Guten Tag liebes Trojaner Board Team,

Ich habe so eben meinen Pc eingeschaltet und sofort ist mir aufgefallen das mein Desktop Hintergrund sowie einige Desktop Symbole gelöscht wurden. Ausserdem wurden meine Internetbrowser zurückgesetzt. Keines dieser Dinge habe ich absichtlich getan und ich habe keine Ahnung wie das passiert sein kann. Bei dem Internet Browsern startet nun eine Seite mit dem Namen v9.com als Startseite. Wenn ich das bei Google eingebe wird dort etwas über Virus berichtet deshalb wende ich mich an euer kompetentes Team da ihr mir schonmal mit einem hartnäckigen Virus geholfen hattet.

Ich besitze eine kostenlose Avast Version als Virenschutzprogramm.

Vielen Dank schonmal im vorraus für die Antwort

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-10-2014
Ran by Ozoma (administrator) on OZOMA-PC on 23-10-2014 20:23:04
Running from C:\Users\TEMP\Downloads
Loaded Profile: Ozoma (Available profiles: UpdatusUser & Ozoma)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.5\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2012-02-01] (Intel Corporation)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2014-02-14] (DivX, LLC)
HKLM-x32\...\Run: [mobilegeni daemon] => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-10-02] (AVAST Software)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3835728 2014-10-18] (LogMeIn Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1393257268&from=vtt&uid=ST31000524AS_9VPFBC69XXXX9VPFBC69&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.delta-homes.com/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=hp&from=wpm0226&uid=ST31000524AS_9VPFBC69XXXX9VPFBC69&ts=1393417761
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.delta-homes.com/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=hp&from=wpm0226&uid=ST31000524AS_9VPFBC69XXXX9VPFBC69&ts=1393417761
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1393257268&from=vtt&uid=ST31000524AS_9VPFBC69XXXX9VPFBC69&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.delta-homes.com/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=hp&from=wpm0226&uid=ST31000524AS_9VPFBC69XXXX9VPFBC69&ts=1393417761
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.delta-homes.com/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=hp&from=wpm0226&uid=ST31000524AS_9VPFBC69XXXX9VPFBC69&ts=1393417761
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1393257268&from=vtt&uid=ST31000524AS_9VPFBC69XXXX9VPFBC69&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe hxxp://www.delta-homes.com/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=sc&from=wpm0226&uid=ST31000524AS_9VPFBC69XXXX9VPFBC69&ts=1393417761
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1393257268&from=vtt&uid=ST31000524AS_9VPFBC69XXXX9VPFBC69&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1393257268&from=vtt&uid=ST31000524AS_9VPFBC69XXXX9VPFBC69&q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 01 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5-x64 01 %SystemRoot%\System32\mswsock.dll [327168] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1210150.dll (Adobe Systems, Inc.)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npBitCometAgent.dll (BitComet)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-02-20]
FF HKLM-x32\...\Firefox\Extensions: [quick_start@gmail.com] - C:\Users\Ozoma\AppData\Roaming\Mozilla\Firefox\Profiles\xf4j3rjr.default-1389032603445\extensions\quick_start@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-01-06]

