und das frische FRST log?

ups.. hab ich übersehen Sorry.

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-12-2014
Ran by Max (administrator) on ARLT on 22-12-2014 14:25:31
Running from C:\Users\Max\Desktop
Loaded Profile: Max (Available profiles: Max & max_2)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
() C:\Program Files (x86)\D-Link\DWA-140 revB\ANIWConnService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgemca.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Bitdefender) C:\Program Files\Bitdefender\60-Second Virus Scanner\pdscan.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Valve Corporation) D:\Steam\Steam.exe
(Nota Inc.) C:\Program Files (x86)\Gyazo\GyStation.exe
(D-Link Corp.) C:\Program Files (x86)\D-Link\DWA-140 revB\AirNCFG.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) D:\Steam\bin\steamwebhelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
() D:\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
(Valve Corporation) D:\Steam\GameOverlayUI.exe
(TeamSpeak Systems GmbH) D:\Teamspeak 3 Client\ts3client_win64.exe
(Valve Corporation) D:\Steam\bin\steamwebhelper.exe
(Valve Corporation) D:\Steam\bin\steamwebhelper.exe
(Valve Corporation) D:\Steam\bin\steamwebhelper.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Valve Corporation) D:\Steam\bin\steamwebhelper.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6548112 2012-06-12] (Realtek Semiconductor)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [8292120 2013-11-14] (Logitech Inc.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2464072 2014-11-06] (NVIDIA Corporation)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [D-Link D-Link DWA-140] => C:\Program Files (x86)\D-Link\DWA-140 revB\AirNCFG.exe [1074496 2011-06-29] (D-Link Corp.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2013\avgui.exe [4411952 2014-11-04] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-11] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [D-Link Air USB Utility] => C:\Program Files (x86)\D-Link\Air USB Utility\AirCFG.exe [1015808 2004-05-25] (D-Link)
HKLM-x32\...\Run: [ANIWZCS2Service] => C:\Program Files (x86)\ANI\ANIWZCS2 Service\WZCSLDR2.exe [45056 2004-04-14] (Alpha Networks Inc.)
HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\Run: [Steam] => D:\Steam\steam.exe [1940160 2014-11-18] (Valve Corporation)
HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\Run: [EADM] => D:\Origin\Origin.exe [3618648 2014-11-15] (Electronic Arts)
HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\Run: [Spotify Web Helper] => C:\Users\Max\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1676344 2014-12-13] (Spotify Ltd)
HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\Run: [Spotify] => C:\Users\Max\AppData\Roaming\Spotify\spotify.exe [6737976 2014-12-13] (Spotify Ltd)
HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe [35768 2013-12-09] (Overwolf)
HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\Run: [MediaFire Tray] => C:\Users\Max\AppData\Local\MediaFire Desktop\mf_watch.exe [1766120 2014-02-11] ()
HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\Run: [pdiface] => C:\Program Files\Bitdefender\60-Second Virus Scanner\pdiface.exe [283608 2013-10-30] (Bitdefender)
HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\Run: [KSS] => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [202328 2012-12-07] (Kaspersky Lab ZAO)
HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\Run: [EvolveClient] => C:\Program Files\Echobit\Evolve\EvolveClient.exe [3332512 2014-09-20] (Echobit LLC)
HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [22066272 2014-10-01] (Skype Technologies S.A.)
HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\Run: [Gyazo] => C:\Program Files (x86)\Gyazo\GyStation.exe [3095840 2014-10-27] (Nota Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\LOLRecorder.lnk
ShortcutTarget: LOLRecorder.lnk -> D:\League of Legends\LOLReplay\LOLRecorder.exe (LOL Replay)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Ralink Wireless Utility.lnk
ShortcutTarget: Ralink Wireless Utility.lnk -> C:\Program Files (x86)\Ralink\Common\RaUI.exe (Ralink Technology, Corp.)
Startup: C:\Users\Max\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Curse.lnk
ShortcutTarget: Curse.lnk -> C:\Users\Max\AppData\Roaming\Curse Client\Bin\Curse.exe (Curse, Inc)
ShellIconOverlayIdentifiers: [1MediaFireIconError] -> {5EE8C634-CDC0-453D-9731-DF0B19F4E807} => C:\Program Files (x86)\MediaFire Desktop\MediaFireIcon3_e28e2.dll (TODO: <Company name>)
ShellIconOverlayIdentifiers: [1MediaFireIconSynched] -> {9A3B79CB-D899-40B5-8DBC-20447F1ADC8F} => C:\Program Files (x86)\MediaFire Desktop\MediaFireIcon_e28e2.dll (TODO: <Company name>)
ShellIconOverlayIdentifiers: [1MediaFireIconSyncing] -> {C4D81971-6B13-4173-AB21-F83AD20CCC04} => C:\Program Files (x86)\MediaFire Desktop\MediaFireIcon2_e28e2.dll (TODO: <Company name>)
ShellIconOverlayIdentifiers: [MediaFireIconLock] -> {759F3E92-F4E8-4953-8315-238B8B17E0F3} => C:\Program Files (x86)\MediaFire Desktop\MediaFireIcon4_e28e2.dll (TODO: <Company name>)
ShellIconOverlayIdentifiers: [MediaFireIconReadOnly] -> {7995D0FC-769B-4197-AEC0-991921CB99E1} => C:\Program Files (x86)\MediaFire Desktop\MediaFireIcon5_e28e2.dll (TODO: <Company name>)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_20\bin\ssv.dll (Oracle Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_20\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_20\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_20\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Hosts: 127.0.0.1 activation.cloud.techsmith.com
Tcpip\..\Interfaces\{B14A7EA0-02A5-4A04-BF21-058659616F10}: [NameServer] 192.168.178.56,192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\dzo1t9pd.default-1375380288175
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_246.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.20.2 -> C:\Program Files\Java\jre1.8.0_20\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.6 -> D:\VLC Media player\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_246.dll ()
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> D:\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.20.2 -> C:\Program Files (x86)\Java\jre1.8.0_20\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.20.2 -> C:\Program Files (x86)\Java\jre1.8.0_20\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.2 -> D:\Irgendein Shit\VLC\npvlc.dll No File
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-4249622001-875609324-433111981-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
FF Extension: Battlefield Heroes Updater - C:\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\dzo1t9pd.default-1375380288175\Extensions\battlefieldheroespatcher@ea.com [2014-02-22]
FF Extension: Download videos and MP3s from YouTube - C:\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\dzo1t9pd.default-1375380288175\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900} [2014-11-16]
FF Extension: Destroy the Web - C:\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\dzo1t9pd.default-1375380288175\Extensions\{7BDB48D1-CD94-4B99-A5A4-E418B9EE6532}.xpi [2014-02-19]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-07-14]
FF HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-11-16]

