Windows 7 langsam (PC 2): FRST Log Analyse und Hilfe für Dienste Prozesse

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-10-2014
Ran by Jerekin (administrator) on HELLCAT on 29-10-2014 14:39:22
Running from C:\Users\Jerekin\Desktop
Loaded Profile: Jerekin (Available profiles: Jerekin)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Ellora Assets Corp.) C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(SeriousBit) C:\Program Files\NetBalancer\SeriousBit.NetBalancer.Service.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApntEx.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13671640 2000-01-01] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1385840 2000-01-01] (Realtek Semiconductor)
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint\Apoint.exe [226672 2011-03-23] (Alps Electric Co., Ltd.)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1385840 2000-01-01] (Realtek Semiconductor)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [11877656 2014-09-16] (Logitech Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-08-02] (AVAST Software)
HKU\S-1-5-21-3141859463-133168769-2000985078-1000\...\Policies\Explorer: [] 1
HKU\S-1-5-21-3141859463-133168769-2000985078-1000\...\MountPoints2: {81f3d593-0f90-11e2-be16-c0cb38d969ee} - E:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3141859463-133168769-2000985078-1000\...\MountPoints2: {81f3d5a8-0f90-11e2-be16-c0cb38d969ee} - F:\.\Autorun.exe AUTORUN=1
AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~2.DLL => C:\PROGRA~2\SupTab\SEARCH~2.DLL File Not Found
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://de.yhs4.search.yahoo.com/yhs/search?type=prc265&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x4619D3B72E73CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://de.yahoo.com?fr=hp-avast&type=prc265
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1403653911&from=wld&uid=SAMSUNGXHM500JI_S29MJ9BZ905089&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.sweet-page.com/?type=hp&ts=1403653911&from=wld&uid=SAMSUNGXHM500JI_S29MJ9BZ905089
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.sweet-page.com/?type=hp&ts=1403653911&from=wld&uid=SAMSUNGXHM500JI_S29MJ9BZ905089
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1403653911&from=wld&uid=SAMSUNGXHM500JI_S29MJ9BZ905089&q={searchTerms}
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1403653911&from=wld&uid=SAMSUNGXHM500JI_S29MJ9BZ905089&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1403653911&from=wld&uid=SAMSUNGXHM500JI_S29MJ9BZ905089&q={searchTerms}
SearchScopes: HKLM-x32 - {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?type=prc265&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKCU - {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?type=prc265&hspart=avast&hsimp=yhs-001&p={searchTerms}
BHO: No Name -> {21EAF666-26B3-4a3c-ABD0-CA2F5A326744} ->  No File
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Jerekin\AppData\Roaming\Mozilla\Firefox\Profiles\w2kaq1k7.default
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchUrl: hxxp://de.yhs4.search.yahoo.com/yhs/search
FF SearchEngineOrder.1: Yahoo! (Avast)
FF Homepage: chrome://speeddial/content/speeddial.xul
FF Keyword.URL: hxxp://de.yhs4.search.yahoo.com/yhs/search
FF NetworkProxy: "http", "176.35.77.154"
FF NetworkProxy: "http_port", 3128
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @protectdisc.com/NPPDLicenseHelper -> C:\Program Files (x86)\ProtectDisc\License Helper\NPPDLicenseHelper.dll ()
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF SearchPlugin: C:\Users\Jerekin\AppData\Roaming\Mozilla\Firefox\Profiles\w2kaq1k7.default\searchplugins\yahoo-avast.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: 20-20 3D Viewer - IKEA - C:\Users\Jerekin\AppData\Roaming\Mozilla\Firefox\Profiles\w2kaq1k7.default\Extensions\2020Player_IKEA@2020Technologies.com [2014-09-21]
FF Extension: WOT - C:\Users\Jerekin\AppData\Roaming\Mozilla\Firefox\Profiles\w2kaq1k7.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-03-30]
FF Extension: Classic Theme Restorer - C:\Users\Jerekin\AppData\Roaming\Mozilla\Firefox\Profiles\w2kaq1k7.default\Extensions\ClassicThemeRestorer@ArisT2Noia4dev.xpi [2014-05-09]
FF Extension: ProxTube - C:\Users\Jerekin\AppData\Roaming\Mozilla\Firefox\Profiles\w2kaq1k7.default\Extensions\{2541D29A-DB9E-4c1e-949A-31EFB4AEF4E7}.xpi [2014-08-23]
FF Extension: {549234a5-3768-49ba-bcf1-5aa993156cbe} - C:\Users\Jerekin\AppData\Roaming\Mozilla\Firefox\Profiles\w2kaq1k7.default\Extensions\{549234a5-3768-49ba-bcf1-5aa993156cbe}.xpi [2014-06-02]
FF Extension: Speed Dial - C:\Users\Jerekin\AppData\Roaming\Mozilla\Firefox\Profiles\w2kaq1k7.default\Extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi [2014-03-30]
FF Extension: Adblock Plus - C:\Users\Jerekin\AppData\Roaming\Mozilla\Firefox\Profiles\w2kaq1k7.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-03-30]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2014-09-25]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-09-25]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-09-25]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-08-05]
FF Extension: No Name - wrc@avast.com [Not Found]

