b40b4 7 bytes JMP 00007ffe5d240340
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\KERNEL32.DLL!RegDeleteValueW                              00007ffd5e3b4510 7 bytes JMP 00007ffe5d2402d0
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\KERNEL32.DLL!K32EnumProcessModulesEx                      00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2401f0
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\KERNEL32.DLL!K32GetMappedFileNameW                        00007ffd5e3dcf10 7 bytes JMP 00007ffe5d240228
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW                           00007ffd5d252300 7 bytes JMP 00007ffe5d2400d8
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                                00007ffd5d255770 5 bytes JMP 00007ffe5d240180
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW                             00007ffd5d255860 5 bytes JMP 00007ffe5d240148
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW                         00007ffd5d255a30 5 bytes JMP 00007ffe5d240110
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW                       00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2401b8
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\USER32.dll!CreateWindowExW                                00007ffd5e08b6f4 10 bytes JMP 00007ffe5d240420
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesW                            00007ffd5e0945d8 5 bytes JMP 00007ffe5d2403e8
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\USER32.dll!DisplayConfigGetDeviceInfo                     00007ffd5e094750 9 bytes JMP 00007ffe5d240378
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesA                            00007ffd5e0a4fc0 5 bytes JMP 00007ffe5d2403b0
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\USER32.dll!ChangeDisplaySettingsExW                       00007ffd5e0a5cb0 5 bytes JMP 00007ffe5d240458
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList                        00007ffd5dc91500 1 byte JMP 00007ffe5d240490
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList + 2                    00007ffd5dc91502 6 bytes {JMP 0xffffffffff5aef90}
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\GDI32.dll!D3DKMTQueryAdapterInfo                          00007ffd5dc91750 8 bytes JMP 00007ffe5d2404c8
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\SYSTEM32\combase.dll!CoSetProxyBlanket                             00007ffd5d739318 7 bytes JMP 00007ffe5d240538
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\SYSTEM32\combase.dll!CoCreateInstance                              00007ffd5d73cbe0 7 bytes JMP 00007ffe5d240500
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleInformation                                                        00007ffd5e3028c0 7 bytes JMP 00007ffe5d240260
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\KERNEL32.DLL!RegQueryValueExW                                                               00007ffd5e3043d8 7 bytes JMP 00007ffe5d240298
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExA                                                                 00007ffd5e3b1f20 7 bytes JMP 00007ffe5d240308
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExW                                                                 00007ffd5e3b40b4 7 bytes JMP 00007ffe5d240340
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\KERNEL32.DLL!RegDeleteValueW                                                                00007ffd5e3b4510 7 bytes JMP 00007ffe5d2402d0
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\KERNEL32.DLL!K32EnumProcessModulesEx                                                        00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2401f0
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\KERNEL32.DLL!K32GetMappedFileNameW                                                          00007ffd5e3dcf10 7 bytes JMP 00007ffe5d240228
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW                                                             00007ffd5d252300 7 bytes JMP 00007ffe5d2400d8
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                                                                  00007ffd5d255770 5 bytes JMP 00007ffe5d240180
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW                                                               00007ffd5d255860 5 bytes JMP 00007ffe5d240148
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW                                                           00007ffd5d255a30 5 bytes JMP 00007ffe5d240110
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW                                                         00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2401b8
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\USER32.dll!CreateWindowExW                                                                  00007ffd5e08b6f4 10 bytes JMP 00007ffe5d240420
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesW                                                              00007ffd5e0945d8 5 bytes JMP 00007ffe5d2403e8
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\USER32.dll!DisplayConfigGetDeviceInfo                                                       00007ffd5e094750 9 bytes JMP 00007ffe5d240378
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesA                                                              00007ffd5e0a4fc0 5 bytes JMP 00007ffe5d2403b0
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\USER32.dll!ChangeDisplaySettingsExW                                                         00007ffd5e0a5cb0 5 bytes JMP 00007ffe5d240458
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList                                                          00007ffd5dc91500 1 byte JMP 00007ffe5d240490
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList + 2                                                      00007ffd5dc91502 6 bytes {JMP 0xffffffffff5aef90}
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\GDI32.dll!D3DKMTQueryAdapterInfo                                                            00007ffd5dc91750 8 bytes JMP 00007ffe5d2404c8
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\SYSTEM32\combase.dll!CoSetProxyBlanket                                                               00007ffd5d739318 7 bytes JMP 00007ffe5d240538
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\SYSTEM32\combase.dll!CoCreateInstance                                                                00007ffd5d73cbe0 7 bytes JMP 00007ffe5d240500
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506                                                          00007ffd5e4b169a 4 bytes [4B, 5E, FD, 7F]
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514                                                          00007ffd5e4b16a2 4 bytes [4B, 5E, FD, 7F]
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118                                                             00007ffd5e4b181a 4 bytes [4B, 5E, FD, 7F]
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142                                                             00007ffd5e4b1832 4 bytes [4B, 5E, FD, 7F]
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleInformation                                        00007ffd5e3028c0 7 bytes JMP 00007ffe5d240260
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\KERNEL32.DLL!RegQueryValueExW                                               00007ffd5e3043d8 7 bytes JMP 00007ffe5d240298
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExA                                                 00007ffd5e3b1f20 7 bytes JMP 00007ffe5d240308
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExW                                                 00007ffd5e3b40b4 7 bytes JMP 00007ffe5d240340
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\KERNEL32.DLL!RegDeleteValueW                                                00007ffd5e3b4510 7 bytes JMP 00007ffe5d2402d0
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\KERNEL32.DLL!K32EnumProcessModulesEx                                        00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2401f0
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\KERNEL32.DLL!K32GetMappedFileNameW                                          00007ffd5e3dcf10 7 bytes JMP 00007ffe5d240228
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW                                             00007ffd5d252300 7 bytes JMP 00007ffe5d2400d8
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                                                  00007ffd5d255770 5 bytes JMP 00007ffe5d240180
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW                                               00007ffd5d255860 5 bytes JMP 00007ffe5d240148
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW                                           00007ffd5d255a30 5 bytes JMP 00007ffe5d240110
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW                                         00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2401b8
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506                                          00007ffd5e4b169a 4 bytes [4B, 5E, FD, 7F]
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514                                          00007ffd5e4b16a2 4 bytes [4B, 5E, FD, 7F]
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118                                             00007ffd5e4b181a 4 bytes [4B, 5E, FD, 7F]
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142                                             00007ffd5e4b1832 4 bytes [4B, 5E, FD, 7F]
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\USER32.dll!CreateWindowExW                                                  00007ffd5e08b6f4 10 bytes JMP 00007ffe5d240420
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesW                                              00007ffd5e0945d8 5 bytes JMP 00007ffe5d2403e8
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\USER32.dll!DisplayConfigGetDeviceInfo                                       00007ffd5e094750 9 bytes JMP 00007ffe5d240378
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesA                                              00007ffd5e0a4fc0 5 bytes JMP 00007ffe5d2403b0
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\USER32.dll!ChangeDisplaySettingsExW                                         00007ffd5e0a5cb0 5 bytes JMP 00007ffe5d240458
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList                                          00007ffd5dc91500 1 byte JMP 00007ffe5d240490
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList + 2                                      00007ffd5dc91502 6 bytes {JMP 0xffffffffff5aef90}
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\GDI32.dll!D3DKMTQueryAdapterInfo                                            00007ffd5dc91750 8 bytes JMP 00007ffe5d2404c8
.text  C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe[1480] C:\WINDOWS\system32\KERNEL32.dll!K32GetModuleInformation                    00007ffd5e3028c0 7 bytes JMP 00007ffe5d240260
.text  C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe[1480] C:\WINDOWS\system32\KERNEL32.dll!RegQueryValueExW                           00007ffd5e3043d8 7 bytes JMP 00007ffe5d240298
.text  C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe[1480] C:\WINDOWS\system32\KERNEL32.dll!RegSetValueExA                             00007ffd5e3b1f20 7 bytes JMP 00007ffe5d240308
.text  C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe[1480] C:\WINDOWS\system32\KERNEL32.dll!RegSetValueExW                             00007ffd5e3b40b4 7 bytes JMP 00007ffe5d240340
.text  C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe[1480] C:\WINDOWS\system32\KERNEL32.dll!RegDeleteValueW                            00007ffd5e3b4510 7 bytes JMP 00007ffe5d2402d0
.text  C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe[1480] C:\WINDOWS\system32\KERNEL32.dll!K32EnumProcessModulesEx                    00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2401f0
.text  C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe[1480] C:\WINDOWS\system32\KERNEL32.dll!K32GetMappedFileNameW                      00007ffd5e3dcf10 7 bytes JMP 00007ffe5d240228
.text  C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe[1480] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW                         00007ffd5d252300 7 bytes JMP 00007ffe5d2400d8
.text  C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe[1480] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                              00007ffd5d255770 5 bytes JMP 00007ffe5d240180
.text  C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe[1480] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW                           00007ffd5d255860 5 bytes JMP 00007ffe5d240148
.text  C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe[1480] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW                       00007ffd5d255a30 5 bytes JMP 00007ffe5d240110
.text  C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe[1480] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW                     00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2401b8
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe[3064] C:\WINDOWS\system32\psapi.dll!GetModuleBaseNameA + 506   00007ffd5e4b169a 4 bytes [4B, 5E, FD, 7F]
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe[3064] C:\WINDOWS\system32\psapi.dll!GetModuleBaseNameA + 514   00007ffd5e4b16a2 4 bytes [4B, 5E, FD, 7F]
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe[3064] C:\WINDOWS\system32\psapi.dll!QueryWorkingSet + 118      00007ffd5e4b181a 4 bytes [4B, 5E, FD, 7F]
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe[3064] C:\WINDOWS\system32\psapi.dll!QueryWorkingSet + 142      00007ffd5e4b1832 4 bytes [4B, 5E, FD, 7F]
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\KERNEL32.dll!K32GetModuleInformation    00007ffd5e3028c0 7 bytes JMP 00007ffe5d240260
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\KERNEL32.dll!RegQueryValueExW           00007ffd5e3043d8 7 bytes JMP 00007ffe5d240298
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\KERNEL32.dll!RegSetValueExA             00007ffd5e3b1f20 7 bytes JMP 00007ffe5d240308
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\KERNEL32.dll!RegSetValueExW             00007ffd5e3b40b4 7 bytes JMP 00007ffe5d240340
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\KERNEL32.dll!RegDeleteValueW            00007ffd5e3b4510 7 bytes JMP 00007ffe5d2402d0
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\KERNEL32.dll!K32EnumProcessModulesEx    00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2401f0
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\KERNEL32.dll!K32GetMappedFileNameW      00007ffd5e3dcf10 7 bytes JMP 00007ffe5d240228
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW         00007ffd5d252300 7 bytes JMP 00007ffe5d2400d8
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary              00007ffd5d255770 5 bytes JMP 00007ffe5d240180
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW           00007ffd5d255860 5 bytes JMP 00007ffe5d240148
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW       00007ffd5d255a30 5 bytes JMP 00007ffe5d240110
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW     00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2401b8
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\SYSTEM32\combase.dll!CoSetProxyBlanket           00007ffd5d739318 7 bytes JMP 00007ffe5d240538
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\SYSTEM32\combase.dll!CoCreateInstance            00007ffd5d73cbe0 7 bytes JMP 00007ffe5d240500
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\USER32.dll!CreateWindowExW              00007ffd5e08b6f4 10 bytes JMP 00007ffe5d240420
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesW          00007ffd5e0945d8 5 bytes JMP 00007ffe5d2403e8
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\USER32.dll!DisplayConfigGetDeviceInfo   00007ffd5e094750 9 bytes JMP 00007ffe5d240378
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesA          00007ffd5e0a4fc0 5 bytes JMP 00007ffe5d2403b0
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\USER32.dll!ChangeDisplaySettingsExW     00007ffd5e0a5cb0 5 bytes JMP 00007ffe5d240458
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList      00007ffd5dc91500 1 byte JMP 00007ffe5d240490
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList + 2  00007ffd5dc91502 6 bytes {JMP 0xffffffffff5aef90}
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\GDI32.dll!D3DKMTQueryAdapterInfo        00007ffd5dc91750 8 bytes JMP 00007ffe5d2404c8
.text  C:\Program Files\Windows Media Player\wmpnetwk.exe[5888] C:\WINDOWS\SYSTEM32\WSOCK32.dll!setsockopt + 194                                              00007ffd4a3a1f6a 4 bytes [3A, 4A, FD, 7F]
.text  C:\Program Files\Windows Media Player\wmpnetwk.exe[5888] C:\WINDOWS\SYSTEM32\WSOCK32.dll!setsockopt + 218                                              00007ffd4a3a1f82 4 bytes [3A, 4A, FD, 7F]
         

Addition.txt

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-07-2014
Ran by Administrator at 2014-07-11 13:21:21
Running from C:\Users\Administrator\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Norton Internet Security (Enabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
AS: Norton Internet Security (Enabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466}
FW: Norton Internet Security (Enabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}