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.de/
CHR StartupUrls: Default -> "hxxp://www.google.de/"
CHR Profile: C:\Users\Max\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Max\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-02]
CHR Extension: (GMX MailCheck) - C:\Users\Max\AppData\Local\Google\Chrome\User Data\Default\Extensions\camnampocfohlcgbajligmemmabnljcm [2013-10-04]
CHR Extension: (Battlefield Heroes) - C:\Users\Max\AppData\Local\Google\Chrome\User Data\Default\Extensions\cehdakiococlfmjcbebbkjkfjhbieknh [2013-09-06]
CHR Extension: (AdBlock) - C:\Users\Max\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-08-16]
CHR Extension: (Auto HD For YouTube™) - C:\Users\Max\AppData\Local\Google\Chrome\User Data\Default\Extensions\koiaokdomkpjdgniimnkhgbilbjgpeak [2014-05-03]
CHR Extension: (Save to Pocket) - C:\Users\Max\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj [2014-12-17]
CHR Extension: (Twitch Now) - C:\Users\Max\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlmbdmpjmlijibeockamioakdpmhjnpk [2014-10-24]
CHR Extension: (Google Wallet) - C:\Users\Max\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Extension: (Quick start) - C:\Users\Max\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma [2014-12-17]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-12-11] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-11] (Avira Operations GmbH & Co. KG)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [4942384 2014-10-17] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [283136 2013-11-20] (AVG Technologies CZ, s.r.o.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-07-09] () [File not signed]
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2443960 2014-10-30] (Microsoft Corporation)
R2 D_Link_DWA-140_WPS; C:\Program Files (x86)\D-Link\DWA-140 revB\ANIWConnService.exe [53248 2010-07-12] () [File not signed]
S3 EvoSvc; C:\Program Files\Echobit\Evolve\EvoSvc.exe [1579936 2014-09-20] (Echobit LLC)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-11-06] (NVIDIA Corporation)
R2 KSS; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [202328 2012-12-07] (Kaspersky Lab ZAO)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-11-06] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19819848 2014-11-06] (NVIDIA Corporation)
S3 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [96184 2013-12-09] (Overwolf)
R2 pdserv; C:\Program Files\Bitdefender\60-Second Virus Scanner\pdscan.exe [1445424 2013-11-11] (Bitdefender)
S3 RaMediaServer; C:\Program Files (x86)\Ralink\Common\RaMediaServer.exe [621632 2011-03-04] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-12-19] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-12-19] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 amdide64; C:\Windows\System32\drivers\amdide64.sys [11904 2011-12-18] (Advanced Micro Devices Inc.)
S3 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36520 2012-09-13] (Advanced Micro Devices, Inc.)
S1 anodlwf; C:\Windows\system32\DRIVERS\anodlwfx.sys [15872 2011-02-21] ()
S3 asahci64; C:\Windows\System32\drivers\asahci64.sys [49760 2012-01-06] (Asmedia Technology)
S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [20912 2012-10-26] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [246072 2013-11-25] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [71480 2013-07-20] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [209720 2014-11-04] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [311608 2013-07-20] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [116536 2013-07-01] (AVG Technologies CZ, s.r.o.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-07] (Avira Operations GmbH & Co. KG)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [45880 2013-10-23] (AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [52000 2014-12-10] (AVG Technologies)
R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [248632 2014-11-04] (AVG Technologies CZ, s.r.o.)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131608 2014-10-07] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-10-01] (Avira Operations GmbH & Co. KG)
S3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [13088 2011-03-02] ()
R3 EvolveVirtualAdapter; C:\Windows\system32\DRIVERS\evolve.sys [21656 2014-07-30] (Echobit, LLC)
S3 FLxHCIh; C:\Windows\System32\drivers\FLxHCIh.sys [77040 2012-11-02] (Fresco Logic)
S3 hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [46136 2014-09-04] (LogMeIn Inc.)
S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [32000 2013-08-01] ()
R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [26072 2012-09-14] (Intel Corporation)
S3 iaStorS; C:\Windows\System32\drivers\iaStorS.sys [650200 2012-09-14] (Intel Corporation)
S3 ISASerial; C:\Windows\System32\drivers\ISASerial.sys [72192 2008-02-20] (Windows (R) Codename Longhorn DDK provider)
R3 LGSHidFilt; C:\Windows\system32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
R2 mfmonitor; C:\Windows\System32\DRIVERS\mfmonitor_x64.sys [20696 2013-12-06] (Windows (R) Win 7 DDK provider)
S3 MTsensor; C:\Windows\System32\drivers\ASACPI.sys [15416 2009-07-16] ()
S3 nvamacpi; C:\Windows\System32\drivers\NVAMACPI.sys [28192 2009-07-17] (NVIDIA Corporation)
S3 nvrd64; C:\Windows\System32\drivers\nvrd64.sys [175648 2009-08-04] (NVIDIA Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19784 2014-11-06] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38216 2014-10-03] (NVIDIA Corporation)
S3 ocz10xx; C:\Windows\System32\drivers\ocz10xx.sys [139056 2012-04-05] (OCZ Technology Group, Inc.)
S3 PciIsaSerial; C:\Windows\System32\drivers\PciIsaSerial.sys [72192 2008-05-22] (Windows (R) Codename Longhorn DDK provider)
S3 PciPPorts; C:\Windows\System32\drivers\PciPPorts.sys [95744 2008-05-22] ()
S3 PciSPorts; C:\Windows\System32\drivers\PciSPorts.sys [126464 2008-05-22] ()
S3 PPorts; C:\Windows\System32\drivers\PPorts.sys [95744 2008-02-20] ()
S3 Si3124r5; C:\Windows\System32\drivers\Si3124r5.sys [340008 2010-04-13] (Silicon Image, Inc)
R0 SiFilter; C:\Windows\System32\drivers\SiWinAcc.sys [22568 2010-04-13] (Silicon Image, Inc.)
R0 SiRemFil; C:\Windows\System32\drivers\SiRemFil.sys [16936 2010-04-13] (Silicon Image, Inc.)
S3 SPorts; C:\Windows\System32\drivers\SPorts.sys [124416 2008-02-20] ()
S3 StnPport; C:\Windows\System32\drivers\StnPport.sys [97280 2009-12-17] ()
S3 StnSport; C:\Windows\System32\drivers\StnSport.sys [126464 2009-11-14] ()
S3 taphss6; C:\Windows\system32\DRIVERS\taphss6.sys [42184 2014-01-14] (Anchorfree Inc.)
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [71680 2014-04-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-12-19] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-22 14:25 - 2014-12-22 14:25 - 00024149 _____ () C:\Users\Max\Desktop\FRST.txt
2014-12-21 11:23 - 2014-08-15 01:36 - 00146752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys
2014-12-21 11:09 - 2014-12-04 00:37 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2014-12-21 11:09 - 2014-12-04 00:09 - 00830464 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2014-12-21 11:09 - 2014-12-03 00:09 - 01083392 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2014-12-21 11:09 - 2014-12-03 00:09 - 00740864 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2014-12-21 11:09 - 2014-12-03 00:09 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2014-12-21 11:09 - 2014-12-03 00:09 - 00396288 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2014-12-21 11:09 - 2014-12-03 00:09 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2014-12-21 11:09 - 2014-08-23 08:48 - 02374784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-12-21 11:09 - 2014-08-23 08:13 - 02084520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2014-12-21 11:09 - 2014-08-23 07:10 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2014-12-21 11:09 - 2014-08-23 06:32 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2014-12-21 11:09 - 2014-08-23 05:33 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-12-21 11:09 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-12-21 11:09 - 2014-08-16 05:01 - 01710184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-12-21 11:09 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-12-21 11:09 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-12-21 11:09 - 2014-08-16 04:03 - 01467384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2014-12-21 11:09 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-12-21 11:09 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll
2014-12-21 11:09 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-12-21 11:09 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll
2014-12-21 11:09 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll
2014-12-21 11:09 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-12-21 11:09 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll
2014-12-21 11:09 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll
2014-12-21 11:09 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2014-12-21 11:09 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll
2014-12-21 11:09 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-12-21 11:09 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-12-21 11:09 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-12-21 11:09 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
2014-12-21 11:09 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-12-21 11:09 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-12-21 11:09 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-12-21 11:09 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll
2014-12-21 11:09 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-12-21 11:09 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-12-21 11:09 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-12-21 11:09 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-12-21 11:09 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-12-21 11:09 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-12-21 11:09 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-12-21 11:09 - 2014-08-02 01:18 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2014-12-21 11:09 - 2014-07-15 19:16 - 03048880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-12-21 11:09 - 2014-07-15 09:29 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2014-12-21 11:09 - 2014-07-15 09:22 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2014-12-21 11:09 - 2014-07-15 09:03 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2014-12-21 11:09 - 2014-07-10 05:08 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\lockscreencn.dll
2014-12-21 11:09 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2014-12-21 11:09 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-12-21 11:09 - 2014-05-03 06:36 - 00997888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2014-12-21 11:09 - 2014-05-03 06:19 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncobjapi.dll
2014-12-21 11:09 - 2014-05-03 06:08 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedynos.dll
2014-12-21 11:09 - 2014-05-03 06:07 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedyn.dll
2014-12-21 11:09 - 2014-05-03 05:46 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncobjapi.dll
2014-12-21 11:09 - 2014-05-03 05:37 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedynos.dll
2014-12-21 11:09 - 2014-05-03 05:37 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedyn.dll
2014-12-21 11:09 - 2014-05-03 00:26 - 00050745 _____ () C:\WINDOWS\system32\srms.dat
2014-12-21 11:09 - 2014-04-30 07:43 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwififlt.sys
2014-12-21 11:09 - 2014-04-30 07:41 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-12-21 11:09 - 2014-04-30 07:41 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys
2014-12-21 11:09 - 2014-04-30 07:41 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys
2014-12-21 11:09 - 2014-04-30 06:45 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Robocopy.exe
2014-12-21 11:09 - 2014-04-30 05:48 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Robocopy.exe
2014-12-21 11:09 - 2014-04-30 05:24 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
2014-12-21 11:09 - 2014-04-30 05:23 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2014-12-21 11:09 - 2014-04-30 05:23 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2014-12-21 11:09 - 2014-04-30 05:23 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
2014-12-21 11:09 - 2014-04-30 05:14 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-12-21 11:09 - 2014-04-30 04:59 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-12-21 11:09 - 2014-04-30 04:46 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2014-12-21 11:09 - 2014-04-30 04:46 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2014-12-21 11:09 - 2014-04-30 04:46 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll
2014-12-21 11:09 - 2014-04-30 04:45 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll
2014-12-21 11:09 - 2014-04-30 04:42 - 00403968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2014-12-21 11:09 - 2014-04-28 23:40 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2014-12-21 11:09 - 2014-04-26 17:39 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2014-12-21 11:09 - 2014-04-14 10:37 - 02125344 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2014-12-21 11:09 - 2014-04-14 09:08 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2014-12-21 11:09 - 2014-04-14 06:18 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2014-12-21 11:05 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll
2014-12-21 11:05 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll
2014-12-21 11:05 - 2014-06-02 03:10 - 00423768 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-12-21 11:05 - 2014-05-31 07:27 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys
2014-12-21 11:05 - 2014-05-31 07:26 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys
2014-12-21 11:05 - 2014-05-31 05:01 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe
2014-12-21 11:05 - 2014-05-31 05:01 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
2014-12-21 11:05 - 2014-05-31 05:01 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll
2014-12-21 11:05 - 2014-05-27 10:56 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll
2014-12-21 11:05 - 2014-05-27 10:53 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll
2014-12-20 20:49 - 2014-12-20 20:49 - 00094899 _____ () C:\Users\Max\Downloads\SpeedAutoClicker (1).zip
2014-12-20 20:49 - 2014-12-20 20:49 - 00094899 _____ () C:\Users\Max\Desktop\SpeedAutoClicker (1).zip
2014-12-20 16:41 - 2014-12-20 16:41 - 00094899 _____ () C:\Users\Max\Downloads\SpeedAutoClicker.zip
2014-12-19 14:05 - 2014-12-19 14:05 - 00852505 _____ () C:\Users\Max\Downloads\SecurityCheck.exe
2014-12-19 10:24 - 2014-12-19 10:24 - 02347384 _____ (ESET) C:\Users\Max\Downloads\esetsmartinstaller_deu (1).exe
2014-12-19 10:19 - 2014-12-19 10:19 - 00000020 ___SH () C:\Users\Max\ntuser.ini
2014-12-19 02:31 - 2014-12-19 02:31 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-12-19 02:31 - 2014-12-19 02:31 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-12-19 02:31 - 2014-12-19 02:31 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-12-19 02:31 - 2014-12-19 02:31 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-12-19 02:31 - 2014-12-19 02:31 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-12-19 02:31 - 2014-12-19 02:31 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-12-19 02:31 - 2014-12-19 02:31 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-12-19 02:31 - 2014-12-19 02:31 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-12-19 02:31 - 2014-12-19 02:31 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-12-19 02:31 - 2014-12-19 02:31 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-12-19 02:31 - 2014-12-19 02:31 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-12-19 02:31 - 2014-12-19 02:31 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-12-19 02:31 - 2014-12-19 02:31 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-12-19 02:31 - 2014-12-19 02:31 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-12-19 02:31 - 2014-12-19 02:31 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-12-19 02:31 - 2014-12-19 02:31 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-12-19 02:31 - 2014-12-19 02:31 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-12-19 02:30 - 2014-12-19 02:30 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-12-19 02:26 - 2014-12-19 02:26 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-12-19 02:26 - 2014-12-19 02:26 - 00000000 ____D () C:\Users\Default\AppData\Roaming\TuneUp Software
2014-12-19 02:26 - 2014-12-19 02:26 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia
2014-12-19 02:26 - 2014-12-19 02:26 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\TuneUp Software
2014-12-19 02:26 - 2014-12-19 02:26 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia
2014-12-19 02:25 - 2014-12-19 02:25 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-12-19 02:24 - 2014-12-19 10:19 - 00000000 ____D () C:\Users\Max
2014-12-19 02:24 - 2014-12-19 02:29 - 00000000 ____D () C:\Users\max_2
2014-12-19 02:24 - 2014-12-19 02:25 - 00000000 ___RD () C:\Users\Max\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-12-19 02:24 - 2014-12-19 02:25 - 00000000 ___RD () C:\Users\Max\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-12-19 02:24 - 2014-12-19 02:24 - 00000000 _SHDL () C:\Users\max_2\Vorlagen
2014-12-19 02:24 - 2014-12-19 02:24 - 00000000 _SHDL () C:\Users\max_2\Startmenü
2014-12-19 02:24 - 2014-12-19 02:24 - 00000000 _SHDL () C:\Users\max_2\Netzwerkumgebung
2014-12-19 02:24 - 2014-12-19 02:24 - 00000000 _SHDL () C:\Users\max_2\Lokale Einstellungen
2014-12-19 02:24 - 2014-12-19 02:24 - 00000000 _SHDL () C:\Users\max_2\Eigene Dateien
2014-12-19 02:24 - 2014-12-19 02:24 - 00000000 _SHDL () C:\Users\max_2\Druckumgebung
2014-12-19 02:24 - 2014-12-19 02:24 - 00000000 _SHDL () C:\Users\max_2\Documents\Eigene Musik
2014-12-19 02:24 - 2014-12-19 02:24 - 00000000 _SHDL () C:\Users\max_2\Documents\Eigene Bilder
2014-12-19 02:24 - 2014-12-19 02:24 - 00000000 _SHDL () C:\Users\max_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-12-19 02:24 - 2014-12-19 02:24 - 00000000 _SHDL () C:\Users\max_2\AppData\Local\Verlauf
2014-12-19 02:24 - 2014-12-19 02:24 - 00000000 _SHDL () C:\Users\max_2\AppData\Local\Anwendungsdaten
2014-12-19 02:24 - 2014-12-19 02:24 - 00000000 _SHDL () C:\Users\max_2\Anwendungsdaten
2014-12-19 02:24 - 2014-12-19 02:24 - 00000000 _SHDL () C:\Users\Max\Vorlagen
2014-12-19 02:24 - 2014-12-19 02:24 - 00000000 _SHDL () C:\Users\Max\Startmenü
2014-12-19 02:24 - 2014-12-19 02:24 - 00000000 _SHDL () C:\Users\Max\Netzwerkumgebung
2014-12-19 02:24 - 2014-12-19 02:24 - 00000000 _SHDL () C:\Users\Max\Lokale Einstellungen
2014-12-19 02:24 - 2014-12-19 02:24 - 00000000 _SHDL () C:\Users\Max\Eigene Dateien
2014-12-19 02:24 - 2014-12-19 02:24 - 00000000 _SHDL () C:\Users\Max\Druckumgebung
2014-12-19 02:24 - 2014-12-19 02:24 - 00000000 _SHDL () C:\Users\Max\Documents\Eigene Musik
2014-12-19 02:24 - 2014-12-19 02:24 - 00000000 _SHDL () C:\Users\Max\Documents\Eigene Bilder
2014-12-19 02:24 - 2014-12-19 02:24 - 00000000 _SHDL () C:\Users\Max\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-12-19 02:24 - 2014-12-19 02:24 - 00000000 _SHDL () C:\Users\Max\AppData\Local\Verlauf
2014-12-19 02:24 - 2014-12-19 02:24 - 00000000 _SHDL () C:\Users\Max\AppData\Local\Anwendungsdaten
2014-12-19 02:24 - 2014-12-19 02:24 - 00000000 _SHDL () C:\Users\Max\Anwendungsdaten
2014-12-19 02:24 - 2014-12-19 02:24 - 00000000 ___RD () C:\Users\max_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-12-19 02:24 - 2014-12-19 02:24 - 00000000 ___RD () C:\Users\max_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-12-19 02:24 - 2014-09-24 07:18 - 00000369 _____ () C:\Users\max_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-12-19 02:24 - 2014-09-24 07:18 - 00000369 _____ () C:\Users\max_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-12-19 02:24 - 2014-09-24 07:18 - 00000369 _____ () C:\Users\Max\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-12-19 02:24 - 2014-09-24 07:18 - 00000369 _____ () C:\Users\Max\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-12-19 02:24 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\max_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-12-19 02:24 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Max\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-12-19 02:24 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\max_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-12-19 02:24 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Max\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-12-19 02:22 - 2014-12-19 02:31 - 00028578 _____ () C:\WINDOWS\diagwrn.xml
2014-12-19 02:22 - 2014-12-19 02:31 - 00028578 _____ () C:\WINDOWS\diagerr.xml
2014-12-19 02:19 - 2014-12-22 14:11 - 01577642 _____ () C:\WINDOWS\WindowsUpdate.log
2014-12-19 02:19 - 2014-12-22 13:46 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-12-19 02:19 - 2014-12-19 02:26 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-12-19 02:19 - 2014-12-19 02:26 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-12-19 02:19 - 2014-12-19 02:26 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-12-19 02:19 - 2014-12-19 02:19 - 00018960 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\LNonPnP.sys
2014-12-19 02:19 - 2014-12-19 02:19 - 00000388 _____ () C:\WINDOWS\LkmdfCoInst.log
2014-12-19 02:19 - 2014-12-19 02:19 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-12-19 02:19 - 2014-10-16 15:11 - 06883136 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2014-12-19 02:19 - 2014-10-16 15:11 - 03533632 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2014-12-19 02:19 - 2014-10-16 15:11 - 02559808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2014-12-19 02:19 - 2014-10-16 15:11 - 00933064 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2014-12-19 02:19 - 2014-10-16 15:11 - 00384200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2014-12-19 02:19 - 2014-10-16 15:11 - 00061640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2014-12-19 02:19 - 2014-10-15 01:48 - 04047877 _____ () C:\WINDOWS\system32\nvcoproc.bin
2014-12-19 02:19 - 2012-05-17 11:29 - 07163744 ____R (Dolby Laboratories) C:\WINDOWS\system32\R4EEP64A.dll
2014-12-19 02:19 - 2012-05-17 11:29 - 00433504 ____R (Dolby Laboratories) C:\WINDOWS\system32\R4EED64A.dll
2014-12-19 02:19 - 2012-05-17 11:29 - 00141152 ____R (Dolby Laboratories) C:\WINDOWS\system32\R4EEL64A.dll
2014-12-19 02:19 - 2012-05-17 11:29 - 00123744 ____R (Dolby Laboratories) C:\WINDOWS\system32\R4EEA64A.dll
2014-12-19 02:19 - 2012-05-17 11:29 - 00074592 ____R (Dolby Laboratories) C:\WINDOWS\system32\R4EEG64A.dll
2014-12-19 02:18 - 2014-12-19 02:18 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2014-12-19 02:18 - 2014-12-19 02:18 - 00000000 ____D () C:\Program Files\Realtek
2014-12-19 02:17 - 2014-12-21 11:33 - 00000000 ____D () C:\Windows.old
2014-12-19 02:17 - 2014-12-20 00:00 - 00000000 ___DC () C:\WINDOWS\Panther
2014-12-19 02:17 - 2014-12-19 02:17 - 25059840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 19749376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 14412800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 12836864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 06039552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 04299264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 02885120 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 02819584 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 02358272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 02277888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 02171904 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 02149376 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 02125312 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-12-19 02:17 - 2014-12-19 02:17 - 02052096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-12-19 02:17 - 2014-12-19 02:17 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 01307136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 00789184 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-12-19 02:17 - 2014-12-19 02:17 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 00672984 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-12-19 02:17 - 2014-12-19 02:17 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 00602768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 00580096 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2014-12-19 02:17 - 2014-12-19 02:17 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2014-12-19 02:17 - 2014-12-19 02:17 - 00326656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 00273240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-12-19 02:17 - 2014-12-19 02:17 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsDatabase.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-12-19 02:17 - 2014-12-19 02:17 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 03607040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 02773504 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 02459136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 01970432 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 01762840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 01612992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 01519488 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 01489072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00563976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-12-19 02:16 - 2014-12-19 02:16 - 00500016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00482872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00428032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00424544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00394120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00370424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00344536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00272248 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-12-19 02:16 - 2014-12-19 02:16 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00258368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-12-19 02:16 - 2014-12-19 02:16 - 00238912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2014-12-19 02:16 - 2014-12-19 02:16 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00177472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-12-19 02:16 - 2014-12-19 02:16 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00153920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2014-12-19 02:16 - 2014-12-19 02:16 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00116032 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2014-12-19 02:16 - 2014-12-19 02:16 - 00114496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-12-19 02:16 - 2014-12-19 02:16 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00108432 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00104336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00088800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00086336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2014-12-19 02:16 - 2014-12-19 02:16 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\packager.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\packager.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00054592 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdusb.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00039744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2014-12-19 02:16 - 2014-12-19 02:16 - 00035320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-12-19 02:16 - 2014-12-19 02:16 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupStatusProvider.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceSetupStatusProvider.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00027456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys
2014-12-19 02:16 - 2014-12-19 02:16 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll
2014-12-19 02:16 - 2014-12-19 02:16 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 21197152 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 18723112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 13424128 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 11820544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 07484224 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-12-19 02:15 - 2014-12-19 02:15 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 02497344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-12-19 02:15 - 2014-12-19 02:15 - 02480128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 02030592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 01053184 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 01042944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00836176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00670384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00620032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMEX.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00474432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2014-12-19 02:15 - 2014-12-19 02:15 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-12-19 02:15 - 2014-12-19 02:15 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00389176 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-12-19 02:15 - 2014-12-19 02:15 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSAPI.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSAPI.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\url.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\url.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iexpress.exe
2014-12-19 02:15 - 2014-12-19 02:15 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iexpress.exe
2014-12-19 02:15 - 2014-12-19 02:15 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\occache.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00148800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-12-19 02:15 - 2014-12-19 02:15 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-12-19 02:15 - 2014-12-19 02:15 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wextract.exe
2014-12-19 02:15 - 2014-12-19 02:15 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wextract.exe
2014-12-19 02:15 - 2014-12-19 02:15 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\IEAdvpack.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\occache.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-12-19 02:15 - 2014-12-19 02:15 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-12-19 02:15 - 2014-12-19 02:15 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IEAdvpack.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\inseng.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inseng.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2014-12-19 02:15 - 2014-12-19 02:15 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\BulkOperationHost.exe
2014-12-19 02:15 - 2014-12-19 02:15 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2014-12-19 02:15 - 2014-12-19 02:15 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\pngfilt.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pngfilt.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\imgutil.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imgutil.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\licmgr10.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\licmgr10.dll
2014-12-19 02:15 - 2014-12-19 02:15 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshta.exe
2014-12-19 02:15 - 2014-12-19 02:15 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshta.exe
2014-12-19 02:15 - 2014-12-19 02:15 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe
2014-12-19 02:15 - 2014-12-19 02:15 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe
2014-12-19 02:14 - 2014-12-19 02:14 - 04182016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-12-19 02:14 - 2014-12-19 02:14 - 03557376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-12-19 02:14 - 2014-12-19 02:14 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-12-19 02:14 - 2014-12-19 02:14 - 00894976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-12-19 02:14 - 2014-12-19 02:14 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-12-19 02:14 - 2014-12-19 02:14 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2014-12-19 02:14 - 2014-12-19 02:14 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2014-12-19 02:14 - 2014-12-19 02:14 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-12-19 02:14 - 2014-12-19 02:14 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-12-19 02:14 - 2014-12-19 02:14 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2014-12-19 02:14 - 2014-12-19 02:14 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2014-12-19 02:14 - 2014-12-19 02:14 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2014-12-19 02:14 - 2014-12-19 02:14 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2014-12-19 02:14 - 2014-12-19 02:14 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-12-19 02:14 - 2014-12-19 02:14 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-12-19 02:14 - 2014-12-19 02:14 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-12-19 02:14 - 2014-12-19 02:14 - 00055776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-12-19 02:14 - 2014-12-19 02:14 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2014-12-19 02:14 - 2014-12-19 02:14 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2014-12-19 02:14 - 2014-12-19 02:14 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2014-12-19 02:14 - 2014-12-19 02:14 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2014-12-19 02:14 - 2014-12-19 02:14 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll
2014-12-19 02:06 - 2014-12-19 02:06 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer
2014-12-19 02:06 - 2014-12-19 02:06 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-12-19 02:06 - 2014-12-19 02:06 - 00000000 ____D () C:\Program Files\MSBuild
2014-12-19 02:06 - 2014-12-19 02:06 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-12-19 02:06 - 2014-12-19 02:06 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-12-19 02:06 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2014-12-19 02:06 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-12-19 02:06 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2014-12-19 02:06 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-12-18 21:57 - 2014-12-18 21:57 - 00008192 __RSH () C:\BOOTSECT.BAK
2014-12-18 21:57 - 2013-06-18 13:18 - 00000001 ___SH () C:\BOOTNXT
2014-12-18 21:22 - 2014-12-18 21:22 - 02347384 _____ (ESET) C:\Users\Max\Downloads\esetsmartinstaller_deu.exe
2014-12-17 21:58 - 2014-12-21 11:23 - 00000000 ____D () C:\Users\Max\Desktop\Trojan
2014-12-17 21:31 - 2014-12-17 21:31 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-12-17 21:30 - 2014-12-17 21:31 - 01707646 _____ (Thisisu) C:\Users\Max\Downloads\JRT.exe
2014-12-17 21:24 - 2014-12-17 21:29 - 00000000 ____D () C:\AdwCleaner
2014-12-17 21:21 - 2014-12-17 21:21 - 02166272 _____ () C:\Users\Max\Downloads\AdwCleaner_4.105.exe
2014-12-17 21:02 - 2014-12-19 02:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-12-17 21:02 - 2014-12-17 21:18 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-12-17 21:02 - 2014-12-17 21:02 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-12-17 21:02 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-12-17 21:02 - 2014-11-21 06:14 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-12-17 21:02 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-12-17 21:01 - 2014-12-17 21:02 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Max\Downloads\mbam-setup-2.0.4.1028.exe
2014-12-16 23:00 - 2014-12-16 23:00 - 00199270 _____ () C:\Users\Max\Downloads\Sport Arbeit (mit Max).odt
2014-12-16 21:46 - 2014-12-16 21:46 - 00000000 ____D () C:\Users\Max\Downloads\RevoUninstallerPortable
2014-12-16 21:45 - 2014-12-16 21:46 - 02785665 _____ (PortableApps.com) C:\Users\Max\Downloads\RevoUninstallerPortable_1.95_Rev_2.paf.exe
2014-12-16 21:40 - 2014-12-16 21:40 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-12-16 21:39 - 2014-12-16 21:39 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Max\Downloads\revosetup95.exe
2014-12-15 23:37 - 2014-12-22 02:51 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2014-12-15 22:16 - 2014-12-22 14:25 - 00000000 ____D () C:\FRST
2014-12-15 22:16 - 2014-12-20 13:13 - 02122240 _____ (Farbar) C:\Users\Max\Desktop\FRST64.exe
2014-12-15 22:16 - 2014-12-15 22:16 - 02119168 _____ (Farbar) C:\Users\Max\Downloads\FRST64.exe
2014-12-15 18:30 - 2014-12-15 18:30 - 00199270 _____ () C:\Users\Max\Desktop\Sport Arbeit (mit Max).odt
2014-12-15 18:12 - 2014-12-15 18:12 - 00000000 ____D () C:\Users\Max\Documents\Sport
2014-12-14 20:14 - 2014-12-14 20:14 - 00005491 _____ () C:\Users\Max\Downloads\practice.cfg
2014-12-14 11:25 - 2014-12-14 11:25 - 03587298 _____ () C:\Users\Max\Downloads\strafingmap_trilluxe.bsp
2014-12-14 00:47 - 2014-10-03 20:23 - 00038216 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2014-12-14 00:47 - 2014-10-03 20:23 - 00035144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2014-12-14 00:47 - 2014-10-03 20:23 - 00032584 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2014-12-10 20:09 - 2014-12-19 02:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2014-12-10 20:09 - 2014-12-10 20:09 - 01513472 _____ () C:\Users\Max\Downloads\7z935-x64.msi
2014-12-10 20:09 - 2014-12-10 20:09 - 00000000 ____D () C:\Program Files\7-Zip
2014-12-10 19:06 - 2014-12-11 18:25 - 00000000 ____D () C:\Users\Max\AppData\Local\AVG Web TuneUp
2014-12-10 19:06 - 2014-12-10 19:06 - 00052000 _____ (AVG Technologies) C:\WINDOWS\system32\Drivers\avgtpx64.sys
2014-12-10 19:06 - 2014-12-10 19:06 - 00000000 ____D () C:\ProgramData\AVG Web TuneUp
2014-12-10 19:06 - 2014-12-10 19:06 - 00000000 ____D () C:\Program Files (x86)\AVG Web TuneUp
2014-12-07 12:53 - 2014-12-07 12:53 - 00012626 _____ () C:\Users\Max\Downloads\AW- Praktikum.html
2014-11-29 20:02 - 2014-11-29 20:02 - 00000000 ____D () C:\Users\Max\AppData\Roaming\Gyazo
2014-11-29 20:01 - 2014-12-19 02:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gyazo
2014-11-29 20:01 - 2014-12-17 21:13 - 00000000 ____D () C:\Users\Max\AppData\Roaming\InstallDir
2014-11-29 20:01 - 2014-11-29 21:01 - 00000000 ____D () C:\Program Files (x86)\Gyazo
2014-11-29 20:01 - 2014-11-29 20:01 - 09780331 _____ (Nota Inc. ) C:\Users\Max\Downloads\Gyazo-2.3.0.exe
2014-11-29 20:01 - 2014-11-29 20:01 - 00003730 _____ () C:\WINDOWS\System32\Tasks\GyazoUpdateTaskMachine
2014-11-29 20:01 - 2014-11-29 20:01 - 00000982 _____ () C:\Users\Public\Desktop\Gyazo.lnk
2014-11-27 15:35 - 2014-11-27 15:35 - 01526419 _____ () C:\Users\Max\Downloads\LOLReplay-0.8.9.13.exe
2014-11-25 21:22 - 2014-12-19 02:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dBpoweramp
2014-11-25 21:22 - 2014-11-25 21:22 - 05530560 _____ () C:\WINDOWS\SysWOW64\SpoonUninstall.exe
2014-11-25 21:22 - 2014-11-25 21:22 - 00015849 _____ () C:\WINDOWS\SysWOW64\SpoonUninstall-dBpoweramp.dat
2014-11-25 21:22 - 2014-11-25 21:22 - 00014618 _____ () C:\WINDOWS\SysWOW64\SpoonUninstall-dBpoweramp DSP Effects.dat
2014-11-25 21:22 - 2014-11-25 21:22 - 00000000 ____D () C:\Program Files\dBpoweramp
2014-11-25 21:12 - 2014-11-25 21:12 - 25782208 _____ () C:\Users\Max\Downloads\dMC-R15.1-Ref-Trial.exe
2014-11-25 21:01 - 2014-12-19 02:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
2014-11-25 21:01 - 2014-11-25 21:01 - 00001168 _____ () C:\Users\Public\Desktop\Camtasia Studio 8.lnk
2014-11-25 21:01 - 2014-11-25 21:01 - 00000000 ____D () C:\Program Files (x86)\TechSmith
2014-11-25 20:47 - 2014-11-25 20:54 - 257705272 _____ () C:\Users\Max\Downloads\camtasiade.exe
2014-11-25 20:34 - 2014-12-02 20:34 - 00000000 ____D () C:\WINDOWS\System32\Tasks\NCH Software
2014-11-25 20:34 - 2014-11-25 20:34 - 04829752 _____ (NCH Software) C:\Users\Max\Downloads\vppsetup.exe
2014-11-23 17:57 - 2014-12-08 19:21 - 00000000 ____D () C:\Users\Max\Desktop\Bewerbung