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-08]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-08] (AVAST Software)
R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [64624 2014-05-15] (CyberGhost S.R.L)
R2 FreemakeVideoCapture; C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [9216 2014-10-22] (Ellora Assets Corp.) [File not signed]
R2 NetBalancerService; C:\Program Files\NetBalancer\SeriousBit.NetBalancer.Service.exe [129256 2014-09-25] (SeriousBit)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-08] ()
R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [22600 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-08] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-07-08] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-08] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-07-08] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-07-08] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-08] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-08] ()
S3 hwdatacard; C:\Windows\System32\DRIVERS\ewusbmdm.sys [121600 2012-10-06] (Huawei Technologies Co., Ltd.) [File not signed]
R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
R1 nbdrv; C:\Windows\System32\DRIVERS\nbdrv.sys [41392 2013-11-25] (SeriousBit)
R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc.)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-04-03] (Anchorfree Inc.)
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S3 WinRing0_1_2_0; \??\C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-29 14:39 - 2014-10-29 14:39 - 00013970 _____ () C:\Users\Jerekin\Desktop\FRST.txt
2014-10-29 14:39 - 2014-10-29 14:39 - 00000000 ____D () C:\FRST
2014-10-29 14:26 - 2014-10-29 14:26 - 02113536 _____ (Farbar) C:\Users\Jerekin\Desktop\FRST64.exe
2014-10-29 11:08 - 2014-10-29 11:08 - 00000258 _____ () C:\Windows\Tasks\Process Lasso Core Engine Only.job
2014-10-29 11:08 - 2014-10-29 11:08 - 00000252 _____ () C:\Windows\Tasks\Process Lasso Management Console (GUI).job
2014-10-29 10:58 - 2014-10-29 10:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-10-29 10:58 - 2014-10-29 10:58 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-10-29 10:58 - 2014-10-29 10:58 - 00000000 ____D () C:\ProgramData\Skype
2014-10-28 19:31 - 2014-10-28 19:31 - 00007625 _____ () C:\Users\Jerekin\AppData\Local\Resmon.ResmonCfg
2014-10-25 10:45 - 2014-10-25 10:46 - 00000000 ____D () C:\Users\Jerekin\Documents\Freemake
2014-10-25 10:45 - 2014-10-25 10:46 - 00000000 ____D () C:\ProgramData\Freemake
2014-10-25 10:45 - 2014-10-25 10:45 - 00000000 ____D () C:\Users\Jerekin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2014-10-25 10:45 - 2014-10-25 10:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake
2014-10-25 10:45 - 2014-10-25 10:45 - 00000000 ____D () C:\Program Files (x86)\Freemake
2014-10-21 11:16 - 2014-10-21 11:16 - 00274016 _____ () C:\Windows\Minidump\102114-28626-01.dmp
2014-10-21 08:44 - 2014-10-21 08:44 - 00274016 _____ () C:\Windows\Minidump\102114-25568-01.dmp
2014-10-21 08:42 - 2014-10-21 11:16 - 314980578 _____ () C:\Windows\MEMORY.DMP
2014-10-21 08:42 - 2014-10-21 08:42 - 00273960 _____ () C:\Windows\Minidump\102114-23680-01.dmp
2014-10-20 11:49 - 2014-10-20 11:49 - 00659456 _____ (Speed Guide Inc.) C:\Users\Jerekin\Desktop\TCPOptimizer.exe
2014-10-20 10:40 - 2014-10-20 10:40 - 00000000 ____D () C:\ProgramData\LogiShrd
2014-10-20 10:39 - 2014-10-22 15:28 - 00001164 _____ () C:\Windows\LkmdfCoInst.log
2014-10-20 10:39 - 2014-10-20 10:39 - 00000000 ____D () C:\ProgramData\Apple
2014-10-20 10:39 - 2014-10-20 10:39 - 00000000 ____D () C:\Program Files\Bonjour
2014-10-20 10:39 - 2014-10-20 10:39 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-10-20 10:38 - 2014-10-20 10:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2014-10-20 10:38 - 2014-10-20 10:39 - 00000000 ____D () C:\Program Files\Logitech Gaming Software
2014-10-18 17:27 - 2014-10-18 17:27 - 00000000 ____D () C:\Users\Jerekin\Documents\Bluetooth-Exchange-Ordner
2014-10-18 17:27 - 2014-10-18 17:27 - 00000000 ____D () C:\Users\Jerekin\AppData\Local\Broadcom
2014-10-18 17:23 - 2014-10-18 17:23 - 00000000 ____D () C:\Program Files\Broadcom
2014-10-18 17:20 - 2011-05-11 15:17 - 00436776 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwampfl.sys
2014-10-18 17:20 - 2011-05-11 15:17 - 00163880 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwavdt.sys
2014-10-18 17:20 - 2011-05-11 15:17 - 00150568 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwaudio.sys
2014-10-18 17:20 - 2011-05-11 15:17 - 00022056 _____ (Broadcom Corporation.) C:\Windows\system32\btwcoins.dll
2014-10-18 17:20 - 2011-05-11 15:17 - 00021544 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwrchid.sys
2014-10-18 17:20 - 2011-05-11 15:15 - 00039976 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwl2cap.sys
2014-10-18 17:19 - 2014-10-18 17:19 - 00000000 ____D () C:\Program Files\WIDCOMM
2014-10-18 17:12 - 2014-10-18 17:12 - 00000000 ____D () C:\Intel
2014-10-18 17:11 - 2014-10-18 17:11 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2014-10-18 17:10 - 2000-01-01 01:00 - 60955136 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2014-10-18 17:10 - 2000-01-01 01:00 - 28343384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 14863448 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 12894808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 06218072 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 05804772 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-10-18 17:10 - 2000-01-01 01:00 - 05751048 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 03959384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 03956056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-10-18 17:10 - 2000-01-01 01:00 - 02834648 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 02800344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 02770976 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 02162992 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 02117424 _____ () C:\Windows\system32\SStudio.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 02101848 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 02041432 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 01959128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-10-18 17:10 - 2000-01-01 01:00 - 01939800 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 01934424 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 01317976 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 01313904 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 01168472 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 01136728 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 01063512 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 01057494 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-10-18 17:10 - 2000-01-01 01:00 - 01048824 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 01022168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00956504 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00948952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00947760 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00942384 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00906800 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00900696 _____ (Waves Audio Ltd.) C:\Windows\SysWOW64\MaxxAudioAPOShell.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00889592 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00871856 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00724728 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00663296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00662784 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00628952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00582056 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00501184 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00487360 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00415680 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00315736 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00291488 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00261464 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00246008 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00162224 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00109848 _____ () C:\Windows\system32\AcpiServiceVnA64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00033592 _____ () C:\Windows\system32\audioLibVc.dll
2014-10-18 17:10 - 2000-01-01 01:00 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2014-10-18 16:55 - 2000-01-01 01:00 - 07163744 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64H.dll
2014-10-18 16:55 - 2000-01-01 01:00 - 03746408 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkHDM64.dll
2014-10-18 16:55 - 2000-01-01 01:00 - 02526824 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RHDMEx64.dll
2014-10-18 16:55 - 2000-01-01 01:00 - 00433504 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64H.dll
2014-10-18 16:55 - 2000-01-01 01:00 - 00372056 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64H.dll
2014-10-18 16:55 - 2000-01-01 01:00 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RH3DHT64.dll
2014-10-18 16:55 - 2000-01-01 01:00 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RH3DAA64.dll
2014-10-18 16:55 - 2000-01-01 01:00 - 00237968 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RtHDMIVX.sys
2014-10-18 16:55 - 2000-01-01 01:00 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64H.dll
2014-10-18 16:55 - 2000-01-01 01:00 - 00141152 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64H.dll
2014-10-18 16:55 - 2000-01-01 01:00 - 00123744 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64H.dll
2014-10-18 16:55 - 2000-01-01 01:00 - 00097624 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64H.dll