Chrome: 
=======
CHR Profile: C:\Users\TEMP\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\TEMP\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-10-23]
CHR Extension: (Google Docs) - C:\Users\TEMP\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-10-23]
CHR Extension: (Google Drive) - C:\Users\TEMP\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-23]
CHR Extension: (YouTube) - C:\Users\TEMP\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-23]
CHR Extension: (Adblock Plus) - C:\Users\TEMP\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-10-23]
CHR Extension: (Google-Suche) - C:\Users\TEMP\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-23]
CHR Extension: (Google Tabellen) - C:\Users\TEMP\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-10-23]
CHR Extension: (AdBlock) - C:\Users\TEMP\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-10-23]
CHR Extension: (avast! Online Security) - C:\Users\TEMP\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-10-23]
CHR Extension: (Google Wallet) - C:\Users\TEMP\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-23]
CHR Extension: (Google Mail) - C:\Users\TEMP\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-23]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-10-02]
CHR HKLM-x32\...\Chrome\Extension: [mkcedibhemacmilmkpndpkoidlnmgngg] - C:\Users\Ozoma\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx [2013-11-15]
CHR HKLM-x32\...\Chrome\Extension: [ogfjmhfnldnajmfaofeiaepghjenbgjo] - C:\Users\Ozoma\AppData\Local\Google\Chrome\User Data\Default\Extensions\ep.crx [2014-02-26]
CHR HKLM-x32\...\Chrome\Extension: [pelmeidfhdlhlbjimpabfcbnnojbboma] - C:\Users\Ozoma\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv2.crx [2014-02-26]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-10-02] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [106488 2014-10-02] (AVAST Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2014-06-15] () [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2014-10-18] (LogMeIn, Inc.)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-04-23] ()
S4 RemoteAccess; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S4 RemoteAccess; C:\Windows\SysWOW64\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [746392 2013-03-20] (Tunngle.net GmbH) [File not signed]
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2011-07-12] (VIA Technologies, Inc.)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-10-02] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2014-10-02] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-10-02] (AVAST Software)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [448400 2014-10-02] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-10-02] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-10-02] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-10-02] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-10-02] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-10-02] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-10-02] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-05-31] (DT Soft Ltd)
S3 E100B; C:\Windows\System32\DRIVERS\efe5b32e.sys [192256 2009-06-10] (Intel Corporation)
R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [46792 2013-07-24] (AnchorFree Inc.)
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-04-24] (Anchorfree Inc.)
R0 vsock; C:\Windows\System32\drivers\vsock.sys [73296 2013-10-08] (VMware, Inc.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-23 20:23 - 2014-10-23 20:23 - 00020130 _____ () C:\Users\TEMP\Downloads\FRST.txt
2014-10-23 20:22 - 2014-10-23 20:22 - 02112000 _____ (Farbar) C:\Users\TEMP\Downloads\FRST64.exe
2014-10-23 19:09 - 2014-10-23 20:23 - 00000000 ____D () C:\Users\TEMP\AppData\Roaming\Skype
2014-10-23 19:09 - 2014-10-23 19:09 - 00064808 _____ () C:\Users\TEMP\AppData\Local\GDIPFONTCACHEV1.DAT
2014-10-23 19:09 - 2014-10-23 19:09 - 00000000 ____D () C:\Users\TEMP\AppData\Roaming\Intel Corporation
2014-10-23 19:09 - 2014-10-23 19:09 - 00000000 ____D () C:\Users\TEMP\AppData\Local\Skype
2014-10-23 19:08 - 2014-10-23 19:14 - 00000000 ____D () C:\Users\TEMP\AppData\Local\LogMeIn Hamachi
2014-10-23 19:08 - 2014-10-23 19:09 - 00002253 _____ () C:\Users\TEMP\Desktop\Google Chrome.lnk
2014-10-23 19:08 - 2014-10-23 19:08 - 00000000 ____D () C:\Users\TEMP\AppData\Roaming\AVAST Software
2014-10-23 19:08 - 2014-10-23 19:08 - 00000000 ____D () C:\Users\TEMP\AppData\Roaming\Adobe
2014-10-23 19:08 - 2014-10-23 19:08 - 00000000 ____D () C:\Users\TEMP\AppData\Local\LogMeIn
2014-10-23 19:08 - 2014-10-23 19:08 - 00000000 ____D () C:\Users\TEMP\AppData\Local\Google
2014-10-23 19:07 - 2014-10-23 19:08 - 00001427 _____ () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-10-23 19:07 - 2014-10-23 19:07 - 00000000 _SHDL () C:\Users\TEMP\Vorlagen
2014-10-23 19:07 - 2014-10-23 19:07 - 00000000 _SHDL () C:\Users\TEMP\Startmenü
2014-10-23 19:07 - 2014-10-23 19:07 - 00000000 _SHDL () C:\Users\TEMP\Netzwerkumgebung
2014-10-23 19:07 - 2014-10-23 19:07 - 00000000 _SHDL () C:\Users\TEMP\Lokale Einstellungen
2014-10-23 19:07 - 2014-10-23 19:07 - 00000000 _SHDL () C:\Users\TEMP\Eigene Dateien
2014-10-23 19:07 - 2014-10-23 19:07 - 00000000 _SHDL () C:\Users\TEMP\Druckumgebung
2014-10-23 19:07 - 2014-10-23 19:07 - 00000000 _SHDL () C:\Users\TEMP\Documents\Eigene Musik
2014-10-23 19:07 - 2014-10-23 19:07 - 00000000 _SHDL () C:\Users\TEMP\Documents\Eigene Bilder
2014-10-23 19:07 - 2014-10-23 19:07 - 00000000 _SHDL () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-10-23 19:07 - 2014-10-23 19:07 - 00000000 _SHDL () C:\Users\TEMP\AppData\Local\Verlauf
2014-10-23 19:07 - 2014-10-23 19:07 - 00000000 _SHDL () C:\Users\TEMP\AppData\Local\Anwendungsdaten
2014-10-23 19:07 - 2014-10-23 19:07 - 00000000 _SHDL () C:\Users\TEMP\Anwendungsdaten
2014-10-23 19:07 - 2014-10-23 19:07 - 00000000 ____D () C:\Users\TEMP\AppData\Local\VirtualStore
2014-10-23 19:07 - 2014-10-23 19:07 - 00000000 ____D () C:\Users\TEMP
2014-10-23 19:07 - 2012-05-22 12:59 - 00000000 ____D () C:\Users\TEMP\AppData\Roaming\Macromedia
2014-10-23 19:07 - 2010-11-21 04:50 - 00000020 ___SH () C:\Users\TEMP\ntuser.ini
2014-10-23 19:07 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-10-23 19:07 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\TEMP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-10-20 18:44 - 2014-10-20 18:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-10-20 18:44 - 2014-10-20 18:44 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-10-18 17:26 - 2014-10-18 17:42 - 1158637667 _____ () C:\Users\Ozoma\Downloads\Rayman Revolution (Europe) (En,Fr,De,Es,It).7z
2014-10-18 14:59 - 2014-10-18 17:21 - 00198739 _____ () C:\Users\Ozoma\Desktop\Raceankündigung.odp
2014-10-16 21:39 - 2014-10-16 21:39 - 00479226 _____ () C:\Users\Ozoma\Desktop\Hard Awakening.zip
2014-10-16 19:39 - 2014-10-16 19:39 - 00127401 _____ () C:\Users\Ozoma\Downloads\Darkwing Duck (Germany).zip
2014-10-16 19:39 - 1996-12-24 23:32 - 00262160 _____ () C:\Users\Ozoma\Desktop\Darkwing Duck (Germany).nes
2014-10-14 22:48 - 2014-09-29 02:58 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-14 22:48 - 2014-08-19 05:11 - 00693176 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2014-10-14 22:48 - 2014-08-19 05:10 - 00616352 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2014-10-14 22:48 - 2014-08-19 05:08 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2014-10-14 22:48 - 2014-08-19 05:07 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2014-10-14 22:48 - 2014-08-19 05:07 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2014-10-14 22:48 - 2014-08-19 05:07 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2014-10-14 22:48 - 2014-07-07 04:07 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-10-14 22:48 - 2014-07-07 04:07 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2014-10-14 22:48 - 2014-07-07 04:07 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-10-14 22:48 - 2014-07-07 04:06 - 05551032 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-10-14 22:48 - 2014-07-07 04:06 - 04120576 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-10-14 22:48 - 2014-07-07 04:06 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2014-10-14 22:48 - 2014-07-07 04:06 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-10-14 22:48 - 2014-07-07 04:06 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2014-10-14 22:48 - 2014-07-07 04:06 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2014-10-14 22:48 - 2014-07-07 04:06 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2014-10-14 22:48 - 2014-07-07 04:06 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-10-14 22:48 - 2014-07-07 04:06 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2014-10-14 22:48 - 2014-07-07 04:06 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2014-10-14 22:48 - 2014-07-07 04:06 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-10-14 22:48 - 2014-07-07 04:06 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2014-10-14 22:48 - 2014-07-07 04:06 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-10-14 22:48 - 2014-07-07 04:06 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2014-10-14 22:48 - 2014-07-07 04:06 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2014-10-14 22:48 - 2014-07-07 04:06 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-10-14 22:48 - 2014-07-07 04:06 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-10-14 22:48 - 2014-07-07 04:06 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2014-10-14 22:48 - 2014-07-07 04:06 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2014-10-14 22:48 - 2014-07-07 04:06 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2014-10-14 22:48 - 2014-07-07 03:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2014-10-14 22:48 - 2014-07-07 03:40 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2014-10-14 22:48 - 2014-07-07 03:40 - 03208704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-10-14 22:48 - 2014-07-07 03:40 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2014-10-14 22:48 - 2014-07-07 03:40 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-10-14 22:48 - 2014-07-07 03:40 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2014-10-14 22:48 - 2014-07-07 03:40 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2014-10-14 22:48 - 2014-07-07 03:40 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2014-10-14 22:48 - 2014-07-07 03:40 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2014-10-14 22:48 - 2014-07-07 03:40 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2014-10-14 22:48 - 2014-07-07 03:40 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2014-10-14 22:48 - 2014-07-07 03:40 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-10-14 22:48 - 2014-07-07 03:40 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2014-10-14 22:48 - 2014-07-07 03:40 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-10-14 22:48 - 2014-07-07 03:40 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2014-10-14 22:48 - 2014-07-07 03:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-10-14 22:48 - 2014-07-07 03:40 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2014-10-14 22:48 - 2014-07-07 03:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2014-10-14 22:48 - 2014-07-07 03:40 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2014-10-14 22:48 - 2014-07-07 03:39 - 03970488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-10-14 22:48 - 2014-07-07 03:39 - 03914680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-10-14 22:48 - 2014-06-28 02:21 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-10-14 22:48 - 2014-06-28 02:21 - 00532176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2014-10-14 22:48 - 2014-06-28 02:21 - 00457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2014-10-14 22:48 - 2014-06-19 00:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-14 22:48 - 2014-06-19 00:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2014-10-14 22:48 - 2014-06-19 00:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2014-10-14 22:48 - 2014-06-19 00:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-14 22:48 - 2014-06-19 00:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2014-10-14 22:48 - 2014-06-19 00:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-14 22:47 - 2014-08-19 05:08 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2014-10-14 22:47 - 2014-08-19 05:08 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2014-10-14 22:47 - 2014-08-19 05:07 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2014-10-14 22:47 - 2014-08-19 05:07 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2014-10-14 22:47 - 2014-08-19 04:41 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2014-10-14 22:47 - 2014-08-19 04:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2014-10-14 22:47 - 2014-08-19 04:06 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2014-10-14 22:47 - 2014-07-07 04:06 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-10-14 22:47 - 2014-07-07 04:06 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2014-10-14 22:47 - 2014-07-07 04:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2014-10-14 22:47 - 2014-07-07 04:06 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2014-10-14 22:47 - 2014-07-07 04:06 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2014-10-14 22:47 - 2014-07-07 04:06 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2014-10-14 22:47 - 2014-07-07 04:05 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2014-10-14 22:47 - 2014-07-07 04:05 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2014-10-14 22:47 - 2014-07-07 04:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2014-10-14 22:47 - 2014-07-07 03:40 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2014-10-14 22:47 - 2014-07-07 03:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2014-10-14 22:47 - 2014-07-07 03:40 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2014-10-14 22:47 - 2014-07-07 03:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2014-10-14 22:47 - 2014-07-07 03:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2014-10-14 22:47 - 2014-07-07 03:39 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2014-10-14 22:47 - 2014-07-07 03:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2014-10-14 22:47 - 2014-07-07 03:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2014-10-14 22:47 - 2014-07-07 03:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2014-10-14 22:46 - 2014-10-10 04:05 - 00507392 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-10-14 22:46 - 2014-10-10 04:05 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-10-14 22:46 - 2014-10-10 04:00 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-10-14 22:46 - 2014-10-07 04:54 - 00378552 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-14 22:46 - 2014-10-07 04:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-10-14 22:46 - 2014-09-26 00:50 - 13619200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-14 22:46 - 2014-09-26 00:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-10-14 22:46 - 2014-09-26 00:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-10-14 22:46 - 2014-09-26 00:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-10-14 22:46 - 2014-09-26 00:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-10-14 22:46 - 2014-09-26 00:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-10-14 22:46 - 2014-09-26 00:31 - 02108416 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-14 22:46 - 2014-09-19 04:25 - 23631360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-14 22:46 - 2014-09-19 03:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-14 22:46 - 2014-09-19 03:55 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-10-14 22:46 - 2014-09-19 03:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-10-14 22:46 - 2014-09-19 03:41 - 02796032 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-14 22:46 - 2014-09-19 03:40 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-14 22:46 - 2014-09-19 03:40 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-14 22:46 - 2014-09-19 03:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-10-14 22:46 - 2014-09-19 03:38 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-10-14 22:46 - 2014-09-19 03:36 - 05829632 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-14 22:46 - 2014-09-19 03:31 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-14 22:46 - 2014-09-19 03:30 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-14 22:46 - 2014-09-19 03:27 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-10-14 22:46 - 2014-09-19 03:26 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-14 22:46 - 2014-09-19 03:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-10-14 22:46 - 2014-09-19 03:25 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-10-14 22:46 - 2014-09-19 03:25 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-10-14 22:46 - 2014-09-19 03:18 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-14 22:46 - 2014-09-19 03:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-10-14 22:46 - 2014-09-19 03:14 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-14 22:46 - 2014-09-19 03:06 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-14 22:46 - 2014-09-19 03:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-10-14 22:46 - 2014-09-19 03:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-14 22:46 - 2014-09-19 03:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-10-14 22:46 - 2014-09-19 03:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-10-14 22:46 - 2014-09-19 03:00 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-14 22:46 - 2014-09-19 02:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-10-14 22:46 - 2014-09-19 02:58 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-14 22:46 - 2014-09-19 02:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-10-14 22:46 - 2014-09-19 02:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-10-14 22:46 - 2014-09-19 02:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-10-14 22:46 - 2014-09-19 02:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-10-14 22:46 - 2014-09-19 02:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-10-14 22:46 - 2014-09-19 02:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-10-14 22:46 - 2014-09-19 02:42 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-14 22:46 - 2014-09-19 02:42 - 00710656 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-14 22:46 - 2014-09-19 02:40 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-10-14 22:46 - 2014-09-19 02:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-10-14 22:46 - 2014-09-19 02:33 - 02309632 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-14 22:46 - 2014-09-19 02:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-10-14 22:46 - 2014-09-19 02:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-10-14 22:46 - 2014-09-19 02:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-10-14 22:46 - 2014-09-19 02:14 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-14 22:46 - 2014-09-19 01:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-10-14 22:46 - 2014-09-19 01:59 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-10-14 22:46 - 2014-09-19 01:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-10-14 22:46 - 2014-09-19 01:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-10-14 22:46 - 2014-09-18 04:00 - 03241472 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-14 22:46 - 2014-09-18 03:32 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-10-14 22:45 - 2014-09-04 07:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-14 22:45 - 2014-09-04 07:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2014-10-14 22:45 - 2014-07-17 04:07 - 03722240 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-14 22:45 - 2014-07-17 04:07 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-10-14 22:45 - 2014-07-17 04:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-14 22:45 - 2014-07-17 04:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-14 22:45 - 2014-07-17 04:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-14 22:45 - 2014-07-17 04:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-14 22:45 - 2014-07-17 04:07 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-10-14 22:45 - 2014-07-17 04:07 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-10-14 22:45 - 2014-07-17 03:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2014-10-14 22:45 - 2014-07-17 03:39 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-10-14 22:45 - 2014-07-17 03:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-10-14 22:45 - 2014-07-17 03:39 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2014-10-14 22:45 - 2014-07-17 03:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-10-14 22:45 - 2014-07-17 03:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-10-14 22:45 - 2014-07-17 03:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-14 22:45 - 2014-07-17 03:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-14 22:44 - 2014-09-13 03:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-14 22:44 - 2014-09-13 03:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-10-12 22:55 - 2014-10-12 22:55 - 00551045 _____ () C:\Users\Ozoma\Downloads\92305f4b7bb879506b06fc389f08c170da0bcd8a.jpeg
2014-10-12 22:54 - 2014-10-12 22:54 - 00287454 _____ () C:\Users\Ozoma\Downloads\1d37ce0557f5c6cc219d624405c5f6fa0884ebee.jpeg
2014-10-12 22:54 - 2014-10-12 22:54 - 00225837 _____ () C:\Users\Ozoma\Downloads\884d95a49423bd6015d6f1b735ec85c61a599edf.jpeg
2014-10-12 22:53 - 2014-10-12 22:53 - 00318641 _____ () C:\Users\Ozoma\Downloads\9fe22e8d06b8e7458374993bd56df9a872dd6722.jpeg
2014-10-12 22:53 - 2014-10-12 22:53 - 00127060 _____ () C:\Users\Ozoma\Downloads\4d97d5e77119cf1745cff6adf3131035ee863e51.jpeg
2014-10-12 22:48 - 2014-10-12 22:48 - 00148213 _____ () C:\Users\Ozoma\Downloads\13cf65b6a3d6c78199e8d7cbfb906fc0ffbae052.jpeg
2014-10-12 22:47 - 2014-10-12 22:47 - 00788106 _____ () C:\Users\Ozoma\Downloads\6f55c4780a72c5bd7c8ecbff0e4d3bfa90e78b14.jpeg
2014-10-12 22:46 - 2014-10-12 22:46 - 00100635 _____ () C:\Users\Ozoma\Downloads\041a2a9e4ecac947f3f03e631261cba67e9d56b7.jpeg
2014-10-12 22:45 - 2014-10-12 22:45 - 00216712 _____ () C:\Users\Ozoma\Downloads\9e96a59763e9c085edee07e3f04a2405668936f8.jpeg
2014-10-12 22:43 - 2014-10-12 22:43 - 01418277 _____ () C:\Users\Ozoma\Downloads\e1ee3e98b544e2b74735641f87e61c87.jpeg
2014-10-12 22:42 - 2014-10-12 22:42 - 00142907 _____ () C:\Users\Ozoma\Downloads\58915af12c81518bc84e30a264819f03f7bd9013.jpeg
2014-10-12 22:42 - 2014-10-12 22:42 - 00091751 _____ () C:\Users\Ozoma\Downloads\4e44deb97c018b4a3d81dbc2bbc5b9b76e805f33.jpeg
2014-10-12 22:42 - 2014-10-12 22:42 - 00090784 _____ () C:\Users\Ozoma\Downloads\31066febc33acfd1115d6569e2512df203d14651.jpeg
2014-10-12 22:41 - 2014-10-12 22:41 - 00269644 _____ () C:\Users\Ozoma\Downloads\139a8d14b9f78bcdec8b8e8e66b730db.jpeg
2014-10-12 22:39 - 2014-10-12 22:39 - 00472725 _____ () C:\Users\Ozoma\Downloads\a60c639b8441052ba36ef8fab987247c.jpeg
2014-10-12 22:38 - 2014-10-12 22:38 - 00182299 _____ () C:\Users\Ozoma\Downloads\836766c422c189c3dc999df4160a5451.jpeg
2014-10-11 20:30 - 2014-10-12 11:17 - 00000000 ____D () C:\Users\Ozoma\Documents\MeinSpore-Kreationen
2014-10-11 20:29 - 2014-10-11 20:30 - 00000000 ____D () C:\Users\Ozoma\AppData\Roaming\Spore
2014-10-11 16:25 - 2014-10-11 16:25 - 00000201 _____ () C:\Users\Ozoma\Desktop\Spore Galactic Adventures.url
2014-10-11 16:25 - 2014-10-11 16:25 - 00000201 _____ () C:\Users\Ozoma\Desktop\Spore Creepy & Cute Parts Pack.url
2014-10-11 16:22 - 2014-10-11 16:22 - 00000201 _____ () C:\Users\Ozoma\Desktop\Spore.url
2014-10-11 12:19 - 2014-10-11 12:19 - 01630422 _____ () C:\Users\Ozoma\Downloads\Illusion of Time.zip
2014-10-11 11:56 - 2014-10-11 11:56 - 07723420 _____ () C:\Users\Ozoma\Downloads\dyable's_drae_big(shaved).mpq
2014-10-11 01:07 - 2014-10-11 01:07 - 00880272 _____ (Google Inc.) C:\Users\Ozoma\Downloads\ChromeSetup.exe
2014-10-09 18:20 - 2014-10-17 21:50 - 00003399 _____ () C:\Users\Ozoma\Desktop\Neues Textdokument.txt
2014-10-05 10:42 - 2014-10-05 10:42 - 00614107 _____ () C:\Users\Ozoma\Downloads\49f9603d3b756f163ed624b671104e6e.jpeg
2014-10-05 10:42 - 2014-10-05 10:42 - 00347196 _____ () C:\Users\Ozoma\Downloads\a5cba831a12d923201367abca757f78e.jpeg
2014-10-05 10:42 - 2014-10-05 10:42 - 00193435 _____ () C:\Users\Ozoma\Downloads\e0b7d71bb0e82431adce3203614453a6.jpeg
2014-10-05 10:42 - 2014-10-05 10:42 - 00122437 _____ () C:\Users\Ozoma\Downloads\a47736e38cbb141ff631c288d3d9b50c.jpeg
2014-10-05 10:41 - 2014-10-05 10:42 - 00070622 _____ () C:\Users\Ozoma\Downloads\0f32c95649587c6936b3fb79cc8d9182.jpeg
2014-10-05 10:41 - 2014-10-05 10:41 - 00297010 _____ () C:\Users\Ozoma\Downloads\05159d72ead532ad7d5305c56ed8d169.jpeg
2014-10-05 10:41 - 2014-10-05 10:41 - 00124390 _____ () C:\Users\Ozoma\Downloads\d706b65f01cec1db42e5b34224b448ac.jpeg
2014-10-05 10:41 - 2014-10-05 10:41 - 00088081 _____ () C:\Users\Ozoma\Downloads\3153a01488cf594e7affa425a741795d.jpeg
2014-10-05 10:41 - 2014-10-05 10:41 - 00036118 _____ () C:\Users\Ozoma\Downloads\11dd72f8050ec7f61e8dbb1f220a47b4.jpeg
2014-10-05 10:40 - 2014-10-05 10:40 - 02353616 _____ () C:\Users\Ozoma\Downloads\53f07ba1be95923ede8c8a79dabcc642.jpeg
2014-10-05 10:40 - 2014-10-05 10:40 - 00283425 _____ () C:\Users\Ozoma\Downloads\2b2976f7e2774eb6f99e9989075540ea.jpeg
2014-10-05 10:40 - 2014-10-05 10:40 - 00117488 _____ () C:\Users\Ozoma\Downloads\89b32fc36ed68b087cf5632ef84271ec.jpeg
2014-10-05 10:40 - 2014-10-05 10:40 - 00098481 _____ () C:\Users\Ozoma\Downloads\d5a548dc2960dee06c7a2b8ce58be06e.jpeg
2014-10-05 10:40 - 2014-10-05 10:40 - 00091940 _____ () C:\Users\Ozoma\Downloads\e2bd5e7d6ab0180ab992607cbd5a42d1.jpeg
2014-10-05 10:39 - 2014-10-05 10:39 - 00744881 _____ () C:\Users\Ozoma\Downloads\71c82538debc0ea5549b41cd90004a19.jpeg
2014-10-05 10:39 - 2014-10-05 10:39 - 00087152 _____ () C:\Users\Ozoma\Downloads\cd1e8fc3b2da593ae6711dcd62d0bca1.jpeg
2014-10-05 10:38 - 2014-10-05 10:38 - 00201056 _____ () C:\Users\Ozoma\Downloads\b737587ef96abca786680c52e338f053.jpeg
2014-10-05 10:37 - 2014-10-05 10:37 - 01840355 _____ () C:\Users\Ozoma\Downloads\eedae8c0e42180ceac86cd85076cc47b.jpeg
2014-10-05 10:37 - 2014-10-05 10:37 - 00870811 _____ () C:\Users\Ozoma\Downloads\8c69ecdf1407b8924b3a552ce1792355.jpeg
2014-10-05 10:37 - 2014-10-05 10:37 - 00775177 _____ () C:\Users\Ozoma\Downloads\7584ab29ba71cfe457eb9c481d7b3fe0.jpeg
2014-10-05 10:37 - 2014-10-05 10:37 - 00320140 _____ () C:\Users\Ozoma\Downloads\2cafb925d187d1b654a0e23e4fb5fabce8b2a31c (1).jpeg
2014-10-05 10:36 - 2014-10-05 10:36 - 00095403 _____ () C:\Users\Ozoma\Downloads\36faf77575c22b13de9318593ec48fcf.jpeg
2014-10-05 10:36 - 2014-10-05 10:36 - 00049827 _____ () C:\Users\Ozoma\Downloads\575a4f1558da1695e2a09e454431b290.jpeg
2014-10-05 10:35 - 2014-10-05 10:35 - 00788787 _____ () C:\Users\Ozoma\Downloads\7596dde82390e03a58ea9918b3486d36.jpeg
2014-10-05 10:35 - 2014-10-05 10:35 - 00760609 _____ () C:\Users\Ozoma\Downloads\d78859593ac9f8c0f9e53e1d3d4765bb.jpeg
2014-10-05 10:35 - 2014-10-05 10:35 - 00047581 _____ () C:\Users\Ozoma\Downloads\0c24ecb9fb66ea9a6cc458370fa75e82.jpeg
2014-10-05 10:34 - 2014-10-05 10:34 - 00202053 _____ () C:\Users\Ozoma\Downloads\567348613191afd9a8cf6ccb270c4f6c.jpeg
2014-10-05 10:33 - 2014-10-05 10:33 - 00287877 _____ () C:\Users\Ozoma\Downloads\be686be9e8d9d675bcbe620786d250a8.jpeg
2014-10-05 10:32 - 2014-10-05 10:32 - 01307580 _____ () C:\Users\Ozoma\Downloads\f6e89c32a89112048d18eba9586a6392.jpeg
2014-10-05 10:32 - 2014-10-05 10:32 - 00983178 _____ () C:\Users\Ozoma\Downloads\3f152979d0cae6140a3b5863b171af68.jpeg
2014-10-05 10:32 - 2014-10-05 10:32 - 00662510 _____ () C:\Users\Ozoma\Downloads\a822ec54c2db93385f197d790eabc9f6.jpeg
2014-10-05 10:31 - 2014-10-05 10:31 - 02332313 _____ () C:\Users\Ozoma\Downloads\23bbaa0ebc81a01466de7cc437f9aae4.jpeg
2014-10-05 10:31 - 2014-10-05 10:31 - 01232454 _____ () C:\Users\Ozoma\Downloads\b38c8ad9df890230d832b33c6883cc6b.jpeg
2014-10-05 10:30 - 2014-10-05 10:30 - 00245640 _____ () C:\Users\Ozoma\Downloads\e91f892196ddf3afa8c3ad3e3c471689.jpeg
2014-10-05 10:29 - 2014-10-05 10:29 - 01175073 _____ () C:\Users\Ozoma\Downloads\66bf6a7fc1ebfbebc656269e2b060c27.jpeg
2014-10-05 10:29 - 2014-10-05 10:29 - 00768824 _____ () C:\Users\Ozoma\Downloads\bc6790a21e61baea44140426ee153180.jpeg
2014-10-05 10:29 - 2014-10-05 10:29 - 00036567 _____ () C:\Users\Ozoma\Downloads\070c08ed0d78e2072011a216187d59e8.jpeg
2014-10-05 10:28 - 2014-10-05 10:28 - 00866908 _____ () C:\Users\Ozoma\Downloads\dbbbe7a7e3438259612b11fc6aa7eed0.jpeg
2014-10-05 10:26 - 2014-10-05 10:26 - 00467298 _____ () C:\Users\Ozoma\Downloads\f425ee1e3890e83c6f3665d135082823.jpeg
2014-10-05 10:26 - 2014-10-05 10:26 - 00401257 _____ () C:\Users\Ozoma\Downloads\1e5ee75ae2c4ea3276c5158452944ad5 (1).jpeg
2014-10-05 10:26 - 2014-10-05 10:26 - 00366669 _____ () C:\Users\Ozoma\Downloads\95fcef593e53b48cd6b88b4a2d6cd92c.jpeg
2014-10-05 10:25 - 2014-10-05 10:25 - 00977234 _____ () C:\Users\Ozoma\Downloads\ebe3f408ebf51f89923ffac0e8edd657.jpeg
2014-10-05 10:25 - 2014-10-05 10:25 - 00282009 _____ () C:\Users\Ozoma\Downloads\7ef102a8979cc128e1d4122b98aa8471.jpeg
2014-10-05 10:24 - 2014-10-05 10:24 - 00084718 _____ () C:\Users\Ozoma\Downloads\696df6927216d6566c7b82c9fdd62bff (1).jpeg
2014-10-05 10:23 - 2014-10-05 10:23 - 00766042 _____ () C:\Users\Ozoma\Downloads\ab063425995d4b32b1024c930e18ac28.jpeg
2014-10-05 10:23 - 2014-10-05 10:23 - 00179076 _____ () C:\Users\Ozoma\Downloads\bb714c3ede38e216a44321e77e458e85.jpeg
2014-10-05 10:22 - 2014-10-05 10:22 - 00098603 _____ () C:\Users\Ozoma\Downloads\24f4df33abd4b0c2349a35543297c8ef.jpeg
2014-10-05 10:21 - 2014-10-05 10:21 - 00297606 _____ () C:\Users\Ozoma\Downloads\8811808bfd453e6ce527979b752e1557.jpeg
2014-10-05 10:20 - 2014-10-05 10:20 - 00625255 _____ () C:\Users\Ozoma\Downloads\7986672fda83b699d89b4131d5ca2eea.jpeg
2014-10-05 10:19 - 2014-10-05 10:19 - 01581627 _____ () C:\Users\Ozoma\Downloads\0b5b2e175697afdb235f4c0d6ddb62ac.jpeg
2014-10-05 01:10 - 2014-10-05 12:55 - 00000000 ____D () C:\Users\Ozoma\AppData\Local\Game Dev Tycoon - Steam
2014-10-05 01:07 - 2014-10-05 01:07 - 00000202 _____ () C:\Users\Ozoma\Desktop\Game Dev Tycoon.url
2014-10-04 16:54 - 2014-09-12 14:29 - 67108864 _____ () C:\Users\Ozoma\Desktop\Alpha für Ozoma - Kopie - Kopie.z64
2014-10-04 16:11 - 2014-10-04 16:11 - 00524304 _____ () C:\Users\Ozoma\Desktop\MM O 2 Hard pharao & wily test 2.0.2.nes
2014-10-04 15:53 - 2014-10-04 15:53 - 00524304 _____ () C:\Users\Ozoma\Desktop\MM O 2 Hard pharao & wily test.nes
2014-10-03 11:02 - 2014-10-03 11:02 - 00183696 _____ () C:\Users\Ozoma\Downloads\megaflex0701_src.zip
2014-10-03 10:32 - 2014-10-03 10:32 - 01350887 _____ () C:\Users\Ozoma\Downloads\megaflex0701.zip
2014-10-03 10:27 - 2014-10-03 11:02 - 00000000 ____D () C:\Users\Ozoma\Desktop\Bla
2014-10-03 10:23 - 2014-10-03 10:23 - 01350887 _____ () C:\Users\Ozoma\Desktop\megaflex0701.zip
2014-10-02 18:02 - 2014-10-02 18:02 - 00497814 _____ () C:\Users\Ozoma\Downloads\5835dca6f1a57b2e7b576bd9f19ca5e0.jpeg
2014-10-02 18:02 - 2014-10-02 18:02 - 00365491 _____ () C:\Users\Ozoma\Downloads\eee67bcfe3493ac39b495587c6534c06.jpeg
2014-10-02 18:02 - 2014-10-02 18:02 - 00211608 _____ () C:\Users\Ozoma\Downloads\af6dddd6daddfd850ece513037d716fc.jpeg
2014-10-02 18:01 - 2014-10-02 18:01 - 00063583 _____ () C:\Users\Ozoma\Downloads\099acf4afed79867e509603e880a85af.jpeg
2014-10-02 18:00 - 2014-10-02 18:00 - 00649582 _____ () C:\Users\Ozoma\Downloads\34323acb855af17b03aa6da46b3deb7b.jpeg
2014-10-02 18:00 - 2014-10-02 18:00 - 00512777 _____ () C:\Users\Ozoma\Downloads\7e4cb9773050fc726f276dbff060ab45.jpeg
2014-10-02 18:00 - 2014-10-02 18:00 - 00293364 _____ () C:\Users\Ozoma\Downloads\360faa8e1442d28a17bad71ef0688526.jpeg
2014-10-02 18:00 - 2014-10-02 18:00 - 00248977 _____ () C:\Users\Ozoma\Downloads\b6cf8746a3318e72adb475d1eacabbbf.jpeg
2014-10-02 17:59 - 2014-10-02 17:59 - 01425351 _____ () C:\Users\Ozoma\Downloads\32010f79590b1add1d53af8731aef61f.jpeg
2014-10-02 17:59 - 2014-10-02 17:59 - 00483819 _____ () C:\Users\Ozoma\Downloads\f700e164a1798bb82d61cf276b34e07b.jpeg
2014-10-02 17:59 - 2014-10-02 17:59 - 00116500 _____ () C:\Users\Ozoma\Downloads\771a1d0b4865b7ab73744ba07f896090.jpeg
2014-10-02 17:58 - 2014-10-02 17:58 - 00656455 _____ () C:\Users\Ozoma\Downloads\cd4d4fe129ca9b18c150e150f3e1eec9.jpeg
2014-10-02 17:58 - 2014-10-02 17:58 - 00128314 _____ () C:\Users\Ozoma\Downloads\71afa281a606afae09fa886cf4debcbf.jpeg
2014-10-02 17:58 - 2014-10-02 17:58 - 00061373 _____ () C:\Users\Ozoma\Downloads\bb3bbbfb883add4d0b858fdf43b517b8.jpeg
2014-10-02 17:57 - 2014-10-02 17:57 - 04438741 _____ () C:\Users\Ozoma\Downloads\15de3fd7e4ca1fe0abdf3f92f379b2d0.jpeg
2014-10-02 17:57 - 2014-10-02 17:57 - 00619884 _____ () C:\Users\Ozoma\Downloads\1c908553076f5b81211d56348ad702cf.jpeg
2014-10-02 17:57 - 2014-10-02 17:57 - 00033925 _____ () C:\Users\Ozoma\Downloads\e042d991605286a1496a0995fac61d91.jpeg
2014-10-02 17:56 - 2014-10-02 17:56 - 00529179 _____ () C:\Users\Ozoma\Downloads\e3e6d49d951a4c2ccfe890ae9d0f4815.jpeg
2014-10-02 17:55 - 2014-10-02 17:55 - 00520528 _____ () C:\Users\Ozoma\Downloads\3bc969180d40094bc02422af23f241c9.jpeg
2014-10-02 17:55 - 2014-10-02 17:55 - 00376401 _____ () C:\Users\Ozoma\Downloads\dcf45a3dbea138b815e2a96576266c6e.jpeg
2014-10-02 17:54 - 2014-10-02 17:54 - 00481068 _____ () C:\Users\Ozoma\Downloads\4e21b0bbce8280367325695c4781a6b5.jpeg
2014-10-02 13:46 - 2014-10-02 13:46 - 00002038 _____ () C:\Users\Public\Desktop\avast! SafeZone.lnk
2014-10-02 13:46 - 2014-10-02 13:46 - 00001978 _____ () C:\Users\Public\Desktop\avast! Internet Security.lnk
2014-10-02 13:46 - 2014-10-02 13:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-10-02 13:46 - 2014-07-25 12:55 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-10-02 13:46 - 2014-07-25 12:49 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-10-02 13:46 - 2014-07-25 12:49 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-10-02 13:46 - 2014-07-25 12:49 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-10-02 13:45 - 2014-10-02 13:46 - 00004279 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_67-b01.log
2014-10-02 13:45 - 2014-10-02 13:46 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-10-02 13:45 - 2014-10-02 13:45 - 00427360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-10-02 13:45 - 2014-10-02 13:44 - 01041168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-10-02 13:45 - 2014-10-02 13:44 - 00224896 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-10-02 13:45 - 2014-10-02 13:44 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-10-02 13:45 - 2014-10-02 13:44 - 00092008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-10-02 13:45 - 2014-10-02 13:44 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-10-02 13:45 - 2014-10-02 13:44 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-10-02 13:45 - 2014-10-02 13:44 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-10-02 13:45 - 2014-10-02 13:43 - 00028184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2014-10-02 13:44 - 2014-10-02 13:44 - 00307344 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-10-02 13:44 - 2014-10-02 13:44 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-10-02 13:43 - 2014-10-02 13:43 - 00448400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdisFlt.sys
2014-10-02 13:13 - 2014-10-02 13:13 - 00000000 ____H () C:\Users\Ozoma\Documents\Default.rdp
2014-10-01 04:52 - 2014-09-25 04:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-10-01 04:52 - 2014-09-25 03:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-09-30 18:48 - 2014-10-08 22:08 - 00000000 ____D () C:\Users\Ozoma\Desktop\Hardmode
2014-09-30 16:17 - 2014-10-18 14:59 - 00000000 ____D () C:\Users\Ozoma\Desktop\Neuer Aufräumordner
2014-09-30 09:34 - 2014-09-30 09:34 - 00524304 _____ () C:\Users\Ozoma\Desktop\MM O 2 H V hard v1.15.157.95.nes
2014-09-29 22:02 - 2014-09-29 22:02 - 00192846 _____ () C:\Users\Ozoma\Downloads\c53b3a91c40c30c60ef9cef144293a22.jpeg
2014-09-29 22:02 - 2014-09-29 22:02 - 00183002 _____ () C:\Users\Ozoma\Downloads\5143fba9d138f8e406548197efbd7a77.jpeg
2014-09-29 22:01 - 2014-09-29 22:02 - 00176072 _____ () C:\Users\Ozoma\Downloads\6853d551ced62ffb3ff729ef62dd3902.jpeg
2014-09-29 22:01 - 2014-09-29 22:01 - 01948968 _____ () C:\Users\Ozoma\Downloads\24943465d01cf123b13b66921d40a4ac.jpeg
2014-09-29 21:55 - 2014-09-29 21:55 - 00240154 _____ () C:\Users\Ozoma\Downloads\845ce5b99506a83ec705e341ad46e798.jpeg
2014-09-29 21:55 - 2014-09-29 21:55 - 00224189 _____ () C:\Users\Ozoma\Downloads\fbf0d72317d5c6cafdc62b371b24f2c0.jpeg
2014-09-29 21:41 - 2014-09-29 21:41 - 00311111 _____ () C:\Users\Ozoma\Downloads\394fc63ace666a6e516b0b6cb221fb53.jpeg
2014-09-29 21:41 - 2014-09-29 21:41 - 00251075 _____ () C:\Users\Ozoma\Downloads\a8f418eee64da34afd3a78852007f03e.jpeg
2014-09-29 21:40 - 2014-09-29 21:40 - 00319902 _____ () C:\Users\Ozoma\Downloads\1b3051d218244be5d9ff247901b0a944.jpeg
2014-09-29 21:40 - 2014-09-29 21:40 - 00250368 _____ () C:\Users\Ozoma\Downloads\8a8e268209016b5eb6e1e12832f71b80.jpeg
2014-09-29 21:40 - 2014-09-29 21:40 - 00229716 _____ () C:\Users\Ozoma\Downloads\4867b3eed5e8dc0d8ec9f99599e0d848.jpeg
2014-09-29 21:40 - 2014-09-29 21:40 - 00228322 _____ () C:\Users\Ozoma\Downloads\1dc4ca8ad3d4a2e8dc12337276596c01.jpeg
2014-09-29 21:40 - 2014-09-29 21:40 - 00222540 _____ () C:\Users\Ozoma\Downloads\51ec35fa5658fc843be30f4f1f19a42f.jpeg
2014-09-29 21:37 - 2014-09-29 21:37 - 00681712 _____ () C:\Users\Ozoma\Downloads\f1230f601dbd54b8d1d08a313fd8bf33.jpeg
2014-09-29 21:37 - 2014-09-29 21:37 - 00111579 _____ () C:\Users\Ozoma\Downloads\a70186c734a0ac30da94a9173ae7d06f.jpeg
2014-09-29 21:36 - 2014-09-29 21:37 - 00500078 _____ () C:\Users\Ozoma\Downloads\5a586bb51be70823f71c4d290f4ee6f2.jpeg
2014-09-29 21:35 - 2014-09-29 21:35 - 00604069 _____ () C:\Users\Ozoma\Downloads\f6663f965073ce0aa4e4390f6d2dbb6f.jpeg
2014-09-29 21:34 - 2014-09-29 21:34 - 00559644 _____ () C:\Users\Ozoma\Downloads\ec9c7fc34e15bb3653585dcb61216944.jpeg
2014-09-29 21:33 - 2014-09-29 21:33 - 00822925 _____ () C:\Users\Ozoma\Downloads\318e35ffde543c63813b3358f097a288.jpeg
2014-09-29 21:33 - 2014-09-29 21:33 - 00176591 _____ () C:\Users\Ozoma\Downloads\6e69a5064d6087894a640559bbd0f194.jpeg
2014-09-29 21:32 - 2014-09-29 21:32 - 00527798 _____ () C:\Users\Ozoma\Downloads\1de2b3c577dba6ba60156f3f9fd1e8d8a27be957.jpeg
2014-09-29 21:32 - 2014-09-29 21:32 - 00287924 _____ () C:\Users\Ozoma\Downloads\ab53f68d6a165fcc48735e530feaf4ef.jpeg
2014-09-29 21:32 - 2014-09-29 21:32 - 00211334 _____ () C:\Users\Ozoma\Downloads\d223b6ef12cc924b8cd4dc14c12ed60e.jpeg
2014-09-29 21:31 - 2014-09-29 21:31 - 02312989 _____ () C:\Users\Ozoma\Downloads\cadf3e57fb3dd967941f28033494bbdf.jpeg
2014-09-29 21:31 - 2014-09-29 21:31 - 00283803 _____ () C:\Users\Ozoma\Downloads\7ec010a9a87f78cd6cd972a2f060fcc1.jpeg
2014-09-29 21:30 - 2014-09-29 21:30 - 00721255 _____ () C:\Users\Ozoma\Downloads\36abdc6debf90be84feee55abf4b1285.jpeg
2014-09-29 21:29 - 2014-09-29 21:29 - 00573698 _____ () C:\Users\Ozoma\Downloads\cc46e85f43f07b545b197a0b2183b6a9.jpeg
2014-09-29 21:29 - 2014-09-29 21:29 - 00490776 _____ () C:\Users\Ozoma\Downloads\ab3d74267dab7662f50f6e9bae779dcf.jpeg
2014-09-29 21:29 - 2014-09-29 21:29 - 00166777 _____ () C:\Users\Ozoma\Downloads\5910215658139affdbd9469893f04dc8.jpeg
2014-09-29 21:29 - 2014-09-29 21:29 - 00078881 _____ () C:\Users\Ozoma\Downloads\be7774d057f9f00826b1fadba9b0185d.jpeg
2014-09-29 21:28 - 2014-09-29 21:28 - 00476180 _____ () C:\Users\Ozoma\Downloads\f2697256ea03a3075311bbd4541c4d3f.jpeg
2014-09-29 20:37 - 2014-09-29 20:37 - 01454426 _____ () C:\Users\Ozoma\Downloads\76965f2d812a3b7c4ea3c2999c8458c4.jpeg
2014-09-29 20:37 - 2014-09-29 20:37 - 00686057 _____ () C:\Users\Ozoma\Downloads\71da66a115f068df1b7f54e4a6cae23c.jpeg
2014-09-29 20:36 - 2014-09-29 20:36 - 00297251 _____ () C:\Users\Ozoma\Downloads\8397c688c9bccec083a973d1056aa953.jpeg
2014-09-29 20:36 - 2014-09-29 20:36 - 00145930 _____ () C:\Users\Ozoma\Downloads\bf8f26c2cce7291cb46c4c46c8b830c3.jpeg
2014-09-29 20:36 - 2014-09-29 20:36 - 00145546 _____ () C:\Users\Ozoma\Downloads\7ab261d17b0464538c42570dbb25ead9.jpeg
2014-09-29 20:36 - 2014-09-29 20:36 - 00140054 _____ () C:\Users\Ozoma\Downloads\680cdcf17dde9b896e62b518881d2b70.jpeg
2014-09-29 20:36 - 2014-09-29 20:36 - 00098513 _____ () C:\Users\Ozoma\Downloads\51931f8442f2fd4a4a4e2e8f060e6c70.jpeg
2014-09-29 20:35 - 2014-09-29 20:35 - 00660985 _____ () C:\Users\Ozoma\Downloads\8f54171357dec45329e4452b7d15740c.jpeg
2014-09-29 20:35 - 2014-09-29 20:35 - 00463848 _____ () C:\Users\Ozoma\Downloads\afff1c924e0829d4a7b8f1d0b4a524eb.jpeg
2014-09-29 20:35 - 2014-09-29 20:35 - 00430569 _____ () C:\Users\Ozoma\Downloads\c16235f0a1aae3b47135d32aeacbab36.jpeg
2014-09-29 20:35 - 2014-09-29 20:35 - 00269608 _____ () C:\Users\Ozoma\Downloads\c19afd7c93116c2f1d5ab7e3e2b0336f.jpeg
2014-09-29 20:35 - 2014-09-29 20:35 - 00191462 _____ () C:\Users\Ozoma\Downloads\0a76fab870f07934b63eea49ca4e00d5.jpeg
2014-09-29 20:35 - 2014-09-29 20:35 - 00086589 _____ () C:\Users\Ozoma\Downloads\dcb4f4917e4c0689a4607a5d73a57d8b.jpeg
2014-09-29 20:34 - 2014-09-29 20:34 - 00201730 _____ () C:\Users\Ozoma\Downloads\525198f63e964d442c84eb2c046132f6.jpeg
2014-09-29 20:34 - 2014-09-29 20:34 - 00144454 _____ () C:\Users\Ozoma\Downloads\1a60c45464069ba929a620e7a667182e.jpeg
2014-09-29 16:59 - 2014-09-29 17:00 - 00524304 _____ () C:\Users\Ozoma\Desktop\MM O 2 Hard 001.nes
2014-09-29 11:53 - 2014-09-29 11:53 - 02143092 _____ () C:\Users\Ozoma\Downloads\08a83ee3540ec84249880f946cb3925a.jpeg
2014-09-29 11:52 - 2014-09-29 11:52 - 00416327 _____ () C:\Users\Ozoma\Downloads\f6a5378f87dab6cdd703326b66686ff0.jpeg
2014-09-29 11:50 - 2014-09-29 11:50 - 00217706 _____ () C:\Users\Ozoma\Downloads\20118146cfc42029a3ae4a1de9f09b2e.jpeg
2014-09-29 11:50 - 2014-09-29 11:50 - 00195158 _____ () C:\Users\Ozoma\Downloads\2d49cbd19f009f7bf2a4ac0f1891e917.jpeg
2014-09-29 11:49 - 2014-09-29 11:49 - 01451959 _____ () C:\Users\Ozoma\Downloads\e8da2eb3bf204f321f947dfd02c6ba2a.jpeg
2014-09-29 11:49 - 2014-09-29 11:49 - 00770950 _____ () C:\Users\Ozoma\Downloads\9cfbf2dc979906f75d9bf69310098a61.jpeg
2014-09-29 11:49 - 2014-09-29 11:49 - 00218958 _____ () C:\Users\Ozoma\Downloads\061b20a024c2cd085d0441b413dc2297.jpeg
2014-09-29 11:49 - 2014-09-29 11:49 - 00214845 _____ () C:\Users\Ozoma\Downloads\cc0035a4f6961a13d051e0ffab54bb22.jpeg
2014-09-29 11:48 - 2014-09-29 11:48 - 00829300 _____ () C:\Users\Ozoma\Downloads\a0cd555b30596770bd0a1659ca7bae25.jpeg
2014-09-29 11:48 - 2014-09-29 11:48 - 00283525 _____ () C:\Users\Ozoma\Downloads\5772a21426df17eac909257b25b7aad5.jpeg
2014-09-29 11:47 - 2014-09-29 11:47 - 00499423 _____ () C:\Users\Ozoma\Downloads\900384bf21a7e10bdc9b5ddb5bedf58e.jpeg
2014-09-29 11:47 - 2014-09-29 11:47 - 00405080 _____ () C:\Users\Ozoma\Downloads\e084760a95a1b89719020c8c7f27b0a9.jpeg
2014-09-29 11:47 - 2014-09-29 11:47 - 00271988 _____ () C:\Users\Ozoma\Downloads\e3248afc098cb8614fdf9bb18619a54c.jpeg
2014-09-29 11:47 - 2014-09-29 11:47 - 00090891 _____ () C:\Users\Ozoma\Downloads\ebc4f4ac550ee0486298f08a101b4908.jpeg
2014-09-29 11:46 - 2014-09-29 11:46 - 00445519 _____ () C:\Users\Ozoma\Downloads\b8d24f48ca9ad07f99b29873b717517e.jpeg
2014-09-29 11:46 - 2014-09-29 11:46 - 00422826 _____ () C:\Users\Ozoma\Downloads\3f475bfbb88d875023224246d040eb5d.jpeg
2014-09-29 11:46 - 2014-09-29 11:46 - 00329819 _____ () C:\Users\Ozoma\Downloads\c4b6bcd27a653f25d1b7006a622b2ba8.jpeg
2014-09-29 11:46 - 2014-09-29 11:46 - 00247223 _____ () C:\Users\Ozoma\Downloads\f0a3dc2e23ee0012be2690552a533b4b.jpeg
2014-09-29 11:45 - 2014-09-29 11:45 - 00447257 _____ () C:\Users\Ozoma\Downloads\132d8d00553396753897c2946af93019.jpeg
2014-09-29 11:45 - 2014-09-29 11:45 - 00408814 _____ () C:\Users\Ozoma\Downloads\0ff8ef0d5317670f06fa1505dace2c5a.jpeg
2014-09-29 11:45 - 2014-09-29 11:45 - 00345639 _____ () C:\Users\Ozoma\Downloads\1f71bcc94e8d1fbefd2a77025e7158e7.jpeg
2014-09-29 11:45 - 2014-09-29 11:45 - 00331897 _____ () C:\Users\Ozoma\Downloads\5349ff40f9d9284917e9100e8d1eb023.jpeg
2014-09-29 11:45 - 2014-09-29 11:45 - 00130531 _____ () C:\Users\Ozoma\Downloads\41549eb9096272aff25c8a171d8266a1.jpeg
2014-09-29 11:44 - 2014-09-29 11:44 - 00441760 _____ () C:\Users\Ozoma\Downloads\168287c2c8ced1a575a51eb9adb6afde.jpeg
2014-09-29 11:44 - 2014-09-29 11:44 - 00369197 _____ () C:\Users\Ozoma\Downloads\fe13dce458b52d3e989093609fc1ca63.jpeg
2014-09-29 11:44 - 2014-09-29 11:44 - 00287350 _____ () C:\Users\Ozoma\Downloads\7e582c6d250cf41b8b91b6465ae0e3eb.jpeg
2014-09-29 11:44 - 2014-09-29 11:44 - 00273165 _____ () C:\Users\Ozoma\Downloads\c4a699729065b23c4a9c316d0fb75239.jpeg
2014-09-29 11:44 - 2014-09-29 11:44 - 00219059 _____ () C:\Users\Ozoma\Downloads\a07fb6d737ef7319e3eb28ba77f2d34d.jpeg
2014-09-29 11:44 - 2014-09-29 11:44 - 00172307 _____ () C:\Users\Ozoma\Downloads\326ec20a26974180120429d4bf25255e.jpeg
2014-09-29 11:44 - 2014-09-29 11:44 - 00071034 _____ () C:\Users\Ozoma\Downloads\22ac0a98201ae8ba9168c5dfb6ef8983.jpeg
2014-09-29 11:43 - 2014-09-29 11:43 - 00456854 _____ () C:\Users\Ozoma\Downloads\56fc54206edfa2fd19fd83f875bdb3c6.jpeg
2014-09-29 11:43 - 2014-09-29 11:43 - 00246545 _____ () C:\Users\Ozoma\Downloads\80bf9bdfabde58e398c976522acd3144.jpeg
2014-09-29 11:43 - 2014-09-29 11:43 - 00157412 _____ () C:\Users\Ozoma\Downloads\5621b09a08f605dd18cec29666658306.jpeg
2014-09-29 11:43 - 2014-09-29 11:43 - 00157029 _____ () C:\Users\Ozoma\Downloads\7ae7608b245f117a9fd57097c8674558.jpeg
2014-09-29 11:42 - 2014-09-29 11:42 - 00460044 _____ () C:\Users\Ozoma\Downloads\49e043d58e255b63d435a339a081adfb.jpeg
2014-09-29 11:42 - 2014-09-29 11:42 - 00236707 _____ () C:\Users\Ozoma\Downloads\a4bb1afa650b4bdf29ee689d0a7f249b.jpeg
2014-09-29 11:42 - 2014-09-29 11:42 - 00228488 _____ () C:\Users\Ozoma\Downloads\d75b508bb329ba51adb4a2d2132f1017.jpeg
2014-09-29 11:42 - 2014-09-29 11:42 - 00193969 _____ () C:\Users\Ozoma\Downloads\78be36bbeba12a52fd3611052b2dbf33.jpeg
2014-09-29 11:42 - 2014-09-29 11:42 - 00146025 _____ () C:\Users\Ozoma\Downloads\4f03b4435eda3649d48d54d12802d9a8.jpeg
2014-09-29 11:41 - 2014-09-29 11:41 - 00488520 _____ () C:\Users\Ozoma\Downloads\876c273c1d3260da89102308f190d8fe.jpeg
2014-09-29 11:41 - 2014-09-29 11:41 - 00359519 _____ () C:\Users\Ozoma\Downloads\68af54382b804cc30f598c291981cf9f.jpeg
2014-09-29 11:41 - 2014-09-29 11:41 - 00306916 _____ () C:\Users\Ozoma\Downloads\61bb1ba4c44e53b0cd2657dc36497881.jpeg
2014-09-29 11:41 - 2014-09-29 11:41 - 00171633 _____ () C:\Users\Ozoma\Downloads\95dfc885418fdca580f4a42d51ba6cda.jpeg
2014-09-29 11:41 - 2014-09-29 11:41 - 00135210 _____ () C:\Users\Ozoma\Downloads\47515732e42ece66dbef4d4e31e9794f.jpeg
2014-09-29 11:41 - 2014-09-29 11:41 - 00099499 _____ () C:\Users\Ozoma\Downloads\0f5d6ea3cdda90fbf9804e0b659d0ab2.jpeg
2014-09-29 11:40 - 2014-09-29 11:40 - 00406700 _____ () C:\Users\Ozoma\Downloads\1a6647b363d7b7009a8720216c78b962.jpeg
2014-09-29 11:40 - 2014-09-29 11:40 - 00139487 _____ () C:\Users\Ozoma\Downloads\4e4a0e46806257fb2359f15d0e6c4e0e.jpeg
2014-09-29 03:17 - 2014-09-29 03:17 - 01415432 _____ () C:\Users\Ozoma\Downloads\9b7269d97895242bfffb5ac07a359e61.jpeg
2014-09-29 03:17 - 2014-09-29 03:17 - 00729286 _____ () C:\Users\Ozoma\Downloads\df2e588d15542f7e2ee92d57d4dc90f9.jpeg
2014-09-29 03:16 - 2014-09-29 03:16 - 00760679 _____ () C:\Users\Ozoma\Downloads\d73b3d97f6220915c7fbafc1a207e27d.jpeg
2014-09-29 03:15 - 2014-09-29 03:15 - 00317867 _____ () C:\Users\Ozoma\Downloads\8c6158db11d4884fee866395cbdc93bd.jpeg
2014-09-29 03:15 - 2014-09-29 03:15 - 00291153 _____ () C:\Users\Ozoma\Downloads\39eed55bcb013deef6c5d4d7e55d335c.jpeg
2014-09-29 03:15 - 2014-09-29 03:15 - 00121851 _____ () C:\Users\Ozoma\Downloads\38fa45b242cdaf15996a441076778ebf.jpeg
2014-09-29 03:15 - 2014-09-29 03:15 - 00114499 _____ () C:\Users\Ozoma\Downloads\66d91d01fb4b5549c754cbdf6ac662e9.jpeg
2014-09-29 03:14 - 2014-09-29 03:14 - 00491887 _____ () C:\Users\Ozoma\Downloads\f2795c8b518686a5c473e57524ec8e4d.jpeg
2014-09-29 03:14 - 2014-09-29 03:14 - 00091914 _____ () C:\Users\Ozoma\Downloads\247c90c980151610a0881e6ed1b4ed94.jpeg
2014-09-29 03:13 - 2014-09-29 03:13 - 00747556 _____ () C:\Users\Ozoma\Downloads\dcdd7e5385b1b085a84e075eda69109f.jpeg
2014-09-29 03:13 - 2014-09-29 03:13 - 00707062 _____ () C:\Users\Ozoma\Downloads\be6c4001f34e14d1a6d31ec6cf626193.jpeg
2014-09-29 03:13 - 2014-09-29 03:13 - 00644548 _____ () C:\Users\Ozoma\Downloads\8922d8a7dfb647c684684e2165ca29c4.jpeg
2014-09-29 03:13 - 2014-09-29 03:13 - 00548364 _____ () C:\Users\Ozoma\Downloads\cc4f4ea8f6c1e3e2aef8877cb0214d18.jpeg
2014-09-29 03:13 - 2014-09-29 03:13 - 00039215 _____ () C:\Users\Ozoma\Downloads\9200dafbd24c8f6fefb55aefef631259.jpeg
2014-09-29 03:12 - 2014-09-29 03:12 - 00938720 _____ () C:\Users\Ozoma\Downloads\4953344f70a2d2ac38d0814847991e48.jpeg
2014-09-29 03:12 - 2014-09-29 03:12 - 00654646 _____ () C:\Users\Ozoma\Downloads\45f4b0551e77b0a2b9f535217e8b9e0a.jpeg
2014-09-29 03:12 - 2014-09-29 03:12 - 00034528 _____ () C:\Users\Ozoma\Downloads\cc0a6df558e53693f030ee3206c5846a.jpeg
2014-09-29 03:11 - 2014-09-29 03:11 - 00923795 _____ () C:\Users\Ozoma\Downloads\4e545c57e2a4e59acd21da4a9dee48e7.jpeg
2014-09-29 03:11 - 2014-09-29 03:11 - 00767265 _____ () C:\Users\Ozoma\Downloads\8bd5511053d3ace6d6e10cef6d6a90ed.jpeg
2014-09-29 03:11 - 2014-09-29 03:11 - 00694068 _____ () C:\Users\Ozoma\Downloads\f9059c0e4f2425c6a5189bbc0429b33c.jpeg
2014-09-29 03:11 - 2014-09-29 03:11 - 00314533 _____ () C:\Users\Ozoma\Downloads\a3ed8662a8585b1cff135b3c3a5c22bd.jpeg
2014-09-29 03:10 - 2014-09-29 03:10 - 00750067 _____ () C:\Users\Ozoma\Downloads\0830fa0f3245ba2739444b9901281652.jpeg
2014-09-29 03:09 - 2014-09-29 03:09 - 00774993 _____ () C:\Users\Ozoma\Downloads\e768c6798d2097ae75f8597b7cccf9ad.jpeg
2014-09-29 03:09 - 2014-09-29 03:09 - 00481129 _____ () C:\Users\Ozoma\Downloads\c84a7da59a9e16af4deb290b8a63906e.jpeg
2014-09-29 03:08 - 2014-09-29 03:08 - 00779454 _____ () C:\Users\Ozoma\Downloads\5446a99f4c21a32f59b8a458cf822b30.jpeg
2014-09-29 03:08 - 2014-09-29 03:08 - 00386649 _____ () C:\Users\Ozoma\Downloads\30ecb296b9e6d0c89730ac1d2ad126f9.jpeg
2014-09-29 03:07 - 2014-09-29 03:07 - 00700225 _____ () C:\Users\Ozoma\Downloads\9af1cf6018012775051c658238d68965.jpeg
2014-09-29 03:07 - 2014-09-29 03:07 - 00536614 _____ () C:\Users\Ozoma\Downloads\d112683cd249f5316ded017ab3ed9b3a.jpeg
2014-09-29 03:07 - 2014-09-29 03:07 - 00193039 _____ () C:\Users\Ozoma\Downloads\c86e96cac5c4f14ab4dcedc302221802.jpeg
2014-09-29 03:06 - 2014-09-29 03:06 - 00545927 _____ () C:\Users\Ozoma\Downloads\7a83fa0e53072d36412da99f96c5e701.jpeg
2014-09-29 03:06 - 2014-09-29 03:06 - 00131852 _____ () C:\Users\Ozoma\Downloads\d13b2e35150cad5c6e59b1da7c8d6509.jpeg
2014-09-29 03:06 - 2014-09-29 03:06 - 00110329 _____ () C:\Users\Ozoma\Downloads\ef82f7b555c6fc65ad303b380b7505f3.jpeg
2014-09-29 03:05 - 2014-09-29 03:05 - 00740088 _____ () C:\Users\Ozoma\Downloads\8def2e922c13cb81262f3fa44d379316.jpeg
2014-09-29 03:05 - 2014-09-29 03:05 - 00725142 _____ () C:\Users\Ozoma\Downloads\bbd09d19c0dc3bdabf67fca1beafa514.jpeg
2014-09-29 03:05 - 2014-09-29 03:05 - 00719925 _____ () C:\Users\Ozoma\Downloads\ba0ef1a6502f11cba7db633a8038989f.jpeg
2014-09-29 03:05 - 2014-09-29 03:05 - 00678978 _____ () C:\Users\Ozoma\Downloads\6f0b237378a0a8a93346e13f19598a0d.jpeg
2014-09-29 03:05 - 2014-09-29 03:05 - 00017822 _____ () C:\Users\Ozoma\Downloads\92ff0bf19530a2212d9788c20d66a145.jpeg
2014-09-29 03:04 - 2014-09-29 03:04 - 00774065 _____ () C:\Users\Ozoma\Downloads\d77da4a7899c4e1c382248661d2371d9.jpeg
2014-09-29 03:04 - 2014-09-29 03:04 - 00759100 _____ () C:\Users\Ozoma\Downloads\995d71646e454557db99ac8046a2faac.jpeg
2014-09-29 03:04 - 2014-09-29 03:04 - 00759007 _____ () C:\Users\Ozoma\Downloads\381ad601f092c8f5edc9434bd1b81710.jpeg
2014-09-29 03:04 - 2014-09-29 03:04 - 00753248 _____ () C:\Users\Ozoma\Downloads\17bd7a6d8ef3384b71c36767d3cfc7ea.jpeg
2014-09-29 03:04 - 2014-09-29 03:04 - 00682752 _____ () C:\Users\Ozoma\Downloads\6da14fb08359826054e5c22100dbc2b5.jpeg
2014-09-29 03:04 - 2014-09-29 03:04 - 00610361 _____ () C:\Users\Ozoma\Downloads\4d1cc2f92970c1b7f1453f7d6202a168 (1).jpeg
2014-09-29 03:04 - 2014-09-29 03:04 - 00572753 _____ () C:\Users\Ozoma\Downloads\b9ab521014ddb8d0d24d303ddf493672.jpeg
2014-09-29 03:04 - 2014-09-29 03:04 - 00542205 _____ () C:\Users\Ozoma\Downloads\c92a02c269fe23c8f08d98b15ba65540.jpeg
2014-09-29 03:04 - 2014-09-29 03:04 - 00468191 _____ () C:\Users\Ozoma\Downloads\b606e63f9a84dbdc6a49d938b41824db.jpeg
2014-09-29 03:03 - 2014-09-29 03:03 - 00937400 _____ () C:\Users\Ozoma\Downloads\739ca459f9c36dbbe212f6b63a5655fe.jpeg
2014-09-29 03:03 - 2014-09-29 03:03 - 00779470 _____ () C:\Users\Ozoma\Downloads\208aff7f3810e29a8c166e22577e018f.jpeg
2014-09-29 03:03 - 2014-09-29 03:03 - 00745467 _____ () C:\Users\Ozoma\Downloads\a318b303e5cfc1d87331e9af2dba757e.jpeg
2014-09-29 03:03 - 2014-09-29 03:03 - 00729712 _____ () C:\Users\Ozoma\Downloads\31c43da9a5a3408130e71a3ad04fb156.jpeg
2014-09-29 03:03 - 2014-09-29 03:03 - 00719038 _____ () C:\Users\Ozoma\Downloads\63d5146cd998526e70bd6462b5134cf3.jpeg
2014-09-29 03:03 - 2014-09-29 03:03 - 00709595 _____ () C:\Users\Ozoma\Downloads\ee312edbb061c09d30b74f19776a442c.jpeg
2014-09-29 03:03 - 2014-09-29 03:03 - 00649096 _____ () C:\Users\Ozoma\Downloads\274c4e1b04785830e33125ed163d8429.jpeg
2014-09-29 03:03 - 2014-09-29 03:03 - 00536070 _____ () C:\Users\Ozoma\Downloads\a9a04ce4beea4dcae888073bae50ce8e.jpeg
2014-09-29 03:02 - 2014-09-29 03:02 - 00775821 _____ () C:\Users\Ozoma\Downloads\cd7b7571cae780f632a16fa8909f432c.jpeg
2014-09-29 03:01 - 2014-09-29 03:01 - 00370763 _____ () C:\Users\Ozoma\Downloads\6ddaf1914220f41a945636c8c0343676.jpeg
2014-09-29 03:01 - 2014-09-29 03:01 - 00102442 _____ () C:\Users\Ozoma\Downloads\cbcc800ab35b9063ddb36e1262744997.jpeg
2014-09-29 03:01 - 2014-09-29 03:01 - 00100721 _____ () C:\Users\Ozoma\Downloads\aff82cde5032dfd299d73831e8051143.jpeg
2014-09-29 03:01 - 2014-09-29 03:01 - 00068916 _____ () C:\Users\Ozoma\Downloads\a44a2ca42daed50f5f0f9e38efbc7f65.jpeg
2014-09-29 03:01 - 2014-09-29 03:01 - 00051231 _____ () C:\Users\Ozoma\Downloads\1cf7441c76013e49cff28fcba7ea66f3.jpeg
2014-09-29 03:00 - 2014-09-29 03:00 - 00589948 _____ () C:\Users\Ozoma\Downloads\f3a78869050318f5801e6a3f09a71a93.jpeg
2014-09-29 03:00 - 2014-09-29 03:00 - 00573826 _____ () C:\Users\Ozoma\Downloads\16c3f8188c70416a638e999873b7d609.jpeg
2014-09-29 03:00 - 2014-09-29 03:00 - 00456007 _____ () C:\Users\Ozoma\Downloads\a43ef97d2e0256798aa174589ef76e9e.jpeg
2014-09-29 03:00 - 2014-09-29 03:00 - 00417569 _____ () C:\Users\Ozoma\Downloads\4894960d338187673c6fa29457bb2266.jpeg
2014-09-29 03:00 - 2014-09-29 03:00 - 00198510 _____ () C:\Users\Ozoma\Downloads\5ce8f1fa33aea6c3e845a8c420da1279.jpeg
2014-09-29 02:59 - 2014-09-29 02:59 - 00806237 _____ () C:\Users\Ozoma\Downloads\6907aee767d4d3b09d6f719d0dcff3a6.jpeg
2014-09-29 02:59 - 2014-09-29 02:59 - 00753650 _____ () C:\Users\Ozoma\Downloads\68b571f6ea6ac77ec604a95f5ccb2c7c.jpeg
2014-09-29 02:59 - 2014-09-29 02:59 - 00707508 _____ () C:\Users\Ozoma\Downloads\b798eb49f86a1fada96f547c67ac5ead.jpeg
2014-09-29 02:59 - 2014-09-29 02:59 - 00687567 _____ () C:\Users\Ozoma\Downloads\aa6b3e8e5daef541c272974c34ec0e35.jpeg
2014-09-29 02:59 - 2014-09-29 02:59 - 00603978 _____ () C:\Users\Ozoma\Downloads\8670d68bf2522a533fcf00812e5dfc1a.jpeg
2014-09-29 02:58 - 2014-09-29 02:58 - 00810526 _____ () C:\Users\Ozoma\Downloads\3cf9124babb1fe1f6a90be400d409cdf.jpeg
2014-09-29 02:58 - 2014-09-29 02:58 - 00804762 _____ () C:\Users\Ozoma\Downloads\d7f0ff36d848e85026ad9a2f213a3ece.jpeg
2014-09-29 02:58 - 2014-09-29 02:58 - 00655040 _____ () C:\Users\Ozoma\Downloads\c08f026610b691d5fd7b6f5834439858.jpeg
2014-09-29 02:58 - 2014-09-29 02:58 - 00467781 _____ () C:\Users\Ozoma\Downloads\5183020f498acc1c730a819a1af53571.jpeg
2014-09-29 02:58 - 2014-09-29 02:58 - 00294460 _____ () C:\Users\Ozoma\Downloads\898975de328f6748467db00503cbfb9a.jpeg
2014-09-29 02:57 - 2014-09-29 02:57 - 00695456 _____ () C:\Users\Ozoma\Downloads\15d61551869eb1da3511395a6f0e9a6b.jpeg
2014-09-29 02:57 - 2014-09-29 02:57 - 00633115 _____ () C:\Users\Ozoma\Downloads\84838f6cc2488397e4ba3f91e3d69c1e.jpeg
2014-09-29 02:57 - 2014-09-29 02:57 - 00415442 _____ () C:\Users\Ozoma\Downloads\91b6d3728628a118d5f3491383fba8a1.jpeg
2014-09-29 02:56 - 2014-09-29 02:56 - 00513834 _____ () C:\Users\Ozoma\Downloads\507ea26764db803323fc06103ce5d87d.jpeg
2014-09-29 02:56 - 2014-09-29 02:56 - 00250932 _____ () C:\Users\Ozoma\Downloads\8f891ef02d36ce90bd83743d41cd8797.jpeg
2014-09-29 02:56 - 2014-09-29 02:56 - 00093054 _____ () C:\Users\Ozoma\Downloads\c6420c65102f84483a6541ea379c7f09.jpeg
2014-09-29 02:56 - 2014-09-29 02:56 - 00050571 _____ () C:\Users\Ozoma\Downloads\69242b04ea8112d74aa8bac4f0312ef0.jpeg
2014-09-28 18:15 - 2014-09-28 18:15 - 00396917 _____ () C:\Users\Ozoma\Downloads\d3f5d628c571a74ccc8c8b89d52f3bf5.jpeg
2014-09-28 18:15 - 2014-09-28 18:15 - 00321396 _____ () C:\Users\Ozoma\Downloads\5ca8cc2e685d0a927fb1c8f55fcfb20f.jpeg
2014-09-28 18:14 - 2014-09-28 18:14 - 00349951 _____ () C:\Users\Ozoma\Downloads\935dacc1a9d414b1d295934460855491.jpeg
2014-09-28 18:14 - 2014-09-28 18:14 - 00133152 _____ () C:\Users\Ozoma\Downloads\afafd2fbee1b0bb24eeb10be9902b125.jpeg
2014-09-28 18:13 - 2014-09-28 18:13 - 00043906 _____ () C:\Users\Ozoma\Downloads\c1d17c8d75ebc1fac3780d1714c0ea14.jpeg
2014-09-28 18:12 - 2014-09-28 18:12 - 00637443 _____ () C:\Users\Ozoma\Downloads\faf47608a06a5befcc000f626a4940d6.jpeg
2014-09-28 18:12 - 2014-09-28 18:12 - 00104144 _____ () C:\Users\Ozoma\Downloads\9e5d7838cbeb877b4f323a03cd1eec96.jpeg
2014-09-28 18:11 - 2014-09-28 18:11 - 00524119 _____ () C:\Users\Ozoma\Downloads\d429487927253e46370d48ef0e32e65c.jpeg
2014-09-28 18:11 - 2014-09-28 18:11 - 00504539 _____ () C:\Users\Ozoma\Downloads\2acf6cc6890470c759ee8624a7773af9.jpeg
2014-09-28 18:11 - 2014-09-28 18:11 - 00089282 _____ () C:\Users\Ozoma\Downloads\060686b39163ce8155bd8a62f00173a3.jpeg
2014-09-28 18:11 - 2014-09-28 18:11 - 00049048 _____ () C:\Users\Ozoma\Downloads\cffcfb95c491d9e4d27afa613f013676.jpeg
2014-09-28 18:11 - 2014-09-28 18:11 - 00034656 _____ () C:\Users\Ozoma\Downloads\2cbd40cd9f47b059d155a70d56ee8058.jpeg
2014-09-28 18:10 - 2014-09-28 18:10 - 00453491 _____ () C:\Users\Ozoma\Downloads\e4f49b768071d1f987421d9db54bf64e.jpeg
2014-09-28 18:08 - 2014-09-28 18:08 - 00604540 _____ () C:\Users\Ozoma\Downloads\5413a3703054ca066a670d0ae072d003.jpeg
2014-09-28 18:08 - 2014-09-28 18:08 - 00355246 _____ () C:\Users\Ozoma\Downloads\96ec0a27da288883540fb7bef94820c2.jpeg
2014-09-28 18:07 - 2014-09-28 18:07 - 00371049 _____ () C:\Users\Ozoma\Downloads\6a8022324ee1313d52e233289db6e6f6.jpeg
2014-09-28 18:07 - 2014-09-28 18:07 - 00166302 _____ () C:\Users\Ozoma\Downloads\b9d050f6ab3183356dea51a508ab3568.jpeg
2014-09-28 18:07 - 2014-09-28 18:07 - 00132501 _____ () C:\Users\Ozoma\Downloads\c7c5b0ba6102391c528e4923ace54b10.jpeg
2014-09-28 18:06 - 2014-09-28 18:06 - 00532651 _____ () C:\Users\Ozoma\Downloads\5ca76624a9cfe7e7bef5e1788c22602b.jpeg
2014-09-28 18:06 - 2014-09-28 18:06 - 00355718 _____ () C:\Users\Ozoma\Downloads\6de13dc14002b8ed4ae3b2e93a9549dd.jpeg
2014-09-28 18:06 - 2014-09-28 18:06 - 00285669 _____ () C:\Users\Ozoma\Downloads\858585ea7169fab9ea7a629cd1c55b8b.jpeg
2014-09-28 12:24 - 2014-09-28 12:24 - 00265253 _____ () C:\Users\Ozoma\Desktop\megaman docs.rar
2014-09-27 14:22 - 2014-09-27 14:22 - 00401454 _____ () C:\Users\Ozoma\Downloads\1741c240f4f0ceed5886b290feb8896c.jpeg
2014-09-27 14:22 - 2014-09-27 14:22 - 00188483 _____ () C:\Users\Ozoma\Downloads\cc778df0871588946b48979907da67e1.jpeg
2014-09-27 14:22 - 2014-09-27 14:22 - 00109778 _____ () C:\Users\Ozoma\Downloads\a01ae4deecd7af75fee52f8d02bfb25c.jpeg
2014-09-27 14:22 - 2014-09-27 14:22 - 00109483 _____ () C:\Users\Ozoma\Downloads\70ce28553bcd6328f887466141090c00.jpeg
2014-09-27 14:21 - 2014-09-27 14:21 - 00390563 _____ () C:\Users\Ozoma\Downloads\c01ffb6520ca9f67770abdef663efc7b.jpeg
2014-09-27 14:21 - 2014-09-27 14:21 - 00075202 _____ () C:\Users\Ozoma\Downloads\384c46b6e93cd4bfd04787d68b0fc9a9.jpeg
2014-09-27 14:20 - 2014-09-27 14:20 - 00299846 _____ () C:\Users\Ozoma\Downloads\5ae128f04a5a8b538c0411c1db354c99.jpeg
2014-09-27 14:20 - 2014-09-27 14:20 - 00284488 _____ () C:\Users\Ozoma\Downloads\f959252a9d8a033cddfc25f6e0d71b6f.jpeg
2014-09-27 14:20 - 2014-09-27 14:20 - 00203555 _____ () C:\Users\Ozoma\Downloads\fddc7063aca37e5a276c5d0865943fb3.jpeg
2014-09-27 14:20 - 2014-09-27 14:20 - 00187708 _____ () C:\Users\Ozoma\Downloads\3ea1cac8eb36b215d2015008d60128e8.jpeg
2014-09-27 14:19 - 2014-09-27 14:19 - 00310873 _____ () C:\Users\Ozoma\Downloads\917e20bdda6d8723ef2c145badaea575.jpeg
2014-09-27 14:19 - 2014-09-27 14:19 - 00203195 _____ () C:\Users\Ozoma\Downloads\33e3ed96308b01fcb80191520bd3d34b.jpeg
2014-09-26 19:46 - 2014-09-26 19:46 - 00269374 _____ () C:\Users\Ozoma\Downloads\fb9feaa36d2bb2fb49293cb6cd289c0b.jpeg
2014-09-26 19:46 - 2014-09-26 19:46 - 00258531 _____ () C:\Users\Ozoma\Downloads\128fff3510c65583b8b466309f8cc304.jpeg
2014-09-26 19:46 - 2014-09-26 19:46 - 00233459 _____ () C:\Users\Ozoma\Downloads\376238424383af2c15dae4ea24e4ae50.jpeg
2014-09-26 19:46 - 2014-09-26 19:46 - 00233076 _____ () C:\Users\Ozoma\Downloads\7992f5535acfe112b351b69fd0ea3034.jpeg
2014-09-26 19:46 - 2014-09-26 19:46 - 00200993 _____ () C:\Users\Ozoma\Downloads\d59d18f88395d5b876e7593141b0a4ec.jpeg
2014-09-26 19:45 - 2014-09-26 19:45 - 00290284 _____ () C:\Users\Ozoma\Downloads\5d854a134ece41c909e73b76154fe2f5.jpeg
2014-09-26 19:45 - 2014-09-26 19:45 - 00275274 _____ () C:\Users\Ozoma\Downloads\e0581006899217ac161523748f8ed611.jpeg
2014-09-26 19:45 - 2014-09-26 19:45 - 00269478 _____ () C:\Users\Ozoma\Downloads\da945090437b648616ff74c491007fb7.jpeg
2014-09-26 19:45 - 2014-09-26 19:45 - 00260641 _____ () C:\Users\Ozoma\Downloads\5e87dab7a7674c2e9650cc2eab856123.jpeg
2014-09-26 19:45 - 2014-09-26 19:45 - 00240877 _____ () C:\Users\Ozoma\Downloads\0db3bf28f995575a7961e7c50e158a99.jpeg
2014-09-26 19:45 - 2014-09-26 19:45 - 00217704 _____ () C:\Users\Ozoma\Downloads\38adeb452be413af848555c42426c440.jpeg
2014-09-26 19:45 - 2014-09-26 19:45 - 00206118 _____ () C:\Users\Ozoma\Downloads\3d46d42a94bc0526c4071f23c8a280ee.jpeg
2014-09-26 19:44 - 2014-09-26 19:44 - 00367032 _____ () C:\Users\Ozoma\Downloads\632658c6f06135f86507cb45ba635a7a.jpeg
2014-09-26 19:44 - 2014-09-26 19:44 - 00269163 _____ () C:\Users\Ozoma\Downloads\334fe7d2affae8c06ffc7df48093afdd.jpeg
2014-09-26 19:44 - 2014-09-26 19:44 - 00260844 _____ () C:\Users\Ozoma\Downloads\9441ef893cbca9ad1e73847daf2c89c3.jpeg
2014-09-26 19:44 - 2014-09-26 19:44 - 00241465 _____ () C:\Users\Ozoma\Downloads\dd99494322fe397f2df0f72628da00ca.jpeg
2014-09-26 19:44 - 2014-09-26 19:44 - 00233784 _____ () C:\Users\Ozoma\Downloads\ba0dcbe20b1a1e2f58ab2430a07c512d.jpeg
2014-09-26 19:44 - 2014-09-26 19:44 - 00208549 _____ () C:\Users\Ozoma\Downloads\ef676d4ac40a098afb40d4d236bdf75a.jpeg
2014-09-26 19:43 - 2014-09-26 19:43 - 00134974 _____ () C:\Users\Ozoma\Downloads\sample_ca258b15fd78fd40b29b64bba3c44b26.jpeg
2014-09-26 19:43 - 2014-09-26 19:43 - 00119240 _____ () C:\Users\Ozoma\Downloads\sample_8252c8677baac59e2a5d9003008d0c82.jpeg
2014-09-26 19:42 - 2014-09-26 19:42 - 00201627 _____ () C:\Users\Ozoma\Downloads\sample_7986672fda83b699d89b4131d5ca2eea.jpeg
2014-09-26 19:42 - 2014-09-26 19:42 - 00183332 _____ () C:\Users\Ozoma\Downloads\sample_3203aeb5bd10efe30c1ccef4f8dccd89.jpeg
2014-09-26 19:42 - 2014-09-26 19:42 - 00181729 _____ () C:\Users\Ozoma\Downloads\sample_5ad801d1f71b017e3c0215510ba0f5e9.jpeg
2014-09-26 19:41 - 2014-09-26 19:41 - 00235478 _____ () C:\Users\Ozoma\Downloads\sample_134abacf3fd1263b8eb7944c854541ac.jpeg
2014-09-26 19:40 - 2014-09-26 19:40 - 00214128 _____ () C:\Users\Ozoma\Downloads\sample_5068cb845aae3e2cf0f9ccd0da3be139.jpeg
2014-09-26 19:39 - 2014-09-26 19:39 - 00137671 _____ () C:\Users\Ozoma\Downloads\sample_275b5e30dc0741e5f713da7996ae3304 (1).jpeg
2014-09-26 19:39 - 2014-09-26 19:39 - 00130002 _____ () C:\Users\Ozoma\Downloads\sample_b55595e1f37e065046ff9cedffca4f68.jpeg
2014-09-26 19:38 - 2014-09-26 19:38 - 00048913 _____ () C:\Users\Ozoma\Downloads\9815d36d22ae2e09734759b6eb8ab4f2.jpeg
2014-09-26 19:37 - 2014-09-26 19:37 - 00292224 _____ () C:\Users\Ozoma\Downloads\10da22c631337703936d160514e61887.jpeg
2014-09-26 19:37 - 2014-09-26 19:37 - 00264043 _____ () C:\Users\Ozoma\Downloads\4bdb688a2aa4240aa8f12aa854aec212.jpeg
2014-09-26 13:05 - 2014-09-26 13:05 - 00001227 _____ () C:\Users\Ozoma\Desktop\TreeSize Free.lnk
2014-09-26 13:05 - 2014-09-26 13:05 - 00000000 ____D () C:\Users\Ozoma\AppData\Roaming\JAM Software
2014-09-26 13:05 - 2014-09-26 13:05 - 00000000 ____D () C:\Program Files (x86)\JAM Software
2014-09-26 13:04 - 2014-09-26 13:04 - 05048584 _____ (JAM Software ) C:\Users\Ozoma\Downloads\TreeSizeFreeSetup.exe
2014-09-25 01:58 - 2014-09-25 01:59 - 00000000 ____D () C:\Users\Ozoma\Desktop\Rekt
2014-09-24 03:22 - 2014-09-10 00:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-09-24 03:22 - 2014-09-09 23:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-09-23 22:01 - 2014-09-26 18:37 - 00000000 ____D () C:\Users\Ozoma\Desktop\Fenster 2
2014-09-23 12:07 - 2014-09-23 12:07 - 00530421 _____ () C:\Users\Ozoma\Downloads\sample_3604f3c3f64ff409a1940ce8cc75668b.jpeg
2014-09-23 12:07 - 2014-09-23 12:07 - 00059227 _____ () C:\Users\Ozoma\Downloads\64d66c0d2d9649bd434e6367aec3679d.jpeg
2014-09-23 12:04 - 2014-09-23 12:04 - 00707697 _____ () C:\Users\Ozoma\Downloads\bf26e29b26f5198b6fbcf0927efdba31.jpeg
2014-09-23 12:04 - 2014-09-23 12:04 - 00646985 _____ () C:\Users\Ozoma\Downloads\5b6135e6931d1024ba357727d67c76b7.jpeg
2014-09-23 12:04 - 2014-09-23 12:04 - 00641835 _____ () C:\Users\Ozoma\Downloads\cfff0f52ea59e8c11677c32adfb69920.jpeg
2014-09-23 12:02 - 2014-09-23 12:02 - 00684636 _____ () C:\Users\Ozoma\Downloads\65b7631bd81883ccd1980280ed27395c.jpeg
2014-09-23 12:02 - 2014-09-23 12:02 - 00664173 _____ () C:\Users\Ozoma\Downloads\8c792da177b378db9852f745e615d93f.jpeg
2014-09-23 12:02 - 2014-09-23 12:02 - 00585172 _____ () C:\Users\Ozoma\Downloads\8cb587d92a38e95dca2898547513fb03.jpeg
2014-09-23 12:01 - 2014-09-23 12:01 - 00830392 _____ () C:\Users\Ozoma\Downloads\1550079b907a763801e2fc9e0ec0787f.jpeg
2014-09-23 12:01 - 2014-09-23 12:01 - 00775408 _____ () C:\Users\Ozoma\Downloads\f60cebd2ab0567543d094d369d5dc615.jpeg
2014-09-23 12:01 - 2014-09-23 12:01 - 00758325 _____ () C:\Users\Ozoma\Downloads\7a74a711ad611e11a4284ba45b800807.jpeg
2014-09-23 12:01 - 2014-09-23 12:01 - 00696816 _____ () C:\Users\Ozoma\Downloads\fce1b212dc7de33becdd75547accb168.jpeg
2014-09-23 12:01 - 2014-09-23 12:01 - 00685678 _____ () C:\Users\Ozoma\Downloads\4b4929e1bd34ec033a69881d487c7c32.jpeg
2014-09-23 12:01 - 2014-09-23 12:01 - 00578089 _____ () C:\Users\Ozoma\Downloads\d3d4c0630d2ddf051380f487bc3f49e5.jpeg
2014-09-23 12:00 - 2014-09-23 12:00 - 00751323 _____ () C:\Users\Ozoma\Downloads\c5f74e23dae9c3759034420dcd772be8.jpeg
2014-09-23 12:00 - 2014-09-23 12:00 - 00680843 _____ () C:\Users\Ozoma\Downloads\1538b3057769d562e3e1bf45dccaf1e0.jpeg
2014-09-23 12:00 - 2014-09-23 12:00 - 00621435 _____ () C:\Users\Ozoma\Downloads\24adca146f5871531d49f49ef4e8445b.jpeg
2014-09-23 12:00 - 2014-09-23 12:00 - 00514741 _____ () C:\Users\Ozoma\Downloads\4d72a41efa350379d3e2af497098e52d.jpeg
2014-09-23 11:58 - 2014-09-23 11:58 - 00085819 _____ () C:\Users\Ozoma\Downloads\ccc370672223493817185f31fb5f3203.jpeg
2014-09-23 11:57 - 2014-09-23 11:57 - 00422719 _____ () C:\Users\Ozoma\Downloads\c2b69801a7fe0719de1db8df3a1ade65.jpeg
2014-09-23 11:57 - 2014-09-23 11:57 - 00395409 _____ () C:\Users\Ozoma\Downloads\4ad6c6f4ab18f2e6a28719a44354296b.jpeg
2014-09-23 11:57 - 2014-09-23 11:57 - 00152625 _____ () C:\Users\Ozoma\Downloads\08b6dc4eb581cd27d27370be8f4692a3.jpeg
2014-09-23 11:56 - 2014-09-23 11:56 - 00185666 _____ () C:\Users\Ozoma\Downloads\d7454e58bd0adaf97f747c7e5c0fc12f.jpeg
2014-09-23 11:55 - 2014-09-23 11:55 - 00331183 _____ () C:\Users\Ozoma\Downloads\e3c7e33a69b78c88aeaa8172ba23984b.jpeg
2014-09-23 11:55 - 2014-09-23 11:55 - 00313528 _____ () C:\Users\Ozoma\Downloads\cd731b7b46a334d7adb806f7bea287e2.jpeg
2014-09-23 11:55 - 2014-09-23 11:55 - 00308658 _____ () C:\Users\Ozoma\Downloads\d4fdeaaa4ca9b2bc98cf76ba08824773.jpeg
2014-09-23 11:55 - 2014-09-23 11:55 - 00223010 _____ () C:\Users\Ozoma\Downloads\sample_cbe464e4378d5ab6c2b360dfd0cc76c2.jpeg
2014-09-23 11:55 - 2014-09-23 11:55 - 00173789 _____ () C:\Users\Ozoma\Downloads\sample_0ce32d171b876b52107f59fd195b4db8.jpeg
2014-09-23 11:54 - 2014-09-23 11:54 - 00384299 _____ () C:\Users\Ozoma\Downloads\ff3c0ea7af9ac3cb72be209859f6c6b0.jpeg
2014-09-23 11:54 - 2014-09-23 11:54 - 00384277 _____ () C:\Users\Ozoma\Downloads\a9a661b87b4dd63b0ee4179d5decb9ad.jpeg
2014-09-23 11:54 - 2014-09-23 11:54 - 00368074 _____ () C:\Users\Ozoma\Downloads\375e31f18f4ce45b00a4a155267a4b94.jpeg
2014-09-23 11:54 - 2014-09-23 11:54 - 00330126 _____ () C:\Users\Ozoma\Downloads\b247e2ceb80a82fa74378c655b87888c.jpeg
2014-09-23 11:54 - 2014-09-23 11:54 - 00325968 _____ () C:\Users\Ozoma\Downloads\fa0737b8268fdd900bd22b754087a595.jpeg
2014-09-23 11:54 - 2014-09-23 11:54 - 00314863 _____ () C:\Users\Ozoma\Downloads\7878b8b9a7c04b459b89c757ac7bbcc6.jpeg
2014-09-23 11:53 - 2014-09-23 11:53 - 00394916 _____ () C:\Users\Ozoma\Downloads\8760739869e0151add68b45464401026.jpeg
2014-09-23 11:53 - 2014-09-23 11:53 - 00384618 _____ () C:\Users\Ozoma\Downloads\b3273e1617f1b6be76040fd3a2c99917.jpeg
2014-09-23 11:53 - 2014-09-23 11:53 - 00374169 _____ () C:\Users\Ozoma\Downloads\e6ea805cec6c96c78dffcb9abc81e704.jpeg
2014-09-23 11:53 - 2014-09-23 11:53 - 00341354 _____ () C:\Users\Ozoma\Downloads\47e307c6be5264c75d06e2f4bd811f3e.jpeg
2014-09-23 11:53 - 2014-09-23 11:53 - 00330971 _____ () C:\Users\Ozoma\Downloads\6df9126a402fc7e955cce81a119030e9.jpeg
2014-09-23 11:53 - 2014-09-23 11:53 - 00312986 _____ () C:\Users\Ozoma\Downloads\b7b7bc0546026ada42a794cbb877b868.jpeg
2014-09-23 11:53 - 2014-09-23 11:53 - 00311945 _____ () C:\Users\Ozoma\Downloads\b687859bf7d402edf9861345a8d2f5f0.jpeg
2014-09-23 11:52 - 2014-09-23 11:52 - 00393506 _____ () C:\Users\Ozoma\Downloads\9d267b81eec70fedfdc997c1fbe9f7a1.jpeg
2014-09-23 11:52 - 2014-09-23 11:52 - 00361897 _____ () C:\Users\Ozoma\Downloads\837bf6beb8ca63f447c94820cade620b.jpeg
2014-09-23 11:52 - 2014-09-23 11:52 - 00340720 _____ () C:\Users\Ozoma\Downloads\70e07d0cdd088f7a3121c9df1d581721.jpeg
2014-09-23 11:52 - 2014-09-23 11:52 - 00285845 _____ () C:\Users\Ozoma\Downloads\sample_123fbdd8b2620182277679a75544770c.jpeg
2014-09-23 11:51 - 2014-09-23 11:51 - 00356341 _____ () C:\Users\Ozoma\Downloads\aef4e6c4f49599b7d5af5429cfc7ac1c.jpeg
2014-09-23 11:51 - 2014-09-23 11:51 - 00346539 _____ () C:\Users\Ozoma\Downloads\7ada9be29d3561de1c8ac1a5045d401b.jpeg
2014-09-23 11:51 - 2014-09-23 11:51 - 00342707 _____ () C:\Users\Ozoma\Downloads\e6b4573b780a74263dce3be07c4bfc2d.jpeg
2014-09-23 11:51 - 2014-09-23 11:51 - 00340003 _____ () C:\Users\Ozoma\Downloads\4d098ac1fd04a29690eecef4d2e31788.jpeg
2014-09-23 11:51 - 2014-09-23 11:51 - 00313048 _____ () C:\Users\Ozoma\Downloads\5b5b31715cb54ee8534032822b3bac0d.jpeg
2014-09-23 11:51 - 2014-09-23 11:51 - 00296339 _____ () C:\Users\Ozoma\Downloads\ab4dc7d972a95a999f8cb9e962fa40d7.jpeg
2014-09-23 11:51 - 2014-09-23 11:51 - 00246265 _____ () C:\Users\Ozoma\Downloads\41ba1ceeb50d6d71852e6c7ce52716b7.jpeg
2014-09-23 11:50 - 2014-09-23 11:50 - 00462996 _____ () C:\Users\Ozoma\Downloads\2f60eb3ccdebf682f44cb74159063c41.jpeg
2014-09-23 11:50 - 2014-09-23 11:50 - 00359350 _____ () C:\Users\Ozoma\Downloads\770439ef2dcbcb32d64b02ce5580e820.jpeg
2014-09-23 11:50 - 2014-09-23 11:50 - 00351772 _____ () C:\Users\Ozoma\Downloads\a0a046325ed149b8593ae06886d5c6d3.jpeg
2014-09-23 11:50 - 2014-09-23 11:50 - 00347562 _____ () C:\Users\Ozoma\Downloads\faa7eb9c6032bc15026c718115862089.jpeg
2014-09-23 11:50 - 2014-09-23 11:50 - 00336765 _____ () C:\Users\Ozoma\Downloads\01ea50d093953775e1d8548190bfdbc8.jpeg
2014-09-23 11:50 - 2014-09-23 11:50 - 00332643 _____ () C:\Users\Ozoma\Downloads\a65b30c56167f211032b178d27bcbfdf.jpeg
2014-09-23 11:49 - 2014-09-23 11:49 - 00359415 _____ () C:\Users\Ozoma\Downloads\9041961e11d5646e6c310fdc1edd97a8.jpeg
2014-09-23 11:49 - 2014-09-23 11:49 - 00336177 _____ () C:\Users\Ozoma\Downloads\793befff2052bf703b0c49139ac279d8.jpeg
2014-09-23 11:49 - 2014-09-23 11:49 - 00294597 _____ () C:\Users\Ozoma\Downloads\86c071749580ea94b15de395a891753a.jpeg
2014-09-23 11:49 - 2014-09-23 11:49 - 00276755 _____ () C:\Users\Ozoma\Downloads\ebaf5e872b112fdc94f098bd50ecae1e.jpeg
2014-09-23 11:49 - 2014-09-23 11:49 - 00272881 _____ () C:\Users\Ozoma\Downloads\6cc55aea3d287fe61030c39e11613402.jpeg
2014-09-23 11:48 - 2014-09-23 11:48 - 00225753 _____ () C:\Users\Ozoma\Downloads\sample_975390cb447fd79cd175cce6d66b89c6.jpeg
2014-09-23 11:48 - 2014-09-23 11:48 - 00168772 _____ () C:\Users\Ozoma\Downloads\sample_03f94f236ec2c65de4aa6c08cfa4e9f0.jpeg
2014-09-23 11:47 - 2014-09-23 11:47 - 00322292 _____ () C:\Users\Ozoma\Downloads\sample_cdbc32543cfeae5b143890a44d2306f1.jpeg
2014-09-23 11:47 - 2014-09-23 11:47 - 00267106 _____ () C:\Users\Ozoma\Downloads\sample_da88ec338ed5ea8effe8186740fb23f5.jpeg
2014-09-23 11:47 - 2014-09-23 11:47 - 00254319 _____ () C:\Users\Ozoma\Downloads\sample_d547f13c37b51824ce672f3490aa4872.jpeg
2014-09-23 11:47 - 2014-09-23 11:47 - 00249541 _____ () C:\Users\Ozoma\Downloads\sample_49f86b748b65270e9ac4455372a296eb.jpeg
2014-09-23 11:47 - 2014-09-23 11:47 - 00247302 _____ () C:\Users\Ozoma\Downloads\sample_0bfd924ea098ff4986171686ec1e6da4.jpeg
2014-09-23 11:47 - 2014-09-23 11:47 - 00141977 _____ () C:\Users\Ozoma\Downloads\sample_523a5803f04f62147aff4d967b550ce2.jpeg
2014-09-23 11:47 - 2014-09-23 11:47 - 00139490 _____ () C:\Users\Ozoma\Downloads\sample_67ac18a5eb02a6ccc0d9e9bf2492d616.jpeg
2014-09-23 11:46 - 2014-09-23 11:46 - 00279134 _____ () C:\Users\Ozoma\Downloads\sample_9391943bfb852c0aefb1f4a0ef095437.jpeg
2014-09-23 11:46 - 2014-09-23 11:46 - 00260825 _____ () C:\Users\Ozoma\Downloads\sample_7b0f5ebe833927b4262e549e4edbc407.jpeg
2014-09-23 11:46 - 2014-09-23 11:46 - 00253838 _____ () C:\Users\Ozoma\Downloads\sample_263c2faf3c2d4bea95af7970dc00dcc5.jpeg
2014-09-23 11:46 - 2014-09-23 11:46 - 00241933 _____ () C:\Users\Ozoma\Downloads\sample_bb9fd7668d23ad48cbef4284af42b91c.jpeg
2014-09-23 11:46 - 2014-09-23 11:46 - 00233655 _____ () C:\Users\Ozoma\Downloads\sample_064bfedf0157072cfdef2a593d37d993.jpeg
2014-09-23 11:46 - 2014-09-23 11:46 - 00226122 _____ () C:\Users\Ozoma\Downloads\sample_7e5ce0c306fc861d55fdd630492c83df.jpeg
2014-09-23 11:46 - 2014-09-23 11:46 - 00211709 _____ () C:\Users\Ozoma\Downloads\sample_5ab2bebc01545f76762025d21b17449f.jpeg
2014-09-23 11:46 - 2014-09-23 11:46 - 00167892 _____ () C:\Users\Ozoma\Downloads\sample_477f1282168b629d76664a7cafb5560a.jpeg
2014-09-23 11:45 - 2014-09-23 11:45 - 00279728 _____ () C:\Users\Ozoma\Downloads\sample_32e6824e60569f1d755e961006b5cc3d.jpeg
2014-09-23 11:45 - 2014-09-23 11:45 - 00259112 _____ () C:\Users\Ozoma\Downloads\sample_0a1f27ccaf82158d12b1d7dd52678750.jpeg
2014-09-23 11:45 - 2014-09-23 11:45 - 00257545 _____ () C:\Users\Ozoma\Downloads\sample_2543e5d13283e4b26892efe96e1f6db2.jpeg
2014-09-23 11:45 - 2014-09-23 11:45 - 00240150 _____ () C:\Users\Ozoma\Downloads\sample_a249009d768d62969036b03c8c7cbae5.jpeg
2014-09-23 11:45 - 2014-09-23 11:45 - 00239625 _____ () C:\Users\Ozoma\Downloads\sample_edee0de4c741222f5b2e9f4a3b5fe96a.jpeg
2014-09-23 11:45 - 2014-09-23 11:45 - 00165618 _____ () C:\Users\Ozoma\Downloads\sample_6b26704d74748439673961f16139e331.jpeg
2014-09-23 11:45 - 2014-09-23 11:45 - 00122402 _____ () C:\Users\Ozoma\Downloads\sample_d7de79a7b75e303b44b92d8e7f763ac8.jpeg
2014-09-23 11:44 - 2014-09-23 11:44 - 00248002 _____ () C:\Users\Ozoma\Downloads\sample_d84f9ce64dc04b175cadf3b010548ff1.jpeg
2014-09-23 11:44 - 2014-09-23 11:44 - 00236344 _____ () C:\Users\Ozoma\Downloads\sample_787e4a01a878b904240f0c7bb5948ced.jpeg
2014-09-23 11:44 - 2014-09-23 11:44 - 00234480 _____ () C:\Users\Ozoma\Downloads\sample_bb0f359eaafa96372d62c185b14f3c2d.jpeg
2014-09-23 11:44 - 2014-09-23 11:44 - 00220971 _____ () C:\Users\Ozoma\Downloads\sample_8dec8180e0d73140d083c8d9d5a600b0.jpeg
2014-09-23 11:44 - 2014-09-23 11:44 - 00206478 _____ () C:\Users\Ozoma\Downloads\sample_91701be9abbc559f5ab3750a4ecd442b.jpeg
2014-09-23 11:44 - 2014-09-23 11:44 - 00132437 _____ () C:\Users\Ozoma\Downloads\sample_c2a19bedfe53733d1771248870fbc6b1.jpeg
2014-09-23 11:43 - 2014-09-23 11:43 - 00223872 _____ () C:\Users\Ozoma\Downloads\sample_2adbe06c5b6412bc771408c920d17287.jpeg
2014-09-23 11:43 - 2014-09-23 11:43 - 00150598 _____ () C:\Users\Ozoma\Downloads\sample_a732a0779b4d20ff62103801311827a6.jpeg