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-22 14:13 - 2013-05-11 12:12 - 00001128 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-22 14:02 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-12-22 13:53 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-12-22 13:52 - 2014-09-24 07:17 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-12-22 13:52 - 2014-09-24 06:43 - 00764340 _____ () C:\WINDOWS\system32\perfh007.dat
2014-12-22 13:52 - 2014-09-24 06:43 - 00159160 _____ () C:\WINDOWS\system32\perfc007.dat
2014-12-22 13:52 - 2013-05-13 15:39 - 00000000 ____D () C:\ProgramData\MFAData
2014-12-22 13:52 - 2013-05-11 12:00 - 00003594 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4249622001-875609324-433111981-1001
2014-12-22 13:47 - 2013-07-03 14:19 - 00000000 ____D () C:\Users\Max\AppData\Roaming\TS3Client
2014-12-22 13:46 - 2014-11-09 09:38 - 00000000 ____D () C:\WINDOWS\system32\AutoUpdateLicense
2014-12-22 13:46 - 2014-09-23 22:06 - 00007740 _____ () C:\WINDOWS\PFRO.log
2014-12-22 13:46 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-12-22 13:46 - 2013-05-11 12:12 - 00001124 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-22 02:51 - 2014-09-24 08:43 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2014-12-22 02:51 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-12-22 02:51 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-12-22 02:51 - 2013-08-22 14:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2014-12-22 02:36 - 2013-12-22 14:17 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-12-21 20:37 - 2013-11-03 01:16 - 00000000 ____D () C:\Users\Max\AppData\Local\fabi.me
2014-12-21 20:21 - 2013-05-11 12:08 - 00000000 ____D () C:\Users\Max\AppData\Roaming\Skype
2014-12-21 11:35 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-RS
2014-12-21 11:35 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-CS
2014-12-21 11:32 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\restore
2014-12-21 11:23 - 2014-10-05 13:55 - 00000000 __SHD () C:\Users\Max\AppData\Roaming\Windows
2014-12-20 13:44 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-12-19 20:05 - 2014-01-25 21:45 - 00000000 ____D () C:\Users\Max\AppData\Local\Battle.net
2014-12-19 14:06 - 2014-02-08 11:14 - 00000000 ____D () C:\Users\Max\AppData\Roaming\Notepad++
2014-12-19 10:29 - 2013-08-11 10:04 - 00000000 ____D () C:\Users\Max\AppData\Roaming\Spotify
2014-12-19 10:23 - 2013-08-22 15:46 - 00329316 _____ () C:\WINDOWS\setupact.log
2014-12-19 10:20 - 2013-08-11 10:04 - 00000000 ____D () C:\Users\Max\AppData\Local\Spotify
2014-12-19 10:20 - 2013-05-11 10:26 - 00000000 ____D () C:\Users\Max\AppData\Local\Packages
2014-12-19 02:31 - 2014-11-14 19:32 - 00011303 _____ () C:\WINDOWS\comsetup.log
2014-12-19 02:31 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Registration
2014-12-19 02:31 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-12-19 02:31 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default
2014-12-19 02:30 - 2013-08-22 16:36 - 00000000 __RSD () C:\WINDOWS\Media
2014-12-19 02:30 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries
2014-12-19 02:28 - 2014-11-19 18:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2014-12-19 02:28 - 2012-07-26 09:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP
2014-12-19 02:27 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-12-19 02:27 - 2013-08-22 15:44 - 00512608 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-12-19 02:27 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2014-12-19 02:26 - 2014-11-16 17:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-12-19 02:26 - 2014-11-10 22:12 - 00000000 ____D () C:\Users\Max\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
2014-12-19 02:26 - 2014-11-10 21:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3
2014-12-19 02:26 - 2014-10-30 20:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AudibleManager
2014-12-19 02:26 - 2014-10-22 12:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2014-12-19 02:26 - 2014-10-04 14:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.4
2014-12-19 02:26 - 2014-10-03 18:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\D-Link Air USB
2014-12-19 02:26 - 2014-10-02 16:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ralink Wireless
2014-12-19 02:26 - 2014-10-02 16:37 - 00000000 ____D () C:\WINDOWS\system32\RaLanguages
2014-12-19 02:26 - 2014-09-25 22:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FIFA 15
2014-12-19 02:26 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN
2014-12-19 02:26 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep
2014-12-19 02:26 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\system32\WCN
2014-12-19 02:26 - 2014-09-20 17:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glyph
2014-12-19 02:26 - 2014-06-28 22:54 - 00000000 ____D () C:\Users\Max\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Heroes of Newerth
2014-12-19 02:26 - 2014-06-28 22:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Heroes of Newerth
2014-12-19 02:26 - 2014-06-02 23:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3
2014-12-19 02:26 - 2014-05-13 15:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 60-Second Virus Scanner
2014-12-19 02:26 - 2014-03-28 13:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefly Studios
2014-12-19 02:26 - 2014-03-26 21:37 - 00000000 ____D () C:\WINDOWS\SysWOW64\xlive
2014-12-19 02:26 - 2014-03-26 21:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace
2014-12-19 02:26 - 2014-03-25 14:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Xbox 360 Accessories
2014-12-19 02:26 - 2014-03-13 21:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Titanfall
2014-12-19 02:26 - 2014-03-08 11:34 - 00000000 ____D () C:\Users\Max\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-12-19 02:26 - 2014-03-07 19:04 - 00000000 ____D () C:\WINDOWS\SysWOW64\Adobe
2014-12-19 02:26 - 2014-02-24 16:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2014-12-19 02:26 - 2014-01-25 21:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone
2014-12-19 02:26 - 2014-01-25 21:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2014-12-19 02:26 - 2014-01-19 17:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Tanks
2014-12-19 02:26 - 2013-12-31 10:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2014-12-19 02:26 - 2013-12-28 18:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft
2014-12-19 02:26 - 2013-12-28 14:41 - 00000000 ____D () C:\ProgramData\regid.1995-08.com.techsmith
2014-12-19 02:26 - 2013-12-27 22:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2014-12-19 02:26 - 2013-12-27 22:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft.temp
2014-12-19 02:26 - 2013-12-26 20:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2014-12-19 02:26 - 2013-12-20 15:17 - 00000000 ____D () C:\Users\Max\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
2014-12-19 02:26 - 2013-11-26 16:33 - 00000000 ___SD () C:\Users\Max\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1
2014-12-19 02:26 - 2013-11-05 22:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.3
2014-12-19 02:26 - 2013-11-02 11:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-12-19 02:26 - 2013-08-22 16:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker
2014-12-19 02:26 - 2013-08-22 16:37 - 00004893 _____ () C:\WINDOWS\DtcInstall.log
2014-12-19 02:26 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2014-12-19 02:26 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar
2014-12-19 02:26 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI
2014-12-19 02:26 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz
2014-12-19 02:26 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME
2014-12-19 02:26 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns
2014-12-19 02:26 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\spool
2014-12-19 02:26 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\MUI
2014-12-19 02:26 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\IME
2014-12-19 02:26 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\IME
2014-12-19 02:26 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Help
2014-12-19 02:26 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppCompat
2014-12-19 02:26 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-12-19 02:26 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI
2014-12-19 02:26 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-12-19 02:26 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-12-19 02:26 - 2013-08-08 17:33 - 00000000 ____D () C:\Users\Max\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ
2014-12-19 02:26 - 2013-08-05 14:06 - 00000000 ____D () C:\Program Files\Microsoft LifeCam
2014-12-19 02:26 - 2013-08-05 14:06 - 00000000 ____D () C:\Program Files (x86)\Microsoft LifeCam
2014-12-19 02:26 - 2013-08-01 18:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
2014-12-19 02:26 - 2013-07-29 20:50 - 00000000 ____D () C:\Users\Max\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
2014-12-19 02:26 - 2013-07-09 20:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dotjosh Studios
2014-12-19 02:26 - 2013-07-06 20:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive
2014-12-19 02:26 - 2013-07-02 14:56 - 00000000 ____D () C:\Users\Max\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2014-12-19 02:26 - 2013-06-16 18:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarCraft II
2014-12-19 02:26 - 2013-06-03 19:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.2
2014-12-19 02:26 - 2013-05-20 20:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2014-12-19 02:26 - 2013-05-14 15:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-12-19 02:26 - 2013-05-13 17:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager
2014-12-19 02:26 - 2013-05-13 15:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-12-19 02:26 - 2013-05-12 10:35 - 00000000 ____D () C:\Users\Max\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-12-19 02:26 - 2013-05-12 10:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-12-19 02:26 - 2013-05-11 19:27 - 00000000 ____D () C:\Users\Max\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-12-19 02:26 - 2013-05-11 18:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-12-19 02:26 - 2013-05-11 12:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-12-19 02:26 - 2013-05-11 12:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\D-Link
2014-12-19 02:26 - 2013-05-11 10:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-12-19 02:26 - 2012-11-26 12:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-12-19 02:26 - 2012-11-26 12:03 - 00000000 ____D () C:\WINDOWS\en
2014-12-19 02:26 - 2012-11-26 12:03 - 00000000 ____D () C:\WINDOWS\de
2014-12-19 02:26 - 2012-11-26 11:53 - 00000000 ____D () C:\ProgramData\PRICache
2014-12-19 02:26 - 2012-07-26 06:37 - 00000000 ____D () C:\Users\Default.migrated
2014-12-19 02:25 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2014-12-19 02:25 - 2013-07-06 20:11 - 00000000 ____D () C:\Users\Max\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive
2014-12-19 02:25 - 2013-05-28 20:05 - 00000000 ____D () C:\Users\Max\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GamersFirst
2014-12-19 02:25 - 2013-05-26 11:08 - 00000000 ____D () C:\Users\Max\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2014-12-19 02:25 - 2013-05-12 10:45 - 00000000 ____D () C:\Users\Max\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EA Games
2014-12-19 02:24 - 2014-03-26 21:29 - 00000000 ____D () C:\Users\max_2\AppData\Local\Packages
2014-12-19 02:19 - 2013-05-10 18:03 - 00000000 __SHD () C:\Recovery
2014-12-19 02:17 - 2013-08-22 16:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2014-12-19 02:17 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-12-19 02:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2014-12-19 02:16 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-12-19 02:16 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-12-19 02:16 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-12-19 02:16 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-12-19 02:15 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-12-19 02:15 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-12-19 02:15 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-12-19 01:59 - 2013-05-11 10:24 - 01768002 _____ () C:\WINDOWS\WindowsUpdate (1).log
2014-12-17 21:29 - 2014-03-10 15:10 - 00003112 _____ () C:\WINDOWS\System32\Tasks\RDReminder
2014-12-17 21:14 - 2014-10-05 13:55 - 00000000 ____D () C:\Users\Max\AppData\Roaming\Imminent
2014-12-16 00:58 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
2014-12-15 16:18 - 2013-08-14 16:11 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-12-15 16:15 - 2013-05-18 02:00 - 112710672 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-12-10 19:06 - 2014-05-23 16:27 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-12-09 18:36 - 2013-12-22 14:17 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-12-07 19:32 - 2013-06-25 19:04 - 00000000 ____D () C:\Users\Max\AppData\Local\CrashDumps
2014-12-05 18:22 - 2014-09-21 10:48 - 00000000 ____D () C:\Users\Max\Documents\ArcheAge
2014-11-27 15:36 - 2014-10-21 16:17 - 00000796 _____ () C:\Users\Public\Desktop\LOL Recorder.lnk
2014-11-27 15:36 - 2013-05-22 15:41 - 00000796 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LOL Recorder.lnk
2014-11-26 22:10 - 2014-09-24 08:46 - 00714720 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-11-26 22:10 - 2014-09-24 08:46 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-26 11:11 - 2013-05-12 10:29 - 00000000 ____D () C:\Users\Max\AppData\Roaming\.minecraft
2014-11-25 21:02 - 2013-06-25 18:10 - 00000000 ____D () C:\Users\Max\Documents\Camtasia Studio
2014-11-24 18:19 - 2012-11-26 12:03 - 00496867 _____ () C:\WINDOWS\DirectX.log
2014-11-22 11:48 - 2013-05-14 15:06 - 00000000 ____D () C:\Program Files\Microsoft Office 15