2014-10-18 16:55 - 2000-01-01 01:00 - 00092264 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RHCoInst64.dll
2014-10-18 16:55 - 2000-01-01 01:00 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64H.dll
2014-10-18 16:55 - 2000-01-01 01:00 - 00074592 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64H.dll
2014-10-18 16:54 - 2014-10-18 17:18 - 00000000 _____ () C:\Windows\Model.log
2014-10-18 16:54 - 2014-10-18 17:14 - 00004954 _____ () C:\Windows\DPINST.LOG
2014-10-18 16:53 - 2014-10-18 16:53 - 00009016 _____ () C:\Windows\ykinstutil.log
2014-10-18 16:53 - 2014-10-18 16:53 - 00000363 ____R () C:\Windows\YukonInstall.log
2014-10-18 16:53 - 2014-10-18 16:53 - 00000000 ____D () C:\Program Files (x86)\Marvell
2014-10-18 16:25 - 2014-10-18 16:26 - 00000000 ____D () C:\Program Files (x86)\MosaicCreator
2014-10-18 16:25 - 2014-10-18 16:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mosaic Creator
2014-10-18 16:24 - 2014-10-18 16:24 - 00000000 ____D () C:\ProgramData\Mozilla
2014-10-18 16:04 - 2014-10-18 16:04 - 00001116 _____ () C:\Users\Public\Desktop\OpenOffice 4.1.1.lnk
2014-10-18 16:04 - 2014-10-18 16:04 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1
2014-10-18 16:03 - 2014-10-18 16:03 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-10-18 15:29 - 2014-10-18 15:29 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-10-18 15:29 - 2014-10-18 15:29 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-10-18 15:29 - 2014-10-18 15:29 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-10-18 15:29 - 2014-10-18 15:29 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-10-18 15:29 - 2014-10-18 15:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-10-18 15:29 - 2014-10-18 15:29 - 00000000 ____D () C:\Program Files (x86)\Java
2014-10-18 15:26 - 2014-10-18 16:34 - 00002543 _____ () C:\Windows\SecuniaPackage.log
2014-10-18 15:16 - 2014-10-18 15:16 - 00000000 ____D () C:\Users\Jerekin\AppData\Local\Secunia PSI
2014-10-18 15:16 - 2014-10-18 15:16 - 00000000 ____D () C:\Program Files (x86)\Secunia
2014-10-18 14:53 - 2014-10-18 14:53 - 00000000 _____ () C:\Windows\ativpsrm.bin
2014-10-18 14:50 - 2014-10-18 14:50 - 00000000 ____D () C:\ProgramData\AMD
2014-10-18 14:50 - 2014-10-18 14:50 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2014-10-18 14:48 - 2014-10-18 14:48 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2014-10-18 14:37 - 2014-10-18 15:30 - 00000000 ____D () C:\Program Files (x86)\NirSoft
2014-10-18 14:20 - 2014-10-18 14:20 - 00002467 _____ () C:\Users\Public\Desktop\SlimDrivers.lnk
2014-10-18 14:20 - 2014-10-18 14:20 - 00000000 ____D () C:\Users\Public\Documents\Downloaded Installers
2014-10-18 14:20 - 2014-10-18 14:20 - 00000000 ____D () C:\Users\Jerekin\AppData\Local\SlimWare Utilities Inc
2014-10-18 14:05 - 2014-10-18 14:05 - 00000000 ____D () C:\Program Files (x86)\RegCleaner
2014-10-18 13:51 - 2014-10-25 12:49 - 00004930 _____ () C:\Windows\PFRO.log
2014-10-18 13:46 - 2014-10-18 13:46 - 00000000 ____D () C:\Users\Jerekin\AppData\Local\StormFall
2014-10-18 13:41 - 2014-10-18 13:41 - 00000000 ____D () C:\Program Files (x86)\Ashampoo
2014-10-18 13:15 - 2014-10-18 16:28 - 00310240 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-18 13:11 - 2014-10-18 13:11 - 00055860 _____ () C:\Windows\SysWOW64\CCCInstall_201410181411477912.log
2014-10-18 09:51 - 2014-10-18 16:06 - 00068656 _____ () C:\Users\Jerekin\AppData\Local\GDIPFONTCACHEV1.DAT
2014-10-18 09:34 - 2014-10-29 13:07 - 00012536 _____ () C:\Windows\setupact.log
2014-10-18 09:34 - 2014-10-18 09:34 - 00000000 _____ () C:\Windows\setuperr.log
2014-10-17 06:57 - 2014-09-29 01:58 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-17 06:57 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-10-17 06:57 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-10-17 06:57 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-10-17 06:57 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-10-17 06:57 - 2014-07-09 03:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-10-17 06:57 - 2014-07-09 02:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2014-10-17 06:57 - 2014-07-09 02:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2014-10-17 06:57 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2014-10-17 06:57 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2014-10-17 06:57 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2014-10-17 06:57 - 2014-07-08 23:38 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-10-17 06:57 - 2014-07-08 23:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls
2014-10-17 06:57 - 2014-06-18 23:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-17 06:57 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2014-10-17 06:57 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2014-10-17 06:57 - 2014-06-18 23:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-17 06:57 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2014-10-17 06:57 - 2014-06-18 23:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-17 06:56 - 2014-10-07 03:54 - 00378552 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-17 06:56 - 2014-10-07 03:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-10-17 06:56 - 2014-09-25 23:50 - 13619200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-17 06:56 - 2014-09-25 23:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-10-17 06:56 - 2014-09-25 23:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-10-17 06:56 - 2014-09-25 23:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-10-17 06:56 - 2014-09-25 23:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-10-17 06:56 - 2014-09-25 23:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-10-17 06:56 - 2014-09-25 23:31 - 02108416 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-17 06:56 - 2014-09-19 03:25 - 23631360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-17 06:56 - 2014-09-19 02:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-17 06:56 - 2014-09-19 02:55 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-10-17 06:56 - 2014-09-19 02:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-10-17 06:56 - 2014-09-19 02:41 - 02796032 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-17 06:56 - 2014-09-19 02:40 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-17 06:56 - 2014-09-19 02:40 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-17 06:56 - 2014-09-19 02:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-10-17 06:56 - 2014-09-19 02:38 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-10-17 06:56 - 2014-09-19 02:36 - 05829632 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-17 06:56 - 2014-09-19 02:31 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-17 06:56 - 2014-09-19 02:30 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-17 06:56 - 2014-09-19 02:27 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-10-17 06:56 - 2014-09-19 02:26 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-17 06:56 - 2014-09-19 02:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-10-17 06:56 - 2014-09-19 02:25 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-10-17 06:56 - 2014-09-19 02:25 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-10-17 06:56 - 2014-09-19 02:18 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-17 06:56 - 2014-09-19 02:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-10-17 06:56 - 2014-09-19 02:14 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-17 06:56 - 2014-09-19 02:06 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-17 06:56 - 2014-09-19 02:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-10-17 06:56 - 2014-09-19 02:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-17 06:56 - 2014-09-19 02:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-10-17 06:56 - 2014-09-19 02:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-10-17 06:56 - 2014-09-19 02:00 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-17 06:56 - 2014-09-19 01:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-10-17 06:56 - 2014-09-19 01:58 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-17 06:56 - 2014-09-19 01:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-10-17 06:56 - 2014-09-19 01:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-10-17 06:56 - 2014-09-19 01:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-10-17 06:56 - 2014-09-19 01:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-10-17 06:56 - 2014-09-19 01:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-10-17 06:56 - 2014-09-19 01:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-10-17 06:56 - 2014-09-19 01:42 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-17 06:56 - 2014-09-19 01:42 - 00710656 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-17 06:56 - 2014-09-19 01:40 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-10-17 06:56 - 2014-09-19 01:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-10-17 06:56 - 2014-09-19 01:33 - 02309632 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-17 06:56 - 2014-09-19 01:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-10-17 06:56 - 2014-09-19 01:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-10-17 06:56 - 2014-09-19 01:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-10-17 06:56 - 2014-09-19 01:14 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-17 06:56 - 2014-09-19 00:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-10-17 06:56 - 2014-09-19 00:59 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-10-17 06:56 - 2014-09-19 00:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-10-17 06:56 - 2014-09-19 00:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-10-17 06:53 - 2014-09-18 03:00 - 03241472 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-17 06:53 - 2014-09-18 02:32 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-10-17 06:53 - 2014-09-04 06:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-17 