==================== Installed Programs ======================

µTorrent (HKLM-x32\...\uTorrent) (Version: 3.1.0 - )
1.0 (HKLM-x32\...\Pagealicious_is1) (Version: 1.0.0.0 - ) <==== ATTENTION
337 GAMES (HKCU\...\337Games) (Version: 1.1.1.0 - )
3DMark 11 (HKLM-x32\...\{46EDCFA5-7EDB-46A9-B093-1C6237470CEC}) (Version: 1.0.5 - Futuremark Corporation)
7 Days to Die (HKLM-x32\...\Steam App 251570) (Version:  - The Fun Pimps)
888casino (HKLM-x32\...\888casino) (Version:  - )
99 Slot Machine (HKLM-x32\...\{902f54fb-b3bf-457e-bce7-b92345b3dc23}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Acronis Drive Monitor (HKLM-x32\...\{706AE61D-40A4-4F50-8359-FE8F6F7FA461}) (Version: 1.0.566 - Acronis)
Ad-Aware Antivirus (HKLM\...\{7994B53E-9CAF-414E-904C-63AA00D64B52}_AdAwareUpdater) (Version: 11.1.5152.0 - Lavasoft)
AdAwareInstaller (Version: 11.1.5152.0 - Lavasoft) Hidden
AdAwareUpdater (Version: 11.1.5152.0 - Lavasoft) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 14.0.0.110 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 14.0.0.110 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.05) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.05 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.9.149 - Adobe Systems, Inc.)
AIDA64 Extreme v4.20 (HKLM-x32\...\AIDA64 Extreme_is1) (Version: 4.20 - FinalWire Ltd.)
AkkuLine Batterie-Tool (HKLM-x32\...\{5FF02438-DDE5-4D8E-8291-577CC1A2C014}) (Version: 1.0.0 - AkkuLine.de)
AllDup 3.4.24 (HKLM-x32\...\AllDup_is1) (Version: 3.4.24 - Michael Thummerer Software Design)
AntimalwareEngine (Version: 2.6.0.0 - Lavasoft) Hidden
Apple Application Support (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Applon (HKLM-x32\...\Applon) (Version:  - Applon)
Arma 3 (HKLM-x32\...\Steam App 107410) (Version:  - Bohemia Interactive)
Ashampoo WinOptimizer 10 v.10.3.0 (HKLM-x32\...\{4209F371-88D4-AB00-ED2B-D6520C84D9D5}_is1) (Version: 10.03.00 - Ashampoo GmbH & Co. KG)
AuthenTec TrueAPI 64-bit (Version: 1.6.0.87 - AuthenTec, Inc.) Hidden
AutoHotkey 1.1.14.03 (HKLM\...\AutoHotkey) (Version: 1.1.14.03 - Lexikos)
Azureus (HKLM-x32\...\Azureus) (Version: 2.5.0.4 - )
BatteryBar (remove only) (HKLM\...\BatteryBar) (Version:  - )
BatteryCare 0.9.16.0 (HKLM-x32\...\{C6A6036D-FBD0-4324-BEAA-C0845257160C}_is1) (Version: 0.9.16.0 - Filipe Lourenço)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.0 - EA Digital Illusions CE AB)
Begado (HKLM-x32\...\{82149c0c-52f4-42eb-9683-55ae065bad30}) (Version: 13.1.0-NuWorks - Nuworks Gaming)
BinMake Uninstall (HKLM-x32\...\BinMake) (Version:  - )
BinPBO Personal Edition Uninstall (HKLM-x32\...\BinPBO Personal Edition) (Version:  - )
Blackjack Ballroom Casino (HKLM-x32\...\bjballroom) (Version: 16.9.2.739 - )
BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.7.16.910 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM-x32\...\{FB93553A-CBA7-44FE-BD70-A996C859DD06}) (Version: 0.7.16.910 - BlueStack Systems, Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Burnout Paradise: The Ultimate Box (HKLM-x32\...\Steam App 24740) (Version:  - Criterion Games)
bwin Download Casino (HKLM-x32\...\bwincomCasino) (Version:  - bwincom)
bwin Poker (HKLM-x32\...\bwincomPoker) (Version:  - bwincom)
Call of Duty: Black Ops II (HKLM-x32\...\Steam App 202970) (Version:  - Treyarch)
Call of Duty: Ghosts (HKLM-x32\...\Steam App 209160) (Version:  - Infinity Ward)
Camtasia Studio 8 (HKLM-x32\...\{8F6F7194-0734-4CDA-8C04-6B766F2241A6}) (Version: 8.0.4.1060 - TechSmith Corporation)
Captain Cooks Casino (HKLM-x32\...\captaincooks) (Version: 16.10.1.1475 - )
Casino Action (HKLM-x32\...\casinoaction) (Version: 16.9.2.739 - )
Casino Bellevue French (HKLM-x32\...\{917703e6-dc9f-42df-850d-3c41a383ef5d}) (Version: 13.1.0-RTG - RealTimeGaming Software)
CasinoClub (HKLM-x32\...\CasinoClub ) (Version:  - GtechG2)
CasinoRedKings (HKLM-x32\...\CasinoRedKings) (Version:  - )
CCleaner (HKLM\...\CCleaner) (Version: 4.07 - Piriform)
Cheat Engine 6.3 (HKLM-x32\...\Cheat Engine 6.3_is1) (Version:  - Cheat Engine)
Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version:  - Cheat Engine)
Cirrus Casino (HKLM-x32\...\{8b250990-e347-403b-834e-6073f512efe7}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Classic Shell (HKLM\...\{FEA1590B-540A-41FC-A95C-664493C82A21}) (Version: 3.6.8 - IvoSoft)
Cleaning Suite v2.1 (HKLM-x32\...\Cleaning Suite_is1) (Version:  - ASCOMP Software GmbH)
Cocoa Casino (HKLM-x32\...\CocoaCasino) (Version: 1.0 - Rival)
Connected Music powered by Universal Music Group version 1.0 (HKLM-x32\...\{46037DC7-F927-46DF-935F-D6F122BDD34B}_is1) (Version: 1.0 - Snowite)
Connectify (HKLM\...\Connectify) (Version: 7.2.1.29658 - Connectify)
ConvertHelper 2.2 (HKLM-x32\...\{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1) (Version:  - DownloadHelper)
Core Temp 1.0 RC5 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.0 - Alcpu)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version:  - Valve)
Craften Terminal Beta 3.4.5005.37007 (HKLM-x32\...\{4e7c3936-7c06-4ef0-928b-c5d92f372578}_is1) (Version: 3.4.5005.37007 - Craften.de)
Crysis 2 Maximum Edition (HKLM-x32\...\Steam App 108800) (Version:  - Crytek Studios)
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.4.6515 - CyberLink Corp.)
CyberLink LabelPrint (x32 Version: 2.5.4.6515 - CyberLink Corp.) Hidden
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.5.3606 - CyberLink Corp.)
CyberLink Media Suite 10 (x32 Version: 10.0.5.3606 - CyberLink Corp.) Hidden
CyberLink PhotoDirector (HKLM-x32\...\InstallShield_{4862344A-A39C-4897-ACD4-A1BED5163C5A}) (Version: 2.0.2.3317 - CyberLink Corp.)
CyberLink PhotoDirector (x32 Version: 2.0.2.3317 - CyberLink Corp.) Hidden
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.3.2527 - CyberLink Corp.)
CyberLink Power2Go 8 (x32 Version: 8.0.3.2527 - CyberLink Corp.) Hidden
CyberLink PowerDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.8.5511 - CyberLink Corp.)
CyberLink PowerDVD (x32 Version: 10.0.8.5511 - CyberLink Corp.) Hidden
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.5.6.6119 - CyberLink Corp.)
CyberLink YouCam (x32 Version: 3.5.6.6119 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)
Dead Space (HKLM-x32\...\Steam App 17470) (Version:  - EA Redwood Shores)
Definition Update for Microsoft Office 2010 (KB982726) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{043645C8-48EC-458F-B9BD-9C8F15CEF6F7}) (Version:  - Microsoft)
Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D1C35197-B856-45E2-BA67-5ABB6B0CA9C2}) (Version:  - Microsoft)
Defraggler (HKLM\...\Defraggler) (Version: 2.16 - Piriform)
Desktop Media 1.7 (HKLM-x32\...\Desktop Media_is1) (Version:  - Ian Perez)
Deutschland Digital 1.0.0 (HKLM-x32\...\Deutschland Digital_is1) (Version: 1.0.0 - Ashampoo GmbH & Co. KG)
devolo dLAN Cockpit (HKLM-x32\...\dlancockpit) (Version: 3.2.0.0 - devolo AG)
Die Sims™ 3 Late Night (HKLM-x32\...\{45057FCE-5784-48BE-8176-D9D00AF56C3C}) (Version: 6.5.1 - Electronic Arts)
Die Sims™ 3 Luxus-Accessoires (HKLM-x32\...\{71828142-5A24-4BD0-97E7-976DA08CE6CF}) (Version: 3.0.38 - Electronic Arts)
Die*Sims™*3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.42.130 - Electronic Arts)
dLAN Cockpit (x32 Version: 3.2.28 - devolo AG) Hidden
Download.am (HKLM-x32\...\Download.am) (Version:  - )
Downloader (HKLM-x32\...\Downloader) (Version:  - )
Driver Manager v1.02 (HKLM-x32\...\Driver Manager_is1) (Version:  - L5 Software Group, LLC)
DriverAgent by eSupport.com (HKLM-x32\...\DriverAgent_is1) (Version:  - Copyright © 2013 eSupport.com, Inc • All Rights Reserved)
EasyBCD 2.2 (HKLM-x32\...\EasyBCD) (Version: 2.2 - NeoSmart Technologies)
eBesucher Restarter 1.2 (HKLM-x32\...\{3F099090-131B-4D94-97CF-6FD738F51C01}_is1) (Version: 1.2.04.0 - eBesucher)
eBoostr 4 (HKLM\...\eBoostr 1) (Version: 4.5 - eBoostr)
Emergency 2014 (HKLM-x32\...\Steam App 260930) (Version:  - Promotion Software)
Energy Star (HKLM-x32\...\{FC0ADA4D-8FA5-4452-8AFF-F0A0BAC97EF7}) (Version: 1.0.9 - Hewlett-Packard Company)
ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
EuroCityCasino (HKLM-x32\...\EuroCityCasino) (Version: 1.2 - Cassava Enterprises (Gibraltar) Limited)
EuroCityCasino (x32 Version: 1.2 - Cassava Enterprises (Gibraltar) Limited) Hidden
EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
Fake Webcam 7.3 (HKLM-x32\...\fakewebcam7.3.0_is1) (Version: 7.3.0 - Web Solution Mart)
Fake Webcam Codecs Pack 1.0.0 (HKLM\...\fwccpsetup_is1) (Version: 1.0.0 - Web Solution Mart)
Far Cry 3 (HKLM-x32\...\{E3B9C5A9-BD7A-4B56-B754-FAEA7DD6FA88}) (Version: 1.05 - Ubisoft)
Far Cry 3 Digital Deluxe Edition DLC (HKLM-x32\...\Digital Deluxe Edition DLC_is1) (Version: 1.0 - Ubisoft)
FileViewPro (HKLM\...\FileViewPro_is1) (Version: 4.0 - Solvusoft Corporation)
FileZilla Client 3.2.7.1 (HKLM-x32\...\FileZilla Client) (Version: 3.2.7.1 - )
Fire Department 3 (HKLM-x32\...\Fire Department 3_is1) (Version:  - Metaboli)
Folderico 4.0 RC12 (HKLM-x32\...\Folderico) (Version: 4.0 RC12 - Shedko ( www.softq.org ))
FormatFactory 3.1.1 (HKLM-x32\...\FormatFactory) (Version: 3.1.1 - Free Time)
Fotogalerie (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Free Mouse Auto Clicker 3.1 (HKLM-x32\...\{7D9D583E-EC8B-4390-B3A4-017B8182C8FF}_is1) (Version:  - Advanced Mouse Auto Clicker ltd.)
Free YouTube to MP3 Converter version 3.12.16.1030 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.16.1030 - DVDVideoSoft Ltd.)
FreePortScanner 2.8.4 (HKLM-x32\...\FreePortScanner_is1) (Version:  - Nsasoft LLC.)
FreshDiagnose (HKLM-x32\...\FreshDevices - FreshDiagnose_is1) (Version:  - )
FreshDownload (HKLM-x32\...\FreshDevices - FreshDownload_is1) (Version:  - )
FSM Editor Personal Edition Uninstall (HKLM-x32\...\FSM Editor Personal Edition) (Version:  - )
Futuremark SystemInfo (HKLM-x32\...\{BEE64C14-BEF1-4610-8A68-A16EAA47B882}) (Version: 4.17.0 - Futuremark Corporation)
Gaming Club (HKLM-x32\...\gamingclub) (Version: 16.9.2.739 - )
Genie Timeline (HKLM-x32\...\Genie Timeline) (Version: 4.0 - Genie9)
Genymotion version 2.2.2 (HKLM\...\{6D180286-D4DF-40EF-9227-923B9C07C08A}_is1) (Version: 2.2.2 - Genymobile)
Golden Tiger Casino (HKLM-x32\...\goldentiger) (Version: 16.9.2.739 - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
Grand Theft Auto IV (HKLM-x32\...\{579BA58C-F33D-4970-9953-B94B43768AC3}) (Version: 1.00.0000 - Rockstar Games)
Grand Theft Auto IV (x32 Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden
Grepo (HKLM-x32\...\Grepo) (Version:  - Grepo)
GrFinger Desktop Identity 1.1 (HKLM-x32\...\{37d8695b-ab6c-40a9-97a2-f7a4813f53ad}_is1) (Version: 1.1 - Griaule Biometrics.)
GrFinger Desktop Login 1.1.0 (HKLM-x32\...\{11E1DD13-311D-474C-92C8-2E531A996B0D}_is1) (Version: 1.1.0 - Griaule Biometrics.)
Hewlett-Packard ACLM.NET v1.2.1.1 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
Hex-Editor MX (HKLM-x32\...\{7FC7AD70-1DF3-4B84-9AA2-4FB680F45572}_is1) (Version: 6.0 - NEXT-Soft)
HitFilm 2 Express (HKLM\...\{A6E81EFB-2A19-4B5B-8C48-D4E5DB3AD547}) (Version: 2.0.2522.46168 - FXhome)
Hitman 2: Silent Assassin (HKLM-x32\...\Steam App 6850) (Version:  - IO Interactive)
HomeTab 3.7 (HKLM-x32\...\{3a4935b3-b7a0-4065-8ccc-0030471b33f1}_is1) (Version: 3.7 - HomeTab) <==== ATTENTION
HP 3D DriveGuard (HKLM\...\{AB5BCC55-18E2-46C7-9405-FF61CB888F05}) (Version: 4.2.9.1 - Hewlett-Packard Company)
HP Connected Music (Meridian - installer) (HKLM-x32\...\StartHPConnectedMusic) (Version: v1.0 - Meridian Audio Ltd)
HP Connected Remote (HKLM-x32\...\{F243A34B-AB7F-4065-B770-B85B767C247C}) (Version: 1.7.271 - Hewlett-Packard)
HP CoolSense (HKLM-x32\...\{59F8C5AA-91BD-423D-BF05-09A80F39898F}) (Version: 2.10.62 - Hewlett-Packard Company)
HP Customer Experience Enhancements (x32 Version: 6.0.1.7 - Hewlett-Packard) Hidden
HP Deskjet 2050 J510 series - Grundlegende Software für das Gerät (HKLM\...\{DF37555F-0259-43DA-B60C-47106FA14AA3}) (Version: 28.0.1313.0 - Hewlett-Packard Co.)
HP Deskjet 2050 J510 series Hilfe (HKLM-x32\...\{7A3DF2E2-CF13-44FB-A93E-F71D5381DB3F}) (Version: 140.0.61.61 - Hewlett Packard)
HP Documentation (HKLM-x32\...\{53D3E126-699A-4D92-AA66-6560D573553E}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Postscript Converter (Version: 3.1.3591 - Hewlett-Packard) Hidden
HP Quick Launch (HKLM-x32\...\{E5823036-6F09-4D0A-B05C-E2BAA129288A}) (Version: 3.0.6 - Hewlett-Packard Company)
HP Recovery Manager (x32 Version: 8.00 - Hewlett-Packard) Hidden
HP Registration Service (HKLM\...\{C2E428EB-116E-41C0-9E84-B22DE9CCA42F}) (Version: 1.1.6232.4245 - Hewlett-Packard)
HP SimplePass (HKLM-x32\...\{4BACA3B8-F63A-44ED-9A8D-48B4D02AD268}) (Version: 6.0.100.276 - Hewlett-Packard)
HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
HP Utility Center (HKLM\...\{2AFEFC93-F0C7-4390-BB51-F914EC546B30}) (Version: 2.1.6 - Hewlett-Packard Company)
HP Wireless Button Driver (HKLM-x32\...\{30B2D1D8-0A07-4B71-9553-0710C5D31E35}) (Version: 1.1.2.1 - Hewlett-Packard Company)
iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.)
iDevice Manager (HKLM-x32\...\FE5AE7DC-7B01-4263-A94C-B4526C276550_is1) (Version: 3.2.3.0 - Marx Software)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6482.0 - IDT)
iFunbox (v2.7.2386.747), iFunbox DevTeam (HKLM-x32\...\iFunbox_is1) (Version: v2.7.2386.747 - )
Infestation Survivor Stories version 1.0 (HKLM-x32\...\{BC3051A7-1021-4B57-A3DA-AAC24566FAE7}_is1) (Version: 1.0 - OP Productions LLC)
Intel Extreme Tuning Utility (HKLM-x32\...\{1bcf77e1-2519-41dc-a594-9936f5f42203}) (Version: 4.2.0.8 - Intel Corporation)
Intel Extreme Tuning Utility (x32 Version: 4.2.0.8 - Intel Corporation) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation)
Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.36943 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.3.1520 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3379 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.9.1002 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.27.798.1 - Intel Corporation) Hidden
Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\{3FD0C489-0F02-481a-A3E1-9754CD396761}) (Version:  - Intel Corporation)
iPhone Backup Extractor (HKCU\...\iPhone Backup Extractor) (Version: 4.9.23.0 - Reincubate Ltd)
iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.)
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
KMSpico 3.1 (HKLM\...\KMSpico v3.1_is1) (Version: 3.1 - )
La Riviera Casino English (HKLM-x32\...\{db038d9f-a724-4409-84be-685fce5c604f}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Lagarith lossless video codec (Remove Only) (HKLM\...\LAGARITH) (Version:  - )
Lansweeper (HKLM-x32\...\Lansweeper_is1) (Version: 5.1 - Lansweeper.com)
LastPass(uninstall only) (HKLM-x32\...\LastPass) (Version:  - LastPass)
Logitech Gaming Software (Version: 8.45.88 - Logitech Inc.) Hidden
Lucky Emperor Casino (HKLM-x32\...\luckyemperor) (Version: 16.9.2.739 - )
Medal of Honor(TM) Multiplayer (HKLM-x32\...\Steam App 47830) (Version:  - Electronic Arts)
Medal of Honor(TM) Single Player (HKLM-x32\...\Steam App 47790) (Version:  - Electronic Arts)
Mediatek Bluetooth (HKLM\...\{66D292E3-6228-3AF1-EDED-6D53C63DBCB7}) (Version: 11.0.748.2 - Mediatek)
Microsoft Access MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft DCF MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Excel MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Groove MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Lync MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office 32-bit Components 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Office 32-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft OneNote MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Publisher MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{90ffcee5-8608-4e94-8c18-a4feb4f83fb8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Windows 8 ESU (HKLM-x32\...\{E7E058CF-4638-49D4-936D-AC6DAE3B002E}) (Version: 1.1.1 - Hewlett-Packard)
Microsoft Word MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Mighty Slots (HKLM-x32\...\{565493c1-3580-4f39-ba73-f4c375f5e9bd}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Migration System Updater RBP (HKLM-x32\...\Migration System Updater RBP) (Version: 1.2.0.0 - )
MiPony 2.1.0 (HKLM-x32\...\MiPony) (Version: 2.1.0 - )
Mirror's Edge (HKLM-x32\...\Steam App 17410) (Version:  - DICE)
Movie Maker (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Mozilla Firefox 26.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 26.0 (x86 de)) (Version: 26.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 26.0 - Mozilla)
MPC-HC 1.7.0 (HKLM-x32\...\{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1) (Version: 1.7.0.7858 - MPC-HC Team)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1108.0727 - Microsoft) Hidden
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
Mummys Gold Casino (HKLM-x32\...\mummysgold) (Version: 16.6.1.11212 - )
NetMeter 1.1.4 BETA (HKLM-x32\...\NetMeter_is1) (Version:  - ReadError)
NetSpeedMeter (HKLM-x32\...\NetSpeedMeter) (Version: 0.9 - )
NetWorx 5.2.11 (HKLM\...\NetWorx_is1) (Version:  - Softperfect Research)
Norton Internet Security (HKLM-x32\...\NIS) (Version: 21.3.0.12 - Symantec Corporation)
Notebook Hardware Control 2.0 Pre-Release-06 Bugfix (HKLM-x32\...\Notebook Hardware Control) (Version: 2.0 Pre-Release-06 Bugfix - Manfred Jaider)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.5 - Notepad++ Team)
NTREGOPT 1.1j (HKLM-x32\...\NTREGOPT_is1) (Version:  - Lars Hederer)
NVIDIA GeForce Experience 2.0.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.0.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 340.43 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.43 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.157.1165 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Optimus Update 12.4.67 (Version: 12.4.67 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA ShadowPlay 12.4.67 (Version: 12.4.67 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 340.43 (Version: 340.43 - NVIDIA Corporation) Hidden
NVIDIA Update 12.4.67 (Version: 12.4.67 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 12.4.67 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.23 (Version: 1.2.23 - NVIDIA Corporation) Hidden
OpenVPN 2.2.2 (HKLM-x32\...\OpenVPN) (Version: 2.2.2 - )
Opera Stable 20.0.1387.91 (HKLM-x32\...\Opera 20.0.1387.91) (Version: 20.0.1387.91 - Opera Software ASA)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Overwolf (HKLM-x32\...\{0A337036-B73E-4C85-8D32-3851F84B7CFE}) (Version: 0.46.271 - Overwolf)
Oxygen 2 Personal Edition Uninstall (HKLM-x32\...\Oxygen 2 Personal Edition) (Version:  - )
Pagealicious (HKLM-x32\...\Pagealicious) (Version:  - Pagealicious) <==== ATTENTION
Paint.NET v3.5.11 (HKLM\...\{72EF03F5-0507-4861-9A44-D99FD4C41418}) (Version: 3.61.0 - dotPDN LLC)
Palace Of Chance (HKLM-x32\...\{f51a5449-9174-4e90-a0b2-bd67e0a9a87e}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Paros 3.2.13 (HKLM-x32\...\Paros_is1) (Version:  - parosproxy.org)
PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version:  - OVERKILL - a Starbreeze Studio.)
PBO Manager v.1.4 beta (HKLM\...\{127B5371-1802-4EDD-A25A-A43BF761D383}) (Version: 1.4.0 -  )
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
PDF24 Creator 6.1.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
PhotoME Beta-Release (HKLM-x32\...\PhotoME Beta-Release_is1) (Version: 0.8ß2 - Jens Duttke)
Platinum Play Online (HKLM-x32\...\platinumplay) (Version: 16.9.2.739 - )
Plenty Jackpot (HKLM-x32\...\{f748bdcf-1691-49d4-b5a6-20abf8d9d2b9}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Plus500 (HKLM-x32\...\Plus500) (Version:  - )
PokerStars.eu (HKLM-x32\...\PokerStars.eu) (Version:  - PokerStars.eu)
PremiumSoft Navicat Data Modeler 1.0 (HKLM-x32\...\PremiumSoft Navicat Data Modeler_is1) (Version: 1.0.12 - PremiumSoft CyberTech Ltd.)
Process Lasso (HKLM-x32\...\ProcessLasso) (Version: 6.7.0.52 - Bitsum)
Project 64 version 2.1.0.1 (HKLM-x32\...\Project 64_is1) (Version: 2.1.0.1 - )
Protector Suite 2012 (HKLM\...\{C767056D-3CE2-442D-BC78-F05E94F450D0}) (Version: 5.9.8.7279 - Authentec Inc.)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Quatro Casino (HKLM-x32\...\quatro) (Version: 16.9.2.739 - )
Quick Memory Editor 5.5 (HKLM-x32\...\Quick Memory Editor_is1) (Version:  - softcows.com)
QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
Ralink RT3290 802.11bgn Wi-Fi Adapter (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 5.0.37.0 - Mediatek)
Real Vegas Online USD German (HKLM-x32\...\{fc52c158-f28f-477d-a59d-0ace8b0e212c}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.2.612.2012 - Realtek)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.2.8400.29034 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.49 - Piriform)
Registry System Wizard.NET (HKLM\...\{110ED870-1DF3-4574-A679-E2C4A8163211}_is1) (Version: 0.13.731.51 - WinFAQ)
RegRunner 3.2.2009.5 (HKLM-x32\...\RegRunner2009_is1) (Version:  - Bernd Dietzel)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Revo Uninstaller Pro 3.0.8 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.0.8 - VS Revo Group, Ltd.)
RoboForm 7-9-3-9 (All Users) (HKLM-x32\...\AI RoboForm) (Version: 7-9-3-9 - Siber Systems)
ROCCAT Kone Pure Mouse Driver (HKLM-x32\...\{4905245D-56E7-4176-BE68-962728B803D6}) (Version:  - Roccat GmbH)
ROCCAT Talk Driver (HKLM-x32\...\{0B2044E4-B4A7-4413-ABB1-99E04C7DF405}) (Version:  - Roccat GmbH)
Roulette Bot Plus (HKLM-x32\...\RBPlus) (Version: 1.3.8.4 - www.roulettebotplus.com)
RoulettePilot (HKLM-x32\...\{54AA4107-5A3C-4E97-893E-735D5127BB73}) (Version: 1.3.94 - JemeSoft)
Royal Vegas (HKLM-x32\...\royalvegas) (Version: 16.9.2.739 - )
RubySlots (HKLM-x32\...\{137b5d7d-6afe-4b69-be23-b2e949c20065}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Rust (HKLM-x32\...\Steam App 252490) (Version:  - Facepunch Studios)
Saints Row: The Third (HKLM-x32\...\Steam App 55230) (Version:  - Volition)
Secunia PSI (3.0.0.9016) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia)
Security Task Manager 1.8d (HKLM-x32\...\Security Task Manager) (Version: 1.8d - Neuber Software)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version:  - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (Version:  - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version:  - Microsoft) Hidden
SHIELD Streaming (Version: 2.1.108 - NVIDIA Corporation) Hidden
SiSoftware Sandra Lite 2014.RTM (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2396}_is1) (Version: 20.10.2014.2 - SiSoftware)
Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Slot Nuts (HKLM-x32\...\{4f250443-a5ef-43a3-984b-972bc15c69d9}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Slotocash Casino (HKLM-x32\...\{7d1d90b3-acd3-49de-9bce-079aef80ef9b}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Slots Inferno (HKLM-x32\...\{ef159e9a-ca8c-4e71-bf97-d1f4eec75004}) (Version: 13.1.0-RTG - RealTimeGaming Software)
SoftDMA (HKLM-x32\...\{AA4BF92B-2AAF-11DA-9D78-000129760D75}) (Version: 2.0.6729 - CyberLink Corp.)
Soluto (HKLM\...\{223FA2A7-10F3-4F74-900C-154C98F81687}) (Version: 1.3.1414.1 - Soluto)
Sophos Virus Removal Tool (HKLM-x32\...\{B829E117-D072-41EA-9606-9826A38D34C1}) (Version: 2.4 - Sophos Limited)
Sound Tools Uninstall (HKLM-x32\...\Sound Tools) (Version:  - )
SpeedBit Video Accelerator (HKLM-x32\...\SpeedBit Video Accelerator) (Version: 3380(build_3064) - SpeedBit Ltd.)
Spin Palace Casino (HKLM-x32\...\spinpalace) (Version: 16.8.3.393 - )
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
Steganos Privacy Suite 14 (HKLM-x32\...\{9F07D3B6-3801-4C33-B20E-39CC29E63253}) (Version: 14.2.1 - Steganos Software GmbH)
Studie zur Verbesserung von HP Deskjet 2050 J510 series Produkten (HKLM\...\{C559DE9F-9451-49E5-9176-316E36192409}) (Version: 28.0.1313.0 - Hewlett-Packard Co.)
Superior Casino (HKLM-x32\...\SuperiorCasino) (Version: 1.0 - Rival)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.15.0 - Synaptics Incorporated)
System Requirements Lab CYRI (HKLM-x32\...\{F3FCB08B-E752-444D-86A0-0634A4F3B23D}) (Version: 6.0.8.0 - Husdawg, LLC)
System Requirements Lab Detection (HKLM-x32\...\{A407FC22-36BF-4C82-A516-59D94BC505A9}) (Version: 1.0.5.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TexView 2 Uninstall (HKLM-x32\...\TexView 2) (Version:  - )
The Bridge  (HKLM-x32\...\Steam App 204240) (Version:  - Ty Taylor and Mario Castañeda)
Tiny Media Player v1.0 (HKLM-x32\...\Tiny Media Player_is1) (Version: 1.0.0.0 - ) <==== ATTENTION
Tom Clancy's Splinter Cell® Blacklist™ (HKLM-x32\...\{A6356F2F-D3E1-4D83-9AA2-72871DD0C298}) (Version: 1.03 - Ubisoft)
TrueCrypt (HKLM-x32\...\TrueCrypt) (Version: 7.1a - TrueCrypt Foundation)
Tweaking.com - Windows Repair (All in One) (HKLM-x32\...\Tweaking.com - Windows Repair (All in One)) (Version: 2.7.1 - Tweaking.com)
UDPixel.exe (HKLM-x32\...\UDPixel) (Version:  - )
UltraISO Premium V9.53 (HKLM-x32\...\UltraISO_is1) (Version:  - )
Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
Update for Microsoft Access 2010 (KB2553446) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{FEF4C57D-0975-4D3C-ACC7-DCD038C3788F}) (Version:  - Microsoft)
Update for Microsoft Excel 2010 (KB2837600) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{17815BC8-062D-49BE-B40C-B54149C85CE3}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2881085) 64-Bit Edition (HKLM\...\{90150000-0016-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{58D92858-3C94-4C2F-A8E4-AEFF9304C3CF}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2881085) 64-Bit Edition (HKLM\...\{90150000-0018-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{58D92858-3C94-4C2F-A8E4-AEFF9304C3CF}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2881085) 64-Bit Edition (HKLM\...\{90150000-001B-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{58D92858-3C94-4C2F-A8E4-AEFF9304C3CF}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2881085) 64-Bit Edition (HKLM\...\{90150000-00C1-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{58D92858-3C94-4C2F-A8E4-AEFF9304C3CF}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2881085) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{58D92858-3C94-4C2F-A8E4-AEFF9304C3CF}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{84B191B5-5319-463A-A305-8C4D53B1D20A}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{DB0B0CDF-77EC-47B0-94E2-4738573A1E58}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817396) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{1AA82E2E-7DB7-4C70-910C-BBB657A6B3A5}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2850074) 64-Bit Edition (HKLM\...\{90150000-012B-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{CE9A9D7C-B6FB-4F6C-8BDE-9A1ADBBAC1EE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553092) (HKLM\...\{90140000-0044-0407-1000-0000000FF1CE}_Office14.PROPLUSR_{E636FE63-842B-4F4B-9884-DA189ACC0B91}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553092) (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{E636FE63-842B-4F4B-9884-DA189ACC0B91}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{79C725A1-3964-421C-A528-78C1C083C7C7}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{95BE5D45-A3DD-4CB1-8C35-D75DD7B4D862}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{95BE5D45-A3DD-4CB1-8C35-D75DD7B4D862}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{EBD18DE5-BC84-4B57-9A30-097044871F9A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{4AD36582-256B-433D-8593-F31773A15CA4}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{4AD36582-256B-433D-8593-F31773A15CA4}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{F216169C-2B40-429B-8370-B5BA06EC5423}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{F216169C-2B40-429B-8370-B5BA06EC5423}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{B6AD7E27-012A-4B63-82BA-AF62893E5435}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{07DC9C6C-E916-4F42-8677-716930ED0393}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825635) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{6E760BBA-B83F-4C2D-918F-5F91EF6C9861}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 64-Bit Edition (HKLM\...\{90140000-0044-0407-1000-0000000FF1CE}_Office14.PROPLUSR_{43F59F4D-7179-497E-BE99-BC6F7D1DDCBA}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{43F59F4D-7179-497E-BE99-BC6F7D1DDCBA}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2837581) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{D1F3B526-7EB2-4701-92DB-0784988D78DE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2837606) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{52BEF8AE-9324-40A1-9A92-E5A8FB63A475}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878252) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{56551B9F-2FE1-4705-ACF0-8FA920535E18}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878252) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{56551B9F-2FE1-4705-ACF0-8FA920535E18}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 64-Bit Edition (HKLM\...\{90140000-001F-0407-1000-0000000FF1CE}_Office14.PROPLUSR_{8F699D53-05FB-488E-B7D3-E4E47257BE5D}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 64-Bit Edition (HKLM\...\{90140000-001F-0409-1000-0000000FF1CE}_Office14.PROPLUSR_{324703B5-6765-489D-9B9B-B082D34F882E}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 64-Bit Edition (HKLM\...\{90140000-001F-040C-1000-0000000FF1CE}_Office14.PROPLUSR_{4B9B2BAF-EE1F-4B60-A4D9-17B7BEEB13A1}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760344) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{EF77B4A6-DFEC-4010-A87D-9B6BF87FABEC}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760544) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{62857CDD-2985-4939-91BA-19ED0B0031A5}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2768012) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{0814662C-FD28-4DE0-ACE5-EE50D1D6C8FB}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817302) 64-Bit Edition (HKLM\...\{90150000-0016-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{E79EFFDB-192A-4D9E-A2DB-C0F774E6EC32}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817302) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{E79EFFDB-192A-4D9E-A2DB-C0F774E6EC32}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2826040) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{C4AEA56A-0759-4D08-9FAB-31A92137D0B8}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2837644) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D692E9FF-84BF-4F44-A0EA-D58ECE0D538E}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2863843) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{290D80DE-03AB-47EC-9402-108AF4CE4F66}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880457) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{EC2AF602-2730-4B05-9438-06CDE43153F2}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-006E-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880464) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{88B29AA5-71EE-4692-91E2-E89407F0B783}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880478) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{8116ED50-F1E7-49E1-9D8D-421497D34B0F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881035) 64-Bit Edition (HKLM\...\{90150000-0016-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{885C981B-F1E3-430A-A099-31CA9D28C251}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881035) 64-Bit Edition (HKLM\...\{90150000-0090-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{885C981B-F1E3-430A-A099-31CA9D28C251}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881035) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{885C981B-F1E3-430A-A099-31CA9D28C251}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881074) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{9A479F9C-C1EC-4833-A115-A8B7A60480BD}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881084) 64-Bit Edition (HKLM\...\{90150000-001F-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{00BBBFFE-8889-4953-956A-77DDE975A947}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881084) 64-Bit Edition (HKLM\...\{90150000-001F-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{3A12DFA2-3FF5-450E-BDB1-A742551A5D1A}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881084) 64-Bit Edition (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}_Office15.PROPLUSR_{EA8072E8-E3CF-46DF-A5DE-9F5975344327}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881084) 64-Bit Edition (HKLM\...\{90150000-001F-0410-1000-0000000FF1CE}_Office15.PROPLUSR_{BF0D921F-E77E-4E03-BE71-46D9D2C7A36A}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881086) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{ED3A8E98-FDD4-493F-A0EC-141821573EC2}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881086) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{ED3A8E98-FDD4-493F-A0EC-141821573EC2}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2881087) 64-Bit Edition (HKLM\...\{90150000-00BA-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{3C6F4768-FB23-4ECF-8328-5C47E0664B65}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2881087) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{3C6F4768-FB23-4ECF-8328-5C47E0664B65}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2881087) 64-Bit Edition (HKLM\...\{90150000-00C1-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{3C6F4768-FB23-4ECF-8328-5C47E0664B65}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2881087) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{3C6F4768-FB23-4ECF-8328-5C47E0664B65}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{3029C408-1DD1-4273-8E58-87CB1B638FC8}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{3029C408-1DD1-4273-8E58-87CB1B638FC8}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2881082) 64-Bit Edition (HKLM\...\{90150000-00A1-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{BFD66A5D-F608-441E-9282-41E13F5E7412}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2881082) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{BFD66A5D-F608-441E-9282-41E13F5E7412}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2881082) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{BFD66A5D-F608-441E-9282-41E13F5E7412}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 64-Bit Edition (HKLM\...\{90140000-001A-0407-1000-0000000FF1CE}_Office14.PROPLUSR_{6164E0E5-C903-488C-93AF-1B7AF7EBC331}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{DDDC32A5-9528-4771-B91A-97A8E1D7957B}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2880470) 64-Bit Edition (HKLM\...\{90150000-001A-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{34A169EC-990A-4DAE-AC65-9F981158B7DB}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2880470) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{34A169EC-990A-4DAE-AC65-9F981158B7DB}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 64-Bit Edition (HKLM\...\{90140000-0018-0407-1000-0000000FF1CE}_Office14.PROPLUSR_{FD360122-6829-4497-97C1-1BF578EF695B}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{A20A650C-F820-4CE4-AEA5-EC140192FAFB}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2881075) 64-Bit Edition (HKLM\...\{90150000-0018-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{C8955821-EDAC-4E65-BEF3-C9C0A049517A}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2881075) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{C8955821-EDAC-4E65-BEF3-C9C0A049517A}) (Version:  - Microsoft)
Update for Microsoft Publisher 2013 (KB2880999) 64-Bit Edition (HKLM\...\{90150000-0019-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{C07147B9-CC0B-4CC1-A107-A705889A54F2}) (Version:  - Microsoft)
Update for Microsoft Publisher 2013 (KB2880999) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{C07147B9-CC0B-4CC1-A107-A705889A54F2}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{77374F16-2DC6-4EEF-AFAD-C59FDA2E010D}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{77374F16-2DC6-4EEF-AFAD-C59FDA2E010D}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2880526) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{F6F342A1-530B-4D48-A468-1E3F70928984}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2837587) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{C950A55F-82E3-4CC8-8FA2-E8A2A0F651F3}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition (HKLM\...\{90150000-006E-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}) (Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2880529) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{89FDC8D9-FB84-4EFE-950D-AF4EECC3B64C}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2878319) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{BC51FE30-3A56-4802-8D9E-E9BC05B56B49}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2881005) 64-Bit Edition (HKLM\...\{90150000-001A-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{125BAFEC-EB26-45C3-B97A-475162C6BDC0}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2881005) 64-Bit Edition (HKLM\...\{90150000-001B-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{125BAFEC-EB26-45C3-B97A-475162C6BDC0}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2881005) 64-Bit Edition (HKLM\...\{90150000-012B-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{125BAFEC-EB26-45C3-B97A-475162C6BDC0}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2881005) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{125BAFEC-EB26-45C3-B97A-475162C6BDC0}) (Version:  - Microsoft)
Uplay (HKLM-x32\...\Uplay) (Version: 4.5 - Ubisoft)
URL2JPEG 1.1 (HKLM-x32\...\URL2JPEG_is1) (Version:  - )
Usenet.nl (HKLM-x32\...\Usenet.nl_is1) (Version:  - )
UxStyle Core Beta (HKLM\...\{8E363055-15E5-4D8A-9C69-A0A9DE9A3337}) (Version: 0.2.2.0 - The Within Network, LLC)
Validity WBF DDK (HKLM\...\{1F91C200-8F0F-4009-A75E-DB6CE151BD4E}) (Version: 4.4.234.0 - Validity Sensors, Inc.)
Virtual City Casino (HKLM-x32\...\virtualcity) (Version: 16.9.2.739 - )
Visitor 3 Uninstall (HKLM-x32\...\Visitor 3) (Version:  - )
VLC media player 2.1.2 (HKLM-x32\...\VLC media player) (Version: 2.1.2 - VideoLAN)
VPNAutoconnect (HKLM-x32\...\{8E557F21-99AE-440D-8058-CD8CB3302E13}) (Version: 1.15 - globalip)
Watch_Dogs (HKLM-x32\...\Uplay Install 274) (Version:  - Ubisoft)
Windows Live Communications Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3503.0728 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
WinRAR 5.00 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)
WinSCP 5.5 (HKLM-x32\...\winscp3_is1) (Version: 5.5 - Martin Prikryl)
WinZip Driver Updater (HKLM-x32\...\{9854A5C4-5BE5-46E2-A989-352DD8B37E20}_is1) (Version: 1.0.648.10744 - WinZip Computing, S.L. (WinZip Computing))
Wise Registry Cleaner 7.92 (HKLM-x32\...\Wise Registry Cleaner_is1) (Version: 7.92 - WiseCleaner.com, Inc.)
WorldPainter 1.5.0 (HKLM\...\4144-4862-0472-7103) (Version: 1.5.0 - pepsoft.org)
Your Software Deals 1.0.0 (HKLM-x32\...\Your Software Deals_is1) (Version: 1.0.0 - Ashampoo GmbH & Co. KG)
Yukon Gold (HKLM-x32\...\yukongold) (Version: 16.10.1.1475 - )

==================== Restore Points  =========================

09-07-2014 11:11:28 Windows Update

==================== Hosts content: ==========================

2014-05-25 15:54 - 2014-05-25 15:54 - 00000855 ____N C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {0FA1A03F-0DF5-49C5-892C-3504BCAED217} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\WSCStub.exe [2014-05-11] (Symantec Corporation)
Task: {12CB99FC-B5A5-4EFA-9D7A-824A5E62A21E} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
Task: {13D6BEC2-4F49-413C-A6B8-0344D2432715} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2013-11-20] (Apple Inc.)
Task: {1C9F59DA-654B-4894-BDA2-6E4EDECEAF12} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-10-22] (Piriform Ltd)
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {23AC52F5-8580-45CB-B1E0-7191BCFBA116} - System32\Tasks\Core Temp Autostart Marcel- => C:\Program Files\Core Temp\Core Temp.exe [2013-03-01] ()
Task: {23D857CA-BF22-4A04-AA4A-DA2240EE4878} - System32\Tasks\AutoKMSCustom => C:\Windows\AutoKMS\AutoKMS.exe
Task: {2640F111-D57D-42F8-8A11-60853CD1387C} - System32\Tasks\KMS Activation => C:\Program Files\KMSpico\RandomFile.exe [2013-02-20] ()
Task: {27C6C059-8CCA-4C8D-960F-9E2734268940} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {32618FFD-E0B0-4B98-9C85-AA0481A1A951} - System32\Tasks\MigrationUpdateTask => C:\Users\Marcel-\AppData\Local\MigsUpdater\mupdater.exe [2013-05-05] ()
Task: {336BAB55-2DA1-4780-AD94-2E086438F6C9} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {3E11A519-2A26-40FA-BA5F-D2E50B305A06} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {4D9D0384-E8FD-4892-87F4-19AA55AB2CAC} - System32\Tasks\Hewlett-Packard\HP CoolSense\HP CoolSense Start at Logon => C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [2013-06-07] (Hewlett-Packard Development Company, L.P.)
Task: {506831CD-00D1-4F67-845E-84E44C1B9507} - System32\Tasks\CLMLSvc_P2G8 => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2012-06-08] (CyberLink)
Task: {50C3F803-BD50-4C53-A15F-090E62B8A9AA} - System32\Tasks\HPCustParticipation HP Deskjet 2050 J510 series => C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\HPCustPartic.exe [2012-10-02] (Hewlett-Packard Co.)
Task: {55092CAC-D12E-4296-AAA0-1685B33362E5} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
Task: {553F743B-82E6-4BA0-BAF9-B5BFD58949FB} - \FreeDriverScout No Task File <==== ATTENTION
Task: {58989ABF-57C3-407B-8C81-1BCA9416732E} - \Browser Updater\Browser Updater No Task File <==== ATTENTION
Task: {5D33FF06-1668-492B-9171-2630C1FB1D35} - System32\Tasks\WinZipDriverUpdaterRunAtStartup => C:\Program Files (x86)\WinZip Driver Updater\winzipdu.exe [2011-06-03] (WinZip Computing, S.L. (WinZip Computing))
Task: {62DB234A-C438-4711-9F08-D65079BAAD5E} - \Lyrics Seeker Update No Task File <==== ATTENTION
Task: {64470945-96F4-4918-B67A-39204842F0A3} - System32\Tasks\CLVDLauncher => C:\Program Files (x86)\CyberLink\Power2Go8\CLVDLauncher.exe [2012-07-24] (CyberLink Corp.)
Task: {69455FB1-79D7-4B3C-B9B8-CE09B65512EA} - System32\Tasks\Run RoboForm TaskBar Icon => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2014-02-05] (Siber Systems)
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6C22B245-996E-4330-9B02-9294EC214DC6} - System32\Tasks\Process Lasso Management Console (GUI) => C:\Program Files\Process Lasso\processlasso.exe [2014-03-22] (Bitsum LLC)
Task: {6C4FF4F7-7C6C-4D22-BE63-591EC71E8A9C} - System32\Tasks\Open URL by RoboForm => Rundll32.exe url.dll,FileProtocolHandler "hxxp://www.roboform.com/test-pass.html?aaa=KICMLMLMHMOJPMLMKJGMCNNMKMNMKJCNLMOJLJOJCNGMPMLJGMCNLJPMLMOJHMNJGMJMMMJJLMHMJNJICMIMCNGMCNMMFMOMOMCNPMCNGMJMPMPMFMJMCNMMCNGMJMPMPMCNNMJNPICMLMFMHJOJCJCJGJFMPMJNHICMHJOJCJCJGJJNBJCMCLOJNIMJKJDJCNJNKJCMJNNICMJNDJCMLJKJJNMJCMPMFMOMFMPMJNFICMGJLJKJBJLIGJLIGJKJMIBNKJHIKJ"
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {741886BD-A31B-4091-AF14-70C0DD619152} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {7503F03F-6AC7-4A5D-8E43-8EFB1FE33FF9} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-07-09] (Microsoft Corporation)
Task: {75AB702E-FF88-4FF3-BDBD-89E0DA4B89CD} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {7F99F21B-9CA0-44DA-A60F-0A42F66D3E2E} - System32\Tasks\One-Click Optimizer => C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\WO10.exe [2013-11-19] (Ashampoo Development GmbH & Co. KG)
Task: {80B08F8E-9E69-4435-9AB2-D00F3081010B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {884D20A1-5739-4D17-82C0-B9407FB84AC2} - \Omiga Plus RunAsStdUser No Task File <==== ATTENTION
Task: {89AF243C-674B-49E5-8FEB-7A1547E0ACB9} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2013-03-07] (Intel Corporation)
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {912AB2C4-9240-4E65-892E-3AE1E1D60256} - \YourFile DownloaderUpdate No Task File <==== ATTENTION
Task: {9879667E-2B99-4069-8709-DA19907B3463} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2014-03-21] (Hewlett-Packard)
Task: {9978D875-53BE-4C87-A596-8CDE007A76A4} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-11] (Adobe Systems Incorporated)
Task: {9A9B703E-AD6C-4335-91D0-660F961398FB} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {9B907E53-51D1-4E4F-809D-D2094FC5D372} - \Software Updater No Task File <==== ATTENTION
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {A2774BCD-5537-46DA-98BB-BF76F2A18DE5} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {A346AA6B-B7C6-4E1D-B7E3-02F66B64E5D2} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe <==== ATTENTION
Task: {A447104A-8E57-4418-9C8B-3853E8C89E0E} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
Task: {A5153CAB-0552-427D-A033-D4FB35AD5BEF} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {A5FFB92D-D594-4D26-B41D-C65468A63103} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv
Task: {A667E848-CDDC-45C1-91E7-3EE8ABE28ABD} - System32\Tasks\Razer_Game_Booster_AutoUpdate => C:\Program Files (x86)\Razer\Razer Game Booster\AutoUpdate.exe <==== ATTENTION
Task: {AB99FD7F-9DA6-43A0-94D3-964EEAAC5758} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload
Task: {AED82269-BCBE-4230-ABEC-7D94F4B95C01} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {B04E2456-58BD-4751-9645-1D5608E10979} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {B63F6A1A-4549-4E57-9632-A39E9D6EC4DB} - \GoforFilesUpdate No Task File <==== ATTENTION
Task: {BBFC3058-BE71-456C-B94E-AF8A23DF32C9} - \BitGuard No Task File <==== ATTENTION
Task: {C3B1819F-758B-4347-A8A8-FD74D9E6F68C} - \SomotoUpdateCheckerAutoStart No Task File <==== ATTENTION
Task: {C781B977-6657-422A-A232-B58EF18964F3} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis Install => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {C80AF85D-0DE5-4AE3-899B-B8916253ACB9} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-02-22] (Microsoft Corporation)
Task: {CA8BA137-AF1E-40C5-AC3A-C112C0F486D1} - System32\Tasks\AdobeAAMUpdater-1.0-Marcel-Marcel- => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-12-15] (Adobe Systems Incorporated)
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {DCF83D36-1162-4AFA-9ED0-AA3BA1001799} - System32\Tasks\bettermarkit_wd => C:\Program Files (x86)\bettermarkit\BetterMarkIt_wd.exe <==== ATTENTION
Task: {DFC64FB6-105F-4B5E-A251-F03421F42FD8} - System32\Tasks\Process Lasso Core Engine Only => C:\Program Files\Process Lasso\processgovernor.exe [2014-03-22] (Bitsum LLC)
Task: {E38542F9-3B46-480C-A33C-E5CC9166002A} - \Desk 365 RunAsStdUser No Task File <==== ATTENTION
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {E85048F2-499A-4739-B946-CAFCBF74F9A5} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {E87BAC48-E898-445E-A579-7BF2C0FBCDF7} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2013-03-07] (Intel Corporation)
Task: {EA4A368E-47ED-4F4A-8E6E-B53BE571D24D} - \preispilotSWU No Task File <==== ATTENTION
Task: {F05A359A-94F3-487A-9D2F-E2396354886A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {FCBD29E0-A339-4238-8176-42BBE985A43F} - \Software Updater Ui No Task File <==== ATTENTION
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\AutoKMSCustom.job => C:\Windows\AutoKMS\AutoKMS.exe
Task: C:\WINDOWS\Tasks\bettermarkit_wd.job => C:\Program Files (x86)\bettermarkit\BetterMarkIt_wd.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

