Hallo Leute,
hab das Problem mit dem Notebook, dass dieser in letzter Zeit sehr langsam läuft.Norton zeigte mir auch an, dass dieser Pc Malware hat.

MfG

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-12-2014
Ran by Hbib (administrator) on WOHNZIMMER-PC on 01-12-2014 14:42:22
Running from C:\Users\Pk\Pictures
Loaded Profile: Hbib (Available profiles: Hbib & issam_000 & ouali_000)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\nis.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\nis.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Users\Pk\AppData\Local\PennyBee\PennyBeeW.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe
(Skillbrains) C:\Users\Pk\AppData\Local\Skillbrains\lightshot\5.1.4.41\Lightshot.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_239.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_239.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17246_none_fa4ae8e99b1f603c\TiWorker.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2890056 2013-05-22] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13427784 2013-03-18] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2014-09-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642816 2013-06-13] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3802448 2014-09-04] (LogMeIn Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2694320 2014-10-01] (Adobe Systems Incorporated)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-04-24] ( (Atheros Communications))
HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\Run: [LightShot] => C:\Users\Pk\AppData\Local\Skillbrains\lightshot\Lightshot.exe [226560 2014-06-18] ()
HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\Run: [icq] => C:\Users\Pk\AppData\Roaming\ICQM\icq.exe [35239432 2014-11-02] (ICQ)
HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\Run: [PennyBee] => C:\Users\Pk\AppData\Local\PennyBee\PennyBeeW.exe [338432 2014-10-12] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (McAfee, Inc.)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.trovi.com/?gd=&ctid=ct3314958&octid=eb_original_ctid&isid=m76ed4c76-afdf-4830-a42e-55c9714d3458&searchsource=55&cui=&um=5&up=sp03a61366-08c2-45e6-8454-e65300ed54d6&sspv=
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKLM-x32 -> DefaultScope value is missing.
SearchScopes: HKU\S-1-5-21-1444305084-1481242938-3084423498-1001 -> {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = hxxp://nortonsafe.search.ask.com/web?q={SEARCHTERMS}&o=APN10506&l=dis&prt=NIS&chn=retail&geo=DE&ver=21&locale=de_DE&gct=kwd&qsrc=2869
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine64\21.6.0.32\coIEPlg.dll (Symantec Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\coIEPlg.dll (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.6.0.32\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\coIEPlg.dll (Symantec Corporation)
Toolbar: HKU\S-1-5-21-1444305084-1481242938-3084423498-1001 -> Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.6.0.32\coIEPlg.dll (Symantec Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Pk\AppData\Roaming\Mozilla\Firefox\Profiles\yqrfhnfq.default
FF NewTab: hxxp://www.trovi.com/?gd=&ctid=CT3314958&octid=EB_ORIGINAL_CTID&ISID=M76ED4C76-AFDF-4830-A42E-55C9714D3458&SearchSource=69&CUI=&SSPV=&Lay=1&UM=5&UP=SP03A61366-08C2-45E6-8454-E65300ED54D6
FF DefaultSearchEngine: Trovi search
FF SelectedSearchEngine: Trovi search
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_15_0_0_239.dll ()
FF Plugin: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_239.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin -> C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKU\S-1-5-21-1444305084-1481242938-3084423498-1001: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Users\Pk\AppData\Roaming\Mozilla\Firefox\Profiles\yqrfhnfq.default\searchplugins\trovi-search.xml
FF Extension: MEGA - C:\Users\Pk\AppData\Roaming\Mozilla\Firefox\Profiles\yqrfhnfq.default\Extensions\firefox@mega.co.nz.xpi [2014-09-27]
FF Extension: Adblock Plus - C:\Users\Pk\AppData\Roaming\Mozilla\Firefox\Profiles\yqrfhnfq.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-02-01]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn [2014-12-01]