06:53 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2014-10-17 06:53 - 2014-07-17 03:07 - 03722240 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-17 06:53 - 2014-07-17 03:07 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-10-17 06:53 - 2014-07-17 02:39 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-10-17 06:52 - 2014-09-13 02:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-17 06:52 - 2014-09-13 02:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-10-17 06:52 - 2014-07-17 03:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-17 06:52 - 2014-07-17 03:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-17 06:52 - 2014-07-17 03:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-17 06:52 - 2014-07-17 03:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-17 06:52 - 2014-07-17 03:07 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-10-17 06:52 - 2014-07-17 03:07 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-10-17 06:52 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2014-10-17 06:52 - 2014-07-17 02:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-10-17 06:52 - 2014-07-17 02:39 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2014-10-17 06:52 - 2014-07-17 02:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-10-17 06:52 - 2014-07-17 02:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-10-17 06:52 - 2014-07-17 02:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-17 06:52 - 2014-07-17 02:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-16 11:28 - 2014-10-16 11:28 - 00000000 ____D () C:\Program Files\Apoint
2014-10-16 11:28 - 2011-03-23 13:13 - 00316024 _____ (Alps Electric Co., Ltd.) C:\Windows\system32\Drivers\Apfiltr.sys
2014-10-16 11:28 - 2011-03-23 13:13 - 00107376 _____ (Alps Electric Co., Ltd.) C:\Windows\system32\Vxdif.dll
2014-10-16 10:05 - 2014-10-18 17:18 - 00000021 _____ () C:\Windows\Model.txt
2014-10-16 10:05 - 2014-10-16 10:05 - 00003146 _____ () C:\Windows\System32\Tasks\{2EC83A6C-8941-4094-BB5D-F6A0DFDF4E24}
2014-10-14 23:19 - 2014-10-14 23:19 - 00000000 ____D () C:\Users\Public\Foxit Software
2014-10-14 23:18 - 2014-10-14 23:18 - 00001351 _____ () C:\Users\Public\Desktop\Foxit Reader.lnk
2014-10-14 23:18 - 2014-10-14 23:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2014-10-13 23:12 - 2014-10-13 23:12 - 00000000 ____D () C:\ProgramData\SeriousBit
2014-10-13 23:11 - 2014-10-13 23:12 - 00000000 ____D () C:\Program Files\NetBalancer
2014-10-13 23:11 - 2014-10-13 23:11 - 00000888 _____ () C:\Users\Public\Desktop\NetBalancer Tray.lnk
2014-10-13 23:11 - 2014-10-13 23:11 - 00000878 _____ () C:\Users\Public\Desktop\NetBalancer.lnk
2014-10-13 23:11 - 2014-10-13 23:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NetBalancer
2014-10-13 23:11 - 2013-11-25 09:28 - 00041392 _____ (SeriousBit) C:\Windows\system32\Drivers\nbdrv.sys
2014-10-13 23:09 - 2014-10-13 23:11 - 00000000 ____D () C:\Users\Jerekin\AppData\Roaming\Opera Software
2014-10-13 23:09 - 2014-10-13 23:11 - 00000000 ____D () C:\Users\Jerekin\AppData\Local\Opera Software
2014-10-13 23:08 - 2014-10-13 23:08 - 00000000 ____D () C:\Users\Jerekin\AppData\Local\WorldofTanks
2014-10-13 22:59 - 2014-10-13 22:59 - 00000976 _____ () C:\Users\Public\Desktop\Microsoft Network Monitor 3.4.lnk
2014-10-13 22:59 - 2014-10-13 22:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Network Monitor 3.4
2014-10-13 22:59 - 2014-10-13 22:59 - 00000000 ____D () C:\Program Files\Microsoft Network Monitor 3
2014-10-13 22:41 - 2014-10-13 22:41 - 00000000 ____D () C:\Users\Jerekin\Documents\Network Monitor 3
2014-10-13 09:09 - 2014-10-13 09:09 - 00056720 _____ () C:\Windows\SysWOW64\CCCInstall_201410131009401315.log
2014-10-13 09:07 - 2014-10-13 09:07 - 00017108 _____ () C:\Windows\SysWOW64\CCCInstall_201410131007321682.log
2014-10-13 08:36 - 2014-10-13 08:36 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Apfiltr_01009.Wdf
2014-10-12 10:34 - 2014-10-12 10:34 - 00016462 _____ () C:\Windows\SysWOW64\CCCInstall_201410121134140317.log
2014-10-11 21:04 - 2014-10-11 21:04 - 00000000 ____D () C:\Users\Jerekin\AppData\Roaming\Oracle
2014-10-11 21:03 - 2014-10-11 21:03 - 00000000 ____D () C:\ProgramData\Sun
2014-10-11 18:27 - 2014-10-11 18:27 - 00000000 ____D () C:\Users\Jerekin\AppData\Local\PackageAware
2014-10-11 14:42 - 2014-10-11 14:42 - 00003094 _____ () C:\Windows\System32\Tasks\Process Lasso Core Engine Only
2014-10-11 14:42 - 2014-10-11 14:42 - 00003088 _____ () C:\Windows\System32\Tasks\Process Lasso Management Console (GUI)
2014-10-11 14:41 - 2014-10-29 11:08 - 00000000 ____D () C:\Users\Jerekin\AppData\Roaming\ProcessLasso
2014-10-11 14:41 - 2014-10-29 11:08 - 00000000 ____D () C:\Program Files\Process Lasso
2014-10-11 14:41 - 2014-10-11 14:41 - 00000000 ____D () C:\ProgramData\ProcessLasso
2014-10-11 14:41 - 2014-10-11 14:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Process Lasso
2014-10-10 13:35 - 2014-10-10 13:35 - 00000000 ____D () C:\Users\Jerekin\AppData\Roaming\ClipboardPath
2014-10-10 11:51 - 2014-10-10 11:52 - 00000000 ____D () C:\Users\Jerekin\AppData\Local\MetaGeek,_LLC
2014-10-10 11:51 - 2014-10-10 11:51 - 00002489 _____ () C:\Users\Public\Desktop\inSSIDer Home.lnk
2014-10-10 11:51 - 2014-10-10 11:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MetaGeek
2014-10-10 11:51 - 2014-10-10 11:51 - 00000000 ____D () C:\Program Files (x86)\MetaGeek
2014-10-10 11:21 - 2014-10-10 11:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hedgewars
2014-10-10 11:20 - 2014-10-10 11:21 - 00000000 ____D () C:\Program Files (x86)\Hedgewars 0.9.20
2014-10-07 03:34 - 2014-10-07 03:34 - 00000000 ____D () C:\ProgramData\Riot Games
2014-10-01 10:21 - 2014-10-01 10:21 - 00001319 _____ () C:\Users\Jerekin\Desktop\Stronghold Crusader.lnk
2014-10-01 08:23 - 2014-09-25 03:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-10-01 08:23 - 2014-09-25 02:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-29 14:00 - 2012-08-05 13:46 - 01334974 _____ () C:\Windows\WindowsUpdate.log
2014-10-29 13:16 - 2009-07-14 05:45 - 00014928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-29 13:16 - 2009-07-14 05:45 - 00014928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-29 12:15 - 2012-08-05 20:01 - 00000000 ____D () C:\Users\Jerekin\AppData\Roaming\Skype
2014-10-29 10:58 - 2014-05-10 16:15 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-10-29 10:48 - 2009-07-14 18:58 - 00699666 _____ () C:\Windows\system32\perfh007.dat
2014-10-29 10:48 - 2009-07-14 18:58 - 00149774 _____ () C:\Windows\system32\perfc007.dat
2014-10-29 10:48 - 2009-07-14 06:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-28 15:58 - 2013-03-14 22:09 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-10-27 21:05 - 2012-08-07 00:08 - 00000000 ____D () C:\Users\Jerekin\AppData\Roaming\TS3Client
2014-10-27 11:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-10-25 10:55 - 2013-06-19 00:47 - 00000000 ____D () C:\Users\Jerekin\AppData\Roaming\vlc
2014-10-22 15:28 - 2012-10-21 13:14 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys
2014-10-21 11:16 - 2012-08-05 15:44 - 00000000 ____D () C:\Windows\Minidump
2014-10-20 16:36 - 2014-01-04 11:52 - 00000000 ___RD () C:\Users\Jerekin\Documents\Zwischenlager
2014-10-20 10:38 - 2014-01-01 17:52 - 00000000 ____D () C:\ProgramData\Package Cache
2014-10-20 10:36 - 2013-06-14 13:49 - 00000000 ____D () C:\Users\Jerekin\AppData\Roaming\Logishrd
2014-10-18 17:27 - 2009-07-14 04:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-10-18 17:11 - 2012-08-05 15:31 - 00000000 ___HD () C:\Program Files (x86)\Temp
2014-10-18 17:11 - 2012-08-05 15:31 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-10-18 16:48 - 2014-03-30 12:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-10-18 16:34 - 2014-09-25 13:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-10-18 16:34 - 2014-03-30 12:24 - 00001087 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-10-18 16:34 - 2014-03-30 12:24 - 00001075 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-10-18 16:03 - 2012-09-07 21:18 - 00000000 ____D () C:\Program Files (x86)\OpenOffice.org 3
2014-10-18 15:27 - 2012-08-05 18:03 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-10-18 15:27 - 2012-08-05 18:03 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-10-18 15:27 - 2012-08-05 18:03 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-10-18 15:18 - 2014-06-21 21:47 - 00000000 __SHD () C:\Windows\SysWOW64\AI_RecycleBin
2014-10-18 13:15 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-18 08:31 - 2014-06-25 00:08 - 00000000 ____D () C:\Users\Jerekin\AppData\Roaming\uTorrent
2014-10-18 08:31 - 2012-10-08 09:28 - 00000000 ____D () C:\Users\Jerekin\AppData\Roaming\Notepad++
2014-10-18 04:11 - 2012-08-05 18:36 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-10-17 08:16 - 2013-07-27 22:05 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-17 08:13 - 2012-08-05 19:30 - 103265616 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-10-13 23:11 - 2013-05-21 16:04 - 00001421 _____ () C:\Users\Jerekin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-10-13 21:42 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-10-13 10:25 - 2012-08-05 15:14 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-10-13 08:35 - 2010-09-15 13:44 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoinstaller01009.dll
2014-10-08 11:25 - 2014-04-17 15:58 - 00000000 ____D () C:\Users\Jerekin\AppData\Local\Samsung
2014-10-08 11:25 - 2012-11-14 20:15 - 00000000 ____D () C:\Program Files (x86)\Samsung
2014-10-08 11:23 - 2012-08-05 15:31 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-10-07 03:20 - 2014-07-10 21:45 - 00000000 ____D () C:\Users\Jerekin\AppData\Local\Deployment
2014-10-02 14:53 - 2012-08-05 18:07 - 00278152 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-10-01 00:07 - 2012-08-06 04:05 - 00000000 ____D () C:\Users\Jerekin\Documents\My Games