==================== Loaded Modules (whitelisted) =============

2013-11-24 16:52 - 2014-06-13 04:11 - 00118728 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2013-09-05 01:17 - 2013-09-05 01:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2012-06-28 20:21 - 2012-06-28 20:21 - 00019456 _____ () C:\Program Files\PBO Manager v.1.4 beta\PboShellExt.dll
2013-11-17 14:18 - 2013-12-29 15:50 - 00076888 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe
2013-06-07 05:16 - 2013-06-07 05:16 - 04073768 _____ () C:\Program Files (x86)\HP SimplePass\IEWebSiteLogon.exe
2013-10-04 00:42 - 2013-10-04 00:42 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-02-24 20:07 - 2011-02-24 20:07 - 00470120 _____ () C:\Program Files (x86)\Acronis\DriveMonitor\adm_tray.exe
2013-01-10 14:38 - 2013-01-10 14:38 - 00124728 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPItunesModule.dll
2013-01-10 14:38 - 2013-01-10 14:38 - 00051512 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPItunesProxy.dll
2013-01-10 14:38 - 2013-01-10 14:38 - 00018432 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\PowerDVD.dll
2013-12-01 22:35 - 2013-12-01 22:35 - 01102336 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\System.Data.SQLite.dll
2013-01-10 14:37 - 2013-01-10 14:37 - 00180224 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\zxing.dll
2014-05-06 12:16 - 2014-05-06 12:16 - 00124728 _____ () C:\Users\Administrator\AppData\Local\assembly\dl3\MJZDWRBC.9QP\LM6HZG0W.COB\4f8ed896\00041553_2fefcd01\HPItunesModule.DLL
2014-05-06 12:16 - 2014-05-06 12:16 - 00018432 _____ () C:\Users\Administrator\AppData\Local\assembly\dl3\MJZDWRBC.9QP\LM6HZG0W.COB\cd4e248e\00041553_2fefcd01\PowerDVD.DLL
2014-07-10 22:31 - 2014-07-10 22:31 - 00380416 _____ () C:\Users\Administrator\Downloads\Gmer-19357.exe
2014-02-28 11:14 - 2014-02-28 11:14 - 00173568 _____ () C:\Program Files\TeamSpeak 3 Clientnew\quazip.dll
2014-02-27 16:51 - 2014-02-27 16:51 - 01080832 _____ () C:\Program Files\TeamSpeak 3 Clientnew\platforms\qwindows.dll
2014-02-27 16:51 - 2014-02-27 16:51 - 00833024 _____ () C:\Program Files\TeamSpeak 3 Clientnew\sqldrivers\qsqlite.dll
2014-02-28 15:07 - 2014-02-28 15:07 - 00102344 _____ () C:\Program Files\TeamSpeak 3 Clientnew\soundbackends\directsound_win64.dll
2014-02-28 15:07 - 2014-02-28 15:07 - 00108488 _____ () C:\Program Files\TeamSpeak 3 Clientnew\soundbackends\windowsaudiosession_win64.dll
2014-02-27 16:51 - 2014-02-27 16:51 - 00030208 _____ () C:\Program Files\TeamSpeak 3 Clientnew\imageformats\qgif.dll
2014-02-27 16:51 - 2014-02-27 16:51 - 00233984 _____ () C:\Program Files\TeamSpeak 3 Clientnew\imageformats\qjpeg.dll
2014-02-28 15:10 - 2014-02-28 15:10 - 00563656 _____ () C:\Program Files\TeamSpeak 3 Clientnew\plugins\clientquery_plugin.dll
2014-02-28 15:10 - 2014-02-28 15:10 - 00577480 _____ () C:\Program Files\TeamSpeak 3 Clientnew\plugins\teamspeak_control_plugin.dll
2014-02-27 16:51 - 2014-02-27 16:51 - 00159232 _____ () C:\Program Files\TeamSpeak 3 Clientnew\accessible\qtaccessiblewidgets.dll
2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2009-08-23 19:58 - 2009-08-23 19:58 - 00094208 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2013-06-07 05:16 - 2013-06-07 05:16 - 00019240 _____ () C:\Program Files (x86)\HP SimplePass\DownloadManager.dll
2014-01-10 23:50 - 2013-12-23 20:59 - 00376608 _____ () C:\Program Files (x86)\Connectify\NativeLibrary.dll
2014-01-10 23:50 - 2013-12-23 20:59 - 03170080 _____ () C:\Program Files (x86)\Connectify\ConnectifyNAT.dll
2014-01-10 23:50 - 2013-12-23 20:59 - 00714016 _____ () C:\Program Files (x86)\Connectify\log4cplus.dll
2014-01-10 23:50 - 2013-12-23 20:59 - 00354080 _____ () C:\Program Files (x86)\Connectify\LibDispatch.dll
2013-07-30 20:45 - 2012-06-08 05:34 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2012-06-08 11:34 - 2012-06-08 11:34 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
2011-02-24 19:39 - 2011-02-24 19:39 - 00012128 _____ () C:\Program Files (x86)\Common Files\Acronis\DriveMonitor\Common\icudt38.dll
2013-12-26 13:06 - 2013-07-29 15:19 - 00369000 _____ () C:\Program Files (x86)\CyberLink\SoftDMA\Kernel\DMR\CLNetMediaDMA.dll
2013-08-16 18:40 - 2013-05-09 04:23 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2014-06-11 14:51 - 2014-06-05 15:58 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\libglesv2.dll
2014-06-11 14:51 - 2014-06-05 15:58 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\libegl.dll
2014-06-11 14:51 - 2014-06-05 15:58 - 04217672 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\pdf.dll
2014-06-11 14:51 - 2014-06-05 15:58 - 00414536 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll
2014-06-11 14:51 - 2014-06-05 15:58 - 01732424 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ffmpegsumo.dll
2014-07-04 11:51 - 2014-05-31 03:27 - 01116672 _____ () C:\Program Files (x86)\Steam\libavcodec-55.dll
2014-07-04 11:51 - 2014-05-31 03:27 - 00399360 _____ () C:\Program Files (x86)\Steam\libavformat-55.dll
2014-07-04 11:51 - 2014-05-31 03:27 - 00331264 _____ () C:\Program Files (x86)\Steam\libavresample-1.dll
2014-07-04 11:51 - 2014-05-31 03:27 - 00438784 _____ () C:\Program Files (x86)\Steam\libavutil-53.dll
2014-07-04 11:52 - 2014-06-27 00:40 - 00764416 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2014-07-11 12:19 - 2014-07-10 20:21 - 02139328 _____ () C:\Program Files (x86)\Steam\video.dll
2014-07-04 11:51 - 2014-04-29 02:37 - 00519168 _____ () C:\Program Files (x86)\Steam\libswscale-2.dll
2014-07-11 12:19 - 2014-07-10 20:21 - 01116864 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2014-07-04 11:51 - 2014-05-02 01:35 - 20628160 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2014-07-04 11:51 - 2013-06-15 01:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll
2014-07-04 11:51 - 2013-06-15 01:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll
2014-07-04 11:51 - 2013-06-15 01:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll
2014-06-11 14:51 - 2014-06-05 15:58 - 14612296 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"

==================== EXE Association (whitelisted) =============


==================== MSCONFIG/TASK MANAGER disabled items =========

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: BEService => 3
MSCONFIG\Services: EBOOSTRSVC => 2
MSCONFIG\Services: lansweeperservice => 2
MSCONFIG\Services: LavasoftAdAwareService11 => 2
MSCONFIG\Services: SBUpd => 2
MSCONFIG\Services: SolutoLauncherService => 2
MSCONFIG\Services: SolutoRemoteService => 3
MSCONFIG\Services: SolutoService => 2
MSCONFIG\Services: valWBFPolicyService => 2
MSCONFIG\Services: VideoAcceleratorService => 2
MSCONFIG\startupreg: DAEMON Tools Lite => "c:\program files (x86)\daemon tools lite\dtlite.exe" -autorun
MSCONFIG\startupreg: iTunesHelper => "c:\program files (x86)\itunes\ituneshelper.exe"
MSCONFIG\startupreg: LogMeIn Hamachi Ui => 
MSCONFIG\startupreg: Steam => "c:\program files (x86)\steam\steam.exe" -silent
HKLM\...\StartupApproved\StartupFolder: => "GrFinger Desktop Identity.lnk"
HKLM\...\StartupApproved\StartupFolder: => "Secunia PSI Tray.lnk"
HKLM\...\StartupApproved\Run: => "BCSSync"
HKLM\...\StartupApproved\Run: => "Launch LCore"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "AdAwareTray"
HKLM\...\StartupApproved\Run32: => "RemoteControl10"
HKLM\...\StartupApproved\Run32: => "BlueStacks Agent"
HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui"
HKLM\...\StartupApproved\Run32: => "AdobeCS6ServiceManager"
HKLM\...\StartupApproved\Run32: => "SwitchBoard"
HKLM\...\StartupApproved\Run32: => "IObit Malware Fighter"
HKLM\...\StartupApproved\Run32: => "WsmUpdater"
HKCU\...\StartupApproved\Run: => "C:\Program Files (x86)\NetMeter\NetMeter.exe"

==================== Faulty Device Manager Devices =============

Name: HP Truevision HD
Description: USB-Videogerät
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: Microsoft
Service: usbvideo
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Fake Webcam
Description: Fake Webcam
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Web Solution Mart
Service: fwdrv
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (07/11/2014 00:21:35 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418154

Error: (07/11/2014 00:17:53 PM) (Source: XTUService) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
   bei IronCity.Core.Server.CoreServer.Start()
   bei XtuService.XtuService1.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (07/11/2014 00:16:03 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: IAStorDataMgrSvc.exe, Version: 11.5.9.1002, Zeitstempel: 0x5065e128
Name des fehlerhaften Moduls: IAStorUtil.ni.dll, Version: 11.5.9.1002, Zeitstempel: 0x5065e124
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002f3fd
ID des fehlerhaften Prozesses: 0x1698
Startzeit der fehlerhaften Anwendung: 0xIAStorDataMgrSvc.exe0
Pfad der fehlerhaften Anwendung: IAStorDataMgrSvc.exe1
Pfad des fehlerhaften Moduls: IAStorDataMgrSvc.exe2
Berichtskennung: IAStorDataMgrSvc.exe3
Vollständiger Name des fehlerhaften Pakets: IAStorDataMgrSvc.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: IAStorDataMgrSvc.exe5

Error: (07/11/2014 00:15:57 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: IAStorDataMgrSvc.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.NullReferenceException
Stapel:
   bei IAStorUtil.SystemDataModelListener.ProcessSystemDataModelChanges()
   bei IAStorUtil.SystemDataModelListener.LoadSavedSystemState()
   bei IAStorDataMgr.EventRelay.<Start>b__0(System.Object)
   bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   bei System.Threading.ThreadPoolWorkQueue.Dispatch()
   bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (07/11/2014 02:00:59 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 188343

Error: (07/11/2014 02:00:59 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/11/2014 02:00:58 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 187140

Error: (07/11/2014 02:00:58 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 187140

Error: (07/11/2014 02:00:58 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/11/2014 02:00:57 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 185937


System errors:
=============
Error: (07/11/2014 01:01:06 PM) (Source: DCOM) (EventID: 10010) (User: Marcel)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (07/11/2014 01:00:36 PM) (Source: DCOM) (EventID: 10010) (User: Marcel)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (07/11/2014 00:51:44 PM) (Source: DCOM) (EventID: 10010) (User: Marcel)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (07/11/2014 00:51:14 PM) (Source: DCOM) (EventID: 10010) (User: Marcel)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (07/11/2014 00:19:57 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Rapid Storage-Technologie" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (07/11/2014 00:15:37 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Dateiversionsverlauf-Dienst" wurde nicht richtig gestartet.

Error: (07/11/2014 00:13:51 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{1FBFFE96-8B39-4350-9283-7908E8EE162E}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (07/11/2014 00:11:02 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "BlueStacks Android Service" ist vom Dienst "BlueStacks Hypervisor" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%2

Error: (07/11/2014 00:10:43 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "MBAMService" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (07/11/2014 00:10:43 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "MBAMScheduler" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2


Microsoft Office Sessions:
=========================
Error: (07/11/2014 00:21:35 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418154

Error: (07/11/2014 00:17:53 PM) (Source: XTUService) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
   bei IronCity.Core.Server.CoreServer.Start()
   bei XtuService.XtuService1.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (07/11/2014 00:16:03 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: IAStorDataMgrSvc.exe11.5.9.10025065e128IAStorUtil.ni.dll11.5.9.10025065e124c00000050002f3fd169801cf9cf11205ac80C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exeC:\WINDOWS\assembly\NativeImages_v4.0.30319_32\IAStorUtil\d1bcba4535bd6be21398119cbec8d64e\IAStorUtil.ni.dll5c4a112e-08e4-11e4-bf67-f4b7e256f89e

Error: (07/11/2014 00:15:57 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: IAStorDataMgrSvc.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.NullReferenceException
Stapel:
   bei IAStorUtil.SystemDataModelListener.ProcessSystemDataModelChanges()
   bei IAStorUtil.SystemDataModelListener.LoadSavedSystemState()
   bei IAStorDataMgr.EventRelay.<Start>b__0(System.Object)
   bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   bei System.Threading.ThreadPoolWorkQueue.Dispatch()
   bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (07/11/2014 02:00:59 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 188343

Error: (07/11/2014 02:00:59 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/11/2014 02:00:58 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 187140

Error: (07/11/2014 02:00:58 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 187140

Error: (07/11/2014 02:00:58 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/11/2014 02:00:57 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 185937


CodeIntegrity Errors:
===================================
  Date: 2013-12-26 22:30:21.833
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:30:16.427
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:30:14.982
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:30:06.419
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:17:07.949
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:17:05.109
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:17:05.094
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:17:05.094
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:17:05.078
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:17:04.578
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info =========================== 

Percentage of memory in use: 26%
Total physical RAM: 16273.27 MB
Available physical RAM: 11880.16 MB
Total Pagefile: 65425.27 MB
Available Pagefile: 61080.59 MB
Total Virtual: 131072 MB
Available Virtual: 131071.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:912.59 GB) (Free:306.04 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (RECOVERY) (Fixed) (Total:17.8 GB) (Free:16.84 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (DLAN-500AV-WRLP) (CDROM) (Total:0.11 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: A50E1C7D)

Partition: GPT Partition Type.

==================== End Of Log ============================
         

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

ProxyServer: http=127.0.0.1:13828
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Adware & Co. deinstallieren

• Lade Dir bitte von hier Revo Uninstaller herunter.
• Installiere und starte das Programm.
• Suche im Uninstallerfeld nach den Programmen, die unter:
  
  diesen Zusatz haben:
  
• Wähle die Programme nacheinander aus und klicke jedesmal auf Uninstall.
• Wähle anschließend den Modus "Moderat" aus.
  
• Reste löschen:
  Klicke auf dann auf und dann auf .

Solltest Du ein Programm nicht finden oder nicht deinstallieren können, mache bitte mit dem nächsten Schritt weiter:




Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

ADWCleaner -

# AdwCleaner v3.215 - Bericht erstellt am 13/07/2014 um 11:52:06
# Aktualisiert 09/07/2014 von Xplode
# Betriebssystem : Windows 8.1  (64 bits)
# Benutzername : Administrator - MARCEL
# Gestartet von : C:\Users\Administrator\Downloads\adwcleaner_3.215.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Users\Administrator\AppData\Local\Temp\OCS
Ordner Gelöscht : C:\Users\Marcel-\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp
Datei Gelöscht : C:\WINDOWS\System32\Tasks\Browser Updater

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\OCS

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17126


-\\ Mozilla Firefox v26.0 (de)

[ Datei : C:\Users\Marcel-\AppData\Roaming\Mozilla\Firefox\Profiles\ib40vd22.default\prefs.js ]


-\\ Google Chrome v35.0.1916.153

[ Datei : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ Datei : C:\Users\Marcel-\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R7].txt - [1606 octets] - [12/07/2014 11:40:21]
AdwCleaner[S4].txt - [1481 octets] - [13/07/2014 11:52:06]

########## EOF - C:\AdwCleaner\AdwCleaner[S4].txt - [1541 octets] ##########
         

JRT -

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 8.1 x64
Ran by Administrator on 12.07.2014 at 12:08:18,91
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 12.07.2014 at 12:16:14,99
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

Fixlog -

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 10-07-2014
Ran by Administrator at 2014-07-12 11:13:33 Run:1
Running from C:\Users\Administrator\Downloads
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
ProxyServer: http=127.0.0.1:13828
*****************

HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value deleted successfully.

==== End of Fixlog ====
         

Mbam -

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 12.07.2014
Suchlauf-Zeit: 11:32:05
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.07.12.01
Rootkit Datenbank: v2014.07.09.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 8.1
CPU: x64
Dateisystem: NTFS
Benutzer: Administrator

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 439236
Verstrichene Zeit: 33 Min, 30 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 19
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{60C07B56-542E-4054-A503-4E9E08DF2F84}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b], 
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{DB404724-1080-40D5-9E8E-B641E8069BAF}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b], 
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{D3032E47-FCC2-4511-9871-987F89486A7D}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b], 
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{D3032E47-FCC2-4511-9871-987F89486A7D}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b], 
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{DB404724-1080-40D5-9E8E-B641E8069BAF}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b], 
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{60C07B56-542E-4054-A503-4E9E08DF2F84}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b], 
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\CLASSES\Pagealicous.MyObjectWithSite, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b], 
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\CLASSES\Pagealicous.MyObjectWithSite.1, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b], 
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Pagealicous.MyObjectWithSite, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b], 
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Pagealicous.MyObjectWithSite.1, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b], 
PUP.Optional.Pagealicious.A, HKU\S-1-5-21-3786530795-813635038-3550015045-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{60C07B56-542E-4054-A503-4E9E08DF2F84}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b], 
PUP.Optional.Pagealicious.A, HKU\S-1-5-21-3786530795-813635038-3550015045-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{60C07B56-542E-4054-A503-4E9E08DF2F84}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b], 
PUP.Optional.Pagealicious.A, HKU\S-1-5-21-3786530795-813635038-3550015045-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{60C07B56-542E-4054-A503-4E9E08DF2F84}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b], 
PUP.Optional.Pagealicious.A, HKU\S-1-5-21-3786530795-813635038-3550015045-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{60C07B56-542E-4054-A503-4E9E08DF2F84}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b], 
PUP.Optional.Outbrowse, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{6D4506CE-F855-4657-AA38-DB6B1F733982}, In Quarantäne, [9908207e48339d99656cf5983cc611ef], 
PUP.Optional.Outbrowse, HKLM\SOFTWARE\CLASSES\TYPELIB\{03771AEF-400D-4A13-B712-25878EC4A3F5}, In Quarantäne, [9908207e48339d99656cf5983cc611ef], 
PUP.Optional.Outbrowse, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{03771AEF-400D-4A13-B712-25878EC4A3F5}, In Quarantäne, [9908207e48339d99656cf5983cc611ef], 
PUP.Optional.Zwangi, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{47AE1BA9-0BD1-44F4-88AE-45F8F7B605EF}, In Quarantäne, [9a07efaf631880b60d03e27854ae9868], 
Refog.Keylogger, HKLM\SOFTWARE\Refog Software, In Quarantäne, [069b7b23f5869c9ad15e5f1319ea7090], 

Registrierungswerte: 1
PUM.Bad.Proxy, HKU\S-1-5-21-3786530795-813635038-3550015045-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|ProxyServer, http=127.0.0.1:13828, In Quarantäne, [b1f0dac456256fc7f1dc13fba55f5da3]

Registrierungsdaten: 8
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[049da4fa6d0e7eb8e1375e3f2ada0bf5]
Refog.Keylogger, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON|Userinit, c:\windows\system32\userinit.exe,c:\program files\soluto\soluto.exe /userinit,C:\Windows\SysWOW64\MPK\mpk.exe, Gut: (Userinit.exe), Schlecht: (c:\windows\system32\userinit.exe,c:\program files\soluto\soluto.exe /userinit,C:\Windows\SysWOW64\MPK\mpk.exe),Ersetzt,[21803b63413a06302b673b5f9e660cf4]
PUP.Optional.Snapdo, HKU\S-1-5-21-3786530795-813635038-3550015045-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=hp&installDate=29/07/2013, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=hp&installDate=29/07/2013),Ersetzt,[7a2759455f1c57df3554dbc182821be5]
PUP.Optional.Snapdo, HKU\S-1-5-21-3786530795-813635038-3550015045-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013),Ersetzt,[7031bce23645f046f691edaf659f9b65]
PUP.Optional.Snapdo, HKU\S-1-5-21-3786530795-813635038-3550015045-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013),Ersetzt,[fea3f4aa9dde49ed8dfb7626c3416799]
PUP.Optional.Snapdo, HKU\S-1-5-21-3786530795-813635038-3550015045-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013),Ersetzt,[1c85d8c685f60234ff8bdbc11fe5a957]
PUP.Optional.Snapdo, HKU\S-1-5-21-3786530795-813635038-3550015045-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013),Ersetzt,[cdd427775d1e280e305b3e5e11f301ff]
PUP.Optional.SnapDo.A, HKU\S-1-5-21-3786530795-813635038-3550015045-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013),Ersetzt,[4061415d7dfe40f667bcf99a60a48f71]

Ordner: 6
Refog.Keylogger, C:\ProgramData\MPK, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\2, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\3, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\CPDA, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\CPDM, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 

Dateien: 225
PUP.Optional.Pagealicious.A, C:\Program Files (x86)\Pagealicious\Pagealicious.dll, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b], 
PUP.Optional.OutBrowse, C:\Users\Administrator\Downloads\setup (1).exe, In Quarantäne, [5e43f7a7710a5dd9720adba622dfd927], 
PUP.Optional.FlashPro, C:\Users\Administrator\Downloads\flashplayerpro-setup.exe, In Quarantäne, [d2cf861894e7979ff1f66920db29b947], 
PUP.Optional.OutBrowse, C:\Users\Administrator\Downloads\setup (2).exe, In Quarantäne, [bee3ccd24833f73f5725542de12047b9], 
PUP.Optional.OutBrowse, C:\Users\Administrator\Downloads\setup.exe, In Quarantäne, [148d9fffb5c6e6502a522d54ea17ab55], 
PUP.Optional.AppsInstaller, C:\Users\Marcel-\Downloads\AVS_Media_Player (1).exe, In Quarantäne, [faa737672b5055e18d5e9c87ae56a858], 
PUP.Optional.AppsInstaller, C:\Users\Marcel-\Downloads\AVS_Media_Player (2).exe, In Quarantäne, [d1d0d8c6b1ca1b1b34b760c32cd8728e], 
PUP.Optional.AppsInstaller, C:\Users\Marcel-\Downloads\AVS_Media_Player.exe, In Quarantäne, [8918ff9fb8c3f046806b79aaaa5a738d], 
Trojan.FakeFlash, C:\Users\Marcel-\Downloads\flash.exe, In Quarantäne, [3e63e8b6c4b7f0461dfa4957ac55ce32], 
PUP.Optional.BetterMarkIT.A, C:\Windows\System32\Tasks\BETTERMARKIT_WD, In Quarantäne, [dec3e2bc5f1c7fb7af4517a5b44e29d7], 
PUP.Optional.BetterDeals.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Local Storage\HTTP_STATIC.BETTERDEALS00.BETTERDEALS.CO_0.LOCALSTORAGE, In Quarantäne, [445d3d617efd0135e7ba9e24956d3ec2], 
PUP.Optional.BetterDeals.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Local Storage\HTTP_STATIC.BETTERDEALS00.BETTERDEALS.CO_0.LOCALSTORAGE-JOURNAL, In Quarantäne, [049ddbc35328e74f5e43566cad5558a8], 
PUP.Optional.LiveLyrics.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Local Storage\HTTP_STATIC.LIVELYRICS00.LIVE-LYRICS.COM_0.LOCALSTORAGE, In Quarantäne, [ddc47b23d9a273c344989532867cf907], 
PUP.Optional.LiveLyrics.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Local Storage\HTTP_STATIC.LIVELYRICS00.LIVE-LYRICS.COM_0.LOCALSTORAGE-JOURNAL, In Quarantäne, [38699806bac10234c517c304679bb749], 
PUP.Optional.LiveLyrics.A, C:\Users\Marcel-\AppData\Local\Google\Chrome\User Data\Default\Local Storage\HTTP_STATIC.LIVELYRICS00.LIVE-LYRICS.COM_0.LOCALSTORAGE, In Quarantäne, [0998eab47209af8727b57750a260df21], 
PUP.Optional.LiveLyrics.A, C:\Users\Marcel-\AppData\Local\Google\Chrome\User Data\Default\Local Storage\HTTP_STATIC.LIVELYRICS00.LIVE-LYRICS.COM_0.LOCALSTORAGE-JOURNAL, In Quarantäne, [5b46d6c87308171fc01c3f887b87ba46], 
PUP.Optional.QuickStart.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Local Storage\CHROME-EXTENSION_PELMEIDFHDLHLBJIMPABFCBNNOJBBOMA_0.LOCALSTORAGE, In Quarantäne, [08998c12e49794a2e43c48cdd03442be], 
PUP.Optional.QuickStart.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Local Storage\CHROME-EXTENSION_PELMEIDFHDLHLBJIMPABFCBNNOJBBOMA_0.LOCALSTORAGE-JOURNAL, In Quarantäne, [e3beecb212693303fa2669acde26b54b], 
Refog.Keylogger, C:\ProgramData\MPK\M0000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\S0000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\D0000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7351219097, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7385941435, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7420663310, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7455386921, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7490107523, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7524830671, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7583405324, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7618127546, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7652849768, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7687571991, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7722294213, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7757016551, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7791738657, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7826460880, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7861183102, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7930627546, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7965349768, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8000071991, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8034794329, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8069516435, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8104238657, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8138960880, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8173683102, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8208405324, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8243127662, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8277849768, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8312571991, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8347294213, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8382016435, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8416738773, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8451460880, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8520905440, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8555627662, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8590349768, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8625071991, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8659794213, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8694516435, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8729238657, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8763960880, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8798683218, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8833405324, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8868127546, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8902849768, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8937572107, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8972294213, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9007016435, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9041738657, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9111183102, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9145905324, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9180627546, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9215349768, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9250071991, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9284794213, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9319516435, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9354238657, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9388960880, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9423683102, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9458405440, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9493127662, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9527849768, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9562571991, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9597294329, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9632016551, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9701460995, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9736183102, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9770905324, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9805627546, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9840349768, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9875071991, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9909794213, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9944516435, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9979238657, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_0013960880, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5008969560, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5043691782, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5078414120, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5113136227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5147858449, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5182580671, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5252025231, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5286747338, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5321469560, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5356191782, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5390914120, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5425636227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5460358449, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5495080671, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5529802894, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5564525116, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5604447569, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5633969560, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5668691782, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5703414005, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5738136227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5772858449, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7895905324, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8486183218, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9076460880, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9666738657, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5217303009, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5807580671, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6397858565, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6988136227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7992769444, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8684584259, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5842302894, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5877025116, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5911747454, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5946469560, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5981191782, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6015914005, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6050636227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6085358449, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6120080671, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6154802894, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6189525116, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6224247338, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6258969560, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6293701736, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6328414120, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6363136227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6432580671, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6467302894, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6502025116, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6536747338, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6571469560, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6606191782, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6640914005, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6675636227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6710358449, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6745080671, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6779802894, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6814525116, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6849247338, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6883969676, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6918691782, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6953414005, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7022858449, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7471936690, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7506658796, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7541381019, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7576103009, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7610826042, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7645548264, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7680269676, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7714992824, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7749714699, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7784436227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7819158449, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7853880671, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7888603356, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7923325000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7958047569, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8027492014, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8062214236, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8096936227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8131658333, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8166381019, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8201103241, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8235825000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8270547222, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8305269444, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8339993287, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8374714005, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8409436806, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8444158333, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8478880903, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8513602778, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8548325116, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8719305208, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8754036343, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8788749769, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8823471875, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8858194213, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8892916319, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8927672454, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8962360764, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8997082986, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9077732523, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9112456481, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9229980787, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9264198148, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9298920602, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9333642593, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9368364699, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9403086921, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9437809028, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9472531250, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9512835069, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9547557060, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9582278935, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9945159375, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9979883449, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\S0000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\2\D0000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\2\I41823_9135415857, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\2\I41823_9839565046, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\2\S0000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\3\D0000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\3\D0000-journal, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\3\I41823_9449521991, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\3\I41823_9881432176, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\3\S0000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\CPDM\cpfm.bin, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 

Physische Sektoren: 0
(No malicious items detected)


(end)
         

Mbam -

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 12.07.2014
Suchlauf-Zeit: 11:32:05
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.07.12.01
Rootkit Datenbank: v2014.07.09.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 8.1
CPU: x64
Dateisystem: NTFS
Benutzer: Administrator

