Windows 7 Pro: Programme Öffnen sich wahllos

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-07-2014
Ran by Dirtysteel (administrator) on IGOR on 27-07-2014 13:26:47
Running from C:\Users\Dirtysteel\Desktop\virus\Scan\FRST64
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDClock.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\LogiAppBroker.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\javaw.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [7477016 2013-04-25] (Logitech Inc.)
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3100440 2014-05-19] (Logitech, Inc.)
HKLM-x32\...\Run: [P17RunE] => RunDll32 P17RunE.dll,RunDLLEntry
HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [115048 2011-09-16] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-07-09] (Advanced Micro Devices, Inc.)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-19\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-27260097-2750739950-1599161141-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [1753280 2014-07-16] (Valve Corporation)
HKU\S-1-5-21-27260097-2750739950-1599161141-1000\...\Policies\Explorer: [NoInternetOpenWith] 1
ShellIconOverlayIdentifiers:  AccExtIco1 -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_v_1_1_0_x64.dll ()
ShellIconOverlayIdentifiers:  AccExtIco2 -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_v_1_1_0_x64.dll ()
ShellIconOverlayIdentifiers:  AccExtIco3 -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_v_1_1_0_x64.dll ()
ShellIconOverlayIdentifiers-x32:  SkyDrivePro1 (ErrorConflict) -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32:  SkyDrivePro2 (SyncInProgress) -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32:  SkyDrivePro3 (InSync) -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BootExecute: autocheck autochk * bootdelete

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x656D5DE128D7CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
SearchScopes: HKLM - {758B870D-DF78-4A6A-9955-DEDDCACF94DC} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKCU - {758B870D-DF78-4A6A-9955-DEDDCACF94DC} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\ArcPluginIE.dll (Perfect World Entertainment Inc)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
Toolbar: HKLM-x32 - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
Toolbar: HKCU - &RoboForm Toolbar - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Winsock: Catalog9 01 C:\Windows\SysWOW64\WTFastDrv.dll [72296] (Initex)
Winsock: Catalog9 02 C:\Windows\SysWOW64\WTFastDrv.dll [72296] (Initex)
Winsock: Catalog9 06 C:\Windows\SysWOW64\WTFastDrv.dll [72296] (Initex)
Winsock: Catalog9 07 C:\Windows\SysWOW64\WTFastDrv.dll [72296] (Initex)
Winsock: Catalog9 15 C:\Windows\SysWOW64\WTFastDrv.dll [72296] (Initex)
Winsock: Catalog9-x64 01 %SystemRoot%\system32\WTFastDrv.dll [79464] (Initex)
Winsock: Catalog9-x64 02 %SystemRoot%\system32\WTFastDrv.dll [79464] (Initex)
Winsock: Catalog9-x64 03 %SystemRoot%\system32\WTFastDrv.dll [79464] (Initex)
Winsock: Catalog9-x64 04 %SystemRoot%\system32\WTFastDrv.dll [79464] (Initex)
Winsock: Catalog9-x64 17 %SystemRoot%\system32\WTFastDrv.dll [79464] (Initex)

Hosts: Hosts file not detected in the default directory
Tcpip\..\Interfaces\{30C127A3-4267-4683-B347-258CE975D776}: [NameServer]8.8.4.4,8.8.8.8

FireFox:
========
FF ProfilePath: C:\Users\Dirtysteel\AppData\Roaming\Mozilla\Firefox\Profiles\x6qin3q4.default
FF Homepage: www.google.de
FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpreview.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Faccount.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fnew.songza.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1))%20%7B%20return%20'PROXY%20nq-us08.personalitycores.com%3A8000%3B%20PROXY%20nq-us12.personalitycores.com%3A8000%3B%20PROXY%20nq-us06.personalitycores.com%3A8000%3B%20PROXY%20nq-us11.personalitycores.com%3A8000%3B%20PROXY%20nq-us07.personalitycores.com%3A8000%3B%20PROXY%20nq-us05.personalitycores.com%3A8000%3B%20PROXY%20nq-us04.personalitycores.com%3A8000%3B%20PROXY%20nq-us10.personalitycores.com%3A8000%3B%20PROXY%20nq-us09.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF NetworkProxy: "type", 2
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 - C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files (x86)\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro\Pro 9\npnitromozilla.dll (Nitro PDF)
FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: FoxyProxy Standard - C:\Users\Dirtysteel\AppData\Roaming\Mozilla\Firefox\Profiles\x6qin3q4.default\Extensions\foxyproxy@eric.h.jung [2014-02-06]
FF Extension: LastPass - C:\Users\Dirtysteel\AppData\Roaming\Mozilla\Firefox\Profiles\x6qin3q4.default\Extensions\support@lastpass.com [2014-03-11]
FF Extension: WOT - C:\Users\Dirtysteel\AppData\Roaming\Mozilla\Firefox\Profiles\x6qin3q4.default\Extensions\wotstats@mywot.com [2013-10-03]
FF Extension: DownloadHelper - C:\Users\Dirtysteel\AppData\Roaming\Mozilla\Firefox\Profiles\x6qin3q4.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-03-24]
FF Extension: Groove Shredder - C:\Users\Dirtysteel\AppData\Roaming\Mozilla\Firefox\Profiles\x6qin3q4.default\Extensions\grooveshredder@code.argee.org.xpi [2013-09-20]
FF Extension: ProxMate - Proxy on steroids! - C:\Users\Dirtysteel\AppData\Roaming\Mozilla\Firefox\Profiles\x6qin3q4.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi [2013-11-13]
FF Extension: YesScript - C:\Users\Dirtysteel\AppData\Roaming\Mozilla\Firefox\Profiles\x6qin3q4.default\Extensions\yesscript@userstyles.org.xpi [2014-07-04]
FF Extension: Biet-O-Matic Firefox Erweiterung - C:\Users\Dirtysteel\AppData\Roaming\Mozilla\Firefox\Profiles\x6qin3q4.default\Extensions\{B0D70E72-2FC1-4b9f-A3D4-5921C854D906}.xpi [2013-09-30]
FF Extension: Modify Headers - C:\Users\Dirtysteel\AppData\Roaming\Mozilla\Firefox\Profiles\x6qin3q4.default\Extensions\{b749fc7c-e949-447f-926c-3f4eed6accfe}.xpi [2014-07-26]
FF Extension: DownThemAll! - C:\Users\Dirtysteel\AppData\Roaming\Mozilla\Firefox\Profiles\x6qin3q4.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2013-11-20]
FF Extension: Greasemonkey - C:\Users\Dirtysteel\AppData\Roaming\Mozilla\Firefox\Profiles\x6qin3q4.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2014-07-26]
FF Extension: QuickJava - C:\Users\Dirtysteel\AppData\Roaming\Mozilla\Firefox\Profiles\x6qin3q4.default\Extensions\{E6C1199F-E687-42da-8C24-E7770CC3AE66}.xpi [2014-02-06]
FF Extension: Adblock Edge - C:\Users\Dirtysteel\AppData\Roaming\Mozilla\Firefox\Profiles\x6qin3q4.default\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi [2014-06-14]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2014-07-07]
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: 卡巴斯基網址顧問 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2014-07-26]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: 虛擬鍵盤 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-07-26]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: 惡意網站攔截器 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2014-07-26]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Chặn quảng cáo - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2014-07-26]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2014-07-26]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-07-09] (Advanced Micro Devices, Inc.) [File not signed]
S4 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88400 2014-01-21] (Perfect World Entertainment Inc)
R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2014-05-28] (Kaspersky Lab ZAO)
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2013-08-15] (Creative Labs) [File not signed]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [307200 2008-11-18] (Creative Technology Ltd) [File not signed]
S4 NitroDriverReadSpool9; C:\Program Files\Nitro\Pro 9\NitroPDFDriverService9x64.exe [230920 2014-05-22] (Nitro PDF Software)
S4 NitroUpdateService; C:\Program Files\Nitro\Pro 9\Nitro_UpdateService.exe [417800 2014-05-22] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-05-30] ()
S4 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
R2 Themes; C:\Windows\system32\themeservice.dll [44544 2011-06-16] (Microsoft Corporation) [File not signed]
S4 VMwareHostd; C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe [14405200 2013-10-18] ()

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
S3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [306536 2011-03-04] ()
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-05-28] (Kaspersky Lab ZAO)
S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [115296 2014-05-28] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625248 2014-05-28] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2014-05-28] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2014-05-28] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2014-05-28] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2013-05-14] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178272 2014-05-28] (Kaspersky Lab ZAO)
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R1 OADevice; C:\Windows\SysWow64\Drivers\OADriver.sys [64720 2013-10-16] ()
R1 oahlpXX; C:\Windows\syswow64\drivers\oahlp64.sys [62008 2013-10-16] ()
R1 OAmon; C:\Windows\SysWOW64\Drivers\OAmon.sys [52360 2013-10-16] (Emsisoft)
R3 OAnet; C:\Windows\System32\DRIVERS\oanet.sys [35368 2013-10-16] (Emsisoft)
R1 RAMDiskVE; C:\Windows\System32\Drivers\RAMDiskVE.sys [86768 2014-05-25] (Dataram, Inc.)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R1 UimBus; C:\Windows\System32\DRIVERS\UimBus.sys [102664 2014-01-23] ()
R1 Uim_DEVIM; C:\Windows\System32\DRIVERS\uim_devim.sys [25992 2014-01-23] ()
R1 Uim_IM; C:\Windows\System32\DRIVERS\uim_im.sys [700680 2014-01-23] ()
R0 vsock; C:\Windows\System32\drivers\vsock.sys [73296 2013-10-08] (VMware, Inc.)