Some content of TEMP:
====================
C:\Users\Jerekin\AppData\Local\Temp\AMDCleanupUtility.exe
C:\Users\Jerekin\AppData\Local\Temp\Cleanup.dll
C:\Users\Jerekin\AppData\Local\Temp\FreemakeVideoDownloaderFull.exe
C:\Users\Jerekin\AppData\Local\Temp\FreemakeVideoDownloader_3.7.0.17.exe
C:\Users\Jerekin\AppData\Local\Temp\GLF4D5.EXE
C:\Users\Jerekin\AppData\Local\Temp\GLF87E.EXE
C:\Users\Jerekin\AppData\Local\Temp\GLFC47B.EXE
C:\Users\Jerekin\AppData\Local\Temp\GLFC49B.EXE
C:\Users\Jerekin\AppData\Local\Temp\GLFC8C1.EXE
C:\Users\Jerekin\AppData\Local\Temp\GLFDAAA.EXE
C:\Users\Jerekin\AppData\Local\Temp\GLFDF4C.EXE
C:\Users\Jerekin\AppData\Local\Temp\ICReinstall_ShouldIRemoveIt_Setup_CB-DL-Manager.exe
C:\Users\Jerekin\AppData\Local\Temp\msvcm80.dll
C:\Users\Jerekin\AppData\Local\Temp\msvcp110.dll
C:\Users\Jerekin\AppData\Local\Temp\msvcp80.dll
C:\Users\Jerekin\AppData\Local\Temp\msvcr110.dll
C:\Users\Jerekin\AppData\Local\Temp\msvcr80.dll
C:\Users\Jerekin\AppData\Local\Temp\nsyFD56.exe
C:\Users\Jerekin\AppData\Local\Temp\pc-decrapifier.exe
C:\Users\Jerekin\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-10-16 09:50

