Notebook sehr langsam

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-12-2014
Ran by Hbib (administrator) on WOHNZIMMER-PC on 01-12-2014 14:42:22
Running from C:\Users\Pk\Pictures
Loaded Profile: Hbib (Available profiles: Hbib & issam_000 & ouali_000)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\nis.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\nis.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Users\Pk\AppData\Local\PennyBee\PennyBeeW.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe
(Skillbrains) C:\Users\Pk\AppData\Local\Skillbrains\lightshot\5.1.4.41\Lightshot.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_239.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_239.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17246_none_fa4ae8e99b1f603c\TiWorker.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2890056 2013-05-22] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13427784 2013-03-18] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2014-09-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642816 2013-06-13] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3802448 2014-09-04] (LogMeIn Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2694320 2014-10-01] (Adobe Systems Incorporated)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-04-24] ( (Atheros Communications))
HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\Run: [LightShot] => C:\Users\Pk\AppData\Local\Skillbrains\lightshot\Lightshot.exe [226560 2014-06-18] ()
HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\Run: [icq] => C:\Users\Pk\AppData\Roaming\ICQM\icq.exe [35239432 2014-11-02] (ICQ)
HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\Run: [PennyBee] => C:\Users\Pk\AppData\Local\PennyBee\PennyBeeW.exe [338432 2014-10-12] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (McAfee, Inc.)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.trovi.com/?gd=&ctid=ct3314958&octid=eb_original_ctid&isid=m76ed4c76-afdf-4830-a42e-55c9714d3458&searchsource=55&cui=&um=5&up=sp03a61366-08c2-45e6-8454-e65300ed54d6&sspv=
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKLM-x32 -> DefaultScope value is missing.
SearchScopes: HKU\S-1-5-21-1444305084-1481242938-3084423498-1001 -> {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = hxxp://nortonsafe.search.ask.com/web?q={SEARCHTERMS}&o=APN10506&l=dis&prt=NIS&chn=retail&geo=DE&ver=21&locale=de_DE&gct=kwd&qsrc=2869
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine64\21.6.0.32\coIEPlg.dll (Symantec Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\coIEPlg.dll (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.6.0.32\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\coIEPlg.dll (Symantec Corporation)
Toolbar: HKU\S-1-5-21-1444305084-1481242938-3084423498-1001 -> Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.6.0.32\coIEPlg.dll (Symantec Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Pk\AppData\Roaming\Mozilla\Firefox\Profiles\yqrfhnfq.default
FF NewTab: hxxp://www.trovi.com/?gd=&ctid=CT3314958&octid=EB_ORIGINAL_CTID&ISID=M76ED4C76-AFDF-4830-A42E-55C9714D3458&SearchSource=69&CUI=&SSPV=&Lay=1&UM=5&UP=SP03A61366-08C2-45E6-8454-E65300ED54D6
FF DefaultSearchEngine: Trovi search
FF SelectedSearchEngine: Trovi search
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_15_0_0_239.dll ()
FF Plugin: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_239.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin -> C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKU\S-1-5-21-1444305084-1481242938-3084423498-1001: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Users\Pk\AppData\Roaming\Mozilla\Firefox\Profiles\yqrfhnfq.default\searchplugins\trovi-search.xml
FF Extension: MEGA - C:\Users\Pk\AppData\Roaming\Mozilla\Firefox\Profiles\yqrfhnfq.default\Extensions\firefox@mega.co.nz.xpi [2014-09-27]
FF Extension: Adblock Plus - C:\Users\Pk\AppData\Roaming\Mozilla\Firefox\Profiles\yqrfhnfq.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-02-01]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn [2014-12-01]