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-23 20:23 - 2013-11-25 15:51 - 00000000 ____D () C:\FRST
2014-10-23 20:12 - 2013-05-11 14:54 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-23 19:28 - 2013-01-04 00:39 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-10-23 19:13 - 2009-07-14 06:45 - 00027920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-23 19:13 - 2009-07-14 06:45 - 00027920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-23 19:10 - 2012-04-20 23:40 - 01938930 _____ () C:\Windows\WindowsUpdate.log
2014-10-23 19:08 - 2013-05-11 14:54 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-23 19:06 - 2014-01-11 17:38 - 00000000 ____D () C:\ProgramData\VMware
2014-10-23 19:06 - 2012-04-18 07:46 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-10-23 19:06 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-23 19:06 - 2009-07-14 06:51 - 01623331 _____ () C:\Windows\setupact.log
2014-10-23 04:55 - 2012-04-24 08:18 - 00000000 ____D () C:\Users\Ozoma\AppData\Roaming\Skype
2014-10-22 18:55 - 2013-04-29 20:53 - 00000000 ____D () C:\Users\Ozoma\AppData\Local\LogMeIn Hamachi
2014-10-21 21:21 - 2014-03-30 17:29 - 00000000 ____D () C:\Users\Ozoma\AppData\Local\Battle.net
2014-10-20 18:44 - 2013-06-01 09:20 - 00000932 _____ () C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2014-10-18 19:12 - 2012-04-21 11:44 - 00000000 ____D () C:\Users\Ozoma\Desktop\Let's plays und fails
2014-10-18 16:57 - 2012-08-17 00:56 - 00030720 _____ () C:\Users\Ozoma\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-10-16 00:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-10-15 16:25 - 2014-05-12 21:53 - 00000000 ____D () C:\ProgramData\Origin
2014-10-15 10:19 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-10-15 10:16 - 2009-07-14 06:45 - 04914056 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-15 10:14 - 2014-05-07 03:00 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-10-15 10:14 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-10-15 10:14 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-10-15 01:20 - 2013-09-06 01:05 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-15 01:16 - 2012-07-23 17:49 - 103265616 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-10-13 22:01 - 2012-04-20 23:59 - 00000000 ____D () C:\Users\Ozoma\AppData\Roaming\TS3Client
2014-10-13 00:15 - 2014-07-13 17:08 - 00000000 ___RD () C:\Users\Ozoma\Dropbox
2014-10-13 00:14 - 2014-07-13 17:05 - 00000000 ____D () C:\Users\Ozoma\AppData\Roaming\Dropbox
2014-10-11 20:29 - 2012-04-20 23:44 - 00156578 _____ () C:\Windows\DirectX.log
2014-10-11 01:07 - 2013-05-11 14:54 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-10-11 01:07 - 2013-05-11 14:54 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-10-06 22:24 - 2013-06-27 20:58 - 00000000 ____D () C:\Users\Ozoma\Desktop\JoyToKey_en
2014-10-02 19:17 - 2014-02-24 17:55 - 00000000 ____D () C:\Program Files (x86)\Mobogenie
2014-10-02 19:17 - 2013-10-26 04:37 - 00000000 ____D () C:\Program Files (x86)\Ss.Helper
2014-10-02 17:52 - 2013-02-03 05:11 - 00000762 _____ () C:\Users\Ozoma\Desktop\Detectiv Conan Die Folgen die ich mir Später ansehen werde.txt
2014-10-02 15:53 - 2010-11-21 05:27 - 00278152 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-10-02 14:19 - 2010-11-21 05:47 - 01077134 _____ () C:\Windows\PFRO.log
2014-10-02 13:47 - 2014-01-17 00:02 - 00000000 ____D () C:\ProgramData\Oracle
2014-10-02 13:46 - 2012-08-18 00:59 - 00000000 ____D () C:\Program Files (x86)\Java
2014-09-30 13:42 - 2014-05-22 23:31 - 00000000 ____D () C:\Users\Ozoma\Desktop\I Wanna Sunspike
2014-09-28 12:26 - 2014-06-29 22:03 - 00000000 ____D () C:\Users\Ozoma\Desktop\Overload 2
2014-09-27 19:56 - 2014-04-12 13:21 - 00000000 ____D () C:\Users\Ozoma\Desktop\Ich räume zu selten auf
2014-09-26 13:11 - 2012-04-21 00:26 - 00000000 ____D () C:\Program Files (x86)\EA Games
2014-09-26 12:47 - 2014-01-18 19:43 - 00000000 ____D () C:\Users\Ozoma\Desktop\Aufräumen....again
2014-09-26 12:46 - 2012-08-06 10:49 - 00000000 ____D () C:\Users\Ozoma\Desktop\Aufräumen unwichtiger Dateien
2014-09-26 12:45 - 2013-01-03 23:48 - 00000000 ____D () C:\Users\Ozoma\Desktop\Sammelordner
2014-09-26 12:25 - 2012-04-20 23:45 - 00000000 ____D () C:\Users\Ozoma
2014-09-25 00:39 - 2014-09-22 18:09 - 00000000 ____D () C:\Users\Ozoma\.VirtualBox
2014-09-24 14:28 - 2013-12-11 16:28 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-24 14:28 - 2013-01-04 00:39 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-09-24 14:28 - 2012-04-21 19:09 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