Chrome: 
=======
CHR Profile: C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-05-20]
CHR Extension: (Google Drive) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-20]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-20]
CHR Extension: (YouTube) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-20]
CHR Extension: (Adblock Plus) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-11-04]
CHR Extension: (Google-Suche) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-20]
CHR Extension: (Google Wallet) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-20]
CHR Extension: (Google Mail) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-20]
CHR HKLM\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\Exts\Chrome.crx [2014-10-04]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\Exts\Chrome.crx [2014-10-04]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [310400 2013-04-24] (Windows (R) Win 7 DDK provider)
S3 DeviceFastLaneService; C:\Program Files\Packard Bell\Packard Bell Device Fast-lane\DeviceFastLaneSvc.exe [470056 2013-04-30] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [662088 2013-03-15] (Acer Incorporated)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-04-24] (WildTangent)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-08-08] (LogMeIn, Inc.)
S4 LMSvc; C:\Program Files\Packard Bell\Packard Bell Launch Manager\LMSvc.exe [431656 2013-06-17] (Acer Incorporate)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\NIS.exe [276376 2014-09-21] (Symantec Corporation)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4343664 2014-04-09] (Symantec Corporation)
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [106472 2013-09-18] (Razer Inc.)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2103096 2013-12-18] (TuneUp Software)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [219360 2013-04-18] (AppEx Networks Corporation)
R3 AthrSdSrv; C:\Windows\system32\DRIVERS\athrsd.sys [48760 2012-11-30] (Qualcomm Atheros, Inc.)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [98744 2013-04-23] (Advanced Micro Devices)
R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20141118.001\BHDrvx64.sys [1587416 2014-10-03] (Symantec Corporation)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-04-24] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-09-24] (Microsoft Corporation)
S3 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0404010.00B\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1506000.020\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2014-09-14] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2014-09-14] (Symantec Corporation)
S3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [46136 2014-09-04] (LogMeIn Inc.)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20141128.001\IDSvia64.sys [637656 2014-11-19] (Symantec Corporation)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-01-10] (Acer Incorporated)
S3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20141129.002\ENG64.SYS [129752 2014-09-14] (Symantec Corporation)
S3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20141129.002\EX64.SYS [2137304 2014-09-14] (Symantec Corporation)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [15704 2013-01-10] (Acer Incorporated)
S3 SRTSP; C:\Windows\System32\Drivers\NISx64\1506000.020\SRTSP64.SYS [876248 2014-08-26] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1506000.020\SRTSPX64.SYS [37592 2014-08-26] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1506000.020\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1506000.020\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NISx64\1506000.020\SymELAM.sys [23568 2013-09-10] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-03-22] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1506000.020\Ironx64.SYS [266968 2014-08-06] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1506000.020\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-12-16] (TuneUp Software)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
S3 AtiDCM; \??\C:\AMD\WU-CCC2\ccc2_install\Support64\atdcm64a.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-01 14:41 - 2014-12-01 14:43 - 00000000 ____D () C:\FRST
2014-11-27 19:12 - 2014-11-27 19:15 - 00000646 _____ () C:\WINDOWS\setupact.log
2014-11-27 19:12 - 2014-11-27 19:12 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-11-27 17:27 - 2014-11-27 17:27 - 04443312 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe
2014-11-27 17:10 - 2014-11-27 17:44 - 3268147200 _____ () C:\Users\Pk\Desktop\X17-59885.iso
2014-11-25 14:35 - 2014-11-25 14:36 - 00000000 ____D () C:\Users\Pk\Desktop\worldsurvival
2014-11-25 14:33 - 2014-11-25 14:33 - 00000000 ____D () C:\Users\Pk\Desktop\world
2014-11-25 14:24 - 2014-11-25 14:25 - 00525638 _____ () C:\Users\Pk\Desktop\Alpine  Summer Hub.zip
2014-11-25 13:59 - 2014-11-25 14:02 - 09296123 _____ () C:\Users\Pk\Desktop\Minecraft Spawn Hub Map.zip
2014-11-25 12:51 - 2014-11-25 12:51 - 00009949 _____ () C:\Users\Pk\Desktop\ChatManagerPlus.jar
2014-11-23 12:28 - 2014-11-23 12:29 - 00026812 _____ () C:\Users\Pk\Desktop\CTag.jar
2014-11-23 12:06 - 2014-11-23 12:20 - 00053565 _____ () C:\Users\Pk\Desktop\ColoredTags.jar
2014-11-23 10:32 - 2014-11-23 10:32 - 00722782 _____ () C:\Users\Pk\Desktop\PermissionsEx.jar
2014-11-23 10:05 - 2014-11-23 10:05 - 00959115 _____ () C:\Users\Pk\Desktop\Citizens.jar
2014-11-22 18:40 - 2014-11-22 18:40 - 00000000 ____D () C:\Users\Pk\AppData\Local\ICSharpCode.net
2014-11-22 18:39 - 2014-11-30 18:09 - 00000000 ____D () C:\Users\Pk\AppData\Local\PennyBee
2014-11-22 18:39 - 2014-11-22 18:39 - 00002028 _____ () C:\Users\Pk\Desktop\FileZilla Client.lnk
2014-11-22 18:39 - 2014-11-22 18:39 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\PennyBee
2014-11-22 18:39 - 2014-11-22 18:39 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2014-11-22 18:38 - 2014-11-22 18:38 - 06126536 _____ (Tim Kosse) C:\Users\Pk\Downloads\FileZilla_3.9.0.6_win32-setup [1].exe
2014-11-22 18:38 - 2014-11-22 18:38 - 00789864 _____ ( ) C:\Users\Pk\Downloads\FileZilla_3.9.0.6_win32-setup.exe
2014-11-22 10:00 - 2014-11-20 20:51 - 00714208 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-11-22 10:00 - 2014-11-20 20:51 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-22 09:51 - 2014-11-22 10:01 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-11-21 15:54 - 2014-11-28 16:13 - 00000000 ____D () C:\Users\Pk\Desktop\Rest-Müll
2014-11-21 14:35 - 2014-11-21 14:36 - 92658088 _____ (Oracle Corporation) C:\Users\Pk\Downloads\jre-8u25-windows-x64.exe
2014-11-19 16:07 - 2014-11-09 23:19 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-11-19 16:07 - 2014-11-09 23:19 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2014-11-19 16:07 - 2014-11-09 23:18 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2014-11-19 16:07 - 2014-11-09 23:18 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2014-11-15 17:59 - 2014-12-01 14:28 - 00005848 _____ () C:\WINDOWS\PFRO.log
2014-11-14 15:51 - 2014-11-14 15:51 - 00000000 ____D () C:\Users\Pk\AppData\Local\Skype
2014-11-14 15:50 - 2014-11-14 15:50 - 00002533 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-11-14 15:50 - 2014-11-14 15:50 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-11-14 15:50 - 2014-11-14 15:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-11-14 15:48 - 2014-11-14 15:49 - 01546856 _____ (Skype Technologies S.A.) C:\Users\Pk\Downloads\SkypeSetup.exe
2014-11-12 19:47 - 2014-11-12 19:49 - 00006038 _____ () C:\WINDOWS\system32\--traceoff
2014-11-12 19:47 - 2014-11-12 19:47 - 00000000 _____ () C:\WINDOWS\system32\--debugoff
2014-11-12 19:46 - 2014-11-12 19:49 - 00000000 ____D () C:\Users\Pk\AppData\Local\Sony
2014-11-12 19:46 - 2014-11-12 19:46 - 00000000 ____D () C:\ProgramData\Sony
2014-11-12 19:46 - 2014-11-12 19:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2014-11-12 19:46 - 2014-11-12 19:46 - 00000000 ____D () C:\Program Files\Sony
2014-11-12 19:46 - 2014-11-12 19:46 - 00000000 ____D () C:\Program Files (x86)\Sony
2014-11-12 19:43 - 2014-11-30 18:58 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Sony
2014-11-12 18:55 - 2014-11-12 19:30 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Mine_imator
2014-11-12 18:54 - 2014-11-30 18:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mine-imator
2014-11-12 18:54 - 2014-11-12 18:56 - 00000000 ____D () C:\Users\Pk\Mine-imator
2014-11-12 18:54 - 2014-11-12 18:54 - 08800436 _____ (David Norgren ) C:\Users\Pk\Downloads\Mine-imator installer 1.0.0 DEMO 5.exe
2014-11-11 19:09 - 2014-09-22 04:38 - 01519488 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2014-11-11 19:08 - 2014-09-22 03:06 - 00258368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-11-11 19:08 - 2014-09-22 03:06 - 00114496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-11-11 19:08 - 2014-09-22 02:49 - 00035320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-11-11 19:08 - 2014-09-19 00:16 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2014-11-11 19:08 - 2014-09-02 22:08 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll
2014-11-11 19:08 - 2014-09-02 22:08 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll
2014-11-11 19:07 - 2014-10-13 02:33 - 00116032 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2014-11-11 19:07 - 2014-10-11 00:58 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2014-11-11 19:07 - 2014-10-11 00:53 - 03607040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2014-11-11 19:07 - 2014-10-08 07:30 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2014-11-11 19:07 - 2014-10-08 07:09 - 00428032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll
2014-11-11 19:07 - 2014-10-08 06:27 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll
2014-11-11 19:07 - 2014-10-08 05:32 - 02773504 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-11-11 19:07 - 2014-10-08 05:19 - 02459136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-11-11 19:07 - 2014-09-27 07:13 - 00104336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2014-11-11 19:07 - 2014-09-27 05:24 - 00088800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2014-11-11 19:07 - 2014-09-27 03:38 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2014-11-11 19:07 - 2014-09-27 03:30 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2014-11-11 19:07 - 2014-09-27 03:17 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2014-11-11 19:06 - 2014-10-10 01:58 - 00177472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-11-11 19:06 - 2014-10-10 01:58 - 00027456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys
2014-11-11 19:06 - 2014-10-10 01:44 - 00563976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-11-11 19:06 - 2014-10-08 07:37 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-11-11 19:06 - 2014-10-08 07:37 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll
2014-11-11 19:06 - 2014-10-08 07:34 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2014-11-11 19:06 - 2014-10-08 07:24 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll
2014-11-11 19:06 - 2014-10-08 06:56 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2014-11-11 19:06 - 2014-10-08 06:51 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-11-11 19:06 - 2014-10-08 06:51 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll
2014-11-11 19:06 - 2014-10-08 06:18 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2014-11-11 19:06 - 2014-10-08 06:17 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-11-11 19:06 - 2014-10-08 05:23 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-11-11 19:00 - 2014-10-18 09:55 - 00055776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-11-11 19:00 - 2014-10-18 08:09 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-11-11 19:00 - 2014-10-18 08:09 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2014-11-11 19:00 - 2014-10-18 07:25 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2014-11-11 19:00 - 2014-10-18 06:50 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll
2014-11-11 19:00 - 2014-10-18 06:38 - 03557376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-11-11 19:00 - 2014-10-18 06:27 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2014-11-11 19:00 - 2014-10-18 06:26 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2014-11-11 19:00 - 2014-10-18 06:23 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-11-11 19:00 - 2014-10-18 06:23 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-11-11 19:00 - 2014-10-18 06:21 - 00894976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-11-11 19:00 - 2014-10-18 06:20 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-11-11 19:00 - 2014-10-18 06:14 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2014-11-11 19:00 - 2014-10-18 06:14 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2014-11-11 19:00 - 2014-10-18 06:12 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-11-11 19:00 - 2014-10-18 06:11 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-11-11 18:49 - 2014-10-31 05:28 - 25110016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-11-11 18:49 - 2014-10-31 03:42 - 19781632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-11-11 18:43 - 2014-10-31 03:59 - 14390272 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-11-11 18:42 - 2014-10-31 02:30 - 12819456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-11-11 18:41 - 2014-10-31 05:06 - 00580096 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-11-11 18:41 - 2014-10-31 05:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-11-11 18:41 - 2014-10-31 05:05 - 02884096 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-11-11 18:41 - 2014-10-31 04:53 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2014-11-11 18:41 - 2014-10-31 04:52 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2014-11-11 18:41 - 2014-10-31 04:51 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2014-11-11 18:41 - 2014-10-31 04:51 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-11-11 18:41 - 2014-10-31 04:51 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-11-11 18:41 - 2014-10-31 04:50 - 06040064 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-11-11 18:41 - 2014-10-31 04:50 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-11-11 18:41 - 2014-10-31 04:38 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-11-11 18:41 - 2014-10-31 04:29 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2014-11-11 18:41 - 2014-10-31 04:25 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-11-11 18:41 - 2014-10-31 04:23 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2014-11-11 18:41 - 2014-10-31 04:21 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-11-11 18:41 - 2014-10-31 04:15 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2014-11-11 18:41 - 2014-10-31 04:08 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2014-11-11 18:41 - 2014-10-31 04:06 - 00372736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-11-11 18:41 - 2014-10-31 04:05 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-11-11 18:41 - 2014-10-31 04:05 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-11-11 18:41 - 2014-10-31 04:03 - 02124288 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-11-11 18:41 - 2014-10-31 03:45 - 02365440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-11-11 18:41 - 2014-10-31 03:44 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-11-11 18:41 - 2014-10-31 03:32 - 01550336 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-11-11 18:41 - 2014-10-31 03:24 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-11-11 18:41 - 2014-10-31 03:23 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2014-11-11 18:41 - 2014-10-31 03:20 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-11-11 18:41 - 2014-10-31 03:18 - 02277376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-11-11 18:41 - 2014-10-31 03:13 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2014-11-11 18:41 - 2014-10-31 03:13 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2014-11-11 18:41 - 2014-10-31 03:12 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2014-11-11 18:41 - 2014-10-31 03:11 - 00620032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-11-11 18:41 - 2014-10-31 03:02 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-11-11 18:41 - 2014-10-31 02:53 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-11-11 18:41 - 2014-10-31 02:50 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-11-11 18:41 - 2014-10-31 02:46 - 04298240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-11-11 18:41 - 2014-10-31 02:46 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2014-11-11 18:41 - 2014-10-31 02:42 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2014-11-11 18:41 - 2014-10-31 02:40 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-11-11 18:41 - 2014-10-31 02:40 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-11-11 18:41 - 2014-10-31 02:39 - 02051072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-11-11 18:41 - 2014-10-31 02:26 - 01042944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-11-11 18:41 - 2014-10-31 02:17 - 01892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-11-11 18:41 - 2014-10-31 02:13 - 01310208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-11-11 18:41 - 2014-10-31 02:11 - 00708096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-11-11 18:40 - 2014-10-31 05:12 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wextract.exe
2014-11-11 18:40 - 2014-10-31 05:12 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshta.exe
2014-11-11 18:40 - 2014-10-31 05:10 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iexpress.exe
2014-11-11 18:40 - 2014-10-31 05:09 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\pngfilt.dll
2014-11-11 18:40 - 2014-10-31 05:08 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe
2014-11-11 18:40 - 2014-10-31 05:06 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\url.dll
2014-11-11 18:40 - 2014-10-31 05:06 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-11-11 18:40 - 2014-10-31 05:05 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2014-11-11 18:40 - 2014-10-31 05:04 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2014-11-11 18:40 - 2014-10-31 04:57 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-11-11 18:40 - 2014-10-31 04:56 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-11-11 18:40 - 2014-10-31 04:54 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\IEAdvpack.dll
2014-11-11 18:40 - 2014-10-31 04:40 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\licmgr10.dll
2014-11-11 18:40 - 2014-10-31 04:30 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-11-11 18:40 - 2014-10-31 04:29 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2014-11-11 18:40 - 2014-10-31 04:28 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\inseng.dll
2014-11-11 18:40 - 2014-10-31 04:24 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-11-11 18:40 - 2014-10-31 04:24 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll
2014-11-11 18:40 - 2014-10-31 04:19 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\occache.dll
2014-11-11 18:40 - 2014-10-31 03:42 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\imgutil.dll
2014-11-11 18:40 - 2014-10-31 03:28 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wextract.exe
2014-11-11 18:40 - 2014-10-31 03:28 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshta.exe
2014-11-11 18:40 - 2014-10-31 03:27 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iexpress.exe
2014-11-11 18:40 - 2014-10-31 03:26 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pngfilt.dll
2014-11-11 18:40 - 2014-10-31 03:25 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe
2014-11-11 18:40 - 2014-10-31 03:24 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\url.dll
2014-11-11 18:40 - 2014-10-31 03:24 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-11-11 18:40 - 2014-10-31 03:23 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-11-11 18:40 - 2014-10-31 03:22 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2014-11-11 18:40 - 2014-10-31 03:16 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-11-11 18:40 - 2014-10-31 03:15 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-11-11 18:40 - 2014-10-31 03:14 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IEAdvpack.dll
2014-11-11 18:40 - 2014-10-31 03:12 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-11-11 18:40 - 2014-10-31 03:03 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\licmgr10.dll
2014-11-11 18:40 - 2014-10-31 02:57 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-11 18:40 - 2014-10-31 02:56 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inseng.dll
2014-11-11 18:40 - 2014-10-31 02:56 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2014-11-11 18:40 - 2014-10-31 02:56 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2014-11-11 18:40 - 2014-10-31 02:53 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll
2014-11-11 18:40 - 2014-10-31 02:52 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-11-11 18:40 - 2014-10-31 02:51 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2014-11-11 18:40 - 2014-10-31 02:48 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\occache.dll
2014-11-11 18:40 - 2014-10-31 02:24 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imgutil.dll
2014-11-11 18:40 - 2014-10-23 05:48 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\packager.dll
2014-11-11 18:40 - 2014-10-23 05:05 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\packager.dll
2014-11-11 18:40 - 2014-10-17 07:01 - 00789184 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-11-11 18:40 - 2014-10-17 06:58 - 00602768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-11-11 18:40 - 2014-10-07 06:28 - 00500016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-11-11 18:40 - 2014-10-07 06:27 - 00482872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-11-11 18:40 - 2014-10-07 06:27 - 00394120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-11-11 18:40 - 2014-10-07 06:27 - 00272248 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-11-11 18:40 - 2014-10-07 06:27 - 00108432 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2014-11-11 18:40 - 2014-10-07 03:34 - 00370424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-11-11 18:40 - 2014-10-07 03:34 - 00344536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-11-11 18:40 - 2014-10-07 03:33 - 00424544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-11-11 18:40 - 2014-10-07 03:30 - 04182016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-11-11 18:40 - 2014-10-07 01:54 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-11-11 18:40 - 2014-10-07 01:46 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-11-11 18:40 - 2014-08-23 05:18 - 02149376 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-11-11 18:40 - 2014-08-23 05:03 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-11-11 18:39 - 2014-09-10 06:25 - 00474432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2014-11-11 18:39 - 2014-09-08 03:07 - 02497344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-11-11 18:39 - 2014-09-08 03:07 - 00428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-11-11 18:39 - 2014-09-07 22:08 - 00389176 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-11-11 18:39 - 2014-09-04 22:30 - 00822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-11-11 18:39 - 2014-09-04 22:21 - 01053184 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-11-11 18:39 - 2014-09-04 03:05 - 00836176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-11-11 18:39 - 2014-09-04 02:22 - 00670384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-11-11 18:39 - 2014-09-04 01:01 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2014-11-11 18:39 - 2014-09-04 00:32 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2014-11-11 18:39 - 2014-08-31 00:17 - 00148800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-11-11 18:39 - 2014-08-31 00:15 - 21197152 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-11-11 18:39 - 2014-08-30 22:59 - 18723112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-11-11 18:39 - 2014-08-30 22:05 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMEX.dll
2014-11-11 18:39 - 2014-08-30 21:58 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSAPI.dll
2014-11-11 18:39 - 2014-08-30 21:04 - 00941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-11-11 18:39 - 2014-08-30 20:53 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSAPI.dll
2014-11-11 18:39 - 2014-08-30 20:17 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-11-11 18:39 - 2014-08-28 02:55 - 07484224 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-11-11 18:39 - 2014-08-28 00:21 - 02480128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-11-11 18:39 - 2014-08-28 00:06 - 02030592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2014-11-11 18:39 - 2014-08-23 05:14 - 13424128 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-11-11 18:39 - 2014-08-23 05:04 - 11820544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-11-11 18:39 - 2014-08-23 04:50 - 02714112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-11-11 18:39 - 2014-08-02 00:51 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2014-11-11 18:39 - 2014-08-02 00:35 - 00485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2014-11-10 16:30 - 2014-11-10 16:30 - 02332316 _____ () C:\Users\Pk\Downloads\forge-1.5.2-7.8.1.738-installer.jar
2014-11-05 14:42 - 2014-11-05 14:42 - 02936397 _____ () C:\Users\Pk\Downloads\forge-1.7.2-10.12.2.1147-installer (3).jar
2014-11-05 14:40 - 2014-11-05 14:40 - 28917914 _____ () C:\Users\Pk\Downloads\The CraftingFabo Pack V.2.zip
2014-11-05 14:38 - 2014-11-25 18:02 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\.minecraft
2014-11-05 14:35 - 2014-11-05 14:36 - 54655526 _____ () C:\Users\Pk\Downloads\-Quasaro V.5!-.zip
2014-11-02 20:01 - 2014-12-01 14:39 - 00003946 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{51C63146-2830-466D-8742-F26078BC5B00}
2014-11-02 20:01 - 2014-11-02 20:01 - 00000000 __SHD () C:\Users\Pk\AppData\Local\EmieUserList
2014-11-02 20:01 - 2014-11-02 20:01 - 00000000 __SHD () C:\Users\Pk\AppData\Local\EmieSiteList
2014-11-02 13:07 - 2014-08-02 00:18 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2014-11-02 12:08 - 2014-08-15 00:36 - 00146752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys
2014-11-02 11:43 - 2014-07-10 04:08 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\lockscreencn.dll
2014-11-02 11:42 - 2014-07-15 18:16 - 03048880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-11-02 11:42 - 2014-07-15 08:29 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2014-11-02 11:42 - 2014-07-15 08:22 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2014-11-02 11:42 - 2014-07-15 08:03 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2014-11-02 11:38 - 2014-06-09 22:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2014-11-02 11:38 - 2014-06-09 22:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-11-02 11:21 - 2014-08-23 07:48 - 02374784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-11-02 11:21 - 2014-08-23 07:13 - 02084520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2014-11-02 11:21 - 2014-08-23 06:10 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2014-11-02 11:21 - 2014-08-23 05:32 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2014-11-02 11:21 - 2014-08-23 04:33 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-11-02 11:20 - 2014-08-16 04:08 - 01507648 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-11-02 11:20 - 2014-08-16 04:01 - 01710184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-11-02 11:20 - 2014-08-16 03:58 - 01112512 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-11-02 11:20 - 2014-08-16 03:16 - 01205976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-11-02 11:20 - 2014-08-16 03:03 - 01467384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2014-11-02 11:20 - 2014-08-16 01:31 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-11-02 11:20 - 2014-08-16 01:04 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll
2014-11-02 11:20 - 2014-08-16 00:58 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-11-02 11:20 - 2014-08-16 00:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll
2014-11-02 11:20 - 2014-08-16 00:46 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll
2014-11-02 11:20 - 2014-08-16 00:45 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-11-02 11:20 - 2014-08-16 00:43 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll
2014-11-02 11:20 - 2014-08-16 00:43 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll
2014-11-02 11:20 - 2014-08-16 00:31 - 00914432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2014-11-02 11:20 - 2014-08-16 00:31 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll
2014-11-02 11:20 - 2014-08-16 00:29 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-11-02 11:20 - 2014-08-16 00:23 - 01106432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-11-02 11:20 - 2014-08-16 00:22 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-11-02 11:20 - 2014-08-16 00:22 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
2014-11-02 11:20 - 2014-08-16 00:19 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-11-02 11:20 - 2014-08-16 00:18 - 04758528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-11-02 11:20 - 2014-08-16 00:17 - 08757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-11-02 11:20 - 2014-08-16 00:14 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll
2014-11-02 11:20 - 2014-08-16 00:13 - 06649344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-11-02 11:20 - 2014-08-16 00:13 - 05902848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-11-02 11:20 - 2014-08-16 00:13 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-11-02 11:20 - 2014-08-16 00:11 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-11-02 11:20 - 2014-08-16 00:10 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-11-02 11:20 - 2014-08-16 00:08 - 05777408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-11-02 11:20 - 2014-08-16 00:07 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-11-02 11:12 - 2014-11-02 11:12 - 00000000 ____D () C:\Users\Pk\voip
2014-11-02 11:04 - 2014-07-24 03:20 - 00875688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll
2014-11-02 11:04 - 2014-07-24 03:20 - 00869544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll
2014-11-02 11:00 - 2014-11-02 11:13 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\ICQ-Profile
2014-11-02 11:00 - 2014-11-02 11:01 - 00001714 _____ () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\ICQ.lnk
2014-11-02 11:00 - 2014-11-02 11:01 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ICQ
2014-11-02 11:00 - 2014-11-02 11:01 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\ICQM
2014-11-02 10:59 - 2014-11-02 10:59 - 35212808 _____ (ICQ) C:\Users\Pk\Downloads\icq_rfrset.exe
2014-11-02 10:57 - 2014-06-02 02:10 - 00423768 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-11-02 10:57 - 2014-05-31 06:27 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys
2014-11-02 10:57 - 2014-05-31 06:26 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys
2014-11-02 10:57 - 2014-05-31 04:01 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe
2014-11-02 10:57 - 2014-05-31 04:01 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
2014-11-02 10:57 - 2014-05-31 04:01 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll
2014-11-02 10:57 - 2014-05-27 09:56 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll
2014-11-02 10:57 - 2014-05-27 09:53 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll
2014-11-02 10:54 - 2014-07-12 04:17 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-11-02 10:52 - 2014-12-01 14:29 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-11-02 10:52 - 2014-11-27 17:28 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-11-02 10:35 - 2014-11-27 20:33 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Skype
2014-11-02 10:34 - 2014-11-14 15:51 - 00000000 ____D () C:\ProgramData\Skype
2014-11-02 10:21 - 2014-11-02 10:22 - 30742784 _____ (Skype Technologies S.A.) C:\Users\Pk\Downloads\Skype_v6.1.0.129.exe
2014-11-01 14:19 - 2014-11-01 14:19 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Norton Internet Security
2014-11-01 14:15 - 2014-11-01 14:15 - 00001466 _____ () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-11-01 14:13 - 2014-11-01 14:13 - 00000020 ___SH () C:\Users\Pk\ntuser.ini
2014-11-01 14:10 - 2014-12-01 14:39 - 01821657 _____ () C:\WINDOWS\WindowsUpdate.log
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-11-01 14:08 - 2014-11-01 14:08 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-11-01 13:47 - 2014-11-01 13:47 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-11-01 13:47 - 2014-11-01 13:47 - 00000000 ____D () C:\Users\Default\AppData\Local\Pokki
2014-11-01 13:47 - 2014-11-01 13:47 - 00000000 ____D () C:\Users\Default User\AppData\Local\Pokki
2014-11-01 13:39 - 2014-11-01 13:39 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-11-01 13:35 - 2014-12-01 14:29 - 00000000 ____D () C:\Users\Pk
2014-11-01 13:35 - 2014-11-01 14:09 - 00036198 _____ () C:\WINDOWS\diagwrn.xml
2014-11-01 13:35 - 2014-11-01 14:09 - 00036198 _____ () C:\WINDOWS\diagerr.xml
2014-11-01 13:35 - 2014-11-01 14:02 - 00000000 ____D () C:\Users\issam_000
2014-11-01 13:35 - 2014-11-01 14:01 - 00000000 ____D () C:\Users\ouali_000
2014-11-01 13:35 - 2014-11-01 13:38 - 00000000 ___RD () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-01 13:35 - 2014-11-01 13:38 - 00000000 ___RD () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-11-01 13:35 - 2014-11-01 13:37 - 00000000 ___RD () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-01 13:35 - 2014-11-01 13:37 - 00000000 ___RD () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-11-01 13:35 - 2014-11-01 13:37 - 00000000 ___RD () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-01 13:35 - 2014-11-01 13:37 - 00000000 ___RD () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\Vorlagen
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\Startmenü
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\Netzwerkumgebung
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\Lokale Einstellungen
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\Eigene Dateien
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\Druckumgebung
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\Documents\Eigene Musik
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\Documents\Eigene Bilder
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\AppData\Local\Verlauf
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\AppData\Local\Anwendungsdaten
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\Anwendungsdaten
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\Vorlagen
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\Startmenü
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\Netzwerkumgebung
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\Lokale Einstellungen
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\Eigene Dateien
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\Druckumgebung
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\Documents\Eigene Musik
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\Documents\Eigene Bilder
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\AppData\Local\Verlauf
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\AppData\Local\Anwendungsdaten
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\Anwendungsdaten
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\Vorlagen
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\Startmenü
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\Netzwerkumgebung
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\Lokale Einstellungen
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\Eigene Dateien
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\Druckumgebung
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\Documents\Eigene Musik
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\Documents\Eigene Bilder
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\AppData\Local\Verlauf
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\AppData\Local\Anwendungsdaten
2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\Anwendungsdaten
2014-11-01 13:35 - 2014-09-24 06:18 - 00000369 _____ () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-11-01 13:35 - 2014-09-24 06:18 - 00000369 _____ () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-11-01 13:35 - 2014-09-24 06:18 - 00000369 _____ () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-11-01 13:35 - 2014-09-24 06:18 - 00000369 _____ () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-11-01 13:35 - 2014-09-24 06:18 - 00000369 _____ () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-11-01 13:35 - 2014-09-24 06:18 - 00000369 _____ () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-11-01 13:35 - 2013-08-22 15:36 - 00000000 ___RD () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-01 13:35 - 2013-08-22 15:36 - 00000000 ___RD () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-01 13:35 - 2013-08-22 15:36 - 00000000 ___RD () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-01 13:35 - 2013-08-22 15:36 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-11-01 13:35 - 2013-08-22 15:36 - 00000000 ____D () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-11-01 13:35 - 2013-08-22 15:36 - 00000000 ____D () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-11-01 13:23 - 2014-11-01 13:23 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2014-11-01 13:23 - 2014-11-01 13:23 - 00000000 ____D () C:\Program Files\Realtek
2014-11-01 13:22 - 2014-11-01 13:22 - 00000000 ____D () C:\Program Files\Elantech
2014-11-01 13:22 - 2014-11-01 13:22 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2014-11-01 13:22 - 2014-11-01 13:22 - 00000000 ____D () C:\Program Files\AMD
2014-11-01 13:22 - 2014-11-01 13:22 - 00000000 _____ () C:\WINDOWS\system32\spu_storage.bin
2014-11-01 13:22 - 2014-11-01 13:22 - 00000000 _____ () C:\WINDOWS\ativpsrm.bin
2014-11-01 12:18 - 2014-11-04 15:48 - 00000000 ___DC () C:\WINDOWS\Panther
2014-11-01 12:18 - 2014-11-01 13:28 - 00000000 __SHD () C:\Recovery
2014-11-01 12:15 - 2014-11-17 17:14 - 00000000 ____D () C:\Windows.old
2014-11-01 12:15 - 2014-11-01 12:15 - 00921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-11-01 12:15 - 2014-11-01 12:15 - 00626688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-11-01 12:15 - 2014-11-01 12:15 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-11-01 12:15 - 2014-11-01 12:15 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\BulkOperationHost.exe
2014-11-01 12:11 - 2014-11-01 12:11 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2014-11-01 12:11 - 2014-11-01 12:11 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2014-11-01 12:09 - 2014-11-01 12:09 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-11-01 12:05 - 2014-11-01 12:05 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer
2014-11-01 12:05 - 2014-11-01 12:05 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-11-01 12:05 - 2014-11-01 12:05 - 00000000 ____D () C:\Program Files\MSBuild
2014-11-01 12:05 - 2014-11-01 12:05 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-11-01 12:05 - 2014-11-01 12:05 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-11-01 12:03 - 2013-08-03 04:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2014-11-01 12:03 - 2013-08-03 04:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-11-01 12:03 - 2013-08-03 04:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2014-11-01 12:03 - 2013-08-03 04:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-01 14:36 - 2013-11-23 14:53 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1444305084-1481242938-3084423498-1001
2014-12-01 14:34 - 2014-05-10 20:03 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-12-01 14:34 - 2013-11-23 15:34 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-12-01 14:33 - 2013-09-15 12:20 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-12-01 14:32 - 2014-05-20 14:36 - 00001142 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-01 14:30 - 2013-08-22 13:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-12-01 14:29 - 2013-08-22 14:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-11-30 22:04 - 2012-07-26 07:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-11-30 22:02 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-11-30 22:00 - 2014-05-20 14:36 - 00001146 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-30 21:15 - 2014-10-01 15:56 - 00000414 _____ () C:\WINDOWS\Tasks\update-sys.job
2014-11-30 20:37 - 2014-10-01 15:56 - 00000414 _____ () C:\WINDOWS\Tasks\update-S-1-5-21-1444305084-1481242938-3084423498-1001.job
2014-11-30 15:22 - 2013-11-29 17:33 - 00000000 ____D () C:\Users\Pk\AppData\Local\Adobe
2014-11-28 22:33 - 2013-11-30 16:17 - 00000000 ____D () C:\Users\Pk\AppData\Local\CrashDumps
2014-11-28 19:32 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-11-28 17:55 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-11-27 19:16 - 2014-09-24 06:17 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-11-27 19:16 - 2014-09-24 05:43 - 00765582 _____ () C:\WINDOWS\system32\perfh007.dat
2014-11-27 19:16 - 2014-09-24 05:43 - 00159366 _____ () C:\WINDOWS\system32\perfc007.dat
2014-11-27 18:03 - 2014-05-20 14:38 - 00002207 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-11-27 17:44 - 2013-12-18 18:29 - 00000215 _____ () C:\Users\Pk\AppData\Roaming\WB.CFG
2014-11-25 18:06 - 2013-08-22 11:22 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2014-11-25 18:06 - 2013-08-22 11:22 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2014-11-25 18:06 - 2013-08-22 11:17 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2014-11-25 18:06 - 2013-08-22 11:17 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2014-11-25 18:06 - 2013-08-22 11:17 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2014-11-25 18:06 - 2013-08-22 04:05 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2014-11-25 18:06 - 2013-08-22 04:03 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2014-11-25 18:06 - 2013-08-22 03:59 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2014-11-25 18:06 - 2013-08-22 03:56 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2014-11-25 18:06 - 2013-08-22 03:56 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2014-11-25 18:06 - 2013-08-22 03:51 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2014-11-25 18:06 - 2013-08-22 03:51 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2014-11-25 18:06 - 2013-08-22 03:51 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2014-11-25 18:06 - 2013-08-22 03:51 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2014-11-25 14:36 - 2014-06-11 14:21 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\FileZilla
2014-11-24 13:26 - 2014-06-11 14:20 - 00000000 ____D () C:\Program Files (x86)\FileZilla FTP Client
2014-11-22 10:01 - 2013-11-23 14:32 - 00000000 ____D () C:\Users\Pk\AppData\Local\Packages
2014-11-22 09:59 - 2013-08-22 14:44 - 05007824 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-11-22 09:52 - 2013-08-22 15:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-22 09:52 - 2013-08-22 15:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-22 09:52 - 2013-08-22 15:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-11-22 09:52 - 2013-08-22 15:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-11-22 09:51 - 2013-08-22 15:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-11-22 09:51 - 2013-08-22 15:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-11-22 09:51 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-11-21 16:33 - 2014-10-01 15:56 - 00003260 _____ () C:\WINDOWS\System32\Tasks\update-S-1-5-21-1444305084-1481242938-3084423498-1001
2014-11-21 16:33 - 2014-10-01 15:56 - 00000431 _____ () C:\Users\Pk\AppData\Local\UserProducts.xml
2014-11-21 16:33 - 2014-10-01 15:56 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lightshot
2014-11-21 16:27 - 2013-11-29 17:26 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-11-21 16:16 - 2013-11-29 17:26 - 103374192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-11-21 16:08 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\restore
2014-11-21 13:54 - 2014-09-20 14:07 - 00000000 ____D () C:\Users\Pk\AppData\Local\LogMeIn Hamachi
2014-11-16 12:49 - 2014-10-04 16:42 - 11895013 _____ () C:\Users\Pk\Downloads\WeepCraft 8.1.zip
2014-11-15 11:13 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\spool
2014-11-14 15:55 - 2014-05-20 14:36 - 00004118 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2014-11-14 15:55 - 2014-05-20 14:36 - 00003882 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2014-11-04 15:51 - 2014-09-20 18:51 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-11-04 15:51 - 2014-05-24 10:33 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\uTorrent
2014-11-01 14:35 - 2012-07-26 08:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP
2014-11-01 14:34 - 2013-08-22 13:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2014-11-01 14:20 - 2013-11-23 14:37 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD
2014-11-01 14:13 - 2013-08-06 07:24 - 00003234 _____ () C:\WINDOWS\System32\Tasks\Norton WSC Integration
2014-11-01 14:10 - 2013-08-22 15:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-11-01 14:10 - 2013-08-22 13:36 - 00000000 __RHD () C:\Users\Default
2014-11-01 14:09 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\Registration
2014-11-01 14:04 - 2013-08-22 15:36 - 00000000 __RSD () C:\WINDOWS\Media
2014-11-01 14:04 - 2013-08-22 15:36 - 00000000 __RHD () C:\Users\Public\Libraries
2014-11-01 13:50 - 2014-10-22 15:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brick-Force
2014-11-01 13:50 - 2014-10-21 16:44 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Counter-Strike 1.6
2014-11-01 13:50 - 2014-10-19 15:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro
2014-11-01 13:50 - 2014-10-17 12:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer
2014-11-01 13:50 - 2014-10-15 15:47 - 00000000 ____D () C:\WINDOWS\de
2014-11-01 13:50 - 2014-10-11 13:31 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-11-01 13:50 - 2014-10-10 14:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AssaultCube
2014-11-01 13:50 - 2014-09-26 17:22 - 00000000 ____D () C:\ProgramData\regid.1995-08.com.techsmith
2014-11-01 13:50 - 2014-09-26 17:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
2014-11-01 13:50 - 2014-09-21 10:13 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wurm Online
2014-11-01 13:50 - 2014-09-20 18:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-11-01 13:50 - 2014-09-20 14:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi76
2014-11-01 13:50 - 2014-08-14 17:13 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SA-MP Colorpicker
2014-11-01 13:50 - 2014-06-28 09:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elsword_DE
2014-11-01 13:50 - 2014-06-18 15:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Clonk Rage
2014-11-01 13:50 - 2014-06-11 14:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2014-11-01 13:50 - 2014-05-24 17:38 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2014-11-01 13:50 - 2014-05-23 17:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Online Backup
2014-11-01 13:50 - 2014-05-21 12:35 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-11-01 13:50 - 2014-05-21 12:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-11-01 13:50 - 2014-05-20 15:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-11-01 13:50 - 2014-05-20 15:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-11-01 13:50 - 2014-05-20 14:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-11-01 13:50 - 2014-03-22 17:25 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security
2014-11-01 13:50 - 2014-03-12 18:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2014
2014-11-01 13:50 - 2014-02-19 15:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2014-11-01 13:50 - 2013-09-15 12:15 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD 12
2014-11-01 13:50 - 2013-09-15 12:05 - 00000000 ____D () C:\WINDOWS\SysWOW64\QCA_CR
2014-11-01 13:50 - 2013-09-15 11:55 - 00000000 ____D () C:\WINDOWS\SysWOW64\Atheros_L1e
2014-11-01 13:50 - 2013-09-15 11:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Quick Stream
2014-11-01 13:50 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\Help
2014-11-01 13:50 - 2013-08-22 13:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2014-11-01 13:50 - 2013-08-06 07:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2014-11-01 13:50 - 2013-08-06 07:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Packard Bell
2014-11-01 13:47 - 2012-07-26 05:37 - 00000000 ____D () C:\Users\Default.migrated
2014-11-01 13:46 - 2014-09-24 05:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN
2014-11-01 13:46 - 2014-09-24 05:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep
2014-11-01 13:46 - 2014-09-24 05:43 - 00000000 ____D () C:\WINDOWS\system32\WCN
2014-11-01 13:46 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz
2014-11-01 13:46 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME
2014-11-01 13:46 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns
2014-11-01 13:46 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-11-01 13:46 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\IME
2014-11-01 13:46 - 2013-08-22 13:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI
2014-11-01 13:46 - 2013-08-22 13:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-11-01 13:43 - 2014-10-10 14:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Netgame
2014-11-01 13:43 - 2014-09-22 18:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer
2014-11-01 13:43 - 2013-08-22 15:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker
2014-11-01 13:43 - 2013-08-22 15:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2014-11-01 13:43 - 2013-08-22 15:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar
2014-11-01 13:43 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\IME
2014-11-01 13:43 - 2013-08-22 15:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-11-01 13:43 - 2013-08-06 07:17 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-11-01 13:43 - 2013-08-06 07:05 - 00000000 ____D () C:\ProgramData\PRICache
2014-11-01 13:39 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2014-11-01 13:38 - 2014-10-10 14:35 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Netgame
2014-11-01 13:38 - 2014-09-20 19:01 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-11-01 13:38 - 2014-05-27 13:06 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EA Games
2014-11-01 13:37 - 2014-05-20 14:24 - 00000000 ____D () C:\Users\ouali_000\AppData\Local\Packages
2014-11-01 13:37 - 2013-11-23 15:21 - 00000000 ____D () C:\Users\issam_000\AppData\Local\Packages
2014-11-01 12:15 - 2013-08-22 15:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2014-11-01 12:15 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-11-01 12:15 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-11-01 12:15 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-11-01 12:14 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2014-11-01 12:05 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI
2014-11-01 12:05 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\MUI
2014-11-01 10:58 - 2012-07-26 08:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-27 19:28