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 439236
Verstrichene Zeit: 33 Min, 30 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 19
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{60C07B56-542E-4054-A503-4E9E08DF2F84}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b], 
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{DB404724-1080-40D5-9E8E-B641E8069BAF}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b], 
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{D3032E47-FCC2-4511-9871-987F89486A7D}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b], 
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{D3032E47-FCC2-4511-9871-987F89486A7D}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b], 
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{DB404724-1080-40D5-9E8E-B641E8069BAF}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b], 
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{60C07B56-542E-4054-A503-4E9E08DF2F84}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b], 
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\CLASSES\Pagealicous.MyObjectWithSite, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b], 
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\CLASSES\Pagealicous.MyObjectWithSite.1, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b], 
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Pagealicous.MyObjectWithSite, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b], 
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Pagealicous.MyObjectWithSite.1, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b], 
PUP.Optional.Pagealicious.A, HKU\S-1-5-21-3786530795-813635038-3550015045-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{60C07B56-542E-4054-A503-4E9E08DF2F84}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b], 
PUP.Optional.Pagealicious.A, HKU\S-1-5-21-3786530795-813635038-3550015045-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{60C07B56-542E-4054-A503-4E9E08DF2F84}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b], 
PUP.Optional.Pagealicious.A, HKU\S-1-5-21-3786530795-813635038-3550015045-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{60C07B56-542E-4054-A503-4E9E08DF2F84}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b], 
PUP.Optional.Pagealicious.A, HKU\S-1-5-21-3786530795-813635038-3550015045-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{60C07B56-542E-4054-A503-4E9E08DF2F84}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b], 
PUP.Optional.Outbrowse, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{6D4506CE-F855-4657-AA38-DB6B1F733982}, In Quarantäne, [9908207e48339d99656cf5983cc611ef], 
PUP.Optional.Outbrowse, HKLM\SOFTWARE\CLASSES\TYPELIB\{03771AEF-400D-4A13-B712-25878EC4A3F5}, In Quarantäne, [9908207e48339d99656cf5983cc611ef], 
PUP.Optional.Outbrowse, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{03771AEF-400D-4A13-B712-25878EC4A3F5}, In Quarantäne, [9908207e48339d99656cf5983cc611ef], 
PUP.Optional.Zwangi, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{47AE1BA9-0BD1-44F4-88AE-45F8F7B605EF}, In Quarantäne, [9a07efaf631880b60d03e27854ae9868], 
Refog.Keylogger, HKLM\SOFTWARE\Refog Software, In Quarantäne, [069b7b23f5869c9ad15e5f1319ea7090], 

Registrierungswerte: 1
PUM.Bad.Proxy, HKU\S-1-5-21-3786530795-813635038-3550015045-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|ProxyServer, http=127.0.0.1:13828, In Quarantäne, [b1f0dac456256fc7f1dc13fba55f5da3]

Registrierungsdaten: 8
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[049da4fa6d0e7eb8e1375e3f2ada0bf5]
Refog.Keylogger, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON|Userinit, c:\windows\system32\userinit.exe,c:\program files\soluto\soluto.exe /userinit,C:\Windows\SysWOW64\MPK\mpk.exe, Gut: (Userinit.exe), Schlecht: (c:\windows\system32\userinit.exe,c:\program files\soluto\soluto.exe /userinit,C:\Windows\SysWOW64\MPK\mpk.exe),Ersetzt,[21803b63413a06302b673b5f9e660cf4]
PUP.Optional.Snapdo, HKU\S-1-5-21-3786530795-813635038-3550015045-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=hp&installDate=29/07/2013, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=hp&installDate=29/07/2013),Ersetzt,[7a2759455f1c57df3554dbc182821be5]
PUP.Optional.Snapdo, HKU\S-1-5-21-3786530795-813635038-3550015045-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013),Ersetzt,[7031bce23645f046f691edaf659f9b65]
PUP.Optional.Snapdo, HKU\S-1-5-21-3786530795-813635038-3550015045-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013),Ersetzt,[fea3f4aa9dde49ed8dfb7626c3416799]
PUP.Optional.Snapdo, HKU\S-1-5-21-3786530795-813635038-3550015045-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013),Ersetzt,[1c85d8c685f60234ff8bdbc11fe5a957]
PUP.Optional.Snapdo, HKU\S-1-5-21-3786530795-813635038-3550015045-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013),Ersetzt,[cdd427775d1e280e305b3e5e11f301ff]
PUP.Optional.SnapDo.A, HKU\S-1-5-21-3786530795-813635038-3550015045-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013),Ersetzt,[4061415d7dfe40f667bcf99a60a48f71]

Ordner: 6
Refog.Keylogger, C:\ProgramData\MPK, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\2, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\3, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\CPDA, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\CPDM, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 

Dateien: 225
PUP.Optional.Pagealicious.A, C:\Program Files (x86)\Pagealicious\Pagealicious.dll, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b], 
PUP.Optional.OutBrowse, C:\Users\Administrator\Downloads\setup (1).exe, In Quarantäne, [5e43f7a7710a5dd9720adba622dfd927], 
PUP.Optional.FlashPro, C:\Users\Administrator\Downloads\flashplayerpro-setup.exe, In Quarantäne, [d2cf861894e7979ff1f66920db29b947], 
PUP.Optional.OutBrowse, C:\Users\Administrator\Downloads\setup (2).exe, In Quarantäne, [bee3ccd24833f73f5725542de12047b9], 
PUP.Optional.OutBrowse, C:\Users\Administrator\Downloads\setup.exe, In Quarantäne, [148d9fffb5c6e6502a522d54ea17ab55], 
PUP.Optional.AppsInstaller, C:\Users\Marcel-\Downloads\AVS_Media_Player (1).exe, In Quarantäne, [faa737672b5055e18d5e9c87ae56a858], 
PUP.Optional.AppsInstaller, C:\Users\Marcel-\Downloads\AVS_Media_Player (2).exe, In Quarantäne, [d1d0d8c6b1ca1b1b34b760c32cd8728e], 
PUP.Optional.AppsInstaller, C:\Users\Marcel-\Downloads\AVS_Media_Player.exe, In Quarantäne, [8918ff9fb8c3f046806b79aaaa5a738d], 
Trojan.FakeFlash, C:\Users\Marcel-\Downloads\flash.exe, In Quarantäne, [3e63e8b6c4b7f0461dfa4957ac55ce32], 
PUP.Optional.BetterMarkIT.A, C:\Windows\System32\Tasks\BETTERMARKIT_WD, In Quarantäne, [dec3e2bc5f1c7fb7af4517a5b44e29d7], 
PUP.Optional.BetterDeals.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Local Storage\HTTP_STATIC.BETTERDEALS00.BETTERDEALS.CO_0.LOCALSTORAGE, In Quarantäne, [445d3d617efd0135e7ba9e24956d3ec2], 
PUP.Optional.BetterDeals.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Local Storage\HTTP_STATIC.BETTERDEALS00.BETTERDEALS.CO_0.LOCALSTORAGE-JOURNAL, In Quarantäne, [049ddbc35328e74f5e43566cad5558a8], 
PUP.Optional.LiveLyrics.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Local Storage\HTTP_STATIC.LIVELYRICS00.LIVE-LYRICS.COM_0.LOCALSTORAGE, In Quarantäne, [ddc47b23d9a273c344989532867cf907], 
PUP.Optional.LiveLyrics.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Local Storage\HTTP_STATIC.LIVELYRICS00.LIVE-LYRICS.COM_0.LOCALSTORAGE-JOURNAL, In Quarantäne, [38699806bac10234c517c304679bb749], 
PUP.Optional.LiveLyrics.A, C:\Users\Marcel-\AppData\Local\Google\Chrome\User Data\Default\Local Storage\HTTP_STATIC.LIVELYRICS00.LIVE-LYRICS.COM_0.LOCALSTORAGE, In Quarantäne, [0998eab47209af8727b57750a260df21], 
PUP.Optional.LiveLyrics.A, C:\Users\Marcel-\AppData\Local\Google\Chrome\User Data\Default\Local Storage\HTTP_STATIC.LIVELYRICS00.LIVE-LYRICS.COM_0.LOCALSTORAGE-JOURNAL, In Quarantäne, [5b46d6c87308171fc01c3f887b87ba46], 
PUP.Optional.QuickStart.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Local Storage\CHROME-EXTENSION_PELMEIDFHDLHLBJIMPABFCBNNOJBBOMA_0.LOCALSTORAGE, In Quarantäne, [08998c12e49794a2e43c48cdd03442be], 
PUP.Optional.QuickStart.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Local Storage\CHROME-EXTENSION_PELMEIDFHDLHLBJIMPABFCBNNOJBBOMA_0.LOCALSTORAGE-JOURNAL, In Quarantäne, [e3beecb212693303fa2669acde26b54b], 
Refog.Keylogger, C:\ProgramData\MPK\M0000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\S0000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\D0000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7351219097, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7385941435, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7420663310, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7455386921, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7490107523, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7524830671, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7583405324, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7618127546, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7652849768, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7687571991, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7722294213, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7757016551, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7791738657, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7826460880, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7861183102, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7930627546, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7965349768, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8000071991, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8034794329, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8069516435, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8104238657, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8138960880, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8173683102, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8208405324, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8243127662, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8277849768, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8312571991, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8347294213, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8382016435, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8416738773, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8451460880, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8520905440, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8555627662, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8590349768, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8625071991, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8659794213, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8694516435, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8729238657, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8763960880, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8798683218, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8833405324, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8868127546, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8902849768, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8937572107, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8972294213, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9007016435, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9041738657, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9111183102, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9145905324, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9180627546, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9215349768, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9250071991, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9284794213, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9319516435, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9354238657, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9388960880, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9423683102, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9458405440, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9493127662, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9527849768, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9562571991, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9597294329, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9632016551, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9701460995, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9736183102, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9770905324, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9805627546, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9840349768, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9875071991, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9909794213, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9944516435, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9979238657, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_0013960880, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5008969560, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5043691782, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5078414120, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5113136227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5147858449, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5182580671, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5252025231, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5286747338, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5321469560, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5356191782, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5390914120, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5425636227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5460358449, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5495080671, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5529802894, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5564525116, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5604447569, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5633969560, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5668691782, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5703414005, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5738136227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5772858449, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7895905324, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8486183218, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9076460880, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9666738657, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5217303009, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5807580671, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6397858565, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6988136227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7992769444, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8684584259, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5842302894, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5877025116, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5911747454, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5946469560, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5981191782, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6015914005, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6050636227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6085358449, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6120080671, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6154802894, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6189525116, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6224247338, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6258969560, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6293701736, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6328414120, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6363136227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6432580671, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6467302894, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6502025116, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6536747338, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6571469560, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6606191782, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6640914005, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6675636227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6710358449, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6745080671, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6779802894, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6814525116, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6849247338, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6883969676, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6918691782, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6953414005, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7022858449, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7471936690, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7506658796, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7541381019, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7576103009, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7610826042, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7645548264, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7680269676, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7714992824, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7749714699, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7784436227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7819158449, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7853880671, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7888603356, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7923325000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7958047569, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8027492014, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8062214236, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8096936227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8131658333, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8166381019, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8201103241, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8235825000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8270547222, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8305269444, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8339993287, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8374714005, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8409436806, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8444158333, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8478880903, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8513602778, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8548325116, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8719305208, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8754036343, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8788749769, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8823471875, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8858194213, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8892916319, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8927672454, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8962360764, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8997082986, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9077732523, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9112456481, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9229980787, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9264198148, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9298920602, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9333642593, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9368364699, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9403086921, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9437809028, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9472531250, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9512835069, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9547557060, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9582278935, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9945159375, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9979883449, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\1\S0000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\2\D0000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\2\I41823_9135415857, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\2\I41823_9839565046, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\2\S0000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\3\D0000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\3\D0000-journal, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\3\I41823_9449521991, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\3\I41823_9881432176, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\3\S0000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 
Refog.Keylogger, C:\ProgramData\MPK\CPDM\cpfm.bin, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a], 

Physische Sektoren: 0
(No malicious items detected)


(end)
         

FRST - Teil 1

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-07-2014
Ran by Administrator (administrator) on MARCEL on 13-07-2014 12:12:54
Running from C:\Users\Administrator\Downloads
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(HP) C:\Program Files (x86)\HP SimplePass\TrueSuiteService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicShellService.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Authentec Inc.) C:\Program Files\Protector Suite\upeksvr.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Fork Ltd.) C:\Prey\platform\windows\cronsvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(devolo AG) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\nis.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(Softwareentwicklung Remus - ArchiCrypt) C:\Windows\SysWOW64\STGRAMDiskHandler64.exe
(Connectify) C:\Program Files (x86)\Connectify\ConnectifyService.exe
(Connectify) C:\Program Files (x86)\Connectify\Connectifyd.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(AuthenTec Inc.) C:\Program Files (x86)\HP SimplePass\TouchControl.exe
() C:\Program Files (x86)\HP SimplePass\IEWebSiteLogon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\nis.exe
(Bitsum LLC) C:\Program Files\Process Lasso\ProcessLasso.exe
(Bitsum LLC) C:\Program Files\Process Lasso\ProcessGovernor.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Talk\TalkMonitor.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
() C:\Program Files (x86)\Acronis\DriveMonitor\adm_tray.exe
(CyberLink) C:\Program Files (x86)\CyberLink\SoftDMA\Kernel\DMR\DMREngine_iSale.exe
(Steganos Software GmbH) C:\Program Files (x86)\Steganos Privacy Suite 14\SteganosHotKeyService.exe
(Steganos Software GmbH) C:\Program Files (x86)\Steganos Privacy Suite 14\fredirstarter.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\nvspcap64.dll [1225920 2014-04-30] (NVIDIA Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [478984 2012-12-15] (Adobe Systems Incorporated)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2874168 2012-09-15] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2013-06-03] (IDT, Inc.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2199840 2014-04-30] (NVIDIA Corporation)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [462400 2011-02-12] (Acronis)
HKLM\...\Run: [AdAwareTray] => "C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5152.0\AdAwareTray.exe"
HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [581024 2012-09-07] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285240 2012-09-28] (Intel Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-04-23] (Apple Inc.)
HKLM-x32\...\Run: [ROCCATTalk] => C:\Program Files (x86)\ROCCAT\Talk\TalkMonitor.EXE [2154496 2011-07-12] (ROCCAT GmbH)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-04-10] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-10-26] (cyberlink)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [186408 2013-12-04] (Geek Software GmbH)
HKLM-x32\...\Run: [adm_tray.exe] => C:\Program Files (x86)\Acronis\DriveMonitor\adm_tray.exe [470120 2011-02-24] ()
HKLM-x32\...\Run: [DMREngine_iSale] => C:\Program Files (x86)\CyberLink\SoftDMA\Kernel\DMR\DMREngine_iSale.exe [306024 2013-07-29] (CyberLink)
HKLM-x32\...\Run: [Steganos HotKeys] => C:\Program Files (x86)\Steganos Privacy Suite 14\SteganosHotKeyService.exe [100864 2013-12-18] (Steganos Software GmbH)
HKLM-x32\...\Run: [SSS14 File Redirection Starter] => C:\Program Files (x86)\Steganos Privacy Suite 14\fredirstarter.exe [17920 2013-12-18] (Steganos Software GmbH)
HKLM-x32\...\Run: [WsmUpdater] => C:\Program Files (x86)\Web Solution Mart\Fake Webcam Codecs Pack\Updater.exe [292208 2012-05-18] (Web Solution Mart)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2014-05-27] (Hewlett-Packard)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\psfus: C:\Program Files\Protector Suite\psqlpwd.dll (Authentec Inc.)
HKU\.DEFAULT\...\Run: [OKAYFREEDOM_Agent] => "C:\Program Files (x86)\OkayFreedom\OkayFreedomClient.exe" -agent
HKU\S-1-5-21-3786530795-813635038-3550015045-500\...\Run: [C:\Program Files (x86)\NetMeter\NetMeter.exe] => C:\Program Files (x86)\NetMeter\NetMeter.exe [293888 2009-08-09] ()
HKU\S-1-5-21-3786530795-813635038-3550015045-500\...\MountPoints2: {1f320137-84ee-11e2-be72-806e6f6e6963} - "E:\autorun.exe" 
AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [166568 2014-06-13] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [146480 2014-06-13] (NVIDIA Corporation)
Lsa: [Notification Packages] scecli C:\Program Files\Protector Suite\psqlpwd.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)
Startup: C:\Users\Marcel-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 2050 J510 series.lnk
ShortcutTarget: Tintenwarnungen überwachen - HP Deskjet 2050 J510 series.lnk -> C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
Startup: C:\Users\Marcel-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\uiStub.exe - Verknüpfung.lnk
ShortcutTarget: uiStub.exe - Verknüpfung.lnk -> C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\uiStub.exe (No File)
ShellIconOverlayIdentifiers:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
ShellIconOverlayIdentifiers:  SkyDrivePro1 (ErrorConflict) -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers:  SkyDrivePro2 (SyncInProgress) -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers:  SkyDrivePro3 (InSync) -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: ShareOverlay -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
ShellIconOverlayIdentifiers: UEAFOverlay -> {F2F31467-B1AC-4df0-AE79-FD5FA085E22B} => C:\Program Files\Protector Suite\farchns.dll (Authentec Inc.)
ShellIconOverlayIdentifiers: UEAFOverlayOpen -> {A3E208F7-0E3A-4182-A7A6-B169D5D691AA} => C:\Program Files\Protector Suite\farchns.dll (Authentec Inc.)
ShellIconOverlayIdentifiers-x32:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers-x32:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers-x32:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
ShellIconOverlayIdentifiers-x32:  SkyDrivePro1 (ErrorConflict) -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32:  SkyDrivePro2 (SyncInProgress) -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32:  SkyDrivePro3 (InSync) -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: ShareOverlay -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)

==================== Internet (Whitelisted) ====================

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPNTDFJS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPNTDFJS
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM - {F4FB02E6-D448-4915-9B53-67D5766FFFFA} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = 
SearchScopes: HKCU - {F4FB02E6-D448-4915-9B53-67D5766FFFFA} URL = 
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation)
BHO: RoboForm Toolbar Helper - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_64.dll (IvoSoft)
BHO-x32: No Name - {206E52E0-D52E-11D4-AD54-0000E86C26F6} - C:\Program Files (x86)\FreshDevices\FreshDownload\fdcatch.dll (FreshDevices Corp.)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: RoboForm Toolbar Helper - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: No Name - {C4415769-1588-4AD6-9624-B2E69DB78D1A} -  No File
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM - Steganos Password Manager Toolbar - {9C65D12D-CF9D-454D-8049-61965D8C6FFF} - C:\Program Files (x86)\Steganos Privacy Suite 14\SPMIEToolbar64.dll (Steganos Software GmbH)
Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
Toolbar: HKLM-x32 - FreshDownload Bar - {ED0E8CA5-42FB-4B18-997B-769E0408E79D} - C:\Program Files (x86)\FreshDevices\FreshDownload\fdiebar.dll (FreshDevices Corp.)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Steganos Password Manager Toolbar - {9C65D12D-CF9D-454D-8049-61965D8C6FFF} - C:\Program Files (x86)\Steganos Privacy Suite 14\SPMIEToolbar.dll (Steganos Software GmbH)
Toolbar: HKLM-x32 - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1209149.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @authentec.com/ffwloplugin - C:\Program Files (x86)\HP SimplePass\npffwloplugin.dll ( HP)
FF Plugin-x32: @gametap.com/npdd,version=1.0 - C:\Program Files (x86)\Downloader\npdd.dll (Metaboli)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF [2013-12-26]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn [2014-07-13]
FF HKLM-x32\...\Firefox\Extensions: [{00F0643E-B367-4779-B45D-7046EBA37A88}] - C:\Program Files (x86)\Steganos Privacy Suite 14\spmplugin3
FF Extension: Steganos Password Manager - C:\Program Files (x86)\Steganos Privacy Suite 14\spmplugin3 [2014-01-10]
FF HKLM-x32\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox
FF Extension: RoboForm Toolbar for Firefox - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox [2014-02-05]

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR Extension: (Google Docs) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-05-06]
CHR Extension: (Google Drive) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-06]
CHR Extension: (YouTube) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-06]
CHR Extension: (Adblock Plus) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-06-06]
CHR Extension: (Search) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-06]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2014-05-06]
CHR Extension: (Website Logon) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\kanflfepiobnpjbljmngfgegijhdpljm [2014-05-06]
CHR Extension: (Norton Identity Protection) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2014-05-12]
CHR Extension: (Google Wallet) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-06]
CHR Extension: (Google Mail) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-06]
CHR Extension: (RoboForm) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnlccmojcmeohlpggmfnbbiapkmbliob [2014-05-06]
CHR HKLM-x32\...\Chrome\Extension: [hdokiejnpimakedhajhdlcegeplioahd] - C:\Program Files (x86)\LastPass\lpchrome.crx [2013-07-29]
CHR HKLM-x32\...\Chrome\Extension: [kanflfepiobnpjbljmngfgegijhdpljm] - C:\Program Files (x86)\HP SimplePass\tschrome.crx [2013-04-01]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\Exts\Chrome.crx [2014-05-23]
CHR HKLM-x32\...\Chrome\Extension: [pnlccmojcmeohlpggmfnbbiapkmbliob] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Chrome\rf-chrome.crx [2014-02-05]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2014-07-04] () [File not signed]
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-07-17] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-07-17] (BlueStack Systems, Inc.)
R2 ClassicShellService; C:\Program Files\Classic Shell\ClassicShellService.exe [68608 2013-06-29] (IvoSoft) [File not signed]
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [241776 2013-01-28] (CyberLink)
R2 Connectify; C:\Program Files (x86)\Connectify\ConnectifyService.exe [487936 2013-12-23] (Connectify) [File not signed]
R2 CronService; C:\Prey\platform\windows\cronsvc.exe [23552 2013-05-08] (Fork Ltd.) [File not signed]
R2 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [3128856 2012-02-28] (devolo AG)
S3 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\DfsdkS64.exe [544768 2009-08-24] (mst software GmbH, Germany) [File not signed]
S4 EBOOSTRSVC; C:\Program Files\eBoostr\EBstrSvc.exe [814328 2012-04-17] (eBoostr.com)
R2 FPLService; C:\Program Files (x86)\HP SimplePass\TrueSuiteService.exe [1641768 2013-06-07] (HP)
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [86528 2012-09-27] (Hewlett-Packard Company) [File not signed]
R2 HPConnectedRemote; C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe [38712 2013-01-10] (Hewlett-Packard)
R3 ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2012-02-01] (Intel Corporation) [File not signed]
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-05-09] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-05-09] (Intel Corporation)
S4 lansweeperservice; C:\Program Files (x86)\Lansweeper\Service\Lansweeperservice.exe [8115200 2013-12-12] (Lansweeper) [File not signed]
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\NIS.exe [276376 2014-05-11] (Symantec Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21009352 2014-04-30] (NVIDIA Corporation)
S3 OpenVPNService; C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe [14848 2011-12-15] () [File not signed]
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2013-12-29] ()
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013.SP5\RpcAgentSrv.exe [72344 2008-11-25] (SiSoftware) [File not signed]
S4 SBUpd; C:\Program Files\Common Files\SpeedBit\SBUpdate\sbu.exe [2541688 2014-03-04] (Speedbit Ltd.)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia)
S2 sfrem01; C:\Windows\system32\sfrem01.exe [601208 2006-07-05] (Protection Technology (StarForce))
S4 SolutoLauncherService; C:\Program Files\Soluto\SolutoLauncherService.exe [221728 2013-08-17] (Soluto)
S4 SolutoRemoteService; C:\Program Files\Soluto\SolutoRemoteService.exe [1942528 2013-08-17] (GlavSoft LLC.) [File not signed]
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [333824 2013-06-03] (IDT, Inc.) [File not signed]
R2 Steganos Volatile Disk; C:\WINDOWS\SysWOW64\STGRAMDiskHandler64.exe [450560 2013-07-17] (Softwareentwicklung Remus - ArchiCrypt) [File not signed]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 TrueService; C:\Program Files\Common Files\AuthenTec\TrueService.exe [401856 2013-01-07] (AuthenTec, Inc.)
S4 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [28160 2012-09-06] () [File not signed]
S4 VideoAcceleratorService; C:\Program Files (x86)\SpeedBit Video Accelerator\VideoAcceleratorService.exe [298152 2014-03-04] (SPEEDbit)
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2013-11-24] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
S2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [18384 2013-09-04] (Intel(R) Corporation)
S2 BetterMarkIt; C:\Program Files (x86)\bettermarkit\BetterMarkIt153.exe [X]
S4 LavasoftAdAwareService11; "C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5152.0\AdAwareService.exe" [X]
S4 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [X]