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 29-10-2014
Ran by Jerekin at 2014-10-29 14:40:30
Running from C:\Users\Jerekin\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKCU\...\uTorrent) (Version: 3.4.2.31515 - BitTorrent Inc.)
7-Zip 9.22 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0922-000001000000}) (Version: 9.22.00.0 - Igor Pavlov)
Adobe Flash Player 15 ActiveX (HKLM-x32\...\{BC8AC77D-6A6F-491F-BEED-2958F09C6CAE}) (Version: 15.0.0.189 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\{AF82C1A9-56DC-4CCD-A36C-CAE56D541DFA}) (Version: 15.0.0.189 - Adobe Systems Incorporated)
Age of Empires II: HD Edition (HKLM-x32\...\Steam App 221380) (Version:  - Hidden Path Entertainment, Ensemble Studios)
Alps Pointing-device for VAIO (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version:  - ALPS ELECTRIC CO., LTD.)
AMD Catalyst Install Manager (HKLM\...\{C2956908-53A3-88FC-B795-B16508296FC4}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
AniFX 1.0 (HKLM-x32\...\AniFX_is1) (Version:  - )
Ant Renamer (HKLM-x32\...\Ant Renamer 2_is1) (Version: 2.10.0 - Ant Software)
avast! Free Antivirus (HKLM-x32\...\avast) (Version: 9.0.2021 - AVAST Software)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Broadcom InConcert Maestro (HKLM\...\{57DD35E9-D9BB-4089-BB05-EF933C586CB3}) (Version: 1.0.1.2100 - Broadcom Corporation)
calibre (HKLM-x32\...\{581AF03B-4008-41AE-846C-21CACF9B48A9}) (Version: 0.9.29 - Kovid Goyal)
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version:  - )
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version:  - ‪Canon Inc.‬)
Canon MP230 series Benutzerregistrierung (HKLM-x32\...\Canon MP230 series Benutzerregistrierung) (Version:  - Canon Inc.‎)
Canon MP230 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP230_series) (Version: 1.00 - Canon Inc.)
Canon MP230 series On-screen Manual (HKLM-x32\...\Canon MP230 series On-screen Manual) (Version: 7.5.0 - Canon Inc.)
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.0.0 - Canon Inc.)
Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.0.0 - Canon Inc.)
CastleStorm (HKLM-x32\...\Steam App 241410) (Version:  - Zen Studios)
CCleaner (HKLM\...\CCleaner) (Version: 3.14 - Piriform)
ClipboardPath (Aktueller Benutzer) (HKCU\...\SB_ClipboardPath) (Version: 1.2.4 - Stefan Bertels)
CyberGhost 5 (HKLM\...\CyberGhost 5_is1) (Version:  - CyberGhost S.R.L.)
Deadlight (HKLM-x32\...\Steam App 211400) (Version:  - Tequila Works, S.L.)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 7.0.3.916 - Foxit Software Inc.)
Free Audio Converter version 5.0.16.819 (HKLM-x32\...\Free Audio Converter_is1) (Version: 5.0.16.819 - DVDVideoSoft Ltd.)
Free Video Flip and Rotate version 2.1.9.822 (HKLM-x32\...\Free Video Flip and Rotate_is1) (Version: 2.1.9.822 - DVDVideoSoft Ltd.)
Freemake Video Downloader (HKLM-x32\...\Freemake Video Downloader_is1) (Version: 3.7.1 - Ellora Assets Corporation)
GIMP 2.8.2 (HKLM\...\GIMP-2_is1) (Version: 2.8.2 - The GIMP Team)
Hedgewars (HKLM-x32\...\hedgewars) (Version: 0.9.20 - Hedgewars Project)
Image to PDF Converter version 4.0 (HKLM-x32\...\{34F5BD13-DBBD-4BD3-8C9F-5F11D5567324}_is1) (Version: 4.0 - Winsome Technologies)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Inkscape 0.48.5 (HKLM-x32\...\Inkscape) (Version: 0.48.5 - )
inSSIDer Home (HKLM-x32\...\{9E54E4AE-B67A-4925-8E92-0E1F9817FD73}) (Version: 3.1.2.1 - MetaGeek, LLC)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Turbo Boost Technology Driver (HKLM-x32\...\{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}) (Version: 01.02.00.1002 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.37 - Irfan Skiljan)
Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
JPEGmini (HKCU\...\5d2010e174743543) (Version: 1.8.23.0 - ICVT Ltd)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version:  - Valve)
Logitech Gaming Software 8.56 (HKLM\...\Logitech Gaming Software) (Version: 8.56.109 - Logitech Inc.)
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Mark of the Ninja (HKLM-x32\...\Steam App 214560) (Version:  - Klei Entertainment)
Marvell Miniport Driver (HKLM-x32\...\Marvell Miniport Driver) (Version: 11.45.4.3 - Marvell)
Medal of Honor(TM) Multiplayer (HKLM-x32\...\Steam App 47830) (Version:  - Electronic Arts)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Age of Empires II (HKLM-x32\...\Age of Empires 2.0) (Version:  - )
Microsoft Network Monitor 3.4 (HKLM\...\{8C5B5A11-CBF8-451B-B201-77FAB0D0B77D}) (Version: 3.4.2350.0 - Microsoft Corporation)
Microsoft Network Monitor: NetworkMonitor Parsers 3.4 (HKLM\...\{963E5FEB-1367-46B9-851D-A957F1A3747F}) (Version: 3.4.2350.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)
MinecraftAlpha (HKLM-x32\...\MinecraftAlpha) (Version:  - )
Mosaic Creator 3.1 (HKLM-x32\...\Mosaic Creator_is1) (Version:  - )
Mozilla Firefox 33.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.0 (x86 de)) (Version: 33.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.0 - Mozilla)
Mp3tag v2.59a (HKLM-x32\...\Mp3tag) (Version: v2.59a - Florian Heidenreich)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
NetBalancer (HKLM\...\NetBalancer_is1) (Version:  - SeriousBit)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.1.8 - )
NVIDIA PhysX (HKLM-x32\...\{1C4551A6-4743-4093-91E4-1477CD655043}) (Version: 9.09.0203 - NVIDIA Corporation)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Path of Exile (HKLM-x32\...\Steam App 238960) (Version:  - Grinding Gear Games)
PDF Split And Merge Basic (HKLM\...\{C91B24F6-1629-11E2-B696-21676188709B}) (Version: 2.2.2 - Andrea Vacondio)
PDFill PDF Editor with FREE Writer and FREE Tools (HKLM\...\{D1399216-81B2-457C-A0F7-73B9A2EF6902}) (Version: 11.0 - PlotSoft LLC)
Process Lasso (HKLM-x32\...\ProcessLasso) (Version: 7.0.0.0 - Bitsum)
Protect Disc License Helper 1.0.118 (HKLM-x32\...\Protect Disc License Helper) (Version: 1.0.118 - Protect Disc)
ProtectDisc Driver, Version 11 (HKLM-x32\...\ProtectDisc Driver 11) (Version: 11.0.0.11 - ProtectDisc Software GmbH)
Realtek HDMI Audio Driver for ATI (HKLM-x32\...\{5449FB4F-1802-4D5B-A6D8-087DB1142147}) (Version: 6.0.1.6650 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7240 - Realtek Semiconductor Corp.)
Scan Tailor (HKLM-x32\...\Scan Tailor) (Version:  - )
Skype™ 6.21 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.21.104 - Skype Technologies S.A.)
SlimDrivers (HKLM-x32\...\{A5457401-D56A-43F2-9524-78E54A7FC07A}) (Version: 2.2.32705 - SlimWare Utilities, Inc.)
Soldat 1.6.7 (HKLM-x32\...\Soldat_is1) (Version: 1.6.7 - Michal Marcinkowski)
Speccy (HKLM\...\Speccy) (Version: 1.26 - Piriform)
Starbound (HKLM-x32\...\Steam App 211820) (Version:  - )
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
TagScanner 5.1.649 (HKLM-x32\...\TagScanner_is1) (Version:  - Sergey Serkov)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
Torchlight II (HKLM-x32\...\Steam App 200710) (Version:  - Runic Games)
Trine 1.08 (HKLM-x32\...\Trine_is1) (Version:  - Frozenbyte, Inc.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WIDCOMM Bluetooth Software (HKLM\...\{C6C9D5F7-630C-4125-8C4E-94AF77C1896E}) (Version: 6.4.0.2100 - Broadcom Corporation)
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{3577E42B-3347-4EB8-BFDA-D36E8ED3C519}) (Version: 1.0.24.0 - Microsoft Corporation)
WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
World of Goo (HKLM-x32\...\Steam App 22000) (Version:  - 2D BOY )

