Hallo liebe Trojaner-Board Gemeinde,

seid geraumer Zeit habe ich das Problem das mein PC etwas langsamer gewordet ist und die CPU-auslastung ständig bei 20-35% im Leerlauf ist.

Als AV Benutze ich Avast Internet Security 2015 und MalwareBytes

Habe mit beiden gescannt aber nix gefunden

hoffe ihr könnt mir helfen

MfG

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Hier die Logfiles




FRST Logfile:

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-01-2015 02
Ran by Sabri (administrator) on SABRI-PC on 13-01-2015 12:03:28
Running from C:\Users\Sabri\Desktop\PC-SCHUTZ
Loaded Profiles: Sabri &  (Available profiles: Sabri)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(AVG Technologies) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(AVG Technologies) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\livecomm.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7570136 2014-04-14] (Realtek Semiconductor)
HKLM\...\Run: [MBCfg64] => C:\WINDOWS\system32\RunDLL32.exe C:\WINDOWS\system32\MBCfg64.dll,RunDLLEntry MBCfg64
HKLM\...\Run: [ISCT Tray] => C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe [5860656 2014-04-03] (Intel Corporation)
HKLM\...\Run: [Samsung Link] => C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe [607584 2014-12-16] (Copyright 2013 SAMSUNG)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-20] (IvoSoft)
HKLM-x32\...\Run: [Sound Blaster Cinema] => C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe [711680 2013-08-16] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] => C:\WINDOWS\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [Super Charger] => C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe [1047536 2014-04-08] (MSI)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-09] (AVAST Software)
HKU\S-1-5-21-3822476009-2779597456-3556243849-1001\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [389120 2013-12-06] (AMD)
HKU\S-1-5-21-3822476009-2779597456-3556243849-1001\...\Run: [DAEMON Tools Pro Agent] => C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe [3761424 2014-11-10] (Disc Soft Ltd)
HKU\S-1-5-21-3822476009-2779597456-3556243849-1001\...\MountPoints2: {68882223-83b2-11e4-826b-448a5ba4cf02} - "E:\setup.exe" 
HKU\S-1-5-21-3822476009-2779597456-3556243849-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [389120 2013-12-06] (AMD)
HKU\S-1-5-21-3822476009-2779597456-3556243849-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [DAEMON Tools Pro Agent] => C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe [3761424 2014-11-10] (Disc Soft Ltd)
HKU\S-1-5-21-3822476009-2779597456-3556243849-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {68882223-83b2-11e4-826b-448a5ba4cf02} - "E:\setup.exe" 
AppInit_DLLs-x32: ￿Ȅ獒瑬 => "￿Ȅ獒瑬" File Not Found
IFEO\AcroRd32.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\adobe air application installer.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\appvlp.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\dtagent.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\dtimgeditor.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\dtpro.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\excel.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\gputweak.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\groove.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\infopath.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\isctmodernui.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\lync.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\msaccess.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\msoev.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\msotd.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\msouc.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\mspub.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\ocpubmgr.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\onenote.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\onenotem.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\origin.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\originer.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\outlook.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\powerpnt.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\samsung link menu start.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\setlang.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\super charger.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\unins000.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\winword.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-3822476009-2779597456-3556243849-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-3822476009-2779597456-3556243849-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-3822476009-2779597456-3556243849-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
HKU\S-1-5-21-3822476009-2779597456-3556243849-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com
HKU\S-1-5-21-3822476009-2779597456-3556243849-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-3822476009-2779597456-3556243849-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-3822476009-2779597456-3556243849-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
HKU\S-1-5-21-3822476009-2779597456-3556243849-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3822476009-2779597456-3556243849-1001 -> DefaultScope {B68BE3AA-F549-498C-99A8-3F297020C2E9} URL = 
SearchScopes: HKU\S-1-5-21-3822476009-2779597456-3556243849-1001 -> {B68BE3AA-F549-498C-99A8-3F297020C2E9} URL = 
SearchScopes: HKU\S-1-5-21-3822476009-2779597456-3556243849-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {B68BE3AA-F549-498C-99A8-3F297020C2E9} URL = 
SearchScopes: HKU\S-1-5-21-3822476009-2779597456-3556243849-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {B68BE3AA-F549-498C-99A8-3F297020C2E9} URL = 
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll (IvoSoft)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Sabri\AppData\Roaming\Mozilla\Firefox\Profiles\0w5lwyf0.default
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll ()
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin -> C:\Program Files (x86)\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Sabri\AppData\Roaming\Mozilla\Firefox\Profiles\0w5lwyf0.default\searchplugins\google-images.xml
FF SearchPlugin: C:\Users\Sabri\AppData\Roaming\Mozilla\Firefox\Profiles\0w5lwyf0.default\searchplugins\google-maps.xml
FF Extension: Adblock Plus - C:\Users\Sabri\AppData\Roaming\Mozilla\Firefox\Profiles\0w5lwyf0.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-01-06]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-12-27]