==================== Drivers (Whitelisted) ====================

S3 AIDA64Driver; C:\Program Files (x86)\FinalWire\AIDA64 Extreme\kerneld.x64 [34136 2014-02-11] ()
R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20140703.001\BHDrvx64.sys [1530160 2014-05-10] (Symantec Corporation)
S2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-07-17] (BlueStack Systems)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1503000.00C\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R1 cnnctfy3; C:\Windows\system32\DRIVERS\cnnctfy3.sys [35352 2014-01-10] (Connectify)
R0 eBoost; C:\Windows\System32\drivers\eBoost.sys [189816 2012-04-17] (eBoostr.com)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [486192 2014-06-11] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142128 2014-06-11] (Symantec Corporation)
S3 FreshIO; C:\Program Files (x86)\FreshDevices\FreshDiagnose\FreshIO.sys [2410 2004-10-26] () [File not signed]
S3 fwdrv; C:\Windows\system32\DRIVERS\fwdrv.sys [26320 2012-12-14] (Web Solution Mart)
S3 hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [46136 2013-07-03] (LogMeIn Inc.)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20140711.001\IDSvia64.sys [525016 2014-07-03] (Symantec Corporation)
R2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [26328 2013-07-23] (Intel Corporation)
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115600 2010-01-29] (EZB Systems, Inc.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-13] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2014-05-12] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-08-27] (Intel Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140712.002\ENG64.SYS [126040 2014-07-04] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140712.002\EX64.SYS [2099288 2014-07-04] (Symantec Corporation)
R1 networx; C:\Windows\System32\drivers\networx.sys [43512 2013-10-21] (NetFilterSDK.com)
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2012-01-31] (CACE Technologies)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19744 2014-04-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia)
S3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [47632 2013-04-29] (Panda Security, S.L.)
S3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [273040 2013-07-30] (Realtek Semiconductor Corp.)
R3 rtbth; C:\Windows\System32\drivers\rtbth.sys [1204424 2014-01-30] (Ralink Technology, Corp.)
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013.SP5\WNt500x64\Sandra.sys [23112 2009-08-07] (SiSoftware)
S3 SBUpdd; C:\Program Files\Common Files\SpeedBit\SBUpdate\sbw.sys [41368 2014-03-04] ()
R0 sfdrv01a; C:\Windows\System32\drivers\sfdrv01a.sys [77432 2009-02-03] (Protection Technology (StarForce))
R0 sfvfs02; C:\Windows\System32\drivers\sfvfs02.sys [107384 2007-02-08] (Protection Technology (StarForce))
R1 SLEE_18_DRIVER; C:\WINDOWS\Sleen1864.sys [109144 2013-11-18] (Softwareentwicklung Remus - ArchiCrypt - )
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [41272 2012-09-15] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-09-15] (Synaptics Incorporated)
R1 SRTSP; C:\Windows\System32\Drivers\NISx64\1503000.00C\SRTSP64.SYS [875736 2014-02-13] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1503000.00C\SRTSPX64.SYS [36952 2013-09-10] (Symantec Corporation)
R1 STGMFEngine64; C:\WINDOWS\system32\drivers\STGMFEngine64.sys [28576 2013-07-17] (Softwareentwicklung Remus - ArchiCrypt.com)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1503000.00C\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1503000.00C\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NISx64\1503000.00C\SymELAM.sys [23568 2013-09-10] (Symantec Corporation)
R3 SymEvent; C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-12-26] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1503000.00C\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1503000.00C\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation)
S3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [329800 2013-07-17] (BitDefender S.R.L.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
S3 WinRing0_1_2_0; C:\Program Files (x86)\BatteryCare\WinRing0x64.sys [14544 2008-07-26] (OpenLibSys.org)
R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2012-08-31] (Hewlett-Packard Development Company, L.P.)
S3 ALSysIO; \??\C:\Users\Marcel-\AppData\Local\Temp\ALSysIO64.sys [X]
S3 BtAudioBusSrv; \SystemRoot\System32\Drivers\BtAudioBus.sys [X]
S3 BthL2caScoIfSrv; \SystemRoot\System32\Drivers\BtL2caScoIf.sys [X]
S3 btUrbFilterDrv; \SystemRoot\System32\Drivers\IvtUrbBtFlt.sys [X]
S3 cpuz136; \??\C:\WINDOWS\TEMP\cpuz136\cpuz136_x64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-13 12:12 - 2014-07-13 12:13 - 00043144 _____ () C:\Users\Administrator\Downloads\FRST.txt
2014-07-13 12:07 - 2014-07-13 12:07 - 02086912 _____ (Farbar) C:\Users\Administrator\Downloads\FRST64.exe
2014-07-13 12:07 - 2014-07-13 12:07 - 00000000 ____D () C:\Users\Administrator\Downloads\FRST-OlderVersion
2014-07-12 15:00 - 2014-07-12 15:00 - 00000222 _____ () C:\Users\Administrator\Desktop\Arma 3.url
2014-07-12 14:48 - 2014-07-12 14:48 - 00000975 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-07-12 14:47 - 2014-07-12 14:47 - 01141680 _____ () C:\Users\Administrator\Downloads\SteamSetup.exe
2014-07-12 12:16 - 2014-07-12 12:16 - 00000622 _____ () C:\Users\Administrator\Desktop\JRT.txt
2014-07-12 12:07 - 2014-07-12 12:07 - 00035171 _____ () C:\Users\Administrator\Desktop\mbam.txt
2014-07-12 11:38 - 2014-07-13 11:52 - 00000000 ____D () C:\AdwCleaner
2014-07-12 11:31 - 2014-07-13 12:03 - 00122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-07-12 11:30 - 2014-07-12 11:30 - 01348263 _____ () C:\Users\Administrator\Downloads\adwcleaner_3.215.exe
2014-07-12 11:30 - 2014-07-12 11:30 - 00001130 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-12 11:30 - 2014-07-12 11:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-07-12 11:30 - 2014-07-12 11:30 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-12 11:30 - 2014-07-12 11:30 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-07-12 11:30 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-07-12 11:30 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-07-12 11:30 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-07-12 11:29 - 2014-07-12 11:29 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Administrator\Downloads\mbam-setup-2.0.2.1012 (2).exe
2014-07-12 11:28 - 2014-07-12 11:28 - 00001111 _____ () C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2014-07-12 11:28 - 2014-07-12 11:28 - 00000000 ____D () C:\Users\Administrator\AppData\Local\VS Revo Group
2014-07-12 11:28 - 2009-12-30 10:21 - 00031800 _____ (VS Revo Group) C:\WINDOWS\system32\Drivers\revoflt.sys
2014-07-12 11:27 - 2014-07-12 11:27 - 10619688 _____ (VS Revo Group ) C:\Users\Administrator\Downloads\RevoUninProSetup.exe
2014-07-12 11:16 - 2014-07-12 11:16 - 00001298 _____ () C:\Users\Administrator\Desktop\Revo Uninstaller.lnk
2014-07-12 11:14 - 2014-07-12 11:14 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Administrator\Downloads\revosetup95.exe
2014-07-11 15:48 - 2014-07-11 15:50 - 01269712 _____ () C:\WINDOWS\Minidump\071114-48718-01.dmp
2014-07-11 13:21 - 2014-07-11 13:21 - 00094121 _____ () C:\Users\Administrator\Downloads\Addition.txt
2014-07-11 13:05 - 2014-07-11 13:05 - 00854390 _____ () C:\Users\Administrator\Downloads\SecurityCheck.exe
2014-07-10 23:56 - 2014-07-10 23:56 - 00019178 _____ () C:\Users\Administrator\Downloads\Backup Hack.zip
2014-07-10 23:56 - 2014-07-10 23:56 - 00019178 _____ () C:\Users\Administrator\Downloads\Backup Hack (1).zip
2014-07-10 23:08 - 2014-07-10 23:08 - 01016261 _____ (Thisisu) C:\Users\Administrator\Downloads\JRT (1).exe
2014-07-10 22:49 - 2014-07-10 22:49 - 00020597 _____ () C:\Users\Administrator\Downloads\FRST.rar
2014-07-10 22:31 - 2014-07-10 22:31 - 00380416 _____ () C:\Users\Administrator\Downloads\Gmer-19357.exe
2014-07-10 22:19 - 2014-07-10 22:19 - 00000488 _____ () C:\Users\Administrator\Downloads\defogger_disable.log
2014-07-10 22:19 - 2014-07-10 22:19 - 00000000 _____ () C:\Users\Administrator\defogger_reenable
2014-07-10 22:18 - 2014-07-10 22:18 - 00050477 _____ () C:\Users\Administrator\Downloads\Defogger.exe
2014-07-10 22:13 - 2014-07-10 22:13 - 00961360 _____ (Chip Digital GmbH) C:\Users\Administrator\Downloads\HijackThis - CHIP-Installer.exe
2014-07-10 21:58 - 2014-07-10 21:58 - 28013520 _____ (Wireshark development team) C:\Users\Administrator\Downloads\Wireshark-win64-1.10.8.exe
2014-07-09 20:03 - 2014-07-09 20:03 - 07719416 _____ (devolo AG) C:\Users\Administrator\Downloads\software-dlan-500-av-wireless-plus-v3-0-0-firmware-updater.exe
2014-07-09 19:56 - 2014-07-09 19:56 - 00002030 _____ () C:\Users\Public\Desktop\devolo dLAN Cockpit.lnk
2014-07-09 19:56 - 2014-07-09 19:56 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\de.devolo.dLAN.Cockpit
2014-07-09 19:56 - 2014-07-09 19:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\devolo
2014-07-09 19:55 - 2014-07-09 19:56 - 00000000 ____D () C:\Program Files (x86)\devolo
2014-07-09 13:32 - 2014-06-26 22:55 - 00703968 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-07-09 13:32 - 2014-06-26 22:55 - 00105440 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-09 13:23 - 2014-04-14 05:29 - 01018880 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2014-07-09 12:24 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-07-09 12:24 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-07-09 12:24 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-07-09 12:24 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-07-09 12:24 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-07-09 12:24 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-07-09 12:24 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-07-09 12:24 - 2014-06-19 01:46 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-07-09 12:24 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-07-09 12:24 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-07-09 12:24 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-07-09 12:24 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-07-09 12:24 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-07-09 12:24 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-07-09 12:24 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-07-09 12:24 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-07-09 12:24 - 2014-06-19 00:57 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-07-09 12:24 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-07-09 12:24 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-07-09 12:24 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-07-09 12:24 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-07-09 12:24 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-07-09 12:24 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-07-09 12:24 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-07-09 12:24 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-07-09 12:24 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-07-09 12:24 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-07-09 12:24 - 2014-06-17 00:26 - 00779264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osk.exe
2014-07-09 12:24 - 2014-06-17 00:24 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2014-07-09 12:24 - 2014-06-06 16:20 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-07-09 12:24 - 2014-06-06 15:04 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2014-07-09 12:24 - 2014-06-06 14:18 - 00488960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2014-07-09 12:24 - 2014-05-30 05:03 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2014-07-09 12:24 - 2014-05-29 14:02 - 00565576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-07-09 12:24 - 2014-05-29 09:55 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-07-09 12:24 - 2014-05-29 08:40 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-07-09 12:24 - 2014-05-29 08:37 - 00436224 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2014-07-09 12:24 - 2014-05-29 07:34 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2014-07-09 12:24 - 2014-05-29 07:27 - 01417216 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-07-09 12:23 - 2014-05-31 12:07 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-07-09 12:23 - 2014-05-31 12:06 - 00555736 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2014-07-09 12:23 - 2014-05-31 05:40 - 13287936 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-07-09 12:23 - 2014-05-31 05:30 - 11792384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-07-09 12:23 - 2014-05-31 05:12 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-09 12:23 - 2014-05-31 05:06 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-07-09 12:23 - 2014-05-31 05:03 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-07-09 12:23 - 2014-05-31 05:01 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-09 12:23 - 2014-05-31 04:56 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-07-09 12:23 - 2014-05-31 04:54 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-07-09 12:23 - 2014-05-31 04:48 - 03463680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-07-09 12:23 - 2014-05-31 04:37 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-07-09 12:23 - 2014-05-31 04:36 - 00923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-07-09 12:23 - 2014-05-31 04:35 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2014-07-09 12:23 - 2014-05-31 04:32 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-07-08 21:22 - 2014-07-08 21:22 - 00001147 _____ () C:\Users\Administrator\Desktop\FreePortScanner.lnk
2014-07-08 21:22 - 2014-07-08 21:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreePortScanner
2014-07-08 21:22 - 2014-07-08 21:22 - 00000000 ____D () C:\Program Files (x86)\Nsasoft
2014-07-08 21:18 - 2014-07-08 21:18 - 00598416 _____ (Nsasoft LLC. ) C:\Users\Administrator\Downloads\free-port-scanner_10262.exe
2014-07-08 11:51 - 2014-07-08 11:51 - 01017285 _____ () C:\Users\Administrator\Downloads\ARMA III Alpha Super L33T Menu 4.7 SPJESTER_[www.unknowncheats.me]_.zip
2014-07-07 22:34 - 2014-07-07 22:34 - 00019761 _____ () C:\Users\Administrator\Downloads\313_mpgh.net.rar
2014-07-07 22:34 - 2014-07-04 21:48 - 00219645 _____ () C:\Users\Administrator\Desktop\313.sqf
2014-07-07 19:03 - 2014-07-07 19:40 - 00000527 _____ () C:\Users\Administrator\Documents\arma3.CT
2014-07-07 18:59 - 2014-07-07 18:59 - 00001107 _____ () C:\Users\Administrator\Desktop\Cheat Engine.lnk
2014-07-07 18:59 - 2014-07-07 18:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.4
2014-07-07 18:59 - 2014-07-07 18:59 - 00000000 ____D () C:\Program Files (x86)\Cheat Engine 6.4
2014-07-07 18:53 - 2014-07-07 18:53 - 09052432 _____ (Cheat Engine ) C:\Users\Administrator\Downloads\CheatEngine64.exe
2014-07-07 18:46 - 2014-07-07 18:46 - 00017100 _____ () C:\Users\Administrator\Downloads\_src.zip
2014-07-07 17:09 - 2014-07-07 17:11 - 00000000 ____D () C:\Program Files (x86)\Quick Memory Editor
2014-07-07 17:09 - 2014-07-07 17:09 - 02125503 _____ (softcows.com ) C:\Users\Administrator\Downloads\Quick Memory Editor.exe
2014-07-07 17:09 - 2014-07-07 17:09 - 00001111 _____ () C:\Users\Marcel-\Desktop\Quick Memory Editor.lnk
2014-07-07 17:09 - 2014-07-07 17:09 - 00001111 _____ () C:\Users\Administrator\Desktop\Quick Memory Editor.lnk
2014-07-07 17:09 - 2014-07-07 17:09 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Quick Memory Editor
2014-07-07 17:09 - 2014-07-07 17:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Quick Memory Editor
2014-07-05 13:52 - 2014-07-05 13:52 - 00002317 _____ () C:\Users\Administrator\Downloads\DayZ Mod & SA ammo Values by ThirtySix.txt
2014-07-04 17:51 - 2014-07-05 13:22 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-07-04 17:51 - 2014-07-05 13:22 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-07-04 17:50 - 2014-06-13 04:11 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2014-07-04 17:50 - 2014-06-13 04:11 - 00062808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2014-07-04 17:44 - 2014-06-13 04:59 - 01890264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6434043.dll
2014-07-04 17:44 - 2014-06-13 04:59 - 01542088 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6434043.dll
2014-07-04 17:44 - 2014-06-13 04:59 - 00026353 _____ () C:\WINDOWS\system32\nvinfo.pb
2014-07-04 17:44 - 2014-06-13 04:48 - 13911928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 13824408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 11272544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 11211224 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 04248520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 03989464 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 00946120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 00909256 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 00902616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 00869336 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 00391456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 00348120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 31512352 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 24198616 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 18625768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 17553032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 16122344 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 14497528 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 12860888 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2014-07-04 17:44 - 2014-06-13 04:47 - 00502048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 00417568 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 00033736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys
2014-07-04 17:44 - 2014-06-13 04:46 - 22994392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2014-07-04 17:44 - 2014-06-13 04:46 - 15294296 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2014-07-04 17:44 - 2014-06-13 04:46 - 02814120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2014-07-04 17:44 - 2014-06-13 04:46 - 00965312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2014-07-04 17:44 - 2014-06-13 04:46 - 00846832 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2014-07-04 17:44 - 2014-06-13 04:46 - 00354016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2014-07-04 17:44 - 2014-06-13 04:46 - 00305600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2014-07-04 17:44 - 2014-06-13 04:46 - 00166568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2014-07-04 17:44 - 2014-06-13 04:46 - 00146480 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2014-07-04 17:44 - 2014-06-13 04:45 - 03196304 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2014-07-04 15:23 - 2014-07-04 15:23 - 00000000 ____D () C:\Program Files\Lavasoft
2014-07-04 15:23 - 2014-07-04 15:23 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft
2014-07-04 15:01 - 2014-07-04 15:01 - 00000000 ____D () C:\WINDOWS\Panther
2014-07-04 14:55 - 2014-07-04 14:55 - 00000842 _____ () C:\WINDOWS\setupact.log
2014-07-04 14:55 - 2014-07-04 14:55 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-07-04 14:35 - 2014-07-04 14:35 - 00002263 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (6).lnk
2014-07-04 14:30 - 2014-07-04 14:30 - 00000000 ____D () C:\Users\Administrator\AppData\Local\NPE
2014-07-04 12:39 - 2014-07-04 12:39 - 03081712 ____N (Symantec Corporation) C:\Users\Administrator\Downloads\NPE.exe
2014-07-04 12:32 - 2014-07-04 12:32 - 00002263 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (5).lnk
2014-07-04 12:20 - 2014-07-04 12:20 - 00002263 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (4).lnk
2014-07-04 12:15 - 2014-07-04 12:37 - 00001436 _____ () C:\Users\Administrator\Desktop\Google Chrome.lnk
2014-07-04 12:15 - 2014-07-04 12:15 - 00002299 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (3).lnk
2014-07-04 12:15 - 2014-07-04 12:15 - 00002299 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (2).lnk
2014-07-04 12:15 - 2014-07-04 12:15 - 00001079 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-07-04 12:15 - 2014-07-04 12:15 - 00001023 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-04 12:13 - 2014-05-09 01:06 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2014-07-04 12:12 - 2014-07-05 13:41 - 00000000 ____D () C:\Users\Administrator\AppData\Local\LogMeIn Rescue Applet
2014-07-04 12:12 - 2014-07-04 12:12 - 00002299 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec.lnk
2014-07-04 12:06 - 2014-04-18 10:21 - 01126912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-07-04 12:06 - 2014-04-18 10:09 - 08652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-07-04 12:06 - 2014-04-18 09:51 - 00836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-07-04 12:06 - 2014-04-18 09:49 - 05833216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-07-04 12:06 - 2014-04-06 18:31 - 21268952 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-07-04 12:06 - 2014-04-06 18:20 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-07-04 12:06 - 2014-04-06 17:22 - 18755672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-07-04 12:06 - 2014-04-06 13:55 - 16872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-07-04 12:06 - 2014-04-06 13:54 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-07-04 12:06 - 2014-04-06 12:52 - 00955904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-07-04 12:06 - 2014-04-06 12:51 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-07-04 12:06 - 2014-04-06 12:37 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-07-04 12:06 - 2014-04-03 10:12 - 02124840 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2014-07-04 12:06 - 2014-04-03 05:53 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2014-07-04 12:06 - 2014-04-03 04:53 - 04269056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-07-04 12:06 - 2014-03-31 07:42 - 07425368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-07-04 12:06 - 2014-03-31 00:54 - 01308160 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2014-07-04 12:06 - 2014-03-20 02:44 - 06645248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-07-04 12:06 - 2014-03-20 01:33 - 05774848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-07-04 12:06 - 2014-03-19 06:18 - 02688000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-07-04 12:06 - 2014-03-18 07:00 - 07173120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2014-07-04 12:06 - 2014-03-18 06:52 - 05104640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2014-07-04 12:05 - 2014-04-18 16:57 - 00032600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-07-04 12:05 - 2014-04-18 16:44 - 01466856 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-07-04 12:05 - 2014-04-18 15:29 - 01200288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-07-04 12:05 - 2014-04-18 11:44 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll
2014-07-04 12:05 - 2014-04-18 10:32 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-07-04 12:05 - 2014-04-14 11:20 - 00324888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2014-07-04 12:05 - 2014-04-14 10:01 - 00285144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2014-07-04 12:05 - 2014-04-11 08:13 - 01200128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2014-07-04 12:05 - 2014-04-11 06:51 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2014-07-04 12:05 - 2014-04-11 06:23 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2014-07-04 12:05 - 2014-04-11 05:30 - 00449536 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2014-07-04 12:05 - 2014-04-09 13:53 - 00337240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-07-04 12:05 - 2014-04-09 08:39 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll
2014-07-04 12:05 - 2014-04-09 07:44 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll
2014-07-04 12:05 - 2014-04-09 05:33 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2014-07-04 12:05 - 2014-04-08 04:01 - 00589656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2014-07-04 12:05 - 2014-04-06 18:34 - 00372568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2014-07-04 12:05 - 2014-04-06 18:34 - 00275800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2014-07-04 12:05 - 2014-04-06 18:32 - 00125496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2014-07-04 12:05 - 2014-04-06 18:30 - 00201920 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2014-07-04 12:05 - 2014-04-06 18:24 - 00360792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2014-07-04 12:05 - 2014-04-06 18:20 - 01403856 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 01379064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00881616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00765408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00609448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00491744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00467496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00463256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00364640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00244880 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-07-04 12:05 - 2014-04-06 18:20 - 00233912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00028408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2014-07-04 12:05 - 2014-04-06 17:23 - 00098584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2014-07-04 12:05 - 2014-04-06 17:22 - 00178184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 01209616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 00707048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 00669856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 00518544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 00406504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 00387896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-07-04 12:05 - 2014-04-06 14:51 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2014-07-04 12:05 - 2014-04-06 14:33 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-07-04 12:05 - 2014-04-06 13:26 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2014-07-04 12:05 - 2014-04-06 13:01 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-07-04 12:05 - 2014-04-06 12:36 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2014-07-04 12:05 - 2014-04-06 12:05 - 01222656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-07-04 12:05 - 2014-04-06 11:59 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2014-07-04 12:05 - 2014-04-03 10:12 - 00307304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2014-07-04 12:05 - 2014-04-03 10:12 - 00130144 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2014-07-04 12:05 - 2014-04-03 06:03 - 00230808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2014-07-04 12:05 - 2014-04-03 06:03 - 00111528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpapi.dll
2014-07-04 12:05 - 2014-04-03 04:53 - 00677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-07-04 12:05 - 2014-04-03 04:51 - 01584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2014-07-04 12:05 - 2014-04-03 04:23 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-07-04 12:05 - 2014-04-03 04:23 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tlscsp.dll
2014-07-04 12:05 - 2014-04-03 04:22 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\tlscsp.dll
2014-07-04 12:05 - 2014-04-01 08:23 - 00384856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-07-04 12:05 - 2014-03-31 02:41 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2014-07-04 12:05 - 2014-03-31 02:01 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2014-07-04 12:05 - 2014-03-31 01:43 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2014-07-04 12:05 - 2014-03-31 00:49 - 01287168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-07-04 12:05 - 2014-03-28 17:58 - 00407016 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2014-07-04 12:05 - 2014-03-27 08:16 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-07-04 12:05 - 2014-03-27 07:36 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2014-07-04 12:05 - 2014-03-27 06:59 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-07-04 12:05 - 2014-03-27 06:48 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2014-07-04 12:05 - 2014-03-27 06:19 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2014-07-04 12:05 - 2014-03-27 05:46 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2014-07-04 12:05 - 2014-03-27 05:15 - 00718336 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2014-07-04 12:05 - 2014-03-27 05:10 - 01436160 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2014-07-04 12:05 - 2014-03-25 00:58 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2014-07-04 12:05 - 2014-03-20 05:48 - 00263424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-07-04 12:05 - 2014-03-19 10:07 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-07-04 12:05 - 2014-03-18 10:19 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2014-07-04 12:05 - 2014-03-17 07:09 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-07-04 12:05 - 2014-03-17 06:11 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-07-04 12:05 - 2014-03-17 05:01 - 00486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2014-07-04 12:05 - 2014-03-17 04:47 - 01025024 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-07-04 12:05 - 2014-03-17 04:45 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2014-07-04 12:05 - 2014-03-14 08:26 - 00491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll
2014-07-04 12:05 - 2014-03-14 08:10 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll
2014-07-04 12:05 - 2014-03-06 14:42 - 00310616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-07-04 12:04 - 2014-04-06 14:58 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll
2014-07-04 12:04 - 2014-04-06 14:24 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2014-07-04 12:04 - 2014-04-06 14:06 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srclient.dll
2014-07-04 12:04 - 2014-04-06 13:20 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-07-04 12:04 - 2014-03-31 00:35 - 01029120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-07-04 12:04 - 2014-03-31 00:11 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-07-04 12:04 - 2014-03-30 23:47 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-07-04 12:04 - 2014-03-19 10:15 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-07-04 12:04 - 2014-03-19 09:24 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-07-04 12:04 - 2014-03-19 09:17 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2014-07-04 12:04 - 2014-03-19 08:36 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-07-04 12:04 - 2014-03-19 07:56 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-07-04 12:04 - 2014-03-19 07:45 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2014-07-04 12:04 - 2014-03-19 07:19 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-07-04 12:04 - 2014-03-19 07:07 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-07-04 12:04 - 2014-03-19 07:02 - 01527296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-07-04 12:04 - 2014-03-19 07:00 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2014-07-04 12:04 - 2014-03-19 06:51 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2014-07-04 12:04 - 2014-03-19 06:31 - 02100736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-07-04 12:01 - 2014-07-04 12:02 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Administrator\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-07-04 11:56 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-07-04 11:56 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-07-04 11:56 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe
2014-07-04 11:56 - 2014-05-01 15:31 - 03048904 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-07-04 11:56 - 2014-05-01 15:31 - 00055328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wpcfltr.sys
2014-07-04 11:56 - 2014-05-01 09:14 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2014-07-04 11:56 - 2014-05-01 09:05 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2014-07-04 11:56 - 2014-05-01 08:51 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2014-07-04 11:56 - 2014-05-01 07:24 - 02834944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll
2014-07-04 01:11 - 2014-07-04 01:11 - 00000000 _____ () C:\Recovery.txt
2014-07-03 23:39 - 2014-07-03 23:39 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Steganos
2014-07-03 23:39 - 2014-07-03 23:39 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Intel Corporation
2014-07-03 23:39 - 2014-07-03 23:39 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\CyberLink
2014-07-03 23:39 - 2014-07-03 23:39 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Adobe
2014-07-03 23:38 - 2014-07-03 23:38 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Synaptics
2014-07-03 23:38 - 2014-07-03 23:38 - 00000000 ____D () C:\Users\Gast\AppData\Local\Adobe
2014-07-03 22:58 - 2014-07-04 01:21 - 00000000 ____D () C:\e6aaee25e6e797ecb198316b31d5ca
2014-07-03 22:36 - 2014-07-03 22:36 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Hewlett-Packard
2014-07-03 22:36 - 2014-07-03 22:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Power2Go8
2014-07-03 22:36 - 2014-07-03 22:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Hewlett-Packard
2014-07-03 22:36 - 2014-07-03 22:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-07-03 22:35 - 2014-07-04 01:20 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-03 22:35 - 2014-07-04 01:20 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-03 22:35 - 2014-07-04 01:20 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-03 22:35 - 2014-07-04 01:20 - 00000000 ____D () C:\Users\Gast
2014-07-03 22:35 - 2014-07-03 23:38 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Apple Computer
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Vorlagen
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Startmenü
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Netzwerkumgebung
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Lokale Einstellungen
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Eigene Dateien
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Druckumgebung
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Documents\Eigene Musik
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Documents\Eigene Bilder
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\AppData\Local\Verlauf
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\AppData\Local\Anwendungsdaten
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Anwendungsdaten
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 ____D () C:\Users\Gast\AppData\Local\NVIDIA Corporation
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 ____D () C:\Users\Gast\AppData\Local\NVIDIA
2014-07-03 22:35 - 2014-01-23 19:01 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Macromedia
2014-07-03 22:35 - 2013-11-24 17:07 - 00000000 ____D () C:\Users\Gast\Documents\hp.system.package.metadata
2014-07-03 22:35 - 2013-11-24 17:07 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\IObit
2014-07-03 22:35 - 2013-11-24 17:07 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Genie9
2014-07-03 22:35 - 2013-11-24 17:07 - 00000000 ____D () C:\Users\Gast\AppData\Local\Microsoft Help
2014-07-03 22:35 - 2013-11-24 17:07 - 00000000 ____D () C:\Users\Gast\AppData\Local\Apple Computer
2014-07-03 22:33 - 2014-07-03 22:33 - 00000095 _____ () C:\WINDOWS\general.log
2014-07-03 22:12 - 2012-10-15 13:23 - 00072154 _____ () C:\Users\Administrator\Desktop\procexp.chm
2014-07-03 22:10 - 2014-07-03 22:10 - 01243655 _____ () C:\Users\Administrator\Downloads\ProcessExplorer_16.02.zip
2014-07-03 22:10 - 2014-07-03 22:10 - 01243655 _____ () C:\Users\Administrator\Downloads\ProcessExplorer_16.02 (1).zip
2014-07-03 21:27 - 2014-07-03 21:28 - 00000000 ____D () C:\ProgramData\MicroWorld
2014-07-02 20:08 - 2014-07-02 20:08 - 00000222 _____ () C:\Users\Administrator\Desktop\Warface.url
2014-07-02 17:33 - 2014-07-04 01:20 - 00000000 ____D () C:\Users\Administrator\AppData\Local\MetaGeek,_LLC
2014-07-02 17:31 - 2014-07-02 17:31 - 00000000 ____D () C:\Program Files (x86)\MetaGeek
2014-07-02 14:58 - 2014-07-02 15:00 - 104857600 _____ () C:\Users\Administrator\Downloads\1370091038249.rar
2014-07-01 15:26 - 2014-07-04 17:35 - 00000000 ____D () C:\Users\Administrator\Documents\DayZ
2014-07-01 15:26 - 2014-07-01 17:20 - 00000000 ____D () C:\Users\Administrator\AppData\Local\DayZ
2014-07-01 13:55 - 2014-07-04 01:49 - 00000000 ____D () C:\Users\Administrator\AppData\Local\BrowseEmAll
2014-07-01 13:35 - 2014-07-01 13:36 - 00000658 _____ () C:\WINDOWS\ie7_main.log
2014-07-01 13:35 - 2014-07-01 13:35 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Mozilla
2014-07-01 13:35 - 2014-07-01 13:35 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Mozilla
2014-07-01 13:35 - 2014-07-01 13:35 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Macromedia
2014-07-01 12:31 - 2014-07-01 12:31 - 04229130 _____ () C:\Users\Administrator\Downloads\dsl_803a_752dpw_fw_30.05.219-20121116.bin
2014-07-01 12:29 - 2014-07-01 12:29 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Skype
2014-06-29 14:27 - 2014-06-29 14:27 - 00008446 _____ () C:\Users\Administrator\Downloads\GimmeMoarFrames-master.zip
2014-06-29 14:13 - 2014-06-29 14:13 - 00008195 _____ () C:\Users\Administrator\Downloads\ArmA3mark_28082013.zip (1).7z
2014-06-26 19:56 - 2014-06-27 23:05 - 00000000 ____D () C:\Users\Administrator\Desktop\PDAY+17Tr-LNG_v22.1
2014-06-26 17:23 - 2014-06-26 17:23 - 00000000 ____D () C:\Users\Administrator\Documents\7 Days To Die
2014-06-26 13:53 - 2014-06-26 13:53 - 00328420 _____ () C:\Users\Administrator\Downloads\PAYDAY 2 - Ultimate Trainer v3.0 (Hack&Dev, PierreDjays)_[www.unknowncheats.me]_.rar
2014-06-26 13:48 - 2014-06-26 13:48 - 00337186 _____ () C:\Users\Administrator\Downloads\superficialsuitev26_[www.unknowncheats.me]_.zip
2014-06-26 13:44 - 2014-06-26 13:45 - 16392851 _____ () C:\Users\Administrator\Downloads\PPv15R_[www.unknowncheats.me]_.rar
2014-06-26 13:42 - 2014-06-26 13:42 - 00293691 _____ () C:\Users\Administrator\Downloads\Pay Day 2 Level Hack_[www.unknowncheats.me]_.rar
2014-06-26 13:37 - 2014-06-26 13:37 - 00358029 _____ () C:\Users\Administrator\Downloads\Stealth Suite v0.4_[www.unknowncheats.me]_.rar
2014-06-26 00:54 - 2014-06-26 00:54 - 02521973 _____ () C:\Users\Administrator\Downloads\PDAY+17Tr-LNG_v30.2.rar
2014-06-25 22:50 - 2014-06-25 22:51 - 02463584 _____ () C:\Users\Administrator\Downloads\PDAY+17Tr-LNG_v22.1.rar
2014-06-25 22:28 - 2014-06-25 22:28 - 00304852 _____ () C:\Users\Administrator\Desktop\InjectorPack_[www.unknowncheats.me]_.rar.mwt
2014-06-25 22:27 - 2014-06-25 22:27 - 00328420 _____ () C:\Users\Administrator\Desktop\PAYDAY 2 - Ultimate Trainer v3.0 (Hack&Dev, PierreDjays)_[www.unknowncheats.me]_.rar
2014-06-25 22:23 - 2014-06-25 22:24 - 16392851 _____ () C:\Users\Administrator\Desktop\PPv15R_[www.unknowncheats.me]_.rar
2014-06-25 21:15 - 2014-06-25 22:30 - 00000000 ____D () C:\Users\Administrator\AppData\Local\PAYDAY 2
2014-06-24 16:44 - 2014-06-24 16:44 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Quadriga Games
2014-06-23 16:36 - 2014-06-23 16:36 - 00382459 _____ () C:\Users\Administrator\Downloads\housing.rar
2014-06-23 15:51 - 2014-06-23 15:51 - 00453232 _____ () C:\Users\Administrator\Downloads\CBA_A3_RC1.zip
2014-06-23 15:51 - 2014-06-23 15:51 - 00001682 _____ () C:\Users\Administrator\Downloads\@DEditor_v12.rar
2014-06-23 14:55 - 2014-06-23 14:55 - 00005367 _____ () C:\Users\Administrator\Downloads\@101_editor_vv1.14.0601.rar
2014-06-23 14:00 - 2014-06-23 14:00 - 07563927 _____ () C:\Users\Administrator\Downloads\@mcc_sandbox_r5.rar
2014-06-23 13:59 - 2014-06-23 13:59 - 01413902 _____ () C:\Users\Administrator\Downloads\sample missions.rar
2014-06-21 22:07 - 2014-06-21 22:08 - 22618750 _____ () C:\Users\Administrator\Downloads\MCaRMOD31.7z
2014-06-21 20:06 - 2014-06-21 20:11 - 16970521 _____ () C:\Users\Administrator\Downloads\@DAM.rar
2014-06-17 14:25 - 2014-07-04 12:32 - 00000000 ____D () C:\Users\Administrator\Desktop\11_files
2014-06-17 14:25 - 2014-06-17 14:25 - 00316184 _____ () C:\Users\Administrator\Desktop\11.htm
2014-06-16 15:45 - 2014-06-16 15:46 - 00000470 _____ () C:\Users\Administrator\Downloads\listen-dsl (1).asx
2014-06-16 11:52 - 2014-06-16 11:52 - 00000000 ____D () C:\WINDOWS\system32\Soluto
2014-06-15 14:41 - 2014-06-15 14:54 - 50377528 _____ () C:\Users\Administrator\Downloads\re2-1.0.7.7z.001
2014-06-15 12:40 - 2014-06-15 12:40 - 00000000 ____D () C:\Users\Administrator\.android
2014-06-15 10:49 - 2014-06-15 10:49 - 00000000 ____D () C:\Users\Administrator\VirtualBox VMs
2014-06-15 10:46 - 2014-06-15 15:52 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Genymobile
2014-06-15 10:45 - 2014-06-15 15:52 - 00000000 ____D () C:\Users\Administrator\.VirtualBox
2014-06-15 10:44 - 2014-06-15 10:44 - 00000000 ____D () C:\Program Files\Oracle
2014-06-15 10:42 - 2014-07-09 14:53 - 00001047 _____ () C:\Users\Public\Desktop\Genymotion.lnk
2014-06-15 10:42 - 2014-07-09 14:53 - 00001040 _____ () C:\Users\Public\Desktop\Genymotion Shell.lnk
2014-06-15 10:42 - 2014-07-04 01:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Genymotion
2014-06-15 10:42 - 2014-06-15 10:42 - 00000000 ____D () C:\Program Files\Genymobile
2014-06-15 10:28 - 2014-06-15 10:28 - 02321658 _____ () C:\Users\Administrator\Downloads\de.lotumlabs.questionsforfriendsnorth_quickdownload_330.apk
2014-06-15 10:26 - 2014-06-15 10:39 - 122656544 _____ (Genymobile ) C:\Users\Administrator\Downloads\genymotion-2.2.2-vbox.exe
2014-06-13 21:22 - 2014-06-13 21:22 - 03355384 _____ (Reincubate Ltd) C:\Users\Administrator\Downloads\iphonebackupextractor-latest.exe
2014-06-13 21:22 - 2014-06-13 21:22 - 00001346 _____ () C:\Users\Administrator\Desktop\iPhone Backup Extractor.lnk
2014-06-13 21:22 - 2014-06-13 21:22 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Reincubate
2014-06-13 21:22 - 2014-06-13 21:22 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Reincubate
2014-06-13 20:34 - 2014-07-04 01:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-06-13 20:34 - 2014-06-13 20:34 - 00001795 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-06-13 20:33 - 2014-06-13 20:34 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-06-13 20:33 - 2014-06-13 20:34 - 00000000 ____D () C:\Program Files\iTunes
2014-06-13 20:33 - 2014-06-13 20:34 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-06-13 20:33 - 2014-06-13 20:33 - 00000000 ____D () C:\Program Files\iPod
2014-06-13 20:24 - 2014-06-13 20:24 - 112616784 _____ (Apple Inc.) C:\Users\Administrator\Downloads\iTunes64Setup.exe
2014-06-13 00:55 - 2014-06-13 00:55 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\hpqlog
2014-06-13 00:34 - 2014-06-13 00:34 - 00000924 _____ () C:\Users\Administrator\Downloads\Downloads - Verknüpfung.lnk
         