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-12-2014
Ran by Hbib at 2014-12-01 14:50:30
Running from C:\Users\Pk\Pictures
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Norton Internet Security (Disabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
AS: Norton Internet Security (Enabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Norton Internet Security (Disabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\uTorrent) (Version: 3.4.2.34024 - BitTorrent Inc.)
Adobe After Effects CC 2014 (HKLM-x32\...\{2B22C750-5C3B-4738-B621-BA786AC7A494}) (Version: 13.0.2 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.8.0.447 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.239 - Adobe Systems Incorporated)
Adobe Photoshop CC 2014 (HKLM-x32\...\{D7A4F897-B20A-42D0-862D-CB5F6DB7391D}) (Version: 15.2 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (HKLM\...\{9770EA17-52C1-78A7-C3B3-59F0A2091BAE}) (Version: 8.0.911.0 - Advanced Micro Devices, Inc.)
AMD Quick Stream (HKLM\...\{E9EED4AE-682B-4501-9574-D09A21717599}_is1) (Version: 3.4.4.2 - AppEx Networks)
AssaultCube v1.2.0.2 (HKLM-x32\...\AssaultCube) (Version: 1.2.0.2 - )
Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Brick-Force (HKLM-x32\...\{9853ABB2-6416-4C87-8650-DD8E528FF564}}_is1) (Version: 4.3.383.130.19 - Infernum Productions AG)
Camtasia Studio 8 (HKLM-x32\...\{FB05EAA3-D938-4EDA-9A38-88543E52680C}) (Version: 8.4.3.1792 - TechSmith Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 4.14 - Piriform)
CINEMA 4D R14 (HKLM-x32\...\CINEMA 4D R14) (Version:  - )
Counter-Field 3 (HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\Counter-Field 3) (Version:  - )
Counter-Strike 1.6 (HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\Counter-Strike 1.6) (Version:  - )
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.2826.57 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Delicious: Emily's Childhood Memories Premium Edition (x32 Version: 3.0.2.32 - WildTangent) Hidden
eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)
ETDWare PS/2-X64 11.6.24.203_WHQL (HKLM\...\Elantech) (Version: 11.6.24.203 - ELAN Microelectronic Corp.)
FileZilla Client 3.9.0.6 (HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\FileZilla Client) (Version: 3.9.0.6 - Tim Kosse)
Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.71 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden
ICQ 8.2 (build 7138) (HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\ICQ) (Version: 8.2.7138.0 - ICQ)
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3005 - Packard Bell)
Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.670 - Oracle)
Java 7 Update 71 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417071FF}) (Version: 7.0.710 - Oracle)
Jewel Match 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden
Lightshot-5.1.4.41 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.1.4.41 - Skillbrains)
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.3008 - Packard Bell)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.236 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.236 - LogMeIn, Inc.) Hidden
Magic Academy (x32 Version: 2.2.0.98 - WildTangent) Hidden
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.141.11 - McAfee, Inc.)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Minecraft Packages (HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\Minecraft Packages) (Version:  - ) <==== ATTENTION
Mine-imator version 1.0.0 DEMO 5 (HKLM-x32\...\{AAA406D7-4C55-469A-86CC-241B2FA06D12}_is1) (Version: 1.0.0 DEMO 5 - David Norgren)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 32.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 32.0.3 (x86 de)) (Version: 32.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{4CA8F973-6377-4ABF-9ED5-CC2323B3C000}) (Version: 12.5.00500 - Nero AG)
Norton Internet Security (HKLM-x32\...\NIS) (Version: 21.6.0.32 - Symantec Corporation)
Norton Online Backup (HKLM-x32\...\{C6173775-C676-4E2A-9232-66E17261E614}) (Version: 2.9.0.19 - Symantec Corporation)
Norton Online Backup (x32 Version: 4.4.1.11 - Symantec Corporation) Hidden
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.4 - Notepad++ Team)
OEM Application Profile (HKLM-x32\...\{276FD4A2-030F-8A24-7DFE-9B1384131BCD}) (Version: 1.00.0000 - Ihr Firmenname)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
Packard Bell Device Fast-lane (HKLM\...\{3F62D2FD-13C1-49A2-8B5D-47623D9460D7}) (Version: 1.00.3013 - Packard Bell)
Packard Bell Games (HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\Pokki_c3e2005ede46d0c9848c79a4f19e87561ed8d0aa) (Version: 1.1.7.42206 - Pokki)
Packard Bell Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.3005 - Packard Bell)
Packard Bell Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3013 - Packard Bell)
Packard Bell Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3016 - Packard Bell)
paint.net (HKLM\...\{F509C1F4-0029-49F9-B145-A4C4E8DF481A}) (Version: 4.0.3 - dotPDN LLC)
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.)
PennyBeeUpdate (HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\PennyBee) (Version: 1.0.5.0 - PennyBeeUpdate) <==== ATTENTION
Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
QCA CardReader Driver Installer (HKLM-x32\...\{4E0BC999-655B-421D-87F3-640C6F2BFC11}) (Version: 1.0.1.34 - Qualcomm Inc.)
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.226 - Qualcomm Atheros Communications)
Qualcomm Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.13 - Qualcomm Atheros Communications Inc.)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 11.53 - Qualcomm Atheros)
Razer Game Booster (HKLM-x32\...\Razer Game Booster_is1) (Version: 4.0.68.0 - Razer Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6865 - Realtek Semiconductor Corp.)
SA-MP Colorpicker 1.1.0 (HKLM-x32\...\SA-MP Colorpicker) (Version: 1.1.0 - GTAvision.com)
Skype™ 6.22 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.22.105 - Skype Technologies S.A.)
Spielkanäle (HKLM-x32\...\WildTangentGameProvider-packardbell-genres) (Version: 8.1.0.17 - WildTangent, Inc.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Tales of Lagoona (x32 Version: 2.2.0.110 - WildTangent) Hidden
TeamSpeak 3 Client (HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.221 - TuneUp Software) Hidden
TuneUp Utilities 2014 (HKLM-x32\...\TuneUp Utilities) (Version: 14.0.1000.221 - TuneUp Software)
TuneUp Utilities 2014 (x32 Version: 14.0.1000.221 - TuneUp Software) Hidden
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Vegas Pro 13.0 (64-bit) (HKLM\...\{CE92F061-BFBC-11E3-8FF3-F04DA23A5C58}) (Version: 13.0.290 - Sony)
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)
WildTangent Games App (x32 Version: 4.0.11.14 - WildTangent) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
WinRAR 5.10 beta 4 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.4 - win.rar GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

21-11-2014 16:08:46 Windows Update
25-11-2014 12:31:32 Windows Update
28-11-2014 18:28:16 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2012-07-26 05:26 - 2014-09-26 17:27 - 00000986 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0C9C7584-2F0A-45C5-8042-C09DBB795048} - System32\Tasks\update-S-1-5-21-1444305084-1481242938-3084423498-1001 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-03-25] ()
Task: {19809562-05AC-4B6C-95CE-87D736A754E0} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe [2013-12-18] (TuneUp Software)
Task: {2571804A-CE4E-4DF3-9847-B865E5744A6D} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\WSCStub.exe [2014-09-21] (Symantec Corporation)
Task: {31A9915E-EA87-4841-A3EF-7A67A61BEFA8} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-05-20] (Piriform Ltd)
Task: {44786C93-5644-46E8-8E74-1CB49F9964F5} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-27] (Adobe Systems Incorporated)
Task: {4ACFEFCD-7719-47EB-8275-E95B49BDC530} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-03-25] ()
Task: {63258523-71B1-4737-8DB2-FAA322AA1E5B} - \PC Speed Maximizer Schedule No Task File <==== ATTENTION
Task: {67847EFA-DE54-4195-A4C7-F6C822765A2C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-20] (Google Inc.)
Task: {7AD0A9AD-21DD-49D3-8BE9-6E1E55EC097C} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-11-21] (Microsoft Corporation)
Task: {7E33E5E2-63C7-4D1D-8ABA-B6B3B6671097} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-20] (Google Inc.)
Task: {7EF87465-90E6-4616-B384-6A0FECA1FF70} - \UpdaterEX No Task File <==== ATTENTION
Task: {8A4B2E02-BEEC-4D6D-BC17-381FD9C992D0} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Packard Bell\Live Updater\liveupdater_agent.exe [2013-01-22] ()
Task: {90B45641-E68C-4061-8F87-0AA2137E55A8} - System32\Tasks\ALU => C:\Program Files (x86)\Packard Bell\Live Updater\updater.exe [2013-02-22] ()
Task: {9D32F6D9-6E61-4C5A-B4E4-C19013021C6C} - System32\Tasks\Power Management => C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [2013-03-15] (Acer Incorporated)
Task: {B8CAB970-822D-4554-A6AF-FBE48DB2F695} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {CB032C39-AA99-4975-A982-16732589A35C} - System32\Tasks\Launch Manager => C:\Program Files\Packard Bell\Packard Bell Launch Manager\LMLauncher.exe [2013-06-17] (Acer Incorporate)
Task: {DEBB4E65-31D2-4D9B-94FA-5E3B19F44C7E} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\update-S-1-5-21-1444305084-1481242938-3084423498-1001.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\WINDOWS\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

==================== Loaded Modules (whitelisted) =============

2013-12-18 09:01 - 2013-12-18 09:01 - 00742200 _____ () C:\Program Files (x86)\TuneUp Utilities 2014\avgrepliba.dll
2014-09-26 13:41 - 2014-09-26 13:41 - 01021088 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
2013-04-24 14:09 - 2013-04-24 14:09 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-04-24 14:07 - 2013-04-24 14:07 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll
2014-10-12 10:14 - 2014-10-12 10:14 - 00338432 _____ () C:\Users\Pk\AppData\Local\PennyBee\PennyBeeW.exe
2013-04-24 14:12 - 2013-04-24 14:12 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
2014-10-16 09:15 - 2014-10-16 09:15 - 00035328 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2014-05-24 16:41 - 2014-05-24 16:41 - 00091648 _____ () C:\Program Files (x86)\FileZilla FTP Client\libgcc_s_sjlj-1.dll
2014-05-24 16:41 - 2014-05-24 16:41 - 00892416 _____ () C:\Program Files (x86)\FileZilla FTP Client\libstdc++-6.dll
2014-05-10 20:03 - 2014-12-01 14:34 - 03715184 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-09-22 16:23 - 2014-09-22 16:23 - 00317960 _____ () C:\Users\Pk\AppData\Local\PennyBee\Resources\ntdis_32.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: GamesAppService => 3
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: Hamachi2Svc => 2
MSCONFIG\Services: LMSvc => 2
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: NAUpdate => 2
MSCONFIG\Services: OverwolfUpdaterService => 3
HKLM\...\StartupApproved\StartupFolder: => "McAfee Security Scan Plus.lnk"
HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui"
HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"
HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "Pokki"
HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "uTorrent"
HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "Overwolf"
HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "EADM"
HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "icq"

========================= Accounts: ==========================

Administrator (S-1-5-21-1444305084-1481242938-3084423498-500 - Administrator - Disabled)
Gast (S-1-5-21-1444305084-1481242938-3084423498-501 - Limited - Enabled)
Hbib (S-1-5-21-1444305084-1481242938-3084423498-1001 - Administrator - Enabled) => C:\Users\Pk
issam_000 (S-1-5-21-1444305084-1481242938-3084423498-1004 - Limited - Enabled) => C:\Users\issam_000
ouali_000 (S-1-5-21-1444305084-1481242938-3084423498-1005 - Limited - Enabled) => C:\Users\ouali_000

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (12/01/2014 02:34:11 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: WmiApRplC:\WINDOWS\system32\wbem\wmiaprpl.dll4

Error: (12/01/2014 02:34:09 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: rdyboost4

Error: (12/01/2014 02:34:09 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: 

Error: (12/01/2014 02:34:08 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: MSDTCC:\WINDOWS\system32\msdtcuiu.DLL4

Error: (12/01/2014 02:34:08 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: LsaC:\Windows\System32\Secur32.dll4

Error: (12/01/2014 02:34:08 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: ESENTC:\WINDOWS\system32\esentprf.dll4

Error: (12/01/2014 02:34:08 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: BITSC:\Windows\System32\bitsperf.dll4

Error: (11/30/2014 03:23:41 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: WmiApRplC:\WINDOWS\system32\wbem\wmiaprpl.dll4

Error: (11/30/2014 03:23:40 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: rdyboost4

Error: (11/30/2014 03:23:40 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: 


System errors:
=============
Error: (12/01/2014 02:30:41 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "LogMeIn Hamachi Tunneling Engine" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (12/01/2014 02:30:41 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst LogMeIn Hamachi Tunneling Engine erreicht.