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2014-12-27]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-27]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S4 AllShare Framework DMS; C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe [404360 2013-12-21] (Samsung) [File not signed]
S3 ArcService; C:\Program Files (x86)\Arc\ArcService.exe [88400 2015-01-04] (Perfect World Entertainment Inc)
S4 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-27] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [104416 2014-12-27] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-12-27] (Avast Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [448384 2014-12-04] ()
S4 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2449592 2014-11-12] (Microsoft Corporation)
S4 Disc Soft Bus Service; C:\Program Files (x86)\DAEMON Tools Pro\DiscSoftBusService.exe [2216208 2014-11-10] (Disc Soft Ltd)
S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [175136 2015-01-09] (EasyAntiCheat Ltd)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
S4 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [209712 2014-04-03] ()
S4 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-04-03] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
S4 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [162800 2014-03-17] (MSI)
S4 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1900400 2014-12-06] (Electronic Arts)
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2014-12-06] ()
S4 Samsung Link Service; C:\Program Files\Samsung\Samsung Link\Samsung Link.exe [616288 2014-12-16] (Copyright 2013 SAMSUNG)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2604856 2014-11-24] (AVG Technologies)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [762320 2014-11-04] (Tunngle.net GmbH)
R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [42808 2014-11-24] (AVG Technologies)
R2 UxTuneUp; C:\Windows\SysWOW64\uxtuneup.dll [35640 2014-11-24] (AVG Technologies)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
S3 COMSysApp; %SystemRoot%\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-12-27] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2014-12-27] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-12-27] (AVAST Software)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [449936 2014-12-27] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-12-27] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-12-27] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-27] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-12-27] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-12-27] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-12-27] ()
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [222720 2014-03-11] (Advanced Micro Devices)
R3 dtscsibus; C:\Windows\system32\DRIVERS\dtscsibus.sys [29864 2014-12-14] (Disc Soft Ltd)
S3 GeneStor; C:\Windows\System32\drivers\GeneStor.sys [103656 2013-10-21] (GenesysLogic)
R3 ikbevent; C:\Windows\system32\DRIVERS\ikbevent.sys [22216 2014-02-03] ()
R3 imsevent; C:\Windows\system32\DRIVERS\imsevent.sys [22728 2014-02-03] ()
S3 INETMON; C:\WINDOWS\System32\Drivers\INETMON.sys [25800 2014-04-03] ()
R3 ISCT; C:\Windows\System32\drivers\ISCTD.sys [44744 2014-02-03] ()
R1 mbamchameleon; C:\WINDOWS\system32\drivers\mbamchameleon.sys [93400 2014-11-21] (Malwarebytes Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [129752 2015-01-13] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2014-11-21] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [118272 2014-04-03] (Intel Corporation)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3344352 2013-07-08] (Intel Corporation)
S3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [1936088 2013-07-31] (Realtek Semiconductor Corporation                           )