R2 vstor2-mntapi20-shared; C:\Windows\SysWow64\drivers\vstor2-mntapi20-shared.sys [33872 2013-02-22] (VMware, Inc.)
S3 atillk64; \??\C:\Program Files (x86)\AMD\System Monitor\atillk64.sys [X]
U0 Partizan; system32\drivers\Partizan.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
U3 uxtdrpog; \??\C:\Users\DIRTYS~1\AppData\Local\Temp\uxtdrpog.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-07-27 12:30 - 2014-07-26 19:29 - 00000024 _____ () C:\Users\Dirtysteel\Desktop\Neues Textdokument - Kopie.txt
2014-07-27 11:44 - 2014-07-27 12:13 - 00000482 _____ () C:\Users\Dirtysteel\Downloads\defogger_disable.log
2014-07-27 11:44 - 2014-07-27 11:44 - 00000000 _____ () C:\Users\Dirtysteel\defogger_reenable
2014-07-27 11:43 - 2014-07-27 13:16 - 00000000 ____D () C:\Users\Dirtysteel\Desktop\virus
2014-07-27 11:42 - 2014-07-27 11:42 - 00050477 _____ () C:\Users\Dirtysteel\Downloads\Defogger.exe
2014-07-27 11:13 - 2014-07-27 11:13 - 00002910 _____ () C:\Windows\PFRO.log
2014-07-26 21:13 - 2014-07-26 21:14 - 00000000 ____D () C:\Users\Dirtysteel\Downloads\SysinternalsSuite
2014-07-26 21:11 - 2014-07-26 21:11 - 01243655 _____ () C:\Users\Dirtysteel\Downloads\ProcessExplorer.zip
2014-07-26 20:38 - 2014-07-26 20:56 - 00000000 ____D () C:\Program Files (x86)\OkayFreedom
2014-07-26 20:38 - 2014-07-26 20:42 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Roaming\Steganos VPN
2014-07-26 20:37 - 2014-07-26 20:56 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Roaming\Steganos
2014-07-26 20:25 - 2014-07-26 20:36 - 00000000 ____D () C:\Program Files\OpenVPN
2014-07-26 20:23 - 2014-07-26 20:23 - 00000000 ____D () C:\Users\Dirtysteel\Downloads\OpenVPN-Certificate-Bundle-Server2
2014-07-26 19:29 - 2014-07-27 12:09 - 00002357 _____ () C:\Users\Dirtysteel\Desktop\Sicherer Zahlungsverkehr.lnk
2014-07-26 19:28 - 2014-07-27 11:40 - 00001151 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2014-07-26 19:28 - 2014-07-26 19:28 - 00000000 ____D () C:\Windows\ELAMBKUP
2014-07-26 19:28 - 2014-07-26 19:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security
2014-07-26 19:28 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
2014-07-26 19:27 - 2014-07-27 12:54 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-07-26 19:27 - 2014-07-26 19:27 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-07-26 19:18 - 2014-07-26 19:29 - 00000024 _____ () C:\Users\Dirtysteel\Desktop\Neues Textdokument.txt
2014-07-26 18:22 - 2014-07-26 18:22 - 00000000 ____D () C:\Users\Dirtysteel\Documents\EVE
2014-07-26 17:43 - 2014-07-26 19:00 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EVE
2014-07-26 16:59 - 2014-07-26 16:59 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Local\CCP
2014-07-20 14:59 - 2014-07-26 19:00 - 00000000 ____D () C:\Users\Dirtysteel\Documents\RoS-BoT
2014-07-20 14:29 - 2014-07-20 14:29 - 00000036 _____ () C:\Windows\SysWOW64\config.ini
2014-07-20 13:26 - 2014-07-20 15:34 - 00000000 ____D () C:\Users\Dirtysteel\Documents\Diablo III
2014-07-20 13:03 - 2014-07-20 13:03 - 00001183 _____ () C:\Users\Public\Desktop\Diablo III.lnk
2014-07-20 13:02 - 2014-07-26 19:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo III
2014-07-20 13:02 - 2014-07-20 13:25 - 00000000 ____D () C:\Program Files (x86)\Diablo III
2014-07-20 13:00 - 2008-02-29 00:39 - 00094208 _____ () C:\Windows\SysWOW64\ImageSearchDLL.dll
2014-07-20 12:41 - 2014-07-20 12:57 - 00000000 ____D () C:\Users\Dirtysteel\.junique
2014-07-20 11:06 - 2014-07-20 11:06 - 00000000 ____D () C:\ProgramData\ATI
2014-07-20 10:46 - 2014-07-20 10:46 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2014-07-20 10:45 - 2014-07-26 19:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2014-07-20 10:45 - 2014-07-20 10:45 - 00062096 _____ () C:\Windows\SysWOW64\CCCInstall_201407201045514918.log
2014-07-19 14:34 - 2014-07-19 14:34 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Local\LumaEmu_SteamCloud
2014-07-19 14:11 - 2014-07-19 14:11 - 00000000 ___SH () C:\Users\Dirtysteel\AppData\Local\LumaEmu
2014-07-13 11:25 - 2014-07-27 12:09 - 00000831 _____ () C:\Windows\setupact.log
2014-07-13 11:25 - 2014-07-13 11:25 - 00000000 _____ () C:\Windows\setuperr.log
2014-07-12 17:35 - 2014-07-12 17:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WTFast
2014-07-12 17:35 - 2014-07-12 17:36 - 00000000 ____D () C:\Program Files (x86)\WTFast
2014-07-12 17:35 - 2014-07-12 17:35 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Local\AAA_Internet_Publishing,_
2014-07-12 17:35 - 2014-01-03 16:36 - 00079464 _____ (Initex) C:\Windows\system32\WTFastDrv.dll
2014-07-12 17:35 - 2014-01-03 16:36 - 00072296 _____ (Initex) C:\Windows\SysWOW64\WTFastDrv.dll
2014-07-12 17:35 - 2014-01-03 16:36 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SPORDER.DLL
2014-07-11 20:06 - 2014-07-11 20:06 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Local\Secunia PSI
2014-07-11 19:23 - 2014-07-11 19:23 - 00000000 ____D () C:\Users\Dirtysteel\Downloads\WNR1000v3-V1.0.2.68_60.0.93
2014-07-11 18:17 - 2014-07-26 19:49 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-07-11 18:17 - 2014-07-26 19:49 - 00000000 ____D () C:\ProgramData\Skype
2014-07-11 18:17 - 2014-07-26 19:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-07-11 18:17 - 2014-07-20 10:45 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Roaming\Skype
2014-07-11 18:17 - 2014-07-11 18:17 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-07-11 18:17 - 2014-07-11 18:17 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Local\Skype
2014-07-11 17:42 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-07-11 17:42 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-07-11 17:41 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-11 17:41 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-07-11 17:41 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-11 17:40 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-11 17:40 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-07-11 12:30 - 2014-07-11 12:30 - 00000000 ____D () C:\ProgramData\Emsisoft
2014-07-10 08:02 - 2014-07-10 08:02 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Roaming\Foxit Software
2014-07-10 07:50 - 2014-07-11 17:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit PhantomPDF
2014-07-10 07:49 - 2014-07-10 07:49 - 00000000 ____D () C:\Program Files (x86)\Foxit Software
2014-07-09 18:34 - 2014-07-09 18:35 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Roaming\Aspell
2014-07-09 18:03 - 2014-07-09 18:03 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Local\Aspell
2014-07-09 17:52 - 2014-07-09 17:52 - 10519584 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll
2014-07-09 17:52 - 2014-07-09 17:52 - 00143304 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll
2014-07-09 17:52 - 2014-07-09 17:52 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2014-07-09 17:52 - 2014-07-09 17:52 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2014-07-09 17:52 - 2014-07-09 17:52 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2014-07-09 17:52 - 2014-07-09 17:52 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2014-07-09 17:47 - 2014-07-09 17:47 - 00276192 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdacpksd.sys
2014-07-09 17:45 - 2014-07-09 17:45 - 15950848 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2014-07-09 17:35 - 2014-07-09 17:35 - 32876544 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2014-07-09 17:35 - 2014-07-09 17:35 - 00231424 _____ () C:\Windows\system32\clinfo.exe
2014-07-09 17:35 - 2014-07-09 17:35 - 00098816 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OpenVideo64.dll
2014-07-09 17:35 - 2014-07-09 17:35 - 00086528 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OVDecode64.dll
2014-07-09 17:35 - 2014-07-09 17:35 - 00083456 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OpenVideo.dll
2014-07-09 17:35 - 2014-07-09 17:35 - 00073216 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OVDecode.dll
2014-07-09 17:34 - 2014-07-09 17:34 - 27843072 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll
2014-07-09 17:34 - 2014-07-09 17:34 - 00065024 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-07-09 17:34 - 2014-07-09 17:34 - 00058880 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-07-09 17:31 - 2014-07-09 17:31 - 05225472 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmantle64.dll
2014-07-09 17:31 - 2014-07-09 17:31 - 00127488 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle64.dll