FRST - Teil 2

==================== One Month Modified Files and Folders =======

2015-07-25 04:24 - 2013-08-21 22:41 - 00000000 ____D () C:\Users\Marcel-\Downloads\Guru3D.com
2014-07-13 12:13 - 2014-07-13 12:12 - 00043144 _____ () C:\Users\Administrator\Downloads\FRST.txt
2014-07-13 12:13 - 2014-05-20 19:55 - 01987962 _____ () C:\WINDOWS\WindowsUpdate.log
2014-07-13 12:12 - 2013-11-24 13:00 - 00000000 ____D () C:\FRST
2014-07-13 12:10 - 2013-07-29 16:37 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-07-13 12:09 - 2014-05-06 12:22 - 00003594 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3786530795-813635038-3550015045-500
2014-07-13 12:07 - 2014-07-13 12:07 - 02086912 _____ (Farbar) C:\Users\Administrator\Downloads\FRST64.exe
2014-07-13 12:07 - 2014-07-13 12:07 - 00000000 ____D () C:\Users\Administrator\Downloads\FRST-OlderVersion
2014-07-13 12:04 - 2013-09-30 06:14 - 01984420 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-07-13 12:04 - 2013-09-30 05:56 - 00843606 _____ () C:\WINDOWS\system32\perfh007.dat
2014-07-13 12:04 - 2013-09-30 05:56 - 00192300 _____ () C:\WINDOWS\system32\perfc007.dat
2014-07-13 12:03 - 2014-07-12 11:31 - 00122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-07-13 12:03 - 2014-02-08 23:20 - 00000406 _____ () C:\WINDOWS\Tasks\bettermarkit_wd.job
2014-07-13 12:03 - 2013-07-29 15:12 - 00001122 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-13 12:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-07-13 11:57 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-07-13 11:56 - 2014-03-30 18:58 - 05112912 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-07-13 11:55 - 2014-05-29 12:45 - 00061686 _____ () C:\WINDOWS\PFRO.log
2014-07-13 11:55 - 2013-08-20 16:40 - 00000000 ____D () C:\WINDOWS\Sun
2014-07-13 11:52 - 2014-07-12 11:38 - 00000000 ____D () C:\AdwCleaner
2014-07-13 11:52 - 2013-12-30 19:42 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-07-13 11:49 - 2013-07-29 15:12 - 00001126 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-13 11:35 - 2014-05-07 19:01 - 00003954 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{C9FAFC92-2B20-4764-8366-96A2BE62BCF4}
2014-07-13 11:19 - 2014-05-06 14:00 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\TS3Client
2014-07-12 19:09 - 2013-08-04 01:00 - 00000000 ____D () C:\Program Files (x86)\BlueStacks
2014-07-12 15:05 - 2014-05-06 12:26 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Arma 3
2014-07-12 15:00 - 2014-07-12 15:00 - 00000222 _____ () C:\Users\Administrator\Desktop\Arma 3.url
2014-07-12 15:00 - 2014-05-06 18:42 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-07-12 14:48 - 2014-07-12 14:48 - 00000975 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-07-12 14:47 - 2014-07-12 14:47 - 01141680 _____ () C:\Users\Administrator\Downloads\SteamSetup.exe
2014-07-12 13:15 - 2014-01-19 13:08 - 00000000 ____D () C:\Program Files (x86)\Casino
2014-07-12 12:16 - 2014-07-12 12:16 - 00000622 _____ () C:\Users\Administrator\Desktop\JRT.txt
2014-07-12 12:07 - 2014-07-12 12:07 - 00035171 _____ () C:\Users\Administrator\Desktop\mbam.txt
2014-07-12 12:06 - 2013-09-15 17:34 - 00000000 ____D () C:\Program Files (x86)\Pagealicious
2014-07-12 11:30 - 2014-07-12 11:30 - 01348263 _____ () C:\Users\Administrator\Downloads\adwcleaner_3.215.exe
2014-07-12 11:30 - 2014-07-12 11:30 - 00001130 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-12 11:30 - 2014-07-12 11:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-07-12 11:30 - 2014-07-12 11:30 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-12 11:30 - 2014-07-12 11:30 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-07-12 11:29 - 2014-07-12 11:29 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Administrator\Downloads\mbam-setup-2.0.2.1012 (2).exe
2014-07-12 11:28 - 2014-07-12 11:28 - 00001111 _____ () C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2014-07-12 11:28 - 2014-07-12 11:28 - 00000000 ____D () C:\Users\Administrator\AppData\Local\VS Revo Group
2014-07-12 11:28 - 2013-12-14 15:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2014-07-12 11:27 - 2014-07-12 11:27 - 10619688 _____ (VS Revo Group ) C:\Users\Administrator\Downloads\RevoUninProSetup.exe
2014-07-12 11:16 - 2014-07-12 11:16 - 00001298 _____ () C:\Users\Administrator\Desktop\Revo Uninstaller.lnk
2014-07-12 11:16 - 2013-11-23 00:24 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-07-12 11:14 - 2014-07-12 11:14 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Administrator\Downloads\revosetup95.exe
2014-07-12 10:56 - 2013-10-16 20:51 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-07-12 10:56 - 2013-08-01 19:39 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-11 15:50 - 2014-07-11 15:48 - 01269712 _____ () C:\WINDOWS\Minidump\071114-48718-01.dmp
2014-07-11 15:49 - 2014-05-06 12:14 - 00000000 ____D () C:\Users\Administrator
2014-07-11 15:48 - 2014-06-02 18:27 - 1036686094 _____ () C:\WINDOWS\MEMORY.DMP
2014-07-11 15:48 - 2014-05-09 15:42 - 00000000 ____D () C:\WINDOWS\Minidump
2014-07-11 13:21 - 2014-07-11 13:21 - 00094121 _____ () C:\Users\Administrator\Downloads\Addition.txt
2014-07-11 13:11 - 2013-12-30 19:42 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-07-11 13:05 - 2014-07-11 13:05 - 00854390 _____ () C:\Users\Administrator\Downloads\SecurityCheck.exe
2014-07-10 23:56 - 2014-07-10 23:56 - 00019178 _____ () C:\Users\Administrator\Downloads\Backup Hack.zip
2014-07-10 23:56 - 2014-07-10 23:56 - 00019178 _____ () C:\Users\Administrator\Downloads\Backup Hack (1).zip
2014-07-10 23:08 - 2014-07-10 23:08 - 01016261 _____ (Thisisu) C:\Users\Administrator\Downloads\JRT (1).exe
2014-07-10 22:49 - 2014-07-10 22:49 - 00020597 _____ () C:\Users\Administrator\Downloads\FRST.rar
2014-07-10 22:31 - 2014-07-10 22:31 - 00380416 _____ () C:\Users\Administrator\Downloads\Gmer-19357.exe
2014-07-10 22:19 - 2014-07-10 22:19 - 00000488 _____ () C:\Users\Administrator\Downloads\defogger_disable.log
2014-07-10 22:19 - 2014-07-10 22:19 - 00000000 _____ () C:\Users\Administrator\defogger_reenable
2014-07-10 22:18 - 2014-07-10 22:18 - 00050477 _____ () C:\Users\Administrator\Downloads\Defogger.exe
2014-07-10 22:13 - 2014-07-10 22:13 - 00961360 _____ (Chip Digital GmbH) C:\Users\Administrator\Downloads\HijackThis - CHIP-Installer.exe
2014-07-10 21:58 - 2014-07-10 21:58 - 28013520 _____ (Wireshark development team) C:\Users\Administrator\Downloads\Wireshark-win64-1.10.8.exe
2014-07-10 21:05 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-07-10 20:57 - 2014-06-08 11:48 - 00046080 ___SH () C:\Users\Administrator\Desktop\Thumbs.db
2014-07-10 20:52 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-07-10 20:45 - 2013-03-04 18:07 - 00000000 ____D () C:\Program Files (x86)\HP SimplePass
2014-07-09 20:15 - 2013-12-26 23:22 - 00000000 ____D () C:\WINDOWS\system32\Drivers\NISx64
2014-07-09 20:03 - 2014-07-09 20:03 - 07719416 _____ (devolo AG) C:\Users\Administrator\Downloads\software-dlan-500-av-wireless-plus-v3-0-0-firmware-updater.exe
2014-07-09 19:56 - 2014-07-09 19:56 - 00002030 _____ () C:\Users\Public\Desktop\devolo dLAN Cockpit.lnk
2014-07-09 19:56 - 2014-07-09 19:56 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\de.devolo.dLAN.Cockpit
2014-07-09 19:56 - 2014-07-09 19:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\devolo
2014-07-09 19:56 - 2014-07-09 19:55 - 00000000 ____D () C:\Program Files (x86)\devolo
2014-07-09 19:55 - 2014-05-06 12:15 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Adobe
2014-07-09 14:53 - 2014-06-15 10:42 - 00001047 _____ () C:\Users\Public\Desktop\Genymotion.lnk
2014-07-09 14:53 - 2014-06-15 10:42 - 00001040 _____ () C:\Users\Public\Desktop\Genymotion Shell.lnk
2014-07-09 14:53 - 2014-04-29 21:18 - 00001062 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2014-07-09 14:41 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-07-09 14:41 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-09 14:41 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-09 14:41 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-07-09 14:35 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-07-09 13:32 - 2014-01-15 21:44 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-07-09 13:32 - 2013-07-29 19:24 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-07-09 13:27 - 2013-07-29 19:24 - 96441528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-07-09 13:21 - 2013-09-30 05:59 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-09 00:37 - 2013-09-15 22:50 - 00000000 ____D () C:\Users\Marcel-\Desktop\Bilder
2014-07-08 21:22 - 2014-07-08 21:22 - 00001147 _____ () C:\Users\Administrator\Desktop\FreePortScanner.lnk
2014-07-08 21:22 - 2014-07-08 21:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreePortScanner
2014-07-08 21:22 - 2014-07-08 21:22 - 00000000 ____D () C:\Program Files (x86)\Nsasoft
2014-07-08 21:18 - 2014-07-08 21:18 - 00598416 _____ (Nsasoft LLC. ) C:\Users\Administrator\Downloads\free-port-scanner_10262.exe
2014-07-08 11:51 - 2014-07-08 11:51 - 01017285 _____ () C:\Users\Administrator\Downloads\ARMA III Alpha Super L33T Menu 4.7 SPJESTER_[www.unknowncheats.me]_.zip
2014-07-07 22:34 - 2014-07-07 22:34 - 00019761 _____ () C:\Users\Administrator\Downloads\313_mpgh.net.rar
2014-07-07 19:40 - 2014-07-07 19:03 - 00000527 _____ () C:\Users\Administrator\Documents\arma3.CT
2014-07-07 18:59 - 2014-07-07 18:59 - 00001107 _____ () C:\Users\Administrator\Desktop\Cheat Engine.lnk
2014-07-07 18:59 - 2014-07-07 18:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.4
2014-07-07 18:59 - 2014-07-07 18:59 - 00000000 ____D () C:\Program Files (x86)\Cheat Engine 6.4
2014-07-07 18:53 - 2014-07-07 18:53 - 09052432 _____ (Cheat Engine ) C:\Users\Administrator\Downloads\CheatEngine64.exe
2014-07-07 18:46 - 2014-07-07 18:46 - 00017100 _____ () C:\Users\Administrator\Downloads\_src.zip
2014-07-07 17:11 - 2014-07-07 17:09 - 00000000 ____D () C:\Program Files (x86)\Quick Memory Editor
2014-07-07 17:09 - 2014-07-07 17:09 - 02125503 _____ (softcows.com ) C:\Users\Administrator\Downloads\Quick Memory Editor.exe
2014-07-07 17:09 - 2014-07-07 17:09 - 00001111 _____ () C:\Users\Marcel-\Desktop\Quick Memory Editor.lnk
2014-07-07 17:09 - 2014-07-07 17:09 - 00001111 _____ () C:\Users\Administrator\Desktop\Quick Memory Editor.lnk
2014-07-07 17:09 - 2014-07-07 17:09 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Quick Memory Editor
2014-07-07 17:09 - 2014-07-07 17:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Quick Memory Editor
2014-07-05 13:52 - 2014-07-05 13:52 - 00002317 _____ () C:\Users\Administrator\Downloads\DayZ Mod & SA ammo Values by ThirtySix.txt
2014-07-05 13:41 - 2014-07-04 12:12 - 00000000 ____D () C:\Users\Administrator\AppData\Local\LogMeIn Rescue Applet
2014-07-05 13:22 - 2014-07-04 17:51 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-07-05 13:22 - 2014-07-04 17:51 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-07-05 13:20 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-07-05 13:20 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-07-04 21:48 - 2014-07-07 22:34 - 00219645 _____ () C:\Users\Administrator\Desktop\313.sqf
2014-07-04 17:51 - 2013-11-24 16:52 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-07-04 17:51 - 2013-07-31 22:50 - 00000000 ____D () C:\temp
2014-07-04 17:50 - 2013-11-24 16:51 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-07-04 17:50 - 2013-11-24 16:51 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-07-04 17:39 - 2014-05-23 00:16 - 00000000 ____D () C:\NVIDIA
2014-07-04 17:35 - 2014-07-01 15:26 - 00000000 ____D () C:\Users\Administrator\Documents\DayZ
2014-07-04 16:05 - 2014-01-03 18:30 - 00000000 ____D () C:\Program Files\KMSpico
2014-07-04 15:35 - 2014-01-10 23:49 - 00000000 ____D () C:\Program Files (x86)\Connectify
2014-07-04 15:35 - 2014-01-10 18:22 - 00000000 ____D () C:\Program Files (x86)\Steganos Privacy Suite 14
2014-07-04 15:35 - 2013-07-29 15:38 - 00000000 ____D () C:\Program Files\Classic Shell
2014-07-04 15:24 - 2013-07-29 17:23 - 00000000 ____D () C:\Program Files (x86)\SpeedFan
2014-07-04 15:23 - 2014-07-04 15:23 - 00000000 ____D () C:\Program Files\Lavasoft
2014-07-04 15:23 - 2014-07-04 15:23 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft
2014-07-04 15:20 - 2014-05-26 16:44 - 00000000 ____D () C:\Users\Administrator\YaCy
2014-07-04 15:01 - 2014-07-04 15:01 - 00000000 ____D () C:\WINDOWS\Panther
2014-07-04 14:55 - 2014-07-04 14:55 - 00000842 _____ () C:\WINDOWS\setupact.log
2014-07-04 14:55 - 2014-07-04 14:55 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-07-04 14:35 - 2014-07-04 14:35 - 00002263 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (6).lnk
2014-07-04 14:30 - 2014-07-04 14:30 - 00000000 ____D () C:\Users\Administrator\AppData\Local\NPE
2014-07-04 12:39 - 2014-07-04 12:39 - 03081712 ____N (Symantec Corporation) C:\Users\Administrator\Downloads\NPE.exe
2014-07-04 12:37 - 2014-07-04 12:15 - 00001436 _____ () C:\Users\Administrator\Desktop\Google Chrome.lnk
2014-07-04 12:32 - 2014-07-04 12:32 - 00002263 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (5).lnk
2014-07-04 12:32 - 2014-06-17 14:25 - 00000000 ____D () C:\Users\Administrator\Desktop\11_files
2014-07-04 12:29 - 2014-01-10 23:45 - 00000000 ____D () C:\ProgramData\eboostr
2014-07-04 12:20 - 2014-07-04 12:20 - 00002263 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (4).lnk
2014-07-04 12:18 - 2012-07-26 10:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP
2014-07-04 12:17 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-07-04 12:15 - 2014-07-04 12:15 - 00002299 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (3).lnk
2014-07-04 12:15 - 2014-07-04 12:15 - 00002299 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (2).lnk
2014-07-04 12:15 - 2014-07-04 12:15 - 00001079 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-07-04 12:15 - 2014-07-04 12:15 - 00001023 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-04 12:15 - 2013-07-29 15:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-04 12:12 - 2014-07-04 12:12 - 00002299 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec.lnk
2014-07-04 12:02 - 2014-07-04 12:01 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Administrator\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-07-04 02:03 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-04 02:03 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-04 02:03 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-04 01:50 - 2014-06-15 10:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Genymotion
2014-07-04 01:50 - 2014-06-13 20:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-07-04 01:50 - 2014-05-29 00:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Process Lasso
2014-07-04 01:50 - 2014-05-29 00:03 - 00000000 ____D () C:\Program Files\Process Lasso
2014-07-04 01:50 - 2014-05-06 16:30 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\vlc
2014-07-04 01:50 - 2014-05-06 12:26 - 00000000 ____D () C:\Users\Administrator\Documents\Arma 3
2014-07-04 01:50 - 2014-05-06 12:18 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Cyberlink SoftDMA
2014-07-04 01:50 - 2014-04-29 21:18 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Clientnew
2014-07-04 01:50 - 2014-03-04 20:12 - 00000000 ____D () C:\ProgramData\SpeedBit
2014-07-04 01:50 - 2014-02-08 23:05 - 00000000 ____D () C:\Users\Marcel-\AppData\Roaming\BitTorrent
2014-07-04 01:50 - 2013-12-26 13:08 - 00000000 ____D () C:\Users\Marcel-\AppData\Local\Cyberlink SoftDMA
2014-07-04 01:50 - 2013-11-24 16:58 - 00000000 ____D () C:\Users\Marcel-
2014-07-04 01:50 - 2013-10-16 17:06 - 00000000 ____D () C:\Users\Marcel-\AppData\Local\Akamai
2014-07-04 01:50 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\WindowsInternal.Inbox.Shared
2014-07-04 01:50 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-07-04 01:50 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-07-04 01:50 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-07-04 01:50 - 2013-08-21 22:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-07-04 01:50 - 2013-07-30 23:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2014-07-04 01:50 - 2013-07-29 17:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-07-04 01:49 - 2014-07-01 13:55 - 00000000 ____D () C:\Users\Administrator\AppData\Local\BrowseEmAll
2014-07-04 01:49 - 2013-07-29 17:33 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-07-04 01:44 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\registration
2014-07-04 01:42 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2014-07-04 01:40 - 2014-05-29 00:03 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\ProcessLasso
2014-07-04 01:40 - 2014-05-28 09:54 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Skype
2014-07-04 01:39 - 2013-07-29 17:32 - 00000000 ____D () C:\ProgramData\Skype
2014-07-04 01:37 - 2013-08-01 19:39 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-07-04 01:21 - 2014-07-03 22:58 - 00000000 ____D () C:\e6aaee25e6e797ecb198316b31d5ca
2014-07-04 01:20 - 2014-07-03 22:35 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-04 01:20 - 2014-07-03 22:35 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-04 01:20 - 2014-07-03 22:35 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-04 01:20 - 2014-07-03 22:35 - 00000000 ____D () C:\Users\Gast
2014-07-04 01:20 - 2014-07-02 17:33 - 00000000 ____D () C:\Users\Administrator\AppData\Local\MetaGeek,_LLC
2014-07-04 01:11 - 2014-07-04 01:11 - 00000000 _____ () C:\Recovery.txt
2014-07-03 23:39 - 2014-07-03 23:39 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Steganos
2014-07-03 23:39 - 2014-07-03 23:39 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Intel Corporation
2014-07-03 23:39 - 2014-07-03 23:39 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\CyberLink
2014-07-03 23:39 - 2014-07-03 23:39 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Adobe
2014-07-03 23:38 - 2014-07-03 23:38 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Synaptics
2014-07-03 23:38 - 2014-07-03 23:38 - 00000000 ____D () C:\Users\Gast\AppData\Local\Adobe
2014-07-03 23:38 - 2014-07-03 22:35 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Apple Computer
2014-07-03 22:36 - 2014-07-03 22:36 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Hewlett-Packard
2014-07-03 22:36 - 2014-07-03 22:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Power2Go8
2014-07-03 22:36 - 2014-07-03 22:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Hewlett-Packard
2014-07-03 22:36 - 2014-07-03 22:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Vorlagen
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Startmenü
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Netzwerkumgebung
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Lokale Einstellungen
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Eigene Dateien
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Druckumgebung
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Documents\Eigene Musik
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Documents\Eigene Bilder
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\AppData\Local\Verlauf
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\AppData\Local\Anwendungsdaten
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Anwendungsdaten
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 ____D () C:\Users\Gast\AppData\Local\NVIDIA Corporation
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 ____D () C:\Users\Gast\AppData\Local\NVIDIA
2014-07-03 22:33 - 2014-07-03 22:33 - 00000095 _____ () C:\WINDOWS\general.log
2014-07-03 22:10 - 2014-07-03 22:10 - 01243655 _____ () C:\Users\Administrator\Downloads\ProcessExplorer_16.02.zip
2014-07-03 22:10 - 2014-07-03 22:10 - 01243655 _____ () C:\Users\Administrator\Downloads\ProcessExplorer_16.02 (1).zip
2014-07-03 21:28 - 2014-07-03 21:27 - 00000000 ____D () C:\ProgramData\MicroWorld
2014-07-02 20:08 - 2014-07-02 20:08 - 00000222 _____ () C:\Users\Administrator\Desktop\Warface.url
2014-07-02 17:31 - 2014-07-02 17:31 - 00000000 ____D () C:\Program Files (x86)\MetaGeek
2014-07-02 15:00 - 2014-07-02 14:58 - 104857600 _____ () C:\Users\Administrator\Downloads\1370091038249.rar
2014-07-02 14:25 - 2013-07-30 12:29 - 00000052 _____ () C:\WINDOWS\SysWOW64\DOErrors.log
2014-07-01 17:20 - 2014-07-01 15:26 - 00000000 ____D () C:\Users\Administrator\AppData\Local\DayZ
2014-07-01 13:36 - 2014-07-01 13:35 - 00000658 _____ () C:\WINDOWS\ie7_main.log
2014-07-01 13:35 - 2014-07-01 13:35 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Mozilla
2014-07-01 13:35 - 2014-07-01 13:35 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Mozilla
2014-07-01 13:35 - 2014-07-01 13:35 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Macromedia
2014-07-01 12:31 - 2014-07-01 12:31 - 04229130 _____ () C:\Users\Administrator\Downloads\dsl_803a_752dpw_fw_30.05.219-20121116.bin
2014-07-01 12:29 - 2014-07-01 12:29 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Skype
2014-06-29 14:27 - 2014-06-29 14:27 - 00008446 _____ () C:\Users\Administrator\Downloads\GimmeMoarFrames-master.zip
2014-06-29 14:13 - 2014-06-29 14:13 - 00008195 _____ () C:\Users\Administrator\Downloads\ArmA3mark_28082013.zip (1).7z
2014-06-27 23:05 - 2014-06-26 19:56 - 00000000 ____D () C:\Users\Administrator\Desktop\PDAY+17Tr-LNG_v22.1
2014-06-26 22:55 - 2014-07-09 13:32 - 00703968 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-06-26 22:55 - 2014-07-09 13:32 - 00105440 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-06-26 17:23 - 2014-06-26 17:23 - 00000000 ____D () C:\Users\Administrator\Documents\7 Days To Die
2014-06-26 16:56 - 2014-01-03 15:09 - 00000000 ____D () C:\Users\Marcel-\Desktop\Bewerbung
2014-06-26 13:53 - 2014-06-26 13:53 - 00328420 _____ () C:\Users\Administrator\Downloads\PAYDAY 2 - Ultimate Trainer v3.0 (Hack&Dev, PierreDjays)_[www.unknowncheats.me]_.rar
2014-06-26 13:48 - 2014-06-26 13:48 - 00337186 _____ () C:\Users\Administrator\Downloads\superficialsuitev26_[www.unknowncheats.me]_.zip
2014-06-26 13:45 - 2014-06-26 13:44 - 16392851 _____ () C:\Users\Administrator\Downloads\PPv15R_[www.unknowncheats.me]_.rar
2014-06-26 13:42 - 2014-06-26 13:42 - 00293691 _____ () C:\Users\Administrator\Downloads\Pay Day 2 Level Hack_[www.unknowncheats.me]_.rar
2014-06-26 13:37 - 2014-06-26 13:37 - 00358029 _____ () C:\Users\Administrator\Downloads\Stealth Suite v0.4_[www.unknowncheats.me]_.rar
2014-06-26 00:54 - 2014-06-26 00:54 - 02521973 _____ () C:\Users\Administrator\Downloads\PDAY+17Tr-LNG_v30.2.rar
2014-06-25 22:51 - 2014-06-25 22:50 - 02463584 _____ () C:\Users\Administrator\Downloads\PDAY+17Tr-LNG_v22.1.rar
2014-06-25 22:30 - 2014-06-25 21:15 - 00000000 ____D () C:\Users\Administrator\AppData\Local\PAYDAY 2
2014-06-25 22:28 - 2014-06-25 22:28 - 00304852 _____ () C:\Users\Administrator\Desktop\InjectorPack_[www.unknowncheats.me]_.rar.mwt
2014-06-25 22:27 - 2014-06-25 22:27 - 00328420 _____ () C:\Users\Administrator\Desktop\PAYDAY 2 - Ultimate Trainer v3.0 (Hack&Dev, PierreDjays)_[www.unknowncheats.me]_.rar
2014-06-25 22:24 - 2014-06-25 22:23 - 16392851 _____ () C:\Users\Administrator\Desktop\PPv15R_[www.unknowncheats.me]_.rar
2014-06-24 16:44 - 2014-06-24 16:44 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Quadriga Games
2014-06-23 16:36 - 2014-06-23 16:36 - 00382459 _____ () C:\Users\Administrator\Downloads\housing.rar
2014-06-23 15:51 - 2014-06-23 15:51 - 00453232 _____ () C:\Users\Administrator\Downloads\CBA_A3_RC1.zip
2014-06-23 15:51 - 2014-06-23 15:51 - 00001682 _____ () C:\Users\Administrator\Downloads\@DEditor_v12.rar
2014-06-23 14:55 - 2014-06-23 14:55 - 00005367 _____ () C:\Users\Administrator\Downloads\@101_editor_vv1.14.0601.rar
2014-06-23 14:00 - 2014-06-23 14:00 - 07563927 _____ () C:\Users\Administrator\Downloads\@mcc_sandbox_r5.rar
2014-06-23 13:59 - 2014-06-23 13:59 - 01413902 _____ () C:\Users\Administrator\Downloads\sample missions.rar
2014-06-21 22:08 - 2014-06-21 22:07 - 22618750 _____ () C:\Users\Administrator\Downloads\MCaRMOD31.7z
2014-06-21 20:11 - 2014-06-21 20:06 - 16970521 _____ () C:\Users\Administrator\Downloads\@DAM.rar
2014-06-19 03:39 - 2014-07-09 12:24 - 23464448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-06-19 02:48 - 2014-07-09 12:24 - 02768384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-06-19 02:16 - 2014-07-09 12:24 - 17276416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-06-19 02:09 - 2014-07-09 12:24 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-06-19 01:51 - 2014-07-09 12:24 - 05721088 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-06-19 01:50 - 2014-07-09 12:24 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-06-19 01:48 - 2014-07-09 12:24 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-06-19 01:46 - 2014-07-09 12:24 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-06-19 01:39 - 2014-07-09 12:24 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-06-19 01:33 - 2014-07-09 12:24 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-06-19 01:32 - 2014-07-09 12:24 - 02179072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-06-19 01:27 - 2014-07-09 12:24 - 02040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-06-19 01:12 - 2014-07-09 12:24 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-06-19 00:59 - 2014-07-09 12:24 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-06-19 00:58 - 2014-07-09 12:24 - 02266112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-06-19 00:58 - 2014-07-09 12:24 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-06-19 00:57 - 2014-07-09 12:24 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-06-19 00:52 - 2014-07-09 12:24 - 04254720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-06-19 00:51 - 2014-07-09 12:24 - 13527040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-06-19 00:49 - 2014-07-09 12:24 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-06-19 00:45 - 2014-07-09 12:24 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-06-19 00:35 - 2014-07-09 12:24 - 11742208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-06-19 00:34 - 2014-07-09 12:24 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-06-19 00:15 - 2014-07-09 12:24 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-06-19 00:13 - 2014-07-09 12:24 - 01791488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-06-19 00:09 - 2014-07-09 12:24 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-06-19 00:07 - 2014-07-09 12:24 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-06-17 14:25 - 2014-06-17 14:25 - 00316184 _____ () C:\Users\Administrator\Desktop\11.htm
2014-06-17 00:26 - 2014-07-09 12:24 - 00779264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osk.exe
2014-06-17 00:24 - 2014-07-09 12:24 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2014-06-16 15:46 - 2014-06-16 15:45 - 00000470 _____ () C:\Users\Administrator\Downloads\listen-dsl (1).asx
2014-06-16 11:52 - 2014-06-16 11:52 - 00000000 ____D () C:\WINDOWS\system32\Soluto
2014-06-15 15:52 - 2014-06-15 10:46 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Genymobile
2014-06-15 15:52 - 2014-06-15 10:45 - 00000000 ____D () C:\Users\Administrator\.VirtualBox
2014-06-15 14:54 - 2014-06-15 14:41 - 50377528 _____ () C:\Users\Administrator\Downloads\re2-1.0.7.7z.001
2014-06-15 14:46 - 2014-01-10 19:24 - 00000022 _____ () C:\Users\Marcel-\Downloads\foto.zip
2014-06-15 14:45 - 2014-04-05 14:29 - 00002816 _____ () C:\Users\Marcel-\Downloads\Nicht bestätigt 90835.crdownload
2014-06-15 12:40 - 2014-06-15 12:40 - 00000000 ____D () C:\Users\Administrator\.android
2014-06-15 10:49 - 2014-06-15 10:49 - 00000000 ____D () C:\Users\Administrator\VirtualBox VMs
2014-06-15 10:44 - 2014-06-15 10:44 - 00000000 ____D () C:\Program Files\Oracle
2014-06-15 10:42 - 2014-06-15 10:42 - 00000000 ____D () C:\Program Files\Genymobile
2014-06-15 10:39 - 2014-06-15 10:26 - 122656544 _____ (Genymobile ) C:\Users\Administrator\Downloads\genymotion-2.2.2-vbox.exe
2014-06-15 10:28 - 2014-06-15 10:28 - 02321658 _____ () C:\Users\Administrator\Downloads\de.lotumlabs.questionsforfriendsnorth_quickdownload_330.apk
2014-06-13 21:22 - 2014-06-13 21:22 - 03355384 _____ (Reincubate Ltd) C:\Users\Administrator\Downloads\iphonebackupextractor-latest.exe
2014-06-13 21:22 - 2014-06-13 21:22 - 00001346 _____ () C:\Users\Administrator\Desktop\iPhone Backup Extractor.lnk
2014-06-13 21:22 - 2014-06-13 21:22 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Reincubate
2014-06-13 21:22 - 2014-06-13 21:22 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Reincubate
2014-06-13 20:35 - 2014-05-06 12:14 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Apple Computer
2014-06-13 20:34 - 2014-06-13 20:34 - 00001795 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-06-13 20:34 - 2014-06-13 20:33 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-06-13 20:34 - 2014-06-13 20:33 - 00000000 ____D () C:\Program Files\iTunes
2014-06-13 20:34 - 2014-06-13 20:33 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-06-13 20:33 - 2014-06-13 20:33 - 00000000 ____D () C:\Program Files\iPod
2014-06-13 20:33 - 2013-08-12 01:06 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-06-13 20:24 - 2014-06-13 20:24 - 112616784 _____ (Apple Inc.) C:\Users\Administrator\Downloads\iTunes64Setup.exe
2014-06-13 04:59 - 2014-07-04 17:44 - 01890264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6434043.dll
2014-06-13 04:59 - 2014-07-04 17:44 - 01542088 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6434043.dll
2014-06-13 04:59 - 2014-07-04 17:44 - 00026353 _____ () C:\WINDOWS\system32\nvinfo.pb
2014-06-13 04:48 - 2014-07-04 17:44 - 13911928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 13824408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 11272544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 11211224 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 04248520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 03989464 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 00946120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 00909256 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 00902616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 00869336 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 00391456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 00348120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 31512352 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 24198616 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 18625768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 17553032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 16122344 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 14497528 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 12860888 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2014-06-13 04:47 - 2014-07-04 17:44 - 00502048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 00417568 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 00033736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys
2014-06-13 04:46 - 2014-07-04 17:44 - 22994392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2014-06-13 04:46 - 2014-07-04 17:44 - 15294296 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2014-06-13 04:46 - 2014-07-04 17:44 - 02814120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2014-06-13 04:46 - 2014-07-04 17:44 - 00965312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2014-06-13 04:46 - 2014-07-04 17:44 - 00846832 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2014-06-13 04:46 - 2014-07-04 17:44 - 00354016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2014-06-13 04:46 - 2014-07-04 17:44 - 00305600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2014-06-13 04:46 - 2014-07-04 17:44 - 00166568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2014-06-13 04:46 - 2014-07-04 17:44 - 00146480 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2014-06-13 04:45 - 2014-07-04 17:44 - 03196304 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2014-06-13 04:11 - 2014-07-04 17:50 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2014-06-13 04:11 - 2014-07-04 17:50 - 00062808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2014-06-13 04:11 - 2013-12-11 20:21 - 01083736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2014-06-13 04:11 - 2013-11-24 16:52 - 06783960 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2014-06-13 04:11 - 2013-11-24 16:52 - 03523360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2014-06-13 04:11 - 2013-11-24 16:52 - 02560968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2014-06-13 04:11 - 2013-11-24 16:52 - 00933208 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2014-06-13 04:11 - 2013-11-24 16:52 - 00387528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2014-06-13 00:55 - 2014-06-13 00:55 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\hpqlog
2014-06-13 00:34 - 2014-06-13 00:34 - 00000924 _____ () C:\Users\Administrator\Downloads\Downloads - Verknüpfung.lnk