Error: (12/01/2014 02:29:36 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AppEx Networks Accelerator LWF" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%31

Error: (12/01/2014 02:29:36 PM) (Source: APXACC) (EventID: 1003) (User: )
Description: The NDIS6 LWF initialization has failed. (0xC0000001)

Error: (12/01/2014 02:28:23 PM) (Source: Microsoft-Windows-HAL) (EventID: 13) (User: NT-AUTORITÄT)
Description: Der Systemüberwachungszeitgeber wurde ausgelöst.

Error: (12/01/2014 02:29:31 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎30.‎11.‎2014 um 22:32:04 unerwartet heruntergefahren.

Error: (11/28/2014 10:30:03 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073712 fehlgeschlagen: Update für Windows 8.1 für x64-Systeme (KB2962409)

Error: (11/28/2014 08:43:05 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073712 fehlgeschlagen: Update für Windows 8.1 für x64-Systeme (KB2962409)

Error: (11/28/2014 08:18:51 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073712 fehlgeschlagen: Update für Windows 8.1 für x64-Systeme (KB2962409)

Error: (11/28/2014 08:08:00 PM) (Source: DCOM) (EventID: 10010) (User: Wohnzimmer-PC)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}


Microsoft Office Sessions:
=========================
Error: (12/01/2014 02:34:11 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: WmiApRplC:\WINDOWS\system32\wbem\wmiaprpl.dll4

Error: (12/01/2014 02:34:09 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: rdyboost4

Error: (12/01/2014 02:34:09 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: 

Error: (12/01/2014 02:34:08 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: MSDTCC:\WINDOWS\system32\msdtcuiu.DLL4

Error: (12/01/2014 02:34:08 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: LsaC:\Windows\System32\Secur32.dll4

Error: (12/01/2014 02:34:08 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: ESENTC:\WINDOWS\system32\esentprf.dll4

Error: (12/01/2014 02:34:08 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: BITSC:\Windows\System32\bitsperf.dll4

Error: (11/30/2014 03:23:41 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: WmiApRplC:\WINDOWS\system32\wbem\wmiaprpl.dll4

Error: (11/30/2014 03:23:40 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: rdyboost4

Error: (11/30/2014 03:23:40 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: 


==================== Memory info =========================== 

Processor: AMD E1-2500 APU with Radeon(TM) HD Graphics 
Percentage of memory in use: 82%
Total physical RAM: 1477.01 MB
Available physical RAM: 251.4 MB
Total Pagefile: 4549.01 MB
Available Pagefile: 2930.34 MB
Total Virtual: 131072 MB
Available Virtual: 131071.8 MB

==================== Drives ================================

Drive c: (Packard Bell) (Fixed) (Total:282.58 GB) (Free:196.95 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 298.1 GB) (Disk ID: EA4C7CA5)

Partition: GPT Partition Type.

==================== End Of Log ============================
         

Hallo Crounty



Mein Name ist Timo und ich werde Dir bei deinem Problem behilflich sein.

• Bitte arbeite alle Schritte der Reihe nach ab.
• Hier findest du die Anleitung für Hilfesuchende
• Lese die Anleitungen sorgfältig. Sollte es Probleme geben, bitte stoppen und hier so gut es geht beschreiben.
• Nur Scans durchführen zu denen Du von einem Helfer aufgefordert wirst.
• Bitte kein Crossposting ( posten in mehreren Foren).
• Installiere oder Deinstalliere während der Bereinigung keine Software ausser Du wurdest dazu aufgefordert.
• Lese Dir die Anleitung zuerst vollständig durch. Sollte etwas unklar sein, frage bevor Du beginnst.
• Poste die Logfiles direkt in deinen Thread. Nicht anhängen ausser ich fordere Dich dazu auf.

Hinweis:
Ich kann Dir niemals eine Garantie geben, dass ich auch alles finde. Eine Formatierung ist immer der sicherste Weg.

Wir "arbeiten" hier alle freiwillig und in unserer Freizeit *hust*. Daher kann es bei Antworten zu Verzögerungen kommen.
Solltest du innerhalb 48 Std keine Antwort von mir erhalten, dann schreib mit eine PM
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis ich oder jemand vom Team sagt, dass Du clean bist.

Hinweis: Registry Cleaner

Ich sehe, dass du sogenannte Registry Cleaner installiert hast.
In deinem Fall CCleaner, TuneUp Utilities 2014.

Wir raten von der Verwendung jeglicher Art von Registry Cleaner ab.

Der Grund ist ganz einfach:
Die Registry ist das Hirn des Systems. Funktioniert das Hirn nicht, funktioniert der Rest nicht mehr wirklich.
Man sollte nicht unnötigerweise an der Registry rumbasteln. Schon ein kleiner Fehler kann gravierende Folgen haben und auch Programme machen manchmal Fehler.
Zerstörst du die Registry, zerstörst du Windows.

Zudem ist der Nutzen zur Performancesteigerung umstritten und meist kaum im wahrnehmbaren Bereich.

Ich würde dir empfehlen, Registry Cleaner nicht weiterhin zu verwenden und über

Start --> Systemsteuerung --> Software (bei Windows XP)
Start --> Systemsteuerung --> Programme und Funktionen (bei Vista / Win 7)

zu deinstallieren.

Lade Dir bitte von hier Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.

• Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
• Klicke auf Optionen und wähle als Sprache Deutsch.
• Suche im Uninstallerfeld nach den Programmen:
  
  Minecraft Packages
  PennyBeeUpdate
  
  
• Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
• Wähle anschließend den Modus "Moderat" aus.
  
• Reste löschen:
  Klicke auf dann auf und dann auf .

 

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Starte noch einmal FRST.

• Ändere keine der Voreinstellungen und drücke auf Scan.
• Wenn der Scan abgeschlossen ist, werden ein neues Logfile FRST.txt erstellt und auf dem Desktop gespeichert.
• Poste den Inhalt dieses Logfiles bitte hier in deinen Thread.

Malwarebytes Log kommt noch

# AdwCleaner v4.103 - Bericht erstellt am 01/12/2014 um 17:04:47
# Aktualisiert 01/12/2014 von Xplode
# Database : 2014-12-01.2 [Live]
# Betriebssystem : Windows 8.1  (64 bits)
# Benutzername : Hbib - WOHNZIMMER-PC
# Gestartet von : C:\Users\Pk\Pictures\AdwCleaner_4.103.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro
Ordner Gelöscht : C:\Program Files (x86)\webget
Ordner Gelöscht : C:\Program Files (x86)\RCP
Ordner Gelöscht : C:\Users\Pk\AppData\Local\PennyBee
Ordner Gelöscht : C:\Users\Pk\AppData\Roaming\PennyBee
Datei Gelöscht : C:\WINDOWS\System32\roboot64.exe
Datei Gelöscht : C:\Users\Pk\AppData\Local\Temp\Uninstall.exe
Datei Gelöscht : C:\Users\Pk\AppData\Roaming\Mozilla\Firefox\Profiles\yqrfhnfq.default\searchplugins\trovi-search.xml

***** [ Tasks ] *****

Task Gelöscht : UpdaterEX
Task Gelöscht : update-sys
Task Gelöscht : update-S-1-5-21-1444305084-1481242938-3084423498-1001

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [PennyBee]
Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\IePluginServices
Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Wpm
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
Schlüssel Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKLM\SOFTWARE\SupDp
Schlüssel Gelöscht : HKLM\SOFTWARE\webget

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17416

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v32.0.3 (x86 de)

[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://www.trovi.com/?gd=&ctid=CT3314958&octid=EB_ORIGINAL_CTID&ISID=M76ED4C76-AFDF-4830-A42E-55C9714D3458&SearchSource=69&CUI=&SSPV=&Lay=1&UM=5&UP=SP03A61366-08C2-45E[...]
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.defaultenginename", "Trovi search");
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.selectedEngine", "Trovi search");
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://www.trovi.com/?gd=&ctid=CT3314958&octid=EB_ORIGINAL_CTID&ISID=M76ED4C76-AFDF-4830-A42E-55C9714D3458&SearchSource=69&CUI=&SSPV=&Lay=1&UM=5&UP=SP03A61366-08C2-45E[...]
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.defaultenginename", "Trovi search");
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.selectedEngine", "Trovi search");
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://www.trovi.com/?gd=&ctid=CT3314958&octid=EB_ORIGINAL_CTID&ISID=M76ED4C76-AFDF-4830-A42E-55C9714D3458&SearchSource=69&CUI=&SSPV=&Lay=1&UM=5&UP=SP03A61366-08C2-45E[...]
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.defaultenginename", "Trovi search");
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.selectedEngine", "Trovi search");
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://www.trovi.com/?gd=&ctid=CT3314958&octid=EB_ORIGINAL_CTID&ISID=M76ED4C76-AFDF-4830-A42E-55C9714D3458&SearchSource=69&CUI=&SSPV=&Lay=1&UM=5&UP=SP03A61366-08C2-45E[...]
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.defaultenginename", "Trovi search");
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.selectedEngine", "Trovi search");
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://www.trovi.com/?gd=&ctid=CT3314958&octid=EB_ORIGINAL_CTID&ISID=M76ED4C76-AFDF-4830-A42E-55C9714D3458&SearchSource=69&CUI=&SSPV=&Lay=1&UM=5&UP=SP03A61366-08C2-45E[...]
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.defaultenginename", "Trovi search");
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.selectedEngine", "Trovi search");
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://www.trovi.com/?gd=&ctid=CT3314958&octid=EB_ORIGINAL_CTID&ISID=M76ED4C76-AFDF-4830-A42E-55C9714D3458&SearchSource=69&CUI=&SSPV=&Lay=1&UM=5&UP=SP03A61366-08C2-45E[...]
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.defaultenginename", "Trovi search");
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.selectedEngine", "Trovi search");
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://www.trovi.com/?gd=&ctid=CT3314958&octid=EB_ORIGINAL_CTID&ISID=M76ED4C76-AFDF-4830-A42E-55C9714D3458&SearchSource=69&CUI=&SSPV=&Lay=1&UM=5&UP=SP03A61366-08C2-45E[...]
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.defaultenginename", "Trovi search");
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.selectedEngine", "Trovi search");
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://www.trovi.com/?gd=&ctid=CT3314958&octid=EB_ORIGINAL_CTID&ISID=M76ED4C76-AFDF-4830-A42E-55C9714D3458&SearchSource=69&CUI=&SSPV=&Lay=1&UM=5&UP=SP03A61366-08C2-45E[...]
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.defaultenginename", "Trovi search");
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.selectedEngine", "Trovi search");
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://www.trovi.com/?gd=&ctid=CT3314958&octid=EB_ORIGINAL_CTID&ISID=M76ED4C76-AFDF-4830-A42E-55C9714D3458&SearchSource=69&CUI=&SSPV=&Lay=1&UM=5&UP=SP03A61366-08C2-45E[...]
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.defaultenginename", "Trovi search");
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.selectedEngine", "Trovi search");
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://www.trovi.com/?gd=&ctid=CT3314958&octid=EB_ORIGINAL_CTID&ISID=M76ED4C76-AFDF-4830-A42E-55C9714D3458&SearchSource=69&CUI=&SSPV=&Lay=1&UM=5&UP=SP03A61366-08C2-45E[...]
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.defaultenginename", "Trovi search");
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.selectedEngine", "Trovi search");
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://www.trovi.com/?gd=&ctid=CT3314958&octid=EB_ORIGINAL_CTID&ISID=M76ED4C76-AFDF-4830-A42E-55C9714D3458&SearchSource=69&CUI=&SSPV=&Lay=1&UM=5&UP=SP03A61366-08C2-45E[...]
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.defaultenginename", "Trovi search");
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.selectedEngine", "Trovi search");
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://www.trovi.com/?gd=&ctid=CT3314958&octid=EB_ORIGINAL_CTID&ISID=M76ED4C76-AFDF-4830-A42E-55C9714D3458&SearchSource=69&CUI=&SSPV=&Lay=1&UM=5&UP=SP03A61366-08C2-45E[...]
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.defaultenginename", "Trovi search");
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.selectedEngine", "Trovi search");
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://www.trovi.com/?gd=&ctid=CT3314958&octid=EB_ORIGINAL_CTID&ISID=M76ED4C76-AFDF-4830-A42E-55C9714D3458&SearchSource=69&CUI=&SSPV=&Lay=1&UM=5&UP=SP03A61366-08C2-45E[...]
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.defaultenginename", "Trovi search");
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.selectedEngine", "Trovi search");
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://www.trovi.com/?gd=&ctid=CT3314958&octid=EB_ORIGINAL_CTID&ISID=M76ED4C76-AFDF-4830-A42E-55C9714D3458&SearchSource=69&CUI=&SSPV=&Lay=1&UM=5&UP=SP03A61366-08C2-45E[...]
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.defaultenginename", "Trovi search");
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.selectedEngine", "Trovi search");
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://www.trovi.com/?gd=&ctid=CT3314958&octid=EB_ORIGINAL_CTID&ISID=M76ED4C76-AFDF-4830-A42E-55C9714D3458&SearchSource=69&CUI=&SSPV=&Lay=1&UM=5&UP=SP03A61366-08C2-45E[...]
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.defaultenginename", "Trovi search");
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.selectedEngine", "Trovi search");
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://www.trovi.com/?gd=&ctid=CT3314958&octid=EB_ORIGINAL_CTID&ISID=M76ED4C76-AFDF-4830-A42E-55C9714D3458&SearchSource=69&CUI=&SSPV=&Lay=1&UM=5&UP=SP03A61366-08C2-45E[...]
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.defaultenginename", "Trovi search");
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.selectedEngine", "Trovi search");
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://www.trovi.com/?gd=&ctid=CT3314958&octid=EB_ORIGINAL_CTID&ISID=M76ED4C76-AFDF-4830-A42E-55C9714D3458&SearchSource=69&CUI=&SSPV=&Lay=1&UM=5&UP=SP03A61366-08C2-45E[...]
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.defaultenginename", "Trovi search");
[yqrfhnfq.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.selectedEngine", "Trovi search");

-\\ Google Chrome v39.0.2171.71


*************************

AdwCleaner[R0].txt - [22886 octets] - [24/05/2014 11:13:59]
AdwCleaner[R1].txt - [12438 octets] - [01/12/2014 16:59:18]
AdwCleaner[S0].txt - [10375 octets] - [24/05/2014 11:18:15]
AdwCleaner[S1].txt - [10365 octets] - [01/12/2014 17:04:47]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [10426 octets] ##########
         

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.0 (11.29.2014:1)
OS: Windows 8.1 x64
Ran by Hbib on 01.12.2014 at 17:12:30,02
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\update webget
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\util webget



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\Pk\AppData\Roaming\mozilla\firefox\profiles\yqrfhnfq.default\minidumps [33 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 01.12.2014 at 17:22:37,12
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 01.12.2014
Suchlauf-Zeit: 17:27:31
Logdatei: 
Administrator: Ja

Version: 2.00.3.1025
Malware Datenbank: v2014.12.01.04
Rootkit Datenbank: v2014.12.01.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 8.1
CPU: x64
Dateisystem: NTFS
Benutzer: Hbib

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 426896
Verstrichene Zeit: 1 Std, 10 Min, 53 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente erkannt)

Module: 0
(Keine schädliche Elemente erkannt)

Registrierungsschlüssel: 0
(Keine schädliche Elemente erkannt)

Registrierungswerte: 1
PUP.Optional.QuickStart.A, HKU\S-1-5-21-1444305084-1481242938-3084423498-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MOZILLA\EXTENDS|appid, quick_start@gmail.com, In Quarantäne, [33756af3cab294a2f70dc29eeb185ba5]

Registrierungsdaten: 1
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[594fcc91dd9fab8b13fe1c4073929070]

Ordner: 2
PUP.Optional.PennyBee.A, C:\Users\Pk\AppData\Local\ICSharpCode.net\PennyBeeW.exe_Url_ubgogtsy2oqxpavqftahxghie3hz2d4q, In Quarantäne, [179193ca6e0ef3439cc5142426ddf808], 
PUP.Optional.PennyBee.A, C:\Users\Pk\AppData\Local\ICSharpCode.net\PennyBeeW.exe_Url_ubgogtsy2oqxpavqftahxghie3hz2d4q\1.0.5.0, In Quarantäne, [179193ca6e0ef3439cc5142426ddf808], 

Dateien: 10
PUP.Optional.OpenCandy, C:\Users\Pk\Downloads\DTLite4491-0356.exe, In Quarantäne, [0a9eeb727a02b77f32e03f4335d0837d], 
PUP.Optional.Bandoo, C:\Users\Pk\Downloads\iLividSetup-r422-n-bc.exe, In Quarantäne, [743496c7e498a88edf816db86e938c74], 
PUP.Optional.Bandoo, C:\Users\Pk\Downloads\iLividSetup-r484-n-bc.exe, In Quarantäne, [ecbc124b582463d3065a210402ff57a9], 
PUP.Optional.OptimumInstaller.A, C:\Users\Pk\Downloads\Setup.exe, In Quarantäne, [6840a5b85c201c1a96bd5f0a867b23dd], 
Trojan.Keylogger.VB, C:\Users\Pk\Downloads\filehost_Hack Tool.exe, In Quarantäne, [d1d768f5acd09a9cf4e0f4d5020222de], 
Rogue.FakeAV.ED, C:\Users\Pk\Downloads\CS PRO GUI 2012.zip, In Quarantäne, [04a45508d0ace353eced60e1fb0623dd], 
PUP.Optional.SnapDo.A, C:\Windows\Installer\1307cb3.msi, In Quarantäne, [e2c6c499ff7dae889926633ca75ac53b], 
PUP.Optional.SmartBar, C:\Windows\Installer\MSI8BE0.tmp, In Quarantäne, [1593b7a6bac292a4174f1a14738dcd33], 
PUP.Optional.SmartBar, C:\Windows\Installer\MSI8BE0.tmp-\Smartbar.Installer.CustomActions.dll, In Quarantäne, [6444e677413b92a498cee945e41c26da], 
PUP.Optional.PennyBee.A, C:\Users\Pk\AppData\Local\ICSharpCode.net\PennyBeeW.exe_Url_ubgogtsy2oqxpavqftahxghie3hz2d4q\1.0.5.0\user.config, In Quarantäne, [179193ca6e0ef3439cc5142426ddf808], 

Physische Sektoren: 0
(Keine schädliche Elemente erkannt)


(end)
         

Mein Norton meckerte rum, er hätte 2 Viren gefunden.
Hier die Log:

Behobene Bedrohungen:
Es wurden keine Risiken behoben.

Nicht behobene Bedrohungen:
WS.Malware.1
 Typ: Anomalie
 Risiko: Hoch (Hoch Verbergen, Hoch Entfernen, Hoch Leistung, Hoch Datenschutz)  
 Kategorien: Virus
 Status: Kein Versuch
 -----------
 1 Datei

2 Prozess

1 Browser-Cache



Trojan.Zbot
 Typ: Anomalie
 Risiko: Hoch (Hoch Verbergen, Hoch Entfernen, Hoch Leistung, Hoch Datenschutz)  
 Kategorien: Virus
 Status: Kein Versuch
 -----------
 44-Dateien

12 Prozess

1 Browser-Cache
         

Geht halt nix über Norton - absolut unaussagekräftiges Logfile ;-)

Wann kam die Norton Meldung ?
Gibts bei Norton auch Logfiles in denen man den Dateipfad der Virenfunde sehen kann ?
Falls ja, bitte posten.