Chrome: 
=======
CHR Profile: C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-05-20]
CHR Extension: (Google Drive) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-20]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-20]
CHR Extension: (YouTube) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-20]
CHR Extension: (Adblock Plus) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-11-04]
CHR Extension: (Google-Suche) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-20]
CHR Extension: (Google Wallet) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-20]
CHR Extension: (Google Mail) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-20]
CHR HKLM\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\Exts\Chrome.crx [2014-10-04]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\Exts\Chrome.crx [2014-10-04]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [310400 2013-04-24] (Windows (R) Win 7 DDK provider)
S3 DeviceFastLaneService; C:\Program Files\Packard Bell\Packard Bell Device Fast-lane\DeviceFastLaneSvc.exe [470056 2013-04-30] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [662088 2013-03-15] (Acer Incorporated)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-04-24] (WildTangent)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-08-08] (LogMeIn, Inc.)
S4 LMSvc; C:\Program Files\Packard Bell\Packard Bell Launch Manager\LMSvc.exe [431656 2013-06-17] (Acer Incorporate)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\NIS.exe [276376 2014-09-21] (Symantec Corporation)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4343664 2014-04-09] (Symantec Corporation)
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [106472 2013-09-18] (Razer Inc.)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2103096 2013-12-18] (TuneUp Software)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [219360 2013-04-18] (AppEx Networks Corporation)
R3 AthrSdSrv; C:\Windows\system32\DRIVERS\athrsd.sys [48760 2012-11-30] (Qualcomm Atheros, Inc.)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [98744 2013-04-23] (Advanced Micro Devices)
R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20141118.001\BHDrvx64.sys [1587416 2014-10-03] (Symantec Corporation)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-04-24] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-09-24] (Microsoft Corporation)
S3 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0404010.00B\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1506000.020\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2014-09-14] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2014-09-14] (Symantec Corporation)
S3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [46136 2014-09-04] (LogMeIn Inc.)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20141128.001\IDSvia64.sys [637656 2014-11-19] (Symantec Corporation)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-01-10] (Acer Incorporated)
S3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20141129.002\ENG64.SYS [129752 2014-09-14] (Symantec Corporation)
S3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20141129.002\EX64.SYS [2137304 2014-09-14] (Symantec Corporation)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [15704 2013-01-10] (Acer Incorporated)
S3 SRTSP; C:\Windows\System32\Drivers\NISx64\1506000.020\SRTSP64.SYS [876248 2014-08-26] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1506000.020\SRTSPX64.SYS [37592 2014-08-26] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1506000.020\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1506000.020\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NISx64\1506000.020\SymELAM.sys [23568 2013-09-10] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-03-22] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1506000.020\Ironx64.SYS [266968 2014-08-06] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1506000.020\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-12-16] (TuneUp Software)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
S3 AtiDCM; \??\C:\AMD\WU-CCC2\ccc2_install\Support64\atdcm64a.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-01 14:41 - 2014-12-01 14:43 - 00000000 ____D () C:\FRST
2014-11-27 19:12 - 2014-11-27 19:15 - 00000646 _____ () C:\WINDOWS\setupact.log
2014-11-27 19:12 - 2014-11-27 19:12 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-11-27 17:27 - 2014-11-27 17:27 - 04443312 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe
2014-11-27 17:10 - 2014-11-27 17:44 - 3268147200 _____ () C:\Users\Pk\Desktop\X17-59885.iso
2014-11-25 14:35 - 2014-11-25 14:36 - 00000000 ____D () C:\Users\Pk\Desktop\worldsurvival
2014-11-25 14:33 - 2014-11-25 14:33 - 00000000 ____D () C:\Users\Pk\Desktop\world
2014-11-25 14:24 - 2014-11-25 14:25 - 00525638 _____ () C:\Users\Pk\Desktop\Alpine  Summer Hub.zip
2014-11-25 13:59 - 2014-11-25 14:02 - 09296123 _____ () C:\Users\Pk\Desktop\Minecraft Spawn Hub Map.zip
2014-11-25 12:51 - 2014-11-25 12:51 - 00009949 _____ () C:\Users\Pk\Desktop\ChatManagerPlus.jar
2014-11-23 12:28 - 2014-11-23 12:29 - 00026812 _____ () C:\Users\Pk\Desktop\CTag.jar
2014-11-23 12:06 - 2014-11-23 12:20 - 00053565 _____ () C:\Users\Pk\Desktop\ColoredTags.jar
2014-11-23 10:32 - 2014-11-23 10:32 - 00722782 _____ () C:\Users\Pk\Desktop\PermissionsEx.jar
2014-11-23 10:05 - 2014-11-23 10:05 - 00959115 _____ () C:\Users\Pk\Desktop\Citizens.jar
2014-11-22 18:40 - 2014-11-22 18:40 - 00000000 ____D () C:\Users\Pk\AppData\Local\ICSharpCode.net
2014-11-22 18:39 - 2014-11-30 18:09 - 00000000 ____D () C:\Users\Pk\AppData\Local\PennyBee
2014-11-22 18:39 - 2014-11-22 18:39 - 00002028 _____ () C:\Users\Pk\Desktop\FileZilla Client.lnk
2014-11-22 18:39 - 2014-11-22 18:39 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\PennyBee
2014-11-22 18:39 - 2014-11-22 18:39 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2014-11-22 18:38 - 2014-11-22 18:38 - 06126536 _____ (Tim Kosse) C:\Users\Pk\Downloads\FileZilla_3.9.0.6_win32-setup [1].exe
2014-11-22 18:38 - 2014-11-22 18:38 - 00789864 _____ ( ) C:\Users\Pk\Downloads\FileZilla_3.9.0.6_win32-setup.exe
2014-11-22 10:00 - 2014-11-20 20:51 - 00714208 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-11-22 10:00 - 2014-11-20 20:51 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-22 09:51 - 2014-11-22 10:01 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-11-21 15:54 - 2014-11-28 16:13 - 00000000 ____D () C:\Users\Pk\Desktop\Rest-Müll
2014-11-21 14:35 - 2014-11-21 14:36 - 92658088 _____ (Oracle Corporation) C:\Users\Pk\Downloads\jre-8u25-windows-x64.exe
2014-11-19 16:07 - 2014-11-09 23:19 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-11-19 16:07 - 2014-11-09 23:19 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2014-11-19 16:07 - 2014-11-09 23:18 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2014-11-19 16:07 - 2014-11-09 23:18 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2014-11-15 17:59 - 2014-12-01 14:28 - 00005848 _____ () C:\WINDOWS\PFRO.log
2014-11-14 15:51 - 2014-11-14 15:51 - 00000000 ____D () C:\Users\Pk\AppData\Local\Skype
2014-11-14 15:50 - 2014-11-14 15:50 - 00002533 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-11-14 15:50 - 2014-11-14 15:50 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-11-14 15:50 - 2014-11-14 15:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-11-14 15:48 - 2014-11-14 15:49 - 01546856 _____ (Skype Technologies S.A.) C:\Users\Pk\Downloads\SkypeSetup.exe
2014-11-12 19:47 - 2014-11-12 19:49 - 00006038 _____ () C:\WINDOWS\system32\--traceoff
2014-11-12 19:47 - 2014-11-12 19:47 - 00000000 _____ () C:\WINDOWS\system32\--debugoff
2014-11-12 19:46 - 2014-11-12 19:49 - 00000000 ____D () C:\Users\Pk\AppData\Local\Sony
2014-11-12 19:46 - 2014-11-12 19:46 - 00000000 ____D () C:\ProgramData\Sony
2014-11-12 19:46 - 2014-11-12 19:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2014-11-12 19:46 - 2014-11-12 19:46 - 00000000 ____D () C:\Program Files\Sony
2014-11-12 19:46 - 2014-11-12 19:46 - 00000000 ____D () C:\Program Files (x86)\Sony
2014-11-12 19:43 - 2014-11-30 18:58 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Sony
2014-11-12 18:55 - 2014-11-12 19:30 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Mine_imator
2014-11-12 18:54 - 2014-11-30 18:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mine-imator
2014-11-12 18:54 - 2014-11-12 18:56 - 00000000 ____D () C:\Users\Pk\Mine-imator
2014-11-12 18:54 - 2014-11-12 18:54 - 08800436 _____ (David Norgren ) C:\Users\Pk\Downloads\Mine-imator installer 1.0.0 DEMO 5.exe
2014-11-11 19:09 - 2014-09-22 04:38 - 01519488 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2014-11-11 19:08 - 2014-09-22 03:06 - 00258368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-11-11 19:08 - 2014-09-22 03:06 - 00114496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-11-11 19:08 - 2014-09-22 02:49 - 00035320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-11-11 19:08 - 2014-09-19 00:16 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2014-11-11 19:08 - 2014-09-02 22:08 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll
2014-11-11 19:08 - 2014-09-02 22:08 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll
2014-11-11 19:07 - 2014-10-13 02:33 - 00116032 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2014-11-11 19:07 - 2014-10-11 00:58 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2014-11-11 19:07 - 2014-10-11 00:53 - 03607040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2014-11-11 19:07 - 2014-10-08 07:30 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2014-11-11 19:07 - 2014-10-08 07:09 - 00428032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll
2014-11-11 19:07 - 2014-10-08 06:27 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll
2014-11-11 19:07 - 2014-10-08 05:32 - 02773504 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-11-11 19:07 - 2014-10-08 05:19 - 02459136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-11-11 19:07 - 2014-09-27 07:13 - 00104336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2014-11-11 19:07 - 2014-09-27 05:24 - 00088800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2014-11-11 19:07 - 2014-09-27 03:38 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2014-11-11 19:07 - 2014-09-27 03:30 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2014-11-11 19:07 - 2014-09-27 03:17 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2014-11-11 19:06 - 2014-10-10 01:58 - 00177472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-11-11 19:06 - 2014-10-10 01:58 - 00027456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys
2014-11-11 19:06 - 2014-10-10 01:44 - 00563976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-11-11 19:06 - 2014-10-08 07:37 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-11-11 19:06 - 2014-10-08 07:37 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll
2014-11-11 19:06 - 2014-10-08 07:34 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2014-11-11 19:06 - 2014-10-08 07:24 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll
2014-11-11 19:06 - 2014-10-08 06:56 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2014-11-11 19:06 - 2014-10-08 06:51 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-11-11 19:06 - 2014-10-08 06:51 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll
2014-11-11 19:06 - 2014-10-08 06:18 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2014-11-11 19:06 - 2014-10-08 06:17 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-11-11 19:06 - 2014-10-08 05:23 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-11-11 19:00 - 2014-10-18 09:55 - 00055776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-11-11 19:00 - 2014-10-18 08:09 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-11-11 19:00 - 2014-10-18 08:09 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2014-11-11 19:00 - 2014-10-18 07:25 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2014-11-11 19:00 - 2014-10-18 06:50 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll
2014-11-11 19:00 - 2014-10-18 06:38 - 03557376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-11-11 19:00 - 2014-10-18 06:27 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2014-11-11 19:00 - 2014-10-18 06:26 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2014-11-11 19:00 - 2014-10-18 06:23 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-11-11 19:00 - 2014-10-18 06:23 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-11-11 19:00 - 2014-10-18 06:21 - 00894976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-11-11 19:00 - 2014-10-18 06:20 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-11-11 19:00 - 2014-10-18 06:14 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2014-11-11 19:00 - 2014-10-18 06:14 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2014-11-11 19:00 - 2014-10-18 06:12 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-11-11 19:00 - 2014-10-18 06:11 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-11-11 18:49 - 2014-10-31 05:28 - 25110016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-11-11 18:49 - 2014-10-31 03:42 - 19781632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-11-11 18:43 - 2014-10-31 03:59 - 14390272 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-11-11 18:42 - 2014-10-31 02:30 - 12819456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-11-11 18:41 - 2014-10-31 05:06 - 00580096 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-11-11 18:41 - 2014-10-31 05:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-11-11 18:41 - 2014-10-31 05:05 - 02884096 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-11-11 18:41 - 2014-10-31 04:53 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2014-11-11 18:41 - 2014-10-31 04:52 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2014-11-11 18:41 - 2014-10-31 04:51 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2014-11-11 18:41 - 2014-10-31 04:51 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-11-11 18:41 - 2014-10-31 04:51 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-11-11 18:41 - 2014-10-31 04:50 - 06040064 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-11-11 18:41 - 2014-10-31 04:50 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-11-11 18:41 - 2014-10-31 04:38 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-11-11 18:41 - 2014-10-31 04:29 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2014-11-11 18:41 - 2014-10-31 04:25 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-11-11 18:41 - 2014-10-31 04:23 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2014-11-11 18:41 - 2014-10-31 04:21 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-11-11 18:41 - 2014-10-31 04:15 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2014-11-11 18:41 - 2014-10-31 04:08 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2014-11-11 18:41 - 2014-10-31 04:06 - 00372736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-11-11 18:41 - 2014-10-31 04:05 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-11-11 18:41 - 2014-10-31 04:05 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-11-11 18:41 - 2014-10-31 04:03 - 02124288 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-11-11 18:41 - 2014-10-31 03:45 - 02365440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-11-11 18:41 - 2014-10-31 03:44 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-11-11 18:41 - 2014-10-31 03:32 - 01550336 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-11-11 18:41 - 2014-10-31 03:24 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-11-11 18:41 - 2014-10-31 03:23 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2014-11-11 18:41 - 2014-10-31 03:20 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-11-11 18:41 - 2014-10-31 03:18 - 02277376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-11-11 18:41 - 2014-10-31 03:13 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2014-11-11 18:41 - 2014-10-31 03:13 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2014-11-11 18:41 - 2014-10-31 03:12 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2014-11-11 18:41 - 2014-10-31 03:11 - 00620032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-11-11 18:41 - 2014-10-31 03:02 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-11-11 18:41 - 2014-10-31 02:53 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-11-11 18:41 - 2014-10-31 02:50 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-11-11 18:41 - 2014-10-31 02:46 - 04298240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-11-11 18:41 - 2014-10-31 02:46 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2014-11-11 18:41 - 2014-10-31 02:42 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2014-11-11 18:41 - 2014-10-31 02:40 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-11-11 18:41 - 2014-10-31 02:40 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-11-11 18:41 - 2014-10-31 02:39 - 02051072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-11-11 18:41 - 2014-10-31 02:26 - 01042944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-11-11 18:41 - 2014-10-31 02:17 - 01892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-11-11 18:41 - 2014-10-31 02:13 - 01310208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-11-11 18:41 - 2014-10-31 02:11 - 00708096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-11-11 18:40 - 2014-10-31 05:12 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wextract.exe
2014-11-11 18:40 - 2014-10-31 05:12 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshta.exe
2014-11-11 18:40 - 2014-10-31 05:10 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iexpress.exe
2014-11-11 18:40 - 2014-10-31 05:09 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\pngfilt.dll
2014-11-11 18:40 - 2014-10-31 05:08 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe
2014-11-11 18:40 - 2014-10-31 05:06 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\url.dll
2014-11-11 18:40 - 2014-10-31 05:06 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-11-11 18:40 - 2014-10-31 05:05 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2014-11-11 18:40 - 2014-10-31 05:04 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2014-11-11 18:40 - 2014-10-31 04:57 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-11-11 18:40 - 2014-10-31 04:56 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-11-11 18:40 - 2014-10-31 04:54 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\IEAdvpack.dll
2014-11-11 18:40 - 2014-10-31 04:40 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\licmgr10.dll
2014-11-11 18:40 - 2014-10-31 04:30 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-11-11 18:40 - 2014-10-31 04:29 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2014-11-11 18:40 - 2014-10-31 04:28 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\inseng.dll
2014-11-11 18:40 - 2014-10-31 04:24 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-11-11 18:40 - 2014-10-31 04:24 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll
2014-11-11 18:40 - 2014-10-31 04:19 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\occache.dll
2014-11-11 18:40 - 2014-10-31 03:42 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\imgutil.dll
2014-11-11 18:40 - 2014-10-31 03:28 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wextract.exe
2014-11-11 18:40 - 2014-10-31 03:28 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshta.exe
2014-11-11 18:40 - 2014-10-31 03:27 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iexpress.exe
2014-11-11 18:40 - 2014-10-31 03:26 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pngfilt.dll
2014-11-11 18:40 - 2014-10-31 03:25 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe
2014-11-11 18:40 - 2014-10-31 03:24 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\url.dll
2014-11-11 18:40 - 2014-10-31 03:24 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-11-11 18:40 - 2014-10-31 03:23 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-11-11 18:40 - 2014-10-31 03:22 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2014-11-11 18:40 - 2014-10-31 03:16 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-11-11 18:40 - 2014-10-31 03:15 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-11-11 18:40 - 2014-10-31 03:14 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IEAdvpack.dll
2014-11-11 18:40 - 2014-10-31 03:12 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-11-11 18:40 - 2014-10-31 03:03 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\licmgr10.dll
2014-11-11 18:40 - 2014-10-31 02:57 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-11 18:40 - 2014-10-31 02:56 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inseng.dll
2014-11-11 18:40 - 2014-10-31 02:56 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2014-11-11 18:40 - 2014-10-31 02:56 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2014-11-11 18:40 - 2014-10-31 02:53 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll
2014-11-11 18:40 - 2014-10-31 02:52 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-11-11 18:40 - 2014-10-31 02:51 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2014-11-11 18:40 - 2014-10-31 02:48 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\occache.dll
2014-11-11 18:40 - 2014-10-31 02:24 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imgutil.dll
2014-11-11 18:40 - 2014-10-23 05:48 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\packager.dll
2014-11-11 18:40 - 2014-10-23 05:05 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\packager.dll
2014-11-11 18:40 - 2014-10-17 07:01 - 00789184 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-11-11 18:40 - 2014-10-17 06:58 - 00602768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-11-11 18:40 - 2014-10-07 06:28 - 00500016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-11-11 18:40 - 2014-10-07 06:27 - 00482872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-11-11 18:40 - 2014-10-07 06:27 - 00394120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-11-11 18:40 - 2014-10-07 06:27 - 00272248 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-11-11 18:40 - 2014-10-07 06:27 - 00108432 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2014-11-11 18:40 - 2014-10-07 03:34 - 00370424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-11-11 18:40 - 2014-10-07 03:34 - 00344536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-11-11 18:40 - 2014-10-07 03:33 - 00424544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-11-11 18:40 - 2014-10-07 03:30 - 04182016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-11-11 18:40 - 2014-10-07 01:54 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-11-11 18:40 - 2014-10-07 01:46 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-11-11 18:40 - 2014-08-23 05:18 - 02149376 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-11-11 18:40 - 2014-08-23 05:03 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-11-11 18:39 - 2014-09-10 06:25 - 00474432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2014-11-11 18:39 - 2014-09-08 03:07 - 02497344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-11-11 18:39 - 2014-09-08 03:07 - 00428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-11-11 18:39 - 2014-09-07 22:08 - 00389176 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-11-11 18:39 - 2014-09-04 22:30 - 00822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-11-11 18:39 - 2014-09-04 22:21 - 01053184 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-11-11 18:39 - 2014-09-04 03:05 - 00836176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-11-11 18:39 - 2014-09-04 02:22 - 00670384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-11-11 18:39 - 2014-09-04 01:01 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2014-11-11 18:39 - 2014-09-04 00:32 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2014-11-11 18:39 - 2014-08-31 00:17 - 00148800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-11-11 18:39 - 2014-08-31 00:15 - 21197152 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-11-11 18:39 - 2014-08-30 22:59 - 18723112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-11-11 18:39 - 2014-08-30 22:05 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMEX.dll
2014-11-11 18:39 - 2014-08-30 21:58 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSAPI.dll
2014-11-11 18:39 - 2014-08-30 21:04 - 00941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-11-11 18:39 - 2014-08-30 20:53 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSAPI.dll
2014-11-11 18:39 - 2014-08-30 20:17 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-11-11 18:39 - 2014-08-28 02:55 - 07484224 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-11-11 18:39 - 2014-08-28 00:21 - 02480128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-11-11 18:39 - 2014-08-28 00:06 - 02030592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2014-11-11 18:39 - 2014-08-23 05:14 - 13424128 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-11-11 18:39 - 2014-08-23 05:04 - 11820544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-11-11 18:39 - 2014-08-23 04:50 - 02714112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-11-11 18:39 - 2014-08-02 00:51 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2014-11-11 18:39 - 2014-08-02 00:35 - 00485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2014-11-10 16:30 - 2014-11-10 16:30 - 02332316 _____ () C:\Users\Pk\Downloads\forge-1.5.2-7.8.1.738-installer.jar
2014-11-05 14:42 - 2014-11-05 14:42 - 02936397 _____ () C:\Users\Pk\Downloads\forge-1.7.2-10.12.2.1147-installer (3).jar
2014-11-05 14:40 - 2014-11-05 14:40 - 28917914 _____ () C:\Users\Pk\Downloads\The CraftingFabo Pack V.2.zip
2014-11-05 14:38 - 2014-11-25 18:02 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\.minecraft