Some content of TEMP:
====================
C:\Users\Ozoma\AppData\Local\temp\DivSetup.exe
C:\Users\Ozoma\AppData\Local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpflbq_j.dll
C:\Users\Ozoma\AppData\Local\temp\f.exe
C:\Users\Ozoma\AppData\Local\temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Ozoma\AppData\Local\temp\jre-7u67-windows-i586-iftw.exe
C:\Users\Ozoma\AppData\Local\temp\PreExe_ID_13296.exe
C:\Users\Ozoma\AppData\Local\temp\PreExe_ID_13667.exe
C:\Users\Ozoma\AppData\Local\temp\Quarantine.exe
C:\Users\Ozoma\AppData\Local\temp\sdanircmdc.exe
C:\Users\Ozoma\AppData\Local\temp\sdapskill.exe
C:\Users\Ozoma\AppData\Local\temp\sdaspwn.exe
C:\Users\Ozoma\AppData\Local\temp\SIntf16.dll
C:\Users\Ozoma\AppData\Local\temp\SIntf32.dll
C:\Users\Ozoma\AppData\Local\temp\SIntfNT.dll
C:\Users\Ozoma\AppData\Local\temp\SkypeSetup.exe
C:\Users\TEMP\AppData\Local\temp\SkypeSetup.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-10-16 00:44