2014-07-09 17:31 - 2014-07-09 17:31 - 00113664 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantle32.dll
2014-07-09 17:28 - 2014-07-09 17:28 - 23028224 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2014-07-09 17:28 - 2014-07-09 17:28 - 15716352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2014-07-09 17:28 - 2014-07-09 17:28 - 04180992 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmantle32.dll
2014-07-09 17:28 - 2014-07-09 17:28 - 00598112 _____ () C:\Windows\SysWOW64\atiapfxx.blb
2014-07-09 17:28 - 2014-07-09 17:28 - 00598112 _____ () C:\Windows\system32\atiapfxx.blb
2014-07-09 17:28 - 2014-07-09 17:28 - 00366592 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2014-07-09 17:28 - 2014-07-09 17:28 - 00062464 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2014-07-09 17:28 - 2014-07-09 17:28 - 00055808 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2014-07-09 17:28 - 2014-07-09 17:28 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2014-07-09 17:28 - 2014-07-09 17:28 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2014-07-09 17:27 - 2014-07-09 17:27 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2014-07-09 17:26 - 2014-07-09 17:26 - 00048128 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl6.dll
2014-07-09 17:26 - 2014-07-09 17:26 - 00037888 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmmcl.dll
2014-07-09 17:25 - 2014-07-09 17:25 - 03437632 _____ () C:\Windows\system32\atiumd6a.cap
2014-07-09 17:25 - 2014-07-09 17:25 - 00091648 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl64.dll
2014-07-09 17:25 - 2014-07-09 17:25 - 00085504 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantleaxl32.dll
2014-07-09 17:24 - 2014-07-09 17:24 - 00588800 _____ (AMD) C:\Windows\system32\atieclxx.exe
2014-07-09 17:24 - 2014-07-09 17:24 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2014-07-09 17:24 - 2014-07-09 17:24 - 00239616 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2014-07-09 17:24 - 2014-07-09 17:24 - 00031232 _____ (AMD) C:\Windows\system32\atimuixx.dll
2014-07-09 17:23 - 2014-07-09 17:23 - 00190976 _____ (AMD) C:\Windows\system32\atitmm64.dll
2014-07-09 17:22 - 2014-07-09 17:22 - 03471376 _____ () C:\Windows\SysWOW64\atiumdva.cap
2014-07-09 17:20 - 2014-07-09 17:20 - 00898560 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2014-07-09 17:19 - 2014-07-09 17:19 - 00557056 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2014-07-09 17:19 - 2014-07-09 17:19 - 00133632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2014-07-09 17:19 - 2014-07-09 17:19 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2014-07-09 17:19 - 2014-07-09 17:19 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2014-07-09 17:17 - 2014-07-09 17:17 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2014-07-09 13:10 - 2014-07-09 13:10 - 00000000 ____D () C:\Users\Dirtysteel\Neuer Ordner
2014-07-09 12:19 - 2014-07-09 12:19 - 00313256 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-07-09 12:19 - 2014-07-09 12:19 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-07-09 12:19 - 2014-07-09 12:19 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-07-09 12:19 - 2014-07-09 12:19 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-07-09 12:19 - 2014-07-09 12:19 - 00000000 ____D () C:\Program Files\Java
2014-07-09 12:17 - 2014-07-09 12:16 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-09 12:16 - 2014-07-09 12:16 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-09 12:16 - 2014-07-09 12:16 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-09 12:16 - 2014-07-09 12:16 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-09 12:13 - 2014-07-09 12:13 - 00000934 _____ () C:\Users\Public\Desktop\WinSCP.lnk
2014-07-09 12:08 - 2014-07-11 17:21 - 00000000 ____D () C:\Program Files (x86)\Secunia
2014-07-09 12:06 - 2014-07-09 12:06 - 05329480 _____ (Secunia) C:\Users\Dirtysteel\Downloads\PSISetup_3.0.0.9016.exe
2014-07-09 11:39 - 2014-07-09 11:39 - 00051200 _____ () C:\Windows\system32\kdbsdk64.dll
2014-07-09 11:37 - 2014-07-09 11:37 - 00038912 _____ () C:\Windows\SysWOW64\kdbsdk32.dll
2014-07-09 07:26 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-09 07:25 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-09 07:25 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-09 07:25 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-09 07:25 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-09 07:25 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-09 07:25 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-09 07:25 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-09 07:25 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-09 07:25 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-09 07:25 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-09 07:25 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-09 07:25 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-09 07:25 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-09 07:25 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-09 07:25 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-09 07:25 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-09 07:25 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-09 07:25 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-09 07:25 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-09 07:25 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-07-09 07:25 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-09 07:25 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-09 07:25 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-09 07:25 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-09 07:25 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-09 07:25 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-09 07:25 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-07-09 07:25 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-07-09 07:25 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-07-09 07:25 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-09 07:25 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-07-09 07:25 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-07-09 07:25 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-09 07:25 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-09 07:25 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-07-09 07:25 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-07-09 07:25 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-07-09 07:25 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-09 07:25 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-09 07:25 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-07-09 07:25 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-09 07:25 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-09 07:25 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-09 07:25 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-09 07:25 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-09 07:25 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-07-09 07:25 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-09 07:25 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-09 07:25 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-09 07:25 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-09 07:25 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-07-09 07:25 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-07-09 07:25 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-07-09 07:25 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-07-09 07:25 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-07-09 07:25 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-07-09 07:25 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-07-09 07:25 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-07-08 13:16 - 2014-07-08 13:16 - 00000000 ____D () C:\Users\Dirtysteel\Downloads\antrenamer2
2014-07-08 13:16 - 2014-07-08 13:16 - 00000000 ____D () C:\Users\Dirtysteel\Downloads\advanced_renamer_portable
2014-07-07 07:18 - 2014-07-07 07:18 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Logishrd
2014-07-07 07:14 - 2014-07-07 07:14 - 00000000 __SHD () C:\Users\Administrator\AppData\Local\EmieUserList
2014-07-07 07:14 - 2014-07-07 07:14 - 00000000 __SHD () C:\Users\Administrator\AppData\Local\EmieSiteList
2014-07-07 07:11 - 2014-07-07 07:11 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Logishrd
2014-07-07 07:09 - 2014-07-07 07:09 - 00000000 ____D () C:\Users\Administrator\AppData\Local\AMD