2014-11-05 14:35 - 2014-11-05 14:36 - 54655526 _____ () C:\Users\Pk\Downloads\-Quasaro V.5!-.zip
2014-11-02 20:01 - 2014-12-01 14:39 - 00003946 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{51C63146-2830-466D-8742-F26078BC5B00}
2014-11-02 20:01 - 2014-11-02 20:01 - 00000000 __SHD () C:\Users\Pk\AppData\Local\EmieUserList
2014-11-02 20:01 - 2014-11-02 20:01 - 00000000 __SHD () C:\Users\Pk\AppData\Local\EmieSiteList
2014-11-02 13:07 - 2014-08-02 00:18 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2014-11-02 12:08 - 2014-08-15 00:36 - 00146752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys
2014-11-02 11:43 - 2014-07-10 04:08 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\lockscreencn.dll
2014-11-02 11:42 - 2014-07-15 18:16 - 03048880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-11-02 11:42 - 2014-07-15 08:29 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2014-11-02 11:42 - 2014-07-15 08:22 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2014-11-02 11:42 - 2014-07-15 08:03 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2014-11-02 11:38 - 2014-06-09 22:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2014-11-02 11:38 - 2014-06-09 22:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-11-02 11:21 - 2014-08-23 07:48 - 02374784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-11-02 11:21 - 2014-08-23 07:13 - 02084520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2014-11-02 11:21 - 2014-08-23 06:10 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2014-11-02 11:21 - 2014-08-23 05:32 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2014-11-02 11:21 - 2014-08-23 04:33 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-11-02 11:20 - 2014-08-16 04:08 - 01507648 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-11-02 11:20 - 2014-08-16 04:01 - 01710184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-11-02 11:20 - 2014-08-16 03:58 - 01112512 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-11-02 11:20 - 2014-08-16 03:16 - 01205976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-11-02 11:20 - 2014-08-16 03:03 - 01467384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2014-11-02 11:20 - 2014-08-16 01:31 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-11-02 11:20 - 2014-08-16 01:04 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll
2014-11-02 11:20 - 2014-08-16 00:58 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-11-02 11:20 - 2014-08-16 00:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll
2014-11-02 11:20 - 2014-08-16 00:46 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll
2014-11-02 11:20 - 2014-08-16 00:45 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-11-02 11:20 - 2014-08-16 00:43 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll
2014-11-02 11:20 - 2014-08-16 00:43 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll
2014-11-02 11:20 - 2014-08-16 00:31 - 00914432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2014-11-02 11:20 - 2014-08-16 00:31 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll
2014-11-02 11:20 - 2014-08-16 00:29 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-11-02 11:20 - 2014-08-16 00:23 - 01106432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-11-02 11:20 - 2014-08-16 00:22 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-11-02 11:20 - 2014-08-16 00:22 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
2014-11-02 11:20 - 2014-08-16 00:19 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-11-02 11:20 - 2014-08-16 00:18 - 04758528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-11-02 11:20 - 2014-08-16 00:17 - 08757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-11-02 11:20 - 2014-08-16 00:14 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll
2014-11-02 11:20 - 2014-08-16 00:13 - 06649344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-11-02 11:20 - 2014-08-16 00:13 - 05902848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-11-02 11:20 - 2014-08-16 00:13 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-11-02 11:20 - 2014-08-16 00:11 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-11-02 11:20 - 2014-08-16 00:10 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-11-02 11:20 - 2014-08-16 00:08 - 05777408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-11-02 11:20 - 2014-08-16 00:07 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-11-02 11:12 - 2014-11-02 11:12 - 00000000 ____D () C:\Users\Pk\voip
2014-11-02 11:04 - 2014-07-24 03:20 - 00875688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll
2014-11-02 11:04 - 2014-07-24 03:20 - 00869544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll
2014-11-02 11:00 - 2014-11-02 11:13 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\ICQ-Profile
2014-11-02 11:00 - 2014-11-02 11:01 - 00001714 _____ () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\ICQ.lnk
2014-11-02 11:00 - 2014-11-02 11:01 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ICQ
2014-11-02 11:00 - 2014-11-02 11:01 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\ICQM
2014-11-02 10:59 - 2014-11-02 10:59 - 35212808 _____ (ICQ) C:\Users\Pk\Downloads\icq_rfrset.exe
2014-11-02 10:57 - 2014-06-02 02:10 - 00423768 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-11-02 10:57 - 2014-05-31 06:27 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys
2014-11-02 10:57 - 2014-05-31 06:26 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys
2014-11-02 10:57 - 2014-05-31 04:01 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe
2014-11-02 10:57 - 2014-05-31 04:01 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
2014-11-02 10:57 - 2014-05-31 04:01 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll
2014-11-02 10:57 - 2014-05-27 09:56 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll
2014-11-02 10:57 - 2014-05-27 09:53 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll
2014-11-02 10:54 - 2014-07-12 04:17 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-11-02 10:52 - 2014-12-01 14:29 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-11-02 10:52 - 2014-11-27 17:28 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-11-02 10:35 - 2014-11-27 20:33 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Skype
2014-11-02 10:34 - 2014-11-14 15:51 - 00000000 ____D () C:\ProgramData\Skype
2014-11-02 10:21 - 2014-11-02 10:22 - 30742784 _____ (Skype Technologies S.A.) C:\Users\Pk\Downloads\Skype_v6.1.0.129.exe
2014-11-01 14:19 - 2014-11-01 14:19 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Norton Internet Security
2014-11-01 14:15 - 2014-11-01 14:15 - 00001466 _____ () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-11-01 14:13 - 2014-11-01 14:13 - 00000020 ___SH () C:\Users\Pk\ntuser.ini
2014-11-01 14:10 - 2014-12-01 14:39 - 01821657 _____ () C:\WINDOWS\WindowsUpdate.log
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-11-01 14:08 - 2014-11-01 14:08 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-11-01 13:47 - 2014-11-01 13:47 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-11-01 13:47 - 2014-11-01 13:47 - 00000000 ____D () C:\Users\Default\AppData\Local\Pokki
2014-11-01 13:47 - 2014-11-01 13:47 - 00000000 ____D () C:\Users\Default User\AppData\Local\Pokki
2014-11-01 13:39 - 2014-11-01 13:39 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-11-01 13:35 - 2014-12-01 14:29 - 00000000 ____D () C:\Users\Pk
2014-11-01 13:35 - 2014-11-01 14:09 - 00036198 _____ () C:\WINDOWS\diagwrn.xml
2014-11-01 13:35 - 2014-11-01 14:09 - 00036198 _____ () C:\WINDOWS\diagerr.xml
2014-11-01 13:35 - 2014-11-01 14:02 - 00000000 ____D () C:\Users\issam_000
2014-11-01 13:35 - 2014-11-01 14:01 - 00000000 ____D () C:\Users\ouali_000
2014-11-01 13:35 - 2014-11-01 13:38 - 00000000 ___RD () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-01 13:35 - 2014-11-01 13:38 - 00000000 ___RD () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-11-01 13:35 - 2014-11-01 13:37 - 00000000 ___RD () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-01 13:35 - 2014-11-01 13:37 - 00000000 ___RD () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-11-01 13:35 - 2014-11-01 13:37 - 00000000 ___RD () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-01 13:35 - 2014-11-01 13:37 - 00000000 ___RD () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\Vorlagen
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\Startmenü
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\Netzwerkumgebung
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\Lokale Einstellungen
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\Eigene Dateien
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\Druckumgebung
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\Documents\Eigene Musik
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\Documents\Eigene Bilder
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\AppData\Local\Verlauf
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\AppData\Local\Anwendungsdaten
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\Anwendungsdaten
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\Vorlagen
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\Startmenü
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\Netzwerkumgebung
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\Lokale Einstellungen
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\Eigene Dateien
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\Druckumgebung
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\Documents\Eigene Musik
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\Documents\Eigene Bilder
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\AppData\Local\Verlauf
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\AppData\Local\Anwendungsdaten
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\Anwendungsdaten
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\Vorlagen
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\Startmenü
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\Netzwerkumgebung
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\Lokale Einstellungen
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\Eigene Dateien
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\Druckumgebung
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\Documents\Eigene Musik
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\Documents\Eigene Bilder
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\AppData\Local\Verlauf
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\AppData\Local\Anwendungsdaten
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\Anwendungsdaten
2014-11-01 13:35 - 2014-09-24 06:18 - 00000369 _____ () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-11-01 13:35 - 2014-09-24 06:18 - 00000369 _____ () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-11-01 13:35 - 2014-09-24 06:18 - 00000369 _____ () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-11-01 13:35 - 2014-09-24 06:18 - 00000369 _____ () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-11-01 13:35 - 2014-09-24 06:18 - 00000369 _____ () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-11-01 13:35 - 2014-09-24 06:18 - 00000369 _____ () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-11-01 13:35 - 2013-08-22 15:36 - 00000000 ___RD () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-01 13:35 - 2013-08-22 15:36 - 00000000 ___RD () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-01 13:35 - 2013-08-22 15:36 - 00000000 ___RD () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-01 13:35 - 2013-08-22 15:36 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-11-01 13:35 - 2013-08-22 15:36 - 00000000 ____D () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-11-01 13:35 - 2013-08-22 15:36 - 00000000 ____D () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-11-01 13:23 - 2014-11-01 13:23 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2014-11-01 13:23 - 2014-11-01 13:23 - 00000000 ____D () C:\Program Files\Realtek
2014-11-01 13:22 - 2014-11-01 13:22 - 00000000 ____D () C:\Program Files\Elantech
2014-11-01 13:22 - 2014-11-01 13:22 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2014-11-01 13:22 - 2014-11-01 13:22 - 00000000 ____D () C:\Program Files\AMD
2014-11-01 13:22 - 2014-11-01 13:22 - 00000000 _____ () C:\WINDOWS\system32\spu_storage.bin
2014-11-01 13:22 - 2014-11-01 13:22 - 00000000 _____ () C:\WINDOWS\ativpsrm.bin
2014-11-01 12:18 - 2014-11-04 15:48 - 00000000 ___DC () C:\WINDOWS\Panther
2014-11-01 12:18 - 2014-11-01 13:28 - 00000000 __SHD () C:\Recovery
2014-11-01 12:15 - 2014-11-17 17:14 - 00000000 ____D () C:\Windows.old
2014-11-01 12:15 - 2014-11-01 12:15 - 00921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-11-01 12:15 - 2014-11-01 12:15 - 00626688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-11-01 12:15 - 2014-11-01 12:15 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-11-01 12:15 - 2014-11-01 12:15 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\BulkOperationHost.exe