==================== End Of Log ============================
         

--- --- ---

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-10-2014
Ran by Ozoma at 2014-10-23 20:25:15
Running from C:\Users\TEMP\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Enabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7 Days to Die (HKLM-x32\...\Steam App 251570) (Version:  - The Fun Pimps)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.2.0.2070 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.2.0.2070 - Adobe Systems Incorporated) Hidden
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2 - Adobe Systems Incorporated)
Adobe Download Assistant (x32 Version: 1.2 - Adobe Systems Incorporated) Hidden
Adobe Flash Media Live Encoder 3.2 (HKLM-x32\...\{0659E943-DDF4-44FC-9FEE-A13B09F8BB08}) (Version: 3.2.0 - Adobe Systems Incorporated)
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.167 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Reader 9.5.5 - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-A95000000001}) (Version: 9.5.5 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.0.150 - Adobe Systems, Inc.)
Age of Wulin (HKLM-x32\...\{A1CD76EB-30CA-45EE-9946-5FC20BA62012}) (Version: 0.0.1.011 - gPotato)
Alice Madness Returns (HKLM-x32\...\{93A3AB24-36E8-41BA-80C6-CCEC237836DC}) (Version: 1.0.0.0 - Electronic Arts)
Amnesia: The Dark Descent (HKLM-x32\...\Steam App 57300) (Version:  - )
Arma 2 (HKLM-x32\...\Steam App 33910) (Version:  - Bohemia Interactive)
Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version:  - Bohemia Interactive)
Ascend: Hand of Kul (HKLM-x32\...\Steam App 233630) (Version:  - Signal Studios)
Audacity Recovery Utility (HKLM-x32\...\AURC_is1) (Version:  - Markus Meyer)
AutoHotkey 1.0.48.05 (HKLM-x32\...\AutoHotkey) (Version: 1.0.48.05 - Chris Mallett)
avast! Internet Security (HKLM-x32\...\Avast) (Version: 9.0.2021 - AVAST Software)
Battle for Wesnoth 1.11.7 (HKLM-x32\...\Battle for Wesnoth 1.11.7) (Version: 1.11.7 - )
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version:  - )
BattlEye Uninstall (HKLM-x32\...\BattlEye for A2) (Version:  - )
Beyond Divinity (HKLM-x32\...\{4C9BE645-3EF8-335D-9A7C-77F2A8689C5E}_is1) (Version: 1.0.7 - )
Camtasia Studio 7 (HKLM-x32\...\{C0E8FE43-C35B-451D-B35F-D4BD056D70E7}) (Version: 7.1.1 - TechSmith Corporation)
CH2_1Demo (HKLM-x32\...\UDK-15b41068-9227-4540-bf45-79ec3a1d0195) (Version:  - Epic Games, Inc.)
CH2Ep1 (HKLM-x32\...\UDK-a9cfc93b-489d-4dcf-bda6-ef42d613f81b) (Version:  - Epic Games, Inc.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.45.4.0314 - DT Soft Ltd)
Dark Souls Prepare to Die Edition (HKLM-x32\...\GFWL_{4E4D0FA1-F880-4CCB-999A-501000008200}) (Version: 1.0.0000.130 - NAMCO BANDAI Games Europe S.A.S.)
Dark Souls Prepare to Die Edition (x32 Version: 1.0.0000.130 - NAMCO BANDAI Games Europe S.A.S.) Hidden
Dark Souls Prepare to Die Edition (x32 Version: 1.0.0002.130 - NAMCO BANDAI Games Europe S.A.S.) Hidden
'Das Achte Weltwunder' (HKLM-x32\...\'Das Achte Weltwunder') (Version:  - )
DayZ Commander (HKLM-x32\...\{B3653588-3AC0-4A1D-950F-D96531E84374}) (Version: 0.92.91 - Dotjosh Studios)
Dead Space (HKLM-x32\...\Steam App 17470) (Version:  - EA Redwood Shores)
Dead Space™ 2 (HKLM-x32\...\{96D06FDD-6AF4-4309-BC1B-1C9588B0575E}) (Version: 1.0.943.0 - Electronic Arts)
Dead Space™ 3 (HKLM-x32\...\{D4329609-4102-4F8C-B83F-7FE024EEA314}) (Version: 1.0.0.0 - Electronic Arts, Inc.)
DEVIL MAY CRY 4 BENCHMARK (HKLM-x32\...\{B824BEEF-262B-4B48-9984-D0C6B43C40DD}) (Version: 1.00.000 - CAPCOM CO., LTD.)
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
Diablo III Beta (HKLM-x32\...\Diablo III Beta) (Version: 0.2.0.7162 - Blizzard Entertainment)
Divine Divinity (HKLM-x32\...\{9278c4eb-1dfd-44ec-a0bb-3696f36a2767}_is1) (Version: 1.0.7 - )
Divine Divinity (HKLM-x32\...\Divine Divinity) (Version:  - )
Divine Divinity (HKLM-x32\...\Divine Divinity_is1) (Version:  - GOG.com)
Divinity II - Developer's Cut (HKLM-x32\...\CDCE6956-DCDC-4F82-ACA0-E4C7BAD6B26A_is1) (Version: 1.4 - Larian)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.1.100 - DivX, LLC)
ep2v1.0 (HKLM\...\UDK-c429a1cb-a825-4d9b-9244-6524f32619d2) (Version:  - Epic Games, Inc.)
Ep2v1.3.1 (HKLM\...\UDK-2a05942d-2635-4510-9d16-90851ac5f19d) (Version:  - Epic Games, Inc.)
EP2v1.4 (HKLM\...\UDK-4c647596-6948-492d-bfab-d89ca48f0bd3) (Version:  - Epic Games, Inc.)
Ep3v1.21 (HKLM-x32\...\UDK-8cd56b9e-f402-46df-81d4-78eee2dfccef) (Version:  - Epic Games, Inc.)
EP3v1.4 (HKLM-x32\...\UDK-9be77e23-cec9-4fbf-9d6f-45eb0e6107d0) (Version:  - Epic Games, Inc.)
EP4v1.0 (HKLM-x32\...\UDK-a4faf819-0f87-491e-adfd-7130f6f290df) (Version:  - Epic Games, Inc.)
Ep4v1.1ee (HKLM-x32\...\UDK-26c9a51b-9515-4f59-8e88-c1aca495ebfe) (Version:  - Epic Games, Inc.)
Ep5v1.01 (HKLM-x32\...\UDK-e37a630b-5d78-4674-848a-ddf58d95ca9d) (Version:  - Epic Games, Inc.)
Episode 1 1.0b (HKLM-x32\...\Episode 1 1.0b) (Version: 1.0b - Whorecraft 2)
episode 4 1.1ee (HKLM-x32\...\episode 4 1.1ee) (Version: 1.1ee - Whorecraft)
Episode 5 1.01 (HKLM-x32\...\Episode 5 1.01) (Version: 1.01 - Whorecraft)
Episode1 Demo (HKLM-x32\...\Episode1 Demo) (Version: Demo - Whorecraft 2)
Eryi's Action (HKLM-x32\...\Steam App 261700) (Version:  - Xtal Sword)
Evoland (HKLM-x32\...\Steam App 233470) (Version:  - Shiro Games)
FormatFactory 2.96 (HKLM-x32\...\FormatFactory) (Version: 2.96 - Free Time)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Game Dev Tycoon (HKLM-x32\...\Steam App 239820) (Version:  - Greenheart Games)
GIMP 2.6.12 (HKLM\...\GIMP-2_is1) (Version: 2.6.12 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 38.0.2125.101 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.5 - Google Inc.) Hidden
HashTab 5.2.0.14 (HKLM\...\HashTab) (Version: 5.2.0.14 - Implbits Software)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Heroes of Might & Magic V: Hammers of Fate (HKLM-x32\...\{66FF4C48-0083-4E60-8556-B883AB200091}) (Version:  - )
Heroes of Might and Magic V - Tribes of the East (HKLM-x32\...\{66FF4C48-0083-4E60-8556-B883AB200092}) (Version:  - )
Heroes of Might and Magic V (HKLM-x32\...\{20071984-5EB1-4881-8EDB-082532ACEC6D}) (Version:  - )
Hex-Editor MX (HKLM-x32\...\{7FC7AD70-1DF3-4B84-9AA2-4FB680F45572}_is1) (Version: 6.0 - NEXT-Soft)
Historion Version 1.0 (HKLM-x32\...\Historion) (Version:  - )
How to Survive (HKLM-x32\...\Steam App 250400) (Version:  - )
HyperCam 2 (HKLM\...\HyperCam 2) (Version: 2.27.00 - Hyperionics Technology LLC)
HyperCam 2 (HKLM-x32\...\HyperCam 2) (Version: 2.27.00 - Hyperionics Technology LLC)
ILLUSION BattleRaper2 (HKLM-x32\...\{32470264-B8B8-408E-A404-73A9DF16B8FE}) (Version: 1.00.0000 - ILLUSION)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Infestation: Survivor Stories (HKLM-x32\...\Steam App 226700) (Version:  - Hammerpoint Interactive)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.1.0.1006 - Intel Corporation)
Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.670 - Oracle)
Java Auto Updater (x32 Version: 2.1.67.1 - Oracle, Inc.) Hidden
Java(TM) 7 Update 3 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417003FF}) (Version: 7.0.30 - Oracle)
JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
League of Legends (HKLM-x32\...\{918A9082-6287-4D25-9002-5E5D5E4971CB}) (Version: 1.02.0000 - Riot Games)
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version:  - Valve)
LittleDemo (HKLM\...\UDK-839faa2d-bf16-4951-99bc-21a472f6cb93) (Version:  - Epic Games, Inc.)
LittleDemo (HKLM\...\UDK-9c0cafad-4317-466e-9f0a-7c1b37ff88cd) (Version:  - Epic Games, Inc.)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.255 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.255 - LogMeIn, Inc.) Hidden
Mafia (HKLM-x32\...\Mafia) (Version:  - )
Mafia II (HKLM-x32\...\Steam App 50130) (Version:  - 2K Czech)
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Mass Effect (HKLM-x32\...\{1B0FBB9A-995D-47cd-87CD-13E68B676E4F}) (Version: 1.00 - Electronic Arts, Inc.)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Metro 2033 (HKLM-x32\...\Steam App 43110) (Version:  - THQ)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{90ffcee5-8608-4e94-8c18-a4feb4f83fb8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Mozilla Firefox 27.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 27.0.1 (x86 de)) (Version: 27.0.1 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
Mumble 1.2.4 (HKLM-x32\...\{AF348C2E-7596-481B-92E0-B211836AB949}) (Version: 1.2.4 - Thorvald Natvig)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.51.0 - Black Tree Gaming)
NVIDIA 3D Vision Treiber 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 311.06 - NVIDIA Corporation)
NVIDIA Grafiktreiber 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 311.06 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.12.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.12.0 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.108.688 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.12.0213 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.12.0213 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.0213 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1106 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 311.06 (Version: 311.06 - NVIDIA Corporation) Hidden
NVIDIA Update 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.11.3 - NVIDIA Corporation) Hidden
OpenOffice 4.0.0 (HKLM-x32\...\{B28DBCBA-60F8-40ED-B35B-F510C327946C}) (Version: 4.00.9702 - Apache Software Foundation)
Oracle VM VirtualBox 4.3.16 (HKLM\...\{D7FAEA32-7CE3-4D9F-9139-F7B87BCC50AF}) (Version: 4.3.16 - Oracle Corporation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.)
Paint.NET v3.5.10 (HKLM\...\{529125EF-E3AC-4B74-97E6-F688A7C0F1C0}) (Version: 3.60.0 - dotPDN LLC)
PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2-r4600) (Version:  - )
Peggle (HKLM-x32\...\{715AD72D-887A-459E-988B-D4F3E87FA24B}) (Version: 1.04.0.0 - PopCap Games)
PerformanceTest v7.0 (64-bit) (HKLM\...\PerformanceTest 7_is1) (Version: 7.0 - Passmark Software)
Pflanzen gegen Zombies™ (HKLM-x32\...\{5E6536C2-E79A-49CF-83EA-817AD81F9FC8}) (Version: 1.2.0.1093 - Electronic Arts, Inc.)
Pokemon Game Editor (HKLM-x32\...\{D5B7B2BB-6B7E-4AD4-9F2F-7CCF2B48AA58}) (Version: 1.0.0.0 - 0xRH)
Portal 2 (HKLM-x32\...\Steam App 620) (Version:  - Valve)
Project64 1.6 (HKLM-x32\...\{9559F7CA-5E34-4237-A2D9-D856464AD727}) (Version: 1.6 - Project64)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
QuickTime (HKLM-x32\...\{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}) (Version: 7.73.80.64 - Apple Inc.)
R.U.S.E (HKLM-x32\...\Steam App 21970) (Version:  - Ubisoft)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7246 - Realtek Semiconductor Corp.)
RPG Maker VX (HKLM-x32\...\RPG Maker VX_is1) (Version: 1.02 - Enterbrain)
RPG Maker VX RTP (HKLM-x32\...\RPG Maker VX RTP_is1) (Version: 1.02 - Enterbrain)
RPGXP (HKLM-x32\...\{9B34CAC6-738F-4A20-B428-A115C3E3474C}) (Version: 1.0.0 - Enterbrain)
Saints Row: The Third (HKLM-x32\...\Steam App 55230) (Version:  - Volition)
Shadowgrounds (HKLM-x32\...\Steam App 2500) (Version:  - Frozenbyte)
Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.10.9560 - Skype Technologies S.A.)
Skype™ 6.20 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.20.104 - Skype Technologies S.A.)
Sniper Elite V2 (HKLM-x32\...\Steam App 63380) (Version:  - Rebellion)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
Spore (HKLM-x32\...\Steam App 17390) (Version:  - Maxis™)
Spore: Creepy & Cute Parts Pack (HKLM-x32\...\Steam App 17440) (Version:  - Maxis™)
Spore: Galactic Adventures (HKLM-x32\...\Steam App 24720) (Version:  - EA - Maxis)
Starbound (HKLM-x32\...\Steam App 211820) (Version:  - )
StarCraft II (HKLM-x32\...\StarCraft II) (Version:  - Blizzard Entertainment)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Super Mario Bros. X version 1.3 (HKLM-x32\...\{C9EAEE6B-741F-421D-B9CE-9FA300DA92AD}_is1) (Version: 1.3 - SuperMarioBrothers.org)
Super Meat Boy (HKLM-x32\...\Steam App 40800) (Version:  - )
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.13.1 - TeamSpeak Systems GmbH)
TeamViewer 8 (HKLM-x32\...\TeamViewer 8) (Version: 8.0.17396 - TeamViewer)
TechnoMage (HKLM-x32\...\TechnoMage) (Version:  - )
Terraria (HKLM-x32\...\Steam App 105600) (Version:  - Re-Logic)
The Binding of Isaac (HKLM-x32\...\Steam App 113200) (Version:  - )
The Elder Scrolls Arena (HKLM-x32\...\{62E2BBFA-BE97-42CD-AE89-A4EEF7F36992}) (Version: 1.00.0000 - Bethesda Softworks)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
The Mighty Quest For Epic Loot (HKLM-x32\...\Steam App 239220) (Version:  - Ubisoft Montreal)
Titan Quest (HKLM-x32\...\Steam App 4540) (Version:  - Iron Lore Entertainment)
Titan Quest: Immortal Throne (HKLM-x32\...\Steam App 4550) (Version:  - Iron Lore Entertainment)
tools-windows (x32 Version: 9.6.1.1379776 - VMware, Inc.) Hidden
TrackMania Nations Forever (HKLM-x32\...\Steam App 11020) (Version:  - Nadeo)
TreeSize Free V3.1 (HKLM-x32\...\TreeSize Free_is1) (Version: 3.1 - JAM Software)
Tunngle beta (HKLM-x32\...\Tunngle beta_is1) (Version:  - Tunngle.net GmbH)
UltraISO Premium V9.53 (HKLM-x32\...\UltraISO_is1) (Version:  - )
Unreal Development Kit: 2012-10 (HKLM\...\UDK-500ce7d3-b1a2-4d48-9fc2-606f9a0881b8) (Version:  - Epic Games, Inc.)
Unreal Development Kit: 2012-10 (HKLM\...\UDK-f57ea555-07bd-4398-93bb-8dc4222dc97d) (Version:  - Epic Games, Inc.)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VMware Player (HKLM-x32\...\VMware_Player) (Version: 6.0.1 - VMware, Inc)
VMware Player (Version: 6.0.1 - VMware, Inc.) Hidden
VVVVVV (HKLM-x32\...\Steam App 70300) (Version:  - Terry Cavanagh)
Warlords Battlecry II (HKLM-x32\...\Warlords Battlecry II) (Version:  - )
WCEp1FreeDemo (HKLM\...\UDK-a087dcb5-0a4e-4ffb-8159-4eb092e7f2b4) (Version:  - Epic Games, Inc.)
WhoreCraft (HKLM-x32\...\WhoreCraft1.6.1r) (Version: 1.6.1r - DaemiaCo)
Whorecraft (HKLM-x32\...\WhorecraftEpisode1) (Version: Episode1 - AY)
Whorecraft 1.4 (HKLM-x32\...\Whorecraft 1.4) (Version: 1.4 - DC)
WhoreCraft Episode 3 (HKLM-x32\...\WhoreCraft Episode 3v1.3.1) (Version: v1.3.1 - DaemiaCo)
Whorecraft Episode 3 1.21 (HKLM-x32\...\Whorecraft Episode 3 1.21) (Version: 1.21 - DaemiaCo)
Whorecraft v.1.0r (HKLM-x32\...\Whorecraft v.1.0r) (Version: v.1.0r - DC)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
WinRAR 4.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.11.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)
World of Warcraft Beta (HKLM-x32\...\World of Warcraft Beta) (Version:  - Blizzard Entertainment)
X-Change (HKLM-x32\...\X-Change) (Version:  - )
Xfire (remove only) (HKLM-x32\...\Xfire) (Version:  - )
XSplit Broadcaster (HKLM-x32\...\{6459F338-FE52-4034-BCA7-74772DA0F24D}) (Version: 1.3.1403.1202 - SplitMediaLabs)
XXXmas (HKLM-x32\...\UDK-3e00fd63-559c-41f4-bae2-51cac0817293) (Version:  - Epic Games, Inc.)
XXXmas 1.0 (HKLM-x32\...\XXXmas 1.0) (Version: 1.0 - DC)
YGOPro DevPro Version 1.9.2r2 (HKLM-x32\...\{3CF2634F-3F38-4DD3-9201-CB2FE6B5FF23}_is1) (Version: 1.9.2r2 - YGOPro DevPro Online)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