Files to move or delete:
====================
C:\Users\Marcel-\FireDepartment3_setup.exe


Some content of TEMP:
====================
C:\Users\Administrator\AppData\Local\Temp\Quarantine.exe
C:\Users\Marcel-\AppData\Local\Temp\BatteryBarSetup-3.6.3.exe
C:\Users\Marcel-\AppData\Local\Temp\SkypeSetup.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-04 21:14

==================== End Of Log ============================
         

Addition -

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-07-2014
Ran by Administrator at 2014-07-13 12:17:36
Running from C:\Users\Administrator\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Norton Internet Security (Enabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
AS: Norton Internet Security (Enabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466}
FW: Norton Internet Security (Enabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}

==================== Installed Programs ======================

1.0 (HKLM-x32\...\Pagealicious_is1) (Version: 1.0.0.0 - ) <==== ATTENTION
337 GAMES (HKCU\...\337Games) (Version: 1.1.1.0 - )
3DMark 11 (HKLM-x32\...\{46EDCFA5-7EDB-46A9-B093-1C6237470CEC}) (Version: 1.0.5 - Futuremark Corporation)
Acronis Drive Monitor (HKLM-x32\...\{706AE61D-40A4-4F50-8359-FE8F6F7FA461}) (Version: 1.0.566 - Acronis)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 14.0.0.110 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 14.0.0.110 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.05) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.05 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.9.149 - Adobe Systems, Inc.)
AIDA64 Extreme v4.20 (HKLM-x32\...\AIDA64 Extreme_is1) (Version: 4.20 - FinalWire Ltd.)
AkkuLine Batterie-Tool (HKLM-x32\...\{5FF02438-DDE5-4D8E-8291-577CC1A2C014}) (Version: 1.0.0 - AkkuLine.de)
AllDup 3.4.24 (HKLM-x32\...\AllDup_is1) (Version: 3.4.24 - Michael Thummerer Software Design)
AntimalwareEngine (Version: 2.6.0.0 - Lavasoft) Hidden
Apple Application Support (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Applon (HKLM-x32\...\Applon) (Version:  - Applon)
Arma 3 (HKLM-x32\...\Steam App 107410) (Version:  - Bohemia Interactive)
Ashampoo WinOptimizer 10 v.10.3.0 (HKLM-x32\...\{4209F371-88D4-AB00-ED2B-D6520C84D9D5}_is1) (Version: 10.03.00 - Ashampoo GmbH & Co. KG)
AuthenTec TrueAPI 64-bit (Version: 1.6.0.87 - AuthenTec, Inc.) Hidden
AutoHotkey 1.1.14.03 (HKLM\...\AutoHotkey) (Version: 1.1.14.03 - Lexikos)
Azureus (HKLM-x32\...\Azureus) (Version: 2.5.0.4 - )
BatteryBar (remove only) (HKLM\...\BatteryBar) (Version:  - )
BatteryCare 0.9.16.0 (HKLM-x32\...\{C6A6036D-FBD0-4324-BEAA-C0845257160C}_is1) (Version: 0.9.16.0 - Filipe Lourenço)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.0 - EA Digital Illusions CE AB)
BinMake Uninstall (HKLM-x32\...\BinMake) (Version:  - )
BinPBO Personal Edition Uninstall (HKLM-x32\...\BinPBO Personal Edition) (Version:  - )
BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.7.16.910 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM-x32\...\{FB93553A-CBA7-44FE-BD70-A996C859DD06}) (Version: 0.7.16.910 - BlueStack Systems, Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
bwin Download Casino (HKLM-x32\...\bwincomCasino) (Version:  - bwincom)
bwin Poker (HKLM-x32\...\bwincomPoker) (Version:  - bwincom)
Camtasia Studio 8 (HKLM-x32\...\{8F6F7194-0734-4CDA-8C04-6B766F2241A6}) (Version: 8.0.4.1060 - TechSmith Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 4.07 - Piriform)
Cheat Engine 6.3 (HKLM-x32\...\Cheat Engine 6.3_is1) (Version:  - Cheat Engine)
Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version:  - Cheat Engine)
Classic Shell (HKLM\...\{FEA1590B-540A-41FC-A95C-664493C82A21}) (Version: 3.6.8 - IvoSoft)
Cleaning Suite v2.1 (HKLM-x32\...\Cleaning Suite_is1) (Version:  - ASCOMP Software GmbH)
Connected Music powered by Universal Music Group version 1.0 (HKLM-x32\...\{46037DC7-F927-46DF-935F-D6F122BDD34B}_is1) (Version: 1.0 - Snowite)
Connectify (HKLM\...\Connectify) (Version: 7.2.1.29658 - Connectify)
ConvertHelper 2.2 (HKLM-x32\...\{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1) (Version:  - DownloadHelper)
Core Temp 1.0 RC5 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.0 - Alcpu)
Craften Terminal Beta 3.4.5005.37007 (HKLM-x32\...\{4e7c3936-7c06-4ef0-928b-c5d92f372578}_is1) (Version: 3.4.5005.37007 - Craften.de)
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.4.6515 - CyberLink Corp.)
CyberLink LabelPrint (x32 Version: 2.5.4.6515 - CyberLink Corp.) Hidden
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.5.3606 - CyberLink Corp.)
CyberLink Media Suite 10 (x32 Version: 10.0.5.3606 - CyberLink Corp.) Hidden
CyberLink PhotoDirector (HKLM-x32\...\InstallShield_{4862344A-A39C-4897-ACD4-A1BED5163C5A}) (Version: 2.0.2.3317 - CyberLink Corp.)
CyberLink PhotoDirector (x32 Version: 2.0.2.3317 - CyberLink Corp.) Hidden
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.3.2527 - CyberLink Corp.)
CyberLink Power2Go 8 (x32 Version: 8.0.3.2527 - CyberLink Corp.) Hidden
CyberLink PowerDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.8.5511 - CyberLink Corp.)
CyberLink PowerDVD (x32 Version: 10.0.8.5511 - CyberLink Corp.) Hidden
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.5.6.6119 - CyberLink Corp.)
CyberLink YouCam (x32 Version: 3.5.6.6119 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{043645C8-48EC-458F-B9BD-9C8F15CEF6F7}) (Version:  - Microsoft)
Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D1C35197-B856-45E2-BA67-5ABB6B0CA9C2}) (Version:  - Microsoft)
Defraggler (HKLM\...\Defraggler) (Version: 2.16 - Piriform)
Desktop Media 1.7 (HKLM-x32\...\Desktop Media_is1) (Version:  - Ian Perez)
devolo dLAN Cockpit (HKLM-x32\...\dlancockpit) (Version: 3.2.0.0 - devolo AG)
Die Sims™ 3 Late Night (HKLM-x32\...\{45057FCE-5784-48BE-8176-D9D00AF56C3C}) (Version: 6.5.1 - Electronic Arts)
Die Sims™ 3 Luxus-Accessoires (HKLM-x32\...\{71828142-5A24-4BD0-97E7-976DA08CE6CF}) (Version: 3.0.38 - Electronic Arts)
Die*Sims™*3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.42.130 - Electronic Arts)
dLAN Cockpit (x32 Version: 3.2.28 - devolo AG) Hidden
Download.am (HKLM-x32\...\Download.am) (Version:  - )
Downloader (HKLM-x32\...\Downloader) (Version:  - )
Driver Manager v1.02 (HKLM-x32\...\Driver Manager_is1) (Version:  - L5 Software Group, LLC)
DriverAgent by eSupport.com (HKLM-x32\...\DriverAgent_is1) (Version:  - Copyright © 2013 eSupport.com, Inc • All Rights Reserved)
EasyBCD 2.2 (HKLM-x32\...\EasyBCD) (Version: 2.2 - NeoSmart Technologies)
eBesucher Restarter 1.2 (HKLM-x32\...\{3F099090-131B-4D94-97CF-6FD738F51C01}_is1) (Version: 1.2.04.0 - eBesucher)
eBoostr 4 (HKLM\...\eBoostr 1) (Version: 4.5 - eBoostr)
Energy Star (HKLM-x32\...\{FC0ADA4D-8FA5-4452-8AFF-F0A0BAC97EF7}) (Version: 1.0.9 - Hewlett-Packard Company)
ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
Fake Webcam 7.3 (HKLM-x32\...\fakewebcam7.3.0_is1) (Version: 7.3.0 - Web Solution Mart)
Fake Webcam Codecs Pack 1.0.0 (HKLM\...\fwccpsetup_is1) (Version: 1.0.0 - Web Solution Mart)
Far Cry 3 (HKLM-x32\...\{E3B9C5A9-BD7A-4B56-B754-FAEA7DD6FA88}) (Version: 1.05 - Ubisoft)
Far Cry 3 Digital Deluxe Edition DLC (HKLM-x32\...\Digital Deluxe Edition DLC_is1) (Version: 1.0 - Ubisoft)
FileViewPro (HKLM\...\FileViewPro_is1) (Version: 4.0 - Solvusoft Corporation)
FileZilla Client 3.2.7.1 (HKLM-x32\...\FileZilla Client) (Version: 3.2.7.1 - )
Fire Department 3 (HKLM-x32\...\Fire Department 3_is1) (Version:  - Metaboli)
Folderico 4.0 RC12 (HKLM-x32\...\Folderico) (Version: 4.0 RC12 - Shedko ( www.softq.org ))
FormatFactory 3.1.1 (HKLM-x32\...\FormatFactory) (Version: 3.1.1 - Free Time)
Fotogalerie (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Free Mouse Auto Clicker 3.1 (HKLM-x32\...\{7D9D583E-EC8B-4390-B3A4-017B8182C8FF}_is1) (Version:  - Advanced Mouse Auto Clicker ltd.)
Free YouTube to MP3 Converter version 3.12.16.1030 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.16.1030 - DVDVideoSoft Ltd.)
FreePortScanner 2.8.4 (HKLM-x32\...\FreePortScanner_is1) (Version:  - Nsasoft LLC.)
FreshDiagnose (HKLM-x32\...\FreshDevices - FreshDiagnose_is1) (Version:  - )
FreshDownload (HKLM-x32\...\FreshDevices - FreshDownload_is1) (Version:  - )
FSM Editor Personal Edition Uninstall (HKLM-x32\...\FSM Editor Personal Edition) (Version:  - )
Futuremark SystemInfo (HKLM-x32\...\{BEE64C14-BEF1-4610-8A68-A16EAA47B882}) (Version: 4.17.0 - Futuremark Corporation)
Genie Timeline (HKLM-x32\...\Genie Timeline) (Version: 4.0 - Genie9)
Genymotion version 2.2.2 (HKLM\...\{6D180286-D4DF-40EF-9227-923B9C07C08A}_is1) (Version: 2.2.2 - Genymobile)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
Grand Theft Auto IV (HKLM-x32\...\{579BA58C-F33D-4970-9953-B94B43768AC3}) (Version: 1.00.0000 - Rockstar Games)
Grand Theft Auto IV (x32 Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden
Grepo (HKLM-x32\...\Grepo) (Version:  - Grepo)
GrFinger Desktop Identity 1.1 (HKLM-x32\...\{37d8695b-ab6c-40a9-97a2-f7a4813f53ad}_is1) (Version: 1.1 - Griaule Biometrics.)
GrFinger Desktop Login 1.1.0 (HKLM-x32\...\{11E1DD13-311D-474C-92C8-2E531A996B0D}_is1) (Version: 1.1.0 - Griaule Biometrics.)
Hewlett-Packard ACLM.NET v1.2.1.1 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
Hex-Editor MX (HKLM-x32\...\{7FC7AD70-1DF3-4B84-9AA2-4FB680F45572}_is1) (Version: 6.0 - NEXT-Soft)
HitFilm 2 Express (HKLM\...\{A6E81EFB-2A19-4B5B-8C48-D4E5DB3AD547}) (Version: 2.0.2522.46168 - FXhome)
HomeTab 3.7 (HKLM-x32\...\{3a4935b3-b7a0-4065-8ccc-0030471b33f1}_is1) (Version: 3.7 - HomeTab) <==== ATTENTION
HP 3D DriveGuard (HKLM\...\{AB5BCC55-18E2-46C7-9405-FF61CB888F05}) (Version: 4.2.9.1 - Hewlett-Packard Company)
HP Connected Music (Meridian - installer) (HKLM-x32\...\StartHPConnectedMusic) (Version: v1.0 - Meridian Audio Ltd)
HP Connected Remote (HKLM-x32\...\{F243A34B-AB7F-4065-B770-B85B767C247C}) (Version: 1.7.271 - Hewlett-Packard)
HP CoolSense (HKLM-x32\...\{59F8C5AA-91BD-423D-BF05-09A80F39898F}) (Version: 2.10.62 - Hewlett-Packard Company)
HP Customer Experience Enhancements (x32 Version: 6.0.1.7 - Hewlett-Packard) Hidden
HP Deskjet 2050 J510 series - Grundlegende Software für das Gerät (HKLM\...\{DF37555F-0259-43DA-B60C-47106FA14AA3}) (Version: 28.0.1313.0 - Hewlett-Packard Co.)
HP Deskjet 2050 J510 series Hilfe (HKLM-x32\...\{7A3DF2E2-CF13-44FB-A93E-F71D5381DB3F}) (Version: 140.0.61.61 - Hewlett Packard)
HP Documentation (HKLM-x32\...\{53D3E126-699A-4D92-AA66-6560D573553E}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Postscript Converter (Version: 3.1.3591 - Hewlett-Packard) Hidden
HP Quick Launch (HKLM-x32\...\{E5823036-6F09-4D0A-B05C-E2BAA129288A}) (Version: 3.0.6 - Hewlett-Packard Company)
HP Recovery Manager (x32 Version: 8.00 - Hewlett-Packard) Hidden
HP Registration Service (HKLM\...\{C2E428EB-116E-41C0-9E84-B22DE9CCA42F}) (Version: 1.1.6232.4245 - Hewlett-Packard)
HP SimplePass (HKLM-x32\...\{4BACA3B8-F63A-44ED-9A8D-48B4D02AD268}) (Version: 6.0.100.276 - Hewlett-Packard)
HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
HP Utility Center (HKLM\...\{2AFEFC93-F0C7-4390-BB51-F914EC546B30}) (Version: 2.1.6 - Hewlett-Packard Company)
HP Wireless Button Driver (HKLM-x32\...\{30B2D1D8-0A07-4B71-9553-0710C5D31E35}) (Version: 1.1.2.1 - Hewlett-Packard Company)
iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.)
iDevice Manager (HKLM-x32\...\FE5AE7DC-7B01-4263-A94C-B4526C276550_is1) (Version: 3.2.3.0 - Marx Software)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6482.0 - IDT)
iFunbox (v2.7.2386.747), iFunbox DevTeam (HKLM-x32\...\iFunbox_is1) (Version: v2.7.2386.747 - )
Infestation Survivor Stories version 1.0 (HKLM-x32\...\{BC3051A7-1021-4B57-A3DA-AAC24566FAE7}_is1) (Version: 1.0 - OP Productions LLC)
Intel Extreme Tuning Utility (HKLM-x32\...\{1bcf77e1-2519-41dc-a594-9936f5f42203}) (Version: 4.2.0.8 - Intel Corporation)
Intel Extreme Tuning Utility (x32 Version: 4.2.0.8 - Intel Corporation) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation)
Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.36943 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.3.1520 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3379 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.9.1002 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.27.798.1 - Intel Corporation) Hidden
Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\{3FD0C489-0F02-481a-A3E1-9754CD396761}) (Version:  - Intel Corporation)
iPhone Backup Extractor (HKCU\...\iPhone Backup Extractor) (Version: 4.9.23.0 - Reincubate Ltd)
iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.)
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
KMSpico 3.1 (HKLM\...\KMSpico v3.1_is1) (Version: 3.1 - )
La Riviera Casino English (HKLM-x32\...\{db038d9f-a724-4409-84be-685fce5c604f}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Lagarith lossless video codec (Remove Only) (HKLM\...\LAGARITH) (Version:  - )
Lansweeper (HKLM-x32\...\Lansweeper_is1) (Version: 5.1 - Lansweeper.com)
LastPass(uninstall only) (HKLM-x32\...\LastPass) (Version:  - LastPass)
Logitech Gaming Software (Version: 8.45.88 - Logitech Inc.) Hidden
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Mediatek Bluetooth (HKLM\...\{66D292E3-6228-3AF1-EDED-6D53C63DBCB7}) (Version: 11.0.748.2 - Mediatek)
Microsoft Access MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft DCF MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Excel MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Groove MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Lync MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office 32-bit Components 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Office 32-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft OneNote MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Publisher MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{90ffcee5-8608-4e94-8c18-a4feb4f83fb8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Windows 8 ESU (HKLM-x32\...\{E7E058CF-4638-49D4-936D-AC6DAE3B002E}) (Version: 1.1.1 - Hewlett-Packard)
Microsoft Word MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Mighty Slots (HKLM-x32\...\{565493c1-3580-4f39-ba73-f4c375f5e9bd}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Migration System Updater RBP (HKLM-x32\...\Migration System Updater RBP) (Version: 1.2.0.0 - )
MiPony 2.1.0 (HKLM-x32\...\MiPony) (Version: 2.1.0 - )
Movie Maker (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Mozilla Firefox 26.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 26.0 (x86 de)) (Version: 26.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 26.0 - Mozilla)
MPC-HC 1.7.0 (HKLM-x32\...\{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1) (Version: 1.7.0.7858 - MPC-HC Team)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1108.0727 - Microsoft) Hidden
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
Mummys Gold Casino (HKLM-x32\...\mummysgold) (Version: 16.6.1.11212 - )
NetMeter 1.1.4 BETA (HKLM-x32\...\NetMeter_is1) (Version:  - ReadError)
NetSpeedMeter (HKLM-x32\...\NetSpeedMeter) (Version: 0.9 - )
NetWorx 5.2.11 (HKLM\...\NetWorx_is1) (Version:  - Softperfect Research)
Norton Internet Security (HKLM-x32\...\NIS) (Version: 21.3.0.12 - Symantec Corporation)
Notebook Hardware Control 2.0 Pre-Release-06 Bugfix (HKLM-x32\...\Notebook Hardware Control) (Version: 2.0 Pre-Release-06 Bugfix - Manfred Jaider)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.5 - Notepad++ Team)
NTREGOPT 1.1j (HKLM-x32\...\NTREGOPT_is1) (Version:  - Lars Hederer)
NVIDIA GeForce Experience 2.0.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.0.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 340.43 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.43 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.157.1165 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Optimus Update 12.4.67 (Version: 12.4.67 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA ShadowPlay 12.4.67 (Version: 12.4.67 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 340.43 (Version: 340.43 - NVIDIA Corporation) Hidden
NVIDIA Update 12.4.67 (Version: 12.4.67 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 12.4.67 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.23 (Version: 1.2.23 - NVIDIA Corporation) Hidden
OpenVPN 2.2.2 (HKLM-x32\...\OpenVPN) (Version: 2.2.2 - )
Opera Stable 20.0.1387.91 (HKLM-x32\...\Opera 20.0.1387.91) (Version: 20.0.1387.91 - Opera Software ASA)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Overwolf (HKLM-x32\...\{0A337036-B73E-4C85-8D32-3851F84B7CFE}) (Version: 0.46.271 - Overwolf)
Oxygen 2 Personal Edition Uninstall (HKLM-x32\...\Oxygen 2 Personal Edition) (Version:  - )
Pagealicious (HKLM-x32\...\Pagealicious) (Version:  - Pagealicious) <==== ATTENTION
Paint.NET v3.5.11 (HKLM\...\{72EF03F5-0507-4861-9A44-D99FD4C41418}) (Version: 3.61.0 - dotPDN LLC)
Palace Of Chance (HKLM-x32\...\{f51a5449-9174-4e90-a0b2-bd67e0a9a87e}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Paros 3.2.13 (HKLM-x32\...\Paros_is1) (Version:  - parosproxy.org)
PBO Manager v.1.4 beta (HKLM\...\{127B5371-1802-4EDD-A25A-A43BF761D383}) (Version: 1.4.0 -  )
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
PDF24 Creator 6.1.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
PhotoME Beta-Release (HKLM-x32\...\PhotoME Beta-Release_is1) (Version: 0.8ß2 - Jens Duttke)
Platinum Play Online (HKLM-x32\...\platinumplay) (Version: 16.9.2.739 - )
Plenty Jackpot (HKLM-x32\...\{f748bdcf-1691-49d4-b5a6-20abf8d9d2b9}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Plus500 (HKLM-x32\...\Plus500) (Version:  - )
PokerStars.eu (HKLM-x32\...\PokerStars.eu) (Version:  - PokerStars.eu)
PremiumSoft Navicat Data Modeler 1.0 (HKLM-x32\...\PremiumSoft Navicat Data Modeler_is1) (Version: 1.0.12 - PremiumSoft CyberTech Ltd.)
Process Lasso (HKLM-x32\...\ProcessLasso) (Version: 6.7.0.52 - Bitsum)
Project 64 version 2.1.0.1 (HKLM-x32\...\Project 64_is1) (Version: 2.1.0.1 - )
Protector Suite 2012 (HKLM\...\{C767056D-3CE2-442D-BC78-F05E94F450D0}) (Version: 5.9.8.7279 - Authentec Inc.)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Quatro Casino (HKLM-x32\...\quatro) (Version: 16.9.2.739 - )
Quick Memory Editor 5.5 (HKLM-x32\...\Quick Memory Editor_is1) (Version:  - softcows.com)
QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
Ralink RT3290 802.11bgn Wi-Fi Adapter (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 5.0.37.0 - Mediatek)
Real Vegas Online USD German (HKLM-x32\...\{fc52c158-f28f-477d-a59d-0ace8b0e212c}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.2.612.2012 - Realtek)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.2.8400.29034 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.49 - Piriform)
Registry System Wizard.NET (HKLM\...\{110ED870-1DF3-4574-A679-E2C4A8163211}_is1) (Version: 0.13.731.51 - WinFAQ)
RegRunner 3.2.2009.5 (HKLM-x32\...\RegRunner2009_is1) (Version:  - Bernd Dietzel)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Revo Uninstaller Pro 3.0.8 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.0.8 - VS Revo Group, Ltd.)
RoboForm 7-9-3-9 (All Users) (HKLM-x32\...\AI RoboForm) (Version: 7-9-3-9 - Siber Systems)
ROCCAT Kone Pure Mouse Driver (HKLM-x32\...\{4905245D-56E7-4176-BE68-962728B803D6}) (Version:  - Roccat GmbH)
ROCCAT Talk Driver (HKLM-x32\...\{0B2044E4-B4A7-4413-ABB1-99E04C7DF405}) (Version:  - Roccat GmbH)
Roulette Bot Plus (HKLM-x32\...\RBPlus) (Version: 1.3.8.4 - www.roulettebotplus.com)
RoulettePilot (HKLM-x32\...\{54AA4107-5A3C-4E97-893E-735D5127BB73}) (Version: 1.3.94 - JemeSoft)
Royal Vegas (HKLM-x32\...\royalvegas) (Version: 16.9.2.739 - )
RubySlots (HKLM-x32\...\{137b5d7d-6afe-4b69-be23-b2e949c20065}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Secunia PSI (3.0.0.9016) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia)
Security Task Manager 1.8d (HKLM-x32\...\Security Task Manager) (Version: 1.8d - Neuber Software)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version:  - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (Version:  - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version:  - Microsoft) Hidden
SHIELD Streaming (Version: 2.1.108 - NVIDIA Corporation) Hidden
SiSoftware Sandra Lite 2014.RTM (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2396}_is1) (Version: 20.10.2014.2 - SiSoftware)
Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Slot Nuts (HKLM-x32\...\{4f250443-a5ef-43a3-984b-972bc15c69d9}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Slotocash Casino (HKLM-x32\...\{7d1d90b3-acd3-49de-9bce-079aef80ef9b}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Slots Inferno (HKLM-x32\...\{ef159e9a-ca8c-4e71-bf97-d1f4eec75004}) (Version: 13.1.0-RTG - RealTimeGaming Software)
SoftDMA (HKLM-x32\...\{AA4BF92B-2AAF-11DA-9D78-000129760D75}) (Version: 2.0.6729 - CyberLink Corp.)
Soluto (HKLM\...\{223FA2A7-10F3-4F74-900C-154C98F81687}) (Version: 1.3.1414.1 - Soluto)
Sophos Virus Removal Tool (HKLM-x32\...\{B829E117-D072-41EA-9606-9826A38D34C1}) (Version: 2.4 - Sophos Limited)
Sound Tools Uninstall (HKLM-x32\...\Sound Tools) (Version:  - )
SpeedBit Video Accelerator (HKLM-x32\...\SpeedBit Video Accelerator) (Version: 3380(build_3064) - SpeedBit Ltd.)
Spin Palace Casino (HKLM-x32\...\spinpalace) (Version: 16.8.3.393 - )
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
Steganos Privacy Suite 14 (HKLM-x32\...\{9F07D3B6-3801-4C33-B20E-39CC29E63253}) (Version: 14.2.1 - Steganos Software GmbH)
Studie zur Verbesserung von HP Deskjet 2050 J510 series Produkten (HKLM\...\{C559DE9F-9451-49E5-9176-316E36192409}) (Version: 28.0.1313.0 - Hewlett-Packard Co.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.15.0 - Synaptics Incorporated)
System Requirements Lab CYRI (HKLM-x32\...\{F3FCB08B-E752-444D-86A0-0634A4F3B23D}) (Version: 6.0.8.0 - Husdawg, LLC)
System Requirements Lab Detection (HKLM-x32\...\{A407FC22-36BF-4C82-A516-59D94BC505A9}) (Version: 1.0.5.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TexView 2 Uninstall (HKLM-x32\...\TexView 2) (Version:  - )
Tiny Media Player v1.0 (HKLM-x32\...\Tiny Media Player_is1) (Version: 1.0.0.0 - ) <==== ATTENTION
Tom Clancy's Splinter Cell® Blacklist™ (HKLM-x32\...\{A6356F2F-D3E1-4D83-9AA2-72871DD0C298}) (Version: 1.03 - Ubisoft)
TrueCrypt (HKLM-x32\...\TrueCrypt) (Version: 7.1a - TrueCrypt Foundation)
Tweaking.com - Windows Repair (All in One) (HKLM-x32\...\Tweaking.com - Windows Repair (All in One)) (Version: 2.7.1 - Tweaking.com)
UDPixel.exe (HKLM-x32\...\UDPixel) (Version:  - )
UltraISO Premium V9.53 (HKLM-x32\...\UltraISO_is1) (Version:  - )
Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
Update for Microsoft Access 2010 (KB2553446) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{FEF4C57D-0975-4D3C-ACC7-DCD038C3788F}) (Version:  - Microsoft)
Update for Microsoft Excel 2010 (KB2837600) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{17815BC8-062D-49BE-B40C-B54149C85CE3}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2881085) 64-Bit Edition (HKLM\...\{90150000-0016-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{58D92858-3C94-4C2F-A8E4-AEFF9304C3CF}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2881085) 64-Bit Edition (HKLM\...\{90150000-0018-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{58D92858-3C94-4C2F-A8E4-AEFF9304C3CF}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2881085) 64-Bit Edition (HKLM\...\{90150000-001B-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{58D92858-3C94-4C2F-A8E4-AEFF9304C3CF}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2881085) 64-Bit Edition (HKLM\...\{90150000-00C1-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{58D92858-3C94-4C2F-A8E4-AEFF9304C3CF}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2881085) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{58D92858-3C94-4C2F-A8E4-AEFF9304C3CF}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{84B191B5-5319-463A-A305-8C4D53B1D20A}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{DB0B0CDF-77EC-47B0-94E2-4738573A1E58}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817396) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{1AA82E2E-7DB7-4C70-910C-BBB657A6B3A5}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2850074) 64-Bit Edition (HKLM\...\{90150000-012B-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{CE9A9D7C-B6FB-4F6C-8BDE-9A1ADBBAC1EE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553092) (HKLM\...\{90140000-0044-0407-1000-0000000FF1CE}_Office14.PROPLUSR_{E636FE63-842B-4F4B-9884-DA189ACC0B91}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553092) (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{E636FE63-842B-4F4B-9884-DA189ACC0B91}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{79C725A1-3964-421C-A528-78C1C083C7C7}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{95BE5D45-A3DD-4CB1-8C35-D75DD7B4D862}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{95BE5D45-A3DD-4CB1-8C35-D75DD7B4D862}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{EBD18DE5-BC84-4B57-9A30-097044871F9A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{4AD36582-256B-433D-8593-F31773A15CA4}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{4AD36582-256B-433D-8593-F31773A15CA4}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{F216169C-2B40-429B-8370-B5BA06EC5423}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{F216169C-2B40-429B-8370-B5BA06EC5423}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{B6AD7E27-012A-4B63-82BA-AF62893E5435}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{07DC9C6C-E916-4F42-8677-716930ED0393}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825635) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{6E760BBA-B83F-4C2D-918F-5F91EF6C9861}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 64-Bit Edition (HKLM\...\{90140000-0044-0407-1000-0000000FF1CE}_Office14.PROPLUSR_{43F59F4D-7179-497E-BE99-BC6F7D1DDCBA}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{43F59F4D-7179-497E-BE99-BC6F7D1DDCBA}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2837581) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{D1F3B526-7EB2-4701-92DB-0784988D78DE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2837606) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{52BEF8AE-9324-40A1-9A92-E5A8FB63A475}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878252) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{56551B9F-2FE1-4705-ACF0-8FA920535E18}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878252) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{56551B9F-2FE1-4705-ACF0-8FA920535E18}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 64-Bit Edition (HKLM\...\{90140000-001F-0407-1000-0000000FF1CE}_Office14.PROPLUSR_{8F699D53-05FB-488E-B7D3-E4E47257BE5D}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 64-Bit Edition (HKLM\...\{90140000-001F-0409-1000-0000000FF1CE}_Office14.PROPLUSR_{324703B5-6765-489D-9B9B-B082D34F882E}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 64-Bit Edition (HKLM\...\{90140000-001F-040C-1000-0000000FF1CE}_Office14.PROPLUSR_{4B9B2BAF-EE1F-4B60-A4D9-17B7BEEB13A1}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760344) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{EF77B4A6-DFEC-4010-A87D-9B6BF87FABEC}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760544) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{62857CDD-2985-4939-91BA-19ED0B0031A5}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2768012) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{0814662C-FD28-4DE0-ACE5-EE50D1D6C8FB}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817302) 64-Bit Edition (HKLM\...\{90150000-0016-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{E79EFFDB-192A-4D9E-A2DB-C0F774E6EC32}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817302) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{E79EFFDB-192A-4D9E-A2DB-C0F774E6EC32}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2826040) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{C4AEA56A-0759-4D08-9FAB-31A92137D0B8}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2837644) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D692E9FF-84BF-4F44-A0EA-D58ECE0D538E}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2863843) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{290D80DE-03AB-47EC-9402-108AF4CE4F66}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880457) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{EC2AF602-2730-4B05-9438-06CDE43153F2}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-006E-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880464) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{88B29AA5-71EE-4692-91E2-E89407F0B783}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880478) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{8116ED50-F1E7-49E1-9D8D-421497D34B0F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880987) 64-Bit Edition (HKLM\...\{90150000-006E-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{6F540E80-4BB2-413F-9648-52031AA237B7}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880987) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{6F540E80-4BB2-413F-9648-52031AA237B7}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880987) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{6F540E80-4BB2-413F-9648-52031AA237B7}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881035) 64-Bit Edition (HKLM\...\{90150000-0016-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{885C981B-F1E3-430A-A099-31CA9D28C251}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881035) 64-Bit Edition (HKLM\...\{90150000-0090-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{885C981B-F1E3-430A-A099-31CA9D28C251}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881035) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{885C981B-F1E3-430A-A099-31CA9D28C251}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881074) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{9A479F9C-C1EC-4833-A115-A8B7A60480BD}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881084) 64-Bit Edition (HKLM\...\{90150000-001F-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{00BBBFFE-8889-4953-956A-77DDE975A947}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881084) 64-Bit Edition (HKLM\...\{90150000-001F-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{3A12DFA2-3FF5-450E-BDB1-A742551A5D1A}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881084) 64-Bit Edition (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}_Office15.PROPLUSR_{EA8072E8-E3CF-46DF-A5DE-9F5975344327}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881084) 64-Bit Edition (HKLM\...\{90150000-001F-0410-1000-0000000FF1CE}_Office15.PROPLUSR_{BF0D921F-E77E-4E03-BE71-46D9D2C7A36A}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881086) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{ED3A8E98-FDD4-493F-A0EC-141821573EC2}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881086) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{ED3A8E98-FDD4-493F-A0EC-141821573EC2}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2881087) 64-Bit Edition (HKLM\...\{90150000-00BA-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{3C6F4768-FB23-4ECF-8328-5C47E0664B65}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2881087) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{3C6F4768-FB23-4ECF-8328-5C47E0664B65}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2881087) 64-Bit Edition (HKLM\...\{90150000-00C1-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{3C6F4768-FB23-4ECF-8328-5C47E0664B65}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2881087) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{3C6F4768-FB23-4ECF-8328-5C47E0664B65}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{3029C408-1DD1-4273-8E58-87CB1B638FC8}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{3029C408-1DD1-4273-8E58-87CB1B638FC8}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2881082) 64-Bit Edition (HKLM\...\{90150000-00A1-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{BFD66A5D-F608-441E-9282-41E13F5E7412}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2881082) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{BFD66A5D-F608-441E-9282-41E13F5E7412}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2881082) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{BFD66A5D-F608-441E-9282-41E13F5E7412}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 64-Bit Edition (HKLM\...\{90140000-001A-0407-1000-0000000FF1CE}_Office14.PROPLUSR_{6164E0E5-C903-488C-93AF-1B7AF7EBC331}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{DDDC32A5-9528-4771-B91A-97A8E1D7957B}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2880470) 64-Bit Edition (HKLM\...\{90150000-001A-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{34A169EC-990A-4DAE-AC65-9F981158B7DB}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2880470) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{34A169EC-990A-4DAE-AC65-9F981158B7DB}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 64-Bit Edition (HKLM\...\{90140000-0018-0407-1000-0000000FF1CE}_Office14.PROPLUSR_{FD360122-6829-4497-97C1-1BF578EF695B}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{A20A650C-F820-4CE4-AEA5-EC140192FAFB}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2881075) 64-Bit Edition (HKLM\...\{90150000-0018-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{C8955821-EDAC-4E65-BEF3-C9C0A049517A}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2881075) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{C8955821-EDAC-4E65-BEF3-C9C0A049517A}) (Version:  - Microsoft)
Update for Microsoft Publisher 2013 (KB2880999) 64-Bit Edition (HKLM\...\{90150000-0019-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{C07147B9-CC0B-4CC1-A107-A705889A54F2}) (Version:  - Microsoft)
Update for Microsoft Publisher 2013 (KB2880999) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{C07147B9-CC0B-4CC1-A107-A705889A54F2}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{77374F16-2DC6-4EEF-AFAD-C59FDA2E010D}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{77374F16-2DC6-4EEF-AFAD-C59FDA2E010D}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2880526) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{F6F342A1-530B-4D48-A468-1E3F70928984}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2837587) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{C950A55F-82E3-4CC8-8FA2-E8A2A0F651F3}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition (HKLM\...\{90150000-006E-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}) (Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2880529) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{89FDC8D9-FB84-4EFE-950D-AF4EECC3B64C}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2878319) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{BC51FE30-3A56-4802-8D9E-E9BC05B56B49}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2881080) 64-Bit Edition (HKLM\...\{90150000-001A-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{F96FE9BB-CD90-472B-852E-156342618C54}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2881080) 64-Bit Edition (HKLM\...\{90150000-001B-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{F96FE9BB-CD90-472B-852E-156342618C54}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2881080) 64-Bit Edition (HKLM\...\{90150000-012B-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{F96FE9BB-CD90-472B-852E-156342618C54}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2881080) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{F96FE9BB-CD90-472B-852E-156342618C54}) (Version:  - Microsoft)
Uplay (HKLM-x32\...\Uplay) (Version: 4.5 - Ubisoft)
URL2JPEG 1.1 (HKLM-x32\...\URL2JPEG_is1) (Version:  - )
Usenet.nl (HKLM-x32\...\Usenet.nl_is1) (Version:  - )
UxStyle Core Beta (HKLM\...\{8E363055-15E5-4D8A-9C69-A0A9DE9A3337}) (Version: 0.2.2.0 - The Within Network, LLC)
Validity WBF DDK (HKLM\...\{1F91C200-8F0F-4009-A75E-DB6CE151BD4E}) (Version: 4.4.234.0 - Validity Sensors, Inc.)
Virtual City Casino (HKLM-x32\...\virtualcity) (Version: 16.9.2.739 - )
Visitor 3 Uninstall (HKLM-x32\...\Visitor 3) (Version:  - )
VLC media player 2.1.2 (HKLM-x32\...\VLC media player) (Version: 2.1.2 - VideoLAN)
VPNAutoconnect (HKLM-x32\...\{8E557F21-99AE-440D-8058-CD8CB3302E13}) (Version: 1.15 - globalip)
Watch_Dogs (HKLM-x32\...\Uplay Install 274) (Version:  - Ubisoft)
Windows Live Communications Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3503.0728 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
WinRAR 5.00 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)
WinSCP 5.5 (HKLM-x32\...\winscp3_is1) (Version: 5.5 - Martin Prikryl)
WinZip Driver Updater (HKLM-x32\...\{9854A5C4-5BE5-46E2-A989-352DD8B37E20}_is1) (Version: 1.0.648.10744 - WinZip Computing, S.L. (WinZip Computing))
Wise Registry Cleaner 7.92 (HKLM-x32\...\Wise Registry Cleaner_is1) (Version: 7.92 - WiseCleaner.com, Inc.)
WorldPainter 1.5.0 (HKLM\...\4144-4862-0472-7103) (Version: 1.5.0 - pepsoft.org)