2014-11-01 12:11 - 2014-11-01 12:11 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2014-11-01 12:11 - 2014-11-01 12:11 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2014-11-01 12:09 - 2014-11-01 12:09 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-11-01 12:05 - 2014-11-01 12:05 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer
2014-11-01 12:05 - 2014-11-01 12:05 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-11-01 12:05 - 2014-11-01 12:05 - 00000000 ____D () C:\Program Files\MSBuild
2014-11-01 12:05 - 2014-11-01 12:05 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-11-01 12:05 - 2014-11-01 12:05 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-11-01 12:03 - 2013-08-03 04:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2014-11-01 12:03 - 2013-08-03 04:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-11-01 12:03 - 2013-08-03 04:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2014-11-01 12:03 - 2013-08-03 04:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-01 14:36 - 2013-11-23 14:53 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1444305084-1481242938-3084423498-1001
2014-12-01 14:34 - 2014-05-10 20:03 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-12-01 14:34 - 2013-11-23 15:34 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-12-01 14:33 - 2013-09-15 12:20 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-12-01 14:32 - 2014-05-20 14:36 - 00001142 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-01 14:30 - 2013-08-22 13:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-12-01 14:29 - 2013-08-22 14:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-11-30 22:04 - 2012-07-26 07:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-11-30 22:02 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-11-30 22:00 - 2014-05-20 14:36 - 00001146 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-30 21:15 - 2014-10-01 15:56 - 00000414 _____ () C:\WINDOWS\Tasks\update-sys.job
2014-11-30 20:37 - 2014-10-01 15:56 - 00000414 _____ () C:\WINDOWS\Tasks\update-S-1-5-21-1444305084-1481242938-3084423498-1001.job
2014-11-30 15:22 - 2013-11-29 17:33 - 00000000 ____D () C:\Users\Pk\AppData\Local\Adobe
2014-11-28 22:33 - 2013-11-30 16:17 - 00000000 ____D () C:\Users\Pk\AppData\Local\CrashDumps
2014-11-28 19:32 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-11-28 17:55 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-11-27 19:16 - 2014-09-24 06:17 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-11-27 19:16 - 2014-09-24 05:43 - 00765582 _____ () C:\WINDOWS\system32\perfh007.dat
2014-11-27 19:16 - 2014-09-24 05:43 - 00159366 _____ () C:\WINDOWS\system32\perfc007.dat
2014-11-27 18:03 - 2014-05-20 14:38 - 00002207 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-11-27 17:44 - 2013-12-18 18:29 - 00000215 _____ () C:\Users\Pk\AppData\Roaming\WB.CFG
2014-11-25 18:06 - 2013-08-22 11:22 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2014-11-25 18:06 - 2013-08-22 11:22 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2014-11-25 18:06 - 2013-08-22 11:17 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2014-11-25 18:06 - 2013-08-22 11:17 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2014-11-25 18:06 - 2013-08-22 11:17 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2014-11-25 18:06 - 2013-08-22 04:05 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2014-11-25 18:06 - 2013-08-22 04:03 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2014-11-25 18:06 - 2013-08-22 03:59 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2014-11-25 18:06 - 2013-08-22 03:56 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2014-11-25 18:06 - 2013-08-22 03:56 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2014-11-25 18:06 - 2013-08-22 03:51 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2014-11-25 18:06 - 2013-08-22 03:51 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2014-11-25 18:06 - 2013-08-22 03:51 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2014-11-25 18:06 - 2013-08-22 03:51 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2014-11-25 14:36 - 2014-06-11 14:21 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\FileZilla
2014-11-24 13:26 - 2014-06-11 14:20 - 00000000 ____D () C:\Program Files (x86)\FileZilla FTP Client
2014-11-22 10:01 - 2013-11-23 14:32 - 00000000 ____D () C:\Users\Pk\AppData\Local\Packages
2014-11-22 09:59 - 2013-08-22 14:44 - 05007824 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-11-22 09:52 - 2013-08-22 15:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-22 09:52 - 2013-08-22 15:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-22 09:52 - 2013-08-22 15:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-11-22 09:52 - 2013-08-22 15:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-11-22 09:51 - 2013-08-22 15:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-11-22 09:51 - 2013-08-22 15:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-11-22 09:51 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-11-21 16:33 - 2014-10-01 15:56 - 00003260 _____ () C:\WINDOWS\System32\Tasks\update-S-1-5-21-1444305084-1481242938-3084423498-1001
2014-11-21 16:33 - 2014-10-01 15:56 - 00000431 _____ () C:\Users\Pk\AppData\Local\UserProducts.xml
2014-11-21 16:33 - 2014-10-01 15:56 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lightshot
2014-11-21 16:27 - 2013-11-29 17:26 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-11-21 16:16 - 2013-11-29 17:26 - 103374192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-11-21 16:08 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\restore
2014-11-21 13:54 - 2014-09-20 14:07 - 00000000 ____D () C:\Users\Pk\AppData\Local\LogMeIn Hamachi
2014-11-16 12:49 - 2014-10-04 16:42 - 11895013 _____ () C:\Users\Pk\Downloads\WeepCraft 8.1.zip
2014-11-15 11:13 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\spool
2014-11-14 15:55 - 2014-05-20 14:36 - 00004118 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2014-11-14 15:55 - 2014-05-20 14:36 - 00003882 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2014-11-04 15:51 - 2014-09-20 18:51 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-11-04 15:51 - 2014-05-24 10:33 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\uTorrent
2014-11-01 14:35 - 2012-07-26 08:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP
2014-11-01 14:34 - 2013-08-22 13:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2014-11-01 14:20 - 2013-11-23 14:37 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD
2014-11-01 14:13 - 2013-08-06 07:24 - 00003234 _____ () C:\WINDOWS\System32\Tasks\Norton WSC Integration
2014-11-01 14:10 - 2013-08-22 15:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-11-01 14:10 - 2013-08-22 13:36 - 00000000 __RHD () C:\Users\Default
2014-11-01 14:09 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\Registration
2014-11-01 14:04 - 2013-08-22 15:36 - 00000000 __RSD () C:\WINDOWS\Media
2014-11-01 14:04 - 2013-08-22 15:36 - 00000000 __RHD () C:\Users\Public\Libraries
2014-11-01 13:50 - 2014-10-22 15:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brick-Force
2014-11-01 13:50 - 2014-10-21 16:44 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Counter-Strike 1.6
2014-11-01 13:50 - 2014-10-19 15:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro
2014-11-01 13:50 - 2014-10-17 12:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer
2014-11-01 13:50 - 2014-10-15 15:47 - 00000000 ____D () C:\WINDOWS\de
2014-11-01 13:50 - 2014-10-11 13:31 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-11-01 13:50 - 2014-10-10 14:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AssaultCube
2014-11-01 13:50 - 2014-09-26 17:22 - 00000000 ____D () C:\ProgramData\regid.1995-08.com.techsmith
2014-11-01 13:50 - 2014-09-26 17:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
2014-11-01 13:50 - 2014-09-21 10:13 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wurm Online
2014-11-01 13:50 - 2014-09-20 18:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-11-01 13:50 - 2014-09-20 14:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi76
2014-11-01 13:50 - 2014-08-14 17:13 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SA-MP Colorpicker
2014-11-01 13:50 - 2014-06-28 09:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elsword_DE
2014-11-01 13:50 - 2014-06-18 15:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Clonk Rage
2014-11-01 13:50 - 2014-06-11 14:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2014-11-01 13:50 - 2014-05-24 17:38 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2014-11-01 13:50 - 2014-05-23 17:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Online Backup
2014-11-01 13:50 - 2014-05-21 12:35 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-11-01 13:50 - 2014-05-21 12:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-11-01 13:50 - 2014-05-20 15:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-11-01 13:50 - 2014-05-20 15:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-11-01 13:50 - 2014-05-20 14:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-11-01 13:50 - 2014-03-22 17:25 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security
2014-11-01 13:50 - 2014-03-12 18:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2014
2014-11-01 13:50 - 2014-02-19 15:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2014-11-01 13:50 - 2013-09-15 12:15 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD 12
2014-11-01 13:50 - 2013-09-15 12:05 - 00000000 ____D () C:\WINDOWS\SysWOW64\QCA_CR
2014-11-01 13:50 - 2013-09-15 11:55 - 00000000 ____D () C:\WINDOWS\SysWOW64\Atheros_L1e
2014-11-01 13:50 - 2013-09-15 11:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Quick Stream
2014-11-01 13:50 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\Help
2014-11-01 13:50 - 2013-08-22 13:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2014-11-01 13:50 - 2013-08-06 07:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2014-11-01 13:50 - 2013-08-06 07:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Packard Bell
2014-11-01 13:47 - 2012-07-26 05:37 - 00000000 ____D () C:\Users\Default.migrated
2014-11-01 13:46 - 2014-09-24 05:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN
2014-11-01 13:46 - 2014-09-24 05:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep
2014-11-01 13:46 - 2014-09-24 05:43 - 00000000 ____D () C:\WINDOWS\system32\WCN
2014-11-01 13:46 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz
2014-11-01 13:46 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME
2014-11-01 13:46 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns
2014-11-01 13:46 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-11-01 13:46 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\IME
2014-11-01 13:46 - 2013-08-22 13:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI
2014-11-01 13:46 - 2013-08-22 13:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-11-01 13:43 - 2014-10-10 14:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Netgame
2014-11-01 13:43 - 2014-09-22 18:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer
2014-11-01 13:43 - 2013-08-22 15:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker
2014-11-01 13:43 - 2013-08-22 15:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2014-11-01 13:43 - 2013-08-22 15:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar
2014-11-01 13:43 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\IME
2014-11-01 13:43 - 2013-08-22 15:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-11-01 13:43 - 2013-08-06 07:17 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-11-01 13:43 - 2013-08-06 07:05 - 00000000 ____D () C:\ProgramData\PRICache
2014-11-01 13:39 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2014-11-01 13:38 - 2014-10-10 14:35 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Netgame
2014-11-01 13:38 - 2014-09-20 19:01 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-11-01 13:38 - 2014-05-27 13:06 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EA Games
2014-11-01 13:37 - 2014-05-20 14:24 - 00000000 ____D () C:\Users\ouali_000\AppData\Local\Packages
2014-11-01 13:37 - 2013-11-23 15:21 - 00000000 ____D () C:\Users\issam_000\AppData\Local\Packages
2014-11-01 12:15 - 2013-08-22 15:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2014-11-01 12:15 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-11-01 12:15 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-11-01 12:15 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-11-01 12:14 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2014-11-01 12:05 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI
2014-11-01 12:05 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\MUI
2014-11-01 10:58 - 2012-07-26 08:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-27 19:28