21-10-2014 17:01:00 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2013-11-25 16:36 - 00000027 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0259C9A4-42A1-4223-8237-4EB291D5B2DE} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-11] (Google Inc.)
Task: {0C0EC934-8238-4C1A-A6FC-6B9C480D7D88} - \DealPlyUpdate No Task File <==== ATTENTION
Task: {2F998368-F010-48EB-98DB-DDD32F5F9939} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-11] (Google Inc.)
Task: {319133E1-FFE2-431C-A518-CCDF27B73499} - System32\Tasks\{C24B1FFD-A9C8-4B74-ABB5-E41FFD5932B7} => D:\Mafia\Game.exe [2012-07-22] (Illusion Softworks)
Task: {3905ACF4-C1B0-4A76-899E-539BB34B91F1} - System32\Tasks\{D857609A-6630-4AF6-8166-5D4EF50910E9} => D:\Mafia\Game.exe [2012-07-22] (Illusion Softworks)
Task: {5CC64BBB-919C-45CC-9E50-E04D07D9F793} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-10-02] (AVAST Software)
Task: {681D2A92-2606-4D0E-AE26-5B5F771D5548} - System32\Tasks\{FD6937A7-3144-47D4-8F68-C7C5C1BEA4DF} => C:\Users\Ozoma\Desktop\rockman4editor.exe
Task: {6B79D072-A49E-4EDE-91BF-6B990CE0E65B} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-21] (Microsoft Corporation)
Task: {A5F2B944-2054-499C-91F8-A1319C4929EA} - \YourFile Update No Task File <==== ATTENTION
Task: {B1E8696F-6D92-4FAC-BA00-971DBB6F81EB} - \DealPly No Task File <==== ATTENTION
Task: {CF04BBD5-2CDD-41B8-A0BF-33D0CF75387F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-24] (Adobe Systems Incorporated)
Task: {E8044BD9-F79E-40D0-8D1B-7CD0EA111514} - System32\Tasks\{70ED74C1-E954-450F-9297-AD5012BCA5FF} => D:\Battlecry II.exe [2002-02-25] (Strategic Studies Group)
Task: {F05F58A7-4FCC-4AF9-A825-2271831953A5} - System32\Tasks\{E0D3616E-970D-49EC-B866-F3F1934D07E3} => D:\Battlecry II.exe [2002-02-25] (Strategic Studies Group)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-04-18 07:46 - 2013-01-18 17:00 - 00087328 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-04-23 18:39 - 2014-04-23 18:39 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-01-10 07:26 - 2014-01-10 07:26 - 01861968 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
2014-10-02 13:43 - 2014-10-02 13:43 - 00301152 _____ () C:\Program Files\AVAST Software\Avast\aswProperty.dll
2014-10-22 22:57 - 2014-10-22 22:57 - 02896896 _____ () C:\Program Files\AVAST Software\Avast\defs\14102201\algo.dll
2014-10-23 19:06 - 2014-10-23 19:06 - 02896896 _____ () C:\Program Files\AVAST Software\Avast\defs\14102301\algo.dll
2014-10-23 20:11 - 2014-10-23 20:11 - 02896896 _____ () C:\Program Files\AVAST Software\Avast\defs\14102302\algo.dll
2013-10-18 13:46 - 2013-10-18 13:46 - 01260624 _____ () C:\Program Files (x86)\VMware\VMware Player\libxml2.dll
2014-01-10 07:28 - 2014-01-10 07:28 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2014-10-02 13:43 - 2014-10-02 13:43 - 19329904 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-10-16 00:32 - 2014-10-16 00:32 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\1eeea3ab8d69ec722bdcb28b8eb8dd75\IsdiInterop.ni.dll
2012-04-18 07:50 - 2012-02-01 16:25 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2014-01-03 13:03 - 2014-01-03 13:03 - 07816192 _____ () D:\avcodec-54.dll
2014-01-03 13:03 - 2014-01-03 13:03 - 00188416 _____ () D:\avutil-52.dll
2014-01-03 13:03 - 2014-01-03 13:03 - 01425920 _____ () D:\avformat-54.dll
2014-01-03 13:03 - 2014-01-03 13:03 - 00336896 _____ () D:\swscale-2.dll
2014-01-03 13:03 - 2014-01-03 13:03 - 00096256 _____ () D:\swresample-0.dll
2014-10-11 01:08 - 2014-10-01 07:54 - 01042760 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.101\libglesv2.dll
2014-10-11 01:08 - 2014-10-01 07:54 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.101\libegl.dll
2014-10-11 01:08 - 2014-10-01 07:54 - 08911176 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.101\pdf.dll
2014-10-11 01:08 - 2014-10-01 07:54 - 01681224 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.101\ffmpegsumo.dll
2014-10-11 01:08 - 2014-10-01 07:54 - 14891848 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.101\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-3620531602-815428446-3748077359-500 - Administrator - Disabled)
fbwuser (S-1-5-21-3620531602-815428446-3748077359-1004 - Limited - Enabled)
Gast (S-1-5-21-3620531602-815428446-3748077359-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3620531602-815428446-3748077359-1003 - Limited - Enabled)
Ozoma (S-1-5-21-3620531602-815428446-3748077359-1001 - Administrator - Enabled) => C:\Users\TEMP
UpdatusUser (S-1-5-21-3620531602-815428446-3748077359-1000 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (10/23/2014 07:08:18 PM) (Source: ESENT) (EventID: 215) (User: )
Description: WinMail (1364) WindowsMail0: Die Sicherung wurde abgebrochen, weil sie vom Client angehalten wurde, oder weil die Verbindung mit dem Client unterbrochen wurde.

Error: (10/23/2014 07:08:02 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/23/2014 07:07:39 PM) (Source: ESENT) (EventID: 215) (User: )
Description: WinMail (4084) WindowsMail0: Die Sicherung wurde abgebrochen, weil sie vom Client angehalten wurde, oder weil die Verbindung mit dem Client unterbrochen wurde.

Error: (10/23/2014 07:07:27 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1511) (User: Ozoma-PC)
Description: Das lokale Benutzerprofil wurde nicht gefunden. Sie werden mit einem temporären Benutzerprofil angemeldet. Änderungen, die Sie am Benutzerprofil vornehmen, gehen bei der Abmeldung verloren.

Error: (10/23/2014 07:07:27 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1515) (User: Ozoma-PC)
Description: Dieses Benutzerprofil wurde gesichert. Bei der nächsten Anmeldung dieses Benutzers wird automatisch versucht, dieses gesicherte Profil zu verwenden.

Error: (10/23/2014 07:07:27 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1502) (User: Ozoma-PC)
Description: Das lokal gespeicherte Profil kann nicht geladen werden. Mögliche Fehlerursachen sind nicht ausreichende Sicherheitsrechte oder ein beschädigtes lokales Profil. 

 Details - Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.

Error: (10/23/2014 07:07:27 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1508) (User: NT-AUTORITÄT)
Description: Die Registrierung konnte nicht geladen werden. Dieses Problem wird oft durch zuwenig Arbeitsspeicher oder nicht ausreichende Sicherheitsberechtigungen verursacht. 

 Details - Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.
 for C:\Users\Ozoma\ntuser.dat

Error: (10/23/2014 07:06:43 PM) (Source: vmauthd) (EventID: 1000) (User: )
Description: 2014-10-23T19:06:43.944+02:00| vthread-4| E105: Cannot find perfmon object in array returned by perfDLL, index=0

Error: (10/22/2014 06:55:20 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/22/2014 06:55:03 PM) (Source: vmauthd) (EventID: 1000) (User: )
Description: 2014-10-22T18:55:03.293+02:00| vthread-5| E105: Cannot find perfmon object in array returned by perfDLL, index=0


System errors:
=============
Error: (10/23/2014 07:08:44 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (10/23/2014 07:08:44 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (10/23/2014 07:07:25 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{027C0094-CB13-4C44-920B-6595D581C01B}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (10/22/2014 11:23:33 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{027C0094-CB13-4C44-920B-6595D581C01B}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (10/22/2014 08:23:14 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{027C0094-CB13-4C44-920B-6595D581C01B}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (10/22/2014 06:56:59 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (10/22/2014 06:56:59 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (10/22/2014 06:54:20 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎22.‎10.‎2014 um 18:53:03 unerwartet heruntergefahren.

Error: (10/22/2014 06:50:09 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{027C0094-CB13-4C44-920B-6595D581C01B}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (10/22/2014 06:47:08 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{027C0094-CB13-4C44-920B-6595D581C01B}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.


Microsoft Office Sessions:
=========================
Error: (10/23/2014 07:08:18 PM) (Source: ESENT) (EventID: 215) (User: )
Description: WinMail1364WindowsMail0:

Error: (10/23/2014 07:08:02 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/23/2014 07:07:39 PM) (Source: ESENT) (EventID: 215) (User: )
Description: WinMail4084WindowsMail0:

Error: (10/23/2014 07:07:27 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1511) (User: Ozoma-PC)
Description: 

Error: (10/23/2014 07:07:27 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1515) (User: Ozoma-PC)
Description: 

Error: (10/23/2014 07:07:27 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1502) (User: Ozoma-PC)
Description: Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.

Error: (10/23/2014 07:07:27 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1508) (User: NT-AUTORITÄT)
Description: Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.
C:\Users\Ozoma\ntuser.dat

Error: (10/23/2014 07:06:43 PM) (Source: vmauthd) (EventID: 1000) (User: )
Description: 2014-10-23T19:06:43.944+02:00| vthread-4| E105: Cannot find perfmon object in array returned by perfDLL, index=0

Error: (10/22/2014 06:55:20 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/22/2014 06:55:03 PM) (Source: vmauthd) (EventID: 1000) (User: )
Description: 2014-10-22T18:55:03.293+02:00| vthread-5| E105: Cannot find perfmon object in array returned by perfDLL, index=0


CodeIntegrity Errors:
===================================
  Date: 2013-11-25 15:36:12.434
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-11-25 15:36:12.395
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-11-25 15:36:12.356
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-11-25 15:36:12.317
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-11-23 22:38:10.681
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-11-23 22:38:10.634
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-11-23 22:38:10.603
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-11-23 22:38:10.556
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-11-22 08:17:54.836
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-11-22 08:17:54.804
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i7-2600K CPU @ 3.40GHz
Percentage of memory in use: 42%
Total physical RAM: 8154.34 MB
Available physical RAM: 4648.17 MB
Total Pagefile: 16306.86 MB
Available Pagefile: 12226.91 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:160 GB) (Free:20.58 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Data) (Fixed) (Total:771.51 GB) (Free:189.62 GB) NTFS
Drive e: (LARIAN_DIV3) (CDROM) (Total:0.63 GB) (Free:0 GB) CDFS
Drive f: (Volume) (Fixed) (Total:1397.14 GB) (Free:326.31 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: F0EA4416)
Partition 1: (Active) - (Size=160 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=771.5 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1397.3 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

==================== End Of Log ============================

Könnte es reichen den Pc auf einen bestimmten Punkt zurückzusetzen...beziehungsweise würde das meine fehlenden Einstellungen wieder herstellen?

Wirds nix bringen.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

• WICHTIG: Speichere Combofix auf deinem Desktop.
• Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
• Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
• Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
• Wenn Combofix fertig ist, wird es ein Logfile erstellen.
• Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

FRST öffnen, Haken setzen bei Addition und scannen, poste bitte beide Logs in Codetags, nicht in HTML Code.

Es tut mir Leid alles wird nun in Code gepostet war mir daher einfach nicht mehr sicher.

ComboFix 14-10-24.01 - Ozoma 24.10.2014  17:46:20.13.8 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.8154.3476 [GMT 2:00]
ausgeführt von:: c:\users\TEMP\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
FW: avast! Antivirus *Disabled* {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\uninstall.exe
c:\uninstall.exe\NircmdB.exe
c:\users\Ozoma\AppData\Roaming\Love
c:\users\Ozoma\AppData\Roaming\Love\not_tetris_2\highscoresA.txt
c:\users\Ozoma\AppData\Roaming\Love\not_tetris_2\options.txt
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-09-24 bis 2014-10-24  ))))))))))))))))))))))))))))))
.
.
2014-10-24 12:52 . 2014-10-24 12:52	75888	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{B718C9DD-F2D3-4A5E-9B8F-DAF5B270071F}\offreg.dll
2014-10-24 12:41 . 2014-10-14 19:59	11627712	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{B718C9DD-F2D3-4A5E-9B8F-DAF5B270071F}\mpengine.dll
2014-10-23 17:07 . 2014-10-23 17:07	--------	d-----w-	c:\users\TEMP
2014-10-20 16:44 . 2014-10-20 16:44	--------	d-----w-	c:\program files (x86)\LogMeIn Hamachi
2014-10-14 20:47 . 2014-08-19 02:06	61440	----a-w-	c:\windows\system32\drivers\appid.sys
2014-10-14 20:46 . 2014-10-10 02:05	276480	----a-w-	c:\windows\system32\generaltel.dll
2014-10-14 20:45 . 2014-09-04 05:23	424448	----a-w-	c:\windows\system32\rastls.dll
2014-10-14 20:44 . 2014-09-13 01:58	77312	----a-w-	c:\windows\system32\packager.dll
2014-10-14 20:44 . 2014-09-13 01:40	67072	----a-w-	c:\windows\SysWow64\packager.dll
2014-10-11 18:29 . 2014-10-11 18:30	--------	d-----w-	c:\users\Ozoma\AppData\Roaming\Spore
2014-10-04 23:10 . 2014-10-05 10:55	--------	d-----w-	c:\users\Ozoma\AppData\Local\Game Dev Tycoon - Steam
2014-10-02 12:31 . 2014-10-02 12:31	--------	d-----w-	c:\users\Ozoma\AppData\Local\ElevatedDiagnostics
2014-10-02 11:46 . 2014-10-02 11:46	--------	d-----w-	c:\program files (x86)\Common Files\Java
2014-10-02 11:46 . 2014-07-25 10:55	98216	----a-w-	c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-10-02 11:45 . 2014-10-02 11:45	427360	----a-w-	c:\windows\system32\drivers\aswsp.sys
2014-10-02 11:45 . 2014-10-02 11:44	92008	----a-w-	c:\windows\system32\drivers\aswStm.sys
2014-10-02 11:45 . 2014-10-02 11:44	224896	----a-w-	c:\windows\system32\drivers\aswVmm.sys
2014-10-02 11:45 . 2014-10-02 11:44	1041168	----a-w-	c:\windows\system32\drivers\aswSnx.sys
2014-10-02 11:45 . 2014-10-02 11:44	93568	----a-w-	c:\windows\system32\drivers\aswRdr2.sys
2014-10-02 11:45 . 2014-10-02 11:44	79184	----a-w-	c:\windows\system32\drivers\aswMonFlt.sys
2014-10-02 11:45 . 2014-10-02 11:44	65776	----a-w-	c:\windows\system32\drivers\aswRvrt.sys
2014-10-02 11:45 . 2014-10-02 11:44	29208	----a-w-	c:\windows\system32\drivers\aswHwid.sys
2014-10-02 11:45 . 2014-10-02 11:43	28184	----a-w-	c:\windows\system32\drivers\aswKbd.sys
2014-10-02 11:44 . 2014-10-02 11:44	307344	----a-w-	c:\windows\system32\aswBoot.exe
2014-10-02 11:44 . 2014-10-02 11:44	43152	----a-w-	c:\windows\avastSS.scr
2014-10-02 11:43 . 2014-10-02 11:43	448400	----a-w-	c:\windows\system32\drivers\aswNdisFlt.sys
2014-10-01 02:52 . 2014-09-25 02:08	371712	----a-w-	c:\windows\system32\qdvd.dll
2014-10-01 02:52 . 2014-09-25 01:40	519680	----a-w-	c:\windows\SysWow64\qdvd.dll
2014-09-26 11:05 . 2014-09-26 11:05	--------	d-----w-	c:\users\Ozoma\AppData\Roaming\JAM Software
2014-09-26 11:05 . 2014-09-26 11:05	--------	d-----w-	c:\program files (x86)\JAM Software
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-10-14 23:16 . 2012-07-23 15:49	103265616	----a-w-	c:\windows\system32\MRT.exe
2014-10-02 13:53 . 2010-11-21 03:27	278152	------w-	c:\windows\system32\MpSigStub.exe
2014-09-24 12:28 . 2013-12-11 14:28	701104	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2014-09-24 12:28 . 2012-04-21 17:09	71344	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-09-09 22:11 . 2014-09-24 01:22	2048	----a-w-	c:\windows\system32\tzres.dll
2014-09-09 21:47 . 2014-09-24 01:22	2048	----a-w-	c:\windows\SysWow64\tzres.dll
2014-09-09 15:29 . 2014-09-22 16:07	910920	----a-w-	c:\windows\system32\drivers\VBoxDrv.sys
2014-09-09 15:27 . 2014-09-09 15:27	157448	----a-w-	c:\windows\system32\drivers\VBoxNetFlt.sys
2014-09-09 15:27 . 2014-09-09 15:27	142528	----a-w-	c:\windows\system32\drivers\VBoxNetAdp.sys
2014-09-09 15:27 . 2014-09-22 16:07	129168	----a-w-	c:\windows\system32\drivers\VBoxUSBMon.sys
2014-09-09 15:26 . 2014-09-09 15:26	205352	----a-w-	c:\windows\system32\VBoxNetFltNobj.dll
2014-08-29 03:46 . 2011-03-28 16:36	23256	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2014-08-23 02:07 . 2014-08-28 13:20	404480	----a-w-	c:\windows\system32\gdi32.dll
2014-08-23 01:45 . 2014-08-28 13:20	311808	----a-w-	c:\windows\SysWow64\gdi32.dll
2014-08-01 11:53 . 2014-09-09 22:49	1031168	----a-w-	c:\windows\system32\TSWorkspace.dll
2014-08-01 11:35 . 2014-09-09 22:49	793600	----a-w-	c:\windows\SysWow64\TSWorkspace.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" [2012-02-29 56088]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2012-10-25 421888]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2013-05-08 41056]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"DivXMediaServer"="c:\program files (x86)\DivX\DivX Media Server\DivXMediaServer.exe" [2014-02-14 450560]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2014-01-10 1861968]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-10-02 4085896]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2014-07-25 256896]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2014-10-18 3835728]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"RequireSignedAppInit_DLLs"=0 (0x0)
"LoadAppInit_DLLs"=1 (0x1)
.
R2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 BEService;BattlEye Service;c:\program files (x86)\Common Files\BattlEye\BEService.exe;c:\program files (x86)\Common Files\BattlEye\BEService.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 NvStUSB;NVIDIA Stereoscopic 3D USB driver;c:\windows\system32\drivers\nvstusb.sys;c:\windows\SYSNATIVE\drivers\nvstusb.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 TunngleService;TunngleService;c:\program files (x86)\Tunngle\TnglCtrl.exe;c:\program files (x86)\Tunngle\TnglCtrl.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 aswNdisFlt;Avast! Firewall Driver;c:\windows\system32\DRIVERS\aswNdisFlt.sys;c:\windows\SYSNATIVE\DRIVERS\aswNdisFlt.sys [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S0 vmci;VMware VMCI Bus Driver;c:\windows\system32\DRIVERS\vmci.sys;c:\windows\SYSNATIVE\DRIVERS\vmci.sys [x]
S0 vsock;vSockets Driver;c:\windows\system32\drivers\vsock.sys;c:\windows\SYSNATIVE\drivers\vsock.sys [x]
S1 aswKbd;aswKbd;c:\windows\system32\drivers\aswKbd.sys;c:\windows\SYSNATIVE\drivers\aswKbd.sys [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S1 HssDRV6;Hotspot Shield Routing Driver 6;c:\windows\system32\DRIVERS\hssdrv6.sys;c:\windows\SYSNATIVE\DRIVERS\hssdrv6.sys [x]
S1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxDrv.sys [x]
S1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxUSBMon.sys [x]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 avast! Firewall;avast! Firewall;c:\program files\AVAST Software\Avast\afwServ.exe;c:\program files\AVAST Software\Avast\afwServ.exe [x]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TeamViewer8;TeamViewer 8;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [x]
S2 VIAKaraokeService;VIA Karaoke digital mixer Service;c:\windows\system32\viakaraokesrv.exe;c:\windows\SYSNATIVE\viakaraokesrv.exe [x]
S2 VMUSBArbService;VMware USB Arbitration Service;c:\program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe;c:\program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe [x]
S3 iusb3hub;Intel(R) USB 3.0-Hubtreiber;c:\windows\system32\drivers\iusb3hub.sys;c:\windows\SYSNATIVE\drivers\iusb3hub.sys [x]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible-Hostcontrollertreiber;c:\windows\system32\drivers\iusb3xhc.sys;c:\windows\SYSNATIVE\drivers\iusb3xhc.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
S3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\DRIVERS\tap0901t.sys;c:\windows\SYSNATIVE\DRIVERS\tap0901t.sys [x]
S3 taphss6;Anchorfree HSS VPN Adapter;c:\windows\system32\DRIVERS\taphss6.sys;c:\windows\SYSNATIVE\DRIVERS\taphss6.sys [x]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetAdp.sys [x]
S3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetFlt.sys [x]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys;c:\windows\SYSNATIVE\drivers\viahduaa.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-10-10 23:08	1089352	----a-w-	c:\program files (x86)\Google\Chrome\Application\38.0.2125.101\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-10-24 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-21 12:28]
.
2014-10-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-05-11 12:54]
.
2014-10-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-05-11 12:54]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-10-02 11:44	634872	----a-w-	c:\program files\AVAST Software\Avast\ashShA64.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mDefault_Search_URL = hxxp://www.google.com
mDefault_Page_URL = hxxp://www.delta-homes.com/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=hp&from=wpm0226&uid=ST31000524AS_9VPFBC69XXXX9VPFBC69&ts=1393417761
mStart Page = hxxp://www.delta-homes.com/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=hp&from=wpm0226&uid=ST31000524AS_9VPFBC69XXXX9VPFBC69&ts=1393417761
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1393257268&from=vtt&uid=ST31000524AS_9VPFBC69XXXX9VPFBC69&q={searchTerms}
mCustomizeSearch = hxxp://www.google.com
mSearchAssistant = hxxp://www.google.com
LSP: %windir%\system32\vsocklib.dll
FF - ProfilePath - 
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKLM-Run-mobilegeni daemon - c:\program files (x86)\Mobogenie\DaemonProcess.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
ShellIconOverlayIdentifiers-{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDD-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDE-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDF-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDC-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EE0-A251-47B7-93E1-CDD82E34AF8B} - (no file)
AddRemove-'Das Achte Weltwunder' - c:\windows\IsUn0407.exe
AddRemove-BattlEye for A2 - d:\steam\steamapps\common\Arma 2BattlEye\UnInstallBE.exe
AddRemove-Divine Divinity_is1 - c:\program files (x86)\GOG.com\Divine Divinity\unins000.exe
AddRemove-episode 4 1.1ee - d:\whorecraft the game\Version 1.6\Episode 2\Version 1.3\Version 1.4\Episode 3\Whorecraft Episode 3\Episode 4\Episode 4 Extendet\episode 4\Uninstall.exe
AddRemove-Episode 5 1.01 - d:\whorecraft the game\Version 1.6\Episode 2\Version 1.3\Version 1.4\Episode 3\Whorecraft Episode 3\Episode 4\Episode 4 Extendet\episode 4\Episode 5\Episode 5\Uninstall.exe
AddRemove-Episode1 Demo - d:\whorecraft the game\Demo\Episode1\Uninstall.exe
AddRemove-Malwarebytes' Anti-Malware_is1 - c:\users\Ozoma\Desktop\Malwarebytes' Anti-Malware\unins000.exe
AddRemove-Steam App 620 - c:\program files (x86)\Steam\steam.exe
AddRemove-TechnoMage - c:\windows\IsUn0407.exe
AddRemove-UDK-15b41068-9227-4540-bf45-79ec3a1d0195 - c:\udk\CH2_1Demo\Binaries\UnSetup.exe
AddRemove-UDK-26c9a51b-9515-4f59-8e88-c1aca495ebfe - c:\udk\Ep4v1.1ee\Binaries\UnSetup.exe
AddRemove-UDK-3e00fd63-559c-41f4-bae2-51cac0817293 - c:\udk\XXXmas\Binaries\UnSetup.exe
AddRemove-UDK-8cd56b9e-f402-46df-81d4-78eee2dfccef - c:\udk\Ep3v1.21\Binaries\UnSetup.exe
AddRemove-UDK-9be77e23-cec9-4fbf-9d6f-45eb0e6107d0 - c:\udk\EP3v1.4\Binaries\UnSetup.exe
AddRemove-UDK-a4faf819-0f87-491e-adfd-7130f6f290df - c:\udk\EP4v1.0\Binaries\UnSetup.exe
AddRemove-UDK-a9cfc93b-489d-4dcf-bda6-ef42d613f81b - d:\ue3\Whorecraft2\Binaries\UnSetup.exe
AddRemove-UDK-e37a630b-5d78-4674-848a-ddf58d95ca9d - c:\udk\Ep5v1.01\Binaries\UnSetup.exe
AddRemove-Whorecraft 1.4 - d:\whorecraft the game\Version 1.6\Episode 2\Version 1.3\Version 1.4\Episode 3\Whorecraft Episode 3\V1.4\Whorecraft\Uninstall.exe
AddRemove-Whorecraft Episode 3 1.21 - d:\whorecraft the game\Version 1.6\Episode 2\Version 1.3\Version 1.4\Episode 3\Whorecraft Episode 3\Uninstall.exe
AddRemove-WhoreCraft Episode 3v1.3.1 - d:\whorecraft the game\Version 1.6\Episode 2\Version 1.3\uninstall.exe
AddRemove-Whorecraft v.1.0r - d:\whorecraft the game\Version 1.6\Episode 2\Version 1.3\Version 1.4\Episode 3\Whorecraft Episode 3\Episode 4\Whorecraft\Uninstall.exe
AddRemove-WhoreCraft1.6.1r - d:\whorecraft the game\Version 1.6\uninstall.exe
AddRemove-WhorecraftEpisode1 - d:\whorecraft the game\uninstall.exe
AddRemove-World of Warcraft Beta - c:\program files (x86)\Common Files\Blizzard Entertainment\World of Warcraft Beta\Uninstall.exe
AddRemove-XXXmas 1.0 - d:\whorecraft the game\XXXmas\XXXmas\Uninstall.exe
AddRemove-{C1C6816E-CBB3-A748-85F9-A8B47B68985B} - c:\programdata\cconttiNiUUetoosaavee\uninstall.exe
AddRemove-{C9EAEE6B-741F-421D-B9CE-9FA300DA92AD}_is1 - c:\smbx\unins000.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.BMP\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLive.PhotoGallery.bmp.15.4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.DIB\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLive.PhotoGallery.bmp.15.4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ICO\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLive.PhotoGallery.ico.15.4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.JFIF\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLive.PhotoGallery.jpg.15.4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.JPE\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLive.PhotoGallery.jpg.15.4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.JPEG\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLive.PhotoGallery.jpg.15.4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.JPG\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLive.PhotoGallery.jpg.15.4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.PNG\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLive.PhotoGallery.png.15.4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.TIF\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLive.PhotoGallery.tif.15.4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.TIFF\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLive.PhotoGallery.tif.15.4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.WDP\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLive.PhotoGallery.wdp.15.4"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_15_0_0_167_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_15_0_0_167_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_15_0_0_167_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_15_0_0_167_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_167.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.15"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_167.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_167.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_167.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\DbgagD\1*]
"value"="?\04\06\15\16\11:?"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-10-24  17:55:52
ComboFix-quarantined-files.txt  2014-10-24 15:55
.
Vor Suchlauf: 17 Verzeichnis(se), 23.313.891.328 Bytes frei
Nach Suchlauf: 19 Verzeichnis(se), 25.325.912.064 Bytes frei
.
- - End Of File - - F91539C763C13BCCDF0AABC0FFE7ED92
         