2014-07-07 07:08 - 2014-07-07 07:11 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Logitech
2014-07-07 07:08 - 2014-07-07 07:08 - 00001446 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-07 07:08 - 2014-07-07 07:08 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\OnlineArmor
2014-07-07 07:08 - 2014-07-07 07:08 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\ATI
2014-07-07 07:08 - 2014-07-07 07:08 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Adobe
2014-07-07 07:08 - 2014-07-07 07:08 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Logitech
2014-07-07 07:08 - 2014-07-07 07:08 - 00000000 ____D () C:\Users\Administrator\AppData\Local\ATI
2014-07-07 07:06 - 2014-07-26 19:00 - 00000000 ____D () C:\Users\Administrator
2014-07-07 07:06 - 2014-07-07 07:06 - 00000020 ___SH () C:\Users\Administrator\ntuser.ini
2014-07-07 07:06 - 2014-07-07 07:06 - 00000000 _SHDL () C:\Users\Administrator\Vorlagen
2014-07-07 07:06 - 2014-07-07 07:06 - 00000000 _SHDL () C:\Users\Administrator\Startmenü
2014-07-07 07:06 - 2014-07-07 07:06 - 00000000 _SHDL () C:\Users\Administrator\Netzwerkumgebung
2014-07-07 07:06 - 2014-07-07 07:06 - 00000000 _SHDL () C:\Users\Administrator\Lokale Einstellungen
2014-07-07 07:06 - 2014-07-07 07:06 - 00000000 _SHDL () C:\Users\Administrator\Eigene Dateien
2014-07-07 07:06 - 2014-07-07 07:06 - 00000000 _SHDL () C:\Users\Administrator\Druckumgebung
2014-07-07 07:06 - 2014-07-07 07:06 - 00000000 _SHDL () C:\Users\Administrator\Documents\Eigene Musik
2014-07-07 07:06 - 2014-07-07 07:06 - 00000000 _SHDL () C:\Users\Administrator\Documents\Eigene Bilder
2014-07-07 07:06 - 2014-07-07 07:06 - 00000000 _SHDL () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-07 07:06 - 2014-07-07 07:06 - 00000000 _SHDL () C:\Users\Administrator\AppData\Local\Verlauf
2014-07-07 07:06 - 2014-07-07 07:06 - 00000000 _SHDL () C:\Users\Administrator\AppData\Local\Anwendungsdaten
2014-07-07 07:06 - 2014-07-07 07:06 - 00000000 _SHDL () C:\Users\Administrator\Anwendungsdaten
2014-07-07 07:06 - 2014-06-09 09:00 - 00088664 _____ () C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT
2014-07-07 07:06 - 2014-06-09 09:00 - 00000000 ____D () C:\Users\Administrator\Documents\Visual Studio 2010
2014-07-07 07:06 - 2013-09-10 22:43 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Microsoft Help
2014-07-07 07:06 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-07 07:06 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-07-06 07:48 - 2014-07-06 07:48 - 00062096 _____ () C:\Windows\SysWOW64\CCCInstall_201407060748260065.log
2014-07-05 07:48 - 2014-07-05 07:52 - 00000000 ____D () C:\Program Files (x86)\UnHackMe
2014-07-05 07:48 - 2014-07-05 07:50 - 00000000 ____D () C:\Users\Dirtysteel\Documents\RegRun2
2014-07-05 07:48 - 2014-07-05 07:48 - 00000002 RSHOT () C:\Windows\winstart.bat
2014-07-05 07:48 - 2014-07-05 07:48 - 00000002 RSHOT () C:\Windows\SysWOW64\CONFIG.NT
2014-07-05 07:48 - 2014-07-05 07:48 - 00000002 RSHOT () C:\Windows\SysWOW64\AUTOEXEC.NT
2014-07-05 06:13 - 2014-07-06 07:29 - 00000000 ____D () C:\ProgramData\Nimoru
2014-07-02 07:42 - 2014-07-26 19:18 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Roaming\Nitro PDF
2014-06-28 15:11 - 2014-06-28 15:11 - 00002166 _____ () C:\Users\Dirtysteel\Desktop\Sniper Elite 3 Limited Day One Edition.lnk
2014-06-28 11:18 - 2014-06-28 15:15 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Local\Sniper3
2014-06-28 11:16 - 2013-10-23 09:14 - 00970912 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120.dll
2014-06-28 11:09 - 2014-06-28 11:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sniper Elite 3
2014-06-28 10:47 - 2014-06-28 15:12 - 00000000 ____D () C:\Program Files (x86)\Sniper Elite 3

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-07-27 13:26 - 2014-03-22 12:31 - 00000000 ____D () C:\FRST
2014-07-27 13:21 - 2014-03-23 09:44 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-27 13:16 - 2014-07-27 11:43 - 00000000 ____D () C:\Users\Dirtysteel\Desktop\virus
2014-07-27 12:58 - 2014-05-25 08:11 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-27 12:58 - 2013-12-31 15:38 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Local\CrashDumps
2014-07-27 12:54 - 2014-07-26 19:27 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-07-27 12:39 - 2013-08-15 08:33 - 01464699 _____ () C:\Windows\WindowsUpdate.log
2014-07-27 12:16 - 2009-07-14 06:45 - 00026352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-27 12:16 - 2009-07-14 06:45 - 00026352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-27 12:13 - 2014-07-27 11:44 - 00000482 _____ () C:\Users\Dirtysteel\Downloads\defogger_disable.log
2014-07-27 12:12 - 2013-09-28 11:48 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-07-27 12:09 - 2014-07-26 19:29 - 00002357 _____ () C:\Users\Dirtysteel\Desktop\Sicherer Zahlungsverkehr.lnk
2014-07-27 12:09 - 2014-07-13 11:25 - 00000831 _____ () C:\Windows\setupact.log
2014-07-27 12:09 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-27 12:08 - 2014-05-25 07:50 - 1073774640 ____C () C:\RAMDisk.img
2014-07-27 11:57 - 2013-09-25 11:58 - 00000000 ____D () C:\Users\Dirtysteel\Downloads\RAT
2014-07-27 11:44 - 2014-07-27 11:44 - 00000000 _____ () C:\Users\Dirtysteel\defogger_reenable
2014-07-27 11:44 - 2013-08-15 08:37 - 00000000 ____D () C:\Users\Dirtysteel
2014-07-27 11:42 - 2014-07-27 11:42 - 00050477 _____ () C:\Users\Dirtysteel\Downloads\Defogger.exe
2014-07-27 11:40 - 2014-07-26 19:28 - 00001151 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2014-07-27 11:13 - 2014-07-27 11:13 - 00002910 _____ () C:\Windows\PFRO.log
2014-07-26 21:22 - 2014-05-25 07:50 - 1073774640 ____C () C:\RAMDisk.img.bak
2014-07-26 21:14 - 2014-07-26 21:13 - 00000000 ____D () C:\Users\Dirtysteel\Downloads\SysinternalsSuite
2014-07-26 21:11 - 2014-07-26 21:11 - 01243655 _____ () C:\Users\Dirtysteel\Downloads\ProcessExplorer.zip
2014-07-26 20:56 - 2014-07-26 20:38 - 00000000 ____D () C:\Program Files (x86)\OkayFreedom
2014-07-26 20:56 - 2014-07-26 20:37 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Roaming\Steganos
2014-07-26 20:45 - 2014-06-22 17:33 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Local\Battle.net
2014-07-26 20:42 - 2014-07-26 20:38 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Roaming\Steganos VPN
2014-07-26 20:36 - 2014-07-26 20:25 - 00000000 ____D () C:\Program Files\OpenVPN
2014-07-26 20:23 - 2014-07-26 20:23 - 00000000 ____D () C:\Users\Dirtysteel\Downloads\OpenVPN-Certificate-Bundle-Server2
2014-07-26 19:49 - 2014-07-11 18:17 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-07-26 19:49 - 2014-07-11 18:17 - 00000000 ____D () C:\ProgramData\Skype
2014-07-26 19:49 - 2014-07-11 18:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-07-26 19:46 - 2014-06-22 18:05 - 00000000 ____D () C:\Program Files (x86)\Hearthstone
2014-07-26 19:46 - 2014-06-22 17:33 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-07-26 19:29 - 2014-07-27 12:30 - 00000024 _____ () C:\Users\Dirtysteel\Desktop\Neues Textdokument - Kopie.txt
2014-07-26 19:29 - 2014-07-26 19:18 - 00000024 _____ () C:\Users\Dirtysteel\Desktop\Neues Textdokument.txt
2014-07-26 19:28 - 2014-07-26 19:28 - 00000000 ____D () C:\Windows\ELAMBKUP
2014-07-26 19:28 - 2014-07-26 19:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security
2014-07-26 19:27 - 2014-07-26 19:27 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-07-26 19:19 - 2013-11-18 15:04 - 00002238 ____H () C:\Users\Dirtysteel\Documents\Default.rdp
2014-07-26 19:18 - 2014-07-02 07:42 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Roaming\Nitro PDF
2014-07-26 19:18 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-07-26 19:13 - 2013-10-03 18:21 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Roaming\TS3Client
2014-07-26 19:13 - 2013-10-03 18:19 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2014-07-26 19:04 - 2011-04-12 09:43 - 01105134 _____ () C:\Windows\system32\perfh007.dat
2014-07-26 19:04 - 2011-04-12 09:43 - 00279212 _____ () C:\Windows\system32\perfc007.dat
2014-07-26 19:04 - 2009-07-14 07:13 - 00006964 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-26 19:00 - 2014-07-26 17:43 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EVE
2014-07-26 19:00 - 2014-07-20 14:59 - 00000000 ____D () C:\Users\Dirtysteel\Documents\RoS-BoT
2014-07-26 19:00 - 2014-07-20 13:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo III
2014-07-26 19:00 - 2014-07-20 10:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2014-07-26 19:00 - 2014-07-07 07:06 - 00000000 ____D () C:\Users\Administrator