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-12-2014
Ran by Hbib at 2014-12-01 14:50:30
Running from C:\Users\Pk\Pictures
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Norton Internet Security (Disabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
AS: Norton Internet Security (Enabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Norton Internet Security (Disabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\uTorrent) (Version: 3.4.2.34024 - BitTorrent Inc.)
Adobe After Effects CC 2014 (HKLM-x32\...\{2B22C750-5C3B-4738-B621-BA786AC7A494}) (Version: 13.0.2 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.8.0.447 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.239 - Adobe Systems Incorporated)
Adobe Photoshop CC 2014 (HKLM-x32\...\{D7A4F897-B20A-42D0-862D-CB5F6DB7391D}) (Version: 15.2 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (HKLM\...\{9770EA17-52C1-78A7-C3B3-59F0A2091BAE}) (Version: 8.0.911.0 - Advanced Micro Devices, Inc.)
AMD Quick Stream (HKLM\...\{E9EED4AE-682B-4501-9574-D09A21717599}_is1) (Version: 3.4.4.2 - AppEx Networks)
AssaultCube v1.2.0.2 (HKLM-x32\...\AssaultCube) (Version: 1.2.0.2 - )
Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Brick-Force (HKLM-x32\...\{9853ABB2-6416-4C87-8650-DD8E528FF564}}_is1) (Version: 4.3.383.130.19 - Infernum Productions AG)
Camtasia Studio 8 (HKLM-x32\...\{FB05EAA3-D938-4EDA-9A38-88543E52680C}) (Version: 8.4.3.1792 - TechSmith Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 4.14 - Piriform)
CINEMA 4D R14 (HKLM-x32\...\CINEMA 4D R14) (Version:  - )
Counter-Field 3 (HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\Counter-Field 3) (Version:  - )
Counter-Strike 1.6 (HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\Counter-Strike 1.6) (Version:  - )
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.2826.57 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Delicious: Emily's Childhood Memories Premium Edition (x32 Version: 3.0.2.32 - WildTangent) Hidden
eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)
ETDWare PS/2-X64 11.6.24.203_WHQL (HKLM\...\Elantech) (Version: 11.6.24.203 - ELAN Microelectronic Corp.)
FileZilla Client 3.9.0.6 (HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\FileZilla Client) (Version: 3.9.0.6 - Tim Kosse)
Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.71 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden
ICQ 8.2 (build 7138) (HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\ICQ) (Version: 8.2.7138.0 - ICQ)
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3005 - Packard Bell)
Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.670 - Oracle)
Java 7 Update 71 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417071FF}) (Version: 7.0.710 - Oracle)
Jewel Match 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden
Lightshot-5.1.4.41 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.1.4.41 - Skillbrains)
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.3008 - Packard Bell)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.236 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.236 - LogMeIn, Inc.) Hidden
Magic Academy (x32 Version: 2.2.0.98 - WildTangent) Hidden
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.141.11 - McAfee, Inc.)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Minecraft Packages (HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\Minecraft Packages) (Version:  - ) <==== ATTENTION
Mine-imator version 1.0.0 DEMO 5 (HKLM-x32\...\{AAA406D7-4C55-469A-86CC-241B2FA06D12}_is1) (Version: 1.0.0 DEMO 5 - David Norgren)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 32.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 32.0.3 (x86 de)) (Version: 32.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{4CA8F973-6377-4ABF-9ED5-CC2323B3C000}) (Version: 12.5.00500 - Nero AG)
Norton Internet Security (HKLM-x32\...\NIS) (Version: 21.6.0.32 - Symantec Corporation)
Norton Online Backup (HKLM-x32\...\{C6173775-C676-4E2A-9232-66E17261E614}) (Version: 2.9.0.19 - Symantec Corporation)
Norton Online Backup (x32 Version: 4.4.1.11 - Symantec Corporation) Hidden
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.4 - Notepad++ Team)
OEM Application Profile (HKLM-x32\...\{276FD4A2-030F-8A24-7DFE-9B1384131BCD}) (Version: 1.00.0000 - Ihr Firmenname)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
Packard Bell Device Fast-lane (HKLM\...\{3F62D2FD-13C1-49A2-8B5D-47623D9460D7}) (Version: 1.00.3013 - Packard Bell)
Packard Bell Games (HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\Pokki_c3e2005ede46d0c9848c79a4f19e87561ed8d0aa) (Version: 1.1.7.42206 - Pokki)
Packard Bell Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.3005 - Packard Bell)
Packard Bell Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3013 - Packard Bell)
Packard Bell Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3016 - Packard Bell)
paint.net (HKLM\...\{F509C1F4-0029-49F9-B145-A4C4E8DF481A}) (Version: 4.0.3 - dotPDN LLC)
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.)
PennyBeeUpdate (HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\PennyBee) (Version: 1.0.5.0 - PennyBeeUpdate) <==== ATTENTION
Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
QCA CardReader Driver Installer (HKLM-x32\...\{4E0BC999-655B-421D-87F3-640C6F2BFC11}) (Version: 1.0.1.34 - Qualcomm Inc.)
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.226 - Qualcomm Atheros Communications)
Qualcomm Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.13 - Qualcomm Atheros Communications Inc.)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 11.53 - Qualcomm Atheros)
Razer Game Booster (HKLM-x32\...\Razer Game Booster_is1) (Version: 4.0.68.0 - Razer Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6865 - Realtek Semiconductor Corp.)
SA-MP Colorpicker 1.1.0 (HKLM-x32\...\SA-MP Colorpicker) (Version: 1.1.0 - GTAvision.com)
Skype™ 6.22 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.22.105 - Skype Technologies S.A.)
Spielkanäle (HKLM-x32\...\WildTangentGameProvider-packardbell-genres) (Version: 8.1.0.17 - WildTangent, Inc.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Tales of Lagoona (x32 Version: 2.2.0.110 - WildTangent) Hidden
TeamSpeak 3 Client (HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.221 - TuneUp Software) Hidden
TuneUp Utilities 2014 (HKLM-x32\...\TuneUp Utilities) (Version: 14.0.1000.221 - TuneUp Software)
TuneUp Utilities 2014 (x32 Version: 14.0.1000.221 - TuneUp Software) Hidden
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Vegas Pro 13.0 (64-bit) (HKLM\...\{CE92F061-BFBC-11E3-8FF3-F04DA23A5C58}) (Version: 13.0.290 - Sony)
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)
WildTangent Games App (x32 Version: 4.0.11.14 - WildTangent) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
WinRAR 5.10 beta 4 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.4 - win.rar GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