Und bitte neue FRST Logs. Haken setzen bei addition.txt dann auf Scan klicken

Dateiname: pennybeew.exe
Bedrohungsname: WS.Malware.1
Vollständiger Pfad: c:\users\pk\appdata\local\pennybee\pennybeew.exe

____________________________



Details
Viele Benutzer,* Schon länger bekannt,* Risiko Hoch





Ursprung
Heruntergeladen von
*Unbekannt





Aktivität
Ausgeführte Aktionen: 4



____________________________



Auf Computern ab*
22.11.2014 um 19:39:24


Zuletzt verwendet*
01.12.2014 um 18:45:53


Start-Element*
Ja


Gestartet*
Ja


____________________________


Viele Benutzer
Tausende Benutzer in der Norton Community haben diese Datei verwendet.

Schon länger bekannt
Diese Datei wurde vor mehr als 31 Tagen 2 Monaten  veröffentlicht.

Hoch
Das Risiko dieser Datei ist hoch.

Art der Bedrohung: Virus. Programme, die andere Programme, Dateien oder Computerbereiche infizieren, indem sie sich einfügen oder anhängen.



____________________________



Quelle: externe Medien



Quelldatei:
pennybeew.exe




____________________________

Dateiaktionen

Ereignis: Laufender Prozess: c:\users\pk\appdata\local\pennybee\ pennybeew.exe Beendet
Ereignis: Laufender Prozess: c:\users\pk\appdata\local\pennybee\ pennybeew.exe Reparatur nicht versucht
Infizierte Datei: c:\users\pk\appdata\local\pennybee\ pennybeew.exe Keine Aktion erforderlich
____________________________

Registrierungsaktionen

Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1001\Software\Microsoft\Windows\CurrentVersion\ Run->PennyBee Keine Aktion erforderlich
____________________________


Dateiabdruck - SHA:
8a4aee9965ae465aebdbf767f23d77afbe33adcefe75928956cd88d06a32dd61
Dateiabdruck - MD5:
Nicht verfügbar
         

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-12-2014
Ran by Hbib (administrator) on WOHNZIMMER-PC on 01-12-2014 19:08:11
Running from C:\Users\Pk\Pictures
Loaded Profiles: Hbib & issam_000 & ouali_000 (Available profiles: Hbib & issam_000 & ouali_000)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\nis.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\nis.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2890056 2013-05-22] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13427784 2013-03-18] (Realtek Semiconductor)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642816 2013-06-13] (Advanced Micro Devices, Inc.)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-04-24] ( (Atheros Communications))
HKU\S-1-5-21-1444305084-1481242938-3084423498-1004\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2013-08-22] (Microsoft Corporation)
HKU\S-1-5-21-1444305084-1481242938-3084423498-1005\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2013-08-22] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (McAfee, Inc.)
BootExecute: autocheck mslnautocheck autochk * 

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1444305084-1481242938-3084423498-1004\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer13.msn.com
HKU\S-1-5-21-1444305084-1481242938-3084423498-1004\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com
HKU\S-1-5-21-1444305084-1481242938-3084423498-1005\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer13.msn.com
HKU\S-1-5-21-1444305084-1481242938-3084423498-1005\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com
SearchScopes: HKLM-x32 -> DefaultScope value is missing.
SearchScopes: HKU\S-1-5-21-1444305084-1481242938-3084423498-1004 -> DefaultScope {58EEA0ED-7C32-4F46-ADEF-5677392D44C0} URL = 
SearchScopes: HKU\S-1-5-21-1444305084-1481242938-3084423498-1004 -> {58EEA0ED-7C32-4F46-ADEF-5677392D44C0} URL = 
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine64\21.6.0.32\coIEPlg.dll (Symantec Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\coIEPlg.dll (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.6.0.32\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\coIEPlg.dll (Symantec Corporation)
Toolbar: HKU\S-1-5-21-1444305084-1481242938-3084423498-1001 -> Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.6.0.32\coIEPlg.dll (Symantec Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Pk\AppData\Roaming\Mozilla\Firefox\Profiles\yqrfhnfq.default
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_15_0_0_239.dll ()
FF Plugin: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_239.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin -> C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()
FF Extension: MEGA - C:\Users\Pk\AppData\Roaming\Mozilla\Firefox\Profiles\yqrfhnfq.default\Extensions\firefox@mega.co.nz.xpi [2014-09-27]
FF Extension: Adblock Plus - C:\Users\Pk\AppData\Roaming\Mozilla\Firefox\Profiles\yqrfhnfq.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-02-01]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn [2014-12-01]