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

18-10-2014 12:44:01 PC Decrapifier Restore Point
18-10-2014 12:47:26 Installed Should I Remove It
18-10-2014 13:05:27 Removed Should I Remove It
18-10-2014 13:46:31 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727
18-10-2014 13:46:58 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727
18-10-2014 13:59:54 Installed Should I Remove It
18-10-2014 14:17:27 Removed Should I Remove It
20-10-2014 09:36:44 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030
20-10-2014 09:37:33 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727
20-10-2014 09:37:47 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610
21-10-2014 07:51:03 Windows Update
28-10-2014 06:30:30 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {053A9449-DBB0-406B-A4EE-01D374B5857C} - System32\Tasks\{42AA8307-C4D6-4C5C-A8C2-CBC1B05C5404} => Firefox.exe hxxp://ui.skype.com/ui/0/6.16.0.105/de/abandoninstall?page=tsProgressBar
Task: {1471084A-1471-4796-8415-E6C21B03FCF4} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-07-08] (AVAST Software)
Task: {2578DE91-93D6-4856-AB86-81676CA23869} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
Task: {5CA8C897-BF8F-4EFD-B641-026A4D704474} - System32\Tasks\FastFix_Start => C:\Program Files (x86)\FastFix PRO\FastFixPRO.exe
Task: {618ADCB4-568D-4121-86F4-451349DA8F7A} - System32\Tasks\Razer_Game_Booster_AutoUpdate => C:\Program Files (x86)\Razer\Razer Game Booster\AutoUpdate.exe
Task: {677D67BB-8E2C-4DA0-809C-7AF06E4C09C6} - System32\Tasks\Process Lasso Management Console (GUI) => C:\Program Files\Process Lasso\processlasso.exe [2014-10-25] (Bitsum LLC)
Task: {B9A81DC7-3FC8-4A40-AE57-FE7E99110ED2} - System32\Tasks\PandaUSBVaccine => C:\Program Files (x86)\Panda USB Vaccine\RunInteractiveWin.exe
Task: {C811EE77-6276-4FED-9AC3-009E73DCB47E} - \Desk 365 RunAsStdUser No Task File <==== ATTENTION
Task: {DFDD7C05-3A8F-494D-93DE-A7458C3E92D7} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {EF319782-796B-48EB-B4B8-AC40FA1018C2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-10-18] (Adobe Systems Incorporated)
Task: {F2F902CD-DA7F-4278-967B-853F69BE4028} - System32\Tasks\Process Lasso Core Engine Only => C:\Program Files\Process Lasso\processgovernor.exe [2014-10-25] (Bitsum LLC)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Process Lasso Core Engine Only.job => C:\Program Files\Process Lasso\ProcessGovernor.exe
Task: C:\Windows\Tasks\Process Lasso Management Console (GUI).job => C:\Program Files\Process Lasso\ProcessLasso.exe

==================== Loaded Modules (whitelisted) =============

2014-09-16 22:02 - 2014-09-16 22:02 - 00866584 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2014-09-16 22:02 - 2014-09-16 22:02 - 01050904 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2014-09-16 22:02 - 2014-09-16 22:02 - 00059160 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2014-09-16 22:02 - 2014-09-16 22:02 - 00242456 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2014-10-13 23:11 - 2014-09-25 07:06 - 00114688 _____ () C:\Program Files\NetBalancer\Events.dll
2014-10-13 23:12 - 2014-10-13 23:12 - 00217832 _____ () C:\Windows\Microsoft.Net\assembly\GAC_MSIL\SeriousBit.NetBalancer.DeskBand\v4.0_1.0.0.0__ce1333cc798c13ee\SeriousBit.NetBalancer.DeskBand.dll
2014-10-13 23:11 - 2014-09-25 07:07 - 00217320 _____ () C:\Program Files\NetBalancer\PacketDotNet.dll
2014-10-13 23:11 - 2014-09-25 07:06 - 00031744 _____ () C:\Program Files\NetBalancer\BugReporting.dll
2014-07-08 11:49 - 2014-07-08 11:49 - 00301152 _____ () C:\Program Files\AVAST Software\Avast\aswProperty.dll
2014-10-29 08:33 - 2014-10-29 08:33 - 02898432 _____ () C:\Program Files\AVAST Software\Avast\defs\14102801\algo.dll
2014-10-29 13:08 - 2014-10-29 13:08 - 02898432 _____ () C:\Program Files\AVAST Software\Avast\defs\14102901\algo.dll
2014-07-08 11:49 - 2014-07-08 11:49 - 19329904 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-09-25 13:40 - 2014-10-11 13:53 - 03649648 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: btwdins => 2
MSCONFIG\Services: CGVPNCliSrvc => 3
MSCONFIG\Services: FreemakeVideoCapture => 2
MSCONFIG\Services: Hamachi2Svc => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk => C:\Windows\pss\Bluetooth.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AutoStartNPSAgent => C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe
MSCONFIG\startupreg: CanonQuickMenu => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE /logon
MSCONFIG\startupreg: CyberGhost => "C:\Program Files\CyberGhost 5\CyberGhost.EXE" /autostart
MSCONFIG\startupreg: EEventManager => "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
MSCONFIG\startupreg: EPLTarget => 
MSCONFIG\startupreg: KiesAirMessage => C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup
MSCONFIG\startupreg: KiesPreload => C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload
MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
MSCONFIG\startupreg: NetBalancer => C:\Program Files\NetBalancer\SeriousBit.NetBalancer.Tray.exe
MSCONFIG\startupreg: RazerGameBooster => C:\Program Files (x86)\Razer\Razer Game Booster\RazerGameBooster.exe -autorun
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI.ACE\Core-Static\CLIStart.exe" MSRun
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\steam.exe" -silent
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: XboxStat => "C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun

========================= Accounts: ==========================

Administrator (S-1-5-21-3141859463-133168769-2000985078-500 - Administrator - Disabled)
fbwuser (S-1-5-21-3141859463-133168769-2000985078-1005 - Limited - Enabled)
Gast (S-1-5-21-3141859463-133168769-2000985078-501 - Limited - Disabled)
Jerekin (S-1-5-21-3141859463-133168769-2000985078-1000 - Administrator - Enabled) => C:\Users\Jerekin

==================== Faulty Device Manager Devices =============

Name: FOXCONN-T77H114-BCM2070
Description: FOXCONN-T77H114-BCM2070
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Broadcom
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (10/28/2014 04:38:42 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm rads_user_kernel.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1044

Startzeit: 01cff2c5394f7263

Endzeit: 0

Anwendungspfad: C:\Program Files (x86)\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe

Berichts-ID: 7d7007f8-5eb8-11e4-8e65-544249e3a3aa

Error: (10/28/2014 01:26:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: rads_user_kernel.exe, Version: 0.0.0.0, Zeitstempel: 0x4e65c1ac
Name des fehlerhaften Moduls: rads_user_kernel.exe, Version: 0.0.0.0, Zeitstempel: 0x4e65c1ac
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000b8554
ID des fehlerhaften Prozesses: 0xfa4
Startzeit der fehlerhaften Anwendung: 0xrads_user_kernel.exe0
Pfad der fehlerhaften Anwendung: rads_user_kernel.exe1
Pfad des fehlerhaften Moduls: rads_user_kernel.exe2
Berichtskennung: rads_user_kernel.exe3

Error: (10/27/2014 05:57:23 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm rads_user_kernel.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: cac

Startzeit: 01cff2070c0c0430

Endzeit: 0

Anwendungspfad: C:\Program Files (x86)\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe

Berichts-ID: 4fbb519a-5dfa-11e4-9483-544249e3a3aa

Error: (10/27/2014 11:19:25 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm rads_user_kernel.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 11e8

Startzeit: 01cff1cf6ede634f

Endzeit: 0

Anwendungspfad: C:\Program Files (x86)\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe

Berichts-ID: b8091303-5dc2-11e4-99f3-544249e3a3aa

Error: (10/20/2014 10:36:36 AM) (Source: MsiInstaller) (EventID: 11101) (User: Hellcat)
Description: Product: Logitech Gaming Software -- Error 1101. Error reading from file: C:\Users\Jerekin\AppData\Local\Temp\Uninstall_x64.vbs.  System error 2.  Verify that the file exists and that you can access it.