21-11-2014 16:08:46 Windows Update
25-11-2014 12:31:32 Windows Update
28-11-2014 18:28:16 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2012-07-26 05:26 - 2014-09-26 17:27 - 00000986 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0C9C7584-2F0A-45C5-8042-C09DBB795048} - System32\Tasks\update-S-1-5-21-1444305084-1481242938-3084423498-1001 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-03-25] ()
Task: {19809562-05AC-4B6C-95CE-87D736A754E0} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe [2013-12-18] (TuneUp Software)
Task: {2571804A-CE4E-4DF3-9847-B865E5744A6D} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\WSCStub.exe [2014-09-21] (Symantec Corporation)
Task: {31A9915E-EA87-4841-A3EF-7A67A61BEFA8} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-05-20] (Piriform Ltd)
Task: {44786C93-5644-46E8-8E74-1CB49F9964F5} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-27] (Adobe Systems Incorporated)
Task: {4ACFEFCD-7719-47EB-8275-E95B49BDC530} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-03-25] ()
Task: {63258523-71B1-4737-8DB2-FAA322AA1E5B} - \PC Speed Maximizer Schedule No Task File <==== ATTENTION
Task: {67847EFA-DE54-4195-A4C7-F6C822765A2C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-20] (Google Inc.)
Task: {7AD0A9AD-21DD-49D3-8BE9-6E1E55EC097C} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-11-21] (Microsoft Corporation)
Task: {7E33E5E2-63C7-4D1D-8ABA-B6B3B6671097} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-20] (Google Inc.)
Task: {7EF87465-90E6-4616-B384-6A0FECA1FF70} - \UpdaterEX No Task File <==== ATTENTION
Task: {8A4B2E02-BEEC-4D6D-BC17-381FD9C992D0} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Packard Bell\Live Updater\liveupdater_agent.exe [2013-01-22] ()
Task: {90B45641-E68C-4061-8F87-0AA2137E55A8} - System32\Tasks\ALU => C:\Program Files (x86)\Packard Bell\Live Updater\updater.exe [2013-02-22] ()
Task: {9D32F6D9-6E61-4C5A-B4E4-C19013021C6C} - System32\Tasks\Power Management => C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [2013-03-15] (Acer Incorporated)
Task: {B8CAB970-822D-4554-A6AF-FBE48DB2F695} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {CB032C39-AA99-4975-A982-16732589A35C} - System32\Tasks\Launch Manager => C:\Program Files\Packard Bell\Packard Bell Launch Manager\LMLauncher.exe [2013-06-17] (Acer Incorporate)
Task: {DEBB4E65-31D2-4D9B-94FA-5E3B19F44C7E} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\update-S-1-5-21-1444305084-1481242938-3084423498-1001.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\WINDOWS\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