Chrome: 
=======
CHR Profile: C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-05-20]
CHR Extension: (Google Drive) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-20]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-20]
CHR Extension: (YouTube) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-20]
CHR Extension: (Adblock Plus) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-11-04]
CHR Extension: (Google-Suche) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-20]
CHR Extension: (Google Wallet) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-20]
CHR Extension: (Google Mail) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-20]
CHR HKLM\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\Exts\Chrome.crx [2014-10-04]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\Exts\Chrome.crx [2014-10-04]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [310400 2013-04-24] (Windows (R) Win 7 DDK provider)
S3 DeviceFastLaneService; C:\Program Files\Packard Bell\Packard Bell Device Fast-lane\DeviceFastLaneSvc.exe [470056 2013-05-01] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [662088 2013-03-15] (Acer Incorporated)
S2 EraserSvc11410; C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\NIS.exe [276376 2014-09-21] (Symantec Corporation)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-04-24] (WildTangent)
S4 LMSvc; C:\Program Files\Packard Bell\Packard Bell Launch Manager\LMSvc.exe [431656 2013-06-18] (Acer Incorporate)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\NIS.exe [276376 2014-09-21] (Symantec Corporation)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4343664 2014-04-09] (Symantec Corporation)
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [106472 2013-09-18] (Razer Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
S2 Hamachi2Svc; "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s [X]
S2 LMIGuardianSvc; "C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [219360 2013-04-18] (AppEx Networks Corporation)
R3 AthrSdSrv; C:\Windows\system32\DRIVERS\athrsd.sys [48760 2012-12-01] (Qualcomm Atheros, Inc.)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [98744 2013-04-23] (Advanced Micro Devices)
R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20141118.001\BHDrvx64.sys [1587416 2014-10-03] (Symantec Corporation)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-04-24] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-09-24] (Microsoft Corporation)
S3 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0404010.00B\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1506000.020\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2014-09-14] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2014-09-14] (Symantec Corporation)
S3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [46136 2014-09-04] (LogMeIn Inc.)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20141128.001\IDSvia64.sys [637656 2014-11-19] (Symantec Corporation)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-01-10] (Acer Incorporated)
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20141130.022\ENG64.SYS [129752 2014-09-14] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20141130.022\EX64.SYS [2137304 2014-09-14] (Symantec Corporation)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [15704 2013-01-10] (Acer Incorporated)
R1 SRTSP; C:\Windows\System32\Drivers\NISx64\1506000.020\SRTSP64.SYS [876248 2014-08-26] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1506000.020\SRTSPX64.SYS [37592 2014-08-26] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1506000.020\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1506000.020\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NISx64\1506000.020\SymELAM.sys [23568 2013-09-10] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-03-22] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1506000.020\Ironx64.SYS [266968 2014-08-06] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1506000.020\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
S3 AtiDCM; \??\C:\AMD\WU-CCC2\ccc2_install\Support64\atdcm64a.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-01 18:45 - 2014-12-01 18:45 - 00067632 _____ (Symantec Corporation) C:\WINDOWS\system32\msln.exe
2014-12-01 18:45 - 2014-12-01 18:45 - 00001056 _____ () C:\Users\Pk\Documents\asd.txt
2014-12-01 17:26 - 2014-12-01 18:46 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-12-01 17:25 - 2014-12-01 17:25 - 00001130 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-12-01 17:25 - 2014-12-01 17:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-12-01 17:25 - 2014-12-01 17:25 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-12-01 17:25 - 2014-12-01 17:25 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-12-01 17:25 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-12-01 17:25 - 2014-10-01 11:11 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-12-01 17:25 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-12-01 17:24 - 2014-12-01 17:24 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Pk\Downloads\mbam-setup-2.0.3.1025.exe
2014-12-01 17:22 - 2014-12-01 17:22 - 00000994 _____ () C:\Users\Pk\Desktop\JRT.txt
2014-12-01 17:12 - 2014-12-01 17:12 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-12-01 17:10 - 2014-12-01 17:10 - 01707646 _____ (Thisisu) C:\Users\Pk\Downloads\JRT.exe
2014-12-01 16:10 - 2014-12-01 16:10 - 00001296 _____ () C:\Users\Pk\Desktop\Revo Uninstaller.lnk
2014-12-01 16:10 - 2014-12-01 16:10 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-12-01 15:41 - 2014-12-01 19:08 - 00000000 ____D () C:\FRST
2014-11-27 20:12 - 2014-11-27 20:15 - 00000646 _____ () C:\WINDOWS\setupact.log
2014-11-27 20:12 - 2014-11-27 20:12 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-11-27 18:27 - 2014-11-27 18:27 - 04443312 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe
2014-11-27 18:10 - 2014-11-27 18:44 - 3268147200 _____ () C:\Users\Pk\Desktop\X17-59885.iso
2014-11-25 15:35 - 2014-11-25 15:36 - 00000000 ____D () C:\Users\Pk\Desktop\worldsurvival
2014-11-25 15:33 - 2014-11-25 15:33 - 00000000 ____D () C:\Users\Pk\Desktop\world
2014-11-25 15:24 - 2014-11-25 15:25 - 00525638 _____ () C:\Users\Pk\Desktop\Alpine  Summer Hub.zip
2014-11-25 14:59 - 2014-11-25 15:02 - 09296123 _____ () C:\Users\Pk\Desktop\Minecraft Spawn Hub Map.zip
2014-11-25 13:51 - 2014-11-25 13:51 - 00009949 _____ () C:\Users\Pk\Desktop\ChatManagerPlus.jar
2014-11-23 13:28 - 2014-11-23 13:29 - 00026812 _____ () C:\Users\Pk\Desktop\CTag.jar
2014-11-23 13:06 - 2014-11-23 13:20 - 00053565 _____ () C:\Users\Pk\Desktop\ColoredTags.jar
2014-11-23 11:32 - 2014-11-23 11:32 - 00722782 _____ () C:\Users\Pk\Desktop\PermissionsEx.jar
2014-11-23 11:05 - 2014-11-23 11:05 - 00959115 _____ () C:\Users\Pk\Desktop\Citizens.jar
2014-11-22 19:38 - 2014-11-22 19:38 - 06126536 _____ (Tim Kosse) C:\Users\Pk\Downloads\FileZilla_3.9.0.6_win32-setup [1].exe
2014-11-22 19:38 - 2014-11-22 19:38 - 00789864 _____ ( ) C:\Users\Pk\Downloads\FileZilla_3.9.0.6_win32-setup.exe
2014-11-22 11:00 - 2014-11-20 21:51 - 00714208 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-11-22 11:00 - 2014-11-20 21:51 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-22 10:51 - 2014-11-22 11:01 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-11-21 16:54 - 2014-12-01 16:24 - 00000000 ____D () C:\Users\Pk\Desktop\Rest-Müll
2014-11-21 15:35 - 2014-11-21 15:36 - 92658088 _____ (Oracle Corporation) C:\Users\Pk\Downloads\jre-8u25-windows-x64.exe
2014-11-19 17:07 - 2014-11-10 00:19 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-11-19 17:07 - 2014-11-10 00:19 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2014-11-19 17:07 - 2014-11-10 00:18 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2014-11-19 17:07 - 2014-11-10 00:18 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2014-11-15 18:59 - 2014-12-01 18:41 - 00014360 _____ () C:\WINDOWS\PFRO.log
2014-11-14 16:51 - 2014-11-14 16:51 - 00000000 ____D () C:\Users\Pk\AppData\Local\Skype
2014-11-14 16:50 - 2014-11-14 16:50 - 00002533 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-11-14 16:50 - 2014-11-14 16:50 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-11-14 16:50 - 2014-11-14 16:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-11-14 16:48 - 2014-11-14 16:49 - 01546856 _____ (Skype Technologies S.A.) C:\Users\Pk\Downloads\SkypeSetup.exe
2014-11-12 20:47 - 2014-12-01 16:22 - 00007630 _____ () C:\WINDOWS\system32\--traceoff
2014-11-12 20:47 - 2014-11-12 20:47 - 00000000 _____ () C:\WINDOWS\system32\--debugoff
2014-11-12 20:46 - 2014-12-01 16:22 - 00000000 ____D () C:\Users\Pk\AppData\Local\Sony
2014-11-12 20:43 - 2014-11-30 19:58 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Sony
2014-11-12 19:55 - 2014-11-12 20:30 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Mine_imator
2014-11-12 19:54 - 2014-12-01 16:21 - 00000000 ____D () C:\Users\Pk\Mine-imator
2014-11-12 19:54 - 2014-11-12 19:54 - 08800436 _____ (David Norgren ) C:\Users\Pk\Downloads\Mine-imator installer 1.0.0 DEMO 5.exe
2014-11-11 20:09 - 2014-09-22 05:38 - 01519488 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2014-11-11 20:08 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-11-11 20:08 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-11-11 20:08 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-11-11 20:08 - 2014-09-19 01:16 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2014-11-11 20:08 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll
2014-11-11 20:08 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll
2014-11-11 20:07 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2014-11-11 20:07 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2014-11-11 20:07 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2014-11-11 20:07 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2014-11-11 20:07 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll
2014-11-11 20:07 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll
2014-11-11 20:07 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-11-11 20:07 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-11-11 20:07 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2014-11-11 20:07 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2014-11-11 20:07 - 2014-09-27 04:38 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2014-11-11 20:07 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2014-11-11 20:07 - 2014-09-27 04:17 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2014-11-11 20:06 - 2014-10-10 02:58 - 00177472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-11-11 20:06 - 2014-10-10 02:58 - 00027456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys
2014-11-11 20:06 - 2014-10-10 02:44 - 00563976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-11-11 20:06 - 2014-10-08 08:37 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-11-11 20:06 - 2014-10-08 08:37 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll
2014-11-11 20:06 - 2014-10-08 08:34 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2014-11-11 20:06 - 2014-10-08 08:24 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll
2014-11-11 20:06 - 2014-10-08 07:56 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2014-11-11 20:06 - 2014-10-08 07:51 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-11-11 20:06 - 2014-10-08 07:51 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll
2014-11-11 20:06 - 2014-10-08 07:18 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2014-11-11 20:06 - 2014-10-08 07:17 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-11-11 20:06 - 2014-10-08 06:23 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-11-11 20:00 - 2014-10-18 10:55 - 00055776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-11-11 20:00 - 2014-10-18 09:09 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-11-11 20:00 - 2014-10-18 09:09 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2014-11-11 20:00 - 2014-10-18 08:25 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2014-11-11 20:00 - 2014-10-18 07:50 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll
2014-11-11 20:00 - 2014-10-18 07:38 - 03557376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-11-11 20:00 - 2014-10-18 07:27 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2014-11-11 20:00 - 2014-10-18 07:26 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2014-11-11 20:00 - 2014-10-18 07:23 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-11-11 20:00 - 2014-10-18 07:23 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-11-11 20:00 - 2014-10-18 07:21 - 00894976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-11-11 20:00 - 2014-10-18 07:20 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-11-11 20:00 - 2014-10-18 07:14 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2014-11-11 20:00 - 2014-10-18 07:14 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2014-11-11 20:00 - 2014-10-18 07:12 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-11-11 20:00 - 2014-10-18 07:11 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-11-11 19:49 - 2014-10-31 06:28 - 25110016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-11-11 19:49 - 2014-10-31 04:42 - 19781632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-11-11 19:43 - 2014-10-31 04:59 - 14390272 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-11-11 19:42 - 2014-10-31 03:30 - 12819456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-11-11 19:41 - 2014-10-31 06:06 - 00580096 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-11-11 19:41 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-11-11 19:41 - 2014-10-31 06:05 - 02884096 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-11-11 19:41 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2014-11-11 19:41 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2014-11-11 19:41 - 2014-10-31 05:51 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2014-11-11 19:41 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-11-11 19:41 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-11-11 19:41 - 2014-10-31 05:50 - 06040064 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-11-11 19:41 - 2014-10-31 05:50 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-11-11 19:41 - 2014-10-31 05:38 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-11-11 19:41 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2014-11-11 19:41 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-11-11 19:41 - 2014-10-31 05:23 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2014-11-11 19:41 - 2014-10-31 05:21 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-11-11 19:41 - 2014-10-31 05:15 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2014-11-11 19:41 - 2014-10-31 05:08 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2014-11-11 19:41 - 2014-10-31 05:06 - 00372736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-11-11 19:41 - 2014-10-31 05:05 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-11-11 19:41 - 2014-10-31 05:05 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-11-11 19:41 - 2014-10-31 05:03 - 02124288 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-11-11 19:41 - 2014-10-31 04:45 - 02365440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-11-11 19:41 - 2014-10-31 04:44 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-11-11 19:41 - 2014-10-31 04:32 - 01550336 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-11-11 19:41 - 2014-10-31 04:24 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-11-11 19:41 - 2014-10-31 04:23 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2014-11-11 19:41 - 2014-10-31 04:20 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-11-11 19:41 - 2014-10-31 04:18 - 02277376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-11-11 19:41 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2014-11-11 19:41 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2014-11-11 19:41 - 2014-10-31 04:12 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2014-11-11 19:41 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-11-11 19:41 - 2014-10-31 04:02 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-11-11 19:41 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-11-11 19:41 - 2014-10-31 03:50 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-11-11 19:41 - 2014-10-31 03:46 - 04298240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-11-11 19:41 - 2014-10-31 03:46 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2014-11-11 19:41 - 2014-10-31 03:42 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2014-11-11 19:41 - 2014-10-31 03:40 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-11-11 19:41 - 2014-10-31 03:40 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-11-11 19:41 - 2014-10-31 03:39 - 02051072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-11-11 19:41 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-11-11 19:41 - 2014-10-31 03:17 - 01892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-11-11 19:41 - 2014-10-31 03:13 - 01310208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-11-11 19:41 - 2014-10-31 03:11 - 00708096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-11-11 19:40 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wextract.exe
2014-11-11 19:40 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshta.exe
2014-11-11 19:40 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iexpress.exe
2014-11-11 19:40 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\pngfilt.dll
2014-11-11 19:40 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe
2014-11-11 19:40 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\url.dll
2014-11-11 19:40 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-11-11 19:40 - 2014-10-31 06:05 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2014-11-11 19:40 - 2014-10-31 06:04 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2014-11-11 19:40 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-11-11 19:40 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-11-11 19:40 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\IEAdvpack.dll
2014-11-11 19:40 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\licmgr10.dll
2014-11-11 19:40 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-11-11 19:40 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2014-11-11 19:40 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\inseng.dll
2014-11-11 19:40 - 2014-10-31 05:24 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-11-11 19:40 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll
2014-11-11 19:40 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\occache.dll
2014-11-11 19:40 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\imgutil.dll
2014-11-11 19:40 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wextract.exe
2014-11-11 19:40 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshta.exe
2014-11-11 19:40 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iexpress.exe
2014-11-11 19:40 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pngfilt.dll
2014-11-11 19:40 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe
2014-11-11 19:40 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\url.dll
2014-11-11 19:40 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-11-11 19:40 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-11-11 19:40 - 2014-10-31 04:22 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2014-11-11 19:40 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-11-11 19:40 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-11-11 19:40 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IEAdvpack.dll
2014-11-11 19:40 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-11-11 19:40 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\licmgr10.dll
2014-11-11 19:40 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-11 19:40 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inseng.dll
2014-11-11 19:40 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2014-11-11 19:40 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2014-11-11 19:40 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll
2014-11-11 19:40 - 2014-10-31 03:52 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-11-11 19:40 - 2014-10-31 03:51 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2014-11-11 19:40 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\occache.dll
2014-11-11 19:40 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imgutil.dll
2014-11-11 19:40 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\packager.dll
2014-11-11 19:40 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\packager.dll
2014-11-11 19:40 - 2014-10-17 08:01 - 00789184 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-11-11 19:40 - 2014-10-17 07:58 - 00602768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-11-11 19:40 - 2014-10-07 07:28 - 00500016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-11-11 19:40 - 2014-10-07 07:27 - 00482872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-11-11 19:40 - 2014-10-07 07:27 - 00394120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-11-11 19:40 - 2014-10-07 07:27 - 00272248 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-11-11 19:40 - 2014-10-07 07:27 - 00108432 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2014-11-11 19:40 - 2014-10-07 04:34 - 00370424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-11-11 19:40 - 2014-10-07 04:34 - 00344536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-11-11 19:40 - 2014-10-07 04:33 - 00424544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-11-11 19:40 - 2014-10-07 04:30 - 04182016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-11-11 19:40 - 2014-10-07 02:54 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-11-11 19:40 - 2014-10-07 02:46 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-11-11 19:40 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-11-11 19:40 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-11-11 19:39 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2014-11-11 19:39 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-11-11 19:39 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-11-11 19:39 - 2014-09-07 23:08 - 00389176 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-11-11 19:39 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-11-11 19:39 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-11-11 19:39 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-11-11 19:39 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-11-11 19:39 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2014-11-11 19:39 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2014-11-11 19:39 - 2014-08-31 01:17 - 00148800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-11-11 19:39 - 2014-08-31 01:15 - 21197152 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-11-11 19:39 - 2014-08-30 23:59 - 18723112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-11-11 19:39 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMEX.dll
2014-11-11 19:39 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSAPI.dll
2014-11-11 19:39 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-11-11 19:39 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSAPI.dll
2014-11-11 19:39 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-11-11 19:39 - 2014-08-28 03:55 - 07484224 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-11-11 19:39 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-11-11 19:39 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2014-11-11 19:39 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-11-11 19:39 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-11-11 19:39 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-11-11 19:39 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2014-11-11 19:39 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2014-11-10 17:30 - 2014-11-10 17:30 - 02332316 _____ () C:\Users\Pk\Downloads\forge-1.5.2-7.8.1.738-installer.jar
2014-11-05 15:42 - 2014-11-05 15:42 - 02936397 _____ () C:\Users\Pk\Downloads\forge-1.7.2-10.12.2.1147-installer (3).jar
2014-11-05 15:40 - 2014-11-05 15:40 - 28917914 _____ () C:\Users\Pk\Downloads\The CraftingFabo Pack V.2.zip
2014-11-05 15:38 - 2014-11-25 19:02 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\.minecraft
2014-11-05 15:35 - 2014-11-05 15:36 - 54655526 _____ () C:\Users\Pk\Downloads\-Quasaro V.5!-.zip
2014-11-02 21:01 - 2014-12-01 15:39 - 00003946 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{51C63146-2830-466D-8742-F26078BC5B00}
2014-11-02 21:01 - 2014-11-02 21:01 - 00000000 __SHD () C:\Users\Pk\AppData\Local\EmieUserList
2014-11-02 21:01 - 2014-11-02 21:01 - 00000000 __SHD () C:\Users\Pk\AppData\Local\EmieSiteList
2014-11-02 14:07 - 2014-08-02 01:18 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2014-11-02 13:08 - 2014-08-15 01:36 - 00146752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys
2014-11-02 12:43 - 2014-07-10 05:08 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\lockscreencn.dll
2014-11-02 12:42 - 2014-07-15 19:16 - 03048880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-11-02 12:42 - 2014-07-15 09:29 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2014-11-02 12:42 - 2014-07-15 09:22 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2014-11-02 12:42 - 2014-07-15 09:03 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2014-11-02 12:38 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2014-11-02 12:38 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-11-02 12:21 - 2014-08-23 08:48 - 02374784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-11-02 12:21 - 2014-08-23 08:13 - 02084520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2014-11-02 12:21 - 2014-08-23 07:10 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2014-11-02 12:21 - 2014-08-23 06:32 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2014-11-02 12:21 - 2014-08-23 05:33 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-11-02 12:20 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-11-02 12:20 - 2014-08-16 05:01 - 01710184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-11-02 12:20 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-11-02 12:20 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-11-02 12:20 - 2014-08-16 04:03 - 01467384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2014-11-02 12:20 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-11-02 12:20 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll
2014-11-02 12:20 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-11-02 12:20 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll
2014-11-02 12:20 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll
2014-11-02 12:20 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-11-02 12:20 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll
2014-11-02 12:20 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll
2014-11-02 12:20 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2014-11-02 12:20 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll
2014-11-02 12:20 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-11-02 12:20 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-11-02 12:20 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-11-02 12:20 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
2014-11-02 12:20 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-11-02 12:20 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-11-02 12:20 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-11-02 12:20 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll
2014-11-02 12:20 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-11-02 12:20 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-11-02 12:20 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-11-02 12:20 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-11-02 12:20 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-11-02 12:20 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-11-02 12:20 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-11-02 12:12 - 2014-11-02 12:12 - 00000000 ____D () C:\Users\Pk\voip
2014-11-02 12:04 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll
2014-11-02 12:04 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll
2014-11-02 12:00 - 2014-12-01 16:24 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ICQ
2014-11-02 11:59 - 2014-11-02 11:59 - 35212808 _____ (ICQ) C:\Users\Pk\Downloads\icq_rfrset.exe
2014-11-02 11:57 - 2014-06-02 03:10 - 00423768 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-11-02 11:57 - 2014-05-31 07:27 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys
2014-11-02 11:57 - 2014-05-31 07:26 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys
2014-11-02 11:57 - 2014-05-31 05:01 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe
2014-11-02 11:57 - 2014-05-31 05:01 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
2014-11-02 11:57 - 2014-05-31 05:01 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll
2014-11-02 11:57 - 2014-05-27 10:56 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll
2014-11-02 11:57 - 2014-05-27 10:53 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll
2014-11-02 11:54 - 2014-07-12 05:17 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-11-02 11:52 - 2014-12-01 18:29 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-11-02 11:52 - 2014-11-27 18:28 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-11-02 11:35 - 2014-11-27 21:33 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Skype
2014-11-02 11:34 - 2014-11-14 16:51 - 00000000 ____D () C:\ProgramData\Skype
2014-11-02 11:21 - 2014-11-02 11:22 - 30742784 _____ (Skype Technologies S.A.) C:\Users\Pk\Downloads\Skype_v6.1.0.129.exe
2014-11-01 15:19 - 2014-11-01 15:19 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Norton Internet Security
2014-11-01 15:15 - 2014-11-01 15:15 - 00001466 _____ () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-11-01 15:13 - 2014-11-01 15:13 - 00000020 ___SH () C:\Users\Pk\ntuser.ini
2014-11-01 15:10 - 2014-12-01 19:05 - 01872863 _____ () C:\WINDOWS\WindowsUpdate.log
2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-11-01 15:08 - 2014-11-01 15:08 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-11-01 14:47 - 2014-11-01 14:47 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-11-01 14:47 - 2014-11-01 14:47 - 00000000 ____D () C:\Users\Default\AppData\Local\Pokki
2014-11-01 14:47 - 2014-11-01 14:47 - 00000000 ____D () C:\Users\Default User\AppData\Local\Pokki
2014-11-01 14:39 - 2014-11-01 14:39 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-11-01 14:35 - 2014-12-01 15:29 - 00000000 ____D () C:\Users\Pk
2014-11-01 14:35 - 2014-11-01 15:09 - 00036198 _____ () C:\WINDOWS\diagwrn.xml
2014-11-01 14:35 - 2014-11-01 15:09 - 00036198 _____ () C:\WINDOWS\diagerr.xml
2014-11-01 14:35 - 2014-11-01 15:02 - 00000000 ____D () C:\Users\issam_000
2014-11-01 14:35 - 2014-11-01 15:01 - 00000000 ____D () C:\Users\ouali_000
2014-11-01 14:35 - 2014-11-01 14:38 - 00000000 ___RD () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-01 14:35 - 2014-11-01 14:38 - 00000000 ___RD () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-11-01 14:35 - 2014-11-01 14:37 - 00000000 ___RD () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-01 14:35 - 2014-11-01 14:37 - 00000000 ___RD () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-11-01 14:35 - 2014-11-01 14:37 - 00000000 ___RD () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-01 14:35 - 2014-11-01 14:37 - 00000000 ___RD () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\Pk\Vorlagen
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\Pk\Startmenü
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\Pk\Netzwerkumgebung
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\Pk\Lokale Einstellungen
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\Pk\Eigene Dateien
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\Pk\Druckumgebung
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\Pk\Documents\Eigene Musik
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\Pk\Documents\Eigene Bilder
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\Pk\AppData\Local\Verlauf
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\Pk\AppData\Local\Anwendungsdaten
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\Pk\Anwendungsdaten
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\ouali_000\Vorlagen
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\ouali_000\Startmenü
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\ouali_000\Netzwerkumgebung
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\ouali_000\Lokale Einstellungen
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\ouali_000\Eigene Dateien
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\ouali_000\Druckumgebung
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\ouali_000\Documents\Eigene Musik
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\ouali_000\Documents\Eigene Bilder
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\ouali_000\AppData\Local\Verlauf
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\ouali_000\AppData\Local\Anwendungsdaten
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\ouali_000\Anwendungsdaten
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\issam_000\Vorlagen
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\issam_000\Startmenü
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\issam_000\Netzwerkumgebung
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\issam_000\Lokale Einstellungen
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\issam_000\Eigene Dateien
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\issam_000\Druckumgebung
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\issam_000\Documents\Eigene Musik
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\issam_000\Documents\Eigene Bilder
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\issam_000\AppData\Local\Verlauf
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\issam_000\AppData\Local\Anwendungsdaten
2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\issam_000\Anwendungsdaten
2014-11-01 14:35 - 2014-09-24 07:18 - 00000369 _____ () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-11-01 14:35 - 2014-09-24 07:18 - 00000369 _____ () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-11-01 14:35 - 2014-09-24 07:18 - 00000369 _____ () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-11-01 14:35 - 2014-09-24 07:18 - 00000369 _____ () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-11-01 14:35 - 2014-09-24 07:18 - 00000369 _____ () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-11-01 14:35 - 2014-09-24 07:18 - 00000369 _____ () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-11-01 14:35 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-01 14:35 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-01 14:35 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-01 14:35 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-11-01 14:35 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-11-01 14:35 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-11-01 14:23 - 2014-11-01 14:23 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2014-11-01 14:23 - 2014-11-01 14:23 - 00000000 ____D () C:\Program Files\Realtek
2014-11-01 14:22 - 2014-11-01 14:22 - 00000000 ____D () C:\Program Files\Elantech
2014-11-01 14:22 - 2014-11-01 14:22 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2014-11-01 14:22 - 2014-11-01 14:22 - 00000000 ____D () C:\Program Files\AMD
2014-11-01 14:22 - 2014-11-01 14:22 - 00000000 _____ () C:\WINDOWS\system32\spu_storage.bin
2014-11-01 14:22 - 2014-11-01 14:22 - 00000000 _____ () C:\WINDOWS\ativpsrm.bin
2014-11-01 13:18 - 2014-11-04 16:48 - 00000000 ___DC () C:\WINDOWS\Panther
2014-11-01 13:18 - 2014-11-01 14:28 - 00000000 __SHD () C:\Recovery
2014-11-01 13:15 - 2014-11-17 18:14 - 00000000 ____D () C:\Windows.old
2014-11-01 13:15 - 2014-11-01 13:15 - 00921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-11-01 13:15 - 2014-11-01 13:15 - 00626688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-11-01 13:15 - 2014-11-01 13:15 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-11-01 13:15 - 2014-11-01 13:15 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\BulkOperationHost.exe
2014-11-01 13:11 - 2014-11-01 13:11 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2014-11-01 13:11 - 2014-11-01 13:11 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2014-11-01 13:09 - 2014-11-01 13:09 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-11-01 13:05 - 2014-11-01 13:05 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer
2014-11-01 13:05 - 2014-11-01 13:05 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-11-01 13:05 - 2014-11-01 13:05 - 00000000 ____D () C:\Program Files\MSBuild
2014-11-01 13:05 - 2014-11-01 13:05 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-11-01 13:05 - 2014-11-01 13:05 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-11-01 13:03 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2014-11-01 13:03 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-11-01 13:03 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2014-11-01 13:03 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-01 19:02 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-12-01 19:00 - 2014-05-20 15:36 - 00001146 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-01 19:00 - 2013-11-23 15:53 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1444305084-1481242938-3084423498-1001
2014-12-01 18:47 - 2014-09-24 07:17 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-12-01 18:47 - 2014-09-24 06:43 - 00765582 _____ () C:\WINDOWS\system32\perfh007.dat
2014-12-01 18:47 - 2014-09-24 06:43 - 00159366 _____ () C:\WINDOWS\system32\perfc007.dat
2014-12-01 18:44 - 2013-09-15 13:20 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-12-01 18:43 - 2014-05-20 15:36 - 00001142 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-01 18:42 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-12-01 18:41 - 2014-09-24 07:00 - 00000000 ____D () C:\WINDOWS\SKB
2014-12-01 18:41 - 2013-11-23 16:34 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-12-01 17:08 - 2014-05-10 21:03 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-12-01 17:06 - 2014-09-20 15:12 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-12-01 17:06 - 2013-08-22 14:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2014-12-01 17:04 - 2014-05-24 11:13 - 00000000 ____D () C:\AdwCleaner
2014-12-01 16:57 - 2014-06-11 15:44 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Notepad++
2014-12-01 16:54 - 2013-08-06 08:17 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games
2014-12-01 16:52 - 2014-10-14 17:45 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-12-01 16:52 - 2014-09-20 15:07 - 00000000 ____D () C:\Users\Pk\AppData\Local\LogMeIn Hamachi
2014-12-01 16:52 - 2013-11-23 15:36 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Adobe
2014-12-01 16:45 - 2014-10-15 12:57 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-12-01 16:45 - 2014-10-14 18:00 - 00000000 ____D () C:\ProgramData\Adobe
2014-12-01 16:29 - 2013-09-15 12:53 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-12-01 16:28 - 2014-03-16 10:23 - 00000000 ____D () C:\Users\Pk\Documents\CyberLink
2014-12-01 16:28 - 2013-09-15 13:15 - 00000000 ____D () C:\Users\Public\CyberLink
2014-12-01 16:28 - 2013-09-15 13:15 - 00000000 ____D () C:\ProgramData\CyberLink
2014-12-01 16:26 - 2014-10-01 16:56 - 00000059 _____ () C:\Users\Pk\AppData\Local\UserProducts.xml
2014-12-01 16:19 - 2014-05-24 11:33 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\uTorrent
2014-12-01 15:30 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-11-30 23:04 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-11-30 16:22 - 2013-11-29 18:33 - 00000000 ____D () C:\Users\Pk\AppData\Local\Adobe
2014-11-28 23:33 - 2013-11-30 17:17 - 00000000 ____D () C:\Users\Pk\AppData\Local\CrashDumps
2014-11-28 20:32 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-11-28 18:55 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-11-27 19:03 - 2014-05-20 15:38 - 00002207 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-11-27 18:44 - 2013-12-18 19:29 - 00000215 _____ () C:\Users\Pk\AppData\Roaming\WB.CFG
2014-11-25 19:06 - 2013-08-22 12:22 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2014-11-25 19:06 - 2013-08-22 12:22 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2014-11-25 19:06 - 2013-08-22 12:17 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2014-11-25 19:06 - 2013-08-22 12:17 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2014-11-25 19:06 - 2013-08-22 12:17 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2014-11-25 19:06 - 2013-08-22 05:05 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2014-11-25 19:06 - 2013-08-22 05:03 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2014-11-25 19:06 - 2013-08-22 04:59 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2014-11-25 19:06 - 2013-08-22 04:56 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2014-11-25 19:06 - 2013-08-22 04:56 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2014-11-25 19:06 - 2013-08-22 04:51 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2014-11-25 19:06 - 2013-08-22 04:51 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2014-11-25 19:06 - 2013-08-22 04:51 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2014-11-25 19:06 - 2013-08-22 04:51 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2014-11-25 15:36 - 2014-06-11 15:21 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\FileZilla
2014-11-24 14:26 - 2014-06-11 15:20 - 00000000 ____D () C:\Program Files (x86)\FileZilla FTP Client
2014-11-22 11:01 - 2013-11-23 15:32 - 00000000 ____D () C:\Users\Pk\AppData\Local\Packages
2014-11-22 10:59 - 2013-08-22 15:44 - 05007824 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-11-22 10:52 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-22 10:52 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-11-22 10:52 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-11-22 10:52 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-11-22 10:51 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-11-22 10:51 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-11-22 10:51 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-11-21 17:27 - 2013-11-29 18:26 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-11-21 17:16 - 2013-11-29 18:26 - 103374192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-11-21 17:08 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\restore
2014-11-16 13:49 - 2014-10-04 17:42 - 11895013 _____ () C:\Users\Pk\Downloads\WeepCraft 8.1.zip
2014-11-15 12:13 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\spool
2014-11-14 16:55 - 2014-05-20 15:36 - 00004118 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2014-11-14 16:55 - 2014-05-20 15:36 - 00003882 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2014-11-04 16:51 - 2014-09-20 19:51 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-11-01 15:35 - 2012-07-26 09:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP
2014-11-01 15:20 - 2013-11-23 15:37 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD
2014-11-01 15:13 - 2013-08-06 08:24 - 00003234 _____ () C:\WINDOWS\System32\Tasks\Norton WSC Integration
2014-11-01 15:10 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-11-01 15:10 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default
2014-11-01 15:09 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Registration
2014-11-01 15:04 - 2013-08-22 16:36 - 00000000 __RSD () C:\WINDOWS\Media
2014-11-01 15:04 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries
2014-11-01 14:50 - 2014-10-17 13:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer
2014-11-01 14:50 - 2014-10-15 16:47 - 00000000 ____D () C:\WINDOWS\de
2014-11-01 14:50 - 2014-10-11 14:31 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-11-01 14:50 - 2014-09-21 11:13 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wurm Online
2014-11-01 14:50 - 2014-09-20 19:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-11-01 14:50 - 2014-09-20 15:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi76
2014-11-01 14:50 - 2014-08-14 18:13 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SA-MP Colorpicker
2014-11-01 14:50 - 2014-06-28 10:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elsword_DE
2014-11-01 14:50 - 2014-06-18 16:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Clonk Rage
2014-11-01 14:50 - 2014-05-24 18:38 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2014-11-01 14:50 - 2014-05-23 18:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Online Backup
2014-11-01 14:50 - 2014-05-21 13:35 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-11-01 14:50 - 2014-05-21 13:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-11-01 14:50 - 2014-05-20 16:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-11-01 14:50 - 2014-05-20 15:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-11-01 14:50 - 2014-03-22 18:25 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security
2014-11-01 14:50 - 2014-02-19 16:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2014-11-01 14:50 - 2013-09-15 13:05 - 00000000 ____D () C:\WINDOWS\SysWOW64\QCA_CR
2014-11-01 14:50 - 2013-09-15 12:55 - 00000000 ____D () C:\WINDOWS\SysWOW64\Atheros_L1e
2014-11-01 14:50 - 2013-09-15 12:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Quick Stream
2014-11-01 14:50 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Help
2014-11-01 14:50 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2014-11-01 14:50 - 2013-08-06 08:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2014-11-01 14:50 - 2013-08-06 08:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Packard Bell
2014-11-01 14:47 - 2012-07-26 06:37 - 00000000 ____D () C:\Users\Default.migrated
2014-11-01 14:46 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN
2014-11-01 14:46 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep
2014-11-01 14:46 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\system32\WCN
2014-11-01 14:46 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz
2014-11-01 14:46 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME
2014-11-01 14:46 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns
2014-11-01 14:46 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-11-01 14:46 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\IME
2014-11-01 14:46 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI
2014-11-01 14:46 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-11-01 14:43 - 2014-10-10 15:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Netgame
2014-11-01 14:43 - 2014-09-22 19:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer
2014-11-01 14:43 - 2013-08-22 16:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker
2014-11-01 14:43 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2014-11-01 14:43 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar
2014-11-01 14:43 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\IME
2014-11-01 14:43 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-11-01 14:43 - 2013-08-06 08:17 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-11-01 14:43 - 2013-08-06 08:05 - 00000000 ____D () C:\ProgramData\PRICache
2014-11-01 14:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2014-11-01 14:38 - 2014-10-10 15:35 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Netgame
2014-11-01 14:38 - 2014-09-20 20:01 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-11-01 14:38 - 2014-05-27 14:06 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EA Games
2014-11-01 14:37 - 2014-05-20 15:24 - 00000000 ____D () C:\Users\ouali_000\AppData\Local\Packages
2014-11-01 14:37 - 2013-11-23 16:21 - 00000000 ____D () C:\Users\issam_000\AppData\Local\Packages
2014-11-01 13:15 - 2013-08-22 16:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2014-11-01 13:15 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-11-01 13:15 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-11-01 13:15 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-11-01 13:14 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2014-11-01 13:05 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI
2014-11-01 13:05 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\MUI
2014-11-01 11:58 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent

Some content of TEMP:
====================
C:\Users\Pk\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\Pk\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\Pk\AppData\Local\Temp\icqsetup.exe
C:\Users\Pk\AppData\Local\Temp\Quarantine.exe
C:\Users\Pk\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\Pk\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\Pk\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-12-01 19:01

==================== End Of Log ============================
         

--- --- ---

--- --- ---

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-12-2014
Ran by Hbib at 2014-12-01 19:11:59
Running from C:\Users\Pk\Pictures
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Norton Internet Security (Enabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
AS: Norton Internet Security (Enabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Norton Internet Security (Enabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.239 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (HKLM\...\{9770EA17-52C1-78A7-C3B3-59F0A2091BAE}) (Version: 8.0.911.0 - Advanced Micro Devices, Inc.)
AMD Quick Stream (HKLM\...\{E9EED4AE-682B-4501-9574-D09A21717599}_is1) (Version: 3.4.4.2 - AppEx Networks)
Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Delicious: Emily's Childhood Memories Premium Edition (x32 Version: 3.0.2.32 - WildTangent) Hidden
ETDWare PS/2-X64 11.6.24.203_WHQL (HKLM\...\Elantech) (Version: 11.6.24.203 - ELAN Microelectronic Corp.)
Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.71 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3005 - Packard Bell)
Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.670 - Oracle)
Java 7 Update 71 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417071FF}) (Version: 7.0.710 - Oracle)
Jewel Match 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.3008 - Packard Bell)
Magic Academy (x32 Version: 2.2.0.98 - WildTangent) Hidden
Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.141.11 - McAfee, Inc.)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 33.1.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.1.1 (x86 de)) (Version: 33.1.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{4CA8F973-6377-4ABF-9ED5-CC2323B3C000}) (Version: 12.5.00500 - Nero AG)
Norton Internet Security (HKLM-x32\...\NIS) (Version: 21.6.0.32 - Symantec Corporation)
Norton Online Backup (HKLM-x32\...\{C6173775-C676-4E2A-9232-66E17261E614}) (Version: 2.9.0.19 - Symantec Corporation)
Norton Online Backup (x32 Version: 4.4.1.11 - Symantec Corporation) Hidden
OEM Application Profile (HKLM-x32\...\{276FD4A2-030F-8A24-7DFE-9B1384131BCD}) (Version: 1.00.0000 - Ihr Firmenname)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
Packard Bell Device Fast-lane (HKLM\...\{3F62D2FD-13C1-49A2-8B5D-47623D9460D7}) (Version: 1.00.3013 - Packard Bell)
Packard Bell Games (HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\Pokki_c3e2005ede46d0c9848c79a4f19e87561ed8d0aa) (Version: 1.1.7.42206 - Pokki)
Packard Bell Games (HKU\S-1-5-21-1444305084-1481242938-3084423498-1004\...\Pokki_c3e2005ede46d0c9848c79a4f19e87561ed8d0aa) (Version: 1.1.7.42206 - Pokki)
Packard Bell Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.3005 - Packard Bell)
Packard Bell Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3013 - Packard Bell)
Packard Bell Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3016 - Packard Bell)
paint.net (HKLM\...\{F509C1F4-0029-49F9-B145-A4C4E8DF481A}) (Version: 4.0.3 - dotPDN LLC)
Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden
Pokki (HKU\S-1-5-21-1444305084-1481242938-3084423498-1004\...\Pokki) (Version: 0.263.14.114 - Pokki)
Pokki (HKU\S-1-5-21-1444305084-1481242938-3084423498-1005\...\Pokki) (Version: 0.263.14.114 - Pokki)
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
QCA CardReader Driver Installer (HKLM-x32\...\{4E0BC999-655B-421D-87F3-640C6F2BFC11}) (Version: 1.0.1.34 - Qualcomm Inc.)
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.226 - Qualcomm Atheros Communications)
Qualcomm Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.13 - Qualcomm Atheros Communications Inc.)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 11.53 - Qualcomm Atheros)
Razer Game Booster (HKLM-x32\...\Razer Game Booster_is1) (Version: 4.0.68.0 - Razer Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6865 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
SA-MP Colorpicker 1.1.0 (HKLM-x32\...\SA-MP Colorpicker) (Version: 1.1.0 - GTAvision.com)
Skype™ 6.22 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.22.105 - Skype Technologies S.A.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Tales of Lagoona (x32 Version: 2.2.0.110 - WildTangent) Hidden
TeamSpeak 3 Client (HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)
WildTangent Games App (x32 Version: 4.0.11.14 - WildTangent) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
WinRAR 5.10 beta 4 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.4 - win.rar GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

21-11-2014 16:08:46 Windows Update
25-11-2014 12:31:32 Windows Update
28-11-2014 18:28:16 Windows Update
01-12-2014 15:11:25 Revo Uninstaller's restore point - TuneUp Utilities 2014

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2012-07-26 06:26 - 2014-09-26 18:27 - 00000986 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {2571804A-CE4E-4DF3-9847-B865E5744A6D} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\WSCStub.exe [2014-09-21] (Symantec Corporation)
Task: {44786C93-5644-46E8-8E74-1CB49F9964F5} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-27] (Adobe Systems Incorporated)
Task: {63258523-71B1-4737-8DB2-FAA322AA1E5B} - \PC Speed Maximizer Schedule No Task File <==== ATTENTION
Task: {67847EFA-DE54-4195-A4C7-F6C822765A2C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-20] (Google Inc.)
Task: {7AD0A9AD-21DD-49D3-8BE9-6E1E55EC097C} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-11-21] (Microsoft Corporation)
Task: {7E33E5E2-63C7-4D1D-8ABA-B6B3B6671097} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-20] (Google Inc.)
Task: {8A4B2E02-BEEC-4D6D-BC17-381FD9C992D0} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Packard Bell\Live Updater\liveupdater_agent.exe [2013-01-22] ()
Task: {90B45641-E68C-4061-8F87-0AA2137E55A8} - System32\Tasks\ALU => C:\Program Files (x86)\Packard Bell\Live Updater\updater.exe [2013-02-22] ()
Task: {9D32F6D9-6E61-4C5A-B4E4-C19013021C6C} - System32\Tasks\Power Management => C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [2013-03-15] (Acer Incorporated)
Task: {B8CAB970-822D-4554-A6AF-FBE48DB2F695} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {CB032C39-AA99-4975-A982-16732589A35C} - System32\Tasks\Launch Manager => C:\Program Files\Packard Bell\Packard Bell Launch Manager\LMLauncher.exe [2013-06-18] (Acer Incorporate)
Task: {DEBB4E65-31D2-4D9B-94FA-5E3B19F44C7E} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-04-24 15:09 - 2013-04-24 15:09 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-04-24 15:07 - 2013-04-24 15:07 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll
2013-04-24 15:12 - 2013-04-24 15:12 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
2014-10-16 10:15 - 2014-10-16 10:15 - 00035328 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2014-05-24 17:41 - 2014-05-24 17:41 - 00091648 _____ () C:\Program Files (x86)\FileZilla FTP Client\libgcc_s_sjlj-1.dll
2014-05-24 17:41 - 2014-05-24 17:41 - 00892416 _____ () C:\Program Files (x86)\FileZilla FTP Client\libstdc++-6.dll
2014-05-10 21:03 - 2014-12-01 17:08 - 03649648 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-11-02 13:37 - 2014-11-02 13:38 - 00055808 _____ () C:\Program Files\WindowsApps\Fingersoft.HillClimbRacing_1.19.1.0_x86__r6rtpscs7gwyg\BackgroundTasks.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: GamesAppService => 3
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: Hamachi2Svc => 2
MSCONFIG\Services: LMSvc => 2
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: NAUpdate => 2
MSCONFIG\Services: OverwolfUpdaterService => 3
HKLM\...\StartupApproved\StartupFolder: => "McAfee Security Scan Plus.lnk"
HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui"
HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"
HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "Pokki"
HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "uTorrent"
HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "Overwolf"
HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "EADM"
HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "icq"

========================= Accounts: ==========================

Administrator (S-1-5-21-1444305084-1481242938-3084423498-500 - Administrator - Disabled)
Gast (S-1-5-21-1444305084-1481242938-3084423498-501 - Limited - Enabled)
Hbib (S-1-5-21-1444305084-1481242938-3084423498-1001 - Administrator - Enabled) => C:\Users\Pk
issam_000 (S-1-5-21-1444305084-1481242938-3084423498-1004 - Limited - Enabled) => C:\Users\issam_000
ouali_000 (S-1-5-21-1444305084-1481242938-3084423498-1005 - Limited - Enabled) => C:\Users\ouali_000

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============
Error: (12/01/2014 07:01:36 PM) (Source: DCOM) (EventID: 10010) (User: Wohnzimmer-PC)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (12/01/2014 07:00:58 PM) (Source: DCOM) (EventID: 10010) (User: Wohnzimmer-PC)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (12/01/2014 06:42:23 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "LogMeIn Hamachi Tunneling Engine" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (12/01/2014 06:42:19 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "LMIGuardianSvc" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (12/01/2014 06:42:13 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AppEx Networks Accelerator LWF" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%31

Error: (12/01/2014 06:42:13 PM) (Source: APXACC) (EventID: 1003) (User: )
Description: The NDIS6 LWF initialization has failed. (0xC0000001)


Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Processor: AMD E1-2500 APU with Radeon(TM) HD Graphics 
Percentage of memory in use: 67%
Total physical RAM: 1477.01 MB
Available physical RAM: 476.78 MB
Total Pagefile: 4549.01 MB
Available Pagefile: 3145.48 MB
Total Virtual: 131072 MB
Available Virtual: 131071.84 MB

==================== Drives ================================

Drive c: (Packard Bell) (Fixed) (Total:282.58 GB) (Free:206.16 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 298.1 GB) (Disk ID: EA4C7CA5)

Partition: GPT Partition Type.

==================== End Of Log ============================
         

Und ein weiteres von Norton

Dateiname: pennybeew.exe
Bedrohungsname: Trojan.Zbot
Vollständiger Pfad: c:\users\pk\appdata\local\pennybee\pennybeew.exe

____________________________



Details
Viele Benutzer,* Schon länger bekannt,* Risiko Hoch





Ursprung
Heruntergeladen von
*Unbekannt





Aktivität
Ausgeführte Aktionen: 108



____________________________



Auf Computern ab*
22.11.2014 um 19:39:24


Zuletzt verwendet*
01.12.2014 um 18:46:00


Start-Element*
Ja


Gestartet*
Ja


____________________________


Viele Benutzer
Tausende Benutzer in der Norton Community haben diese Datei verwendet.

Schon länger bekannt
Diese Datei wurde vor mehr als 31 Tagen 2 Monaten  veröffentlicht.

Hoch
Das Risiko dieser Datei ist hoch.

Art der Bedrohung: Virus. Programme, die andere Programme, Dateien oder Computerbereiche infizieren, indem sie sich einfügen oder anhängen.



____________________________



Quelle: externe Medien



____________________________

Dateiaktionen

Datei: c:\users\pk\appdata\local\virtualstore\windows\syswow64\ ntos.exe Neustart erforderlich
Datei: c:\windows\syswow64\ ntos.exe Neustart erforderlich
Datei: c:\users\pk\appdata\local\virtualstore\windows\syswow64\wsnpoem\ audio.dll Neustart erforderlich
Datei: c:\windows\syswow64\wsnpoem\ audio.dll Neustart erforderlich
Datei: c:\users\pk\appdata\local\virtualstore\windows\syswow64\wsnpoem\ video.dll Neustart erforderlich
Datei: c:\windows\syswow64\wsnpoem\ video.dll Neustart erforderlich
Datei: c:\users\networkservice\application data\wsnpoem\ audio.dll Keine Aktion erforderlich
Datei: c:\users\networkservice\application data\wsnpoem\ video.dll Keine Aktion erforderlich
Datei: c:\users\pk\appdata\local\virtualstore\windows\syswow64\ wsnpoem Neustart erforderlich
Datei: c:\windows\syswow64\ wsnpoem Neustart erforderlich
Datei: c:\users\localservice\application data\twain_32\ user.ds Keine Aktion erforderlich
Datei: c:\users\networkservice\application data\twain_32\ user.ds Keine Aktion erforderlich
Datei: c:\users\pk\appdata\local\virtualstore\windows\syswow64\twain_32\ local.ds Keine Aktion erforderlich
Datei: c:\windows\syswow64\twain_32\ local.ds Keine Aktion erforderlich
Datei: c:\users\pk\appdata\local\virtualstore\windows\syswow64\twain_32\ user.ds Keine Aktion erforderlich
Datei: c:\windows\syswow64\twain_32\ user.ds Keine Aktion erforderlich
Datei: c:\users\pk\appdata\local\virtualstore\windows\syswow64\lowsec\ local.ds Keine Aktion erforderlich
Datei: c:\windows\syswow64\lowsec\ local.ds Keine Aktion erforderlich
Datei: c:\users\pk\appdata\local\virtualstore\windows\syswow64\lowsec\ user.ds Keine Aktion erforderlich
Datei: c:\windows\syswow64\lowsec\ user.ds Keine Aktion erforderlich
Datei: c:\users\pk\appdata\local\virtualstore\windows\syswow64\lowsec\ user.ds.lll Keine Aktion erforderlich
Datei: c:\windows\syswow64\lowsec\ user.ds.lll Keine Aktion erforderlich
Datei: c:\users\pk\appdata\roaming\lowsec\ local.ds Keine Aktion erforderlich
Datei: c:\users\pk\appdata\roaming\lowsec\ user.ds Keine Aktion erforderlich
Datei: c:\users\pk\appdata\local\virtualstore\windows\syswow64\ sdra64.exe Keine Aktion erforderlich
Datei: c:\windows\syswow64\ sdra64.exe Keine Aktion erforderlich
Datei: c:\users\pk\appdata\local\ sdra64.exe Keine Aktion erforderlich
Datei: c:\users\pk\appdata\local\virtualstore\windows\syswow64\sysproc64\ sysproc32.sys Neustart erforderlich
Datei: c:\windows\syswow64\sysproc64\ sysproc32.sys Neustart erforderlich
Datei: c:\users\pk\appdata\local\virtualstore\windows\syswow64\sysproc64\ sysproc86.sys Neustart erforderlich
Datei: c:\windows\syswow64\sysproc64\ sysproc86.sys Neustart erforderlich
Datei: c:\users\pk\appdata\roaming\microsoft\windows\ghcq8r9\ ghcq8r9.dat Keine Aktion erforderlich
Datei: c:\users\pk\appdata\roaming\microsoft\windows\ghcq8r9\ ghcq8r9.nfo Keine Aktion erforderlich
Datei: c:\users\pk\appdata\roaming\microsoft\windows\ghcq8r9\ ghcq8r9.svr Keine Aktion erforderlich
Datei: c:\users\pk\appdata\local\virtualstore\windows\ bootmgr.dat Keine Aktion erforderlich
Datei: c:\windows\ bootmgr.dat Keine Aktion erforderlich
Datei: c:\users\pk\ data.x.dat Keine Aktion erforderlich
Datei: c:\ data.rar.dat Keine Aktion erforderlich
Datei: c:\ data.x.dat Keine Aktion erforderlich
Datei: c:\users\pk\appdata\local\pennybee\configs\ timers.xml Keine Aktion erforderlich
Ereignis: Laufender Prozess: C:\Users\Pk\AppData\Local\ sdra64.exe Keine Aktion erforderlich
Ereignis: Laufender Prozess: c:\users\pk\appdata\local\pennybee\ pennybeew.exe Beendet
Ereignis: Laufender Prozess: C:\Users\Pk\AppData\Local\virtualstore\windows\syswow64\ sdra64.exe Keine Aktion erforderlich
Ereignis: Laufender Prozess: C:\WINDOWS\SysWOW64\ sdra64.exe Keine Aktion erforderlich
Ereignis: Laufender Prozess: C:\Users\Pk\AppData\Local\ sdra64.exe Reparatur nicht versucht
Ereignis: Laufender Prozess: C:\Users\Pk\AppData\Local\virtualstore\windows\syswow64\ sdra64.exe Reparatur nicht versucht
Ereignis: Laufender Prozess: C:\WINDOWS\SysWOW64\ sdra64.exe Reparatur nicht versucht
Ereignis: Laufender Prozess: c:\users\pk\appdata\local\pennybee\ pennybeew.exe Reparatur nicht versucht
Infizierte Datei: c:\users\pk\appdata\local\pennybee\ pennybeew.exe Keine Aktion erforderlich
Verzeichnis: c:\users\pk\appdata\local\ icsharpcode.net entfernt
Verzeichnis: c:\users\pk\appdata\local\icsharpcode.net\ pennybeew.exe_url_ubgogtsy2oqxpavqftahxghie3hz2d4q Keine Aktion erforderlich
Verzeichnis: c:\users\pk\appdata\local\icsharpcode.net\pennybeew.exe_url_ubgogtsy2oqxpavqftahxghie3hz2d4q\ 1.0.5.0 Keine Aktion erforderlich
____________________________