R3 tap0901t; C:\Windows\system32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [14112 2014-08-28] (TuneUp Software)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-12-27] (Avast Software)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
S3 ALSysIO; \??\C:\Users\Sabri\AppData\Local\Temp\ALSysIO64.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
S3 RwDrv; \??\C:\WINDOWS\system32\Drivers\RwDrv.sys [X]
U3 agdcypob; \??\C:\Users\Sabri\AppData\Local\Temp\agdcypob.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-13 11:56 - 2015-01-13 11:56 - 59797360 _____ (AVAST Software) C:\Users\Sabri\Downloads\vpsupd.exe
2015-01-13 11:52 - 2015-01-13 11:52 - 00000488 _____ () C:\Users\Sabri\Desktop\gmerlogfile.log
2015-01-13 11:48 - 2015-01-13 11:48 - 01174816 _____ () C:\Users\Sabri\Downloads\Gmer-19357 - CHIP-Installer.exe
2015-01-13 11:41 - 2015-01-13 12:03 - 00000000 ____D () C:\FRST
2015-01-13 11:12 - 2015-01-13 11:12 - 00001338 _____ () C:\Users\Sabri\Desktop\JRT.txt
2015-01-13 11:08 - 2015-01-13 11:08 - 00000000 ____D () C:\WINDOWS\ERUNT
2015-01-13 11:00 - 2015-01-13 11:03 - 00000000 ____D () C:\Program Files (x86)\SpywareBlaster
2015-01-13 11:00 - 2015-01-13 11:00 - 04095448 _____ (BrightFort LLC ) C:\Users\Sabri\Downloads\spywareblastersetup50.exe
2015-01-13 11:00 - 2015-01-13 11:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpywareBlaster
2015-01-13 11:00 - 2015-01-13 11:00 - 00000000 ____D () C:\ProgramData\Licenses
2015-01-13 11:00 - 2011-11-04 05:13 - 01070352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCOMCTL.OCX
2015-01-13 11:00 - 2009-03-24 12:52 - 00129872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSSTDFMT.DLL
2015-01-13 10:49 - 2015-01-13 12:03 - 00000000 ____D () C:\Users\Sabri\Desktop\PC-SCHUTZ
2015-01-13 10:39 - 2015-01-13 10:39 - 00010893 _____ () C:\Users\Sabri\Desktop\hijackthis.log
2015-01-12 19:48 - 2015-01-12 19:48 - 00017475 _____ () C:\WINDOWS\DirectX.log
2015-01-12 19:47 - 2015-01-12 21:53 - 00000000 ____D () C:\Program Files (x86)\Neverwinter_de
2015-01-12 19:46 - 2015-01-12 19:47 - 00000000 ___HD () C:\ArcTemp
2015-01-12 19:45 - 2015-01-12 19:45 - 00003182 _____ () C:\WINDOWS\System32\Tasks\{C45421BB-DF42-408D-9F00-EA4FDB9E7020}
2015-01-12 19:44 - 2015-01-12 19:45 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\Arc
2015-01-12 19:44 - 2015-01-12 19:44 - 00000000 ____D () C:\Users\Public\Documents\Arc
2015-01-12 17:50 - 2015-01-12 17:50 - 00000000 _____ () C:\WINDOWS\setupact.log
2015-01-12 14:21 - 2015-01-13 11:14 - 00000000 ____D () C:\Program Files (x86)\Arc
2015-01-12 14:21 - 2015-01-12 14:21 - 00001604 _____ () C:\Users\Public\Desktop\Arc.lnk
2015-01-12 14:21 - 2015-01-12 14:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment
2015-01-12 14:19 - 2015-01-12 14:20 - 00000000 ____D () C:\Program Files (x86)\Tunngle
2015-01-12 14:19 - 2015-01-12 14:19 - 10306616 _____ (Perfect World Entertainment) C:\Users\Sabri\Downloads\ArcInstall_NW_20141223.exe
2015-01-12 14:19 - 2015-01-12 14:19 - 00001018 _____ () C:\Users\Public\Desktop\Tunngle.lnk
2015-01-12 14:19 - 2015-01-12 14:19 - 00000000 ____D () C:\Users\Sabri\Documents\Tunngle
2015-01-12 14:19 - 2015-01-12 14:19 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\Tunngle
2015-01-12 14:19 - 2015-01-12 14:19 - 00000000 ____D () C:\Users\Public\Documents\Tunngle
2015-01-12 14:19 - 2015-01-12 14:19 - 00000000 ____D () C:\ProgramData\Tunngle
2015-01-12 14:19 - 2015-01-12 14:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tunngle
2015-01-12 14:19 - 2009-09-16 07:02 - 00031232 _____ (Tunngle.net) C:\WINDOWS\system32\Drivers\tap0901t.sys
2015-01-12 14:15 - 2015-01-12 14:15 - 04501720 _____ (Tunngle.net GmbH ) C:\Users\Sabri\Downloads\Tunngle_Setup_v5.0.exe
2015-01-11 16:04 - 2015-01-11 16:04 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\Steam
2015-01-11 15:59 - 2015-01-11 15:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Evil Within
2015-01-11 15:35 - 2015-01-11 15:59 - 00000000 ____D () C:\Program Files (x86)\The Evil Within