Some content of TEMP:
====================
C:\Users\Max\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-12-19 02:18

==================== End Of Log ============================
         

--- --- ---

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-12-2014
Ran by Max at 2014-12-22 14:26:09
Running from C:\Users\Max\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: AVG AntiVirus Free Edition 2013 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition 2013 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.35 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0935-000001000000}) (Version: 9.35.00.0 - Igor Pavlov)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 13.0.0.83 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.246 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.03) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.03 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.9.149 - Adobe Systems, Inc.)
Air USB Utility (HKLM-x32\...\InstallShield_{2CA94ED4-F38D-44B4-A79D-E5835E276EFC}) (Version:  - D-Link)
Air USB Utility (x32 Version:  - D-Link) Hidden
Alien Swarm (HKLM-x32\...\Steam App 630) (Version:  - Valve)
ANIO Service (HKLM-x32\...\{7B5CE976-C7A9-4E38-A7F3-6C8EF025DD8E}) (Version:  - )
ANIWZCS2 Service (HKLM-x32\...\{4C590030-7469-453E-8589-D15DA9D03F52}) (Version:  - )
APB Reloaded (HKLM-x32\...\Steam App 113400) (Version:  - )
Archeage (HKLM-x32\...\Glyph Archeage) (Version:  - Trion Worlds, Inc.)
Arma 2 (HKLM-x32\...\Steam App 33910) (Version:  - Bohemia Interactive)
Arma 2: DayZ Mod (HKLM-x32\...\Steam App 224580) (Version:  - Bohemia Interactive)
Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version:  - Bohemia Interactive)
Arma 2: Operation Arrowhead Beta (HKLM-x32\...\Steam App 219540) (Version:  - )
Assassin’s Creed® III (HKLM-x32\...\Steam App 208480) (Version:  - Ubisoft Montreal)
AudibleManager (HKLM-x32\...\AudibleManager) (Version: 18414980.4759644.48.2009872072 - Audible, Inc.)
AVG 2013 (HKLM\...\AVG) (Version: 2013.0.3495 - AVG Technologies)
AVG 2013 (Version: 13.0.3495 - AVG Technologies) Hidden
AVG 2013 (Version: 13.0.4253 - AVG Technologies) Hidden
AVG Web TuneUp (HKLM-x32\...\AVG Web TuneUp) (Version: 4.0.5.7 - AVG Technologies)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlefield Heroes (HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\{8DC910CD-8EE3-4ffc-A4EB-9B02701059C4}) (Version:  - EA Digital illusions)
Battlefield Play4Free (Max) (HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\{87686C21-8A15-4b4d-A3F1-11141D9BE094}) (Version:  - EA Digital illusions)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.4.0 - EA Digital Illusions CE AB)
BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version:  - )
Bitdefender 60-Second Virus Scanner (HKLM\...\{CCEA2053-D975-4E38-AC09-4D5E6DAC6B6F}) (Version: 1.0.3.76 - Bitdefender)
Blacklight: Retribution (HKLM-x32\...\Steam App 209870) (Version:  - Zombie, Inc.)
Borderlands 2 (HKLM-x32\...\Steam App 49520) (Version:  - Gearbox Software)
Call of Duty: Black Ops II - Multiplayer (HKLM-x32\...\Steam App 202990) (Version:  - )
Call of Duty: Black Ops II - Zombies (HKLM-x32\...\Steam App 212910) (Version:  - )
Call of Duty: Black Ops II (HKLM-x32\...\Steam App 202970) (Version:  - )
Call of Duty: Ghosts - Multiplayer (HKLM-x32\...\Steam App 209170) (Version:  - )
Call of Duty: Modern Warfare 2 - Multiplayer (HKLM-x32\...\Steam App 10190) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare 2 (HKLM-x32\...\Steam App 10180) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare 3 - Dedicated Server (HKLM-x32\...\Steam App 42750) (Version:  - Infinity Ward - Sledgehammer Games)
Call of Juarez Gunslinger (HKLM-x32\...\Steam App 204450) (Version:  - )
Camtasia Studio 8 (HKLM-x32\...\{6BED66AA-1DC6-474B-AC70-205CC3A68A39}) (Version: 8.4.4.1859 - TechSmith Corporation)
Cheat Engine 6.2 (HKLM-x32\...\Cheat Engine 6.2_is1) (Version:  - Dark Byte)
Cheat Engine 6.3 (HKLM-x32\...\Cheat Engine 6.3_is1) (Version:  - Cheat Engine)
Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version:  - Cheat Engine)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Crysis® 2 (HKLM-x32\...\{6033673D-2530-4587-8AD0-EB059FC263F9}) (Version: 1.9.0.0 - Electronic Arts)
Curse (HKLM-x32\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 6.0.0.0 - Curse)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dark Souls: Prepare to Die Edition (HKLM-x32\...\Steam App 211420) (Version:  - FromSoftware)
DARK SOULS™ II (HKLM-x32\...\Steam App 236430) (Version:  - FromSoftware, Inc)
DayZ Commander (HKLM-x32\...\{0B74EC0B-2A85-4542-A167-3DE2132E7DAA}) (Version: 0.92.85 - Dotjosh Studios)
dBpoweramp (HKLM-x32\...\dBpoweramp) (Version: Release 15.1 - Illustrate)
dBpoweramp DSP Effects (HKLM-x32\...\dBpoweramp DSP Effects) (Version: Release 11 - Illustrate)
D-Link DWA-140 (HKLM-x32\...\{D7D2F494-89E3-42ED-8A2B-75BDD9B464CB}) (Version:  - D-Link)
Dll-Files Fixer (HKLM-x32\...\Dll-Files Fixer_is1) (Version: 3.1.81 - Dll-Files.com)
Dota 2 (HKLM-x32\...\Steam App 570) (Version:  - Valve)
Dungeon Defenders (HKLM-x32\...\Steam App 65800) (Version:  - )
EA SPORTS™ FIFA 15 (HKLM-x32\...\{3D4ADA2B-F028-4307-ADF4-6F9AA44725DA}) (Version: 1.3.0.0 - Electronic Arts)
Equalify v2.2.1 (Stable) (HKLM-x32\...\{FF890228-5396-4BB0-B500-6E2843D7DD63}) (Version: 2.2.1.0 - Equalify)
Evolve (HKLM\...\{670B1B49-9FD3-4827-9B41-471EFF580AA8}) (Version: 1.8.8 - Echobit, LLC)
Fotogalerie (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Free YouTube to MP3 Converter version 3.12.50.1111 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.50.1111 - DVDVideoSoft Ltd.)
GamersFirst LIVE! (HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\GamersFirst LIVE!) (Version:  - GamersFirst)
GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)
Glyph (HKLM-x32\...\Glyph) (Version:  - Trion Worlds, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Gotham City Impostors: Free To Play (HKLM-x32\...\Steam App 206210) (Version:  - Monolith Productions, Inc. )
Gyazo 2.3 (HKLM-x32\...\{6DB8C365-E719-4BA5-9594-10DFC244D3FD}_is1) (Version:  - Nota Inc.)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Heroes of Newerth (HKLM-x32\...\hon) (Version: 2.3.0 - S2 Games)
Hitman: Absolution (HKLM-x32\...\Steam App 203140) (Version:  - Square Enix)
Hitman: Sniper Challenge (HKLM-x32\...\Steam App 205930) (Version:  - IO Interactive)
HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.7.202 - SurfRight B.V.)
Iminent (x32 Version: 6.20.11.0 - Iminent) Hidden <==== ATTENTION
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
Java 8 Update 20 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418020F0}) (Version: 8.0.200 - Oracle Corporation)
Java 8 Update 20 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218020F0}) (Version: 8.0.200 - Oracle Corporation)
join.me (HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\JoinMe) (Version: 1.17.0.156 - LogMeIn, Inc.)
Kaspersky Security Scan (HKLM-x32\...\InstallWIX_{56009CA3-423B-41F8-884A-E5B049534F15}) (Version: 12.0.1.340 - Kaspersky Lab)
Kaspersky Security Scan (x32 Version: 12.0.1.340 - Kaspersky Lab) Hidden
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Logitech Gaming Software 8.51 (HKLM\...\Logitech Gaming Software) (Version: 8.51.5 - Logitech Inc.)
LOLReplay (HKLM-x32\...\LOLReplay) (Version: 0.8.9.13 - www.leaguereplays.com)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
MediaFire Desktop (HKLM-x32\...\MediaFire Desktop 0.10.18.9207) (Version: 0.10.18.9207 - MediaFire)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation)
Microsoft Office 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 15.0.4667.1002 - Microsoft Corporation)
Microsoft SkyDrive (HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\SkyDriveSetup.exe) (Version: 17.0.2003.1112 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)
Movie Maker (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Mozilla Firefox 30.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla)
MSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) Hidden
MSVCRT110_amd64 (Version: 16.4.1108.0727 - Microsoft) Hidden
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.46.0 - Black Tree Gaming)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 344.46 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.46 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 344.48 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 344.48 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.4 - NVIDIA Corporation)
NVIDIA Grafiktreiber 344.48 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.48 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4667.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4667.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4667.1002 - Microsoft Corporation) Hidden
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Orcs Must Die! 2 (HKLM-x32\...\Steam App 201790) (Version:  - Robot Entertainment)
Origin (HKLM-x32\...\Origin) (Version: 9.1.15.109 - Electronic Arts, Inc.)
Overwolf (HKLM-x32\...\{030F4BB3-F3C3-4A74-905C-44672D1ECB76}) (Version: 0.47.284 - Overwolf)
Path of Exile (HKLM-x32\...\Steam App 238960) (Version:  - Grinding Gear Games)
PAYDAY: The Heist (HKLM-x32\...\Steam App 24240) (Version:  - OVERKILL Software)
Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Portal 2 (HKLM-x32\...\Steam App 620) (Version:  - Valve)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Ralink RT2870 Wireless LAN Card (HKLM-x32\...\{28DA7D8B-F9A4-4F18-8AA0-551B1E084D0D}) (Version: 1.5.12.0 - Ralink)
Realm of the Mad God (HKLM-x32\...\Steam App 200210) (Version:  - )
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6662 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Saints Row IV Inauguration Station (HKLM-x32\...\Steam App 242590) (Version:  - )
SHIELD Streaming (Version: 3.1.2000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.13.65 - NVIDIA Corporation) Hidden
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 6.21 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.21.104 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\Spotify) (Version: 0.9.15.27.g87efe634 - Spotify AB)
SpyHunter (HKLM\...\{8AE3CFB6-78B2-4F55-A7BE-618FCFF43A03}) (Version: 4.14.5.4268 - Enigma Software Group USA, LLC)
StarCraft II (HKLM-x32\...\StarCraft II) (Version:  - Blizzard Entertainment)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Stronghold Kingdoms (HKLM-x32\...\{D1D632A2-E249-466D-A094-B1B934D37645}_is1) (Version: 1.17 - Firefly Studios)
Stronghold Kingdoms (HKLM-x32\...\Steam App 47410) (Version:  - FireFly Studios)
Surgeon Simulator 2013 (HKLM-x32\...\Steam App 233720) (Version:  - Bossa Studios)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
System Requirements Lab CYRI (HKLM-x32\...\{6C8C4577-8E15-4C63-96ED-D40F2072FF74}) (Version: 6.0.19.0 - Husdawg, LLC)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)
TeamSpeak 3 Client (HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\TeamSpeak 3 Client) (Version: 3.0.13.1 - TeamSpeak Systems GmbH)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
Titanfall™ (HKLM-x32\...\{347EE0C3-0690-48F6-A231-53853C2A80D6}) (Version: 1.0.7.2 - Electronic Arts)
Tomb Raider (HKLM-x32\...\Steam App 203160) (Version:  - Crystal Dynamics)
Unturned (HKLM-x32\...\Steam App 304930) (Version:  - Nelson Sexton)
Uplay (HKLM-x32\...\Uplay) (Version: 2.0 - Ubisoft)
Vegas Pro 12.0 (64-bit) (HKLM\...\{BE94768F-5232-11E3-BD78-F04DA23A5C58}) (Version: 12.0.770 - Sony)
VideoPad Video Editor (HKLM-x32\...\VideoPad) (Version: 3.74 - NCH Software)
VirtualDJ Home FREE (HKLM-x32\...\{A6AC699F-8315-40CA-8F70-E917494978AB}) (Version: 7.4 - Atomix Productions)
Visual Studio 2010 x64 Redistributables (HKLM\...\{21B133D6-5979-47F0-BE1C-F6A6B304693F}) (Version: 13.0.0.1 - AVG Technologies)
VLC media player 2.0.2 (HKLM-x32\...\VLC media player) (Version: 2.0.2 - VideoLAN)
VLC media player 2.0.6 (HKLM\...\VLC media player) (Version: 2.0.6 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3503.0728 - Microsoft Corporation)
WinRAR 5.10 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
World of Tanks (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1) (Version:  - Wargaming.net)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-4249622001-875609324-433111981-1001_Classes\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-4249622001-875609324-433111981-1001_Classes\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-4249622001-875609324-433111981-1001_Classes\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-4249622001-875609324-433111981-1001_Classes\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\ooofilt_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-4249622001-875609324-433111981-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Max\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-4249622001-875609324-433111981-1001_Classes\CLSID\{AE424E85-F6DF-4910-A6A9-438797986431}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\propertyhdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-4249622001-875609324-433111981-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Max\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-4249622001-875609324-433111981-1001_Classes\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-4249622001-875609324-433111981-1001_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Max\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-4249622001-875609324-433111981-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Max\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-4249622001-875609324-433111981-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Max\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64\FileSyncApi64.dll (Microsoft Corporation)