Registrierungsaktionen

Registrierungsänderung: HKEY_USERS\S-1-5-19\Software\ gHcq8R9 Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1001\Software\ gHcq8R9 Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-20\Software\ gHcq8R9 Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1004\Software\ gHcq8R9 Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1005\Software\ gHcq8R9 Neustart erforderlich
Registrierungsänderung: HKEY_USERS\.DEFAULT\Software\ gHcq8R9 Neustart erforderlich
Registrierungsänderung: HKEY_CLASSES_ROOT\CLSID\ {DE7CBE17-0368-40E2-8357-1639DA027BAB} Neustart erforderlich
Registrierungsänderung: HKEY_CLASSES_ROOT\ PPT_Test.Application Neustart erforderlich
Registrierungsänderung: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon->Userinit:C:\WINDOWS\SysWOW64\ userinit.exe, Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\ Run->userinit Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1001\Software\Microsoft\Windows\CurrentVersion\ Run->userinit Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\ Run->userinit Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1004\Software\Microsoft\Windows\CurrentVersion\ Run->userinit Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1005\Software\Microsoft\Windows\CurrentVersion\ Run->userinit Neustart erforderlich
Registrierungsänderung: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\ Run->userinit Neustart erforderlich
Registrierungsänderung: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\ CurrentVersion->Win32 Neustart erforderlich
Registrierungsänderung: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ Network->UID Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ Network->UID Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ Network->UID Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ Network->UID Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1004\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ Network->UID Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1005\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ Network->UID Neustart erforderlich
Registrierungsänderung: HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ Network->UID Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\ {19127AD2-394B-70F5-C650-B97867BAA1F7} Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\ {19127AD2-394B-70F5-C650-B97867BAA1F7} Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer\ {19127AD2-394B-70F5-C650-B97867BAA1F7} Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\ {19127AD2-394B-70F5-C650-B97867BAA1F7} Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\ {19127AD2-394B-70F5-C650-B97867BAA1F7} Neustart erforderlich
Registrierungsänderung: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\ {19127AD2-394B-70F5-C650-B97867BAA1F7} Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\ {35106240-D2F0-DB35-716E-127EB80A0299} Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\ {35106240-D2F0-DB35-716E-127EB80A0299} Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer\ {35106240-D2F0-DB35-716E-127EB80A0299} Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\ {35106240-D2F0-DB35-716E-127EB80A0299} Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\ {35106240-D2F0-DB35-716E-127EB80A0299} Neustart erforderlich
Registrierungsänderung: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\ {35106240-D2F0-DB35-716E-127EB80A0299} Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\ {43BF8CD1-C5D5-2230-7BB2-98F22C2B7DC6} Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\ {43BF8CD1-C5D5-2230-7BB2-98F22C2B7DC6} Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer\ {43BF8CD1-C5D5-2230-7BB2-98F22C2B7DC6} Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\ {43BF8CD1-C5D5-2230-7BB2-98F22C2B7DC6} Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\ {43BF8CD1-C5D5-2230-7BB2-98F22C2B7DC6} Neustart erforderlich
Registrierungsänderung: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\ {43BF8CD1-C5D5-2230-7BB2-98F22C2B7DC6} Neustart erforderlich
Registrierungsänderung: HKEY_CLASSES_ROOT\ Cad.Document Neustart erforderlich
Registrierungsänderung: HKEY_CLASSES_ROOT\ .max, Registrierungsstruktur: 32 bit Neustart erforderlich
Registrierungsänderung: HKEY_CLASSES_ROOT\ .max, Registrierungsstruktur: 64 bit Neustart erforderlich
Registrierungsänderung: HKEY_CLASSES_ROOT\ Matrix.Document, Registrierungsstruktur: 32 bit Neustart erforderlich
Registrierungsänderung: HKEY_CLASSES_ROOT\ Matrix.Document, Registrierungsstruktur: 64 bit Neustart erforderlich
Registrierungsänderung: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ .max Neustart erforderlich
Registrierungsänderung: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ Matrix.Document Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Policies\System\ ->DisableTaskMgr:0 Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1001\Software\Microsoft\Windows\CurrentVersion\Policies\System\ ->DisableTaskMgr:0 Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Policies\System\ ->DisableTaskMgr:0 Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1004\Software\Microsoft\Windows\CurrentVersion\Policies\System\ ->DisableTaskMgr:0 Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1005\Software\Microsoft\Windows\CurrentVersion\Policies\System\ ->DisableTaskMgr:0 Neustart erforderlich
Registrierungsänderung: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\System\ ->DisableTaskMgr:0 Neustart erforderlich
Registrierungsänderung: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ system->EnableLUA:1 Neustart erforderlich
Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1001\Software\Microsoft\Windows\CurrentVersion\ Run->PennyBee Neustart erforderlich
____________________________


Dateiabdruck - SHA:
8a4aee9965ae465aebdbf767f23d77afbe33adcefe75928956cd88d06a32dd61
Dateiabdruck - MD5:
Nicht verfügbar
         

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Task: {63258523-71B1-4737-8DB2-FAA322AA1E5B} - \PC Speed Maximizer Schedule No Task File <==== ATTENTION
emptytemp:
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.



ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 01-12-2014
Ran by Hbib at 2014-12-02 15:35:21 Run:1
Running from C:\Users\Pk\Desktop
Loaded Profile: Hbib (Available profiles: Hbib & issam_000 & ouali_000)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Task: {63258523-71B1-4737-8DB2-FAA322AA1E5B} - \PC Speed Maximizer Schedule No Task File <==== ATTENTION
emptytemp:
*****************

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{63258523-71B1-4737-8DB2-FAA322AA1E5B}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{63258523-71B1-4737-8DB2-FAA322AA1E5B}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PC Speed Maximizer Schedule" => Key not found.
EmptyTemp: => Removed 1.2 GB temporary data.


The system needed a reboot. 

==== End of Fixlog ====
         

 Results of screen317's Security Check version 0.99.91  
   x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Windows Defender           
Norton Internet Security   
 WMI entry may not exist for antivirus; attempting automatic update. 
`````````Anti-malware/Other Utilities Check:````````` 
 Malwarebytes Anti-Malware Version 2.0.3.1025  
 Java 7 Update 67  
 Java version 32-bit out of Date! 
 Adobe Flash Player 	15.0.0.239  
 Mozilla Firefox (33.1.1) 
 Google Chrome (39.0.2171.65) 
 Google Chrome (39.0.2171.71) 
````````Process Check: objlist.exe by Laurent````````  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  % 
````````````````````End of Log``````````````````````
         

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=2da2ec79f0c4f346a26974ef6286ac4d
# engine=21365
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-12-02 08:36:38
# local_time=2014-12-02 09:36:38 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode_1='Norton Internet Security'
# compatibility_mode=3597 16777213 100 100 25681 180149183 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 906268 42433891 0 0
# scanned=181987
# found=25
# cleaned=0
# scan_time=18663
sh=CED05266ECDC6547AFB0B18E7AB4DBCCA5535FB9 ft=1 fh=2791e6518558f99b vn="Variante von Win32/SpeedingUpMyPC Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\PC Speed Maximizer\PCSpeedMaximizer.exe.vir"
sh=452E9D455E744A8032DD74112511C370FEC9CB35 ft=1 fh=0752f663fb36a4c8 vn="Variante von Win32/Systweak evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\RCP\RegCleanPro.exe.vir"
sh=C7C0F42A23562AA6DCCD60326FD8CC2AA41B5448 ft=1 fh=c053642cee9f3def vn="Win32/Thinknice.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\DpInterface32.dll.vir"
sh=125B1C393F2104CBA08183E495C0907BFF7EDA22 ft=1 fh=ea25908c8365106f vn="Win64/Thinknice.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\DpInterface64.dll.vir"
sh=8E85792765D0E0BF52107CFF4A6620995DB19BB0 ft=1 fh=627da500ea2e265f vn="Variante von Win32/Thinknice.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\DpInterfacef32.dll.vir"
sh=2FCA2173F2DD16DF8F1F990170FA4479FC5D5BFC ft=1 fh=c528dd1cda99a111 vn="Variante von Win32/ELEX.AR evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\RSHP.exe.vir"
sh=5836A5DF3860241F6B69F2292ABCE592A13689B6 ft=1 fh=a3db04555f559ea8 vn="Variante von Win32/Thinknice.C evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SpAPPSv32.dll.vir"
sh=E97CBDBD7CFED2C58464C1ABF186520022DE5666 ft=1 fh=7a2ea5ecc33ad0e3 vn="Variante von Win64/Thinknice.C evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SpAPPSv64.dll.vir"
sh=9DC13DB9C123270C2356ED410128E11D5ADF7C6E ft=1 fh=023ab782f0a9b07d vn="Win32/Thinknice.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SupTab.dll.vir"
sh=B4AF5825A14F51A8F47FD5CD7FB1159C3F17A89E ft=1 fh=3154c92a41be5365 vn="Variante von Win32/BrowseFox.N evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\webget\bin\webgetBAApp.dll.vir"
sh=A70C63312CBCD0D975236E48372A5F3275A01554 ft=1 fh=b3500ac9ac48c1c9 vn="Variante von Win32/ELEX.AE evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\WPM\wprotectmanager.exe.vir"
sh=C60FABC9D2BE4583B01968C9E31A9FE933718BA1 ft=1 fh=c5947bbfe83b6d75 vn="Variante von MSIL/Toolbar.Linkury.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Pk\AppData\Local\PennyBee\PennyBeeW.exe.vir"
sh=2DAAB83B0439BC76845E58F3F7DDB84EE8E210C4 ft=1 fh=855a37aa5dbeb36f vn="Win32/InstallCore.PC evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Pk\AppData\Roaming\0V1L2Z2Z1T1I1L1T\Minecraft Packages\uninstaller.exe.vir"
sh=DBE94CAAF499F3CE049C83882BDD1E27C1FBB8DE ft=1 fh=7c704831d16c04b5 vn="Variante von Win32/DealPly.S evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Pk\AppData\Roaming\UpdaterEX\UpdateProc\UpdateTask.exe.vir"
sh=851DEE74345A40A44C3B0A292AFBFB0C360C0142 ft=1 fh=20cbb9a86958b3aa vn="Win32/Gleamaster.A Trojaner" ac=I fn="C:\Program Files (x86)\Fenix CS 1.6\Counter-Strike 1.6\cstrike\models\player\admin\newmodel\admin_ct.mdl"
sh=FB6671A49A884070C6EF715D2F1FAD2BDBBBC136 ft=1 fh=2af0db3e042baa77 vn="Variante von MSIL/Toolbar.Linkury.I evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\Installer\MSI8BE0.tmp-\Smartbar.Resources.HistoryAndStatsWrapper.dll"
sh=6DCC13A366785A704F46E8E25942B34855909256 ft=1 fh=d5332291222fca7d vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\Installer\MSI8BE0.tmp-\Smartbar.Resources.LanguageSettings.resources.dll"
sh=0350DF22B6626CFD0AD4EB6007A2461F11CEEE10 ft=1 fh=209276bd891a8712 vn="Variante von MSIL/Toolbar.Linkury.I evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\Installer\MSI8BE0.tmp-\spbe.dll"
sh=45A9E5328644E080C54C5F698851F45538944E18 ft=1 fh=e8d62f7bd8f8b91a vn="Variante von MSIL/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\Installer\MSI8BE0.tmp-\spbl.dll"
sh=B65091119509CD666CCCA7B15B877C4B022A7833 ft=1 fh=4367817249f0c42e vn="Variante von MSIL/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\Installer\MSI8BE0.tmp-\sppsm.dll"
sh=74170C095222A2C20A4890317F06F305E8F3AD4D ft=1 fh=c7c1dc6906c45ff4 vn="Variante von MSIL/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\Installer\MSI8BE0.tmp-\spusm.dll"
sh=A9CBD104B9E7095FA2149353191B54C6BE529B89 ft=1 fh=175322f6e29cd6c3 vn="Variante von MSIL/Toolbar.Linkury.C evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\Installer\MSI8BE0.tmp-\srbs.dll"
sh=04DB138EADC252C1A2A992522B885B1EC49FC51B ft=1 fh=2b5a7693da531107 vn="Variante von MSIL/Toolbar.Linkury.F evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\Installer\MSI8BE0.tmp-\srbu.dll"
sh=FA84A01F54889BF65D7FF7FEE70C0ABB2022EB34 ft=1 fh=55bc1129650c5700 vn="Variante von MSIL/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\Installer\MSI8BE0.tmp-\srptc.dll"
sh=0245CD046791D326380C1B884024FD7C2F3FF831 ft=1 fh=ec54f2db7e2fe2a1 vn="Variante von MSIL/Toolbar.Linkury.I evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\Installer\MSI8BE0.tmp-\srpu.dll"
         

Bitte lasse die Datei aus der Code-Box bei Virustotal überprüfen.

• Klicke auf Wählen Sie eine
• Kopiere nun folgendes in die Suchleiste

  C:\Program Files (x86)\Fenix CS 1.6\Counter-Strike 1.6\cstrike\models\player\admin\newmodel\admin_ct.mdl
           

• und klicke auf Öffnen.
• Klicke auf Scannen!.
• Warte bitte bis die Datei vollständig hochgeladen wurde. Solltest Du folgende Meldung bekommen

  Diese Datei wurde bereits von VirusTotal analysiert...

  klicke auf Neu analysieren.
• Warte bis dir das Analysedatum angezeigt wird und der Scan abgeschlossen ist.
• Kopiere den Link aus deiner Adresszeile und poste ihn hier.

Tut mir leid solange nicht mehr geantwortet zu haben, hatte viel um die Ohren, jetzt aber wieder Zeit.

https://www.virustotal.com/de/file/955786a4f624ffacbfaf05fcb235145196cbfc51aa95614fc5925879d5475948/analysis/1419001122/

Kein Ding !

Ich räum eh nur alles 3-4 Monate meine Abos auf ;-)

C:\Program Files (x86)\Fenix CS 1.6\Counter-Strike 1.6\cstrike\models\player\admin\newmodel\admin_ct.mdl
         

Scheint tatsächlich nen Trojaner zu sein:


Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

C:\Program Files (x86)\Fenix CS 1.6\Counter-Strike 1.6\cstrike\models\player\admin\newmodel\admin_ct.mdl
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Java muss noch geupdated werden.

Ansonsten waren die Logs dann sauber:

Die Reihenfolge ist hier entscheidend.

1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
   • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
   • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
   • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
3. Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
   • Schließe alle offenen Programme.
   • Starte die delfix.exe mit einem Doppelklick.
   • Setze vor jede Funktion ein Häkchen.
   • Klicke auf Start.
   • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
   • Starte deinen Rechner abschließend neu.
4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Abschließend habe ich noch ein paar Tipps zur Absicherung deines Systems.

Ändere regelmäßig alle deine Passwörter, jetzt, nach der Bereinigung ist ein idealer Zeitpunkt dafür

• verwende für jede Anwendung und jeden Account ein anderes Passwort
• ändere regelmäßig dein Passwort, vor allem bei Onlinebanking oder deinem Emailpostfach ist dieses sehr wichtig
• speichere keine Passwörter auf deinem PC, gib diese nicht an dritte weiter
• ein sicheres Passwort besteht aus mindestens 8 Zeichen und beinhaltet Groß- und Kleinbuchstaben, Zahlen und Sonderzeichen
• benutze keine Zahlen- oder Buchstabenkombinationen, ( zB 12345678, qwertzui) auch keine Zahlen oder Buchstabenmuster
• verwende keine Passwörter die einen Bezug zu dir, deinem Wohnort, Familienmitglied oder Haustier (Geburtsdatum, Postleitzahl, Adresse, Name) haben

Ich kann gar nicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

• Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
• Windows Updates
  • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
  • Windows Vista / 7 / 8 : Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
• Gehe sicher das die automatischen Updates aktiviert sind.
• Software Updates
  Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
  Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti-Viren-Programm und zusätzlicher Schutz

• Gehe sicher, dass du immer nur eine Anti-Viren Software installiert hast und dass diese auch up to date ist!
• MalwareBytes Anti Malware
  Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
  Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion bietet zudem noch einen Hintergrundwächter.
  Ein Tutorial zur Verwendung findest Du hier.
• AdwCleaner
  Dieses Tool erkennt eine Vielzahl von Werbeprogrammen (Adware) und unerwümschten Programmen (PUPs).
  Starte das Tool einmal die Woche und lass es laufen. Sollte eine neue Version verfügbar sein, so wird dies angezeigt und du kannst dir die neueste Version direkt auf den Desktop downloaden.
• SpywareBlaster
  Eine kurze Einführung findest du Hier
• WOT (Web of trust)
  Dieses AddOn warnt dich, bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser
Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Mozilla Firefox

• Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
• NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt, wenn Du es bestätigst.
• AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
  Es spart außerdem Downloadkapazität.

Performance

• Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
• Halte dich fern von Registry Cleanern.
  Diese Schaden deinem System mehr als dass sie helfen. Hier ein englischer Link:
  Miekemoes Blogspot ( MVP )

Was du vermeiden solltest:

• Klicke nicht auf alles, nur weil es dich dazu auffordert und schön bunt ist.
• Verwende keine P2P oder Filesharing Software (Emule, uTorrent,..)
• Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
• Öffne keine Anhänge von dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie z.B. deinFoto.jpg.exe.
• Lade keine Software von Softonic oder Chip herunter, da diese Installer oft mit Adware oder unerünschter Software versehen sind!

Nun bleibt mir nur noch dir viel Spaß beim sicheren Surfen zu wünschen... ... und vielleicht möchtest du ja das Trojaner-Board unterstützen?

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 21-12-2014 01
Ran by Hbib at 2014-12-21 15:15:07 Run:2
Running from C:\Users\Pk\Desktop
Loaded Profile: Hbib (Available profiles: Hbib & issam_000 & ouali_000)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
C:\Program Files (x86)\Fenix CS 1.6\Counter-Strike 1.6\cstrike\models\player\admin\newmodel\admin_ct.mdl
*****************

C:\Program Files (x86)\Fenix CS 1.6\Counter-Strike 1.6\cstrike\models\player\admin\newmodel\admin_ct.mdl => Moved successfully.
         

Danke für deine Hilfe, wünsche dir noch Frohe Weihnachten und einen guten Rutsch ins neue Jahr!

Danke ebenso !

Okay, da gibt es doch noch ein Problem, denn seitdem ich Emsisoft auf dem Pc hab läuft dieser sehr langsam, wenn ich dann noch Firefox öffne, ist der CPU- und Arbeitsspeicherverbrauch +60%

Sicher das das an Emsisoft liegt ?
Der macht bei mir so gut wie keine Systemlast.

Naja, vorher hatte ich ja keine Probleme gehabt, vielleicht liegt es an etwas anderem