2015-01-11 13:48 - 2015-01-11 14:28 - 00000000 ____D () C:\Users\Sabri\Downloads\The Evil Within
2015-01-11 13:46 - 2015-01-12 14:32 - 00000000 ____D () C:\Users\Sabri\Desktop\Spiele
2015-01-11 13:27 - 2015-01-11 13:27 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FreeArc
2015-01-11 13:27 - 2015-01-11 13:27 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\FreeArc
2015-01-11 13:27 - 2015-01-11 13:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeArc
2015-01-11 13:27 - 2015-01-11 13:27 - 00000000 ____D () C:\Program Files (x86)\FreeArc
2015-01-11 13:02 - 2015-01-11 13:02 - 00000000 _____ () C:\WINDOWS\setuperr.log
2015-01-10 23:15 - 2015-01-10 23:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ryse Son of Rome
2015-01-10 23:04 - 2015-01-10 23:25 - 00000000 ____D () C:\Program Files (x86)\Ryse Son of Rome
2015-01-10 08:32 - 2015-01-10 08:32 - 00002762 _____ () C:\WINDOWS\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2015-01-09 22:03 - 2015-01-09 22:03 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\Fatshark
2015-01-09 22:00 - 2015-01-09 21:36 - 00175136 _____ (EasyAntiCheat Ltd) C:\WINDOWS\SysWOW64\EasyAntiCheat.exe
2015-01-09 20:02 - 2015-01-10 20:10 - 00000000 ____D () C:\Users\Sabri\Downloads\Ryse_ Son of Rome
2015-01-07 19:17 - 2015-01-07 19:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Styx Master of Shadows
2015-01-07 19:11 - 2015-01-07 19:17 - 00000000 ____D () C:\Program Files (x86)\Styx Master of Shadows
2015-01-07 19:10 - 2015-01-07 19:10 - 00000000 ____D () C:\Users\Public\Documents\DAEMON Tools Images
2015-01-06 12:11 - 2015-01-06 12:12 - 00000197 _____ () C:\WINDOWS\system32\2015-01-06-11-11-36.057-AvastVBoxSVC.exe-3268.log
2015-01-06 12:10 - 2015-01-06 12:10 - 00002934 _____ () C:\WINDOWS\PFRO.log
2015-01-06 12:03 - 2015-01-06 12:16 - 00003706 _____ () C:\WINDOWS\System32\Tasks\Java Platform SE Auto Updater
2015-01-06 11:59 - 2014-11-24 12:48 - 00042808 _____ (AVG Technologies) C:\WINDOWS\system32\uxtuneup.dll
2015-01-06 11:59 - 2014-11-24 12:48 - 00035640 _____ (AVG Technologies) C:\WINDOWS\SysWOW64\uxtuneup.dll
2015-01-06 11:53 - 2015-01-06 11:53 - 00002244 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2015.lnk
2015-01-06 11:53 - 2015-01-06 11:53 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\AVG
2015-01-06 11:53 - 2015-01-06 11:53 - 00000000 ____D () C:\Users\Sabri\AppData\Local\Avg
2015-01-06 11:53 - 2015-01-06 11:53 - 00000000 ____D () C:\Program Files (x86)\AVG
2015-01-06 11:53 - 2014-11-24 12:48 - 00040248 _____ (AVG Technologies) C:\WINDOWS\system32\TURegOpt.exe
2015-01-06 11:53 - 2014-11-24 12:48 - 00029496 _____ (AVG Technologies) C:\WINDOWS\system32\authuitu.dll
2015-01-06 11:53 - 2014-11-24 12:48 - 00025400 _____ (AVG Technologies) C:\WINDOWS\SysWOW64\authuitu.dll
2015-01-06 11:52 - 2015-01-13 11:49 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\ClassicShell
2015-01-06 11:52 - 2015-01-06 11:53 - 00000000 ____D () C:\ProgramData\AVG
2015-01-06 11:52 - 2015-01-06 11:52 - 00000000 ____D () C:\ProgramData\ClassicShell
2015-01-06 11:49 - 2015-01-06 11:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell
2015-01-06 11:49 - 2015-01-06 11:49 - 00000000 ____D () C:\Program Files\Classic Shell
2015-01-05 17:27 - 2015-01-13 11:40 - 01551339 _____ () C:\WINDOWS\WindowsUpdate.log
2015-01-05 16:37 - 2015-01-05 16:37 - 00003886 _____ () C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2015-01-05 14:50 - 2015-01-13 11:15 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-01-05 14:49 - 2015-01-05 14:49 - 00001129 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-01-05 14:49 - 2015-01-05 14:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-01-05 14:49 - 2015-01-05 14:49 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-01-05 14:49 - 2015-01-05 14:49 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-01-05 14:49 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-01-05 14:49 - 2014-11-21 06:14 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-01-05 14:49 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-01-05 14:16 - 2015-01-05 14:16 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-01-04 20:20 - 2014-12-03 21:08 - 00000000 ____D () C:\Users\Sabri\Downloads\Styx Master of Shadows 1.02