==================== Restore Points  =========================

21-12-2014 11:32:37 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-06-25 18:03 - 2013-06-25 18:04 - 00000864 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 activation.cloud.techsmith.com

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0D89917E-1D3E-4365-B493-A3851A089F1A} - System32\Tasks\{896FE998-6CEE-49AE-82E2-C79ED1377BC9} => pcalua.exe -a C:\Users\Max\AppData\Roaming\omiga-plus\UninstallManager.exe -c  -ptid=vtt
Task: {22D3FCC8-CF5B-4717-A390-32160FF456DE} - System32\Tasks\AdobeFlashPlayerUpdate => C:\Windows\SysWOW64\FlashPlayerUpdateService.exe
Task: {431E36BC-CE2C-403C-940C-E5E752E8B362} - System32\Tasks\RDReminder => C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
Task: {487782A2-2811-4E72-A0FF-AC98E8E51972} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2014-10-22] (Microsoft Corporation)
Task: {869F700B-9842-410E-BDDD-25F30432305E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-09] (Adobe Systems Incorporated)
Task: {9D719557-8544-469E-8A9C-A73D3DE00676} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-11] (Google Inc.)
Task: {ABB8C38C-BC45-4B1A-8BA2-6C21D494209A} - System32\Tasks\AdobeFlashPlayerUpdate 2 => C:\Windows\SysWOW64\FlashPlayerUpdateService.exe
Task: {AD6CC1BF-AD2E-434A-B066-287043E156AA} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-12-15] (Microsoft Corporation)
Task: {C7BE66F0-0B06-418E-950C-A7F12903B878} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-10-07] (Microsoft Corporation)
Task: {D8C8E600-8B5B-4FC1-A301-D1373890F42C} - System32\Tasks\GyazoUpdateTaskMachine => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2014-07-03] ()
Task: {E88E2202-B54D-42CA-86B4-AA30F7BF0757} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-11] (Google Inc.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-12-19 02:19 - 2014-10-16 15:11 - 00116880 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-03-19 15:14 - 2014-05-20 09:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2013-05-11 12:05 - 2010-07-12 13:39 - 00053248 _____ () C:\Program Files (x86)\D-Link\DWA-140 revB\ANIWConnService.exe
2014-01-01 21:12 - 2014-11-06 18:08 - 00707400 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\gamecaster64.dll
2014-01-01 21:12 - 2014-11-06 18:08 - 00854344 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\twitchsdk64.dll
2014-11-24 18:18 - 2014-11-24 18:18 - 00103424 _____ () D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
2013-04-04 09:38 - 2013-11-22 17:24 - 00302056 _____ () D:\Teamspeak 3 Client\soundbackends\directsound_win64.dll
2013-04-04 09:38 - 2013-11-22 17:24 - 00320488 _____ () D:\Teamspeak 3 Client\soundbackends\windowsaudiosession_win64.dll
2013-04-04 09:38 - 2013-11-22 17:24 - 00565224 _____ () D:\Teamspeak 3 Client\plugins\clientquery_plugin.dll
2013-11-22 17:24 - 2013-11-22 17:24 - 00700904 _____ () D:\Teamspeak 3 Client\plugins\teamspeak_control_plugin.dll
2014-08-31 10:42 - 2014-11-11 19:48 - 01171456 _____ () D:\Steam\libavcodec-56.dll
2014-08-31 10:42 - 2014-11-11 19:48 - 00332800 _____ () D:\Steam\libavresample-2.dll
2014-08-31 10:42 - 2014-11-11 19:48 - 00442368 _____ () D:\Steam\libavutil-54.dll
2013-04-23 17:30 - 2014-11-11 19:47 - 00774656 _____ () D:\Steam\SDL2.dll
2014-06-07 19:22 - 2014-11-18 21:23 - 02227904 _____ () D:\Steam\video.dll
2014-08-31 10:42 - 2014-11-11 19:48 - 00403968 _____ () D:\Steam\libavformat-56.dll
2014-08-31 10:42 - 2014-11-11 19:48 - 00485888 _____ () D:\Steam\libswscale-3.dll
2013-05-03 14:35 - 2014-11-18 21:23 - 00690880 _____ () D:\Steam\bin\chromehtml.DLL
2014-12-22 13:47 - 2014-12-22 13:47 - 00155232 ___HT () C:\Users\Max\AppData\Local\Temp\~FFEB.tmp
2013-05-11 12:05 - 2010-05-13 09:58 - 00294912 _____ () C:\Program Files (x86)\D-Link\DWA-140 revB\WlanApp.dll
2013-05-11 12:05 - 2013-05-11 12:05 - 00315392 _____ () C:\Program Files (x86)\D-Link\DWA-140 revB\ANPDApi.dll
2014-12-11 20:18 - 2014-12-06 02:50 - 01077064 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\libglesv2.dll
2014-12-11 20:18 - 2014-12-06 02:50 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\libegl.dll
2014-12-11 20:18 - 2014-12-06 02:50 - 09009480 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\pdf.dll
2014-12-11 20:18 - 2014-12-06 02:50 - 01677128 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\ffmpegsumo.dll
2013-03-26 15:16 - 2014-11-11 19:48 - 34589888 _____ () D:\Steam\bin\libcef.dll
2014-09-23 15:45 - 2014-11-21 15:05 - 00198144 _____ () D:\Steam\steamapps\common\Counter-Strike Global Offensive\bin\launcher.dll
2014-09-23 15:44 - 2014-11-21 15:06 - 00311296 _____ () D:\Steam\steamapps\common\Counter-Strike Global Offensive\bin\tier0.dll
2014-09-23 15:45 - 2014-11-21 15:05 - 00203776 _____ () D:\Steam\steamapps\common\Counter-Strike Global Offensive\bin\vstdlib.dll
2014-09-23 15:44 - 2014-11-21 15:05 - 00387584 _____ () D:\Steam\steamapps\common\Counter-Strike Global Offensive\bin\filesystem_stdio.dll
2014-09-23 15:44 - 2014-12-16 11:21 - 05853696 _____ () d:\steam\steamapps\common\counter-strike global offensive\bin\engine.dll
2014-09-23 15:45 - 2014-11-21 15:06 - 00155648 _____ () d:\steam\steamapps\common\counter-strike global offensive\bin\inputsystem.dll
2014-09-23 15:44 - 2014-11-21 15:05 - 01175040 _____ () d:\steam\steamapps\common\counter-strike global offensive\bin\vphysics.dll
2014-09-23 15:44 - 2014-12-12 16:42 - 01243648 _____ () d:\steam\steamapps\common\counter-strike global offensive\bin\materialsystem.dll
2014-09-23 15:44 - 2014-11-21 15:05 - 00352256 _____ () d:\steam\steamapps\common\counter-strike global offensive\bin\datacache.dll
2014-09-23 15:44 - 2014-11-21 15:06 - 00608256 _____ () d:\steam\steamapps\common\counter-strike global offensive\bin\studiorender.dll
2014-09-23 15:45 - 2014-11-21 15:06 - 00164864 _____ () d:\steam\steamapps\common\counter-strike global offensive\bin\soundemittersystem.dll
2014-09-23 15:44 - 2014-11-21 15:06 - 00708096 _____ () d:\steam\steamapps\common\counter-strike global offensive\bin\vscript.dll
2014-09-23 15:45 - 2014-11-21 15:05 - 00134656 _____ () d:\steam\steamapps\common\counter-strike global offensive\bin\valve_avi.dll
2014-09-23 15:44 - 2014-11-21 15:06 - 01338880 _____ () d:\steam\steamapps\common\counter-strike global offensive\bin\vguimatsurface.dll
2014-09-23 15:44 - 2014-11-21 15:06 - 00396800 _____ () d:\steam\steamapps\common\counter-strike global offensive\bin\vgui2.dll
2014-09-23 15:44 - 2014-11-24 17:17 - 03186176 _____ () d:\steam\steamapps\common\counter-strike global offensive\bin\scaleformui.dll
2014-09-23 15:44 - 2014-11-21 15:05 - 01762816 _____ () D:\Steam\steamapps\common\Counter-Strike Global Offensive\bin\shaderapidx9.dll
2014-09-23 15:45 - 2014-11-21 15:06 - 00143872 _____ () d:\steam\steamapps\common\counter-strike global offensive\bin\localize.dll
2014-09-23 15:45 - 2014-11-21 15:05 - 00231424 _____ () d:\steam\steamapps\common\counter-strike global offensive\bin\stdshader_dbg.dll
2014-09-23 15:44 - 2014-12-11 14:27 - 00992256 _____ () d:\steam\steamapps\common\counter-strike global offensive\bin\stdshader_dx9.dll
2014-09-23 15:44 - 2014-11-21 15:05 - 01059328 _____ () D:\Steam\steamapps\common\Counter-Strike Global Offensive\bin\chromehtml.dll
2014-09-23 15:44 - 2014-11-24 17:17 - 20625832 _____ () D:\Steam\steamapps\common\Counter-Strike Global Offensive\bin\libcef.dll
2014-09-23 15:44 - 2014-09-23 15:45 - 01099616 _____ () D:\Steam\steamapps\common\Counter-Strike Global Offensive\bin\avcodec-53.dll
2014-09-23 15:44 - 2014-09-23 15:44 - 00123232 _____ () D:\Steam\steamapps\common\Counter-Strike Global Offensive\bin\avutil-51.dll
2014-09-23 15:44 - 2014-09-23 15:44 - 00190816 _____ () D:\Steam\steamapps\common\Counter-Strike Global Offensive\bin\avformat-53.dll
2014-09-23 15:44 - 2014-11-21 15:06 - 00583168 _____ () d:\steam\steamapps\common\counter-strike global offensive\csgo\bin\matchmaking.dll
2014-09-23 15:44 - 2014-12-19 10:21 - 12300800 _____ () d:\steam\steamapps\common\counter-strike global offensive\csgo\bin\client.dll
2014-09-23 15:44 - 2014-12-19 10:21 - 09820672 _____ () d:\steam\steamapps\common\counter-strike global offensive\csgo\bin\server.dll
2014-09-23 15:45 - 2014-11-21 15:06 - 00094720 _____ () D:\Steam\steamapps\common\Counter-Strike Global Offensive\bin\scenefilecache.dll
2014-09-23 15:45 - 2014-11-21 15:06 - 00084992 _____ () d:\steam\steamapps\common\counter-strike global offensive\bin\vaudio_miles.dll
2014-09-23 15:45 - 2014-09-23 15:45 - 00071680 _____ () d:\steam\steamapps\common\counter-strike global offensive\bin\mssmp3.asi
2014-09-23 15:45 - 2014-09-23 15:45 - 00012800 _____ () d:\steam\steamapps\common\counter-strike global offensive\bin\mssds3d.flt
2014-09-23 15:45 - 2014-09-23 15:45 - 00055808 _____ () d:\steam\steamapps\common\counter-strike global offensive\bin\msseax.flt
2014-09-23 15:44 - 2014-12-19 10:21 - 00969216 _____ () d:\steam\steamapps\common\counter-strike global offensive\bin\serverbrowser.dll
2014-09-23 15:45 - 2014-11-21 15:05 - 00176128 _____ () d:\steam\steamapps\common\counter-strike global offensive\bin\vaudio_speex.dll
2014-08-31 10:42 - 2014-11-11 19:48 - 00837824 _____ () D:\Steam\bin\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\StartupFolder: => "LOLRecorder.lnk"
HKLM\...\StartupApproved\StartupFolder: => "Ralink Wireless Utility.lnk"
HKLM\...\StartupApproved\Run: => "Nvtmru"
HKLM\...\StartupApproved\Run: => "Launch LCore"
HKLM\...\StartupApproved\Run: => "XboxStat"
HKLM\...\StartupApproved\Run32: => "Adobe ARM"
HKLM\...\StartupApproved\Run32: => "AVG_UI"
HKLM\...\StartupApproved\Run32: => "IminentMessenger"
HKLM\...\StartupApproved\Run32: => "Iminent"
HKLM\...\StartupApproved\Run32: => "BlueStacks Agent"
HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui"
HKLM\...\StartupApproved\Run32: => "ANIWZCS2Service"
HKLM\...\StartupApproved\Run32: => "D-Link Air USB Utility"
HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\StartupApproved\StartupFolder: => "GamersFirst LIVE!.lnk"
HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\StartupApproved\StartupFolder: => "Curse.lnk"
HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\StartupApproved\Run: => "SDP"
HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\StartupApproved\Run: => "EADM"
HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\StartupApproved\Run: => "Spotify Web Helper"
HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\StartupApproved\Run: => "KiesHelper"
HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\StartupApproved\Run: => "KiesTrayAgent"
HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\StartupApproved\Run: => "Overwolf"
HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\StartupApproved\Run: => "NextLive"
HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\StartupApproved\Run: => "uTorrent"
HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\StartupApproved\Run: => "MediaFire Tray"
HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\StartupApproved\Run: => "DAEMON Tools Lite"
HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\StartupApproved\Run: => "pdiface"
HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\StartupApproved\Run: => "KSS"
HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\StartupApproved\Run: => "EvolveClient"
HKU\S-1-5-21-4249622001-875609324-433111981-1001\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_FB0DCF795F3086C624F9CCAD45E29F3E"