2014-07-26 19:00 - 2014-06-22 17:33 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Roaming\Battle.net
2014-07-26 19:00 - 2014-06-14 09:31 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-26 19:00 - 2013-10-03 19:05 - 00000000 ____D () C:\ProgramData\Package Cache
2014-07-26 19:00 - 2013-09-20 20:26 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Roaming\vlc
2014-07-26 19:00 - 2013-08-26 08:54 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2014-07-26 19:00 - 2013-08-15 09:11 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-07-26 19:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-07-26 18:22 - 2014-07-26 18:22 - 00000000 ____D () C:\Users\Dirtysteel\Documents\EVE
2014-07-26 16:59 - 2014-07-26 16:59 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Local\CCP
2014-07-20 15:34 - 2014-07-20 13:26 - 00000000 ____D () C:\Users\Dirtysteel\Documents\Diablo III
2014-07-20 14:29 - 2014-07-20 14:29 - 00000036 _____ () C:\Windows\SysWOW64\config.ini
2014-07-20 13:25 - 2014-07-20 13:02 - 00000000 ____D () C:\Program Files (x86)\Diablo III
2014-07-20 13:03 - 2014-07-20 13:03 - 00001183 _____ () C:\Users\Public\Desktop\Diablo III.lnk
2014-07-20 12:57 - 2014-07-20 12:41 - 00000000 ____D () C:\Users\Dirtysteel\.junique
2014-07-20 12:57 - 2014-05-10 10:58 - 00000000 ____D () C:\Users\Dirtysteel\.minion
2014-07-20 12:10 - 2014-03-01 09:26 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Roaming\Awesomium
2014-07-20 11:06 - 2014-07-20 11:06 - 00000000 ____D () C:\ProgramData\ATI
2014-07-20 10:46 - 2014-07-20 10:46 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2014-07-20 10:46 - 2013-08-15 09:05 - 00000000 ____D () C:\ProgramData\AMD
2014-07-20 10:45 - 2014-07-20 10:45 - 00062096 _____ () C:\Windows\SysWOW64\CCCInstall_201407201045514918.log
2014-07-20 10:45 - 2014-07-11 18:17 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Roaming\Skype
2014-07-20 10:45 - 2013-08-15 09:04 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-07-20 10:38 - 2013-08-15 09:03 - 00000000 ____D () C:\AMD
2014-07-19 14:34 - 2014-07-19 14:34 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Local\LumaEmu_SteamCloud
2014-07-19 14:11 - 2014-07-19 14:11 - 00000000 ___SH () C:\Users\Dirtysteel\AppData\Local\LumaEmu
2014-07-13 11:25 - 2014-07-13 11:25 - 00000000 _____ () C:\Windows\setuperr.log
2014-07-12 17:36 - 2014-07-12 17:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WTFast
2014-07-12 17:36 - 2014-07-12 17:35 - 00000000 ____D () C:\Program Files (x86)\WTFast
2014-07-12 17:35 - 2014-07-12 17:35 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Local\AAA_Internet_Publishing,_
2014-07-12 14:01 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-07-12 12:34 - 2014-05-27 18:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-07-12 12:34 - 2013-09-24 10:16 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-07-12 12:34 - 2013-09-24 10:16 - 00000000 ____D () C:\Program Files\CCleaner
2014-07-12 12:32 - 2013-08-23 12:00 - 00000000 ____D () C:\Windows\pss
2014-07-12 09:10 - 2009-07-14 06:45 - 05032376 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-11 21:01 - 2014-05-06 19:09 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-07-11 21:01 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-07-11 21:01 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-07-11 20:15 - 2013-08-26 08:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-07-11 20:15 - 2013-08-26 08:49 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-11 20:14 - 2013-08-15 09:25 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-11 20:10 - 2013-08-15 09:25 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-07-11 20:06 - 2014-07-11 20:06 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Local\Secunia PSI
2014-07-11 19:23 - 2014-07-11 19:23 - 00000000 ____D () C:\Users\Dirtysteel\Downloads\WNR1000v3-V1.0.2.68_60.0.93
2014-07-11 19:03 - 2014-04-02 10:32 - 00000000 ____D () C:\Users\Dirtysteel\Desktop\handy
2014-07-11 18:17 - 2014-07-11 18:17 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-07-11 18:17 - 2014-07-11 18:17 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Local\Skype
2014-07-11 17:44 - 2014-03-23 09:44 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-11 17:44 - 2013-08-15 09:17 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-11 17:44 - 2013-08-15 09:17 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-11 17:24 - 2013-09-14 17:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeraCopy
2014-07-11 17:24 - 2013-09-14 17:04 - 00000000 ____D () C:\Program Files\TeraCopy
2014-07-11 17:24 - 2013-08-19 09:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware
2014-07-11 17:21 - 2014-07-10 07:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit PhantomPDF
2014-07-11 17:21 - 2014-07-09 12:08 - 00000000 ____D () C:\Program Files (x86)\Secunia
2014-07-11 17:21 - 2014-06-15 09:49 - 00000000 ____D () C:\Program Files\Nitro
2014-07-11 17:21 - 2014-06-15 09:49 - 00000000 ____D () C:\Program Files\Common Files\Nitro
2014-07-11 17:21 - 2014-06-15 09:49 - 00000000 ____D () C:\Program Files (x86)\Nitro
2014-07-11 17:21 - 2014-05-17 13:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ant Renamer
2014-07-11 17:21 - 2014-05-17 13:54 - 00000000 ____D () C:\Program Files (x86)\Ant Renamer
2014-07-11 17:21 - 2014-05-17 13:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ReNamer
2014-07-11 17:21 - 2014-05-17 13:47 - 00000000 ____D () C:\Program Files (x86)\ReNamer
2014-07-11 17:21 - 2014-05-10 09:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinHTTrack
2014-07-11 17:21 - 2014-05-10 09:10 - 00000000 ____D () C:\Program Files\WinHTTrack
2014-07-11 17:21 - 2013-12-22 18:19 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\No-IP DUC
2014-07-11 17:21 - 2013-12-22 18:19 - 00000000 ____D () C:\Program Files (x86)\No-IP
2014-07-11 17:21 - 2013-09-14 17:04 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Roaming\TeraCopy
2014-07-11 17:21 - 2013-08-15 17:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2014-07-11 17:21 - 2013-08-15 17:14 - 00000000 ____D () C:\Program Files\7-Zip
2014-07-11 17:21 - 2013-08-15 09:17 - 00000000 ____D () C:\Windows\system32\Macromed
2014-07-11 17:21 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-07-11 17:18 - 2014-06-15 09:49 - 00000000 ____D () C:\ProgramData\Nitro
2014-07-11 17:17 - 2013-08-26 08:49 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-07-11 17:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system
2014-07-11 16:57 - 2013-08-19 09:11 - 00000000 ____D () C:\Users\Dirtysteel\Documents\Anti-Malware
2014-07-11 15:17 - 2014-02-06 20:44 - 00007606 _____ () C:\Users\Dirtysteel\AppData\Local\Resmon.ResmonCfg
2014-07-11 15:11 - 2014-06-15 09:21 - 00000000 ____D () C:\Users\Dirtysteel\Desktop\Unitymedia
2014-07-11 12:30 - 2014-07-11 12:30 - 00000000 ____D () C:\ProgramData\Emsisoft
2014-07-10 19:15 - 2013-08-15 08:58 - 00000000 ____D () C:\Users\Dirtysteel\Desktop\GEB
2014-07-10 08:02 - 2014-07-10 08:02 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Roaming\Foxit Software
2014-07-10 07:49 - 2014-07-10 07:49 - 00000000 ____D () C:\Program Files (x86)\Foxit Software
2014-07-09 18:35 - 2014-07-09 18:34 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Roaming\Aspell
2014-07-09 18:03 - 2014-07-09 18:03 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Local\Aspell
2014-07-09 17:52 - 2014-07-09 17:52 - 10519584 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll
2014-07-09 17:52 - 2014-07-09 17:52 - 00143304 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll
2014-07-09 17:52 - 2014-07-09 17:52 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2014-07-09 17:52 - 2014-07-09 17:52 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2014-07-09 17:52 - 2014-07-09 17:52 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2014-07-09 17:52 - 2014-07-09 17:52 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2014-07-09 17:52 - 2014-06-21 07:26 - 00099520 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll
2014-07-09 17:52 - 2013-08-31 02:13 - 09016760 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll
2014-07-09 17:52 - 2013-08-31 02:13 - 01110992 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
2014-07-09 17:52 - 2013-03-29 04:37 - 01330912 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll
2014-07-09 17:52 - 2013-03-29 04:37 - 00126336 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll
2014-07-09 17:52 - 2013-03-29 04:37 - 00117584 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
2014-07-09 17:51 - 2014-06-21 07:25 - 07102496 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdva.dll
2014-07-09 17:51 - 2014-06-21 07:25 - 06879016 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll
2014-07-09 17:51 - 2013-03-29 04:36 - 08108312 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll
2014-07-09 17:51 - 2013-03-29 04:36 - 07892000 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
2014-07-09 17:47 - 2014-07-09 17:47 - 00276192 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdacpksd.sys
2014-07-09 17:45 - 2014-07-09 17:45 - 15950848 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2014-07-09 17:35 - 2014-07-09 17:35 - 32876544 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2014-07-09 17:35 - 2014-07-09 17:35 - 00231424 _____ () C:\Windows\system32\clinfo.exe
2014-07-09 17:35 - 2014-07-09 17:35 - 00098816 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OpenVideo64.dll
2014-07-09 17:35 - 2014-07-09 17:35 - 00086528 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OVDecode64.dll
2014-07-09 17:35 - 2014-07-09 17:35 - 00083456 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OpenVideo.dll
2014-07-09 17:35 - 2014-07-09 17:35 - 00073216 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OVDecode.dll
2014-07-09 17:34 - 2014-07-09 17:34 - 27843072 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll
2014-07-09 17:34 - 2014-07-09 17:34 - 00065024 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-07-09 17:34 - 2014-07-09 17:34 - 00058880 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-07-09 17:33 - 2013-03-29 04:04 - 27529216 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
2014-07-09 17:31 - 2014-07-09 17:31 - 05225472 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmantle64.dll
2014-07-09 17:31 - 2014-07-09 17:31 - 00127488 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle64.dll
2014-07-09 17:31 - 2014-07-09 17:31 - 00113664 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantle32.dll
2014-07-09 17:28 - 2014-07-09 17:28 - 23028224 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2014-07-09 17:28 - 2014-07-09 17:28 - 15716352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2014-07-09 17:28 - 2014-07-09 17:28 - 04180992 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmantle32.dll
2014-07-09 17:28 - 2014-07-09 17:28 - 00598112 _____ () C:\Windows\SysWOW64\atiapfxx.blb
2014-07-09 17:28 - 2014-07-09 17:28 - 00598112 _____ () C:\Windows\system32\atiapfxx.blb
2014-07-09 17:28 - 2014-07-09 17:28 - 00366592 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2014-07-09 17:28 - 2014-07-09 17:28 - 00062464 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2014-07-09 17:28 - 2014-07-09 17:28 - 00055808 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2014-07-09 17:28 - 2014-07-09 17:28 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2014-07-09 17:28 - 2014-07-09 17:28 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2014-07-09 17:27 - 2014-07-09 17:27 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2014-07-09 17:26 - 2014-07-09 17:26 - 00048128 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl6.dll
2014-07-09 17:26 - 2014-07-09 17:26 - 00037888 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmmcl.dll
2014-07-09 17:25 - 2014-07-09 17:25 - 03437632 _____ () C:\Windows\system32\atiumd6a.cap
2014-07-09 17:25 - 2014-07-09 17:25 - 00091648 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl64.dll
2014-07-09 17:25 - 2014-07-09 17:25 - 00085504 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantleaxl32.dll
2014-07-09 17:24 - 2014-07-09 17:24 - 00588800 _____ (AMD) C:\Windows\system32\atieclxx.exe
2014-07-09 17:24 - 2014-07-09 17:24 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2014-07-09 17:24 - 2014-07-09 17:24 - 00239616 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2014-07-09 17:24 - 2014-07-09 17:24 - 00031232 _____ (AMD) C:\Windows\system32\atimuixx.dll
2014-07-09 17:23 - 2014-07-09 17:23 - 00190976 _____ (AMD) C:\Windows\system32\atitmm64.dll
2014-07-09 17:22 - 2014-07-09 17:22 - 03471376 _____ () C:\Windows\SysWOW64\atiumdva.cap
2014-07-09 17:21 - 2014-06-21 03:39 - 00826368 _____ (AMD) C:\Windows\system32\coinst_14.20.dll
2014-07-09 17:20 - 2014-07-09 17:20 - 00898560 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2014-07-09 17:20 - 2013-03-29 03:10 - 01207296 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2014-07-09 17:19 - 2014-07-09 17:19 - 00557056 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2014-07-09 17:19 - 2014-07-09 17:19 - 00133632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2014-07-09 17:19 - 2014-07-09 17:19 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2014-07-09 17:19 - 2014-07-09 17:19 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2014-07-09 17:19 - 2013-03-29 03:10 - 00146944 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2014-07-09 17:19 - 2013-03-29 03:10 - 00075264 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
2014-07-09 17:17 - 2014-07-09 17:17 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2014-07-09 13:10 - 2014-07-09 13:10 - 00000000 ____D () C:\Users\Dirtysteel\Neuer Ordner
2014-07-09 12:19 - 2014-07-09 12:19 - 00313256 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-07-09 12:19 - 2014-07-09 12:19 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-07-09 12:19 - 2014-07-09 12:19 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-07-09 12:19 - 2014-07-09 12:19 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-07-09 12:19 - 2014-07-09 12:19 - 00000000 ____D () C:\Program Files\Java
2014-07-09 12:16 - 2014-07-09 12:17 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-09 12:16 - 2014-07-09 12:16 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-09 12:16 - 2014-07-09 12:16 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-09 12:16 - 2014-07-09 12:16 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-09 12:16 - 2013-09-04 21:32 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-09 12:13 - 2014-07-09 12:13 - 00000934 _____ () C:\Users\Public\Desktop\WinSCP.lnk
2014-07-09 12:13 - 2014-03-08 12:34 - 00001030 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinSCP.lnk
2014-07-09 12:13 - 2013-10-07 09:46 - 00000000 ____D () C:\Program Files (x86)\WinSCP
2014-07-09 12:06 - 2014-07-09 12:06 - 05329480 _____ (Secunia) C:\Users\Dirtysteel\Downloads\PSISetup_3.0.0.9016.exe
2014-07-09 11:40 - 2014-01-29 12:39 - 00000000 ____D () C:\Users\Dirtysteel\dwhelper
2014-07-09 11:39 - 2014-07-09 11:39 - 00051200 _____ () C:\Windows\system32\kdbsdk64.dll
2014-07-09 11:37 - 2014-07-09 11:37 - 00038912 _____ () C:\Windows\SysWOW64\kdbsdk32.dll
2014-07-09 11:21 - 2014-02-06 20:05 - 05659136 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-07-08 13:16 - 2014-07-08 13:16 - 00000000 ____D () C:\Users\Dirtysteel\Downloads\antrenamer2
2014-07-08 13:16 - 2014-07-08 13:16 - 00000000 ____D () C:\Users\Dirtysteel\Downloads\advanced_renamer_portable
2014-07-08 13:07 - 2014-06-08 10:44 - 00001129 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-07-08 08:04 - 2014-05-17 13:34 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
2014-07-07 08:08 - 2014-04-06 09:24 - 00000000 ____D () C:\Users\Dirtysteel\Desktop\EBAY
2014-07-07 07:18 - 2014-07-07 07:18 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Logishrd
2014-07-07 07:18 - 2013-08-15 18:30 - 00000000 ____D () C:\Program Files\Common Files\LogiShrd
2014-07-07 07:18 - 2013-08-15 18:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2014-07-07 07:17 - 2013-08-15 18:30 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys
2014-07-07 07:16 - 2013-08-15 18:29 - 00000000 ____D () C:\ProgramData\LogiShrd
2014-07-07 07:14 - 2014-07-07 07:14 - 00000000 __SHD () C:\Users\Administrator\AppData\Local\EmieUserList
2014-07-07 07:14 - 2014-07-07 07:14 - 00000000 __SHD () C:\Users\Administrator\AppData\Local\EmieSiteList
2014-07-07 07:11 - 2014-07-07 07:11 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Logishrd
2014-07-07 07:11 - 2014-07-07 07:08 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Logitech
2014-07-07 07:09 - 2014-07-07 07:09 - 00000000 ____D () C:\Users\Administrator\AppData\Local\AMD
2014-07-07 07:08 - 2014-07-07 07:08 - 00001446 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-07 07:08 - 2014-07-07 07:08 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\OnlineArmor