2014-12-27 11:06 - 2014-12-27 11:06 - 00000247 _____ () C:\WINDOWS\system32\2014-12-27-10-06-16.041-aswFe.exe-1796.log
2014-12-27 11:03 - 2014-12-27 11:06 - 00000247 _____ () C:\WINDOWS\system32\2014-12-27-10-03-13.088-aswFe.exe-1672.log
2014-12-27 11:03 - 2014-12-27 11:03 - 00000197 _____ () C:\WINDOWS\system32\2014-12-27-10-03-12.097-AvastVBoxSVC.exe-5736.log
2014-12-27 10:57 - 2015-01-13 11:16 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2014-12-27 10:57 - 2014-12-27 10:57 - 01050432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys
2014-12-27 10:57 - 2014-12-27 10:57 - 00001997 _____ () C:\Users\Public\Desktop\Avast Internet Security.lnk
2014-12-27 10:57 - 2014-12-27 10:57 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\AVAST Software
2014-12-27 10:57 - 2014-12-27 10:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2014-12-27 10:57 - 2014-12-27 10:56 - 00436624 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-12-27 10:57 - 2014-12-27 10:56 - 00364512 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-12-27 10:57 - 2014-12-27 10:56 - 00267632 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-12-27 10:57 - 2014-12-27 10:56 - 00116728 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2014-12-27 10:57 - 2014-12-27 10:56 - 00093568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2014-12-27 10:57 - 2014-12-27 10:56 - 00083280 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-12-27 10:57 - 2014-12-27 10:56 - 00065776 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-12-27 10:57 - 2014-12-27 10:56 - 00029208 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2014-12-27 10:57 - 2014-12-27 10:56 - 00028184 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2014-12-27 10:56 - 2014-12-27 10:56 - 00449936 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNdisFlt.sys
2014-12-27 10:56 - 2014-12-27 10:56 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-12-27 10:56 - 2014-12-27 10:56 - 00000000 ____D () C:\Program Files\AVAST Software
2014-12-27 10:54 - 2014-12-27 10:56 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-12-25 15:30 - 2014-12-25 15:30 - 00000773 _____ () C:\WINDOWS\removeep.cmd
2014-12-25 15:28 - 2014-12-25 15:28 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\reaper
2014-12-21 01:08 - 2014-12-21 01:08 - 00000000 ____D () C:\Program Files (x86)\Lenovo
2014-12-19 22:30 - 2015-01-06 12:03 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\Skype
2014-12-19 22:30 - 2014-12-19 22:30 - 00000000 ____D () C:\Users\Sabri\AppData\Local\Skype
2014-12-19 20:07 - 2014-10-30 23:37 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2014-12-19 20:07 - 2014-10-30 23:34 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2014-12-19 14:39 - 2015-01-06 11:37 - 00000000 ____D () C:\ProgramData\Skype
2014-12-18 18:49 - 2014-12-18 18:49 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\Nitro
2014-12-18 18:42 - 2014-12-23 15:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-12-18 18:42 - 2014-12-23 15:08 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-12-16 17:41 - 2014-12-16 17:42 - 00000000 ____D () C:\AdwCleaner
2014-12-16 15:22 - 2014-12-16 15:23 - 00000000 ____D () C:\Users\Sabri\AppData\Local\SmartView2
2014-12-16 15:22 - 2014-12-16 15:22 - 00000000 ____D () C:\Program Files (x86)\SmartView2
2014-12-16 15:17 - 2014-12-16 15:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2014-12-16 15:17 - 2014-12-16 15:17 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack
2014-12-16 14:48 - 2014-12-27 10:48 - 00000000 ____D () C:\Users\Sabri\Documents\Sabri
2014-12-16 01:33 - 2014-12-26 19:08 - 00000000 ____D () C:\Users\Sabri\Desktop\FM cata
2014-12-16 01:33 - 2014-12-16 01:33 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\Nitro PDF
2014-12-15 19:34 - 2014-12-15 19:36 - 00001887 _____ () C:\Users\Sabri\Desktop\Samsung Link sabri_9@web.de.lnk
2014-12-15 19:34 - 2014-12-15 19:34 - 00000000 ____D () C:\Users\Sabri\Samsung Link
2014-12-15 19:34 - 2014-12-15 19:34 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\SAMSUNG
2014-12-14 23:32 - 2014-12-14 23:32 - 00000000 ____D () C:\Users\Sabri\Documents\Spiele
2014-12-14 23:18 - 2014-12-14 23:18 - 00000000 ____D () C:\Users\Sabri\AppData\Local\Risen3
2014-12-14 23:07 - 2014-12-14 23:07 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-12-14 23:07 - 2014-12-14 23:07 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-12-14 23:04 - 2014-12-14 23:15 - 00000000 ____D () C:\Program Files (x86)\Risen 3 - Titan Lords
2014-12-14 19:25 - 2014-12-18 23:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2014-12-14 19:06 - 2015-01-06 17:44 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\DAEMON Tools Pro
2014-12-14 19:06 - 2014-12-14 19:07 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Pro
2014-12-14 19:06 - 2014-12-14 19:06 - 00029864 _____ (Disc Soft Ltd) C:\WINDOWS\system32\Drivers\dtscsibus.sys
2014-12-14 19:06 - 2014-12-14 19:06 - 00001959 _____ () C:\Users\Public\Desktop\DAEMON Tools Pro.lnk
2014-12-14 19:06 - 2014-12-14 19:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Pro
2014-12-14 19:06 - 2014-12-14 19:06 - 00000000 ____D () C:\ProgramData\DAEMON Tools Pro
2014-12-14 18:32 - 2014-12-14 18:32 - 00000000 ____D () C:\Users\Sabri\AppData\Local\Skyrim
2014-12-14 18:32 - 2014-12-14 18:32 - 00000000 ____D () C:\ProgramData\Steam
2014-12-14 18:01 - 2014-12-14 18:01 - 00000000 ____D () C:\Users\Sabri\AppData\Local\Disc_Soft_Ltd
2014-12-14 18:00 - 2014-12-14 18:01 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\DAEMON Tools Ultra
2014-12-14 18:00 - 2014-12-14 18:00 - 00000000 ____D () C:\ProgramData\DAEMON Tools Ultra
2014-12-14 17:59 - 2014-12-14 17:59 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\WinRAR
2014-12-14 17:59 - 2014-12-14 17:59 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-12-14 17:59 - 2014-12-14 17:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-12-14 17:59 - 2014-12-14 17:59 - 00000000 ____D () C:\Program Files\WinRAR
2014-12-14 17:43 - 2014-12-14 17:47 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2014-12-14 17:27 - 2014-12-14 19:25 - 00000000 ____D () C:\Program Files\Samsung
2014-12-14 17:27 - 2014-12-14 17:27 - 00000000 ____D () C:\Users\Sabri\AppData\Local\SAMSUNG
2014-12-14 17:27 - 2014-12-14 17:27 - 00000000 ____D () C:\Users\Sabri\.swt
2014-12-14 17:27 - 2014-12-14 17:27 - 00000000 ____D () C:\Upload
2014-12-14 17:27 - 2014-12-14 17:27 - 00000000 ____D () C:\ProgramData\SAMSUNG
2014-12-14 16:49 - 2015-01-09 12:08 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\vlc
2014-12-14 16:01 - 2014-12-14 16:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-12-14 16:01 - 2014-12-14 16:01 - 00000000 ____D () C:\Program Files\VideoLAN
2014-12-14 15:29 - 2014-12-14 15:29 - 00002135 _____ () C:\Users\Sabri\Desktop\JDownloader 2.lnk
2014-12-14 15:29 - 2014-12-14 15:29 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader
2014-12-14 15:28 - 2015-01-11 15:33 - 00000000 ____D () C:\Users\Sabri\AppData\Local\JDownloader 2.0
2014-12-14 15:21 - 2014-12-14 15:21 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2014-12-14 15:21 - 2014-12-14 15:21 - 00000000 ____D () C:\ProgramData\Sun
2014-12-14 15:21 - 2014-12-14 15:21 - 00000000 ____D () C:\ProgramData\Oracle
2014-12-14 15:21 - 2014-12-14 15:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-12-14 15:21 - 2014-12-14 15:21 - 00000000 ____D () C:\Program Files (x86)\Java