========================= Accounts: ==========================

Administrator (S-1-5-21-4249622001-875609324-433111981-500 - Administrator - Disabled)
Gast (S-1-5-21-4249622001-875609324-433111981-501 - Limited - Disabled)
Max (S-1-5-21-4249622001-875609324-433111981-1001 - Administrator - Enabled) => C:\Users\Max
max_2 (S-1-5-21-4249622001-875609324-433111981-1003 - Administrator - Enabled) => C:\Users\max_2

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (12/22/2014 02:06:18 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20689 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 898

Startzeit: 01d01de75c6bc599

Endzeit: 4294967295

Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe

Berichts-ID: 4fe5ff3a-89db-11e4-bedd-d43d7e3448eb

Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1

Error: (12/22/2014 01:51:38 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20689 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 12b4

Startzeit: 01d01de54fb54911

Endzeit: 4294967295

Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe

Berichts-ID: 43b7ea46-89d9-11e4-bedd-d43d7e3448eb

Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1

Error: (12/22/2014 02:51:45 AM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcCan continue stopping. [18]

Error: (12/22/2014 02:35:00 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20689 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: e68

Startzeit: 01d01d86ca24b7b9

Endzeit: 4294967295

Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe

Berichts-ID: bda15192-897a-11e4-8250-d43d7e3448eb

Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1

Error: (12/22/2014 02:05:00 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20689 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 3d8

Startzeit: 01d01d8299428f5d

Endzeit: 4294967295

Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe

Berichts-ID: 8cbe9e3a-8976-11e4-8250-d43d7e3448eb

Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1

Error: (12/22/2014 01:35:00 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20689 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 22a0

Startzeit: 01d01d7e68603bcd

Endzeit: 4294967295

Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe

Berichts-ID: 5bdb18a8-8972-11e4-8250-d43d7e3448eb

Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1

Error: (12/22/2014 01:34:30 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm SpeedAutoClicker.exe, Version 1.3.5.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1b54

Startzeit: 01d01d7f028cdf2c

Endzeit: 23

Anwendungspfad: C:\Users\Max\AppData\Local\Temp\Rar$EXa0.723\SpeedAutoClicker.exe

Berichts-ID: 48a5ad29-8972-11e4-8250-d43d7e3448eb

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (12/22/2014 01:05:00 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20689 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1918

Startzeit: 01d01d7a377d5d93

Endzeit: 4294967295

Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe

Berichts-ID: 2af95b3d-896e-11e4-8250-d43d7e3448eb

Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1

Error: (12/22/2014 00:35:00 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20689 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 2170

Startzeit: 01d01d76069b0b96

Endzeit: 4294967295

Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe

Berichts-ID: fa1742f6-8969-11e4-8250-d43d7e3448eb

Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1

Error: (12/22/2014 00:05:00 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20689 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 22b8

Startzeit: 01d01d71d5b8ee6d

Endzeit: 4294967295

Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe

Berichts-ID: c9359b1b-8965-11e4-8250-d43d7e3448eb

Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1


System errors:
=============
Error: (12/22/2014 02:51:42 AM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (12/21/2014 11:33:06 AM) (Source: DCOM) (EventID: 10010) (User: ARLT)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (12/21/2014 11:32:36 AM) (Source: DCOM) (EventID: 10010) (User: ARLT)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (12/20/2014 01:52:28 PM) (Source: DCOM) (EventID: 10010) (User: ARLT)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (12/20/2014 01:51:58 PM) (Source: DCOM) (EventID: 10010) (User: ARLT)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (12/20/2014 01:44:43 PM) (Source: DCOM) (EventID: 10010) (User: ARLT)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (12/20/2014 01:44:13 PM) (Source: DCOM) (EventID: 10010) (User: ARLT)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (12/19/2014 02:31:19 AM) (Source: NETLOGON) (EventID: 3095) (User: )
Description: Dieser Computer ist als Mitglied einer Arbeitsgruppe konfiguriert, nicht als
Mitglied einer Domäne. Der Anmeldedienst braucht bei dieser
Konfiguration nicht gestartet zu sein.

Error: (12/19/2014 02:30:56 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Arbeitsstationsdienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (12/19/2014 02:30:56 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Arbeitsstationsdienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058


Microsoft Office Sessions:
=========================
Error: (12/22/2014 02:06:18 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.2068989801d01de75c6bc5994294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe4fe5ff3a-89db-11e4-bedd-d43d7e3448ebmicrosoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1

Error: (12/22/2014 01:51:38 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.2068912b401d01de54fb549114294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe43b7ea46-89d9-11e4-bedd-d43d7e3448ebmicrosoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1

Error: (12/22/2014 02:51:45 AM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcCan continue stopping. [18]

Error: (12/22/2014 02:35:00 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.20689e6801d01d86ca24b7b94294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exebda15192-897a-11e4-8250-d43d7e3448ebmicrosoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1

Error: (12/22/2014 02:05:00 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.206893d801d01d8299428f5d4294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe8cbe9e3a-8976-11e4-8250-d43d7e3448ebmicrosoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1

Error: (12/22/2014 01:35:00 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.2068922a001d01d7e68603bcd4294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe5bdb18a8-8972-11e4-8250-d43d7e3448ebmicrosoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1

Error: (12/22/2014 01:34:30 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: SpeedAutoClicker.exe1.3.5.01b5401d01d7f028cdf2c23C:\Users\Max\AppData\Local\Temp\Rar$EXa0.723\SpeedAutoClicker.exe48a5ad29-8972-11e4-8250-d43d7e3448eb

Error: (12/22/2014 01:05:00 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.20689191801d01d7a377d5d934294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe2af95b3d-896e-11e4-8250-d43d7e3448ebmicrosoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1

Error: (12/22/2014 00:35:00 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.20689217001d01d76069b0b964294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exefa1742f6-8969-11e4-8250-d43d7e3448ebmicrosoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1

Error: (12/22/2014 00:05:00 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.2068922b801d01d71d5b8ee6d4294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exec9359b1b-8965-11e4-8250-d43d7e3448ebmicrosoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-3550 CPU @ 3.30GHz
Percentage of memory in use: 44%
Total physical RAM: 8125.5 MB
Available physical RAM: 4517.12 MB
Total Pagefile: 16317.5 MB
Available Pagefile: 11884.05 MB
Total Virtual: 131072 MB
Available Virtual: 131071.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:119.24 GB) (Free:25.45 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:1863.01 GB) (Free:1341.65 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119.2 GB) (Disk ID: A61AD0F8)
Partition 1: (Active) - (Size=119.2 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: A61AD0F0)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Fertig

Die Reihenfolge ist hier entscheidend.

1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
   • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
   • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
   • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
3. Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
   • Schließe alle offenen Programme.
   • Starte die delfix.exe mit einem Doppelklick.
   • Setze vor jede Funktion ein Häkchen.
   • Klicke auf Start.
   • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
   • Starte deinen Rechner abschließend neu.
4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

• Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
• Windows Updates
  • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
  • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
• Gehe sicher das die automatischen Updates aktiviert sind.
• Software Updates
  Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
  Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

• Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

• MalwareBytes Anti Malware
  Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
  Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
  Ein Tutorial zur Verwendung findest Du hier.
• WinPatrol
  Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

• SpywareBlaster
  Eine kurze Einführung findest du Hier
• MVPs hosts file
  Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
• WOT (Web of trust)
  Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

• Opera
• Mozilla Firefox.
  • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
  • NoScript
    Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    
  • AdblockPlus
    Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
    Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts

• Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
• verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
• Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
• Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

k alles klar Danke für deine Hilfe

Gern Geschehen