==================== Loaded Modules (whitelisted) =============

2013-12-18 09:01 - 2013-12-18 09:01 - 00742200 _____ () C:\Program Files (x86)\TuneUp Utilities 2014\avgrepliba.dll
2014-09-26 13:41 - 2014-09-26 13:41 - 01021088 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
2013-04-24 14:09 - 2013-04-24 14:09 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-04-24 14:07 - 2013-04-24 14:07 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll
2014-10-12 10:14 - 2014-10-12 10:14 - 00338432 _____ () C:\Users\Pk\AppData\Local\PennyBee\PennyBeeW.exe
2013-04-24 14:12 - 2013-04-24 14:12 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
2014-10-16 09:15 - 2014-10-16 09:15 - 00035328 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2014-05-24 16:41 - 2014-05-24 16:41 - 00091648 _____ () C:\Program Files (x86)\FileZilla FTP Client\libgcc_s_sjlj-1.dll
2014-05-24 16:41 - 2014-05-24 16:41 - 00892416 _____ () C:\Program Files (x86)\FileZilla FTP Client\libstdc++-6.dll
2014-05-10 20:03 - 2014-12-01 14:34 - 03715184 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-09-22 16:23 - 2014-09-22 16:23 - 00317960 _____ () C:\Users\Pk\AppData\Local\PennyBee\Resources\ntdis_32.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: GamesAppService => 3
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: Hamachi2Svc => 2
MSCONFIG\Services: LMSvc => 2
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: NAUpdate => 2
MSCONFIG\Services: OverwolfUpdaterService => 3
HKLM\...\StartupApproved\StartupFolder: => "McAfee Security Scan Plus.lnk"
HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui"
HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"
HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "Pokki"
HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "uTorrent"
HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "Overwolf"
HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "EADM"
HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "icq"

========================= Accounts: ==========================

Administrator (S-1-5-21-1444305084-1481242938-3084423498-500 - Administrator - Disabled)
Gast (S-1-5-21-1444305084-1481242938-3084423498-501 - Limited - Enabled)
Hbib (S-1-5-21-1444305084-1481242938-3084423498-1001 - Administrator - Enabled) => C:\Users\Pk
issam_000 (S-1-5-21-1444305084-1481242938-3084423498-1004 - Limited - Enabled) => C:\Users\issam_000
ouali_000 (S-1-5-21-1444305084-1481242938-3084423498-1005 - Limited - Enabled) => C:\Users\ouali_000

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (12/01/2014 02:34:11 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: WmiApRplC:\WINDOWS\system32\wbem\wmiaprpl.dll4

Error: (12/01/2014 02:34:09 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: rdyboost4

Error: (12/01/2014 02:34:09 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: 

Error: (12/01/2014 02:34:08 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: MSDTCC:\WINDOWS\system32\msdtcuiu.DLL4

Error: (12/01/2014 02:34:08 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: LsaC:\Windows\System32\Secur32.dll4

Error: (12/01/2014 02:34:08 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: ESENTC:\WINDOWS\system32\esentprf.dll4

Error: (12/01/2014 02:34:08 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: BITSC:\Windows\System32\bitsperf.dll4

Error: (11/30/2014 03:23:41 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: WmiApRplC:\WINDOWS\system32\wbem\wmiaprpl.dll4

Error: (11/30/2014 03:23:40 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: rdyboost4

Error: (11/30/2014 03:23:40 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: 


System errors:
=============
Error: (12/01/2014 02:30:41 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "LogMeIn Hamachi Tunneling Engine" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (12/01/2014 02:30:41 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst LogMeIn Hamachi Tunneling Engine erreicht.

Error: (12/01/2014 02:29:36 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AppEx Networks Accelerator LWF" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%31

Error: (12/01/2014 02:29:36 PM) (Source: APXACC) (EventID: 1003) (User: )
Description: The NDIS6 LWF initialization has failed. (0xC0000001)

Error: (12/01/2014 02:28:23 PM) (Source: Microsoft-Windows-HAL) (EventID: 13) (User: NT-AUTORITÄT)
Description: Der Systemüberwachungszeitgeber wurde ausgelöst.

Error: (12/01/2014 02:29:31 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎30.‎11.‎2014 um 22:32:04 unerwartet heruntergefahren.

Error: (11/28/2014 10:30:03 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073712 fehlgeschlagen: Update für Windows 8.1 für x64-Systeme (KB2962409)

Error: (11/28/2014 08:43:05 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073712 fehlgeschlagen: Update für Windows 8.1 für x64-Systeme (KB2962409)

Error: (11/28/2014 08:18:51 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073712 fehlgeschlagen: Update für Windows 8.1 für x64-Systeme (KB2962409)

Error: (11/28/2014 08:08:00 PM) (Source: DCOM) (EventID: 10010) (User: Wohnzimmer-PC)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}


Microsoft Office Sessions:
=========================
Error: (12/01/2014 02:34:11 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: WmiApRplC:\WINDOWS\system32\wbem\wmiaprpl.dll4

Error: (12/01/2014 02:34:09 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: rdyboost4

Error: (12/01/2014 02:34:09 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: 

Error: (12/01/2014 02:34:08 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: MSDTCC:\WINDOWS\system32\msdtcuiu.DLL4

Error: (12/01/2014 02:34:08 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: LsaC:\Windows\System32\Secur32.dll4

Error: (12/01/2014 02:34:08 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: ESENTC:\WINDOWS\system32\esentprf.dll4

Error: (12/01/2014 02:34:08 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: BITSC:\Windows\System32\bitsperf.dll4

Error: (11/30/2014 03:23:41 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: WmiApRplC:\WINDOWS\system32\wbem\wmiaprpl.dll4

Error: (11/30/2014 03:23:40 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: rdyboost4

Error: (11/30/2014 03:23:40 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: 


==================== Memory info =========================== 

Processor: AMD E1-2500 APU with Radeon(TM) HD Graphics 
Percentage of memory in use: 82%
Total physical RAM: 1477.01 MB
Available physical RAM: 251.4 MB
Total Pagefile: 4549.01 MB
Available Pagefile: 2930.34 MB
Total Virtual: 131072 MB
Available Virtual: 131071.8 MB

==================== Drives ================================

Drive c: (Packard Bell) (Fixed) (Total:282.58 GB) (Free:196.95 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 298.1 GB) (Disk ID: EA4C7CA5)

Partition: GPT Partition Type.

==================== End Of Log ============================