2014-07-07 07:08 - 2014-07-07 07:08 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\ATI
2014-07-07 07:08 - 2014-07-07 07:08 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Adobe
2014-07-07 07:08 - 2014-07-07 07:08 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Logitech
2014-07-07 07:08 - 2014-07-07 07:08 - 00000000 ____D () C:\Users\Administrator\AppData\Local\ATI
2014-07-07 07:08 - 2009-07-14 06:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-07-07 07:06 - 2014-07-07 07:06 - 00000020 ___SH () C:\Users\Administrator\ntuser.ini
2014-07-07 07:06 - 2014-07-07 07:06 - 00000000 _SHDL () C:\Users\Administrator\Vorlagen
2014-07-07 07:06 - 2014-07-07 07:06 - 00000000 _SHDL () C:\Users\Administrator\Startmenü
2014-07-07 07:06 - 2014-07-07 07:06 - 00000000 _SHDL () C:\Users\Administrator\Netzwerkumgebung
2014-07-07 07:06 - 2014-07-07 07:06 - 00000000 _SHDL () C:\Users\Administrator\Lokale Einstellungen
2014-07-07 07:06 - 2014-07-07 07:06 - 00000000 _SHDL () C:\Users\Administrator\Eigene Dateien
2014-07-07 07:06 - 2014-07-07 07:06 - 00000000 _SHDL () C:\Users\Administrator\Druckumgebung
2014-07-07 07:06 - 2014-07-07 07:06 - 00000000 _SHDL () C:\Users\Administrator\Documents\Eigene Musik
2014-07-07 07:06 - 2014-07-07 07:06 - 00000000 _SHDL () C:\Users\Administrator\Documents\Eigene Bilder
2014-07-07 07:06 - 2014-07-07 07:06 - 00000000 _SHDL () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-07 07:06 - 2014-07-07 07:06 - 00000000 _SHDL () C:\Users\Administrator\AppData\Local\Verlauf
2014-07-07 07:06 - 2014-07-07 07:06 - 00000000 _SHDL () C:\Users\Administrator\AppData\Local\Anwendungsdaten
2014-07-07 07:06 - 2014-07-07 07:06 - 00000000 _SHDL () C:\Users\Administrator\Anwendungsdaten
2014-07-06 08:47 - 2013-08-15 08:58 - 00000000 ____D () C:\Users\Dirtysteel\Desktop\Game
2014-07-06 07:58 - 2013-08-15 08:56 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Roaming\RIFT
2014-07-06 07:55 - 2013-09-24 11:40 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Roaming\Raptr
2014-07-06 07:53 - 2013-09-24 10:24 - 00000000 ____D () C:\Program Files (x86)\Raptr
2014-07-06 07:48 - 2014-07-06 07:48 - 00062096 _____ () C:\Windows\SysWOW64\CCCInstall_201407060748260065.log
2014-07-06 07:29 - 2014-07-05 06:13 - 00000000 ____D () C:\ProgramData\Nimoru
2014-07-05 09:09 - 2013-08-23 17:19 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Roaming\Notepad++
2014-07-05 09:00 - 2013-12-17 10:58 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Roaming\.purple
2014-07-05 07:52 - 2014-07-05 07:48 - 00000000 ____D () C:\Program Files (x86)\UnHackMe
2014-07-05 07:50 - 2014-07-05 07:48 - 00000000 ____D () C:\Users\Dirtysteel\Documents\RegRun2
2014-07-05 07:48 - 2014-07-05 07:48 - 00000002 RSHOT () C:\Windows\winstart.bat
2014-07-05 07:48 - 2014-07-05 07:48 - 00000002 RSHOT () C:\Windows\SysWOW64\CONFIG.NT
2014-07-05 07:48 - 2014-07-05 07:48 - 00000002 RSHOT () C:\Windows\SysWOW64\AUTOEXEC.NT
2014-07-04 19:26 - 2014-06-22 17:30 - 00000000 ____D () C:\ProgramData\Battle.net
2014-06-30 04:09 - 2014-07-11 17:42 - 00519168 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-30 04:04 - 2014-07-11 17:42 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-29 09:58 - 2014-05-30 11:32 - 00000000 ____D () C:\ProgramData\Origin
2014-06-29 09:57 - 2014-05-30 11:31 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-06-28 15:15 - 2014-06-28 11:18 - 00000000 ____D () C:\Users\Dirtysteel\AppData\Local\Sniper3
2014-06-28 15:12 - 2014-06-28 10:47 - 00000000 ____D () C:\Program Files (x86)\Sniper Elite 3
2014-06-28 15:11 - 2014-06-28 15:11 - 00002166 _____ () C:\Users\Dirtysteel\Desktop\Sniper Elite 3 Limited Day One Edition.lnk
2014-06-28 11:09 - 2014-06-28 11:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sniper Elite 3

Some content of TEMP:
====================
C:\Users\Dirtysteel\AppData\Local\Temp\FTDOSO.exe
C:\Users\Dirtysteel\AppData\Local\Temp\proxy_vole3142382632922518457.dll
C:\Users\Dirtysteel\AppData\Local\Temp\tmp153A.exe
C:\Users\Dirtysteel\AppData\Local\Temp\tmp8729.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe
[2011-06-16 19:09] - [2011-06-18 01:30] - 2871808 ____A (Microsoft Corporation) 5740B1555D51D56547043181789027A5

C:\Windows\SysWOW64\explorer.exe
[2011-06-16 19:09] - [2011-06-18 01:35] - 2616320 ____A (Microsoft Corporation) 88B413E78ADB75A062AB947C1BF6D49A

C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-26 12:32

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-07-2014
Ran by Dirtysteel at 2014-07-27 13:27:31
Running from C:\Users\Dirtysteel\Desktop\virus\Scan\FRST64
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Kaspersky Internet Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}
AS: Kaspersky Internet Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
AC3Filter 2.6.0b (HKLM-x32\...\AC3Filter_is1) (Version: 2.6.0b - Alexander Vigovsky)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.1.1.220 - Adobe Systems Incorporated)
Adobe Flash Player 14 Plugin (HKLM-x32\...\{3FC9A6DE-C105-4576-8F63-656FFB1BF8EB}) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Photoshop CC (HKLM-x32\...\{2D99B50E-431D-4AA8-85C1-172A6F8BCF09}) (Version: 14.0 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 13.30.100.40709 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2014.0709.1135.19003 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (HKLM\...\{EE0B4480-194D-C725-EDF8-6CE3FC4DDC89}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Fuel (Version: 2014.0709.1135.19003 - Ihr Firmenname) Hidden
AMD Media Foundation Decoders (Version: 1.0.80830.1925 - Advanced Micro Devices, Inc.) Hidden
AMD System Monitor (HKLM-x32\...\{6EFD0C42-4CC1-4716-A0CA-21C1A062CF34}) (Version: 1.0.9 - Advanced Micro Devices, Inc.)
AMD Wireless Display v3.0 (Version: 1.0.0.10 - Advanced Micro Devices, Inc.) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.15 - Advanced Micro Devices, Inc.) Hidden
Ant Renamer (HKLM-x32\...\Ant Renamer 2_is1) (Version: 2.10.0 - Ant Software)
AOC UI Installer 3.1.0 (HKLM-x32\...\{87464284-11C8-4F83-88EC-E8013320B789}) (Version: 3.1.0 - VikingWorks)
Arc (HKLM-x32\...\{CED8E25B-122A-4E80-B612-7F99B93284B3}) (Version: 1.0.0.5510 - Perfect World Entertainment)
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version:  - Bandisoft.com)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.4.0 - EA Digital Illusions CE AB)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2014.0709.1135.19003 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2014.0709.1135.19003 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2014.0709.1135.19003 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2014.0709.1134.19003 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2014.0709.1134.19003 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2014.0709.1134.19003 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2014.0709.1134.19003 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2014.0709.1134.19003 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2014.0709.1134.19003 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2014.0709.1134.19003 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2014.0709.1134.19003 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2014.0709.1134.19003 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2014.0709.1134.19003 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2014.0709.1134.19003 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2014.0709.1134.19003 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2014.0709.1134.19003 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2014.0709.1134.19003 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2014.0709.1134.19003 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2014.0709.1134.19003 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2014.0709.1134.19003 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2014.0709.1134.19003 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2014.0709.1134.19003 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2014.0709.1134.19003 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2014.0709.1134.19003 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2014.0709.1134.19003 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2014.0709.1135.19003 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.15 - Piriform)
Cheat Engine 6.3 (HKLM-x32\...\Cheat Engine 6.3_is1) (Version:  - Cheat Engine)
Cisco Systems VPN Client 5.0.07.0440 (HKLM\...\{5FDC06BF-3D3D-4367-8FFB-4FAFCB61972D}) (Version: 5.0.7 - Cisco Systems, Inc.)