==================== Restore Points  =========================

09-07-2014 11:11:28 Windows Update
12-07-2014 10:54:09 Revo Uninstaller Pro's restore point - Yukon Gold
12-07-2014 10:55:00 Revo Uninstaller's restore point - µTorrent
12-07-2014 10:55:35 Revo Uninstaller Pro's restore point - Yukon Gold
12-07-2014 11:01:55 Revo Uninstaller Pro's restore point - Your Software Deals 1.0.0
12-07-2014 11:06:25 Revo Uninstaller Pro's restore point - Superior Casino
12-07-2014 11:11:54 Revo Uninstaller Pro's restore point - Captain Cooks Casino
12-07-2014 11:17:38 Removed EuroCityCasino
12-07-2014 12:12:16 Revo Uninstaller Pro's restore point - Ad-Aware Antivirus

==================== Hosts content: ==========================

2014-05-25 15:54 - 2014-05-25 15:54 - 00000855 ____N C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {0FA1A03F-0DF5-49C5-892C-3504BCAED217} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\WSCStub.exe [2014-05-11] (Symantec Corporation)
Task: {12CB99FC-B5A5-4EFA-9D7A-824A5E62A21E} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
Task: {13D6BEC2-4F49-413C-A6B8-0344D2432715} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2013-11-20] (Apple Inc.)
Task: {1C9F59DA-654B-4894-BDA2-6E4EDECEAF12} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-10-22] (Piriform Ltd)
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {23AC52F5-8580-45CB-B1E0-7191BCFBA116} - System32\Tasks\Core Temp Autostart Marcel- => C:\Program Files\Core Temp\Core Temp.exe [2013-03-01] ()
Task: {23D857CA-BF22-4A04-AA4A-DA2240EE4878} - System32\Tasks\AutoKMSCustom => C:\Windows\AutoKMS\AutoKMS.exe
Task: {2640F111-D57D-42F8-8A11-60853CD1387C} - System32\Tasks\KMS Activation => C:\Program Files\KMSpico\RandomFile.exe [2013-02-20] ()
Task: {27C6C059-8CCA-4C8D-960F-9E2734268940} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {32618FFD-E0B0-4B98-9C85-AA0481A1A951} - System32\Tasks\MigrationUpdateTask => C:\Users\Marcel-\AppData\Local\MigsUpdater\mupdater.exe [2013-05-05] ()
Task: {336BAB55-2DA1-4780-AD94-2E086438F6C9} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {3E11A519-2A26-40FA-BA5F-D2E50B305A06} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {4D9D0384-E8FD-4892-87F4-19AA55AB2CAC} - System32\Tasks\Hewlett-Packard\HP CoolSense\HP CoolSense Start at Logon => C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [2013-06-07] (Hewlett-Packard Development Company, L.P.)
Task: {506831CD-00D1-4F67-845E-84E44C1B9507} - System32\Tasks\CLMLSvc_P2G8 => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2012-06-08] (CyberLink)
Task: {50C3F803-BD50-4C53-A15F-090E62B8A9AA} - System32\Tasks\HPCustParticipation HP Deskjet 2050 J510 series => C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\HPCustPartic.exe [2012-10-02] (Hewlett-Packard Co.)
Task: {55092CAC-D12E-4296-AAA0-1685B33362E5} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
Task: {553F743B-82E6-4BA0-BAF9-B5BFD58949FB} - \FreeDriverScout No Task File <==== ATTENTION
Task: {58989ABF-57C3-407B-8C81-1BCA9416732E} - \Browser Updater\Browser Updater No Task File <==== ATTENTION
Task: {5D33FF06-1668-492B-9171-2630C1FB1D35} - System32\Tasks\WinZipDriverUpdaterRunAtStartup => C:\Program Files (x86)\WinZip Driver Updater\winzipdu.exe [2011-06-03] (WinZip Computing, S.L. (WinZip Computing))
Task: {5FDF03B1-18D2-47F3-AA61-4F3CA3D73BF5} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-07-09] (Microsoft Corporation)
Task: {62DB234A-C438-4711-9F08-D65079BAAD5E} - \Lyrics Seeker Update No Task File <==== ATTENTION
Task: {64470945-96F4-4918-B67A-39204842F0A3} - System32\Tasks\CLVDLauncher => C:\Program Files (x86)\CyberLink\Power2Go8\CLVDLauncher.exe [2012-07-24] (CyberLink Corp.)
Task: {69455FB1-79D7-4B3C-B9B8-CE09B65512EA} - System32\Tasks\Run RoboForm TaskBar Icon => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2014-02-05] (Siber Systems)
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6C22B245-996E-4330-9B02-9294EC214DC6} - System32\Tasks\Process Lasso Management Console (GUI) => C:\Program Files\Process Lasso\processlasso.exe [2014-03-22] (Bitsum LLC)
Task: {6C4FF4F7-7C6C-4D22-BE63-591EC71E8A9C} - System32\Tasks\Open URL by RoboForm => Rundll32.exe url.dll,FileProtocolHandler "hxxp://www.roboform.com/test-pass.html?aaa=KICMLMLMHMOJPMLMKJGMCNNMKMNMKJCNLMOJLJOJCNGMPMLJGMCNLJPMLMOJHMNJGMJMMMJJLMHMJNJICMIMCNGMCNMMFMOMOMCNPMCNGMJMPMPMFMJMCNMMCNGMJMPMPMCNNMJNPICMLMFMHJOJCJCJGJFMPMJNHICMHJOJCJCJGJJNBJCMCLOJNIMJKJDJCNJNKJCMJNNICMJNDJCMLJKJJNMJCMPMFMOMFMPMJNFICMGJLJKJBJLIGJLIGJKJMIBNKJHIKJ"
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {741886BD-A31B-4091-AF14-70C0DD619152} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {75AB702E-FF88-4FF3-BDBD-89E0DA4B89CD} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {7F99F21B-9CA0-44DA-A60F-0A42F66D3E2E} - System32\Tasks\One-Click Optimizer => C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\WO10.exe [2013-11-19] (Ashampoo Development GmbH & Co. KG)
Task: {80B08F8E-9E69-4435-9AB2-D00F3081010B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {884D20A1-5739-4D17-82C0-B9407FB84AC2} - \Omiga Plus RunAsStdUser No Task File <==== ATTENTION
Task: {89AF243C-674B-49E5-8FEB-7A1547E0ACB9} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2013-03-07] (Intel Corporation)
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {912AB2C4-9240-4E65-892E-3AE1E1D60256} - \YourFile DownloaderUpdate No Task File <==== ATTENTION
Task: {9879667E-2B99-4069-8709-DA19907B3463} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2014-03-21] (Hewlett-Packard)
Task: {9978D875-53BE-4C87-A596-8CDE007A76A4} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-11] (Adobe Systems Incorporated)
Task: {9A9B703E-AD6C-4335-91D0-660F961398FB} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {9B907E53-51D1-4E4F-809D-D2094FC5D372} - \Software Updater No Task File <==== ATTENTION
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {A2774BCD-5537-46DA-98BB-BF76F2A18DE5} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {A346AA6B-B7C6-4E1D-B7E3-02F66B64E5D2} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe
Task: {A447104A-8E57-4418-9C8B-3853E8C89E0E} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
Task: {A5153CAB-0552-427D-A033-D4FB35AD5BEF} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {A5FFB92D-D594-4D26-B41D-C65468A63103} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv
Task: {A667E848-CDDC-45C1-91E7-3EE8ABE28ABD} - System32\Tasks\Razer_Game_Booster_AutoUpdate => C:\Program Files (x86)\Razer\Razer Game Booster\AutoUpdate.exe
Task: {AB99FD7F-9DA6-43A0-94D3-964EEAAC5758} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload
Task: {AED82269-BCBE-4230-ABEC-7D94F4B95C01} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {B04E2456-58BD-4751-9645-1D5608E10979} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {B63F6A1A-4549-4E57-9632-A39E9D6EC4DB} - \GoforFilesUpdate No Task File <==== ATTENTION
Task: {BBFC3058-BE71-456C-B94E-AF8A23DF32C9} - \BitGuard No Task File <==== ATTENTION
Task: {C3B1819F-758B-4347-A8A8-FD74D9E6F68C} - \SomotoUpdateCheckerAutoStart No Task File <==== ATTENTION
Task: {C781B977-6657-422A-A232-B58EF18964F3} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis Install => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {C80AF85D-0DE5-4AE3-899B-B8916253ACB9} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-02-22] (Microsoft Corporation)
Task: {CA8BA137-AF1E-40C5-AC3A-C112C0F486D1} - System32\Tasks\AdobeAAMUpdater-1.0-Marcel-Marcel- => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-12-15] (Adobe Systems Incorporated)
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {DCF83D36-1162-4AFA-9ED0-AA3BA1001799} - \bettermarkit_wd No Task File <==== ATTENTION
Task: {DFC64FB6-105F-4B5E-A251-F03421F42FD8} - System32\Tasks\Process Lasso Core Engine Only => C:\Program Files\Process Lasso\processgovernor.exe [2014-03-22] (Bitsum LLC)
Task: {E38542F9-3B46-480C-A33C-E5CC9166002A} - \Desk 365 RunAsStdUser No Task File <==== ATTENTION
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {E85048F2-499A-4739-B946-CAFCBF74F9A5} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {E87BAC48-E898-445E-A579-7BF2C0FBCDF7} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2013-03-07] (Intel Corporation)
Task: {EA4A368E-47ED-4F4A-8E6E-B53BE571D24D} - \preispilotSWU No Task File <==== ATTENTION
Task: {F05A359A-94F3-487A-9D2F-E2396354886A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {FCBD29E0-A339-4238-8176-42BBE985A43F} - \Software Updater Ui No Task File <==== ATTENTION
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\AutoKMSCustom.job => C:\Windows\AutoKMS\AutoKMS.exe
Task: C:\WINDOWS\Tasks\bettermarkit_wd.job => C:\Program Files (x86)\bettermarkit\BetterMarkIt_wd.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

==================== Loaded Modules (whitelisted) =============

2013-11-24 16:52 - 2014-06-13 04:11 - 00118728 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2013-11-17 14:18 - 2013-12-29 15:50 - 00076888 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe
2013-01-10 14:38 - 2013-01-10 14:38 - 00124728 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPItunesModule.dll
2013-01-10 14:38 - 2013-01-10 14:38 - 00051512 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPItunesProxy.dll
2013-01-10 14:38 - 2013-01-10 14:38 - 00018432 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\PowerDVD.dll
2013-12-01 22:35 - 2013-12-01 22:35 - 01102336 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\System.Data.SQLite.dll
2013-01-10 14:37 - 2013-01-10 14:37 - 00180224 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\zxing.dll
2013-09-05 01:17 - 2013-09-05 01:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2012-06-28 20:21 - 2012-06-28 20:21 - 00019456 _____ () C:\Program Files\PBO Manager v.1.4 beta\PboShellExt.dll
2013-06-07 05:16 - 2013-06-07 05:16 - 04073768 _____ () C:\Program Files (x86)\HP SimplePass\IEWebSiteLogon.exe
2013-10-04 00:42 - 2013-10-04 00:42 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-05-06 12:16 - 2014-05-06 12:16 - 00124728 _____ () C:\Users\Administrator\AppData\Local\assembly\dl3\MJZDWRBC.9QP\LM6HZG0W.COB\4f8ed896\00041553_2fefcd01\HPItunesModule.DLL
2014-05-06 12:16 - 2014-05-06 12:16 - 00018432 _____ () C:\Users\Administrator\AppData\Local\assembly\dl3\MJZDWRBC.9QP\LM6HZG0W.COB\cd4e248e\00041553_2fefcd01\PowerDVD.DLL
2011-02-24 20:07 - 2011-02-24 20:07 - 00470120 _____ () C:\Program Files (x86)\Acronis\DriveMonitor\adm_tray.exe
2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2009-08-23 19:58 - 2009-08-23 19:58 - 00094208 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2014-01-10 23:50 - 2013-12-23 20:59 - 00376608 _____ () C:\Program Files (x86)\Connectify\NativeLibrary.dll
2014-01-10 23:50 - 2013-12-23 20:59 - 03170080 _____ () C:\Program Files (x86)\Connectify\ConnectifyNAT.dll
2014-01-10 23:50 - 2013-12-23 20:59 - 00714016 _____ () C:\Program Files (x86)\Connectify\log4cplus.dll
2014-01-10 23:50 - 2013-12-23 20:59 - 00354080 _____ () C:\Program Files (x86)\Connectify\LibDispatch.dll
2013-08-16 18:40 - 2013-05-09 04:23 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2013-06-07 05:16 - 2013-06-07 05:16 - 00019240 _____ () C:\Program Files (x86)\HP SimplePass\DownloadManager.dll
2013-07-30 20:45 - 2012-06-08 05:34 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2012-06-08 11:34 - 2012-06-08 11:34 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
2014-06-11 14:51 - 2014-06-05 15:58 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\libglesv2.dll
2014-06-11 14:51 - 2014-06-05 15:58 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\libegl.dll
2014-06-11 14:51 - 2014-06-05 15:58 - 04217672 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\pdf.dll
2014-06-11 14:51 - 2014-06-05 15:58 - 00414536 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll
2014-06-11 14:51 - 2014-06-05 15:58 - 01732424 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ffmpegsumo.dll
2011-02-24 19:39 - 2011-02-24 19:39 - 00012128 _____ () C:\Program Files (x86)\Common Files\Acronis\DriveMonitor\Common\icudt38.dll
2013-12-26 13:06 - 2013-07-29 15:19 - 00369000 _____ () C:\Program Files (x86)\CyberLink\SoftDMA\Kernel\DMR\CLNetMediaDMA.dll
2014-07-11 15:18 - 2014-07-08 08:18 - 14663856 _____ () C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\PepperFlash\14.0.0.145\pepflashplayer.dll
2014-07-13 12:07 - 2014-07-12 02:53 - 01116672 _____ () C:\Program Files (x86)\Steam\libavcodec-55.dll
2014-07-13 12:07 - 2014-07-12 02:53 - 00399360 _____ () C:\Program Files (x86)\Steam\libavformat-55.dll
2014-07-13 12:07 - 2014-07-12 02:53 - 00331264 _____ () C:\Program Files (x86)\Steam\libavresample-1.dll
2014-07-13 12:07 - 2014-07-12 02:53 - 00438784 _____ () C:\Program Files (x86)\Steam\libavutil-53.dll
2014-07-13 12:07 - 2014-06-27 00:40 - 00764416 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2014-07-13 12:07 - 2014-07-12 02:53 - 02139328 _____ () C:\Program Files (x86)\Steam\video.dll
2014-07-13 12:07 - 2014-04-29 02:37 - 00519168 _____ () C:\Program Files (x86)\Steam\libswscale-2.dll
2014-07-13 12:07 - 2014-07-12 02:53 - 01116864 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2014-07-13 12:07 - 2014-05-02 01:35 - 20628160 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"

==================== EXE Association (whitelisted) =============


==================== MSCONFIG/TASK MANAGER disabled items =========

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: BEService => 3
MSCONFIG\Services: EBOOSTRSVC => 2
MSCONFIG\Services: lansweeperservice => 2
MSCONFIG\Services: LavasoftAdAwareService11 => 2
MSCONFIG\Services: SBUpd => 2
MSCONFIG\Services: SolutoLauncherService => 2
MSCONFIG\Services: SolutoRemoteService => 3
MSCONFIG\Services: SolutoService => 2
MSCONFIG\Services: valWBFPolicyService => 2
MSCONFIG\Services: VideoAcceleratorService => 2
MSCONFIG\startupreg: DAEMON Tools Lite => "c:\program files (x86)\daemon tools lite\dtlite.exe" -autorun
MSCONFIG\startupreg: iTunesHelper => "c:\program files (x86)\itunes\ituneshelper.exe"
MSCONFIG\startupreg: LogMeIn Hamachi Ui => 
MSCONFIG\startupreg: Steam => "c:\program files (x86)\steam\steam.exe" -silent
HKLM\...\StartupApproved\StartupFolder: => "GrFinger Desktop Identity.lnk"
HKLM\...\StartupApproved\StartupFolder: => "Secunia PSI Tray.lnk"
HKLM\...\StartupApproved\Run: => "BCSSync"
HKLM\...\StartupApproved\Run: => "Launch LCore"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "AdAwareTray"
HKLM\...\StartupApproved\Run32: => "RemoteControl10"
HKLM\...\StartupApproved\Run32: => "BlueStacks Agent"
HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui"
HKLM\...\StartupApproved\Run32: => "AdobeCS6ServiceManager"
HKLM\...\StartupApproved\Run32: => "SwitchBoard"
HKLM\...\StartupApproved\Run32: => "IObit Malware Fighter"
HKLM\...\StartupApproved\Run32: => "WsmUpdater"
HKCU\...\StartupApproved\Run: => "C:\Program Files (x86)\NetMeter\NetMeter.exe"

==================== Faulty Device Manager Devices =============

Name: HP Truevision HD
Description: USB-Videogerät
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: Microsoft
Service: usbvideo
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Fake Webcam
Description: Fake Webcam
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Web Solution Mart
Service: fwdrv
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (07/13/2014 00:00:09 PM) (Source: XTUService) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
   bei IronCity.Core.Server.CoreServer.Start()
   bei XtuService.XtuService1.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (07/13/2014 00:00:00 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: IAStorDataMgrSvc.exe, Version: 11.5.9.1002, Zeitstempel: 0x5065e128
Name des fehlerhaften Moduls: IAStorUtil.ni.dll, Version: 11.5.9.1002, Zeitstempel: 0x5065e124
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002f3fd
ID des fehlerhaften Prozesses: 0x10a4
Startzeit der fehlerhaften Anwendung: 0xIAStorDataMgrSvc.exe0
Pfad der fehlerhaften Anwendung: IAStorDataMgrSvc.exe1
Pfad des fehlerhaften Moduls: IAStorDataMgrSvc.exe2
Berichtskennung: IAStorDataMgrSvc.exe3
Vollständiger Name des fehlerhaften Pakets: IAStorDataMgrSvc.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: IAStorDataMgrSvc.exe5

Error: (07/13/2014 11:59:58 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: IAStorDataMgrSvc.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.NullReferenceException
Stapel:
   bei IAStorUtil.SystemDataModelListener.ProcessSystemDataModelChanges()
   bei IAStorUtil.SystemDataModelListener.LoadSavedSystemState()
   bei IAStorDataMgr.EventRelay.<Start>b__0(System.Object)
   bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   bei System.Threading.ThreadPoolWorkQueue.Dispatch()
   bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (07/13/2014 03:37:25 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2281

Error: (07/13/2014 03:37:25 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2281

Error: (07/13/2014 03:37:25 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/13/2014 03:37:24 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1171

Error: (07/13/2014 03:37:24 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1171

Error: (07/13/2014 03:37:24 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/13/2014 01:12:44 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418154


System errors:
=============
Error: (07/13/2014 00:00:19 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Rapid Storage-Technologie" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (07/13/2014 11:57:36 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "BlueStacks Android Service" ist vom Dienst "BlueStacks Hypervisor" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%2

Error: (07/13/2014 11:57:10 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "BlueStacks Hypervisor" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (07/13/2014 11:57:04 AM) (Source: NETLOGON) (EventID: 3095) (User: )
Description: Dieser Computer ist als Mitglied einer Arbeitsgruppe konfiguriert, nicht als
Mitglied einer Domäne. Der Anmeldedienst braucht bei dieser
Konfiguration nicht gestartet zu sein.

Error: (07/13/2014 11:56:23 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "UAC-Dateivirtualisierung" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275

Error: (07/13/2014 11:55:00 AM) (Source: sfdrv01a) (EventID: 12) (User: )
Description: 

Error: (07/13/2014 11:53:29 AM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Der Dienst Steganos Volatile Disk konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.

Error: (07/12/2014 05:05:18 PM) (Source: DCOM) (EventID: 10010) (User: Marcel)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}


Microsoft Office Sessions:
=========================
Error: (07/13/2014 00:00:09 PM) (Source: XTUService) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
   bei IronCity.Core.Server.CoreServer.Start()
   bei XtuService.XtuService1.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (07/13/2014 00:00:00 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: IAStorDataMgrSvc.exe11.5.9.10025065e128IAStorUtil.ni.dll11.5.9.10025065e124c00000050002f3fd10a401cf9e812d2fb945C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exeC:\WINDOWS\assembly\NativeImages_v4.0.30319_32\IAStorUtil\d1bcba4535bd6be21398119cbec8d64e\IAStorUtil.ni.dll7370510f-0a74-11e4-bf69-f4b7e256f89e

Error: (07/13/2014 11:59:58 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: IAStorDataMgrSvc.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.NullReferenceException
Stapel:
   bei IAStorUtil.SystemDataModelListener.ProcessSystemDataModelChanges()
   bei IAStorUtil.SystemDataModelListener.LoadSavedSystemState()
   bei IAStorDataMgr.EventRelay.<Start>b__0(System.Object)
   bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   bei System.Threading.ThreadPoolWorkQueue.Dispatch()
   bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (07/13/2014 03:37:25 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2281

Error: (07/13/2014 03:37:25 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2281

Error: (07/13/2014 03:37:25 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/13/2014 03:37:24 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1171

Error: (07/13/2014 03:37:24 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1171

Error: (07/13/2014 03:37:24 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/13/2014 01:12:44 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418154


CodeIntegrity Errors:
===================================
  Date: 2013-12-26 22:30:21.833
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:30:16.427
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:30:14.982
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:30:06.419
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:17:07.949
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:17:05.109
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:17:05.094
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:17:05.094
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:17:05.078
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:17:04.578
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info =========================== 

Percentage of memory in use: 26%
Total physical RAM: 16273.27 MB
Available physical RAM: 11981.66 MB
Total Pagefile: 65425.27 MB
Available Pagefile: 60411.56 MB
Total Virtual: 131072 MB
Available Virtual: 131071.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:912.59 GB) (Free:297.56 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (RECOVERY) (Fixed) (Total:17.8 GB) (Free:16.84 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (DLAN-500AV-WRLP) (CDROM) (Total:0.11 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: A50E1C7D)

Partition: GPT Partition Type.

==================== End Of Log ============================
         

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?