ComboFix 14-10-24.01 - Ozoma 24.10.2014  17:46:20.13.8 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.8154.3476 [GMT 2:00]
ausgeführt von:: c:\users\TEMP\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
FW: avast! Antivirus *Disabled* {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\uninstall.exe
c:\uninstall.exe\NircmdB.exe
c:\users\Ozoma\AppData\Roaming\Love
c:\users\Ozoma\AppData\Roaming\Love\not_tetris_2\highscoresA.txt
c:\users\Ozoma\AppData\Roaming\Love\not_tetris_2\options.txt
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-09-24 bis 2014-10-24  ))))))))))))))))))))))))))))))
.
.
2014-10-24 12:52 . 2014-10-24 12:52	75888	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{B718C9DD-F2D3-4A5E-9B8F-DAF5B270071F}\offreg.dll
2014-10-24 12:41 . 2014-10-14 19:59	11627712	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{B718C9DD-F2D3-4A5E-9B8F-DAF5B270071F}\mpengine.dll
2014-10-23 17:07 . 2014-10-23 17:07	--------	d-----w-	c:\users\TEMP
2014-10-20 16:44 . 2014-10-20 16:44	--------	d-----w-	c:\program files (x86)\LogMeIn Hamachi
2014-10-14 20:47 . 2014-08-19 02:06	61440	----a-w-	c:\windows\system32\drivers\appid.sys
2014-10-14 20:46 . 2014-10-10 02:05	276480	----a-w-	c:\windows\system32\generaltel.dll
2014-10-14 20:45 . 2014-09-04 05:23	424448	----a-w-	c:\windows\system32\rastls.dll
2014-10-14 20:44 . 2014-09-13 01:58	77312	----a-w-	c:\windows\system32\packager.dll
2014-10-14 20:44 . 2014-09-13 01:40	67072	----a-w-	c:\windows\SysWow64\packager.dll
2014-10-11 18:29 . 2014-10-11 18:30	--------	d-----w-	c:\users\Ozoma\AppData\Roaming\Spore
2014-10-04 23:10 . 2014-10-05 10:55	--------	d-----w-	c:\users\Ozoma\AppData\Local\Game Dev Tycoon - Steam
2014-10-02 12:31 . 2014-10-02 12:31	--------	d-----w-	c:\users\Ozoma\AppData\Local\ElevatedDiagnostics
2014-10-02 11:46 . 2014-10-02 11:46	--------	d-----w-	c:\program files (x86)\Common Files\Java
2014-10-02 11:46 . 2014-07-25 10:55	98216	----a-w-	c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-10-02 11:45 . 2014-10-02 11:45	427360	----a-w-	c:\windows\system32\drivers\aswsp.sys
2014-10-02 11:45 . 2014-10-02 11:44	92008	----a-w-	c:\windows\system32\drivers\aswStm.sys
2014-10-02 11:45 . 2014-10-02 11:44	224896	----a-w-	c:\windows\system32\drivers\aswVmm.sys
2014-10-02 11:45 . 2014-10-02 11:44	1041168	----a-w-	c:\windows\system32\drivers\aswSnx.sys
2014-10-02 11:45 . 2014-10-02 11:44	93568	----a-w-	c:\windows\system32\drivers\aswRdr2.sys
2014-10-02 11:45 . 2014-10-02 11:44	79184	----a-w-	c:\windows\system32\drivers\aswMonFlt.sys
2014-10-02 11:45 . 2014-10-02 11:44	65776	----a-w-	c:\windows\system32\drivers\aswRvrt.sys
2014-10-02 11:45 . 2014-10-02 11:44	29208	----a-w-	c:\windows\system32\drivers\aswHwid.sys
2014-10-02 11:45 . 2014-10-02 11:43	28184	----a-w-	c:\windows\system32\drivers\aswKbd.sys
2014-10-02 11:44 . 2014-10-02 11:44	307344	----a-w-	c:\windows\system32\aswBoot.exe
2014-10-02 11:44 . 2014-10-02 11:44	43152	----a-w-	c:\windows\avastSS.scr
2014-10-02 11:43 . 2014-10-02 11:43	448400	----a-w-	c:\windows\system32\drivers\aswNdisFlt.sys
2014-10-01 02:52 . 2014-09-25 02:08	371712	----a-w-	c:\windows\system32\qdvd.dll
2014-10-01 02:52 . 2014-09-25 01:40	519680	----a-w-	c:\windows\SysWow64\qdvd.dll
2014-09-26 11:05 . 2014-09-26 11:05	--------	d-----w-	c:\users\Ozoma\AppData\Roaming\JAM Software
2014-09-26 11:05 . 2014-09-26 11:05	--------	d-----w-	c:\program files (x86)\JAM Software
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-10-14 23:16 . 2012-07-23 15:49	103265616	----a-w-	c:\windows\system32\MRT.exe
2014-10-02 13:53 . 2010-11-21 03:27	278152	------w-	c:\windows\system32\MpSigStub.exe
2014-09-24 12:28 . 2013-12-11 14:28	701104	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2014-09-24 12:28 . 2012-04-21 17:09	71344	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-09-09 22:11 . 2014-09-24 01:22	2048	----a-w-	c:\windows\system32\tzres.dll
2014-09-09 21:47 . 2014-09-24 01:22	2048	----a-w-	c:\windows\SysWow64\tzres.dll
2014-09-09 15:29 . 2014-09-22 16:07	910920	----a-w-	c:\windows\system32\drivers\VBoxDrv.sys
2014-09-09 15:27 . 2014-09-09 15:27	157448	----a-w-	c:\windows\system32\drivers\VBoxNetFlt.sys
2014-09-09 15:27 . 2014-09-09 15:27	142528	----a-w-	c:\windows\system32\drivers\VBoxNetAdp.sys
2014-09-09 15:27 . 2014-09-22 16:07	129168	----a-w-	c:\windows\system32\drivers\VBoxUSBMon.sys
2014-09-09 15:26 . 2014-09-09 15:26	205352	----a-w-	c:\windows\system32\VBoxNetFltNobj.dll
2014-08-29 03:46 . 2011-03-28 16:36	23256	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2014-08-23 02:07 . 2014-08-28 13:20	404480	----a-w-	c:\windows\system32\gdi32.dll
2014-08-23 01:45 . 2014-08-28 13:20	311808	----a-w-	c:\windows\SysWow64\gdi32.dll
2014-08-01 11:53 . 2014-09-09 22:49	1031168	----a-w-	c:\windows\system32\TSWorkspace.dll
2014-08-01 11:35 . 2014-09-09 22:49	793600	----a-w-	c:\windows\SysWow64\TSWorkspace.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" [2012-02-29 56088]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2012-10-25 421888]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2013-05-08 41056]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"DivXMediaServer"="c:\program files (x86)\DivX\DivX Media Server\DivXMediaServer.exe" [2014-02-14 450560]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2014-01-10 1861968]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-10-02 4085896]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2014-07-25 256896]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2014-10-18 3835728]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"RequireSignedAppInit_DLLs"=0 (0x0)
"LoadAppInit_DLLs"=1 (0x1)
.
R2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 BEService;BattlEye Service;c:\program files (x86)\Common Files\BattlEye\BEService.exe;c:\program files (x86)\Common Files\BattlEye\BEService.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 NvStUSB;NVIDIA Stereoscopic 3D USB driver;c:\windows\system32\drivers\nvstusb.sys;c:\windows\SYSNATIVE\drivers\nvstusb.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 TunngleService;TunngleService;c:\program files (x86)\Tunngle\TnglCtrl.exe;c:\program files (x86)\Tunngle\TnglCtrl.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 aswNdisFlt;Avast! Firewall Driver;c:\windows\system32\DRIVERS\aswNdisFlt.sys;c:\windows\SYSNATIVE\DRIVERS\aswNdisFlt.sys [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S0 vmci;VMware VMCI Bus Driver;c:\windows\system32\DRIVERS\vmci.sys;c:\windows\SYSNATIVE\DRIVERS\vmci.sys [x]
S0 vsock;vSockets Driver;c:\windows\system32\drivers\vsock.sys;c:\windows\SYSNATIVE\drivers\vsock.sys [x]
S1 aswKbd;aswKbd;c:\windows\system32\drivers\aswKbd.sys;c:\windows\SYSNATIVE\drivers\aswKbd.sys [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S1 HssDRV6;Hotspot Shield Routing Driver 6;c:\windows\system32\DRIVERS\hssdrv6.sys;c:\windows\SYSNATIVE\DRIVERS\hssdrv6.sys [x]
S1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxDrv.sys [x]
S1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxUSBMon.sys [x]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 avast! Firewall;avast! Firewall;c:\program files\AVAST Software\Avast\afwServ.exe;c:\program files\AVAST Software\Avast\afwServ.exe [x]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TeamViewer8;TeamViewer 8;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [x]
S2 VIAKaraokeService;VIA Karaoke digital mixer Service;c:\windows\system32\viakaraokesrv.exe;c:\windows\SYSNATIVE\viakaraokesrv.exe [x]
S2 VMUSBArbService;VMware USB Arbitration Service;c:\program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe;c:\program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe [x]
S3 iusb3hub;Intel(R) USB 3.0-Hubtreiber;c:\windows\system32\drivers\iusb3hub.sys;c:\windows\SYSNATIVE\drivers\iusb3hub.sys [x]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible-Hostcontrollertreiber;c:\windows\system32\drivers\iusb3xhc.sys;c:\windows\SYSNATIVE\drivers\iusb3xhc.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
S3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\DRIVERS\tap0901t.sys;c:\windows\SYSNATIVE\DRIVERS\tap0901t.sys [x]
S3 taphss6;Anchorfree HSS VPN Adapter;c:\windows\system32\DRIVERS\taphss6.sys;c:\windows\SYSNATIVE\DRIVERS\taphss6.sys [x]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetAdp.sys [x]
S3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetFlt.sys [x]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys;c:\windows\SYSNATIVE\drivers\viahduaa.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-10-10 23:08	1089352	----a-w-	c:\program files (x86)\Google\Chrome\Application\38.0.2125.101\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-10-24 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-21 12:28]
.
2014-10-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-05-11 12:54]
.
2014-10-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-05-11 12:54]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-10-02 11:44	634872	----a-w-	c:\program files\AVAST Software\Avast\ashShA64.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mDefault_Search_URL = hxxp://www.google.com
mDefault_Page_URL = hxxp://www.delta-homes.com/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=hp&from=wpm0226&uid=ST31000524AS_9VPFBC69XXXX9VPFBC69&ts=1393417761
mStart Page = hxxp://www.delta-homes.com/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=hp&from=wpm0226&uid=ST31000524AS_9VPFBC69XXXX9VPFBC69&ts=1393417761
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1393257268&from=vtt&uid=ST31000524AS_9VPFBC69XXXX9VPFBC69&q={searchTerms}
mCustomizeSearch = hxxp://www.google.com
mSearchAssistant = hxxp://www.google.com
LSP: %windir%\system32\vsocklib.dll
FF - ProfilePath - 
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKLM-Run-mobilegeni daemon - c:\program files (x86)\Mobogenie\DaemonProcess.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
ShellIconOverlayIdentifiers-{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDD-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDE-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDF-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDC-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EE0-A251-47B7-93E1-CDD82E34AF8B} - (no file)
AddRemove-'Das Achte Weltwunder' - c:\windows\IsUn0407.exe
AddRemove-BattlEye for A2 - d:\steam\steamapps\common\Arma 2BattlEye\UnInstallBE.exe
AddRemove-Divine Divinity_is1 - c:\program files (x86)\GOG.com\Divine Divinity\unins000.exe
AddRemove-episode 4 1.1ee - d:\whorecraft the game\Version 1.6\Episode 2\Version 1.3\Version 1.4\Episode 3\Whorecraft Episode 3\Episode 4\Episode 4 Extendet\episode 4\Uninstall.exe
AddRemove-Episode 5 1.01 - d:\whorecraft the game\Version 1.6\Episode 2\Version 1.3\Version 1.4\Episode 3\Whorecraft Episode 3\Episode 4\Episode 4 Extendet\episode 4\Episode 5\Episode 5\Uninstall.exe
AddRemove-Episode1 Demo - d:\whorecraft the game\Demo\Episode1\Uninstall.exe
AddRemove-Malwarebytes' Anti-Malware_is1 - c:\users\Ozoma\Desktop\Malwarebytes' Anti-Malware\unins000.exe
AddRemove-Steam App 620 - c:\program files (x86)\Steam\steam.exe
AddRemove-TechnoMage - c:\windows\IsUn0407.exe
AddRemove-UDK-15b41068-9227-4540-bf45-79ec3a1d0195 - c:\udk\CH2_1Demo\Binaries\UnSetup.exe
AddRemove-UDK-26c9a51b-9515-4f59-8e88-c1aca495ebfe - c:\udk\Ep4v1.1ee\Binaries\UnSetup.exe
AddRemove-UDK-3e00fd63-559c-41f4-bae2-51cac0817293 - c:\udk\XXXmas\Binaries\UnSetup.exe
AddRemove-UDK-8cd56b9e-f402-46df-81d4-78eee2dfccef - c:\udk\Ep3v1.21\Binaries\UnSetup.exe
AddRemove-UDK-9be77e23-cec9-4fbf-9d6f-45eb0e6107d0 - c:\udk\EP3v1.4\Binaries\UnSetup.exe
AddRemove-UDK-a4faf819-0f87-491e-adfd-7130f6f290df - c:\udk\EP4v1.0\Binaries\UnSetup.exe
AddRemove-UDK-a9cfc93b-489d-4dcf-bda6-ef42d613f81b - d:\ue3\Whorecraft2\Binaries\UnSetup.exe
AddRemove-UDK-e37a630b-5d78-4674-848a-ddf58d95ca9d - c:\udk\Ep5v1.01\Binaries\UnSetup.exe
AddRemove-Whorecraft 1.4 - d:\whorecraft the game\Version 1.6\Episode 2\Version 1.3\Version 1.4\Episode 3\Whorecraft Episode 3\V1.4\Whorecraft\Uninstall.exe
AddRemove-Whorecraft Episode 3 1.21 - d:\whorecraft the game\Version 1.6\Episode 2\Version 1.3\Version 1.4\Episode 3\Whorecraft Episode 3\Uninstall.exe
AddRemove-WhoreCraft Episode 3v1.3.1 - d:\whorecraft the game\Version 1.6\Episode 2\Version 1.3\uninstall.exe
AddRemove-Whorecraft v.1.0r - d:\whorecraft the game\Version 1.6\Episode 2\Version 1.3\Version 1.4\Episode 3\Whorecraft Episode 3\Episode 4\Whorecraft\Uninstall.exe
AddRemove-WhoreCraft1.6.1r - d:\whorecraft the game\Version 1.6\uninstall.exe
AddRemove-WhorecraftEpisode1 - d:\whorecraft the game\uninstall.exe
AddRemove-World of Warcraft Beta - c:\program files (x86)\Common Files\Blizzard Entertainment\World of Warcraft Beta\Uninstall.exe
AddRemove-XXXmas 1.0 - d:\whorecraft the game\XXXmas\XXXmas\Uninstall.exe
AddRemove-{C1C6816E-CBB3-A748-85F9-A8B47B68985B} - c:\programdata\cconttiNiUUetoosaavee\uninstall.exe
AddRemove-{C9EAEE6B-741F-421D-B9CE-9FA300DA92AD}_is1 - c:\smbx\unins000.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.BMP\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLive.PhotoGallery.bmp.15.4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.DIB\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLive.PhotoGallery.bmp.15.4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ICO\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLive.PhotoGallery.ico.15.4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.JFIF\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLive.PhotoGallery.jpg.15.4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.JPE\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLive.PhotoGallery.jpg.15.4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.JPEG\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLive.PhotoGallery.jpg.15.4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.JPG\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLive.PhotoGallery.jpg.15.4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.PNG\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLive.PhotoGallery.png.15.4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.TIF\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLive.PhotoGallery.tif.15.4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.TIFF\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLive.PhotoGallery.tif.15.4"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.WDP\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLive.PhotoGallery.wdp.15.4"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_15_0_0_167_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_15_0_0_167_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_15_0_0_167_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_15_0_0_167_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_167.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.15"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_167.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_167.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_167.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\DbgagD\1*]
"value"="?\04\06\15\16\11:?"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-10-24  17:55:52
ComboFix-quarantined-files.txt  2014-10-24 15:55
.
Vor Suchlauf: 17 Verzeichnis(se), 23.313.891.328 Bytes frei
Nach Suchlauf: 19 Verzeichnis(se), 25.325.912.064 Bytes frei
.
- - End Of File - - F91539C763C13BCCDF0AABC0FFE7ED92
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-10-2014
Ran by Ozoma at 2014-10-24 18:00:26
Running from C:\Users\TEMP\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7 Days to Die (HKLM-x32\...\Steam App 251570) (Version:  - The Fun Pimps)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.2.0.2070 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.2.0.2070 - Adobe Systems Incorporated) Hidden
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2 - Adobe Systems Incorporated)
Adobe Download Assistant (x32 Version: 1.2 - Adobe Systems Incorporated) Hidden
Adobe Flash Media Live Encoder 3.2 (HKLM-x32\...\{0659E943-DDF4-44FC-9FEE-A13B09F8BB08}) (Version: 3.2.0 - Adobe Systems Incorporated)
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.167 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Reader 9.5.5 - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-A95000000001}) (Version: 9.5.5 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.0.150 - Adobe Systems, Inc.)
Age of Wulin (HKLM-x32\...\{A1CD76EB-30CA-45EE-9946-5FC20BA62012}) (Version: 0.0.1.011 - gPotato)
Alice Madness Returns (HKLM-x32\...\{93A3AB24-36E8-41BA-80C6-CCEC237836DC}) (Version: 1.0.0.0 - Electronic Arts)
Amnesia: The Dark Descent (HKLM-x32\...\Steam App 57300) (Version:  - )
Arma 2 (HKLM-x32\...\Steam App 33910) (Version:  - Bohemia Interactive)
Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version:  - Bohemia Interactive)
Ascend: Hand of Kul (HKLM-x32\...\Steam App 233630) (Version:  - Signal Studios)
Audacity Recovery Utility (HKLM-x32\...\AURC_is1) (Version:  - Markus Meyer)
AutoHotkey 1.0.48.05 (HKLM-x32\...\AutoHotkey) (Version: 1.0.48.05 - Chris Mallett)
avast! Internet Security (HKLM-x32\...\Avast) (Version: 9.0.2021 - AVAST Software)
Battle for Wesnoth 1.11.7 (HKLM-x32\...\Battle for Wesnoth 1.11.7) (Version: 1.11.7 - )
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version:  - )
BattlEye Uninstall (HKLM-x32\...\BattlEye for A2) (Version:  - )
Beyond Divinity (HKLM-x32\...\{4C9BE645-3EF8-335D-9A7C-77F2A8689C5E}_is1) (Version: 1.0.7 - )
Camtasia Studio 7 (HKLM-x32\...\{C0E8FE43-C35B-451D-B35F-D4BD056D70E7}) (Version: 7.1.1 - TechSmith Corporation)
CH2_1Demo (HKLM-x32\...\UDK-15b41068-9227-4540-bf45-79ec3a1d0195) (Version:  - Epic Games, Inc.)
CH2Ep1 (HKLM-x32\...\UDK-a9cfc93b-489d-4dcf-bda6-ef42d613f81b) (Version:  - Epic Games, Inc.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.45.4.0314 - DT Soft Ltd)
Dark Souls Prepare to Die Edition (HKLM-x32\...\GFWL_{4E4D0FA1-F880-4CCB-999A-501000008200}) (Version: 1.0.0000.130 - NAMCO BANDAI Games Europe S.A.S.)
Dark Souls Prepare to Die Edition (x32 Version: 1.0.0000.130 - NAMCO BANDAI Games Europe S.A.S.) Hidden
Dark Souls Prepare to Die Edition (x32 Version: 1.0.0002.130 - NAMCO BANDAI Games Europe S.A.S.) Hidden
'Das Achte Weltwunder' (HKLM-x32\...\'Das Achte Weltwunder') (Version:  - )
DayZ Commander (HKLM-x32\...\{B3653588-3AC0-4A1D-950F-D96531E84374}) (Version: 0.92.91 - Dotjosh Studios)
Dead Space (HKLM-x32\...\Steam App 17470) (Version:  - EA Redwood Shores)
Dead Space™ 2 (HKLM-x32\...\{96D06FDD-6AF4-4309-BC1B-1C9588B0575E}) (Version: 1.0.943.0 - Electronic Arts)
Dead Space™ 3 (HKLM-x32\...\{D4329609-4102-4F8C-B83F-7FE024EEA314}) (Version: 1.0.0.0 - Electronic Arts, Inc.)
DEVIL MAY CRY 4 BENCHMARK (HKLM-x32\...\{B824BEEF-262B-4B48-9984-D0C6B43C40DD}) (Version: 1.00.000 - CAPCOM CO., LTD.)
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
Diablo III Beta (HKLM-x32\...\Diablo III Beta) (Version: 0.2.0.7162 - Blizzard Entertainment)
Divine Divinity (HKLM-x32\...\{9278c4eb-1dfd-44ec-a0bb-3696f36a2767}_is1) (Version: 1.0.7 - )
Divine Divinity (HKLM-x32\...\Divine Divinity) (Version:  - )
Divine Divinity (HKLM-x32\...\Divine Divinity_is1) (Version:  - GOG.com)
Divinity II - Developer's Cut (HKLM-x32\...\CDCE6956-DCDC-4F82-ACA0-E4C7BAD6B26A_is1) (Version: 1.4 - Larian)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.1.100 - DivX, LLC)
ep2v1.0 (HKLM\...\UDK-c429a1cb-a825-4d9b-9244-6524f32619d2) (Version:  - Epic Games, Inc.)
Ep2v1.3.1 (HKLM\...\UDK-2a05942d-2635-4510-9d16-90851ac5f19d) (Version:  - Epic Games, Inc.)
EP2v1.4 (HKLM\...\UDK-4c647596-6948-492d-bfab-d89ca48f0bd3) (Version:  - Epic Games, Inc.)
Ep3v1.21 (HKLM-x32\...\UDK-8cd56b9e-f402-46df-81d4-78eee2dfccef) (Version:  - Epic Games, Inc.)
EP3v1.4 (HKLM-x32\...\UDK-9be77e23-cec9-4fbf-9d6f-45eb0e6107d0) (Version:  - Epic Games, Inc.)
EP4v1.0 (HKLM-x32\...\UDK-a4faf819-0f87-491e-adfd-7130f6f290df) (Version:  - Epic Games, Inc.)
Ep4v1.1ee (HKLM-x32\...\UDK-26c9a51b-9515-4f59-8e88-c1aca495ebfe) (Version:  - Epic Games, Inc.)
Ep5v1.01 (HKLM-x32\...\UDK-e37a630b-5d78-4674-848a-ddf58d95ca9d) (Version:  - Epic Games, Inc.)
Episode 1 1.0b (HKLM-x32\...\Episode 1 1.0b) (Version: 1.0b - Whorecraft 2)
episode 4 1.1ee (HKLM-x32\...\episode 4 1.1ee) (Version: 1.1ee - Whorecraft)
Episode 5 1.01 (HKLM-x32\...\Episode 5 1.01) (Version: 1.01 - Whorecraft)
Episode1 Demo (HKLM-x32\...\Episode1 Demo) (Version: Demo - Whorecraft 2)
Eryi's Action (HKLM-x32\...\Steam App 261700) (Version:  - Xtal Sword)
Evoland (HKLM-x32\...\Steam App 233470) (Version:  - Shiro Games)
FormatFactory 2.96 (HKLM-x32\...\FormatFactory) (Version: 2.96 - Free Time)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Game Dev Tycoon (HKLM-x32\...\Steam App 239820) (Version:  - Greenheart Games)
GIMP 2.6.12 (HKLM\...\GIMP-2_is1) (Version: 2.6.12 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 38.0.2125.101 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.5 - Google Inc.) Hidden
HashTab 5.2.0.14 (HKLM\...\HashTab) (Version: 5.2.0.14 - Implbits Software)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Heroes of Might & Magic V: Hammers of Fate (HKLM-x32\...\{66FF4C48-0083-4E60-8556-B883AB200091}) (Version:  - )
Heroes of Might and Magic V - Tribes of the East (HKLM-x32\...\{66FF4C48-0083-4E60-8556-B883AB200092}) (Version:  - )
Heroes of Might and Magic V (HKLM-x32\...\{20071984-5EB1-4881-8EDB-082532ACEC6D}) (Version:  - )
Hex-Editor MX (HKLM-x32\...\{7FC7AD70-1DF3-4B84-9AA2-4FB680F45572}_is1) (Version: 6.0 - NEXT-Soft)
Historion Version 1.0 (HKLM-x32\...\Historion) (Version:  - )
How to Survive (HKLM-x32\...\Steam App 250400) (Version:  - )
HyperCam 2 (HKLM\...\HyperCam 2) (Version: 2.27.00 - Hyperionics Technology LLC)
HyperCam 2 (HKLM-x32\...\HyperCam 2) (Version: 2.27.00 - Hyperionics Technology LLC)
ILLUSION BattleRaper2 (HKLM-x32\...\{32470264-B8B8-408E-A404-73A9DF16B8FE}) (Version: 1.00.0000 - ILLUSION)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Infestation: Survivor Stories (HKLM-x32\...\Steam App 226700) (Version:  - Hammerpoint Interactive)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.1.0.1006 - Intel Corporation)
Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.670 - Oracle)
Java Auto Updater (x32 Version: 2.1.67.1 - Oracle, Inc.) Hidden
Java(TM) 7 Update 3 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417003FF}) (Version: 7.0.30 - Oracle)
JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
League of Legends (HKLM-x32\...\{918A9082-6287-4D25-9002-5E5D5E4971CB}) (Version: 1.02.0000 - Riot Games)
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version:  - Valve)
LittleDemo (HKLM\...\UDK-839faa2d-bf16-4951-99bc-21a472f6cb93) (Version:  - Epic Games, Inc.)
LittleDemo (HKLM\...\UDK-9c0cafad-4317-466e-9f0a-7c1b37ff88cd) (Version:  - Epic Games, Inc.)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.255 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.255 - LogMeIn, Inc.) Hidden
Mafia (HKLM-x32\...\Mafia) (Version:  - )
Mafia II (HKLM-x32\...\Steam App 50130) (Version:  - 2K Czech)
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Mass Effect (HKLM-x32\...\{1B0FBB9A-995D-47cd-87CD-13E68B676E4F}) (Version: 1.00 - Electronic Arts, Inc.)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Metro 2033 (HKLM-x32\...\Steam App 43110) (Version:  - THQ)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{90ffcee5-8608-4e94-8c18-a4feb4f83fb8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Mozilla Firefox 27.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 27.0.1 (x86 de)) (Version: 27.0.1 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
Mumble 1.2.4 (HKLM-x32\...\{AF348C2E-7596-481B-92E0-B211836AB949}) (Version: 1.2.4 - Thorvald Natvig)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.51.0 - Black Tree Gaming)
NVIDIA 3D Vision Treiber 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 311.06 - NVIDIA Corporation)
NVIDIA Grafiktreiber 311.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 311.06 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.12.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.12.0 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.108.688 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.12.0213 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.12.0213 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.0213 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1106 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 311.06 (Version: 311.06 - NVIDIA Corporation) Hidden
NVIDIA Update 1.11.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.11.3 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.11.3 - NVIDIA Corporation) Hidden
OpenOffice 4.0.0 (HKLM-x32\...\{B28DBCBA-60F8-40ED-B35B-F510C327946C}) (Version: 4.00.9702 - Apache Software Foundation)
Oracle VM VirtualBox 4.3.16 (HKLM\...\{D7FAEA32-7CE3-4D9F-9139-F7B87BCC50AF}) (Version: 4.3.16 - Oracle Corporation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.)
Paint.NET v3.5.10 (HKLM\...\{529125EF-E3AC-4B74-97E6-F688A7C0F1C0}) (Version: 3.60.0 - dotPDN LLC)
PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2-r4600) (Version:  - )
Peggle (HKLM-x32\...\{715AD72D-887A-459E-988B-D4F3E87FA24B}) (Version: 1.04.0.0 - PopCap Games)
PerformanceTest v7.0 (64-bit) (HKLM\...\PerformanceTest 7_is1) (Version: 7.0 - Passmark Software)
Pflanzen gegen Zombies™ (HKLM-x32\...\{5E6536C2-E79A-49CF-83EA-817AD81F9FC8}) (Version: 1.2.0.1093 - Electronic Arts, Inc.)
Pokemon Game Editor (HKLM-x32\...\{D5B7B2BB-6B7E-4AD4-9F2F-7CCF2B48AA58}) (Version: 1.0.0.0 - 0xRH)
Portal 2 (HKLM-x32\...\Steam App 620) (Version:  - Valve)
Project64 1.6 (HKLM-x32\...\{9559F7CA-5E34-4237-A2D9-D856464AD727}) (Version: 1.6 - Project64)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
QuickTime (HKLM-x32\...\{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}) (Version: 7.73.80.64 - Apple Inc.)
R.U.S.E (HKLM-x32\...\Steam App 21970) (Version:  - Ubisoft)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7246 - Realtek Semiconductor Corp.)
RPG Maker VX (HKLM-x32\...\RPG Maker VX_is1) (Version: 1.02 - Enterbrain)
RPG Maker VX RTP (HKLM-x32\...\RPG Maker VX RTP_is1) (Version: 1.02 - Enterbrain)
RPGXP (HKLM-x32\...\{9B34CAC6-738F-4A20-B428-A115C3E3474C}) (Version: 1.0.0 - Enterbrain)
Saints Row: The Third (HKLM-x32\...\Steam App 55230) (Version:  - Volition)
Shadowgrounds (HKLM-x32\...\Steam App 2500) (Version:  - Frozenbyte)
Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.10.9560 - Skype Technologies S.A.)
Skype™ 6.20 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.20.104 - Skype Technologies S.A.)
Sniper Elite V2 (HKLM-x32\...\Steam App 63380) (Version:  - Rebellion)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
Spore (HKLM-x32\...\Steam App 17390) (Version:  - Maxis™)
Spore: Creepy & Cute Parts Pack (HKLM-x32\...\Steam App 17440) (Version:  - Maxis™)
Spore: Galactic Adventures (HKLM-x32\...\Steam App 24720) (Version:  - EA - Maxis)
Starbound (HKLM-x32\...\Steam App 211820) (Version:  - )
StarCraft II (HKLM-x32\...\StarCraft II) (Version:  - Blizzard Entertainment)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Super Mario Bros. X version 1.3 (HKLM-x32\...\{C9EAEE6B-741F-421D-B9CE-9FA300DA92AD}_is1) (Version: 1.3 - SuperMarioBrothers.org)
Super Meat Boy (HKLM-x32\...\Steam App 40800) (Version:  - )
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.13.1 - TeamSpeak Systems GmbH)
TeamViewer 8 (HKLM-x32\...\TeamViewer 8) (Version: 8.0.17396 - TeamViewer)
TechnoMage (HKLM-x32\...\TechnoMage) (Version:  - )
Terraria (HKLM-x32\...\Steam App 105600) (Version:  - Re-Logic)
The Binding of Isaac (HKLM-x32\...\Steam App 113200) (Version:  - )
The Elder Scrolls Arena (HKLM-x32\...\{62E2BBFA-BE97-42CD-AE89-A4EEF7F36992}) (Version: 1.00.0000 - Bethesda Softworks)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
The Mighty Quest For Epic Loot (HKLM-x32\...\Steam App 239220) (Version:  - Ubisoft Montreal)
Titan Quest (HKLM-x32\...\Steam App 4540) (Version:  - Iron Lore Entertainment)
Titan Quest: Immortal Throne (HKLM-x32\...\Steam App 4550) (Version:  - Iron Lore Entertainment)
tools-windows (x32 Version: 9.6.1.1379776 - VMware, Inc.) Hidden
TrackMania Nations Forever (HKLM-x32\...\Steam App 11020) (Version:  - Nadeo)
TreeSize Free V3.1 (HKLM-x32\...\TreeSize Free_is1) (Version: 3.1 - JAM Software)
Tunngle beta (HKLM-x32\...\Tunngle beta_is1) (Version:  - Tunngle.net GmbH)
UltraISO Premium V9.53 (HKLM-x32\...\UltraISO_is1) (Version:  - )
Unreal Development Kit: 2012-10 (HKLM\...\UDK-500ce7d3-b1a2-4d48-9fc2-606f9a0881b8) (Version:  - Epic Games, Inc.)
Unreal Development Kit: 2012-10 (HKLM\...\UDK-f57ea555-07bd-4398-93bb-8dc4222dc97d) (Version:  - Epic Games, Inc.)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VMware Player (HKLM-x32\...\VMware_Player) (Version: 6.0.1 - VMware, Inc)
VMware Player (Version: 6.0.1 - VMware, Inc.) Hidden
VVVVVV (HKLM-x32\...\Steam App 70300) (Version:  - Terry Cavanagh)
Warlords Battlecry II (HKLM-x32\...\Warlords Battlecry II) (Version:  - )
WCEp1FreeDemo (HKLM\...\UDK-a087dcb5-0a4e-4ffb-8159-4eb092e7f2b4) (Version:  - Epic Games, Inc.)
WhoreCraft (HKLM-x32\...\WhoreCraft1.6.1r) (Version: 1.6.1r - DaemiaCo)
Whorecraft (HKLM-x32\...\WhorecraftEpisode1) (Version: Episode1 - AY)
Whorecraft 1.4 (HKLM-x32\...\Whorecraft 1.4) (Version: 1.4 - DC)
WhoreCraft Episode 3 (HKLM-x32\...\WhoreCraft Episode 3v1.3.1) (Version: v1.3.1 - DaemiaCo)
Whorecraft Episode 3 1.21 (HKLM-x32\...\Whorecraft Episode 3 1.21) (Version: 1.21 - DaemiaCo)
Whorecraft v.1.0r (HKLM-x32\...\Whorecraft v.1.0r) (Version: v.1.0r - DC)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
WinRAR 4.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.11.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)
World of Warcraft Beta (HKLM-x32\...\World of Warcraft Beta) (Version:  - Blizzard Entertainment)
X-Change (HKLM-x32\...\X-Change) (Version:  - )
Xfire (remove only) (HKLM-x32\...\Xfire) (Version:  - )
XSplit Broadcaster (HKLM-x32\...\{6459F338-FE52-4034-BCA7-74772DA0F24D}) (Version: 1.3.1403.1202 - SplitMediaLabs)
XXXmas (HKLM-x32\...\UDK-3e00fd63-559c-41f4-bae2-51cac0817293) (Version:  - Epic Games, Inc.)
XXXmas 1.0 (HKLM-x32\...\XXXmas 1.0) (Version: 1.0 - DC)
YGOPro DevPro Version 1.9.2r2 (HKLM-x32\...\{3CF2634F-3F38-4DD3-9201-CB2FE6B5FF23}_is1) (Version: 1.9.2r2 - YGOPro DevPro Online)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