Creative Audio-Systemsteuerung (HKLM-x32\...\AudioCS) (Version: 2.56 - Creative Technology Limited)
Creative Software AutoUpdate (HKLM-x32\...\Creative Software AutoUpdate) (Version: 1.40 - Creative Technology Limited)
Creative Sound Blaster Properties x64 Edition (HKLM-x32\...\Creative Sound Blaster Properties x64 Edition) (Version:  - )
Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition (HKLM\...\{90150000-0051-0000-1000-0000000FF1CE}_Office15.VISPRO_{D1C35197-B856-45E2-BA67-5ABB6B0CA9C2}) (Version:  - Microsoft)
Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D1C35197-B856-45E2-BA67-5ABB6B0CA9C2}) (Version:  - Microsoft)
Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition (HKLM\...\{91150000-0051-0000-1000-0000000FF1CE}_Office15.VISPROR_{D1C35197-B856-45E2-BA67-5ABB6B0CA9C2}) (Version:  - Microsoft)
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
ffdshow v1.3.4500 [2013-01-06] (HKLM-x32\...\ffdshow_is1) (Version: 1.3.4500.0 - )
FormatFactory 3.3.3.0 (HKLM-x32\...\FormatFactory) (Version: 3.3.3.0 - Format Factory)
Haali Media Splitter (HKLM-x32\...\HaaliMkx) (Version:  - )
HashCheck Shell Extension (x86-64) (HKLM\...\HashCheck Shell Extension) (Version: 2.1.11.1 - Kai Liu)
HD Tune Pro 5.50 (HKLM-x32\...\HD Tune Pro_is1) (Version:  - EFD Software)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Hotfix für Microsoft Visual C++ 2010 Express - DEU (KB2635973) (HKLM-x32\...\{DEEB5FE3-40F5-3C5B-8F85-5306EF3C08F4}.KB2635973) (Version: 1 - Microsoft Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
Jar2Exe Wizard (HKLM-x32\...\{9C2C743A-5C55-48D3-91ED-FA5F3872B83C}) (Version: 2.1.913 - RegExLab.com)
Java 7 Update 55 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417055FF}) (Version: 7.0.550 - Oracle)
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{6F6873E3-5C92-4049-B511-231A138DD090}) (Version: 14.0.0.4651 - Kaspersky Lab)
Kaspersky Internet Security (x32 Version: 14.0.0.4651 - Kaspersky Lab) Hidden
LastPass(Nur deinstallieren) (HKCU\...\LastPass) (Version:  - LastPass)
Logitech Gaming Software (Version: 8.45.88 - Logitech Inc.) Hidden
Logitech Gaming Software 8.46 (HKLM\...\Logitech Gaming Software) (Version: 8.46.27 - Logitech Inc.)
Logitech SetPoint 6.65 (HKLM\...\sp6) (Version: 6.65.62 - Logitech)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft .NET Framework 1.1 (HKLM-x32\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322 - Microsoft) Hidden
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Access MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft DCF MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Excel MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Groove MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation)
Microsoft Help Viewer 1.1 (Version: 1.1.40219 - Microsoft Corporation) Hidden
Microsoft Help Viewer 1.1 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.1 Language Pack - DEU) (Version: 1.1.40219 - Microsoft Corporation)
Microsoft Help Viewer 1.1 Language Pack - DEU (Version: 1.1.40219 - Microsoft Corporation) Hidden
Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Lync MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office 32-bit Components 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft OneNote MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Publisher MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 DEU (HKLM\...\{C3EAE456-7E7A-451F-80EF-F34C7A13C558}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Visio MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Visio Professional 2013 (HKLM\...\Office15.VISPRO) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visio Professional 2013 (HKLM\...\Office15.VISPROR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visio Professional 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Visual C++  Compilers 2010 Standard - enu - x86 (x32 Version: 10.0.40219 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Runtime - 10.0.40219 (HKLM\...\{1C7C8AAF-A16D-32E8-89E5-F6D165DE0BCE}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Runtime - 10.0.40219 (HKLM-x32\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Express - DEU (HKLM-x32\...\Microsoft Visual C++ 2010 Express - DEU) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Express - DEU (x32 Version: 10.0.40219 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (HKLM\...\{3C983A67-DFB2-3D3D-AD9E-CA1A5A09FD18}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Service Pack 1 (HKLM-x32\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Service Pack 1 (x32 Version: 10.0.40219 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50325 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.50330 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU (Version: 10.0.50325 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50325 - Microsoft Corporation)
Microsoft Word MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Minion (HKCU\...\{Minion}}_is1) (Version: 2.0 - ZAM Network LLC)
Mozilla Firefox 30.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
NAVIGON Fresh 3.5.1 (HKLM-x32\...\NAVIGON Fresh) (Version: 3.5.1 - NAVIGON)
Neverwinter (HKLM-x32\...\Steam App 109600) (Version:  - Cryptic Studios)
Nitro Pro 9 (HKLM-x32\...\{95ce86dd-e28c-4df6-a200-cb48717c3e86}) (Version: 9.5.1.12 - Nitro)
Nitro Pro 9 (Version: 9.5.1.12 - Nitro) Hidden
No-IP DUC (HKLM-x32\...\NoIPDUC) (Version: 4.0.1 - Vitalwerks Internet Solutions LLC)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.3 - Notepad++ Team)
Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Paragon Backup & Recovery™ 2014 Free (HKLM\...\{C268B5E1-A5DA-11DF-A289-005056C00008}) (Version: 90.00.0003 - Paragon Software)
PDF Settings CC (x32 Version: 12.0 - Adobe Systems Incorporated) Hidden
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.214.2 - Tracker Software Products Ltd)
Peggle (HKLM-x32\...\{715AD72D-887A-459E-988B-D4F3E87FA24B}) (Version: 1.04.0.0 - PopCap Games)
Pflanzen gegen Zombies™ (HKLM-x32\...\{5E6536C2-E79A-49CF-83EA-817AD81F9FC8}) (Version: 1.2.0.1093 - Electronic Arts, Inc.)
Pidgin (HKLM-x32\...\Pidgin) (Version: 2.10.9 - )
pidgin-otr 4.0.0-1 (HKLM-x32\...\pidgin-otr) (Version: 4.0.0-1 - Cypherpunks CA)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
RAMDisk (HKLM-x32\...\{BA624CEA-0B42-4CFA-BFC2-09BEB5A55A46}) (Version: 4.4.0.31 - Dataram, Inc.)
Raptr (HKLM-x32\...\Raptr) (Version:  - )
ReNamer (HKLM-x32\...\ReNamer_is1) (Version: 5.74 - Denis Kozlov)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.39.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.39.0 - Renesas Electronics Corporation) Hidden
Revo Uninstaller Pro 3.0.7 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.0.7 - VS Revo Group, Ltd.)
RoboForm 7-9-1-1 (All Users) (HKLM-x32\...\AI RoboForm) (Version: 7-9-1-1 - Siber Systems)
Samsung CLP-360 Series (HKLM-x32\...\Samsung CLP-360 Series) (Version: 1.12 (05.12.2013) - Samsung Electronics Co., Ltd.)
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14034.12 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.14034.12 - Samsung Electronics Co., Ltd.) Hidden
Samsung Printer Live Update (HKLM-x32\...\Samsung Printer Live Update) (Version: 1.01.00:04(2013-04-22) - Samsung Electronics Co., Ltd.)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0051-0000-1000-0000000FF1CE}_Office15.VISPRO_{F0C12872-B60D-4E37-A2F9-20C46A5E1F1A}) (Version:  - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version:  - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{91150000-0051-0000-1000-0000000FF1CE}_Office15.VISPROR_{F0C12872-B60D-4E37-A2F9-20C46A5E1F1A}) (Version:  - Microsoft)