Error: (10/20/2014 08:03:59 AM) (Source: MsiInstaller) (EventID: 11101) (User: Hellcat)
Description: Product: Logitech Gaming Software -- Error 1101. Error reading from file: C:\Users\Jerekin\AppData\Local\Temp\Uninstall_x64.vbs.  System error 2.  Verify that the file exists and that you can access it.

Error: (10/18/2014 10:18:45 PM) (Source: NetBalancer 8.2.3 140925.0806) (EventID: 0) (User: )
Description: System.Net.WebException: Der Remotename konnte nicht aufgelöst werden: 'netbalancer.com'
   bei System.Net.HttpWebRequest.GetResponse()
   bei fj.b()
   bei fj.a()

Error: (10/18/2014 10:18:29 PM) (Source: NetBalancer 8.2.3 140925.0806) (EventID: 0) (User: )
Description: System.Net.WebException: Der Remotename konnte nicht aufgelöst werden: 'netbalancer.com'
   bei System.Net.HttpWebRequest.GetResponse()
   bei fj.b()
   bei fj.a()

Error: (10/18/2014 04:42:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: PSIA.exe, Version: 3.0.0.9016, Zeitstempel: 0x52a1d50f
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000332cd
ID des fehlerhaften Prozesses: 0x970
Startzeit der fehlerhaften Anwendung: 0xPSIA.exe0
Pfad der fehlerhaften Anwendung: PSIA.exe1
Pfad des fehlerhaften Moduls: PSIA.exe2
Berichtskennung: PSIA.exe3

Error: (10/18/2014 03:49:13 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: PSIA.exe, Version: 3.0.0.9016, Zeitstempel: 0x52a1d50f
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000332b0
ID des fehlerhaften Prozesses: 0x82c
Startzeit der fehlerhaften Anwendung: 0xPSIA.exe0
Pfad der fehlerhaften Anwendung: PSIA.exe1
Pfad des fehlerhaften Moduls: PSIA.exe2
Berichtskennung: PSIA.exe3


System errors:
=============
Error: (10/28/2014 07:22:57 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "CyberGhost 5 Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (10/28/2014 07:22:57 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst CyberGhost 5 Client Service erreicht.

Error: (10/28/2014 04:49:22 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Intelligenter Hintergrundübertragungsdienst" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147024846.

Error: (10/28/2014 04:49:22 PM) (Source: Microsoft-Windows-Bits-Client) (EventID: 16392) (User: NT-AUTORITÄT)
Description: Fehler beim Starten des BITS-Dienstes. Fehler: 2147942450.

Error: (10/28/2014 04:49:21 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Diagnosediensthost" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (10/28/2014 04:49:21 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "WdiServiceHost" konnte sich nicht als "NT AUTHORITY\LocalService" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1352

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (10/28/2014 04:49:21 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Diagnosediensthost" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (10/28/2014 04:49:21 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "WdiServiceHost" konnte sich nicht als "NT AUTHORITY\LocalService" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1352

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (10/28/2014 04:49:21 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Diagnosediensthost" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (10/28/2014 04:49:21 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "WdiServiceHost" konnte sich nicht als "NT AUTHORITY\LocalService" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1352

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).


Microsoft Office Sessions:
=========================
Error: (10/28/2014 04:38:42 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: rads_user_kernel.exe0.0.0.0104401cff2c5394f72630C:\Program Files (x86)\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe7d7007f8-5eb8-11e4-8e65-544249e3a3aa

Error: (10/28/2014 01:26:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: rads_user_kernel.exe0.0.0.04e65c1acrads_user_kernel.exe0.0.0.04e65c1acc0000005000b8554fa401cff2aa5e34f5a1C:\Program Files (x86)\Riot Games\League of Legends\RADS\system\rads_user_kernel.exeC:\Program Files (x86)\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe9ee7af90-5e9d-11e4-8e65-544249e3a3aa

Error: (10/27/2014 05:57:23 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: rads_user_kernel.exe0.0.0.0cac01cff2070c0c04300C:\Program Files (x86)\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe4fbb519a-5dfa-11e4-9483-544249e3a3aa

Error: (10/27/2014 11:19:25 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: rads_user_kernel.exe0.0.0.011e801cff1cf6ede634f0C:\Program Files (x86)\Riot Games\League of Legends\RADS\system\rads_user_kernel.exeb8091303-5dc2-11e4-99f3-544249e3a3aa

Error: (10/20/2014 10:36:36 AM) (Source: MsiInstaller) (EventID: 11101) (User: Hellcat)
Description: Product: Logitech Gaming Software -- Error 1101. Error reading from file: C:\Users\Jerekin\AppData\Local\Temp\Uninstall_x64.vbs.  System error 2.  Verify that the file exists and that you can access it.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (10/20/2014 08:03:59 AM) (Source: MsiInstaller) (EventID: 11101) (User: Hellcat)
Description: Product: Logitech Gaming Software -- Error 1101. Error reading from file: C:\Users\Jerekin\AppData\Local\Temp\Uninstall_x64.vbs.  System error 2.  Verify that the file exists and that you can access it.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (10/18/2014 10:18:45 PM) (Source: NetBalancer 8.2.3 140925.0806) (EventID: 0) (User: )
Description: System.Net.WebException: Der Remotename konnte nicht aufgelöst werden: 'netbalancer.com'
   bei System.Net.HttpWebRequest.GetResponse()
   bei fj.b()
   bei fj.a()

Error: (10/18/2014 10:18:29 PM) (Source: NetBalancer 8.2.3 140925.0806) (EventID: 0) (User: )
Description: System.Net.WebException: Der Remotename konnte nicht aufgelöst werden: 'netbalancer.com'
   bei System.Net.HttpWebRequest.GetResponse()
   bei fj.b()
   bei fj.a()

Error: (10/18/2014 04:42:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: PSIA.exe3.0.0.901652a1d50fntdll.dll6.1.7601.18247521ea8e7c0000005000332cd97001cfeae82d607124C:\Program Files (x86)\Secunia\PSI\PSIA.exeC:\Windows\SysWOW64\ntdll.dll67b4ba7d-56dd-11e4-a18a-c0cb38d969ee

Error: (10/18/2014 03:49:13 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: PSIA.exe3.0.0.901652a1d50fntdll.dll6.1.7601.18247521ea8e7c0000005000332b082c01cfeae0906970baC:\Program Files (x86)\Secunia\PSI\PSIA.exeC:\Windows\SysWOW64\ntdll.dllec9e3a26-56d5-11e4-bd10-c0cb38d969ee


CodeIntegrity Errors:
===================================
  Date: 2013-06-06 19:34:42.175
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-06 19:34:42.082
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-06 19:33:14.031
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-06 19:33:13.931
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5 CPU M 460 @ 2.53GHz
Percentage of memory in use: 45%
Total physical RAM: 3950.1 MB
Available physical RAM: 2151.81 MB
Total Pagefile: 7898.38 MB
Available Pagefile: 5938.77 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:140.43 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 4E0AB827)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)

==================== End Of Log ============================