23-10-2014 22:33:16 Geplanter Prüfpunkt

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2014-10-24 17:53 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0259C9A4-42A1-4223-8237-4EB291D5B2DE} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-11] (Google Inc.)
Task: {0C0EC934-8238-4C1A-A6FC-6B9C480D7D88} - \DealPlyUpdate No Task File <==== ATTENTION
Task: {2F998368-F010-48EB-98DB-DDD32F5F9939} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-11] (Google Inc.)
Task: {319133E1-FFE2-431C-A518-CCDF27B73499} - System32\Tasks\{C24B1FFD-A9C8-4B74-ABB5-E41FFD5932B7} => D:\Mafia\Game.exe [2012-07-22] (Illusion Softworks)
Task: {3905ACF4-C1B0-4A76-899E-539BB34B91F1} - System32\Tasks\{D857609A-6630-4AF6-8166-5D4EF50910E9} => D:\Mafia\Game.exe [2012-07-22] (Illusion Softworks)
Task: {5CC64BBB-919C-45CC-9E50-E04D07D9F793} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-10-02] (AVAST Software)
Task: {681D2A92-2606-4D0E-AE26-5B5F771D5548} - System32\Tasks\{FD6937A7-3144-47D4-8F68-C7C5C1BEA4DF} => C:\Users\Ozoma\Desktop\rockman4editor.exe
Task: {6B79D072-A49E-4EDE-91BF-6B990CE0E65B} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-21] (Microsoft Corporation)
Task: {A5F2B944-2054-499C-91F8-A1319C4929EA} - \YourFile Update No Task File <==== ATTENTION
Task: {B1E8696F-6D92-4FAC-BA00-971DBB6F81EB} - \DealPly No Task File <==== ATTENTION
Task: {CF04BBD5-2CDD-41B8-A0BF-33D0CF75387F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-24] (Adobe Systems Incorporated)
Task: {E8044BD9-F79E-40D0-8D1B-7CD0EA111514} - System32\Tasks\{70ED74C1-E954-450F-9297-AD5012BCA5FF} => D:\Battlecry II.exe [2002-02-25] (Strategic Studies Group)
Task: {F05F58A7-4FCC-4AF9-A825-2271831953A5} - System32\Tasks\{E0D3616E-970D-49EC-B866-F3F1934D07E3} => D:\Battlecry II.exe [2002-02-25] (Strategic Studies Group)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-04-18 07:46 - 2013-01-18 17:00 - 00087328 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-04-23 18:39 - 2014-04-23 18:39 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-01-10 07:26 - 2014-01-10 07:26 - 01861968 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
2012-06-10 00:21 - 2012-02-17 20:55 - 00193536 _____ () C:\Program Files\WinRAR\rarext.dll
2014-10-02 13:43 - 2014-10-02 13:43 - 00301152 _____ () C:\Program Files\AVAST Software\Avast\aswProperty.dll
2014-10-24 09:13 - 2014-10-24 09:13 - 02896896 _____ () C:\Program Files\AVAST Software\Avast\defs\14102400\algo.dll
2013-10-18 13:46 - 2013-10-18 13:46 - 01260624 _____ () C:\Program Files (x86)\VMware\VMware Player\libxml2.dll
2014-01-10 07:28 - 2014-01-10 07:28 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2014-10-02 13:43 - 2014-10-02 13:43 - 19329904 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-10-16 00:32 - 2014-10-16 00:32 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\1eeea3ab8d69ec722bdcb28b8eb8dd75\IsdiInterop.ni.dll
2012-04-18 07:50 - 2012-02-01 16:25 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2014-01-03 13:03 - 2014-01-03 13:03 - 07816192 _____ () D:\avcodec-54.dll
2014-01-03 13:03 - 2014-01-03 13:03 - 00188416 _____ () D:\avutil-52.dll
2014-01-03 13:03 - 2014-01-03 13:03 - 01425920 _____ () D:\avformat-54.dll
2014-01-03 13:03 - 2014-01-03 13:03 - 00336896 _____ () D:\swscale-2.dll
2014-01-03 13:03 - 2014-01-03 13:03 - 00096256 _____ () D:\swresample-0.dll
2014-10-11 01:08 - 2014-10-01 07:54 - 01042760 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.101\libglesv2.dll
2014-10-11 01:08 - 2014-10-01 07:54 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.101\libegl.dll
2014-10-11 01:08 - 2014-10-01 07:54 - 08911176 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.101\pdf.dll
2014-10-11 01:08 - 2014-10-01 07:54 - 01681224 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.101\ffmpegsumo.dll
2014-10-11 01:08 - 2014-10-01 07:54 - 14891848 _____ () C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.101\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-3620531602-815428446-3748077359-500 - Administrator - Disabled)
fbwuser (S-1-5-21-3620531602-815428446-3748077359-1004 - Limited - Enabled)
Gast (S-1-5-21-3620531602-815428446-3748077359-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3620531602-815428446-3748077359-1003 - Limited - Enabled)
Ozoma (S-1-5-21-3620531602-815428446-3748077359-1001 - Administrator - Enabled) => C:\Users\TEMP
UpdatusUser (S-1-5-21-3620531602-815428446-3748077359-1000 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (10/24/2014 00:33:16 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "ConvertStringSidToSid(S-1-5-21-3620531602-815428446-3748077359-1001.bak)" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
.


Vorgang:
   OnIdentify-Ereignis
   Generatordaten werden gesammelt

Kontext:
   Ausführungskontext: Shadow Copy Optimization Writer
   Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
   Generatorname: Shadow Copy Optimization Writer
   Generatorinstanz-ID: {29017263-7c7c-4cd3-8e3f-5155339ba8fa}

Error: (10/23/2014 07:08:18 PM) (Source: ESENT) (EventID: 215) (User: )
Description: WinMail (1364) WindowsMail0: Die Sicherung wurde abgebrochen, weil sie vom Client angehalten wurde, oder weil die Verbindung mit dem Client unterbrochen wurde.

Error: (10/23/2014 07:08:02 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/23/2014 07:07:39 PM) (Source: ESENT) (EventID: 215) (User: )
Description: WinMail (4084) WindowsMail0: Die Sicherung wurde abgebrochen, weil sie vom Client angehalten wurde, oder weil die Verbindung mit dem Client unterbrochen wurde.

Error: (10/23/2014 07:07:27 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1511) (User: Ozoma-PC)
Description: Das lokale Benutzerprofil wurde nicht gefunden. Sie werden mit einem temporären Benutzerprofil angemeldet. Änderungen, die Sie am Benutzerprofil vornehmen, gehen bei der Abmeldung verloren.

Error: (10/23/2014 07:07:27 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1515) (User: Ozoma-PC)
Description: Dieses Benutzerprofil wurde gesichert. Bei der nächsten Anmeldung dieses Benutzers wird automatisch versucht, dieses gesicherte Profil zu verwenden.

Error: (10/23/2014 07:07:27 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1502) (User: Ozoma-PC)
Description: Das lokal gespeicherte Profil kann nicht geladen werden. Mögliche Fehlerursachen sind nicht ausreichende Sicherheitsrechte oder ein beschädigtes lokales Profil. 

 Details - Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.

Error: (10/23/2014 07:07:27 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1508) (User: NT-AUTORITÄT)
Description: Die Registrierung konnte nicht geladen werden. Dieses Problem wird oft durch zuwenig Arbeitsspeicher oder nicht ausreichende Sicherheitsberechtigungen verursacht. 

 Details - Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.
 for C:\Users\Ozoma\ntuser.dat

Error: (10/23/2014 07:06:43 PM) (Source: vmauthd) (EventID: 1000) (User: )
Description: 2014-10-23T19:06:43.944+02:00| vthread-4| E105: Cannot find perfmon object in array returned by perfDLL, index=0

Error: (10/22/2014 06:55:20 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (10/24/2014 05:53:16 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (10/24/2014 05:52:39 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\ComboFix\catchme.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (10/24/2014 05:52:39 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\ComboFix\catchme.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (10/24/2014 05:50:04 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (10/24/2014 02:31:26 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "PC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{CB1D794D-0C4F-496F-ABB3-98004E263A31}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (10/24/2014 00:32:51 AM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (10/23/2014 07:08:44 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (10/23/2014 07:08:44 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (10/23/2014 07:07:25 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{027C0094-CB13-4C44-920B-6595D581C01B}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (10/22/2014 11:23:33 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{027C0094-CB13-4C44-920B-6595D581C01B}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.


Microsoft Office Sessions:
=========================
Error: (10/24/2014 00:33:16 AM) (Source: VSS) (EventID: 8193) (User: )
Description: ConvertStringSidToSid(S-1-5-21-3620531602-815428446-3748077359-1001.bak)0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.


Vorgang:
   OnIdentify-Ereignis
   Generatordaten werden gesammelt

Kontext:
   Ausführungskontext: Shadow Copy Optimization Writer
   Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
   Generatorname: Shadow Copy Optimization Writer
   Generatorinstanz-ID: {29017263-7c7c-4cd3-8e3f-5155339ba8fa}

Error: (10/23/2014 07:08:18 PM) (Source: ESENT) (EventID: 215) (User: )
Description: WinMail1364WindowsMail0:

Error: (10/23/2014 07:08:02 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/23/2014 07:07:39 PM) (Source: ESENT) (EventID: 215) (User: )
Description: WinMail4084WindowsMail0:

Error: (10/23/2014 07:07:27 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1511) (User: Ozoma-PC)
Description: 

Error: (10/23/2014 07:07:27 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1515) (User: Ozoma-PC)
Description: 

Error: (10/23/2014 07:07:27 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1502) (User: Ozoma-PC)
Description: Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.

Error: (10/23/2014 07:07:27 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1508) (User: NT-AUTORITÄT)
Description: Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.
C:\Users\Ozoma\ntuser.dat

Error: (10/23/2014 07:06:43 PM) (Source: vmauthd) (EventID: 1000) (User: )
Description: 2014-10-23T19:06:43.944+02:00| vthread-4| E105: Cannot find perfmon object in array returned by perfDLL, index=0

Error: (10/22/2014 06:55:20 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity Errors:
===================================
  Date: 2014-10-24 17:52:39.703
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-10-24 17:52:39.664
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-10-24 17:52:39.625
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-10-24 17:52:39.585
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-11-25 15:36:12.434
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-11-25 15:36:12.395
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-11-25 15:36:12.356
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-11-25 15:36:12.317
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-11-23 22:38:10.681
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-11-23 22:38:10.634
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i7-2600K CPU @ 3.40GHz
Percentage of memory in use: 61%
Total physical RAM: 8154.34 MB
Available physical RAM: 3160.41 MB
Total Pagefile: 16306.86 MB
Available Pagefile: 9999.8 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:160 GB) (Free:23.68 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Data) (Fixed) (Total:771.51 GB) (Free:189.54 GB) NTFS
Drive e: (LARIAN_DIV3) (CDROM) (Total:0.63 GB) (Free:0 GB) CDFS
Drive f: (Volume) (Fixed) (Total:1397.14 GB) (Free:326.31 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: F0EA4416)
Partition 1: (Active) - (Size=160 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=771.5 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1397.3 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

==================== End Of Log ============================
         

Da nach Combofix mein Skype immer etwas rumspinnt hab ich schonmal einen Pc neustart gemacht und nun ist alles wieder wie vorher. Vielen dank allerdings sollten sie noch etwas finden werde ich natürlich weiterhin auf ihren Ratschlag hören.

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Ich kann Anitmalewarebytes nicht installieren da dort dann immer eine Fehlermeldung mit vielen Sonderzeichen entsteht. Da ich nicht weiß ob ich die anderen Schritte dann direkt angehen kann habe ich bisher nichts weiteres unternommen.

Lass MBAM weg und mach den Rest