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-13 12:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-01-13 11:28 - 2013-08-22 16:20 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-01-13 11:26 - 2014-12-09 20:42 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-01-13 11:15 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-01-13 11:15 - 2013-08-22 15:44 - 00492384 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-01-13 11:14 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2015-01-13 11:03 - 2014-07-18 16:05 - 00000000 ____D () C:\ProgramData\Temp
2015-01-13 10:37 - 2014-12-05 02:10 - 00000000 ____D () C:\Users\Sabri\AppData\Local\VirtualStore
2015-01-12 14:32 - 2014-12-04 22:04 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-01-12 14:26 - 2014-12-05 02:16 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3822476009-2779597456-3556243849-1001
2015-01-12 14:21 - 2014-07-18 15:47 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-01-12 14:04 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-01-11 20:47 - 2014-12-06 18:17 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\TS3Client
2015-01-09 22:02 - 2014-07-18 15:46 - 00000000 ____D () C:\ProgramData\Package Cache
2015-01-07 19:40 - 2014-12-09 23:40 - 00000000 ____D () C:\Users\Sabri\Documents\My Games
2015-01-06 12:15 - 2014-12-09 05:50 - 00009730 _____ () C:\WINDOWS\SysWOW64\Gms.log
2015-01-06 11:46 - 2014-12-05 02:10 - 00000000 ____D () C:\Users\Sabri\AppData\Local\Pokki
2015-01-06 11:40 - 2014-12-05 02:10 - 00000000 ____D () C:\Users\Sabri\AppData\Local\Packages
2015-01-05 14:25 - 2014-07-18 16:09 - 00000000 ____D () C:\ProgramData\Adobe
2015-01-05 14:17 - 2014-12-05 02:10 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\Adobe
2015-01-05 14:17 - 2014-12-04 20:21 - 00000000 ____D () C:\Users\Sabri\AppData\Local\Adobe
2015-01-05 14:16 - 2014-07-18 16:09 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-01-05 14:16 - 2014-07-18 16:04 - 00000000 ____D () C:\ProgramData\McAfee
2014-12-29 18:22 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-12-26 22:26 - 2014-07-19 01:37 - 00765378 _____ () C:\WINDOWS\system32\perfh007.dat
2014-12-26 22:26 - 2014-07-19 01:37 - 00159696 _____ () C:\WINDOWS\system32\perfc007.dat
2014-12-26 22:26 - 2013-08-31 16:40 - 01780340 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-12-25 15:30 - 2014-12-05 02:11 - 00000000 ____D () C:\Users\Sabri\AppData\Local\Lenovo
2014-12-25 15:30 - 2014-07-18 16:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-12-21 01:08 - 2014-07-18 16:09 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Lenovo
2014-12-21 01:08 - 2014-07-18 16:09 - 00000000 ____D () C:\WINDOWS\Downloaded Installations
2014-12-18 23:43 - 2014-12-05 02:10 - 00000000 ____D () C:\Users\Sabri
2014-12-14 19:42 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache

Some content of TEMP:
====================
C:\Users\Sabri\AppData\Local\Temp\proxy_vole5857646728128945627.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-12 14:03

==================== End Of Log ============================
         

--- --- ---

--- --- ---

--- --- ---

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-01-2015 02
Ran by Sabri at 2015-01-13 12:03:49
Running from C:\Users\Sabri\Desktop\PC-SCHUTZ
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Enabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 15.0.0.356 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.235 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
AllShare Framework DMS (HKLM\...\{83232C27-8C3F-44A5-9EB2-BB7161228ADD}) (Version: 1.3.23 - Samsung)
AMD Catalyst Install Manager (HKLM\...\{FE5435AB-9AA0-367E-2DD5-622D7998420A}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Arc (HKLM-x32\...\{CED8E25B-122A-4E80-B612-7F99B93284B3}) (Version: 1.0.0.9668 - Perfect World Entertainment)
ASUS GPU Tweak (HKLM-x32\...\InstallShield_{532F6E8A-AF97-41C3-915F-39F718EC07D1}) (Version: 2.5.7.6 - ASUSTek COMPUTER INC.)
ASUS GPU Tweak (x32 Version: 2.5.7.6 - ASUSTek COMPUTER INC.) Hidden
ASUS Product Register Program (HKLM-x32\...\{C87D79F6-F813-4812-B7A9-CCCAAB8B1188}) (Version: 1.0.025 - ASUSTek Computer Inc.)
Avast Internet Security (HKLM-x32\...\Avast) (Version: 10.0.2208 - AVAST Software)
AVG PC TuneUp 2015 (de-DE) (x32 Version: 15.0.1001.185 - AVG Technologies) Hidden
AVG PC TuneUp 2015 (HKLM-x32\...\AVG PC TuneUp) (Version: 15.0.1001.238 - AVG Technologies)
AVG PC TuneUp 2015 (x32 Version: 15.0.1001.238 - AVG Technologies) Hidden
Classic Shell (HKLM\...\{840C85B7-D3D6-4143-9AF9-DAE80FD54CFC}) (Version: 4.1.0 - IvoSoft)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
CPUID CPU-Z 1.71.1 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
CPUID HWMonitor 1.26 (HKLM\...\CPUID HWMonitor_is1) (Version:  - )
DAEMON Tools Pro (HKLM-x32\...\DAEMON Tools Pro) (Version: 6.0.0.0444 - Disc Soft Ltd)
DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)
Fraps (HKLM-x32\...\Fraps) (Version:  - )
FreeArc 0.666 (HKLM-x32\...\FreeArc) (Version: 0.666 - Bulat Ziganshin)
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.1.2.2 - Genesys Logic)
Hitman: Absolution (HKLM-x32\...\Steam App 203140) (Version:  - IO Interactive)
HydraVision (x32 Version: 4.2.252.0 - Advanced Micro Devices, Inc.) Hidden
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.1.1000 - Intel Corporation)
Intel(R) Smart Connect Technology (HKLM\...\{7228EFBA-512B-4EB3-B8A7-E2C331475DF4}) (Version: 5.0.10.2808 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.14 - Intel(R) Corporation) Hidden
Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
K-Lite Codec Pack 9.3.0 (Basic) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 9.3.0 - )
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Metric Collection SDK 35 (x32 Version: 1.2.0006.00 - Lenovo Group Limited) Hidden
Microsoft Office Professional Plus 2013 - de-de (HKLM\...\ProPlusRetail - de-de) (Version: 15.0.4675.1003 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 34.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 34.0.5 (x86 de)) (Version: 34.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 34.0.5 - Mozilla)
MSI Super Charger (HKLM-x32\...\{7CDF10DD-A9B5-4DA3-AB95-E193248D4369}_is1) (Version: 1.2.025 - MSI)
MURDERED: SOUL SUSPECT™ (HKLM-x32\...\Steam App 233290) (Version:  - Airtight Games)
NVIDIA PhysX (HKLM-x32\...\{80407BA7-7763-4395-AB98-5233F1B34E65}) (Version: 9.13.1220 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4675.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden
Origin (HKLM-x32\...\Origin) (Version: 9.5.2.2829 - Electronic Arts, Inc.)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.989 - Even Balance, Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.23.1126.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7224 - Realtek Semiconductor Corp.)
Risen 3 - Titan Lords (HKLM-x32\...\Risen 3 - Titan Lords_is1) (Version:  - Deep Silver)
Ryse Son of Rome (HKLM-x32\...\Ryse Son of Rome_is1) (Version:  - )
Samsung Link 2.0.0.1412161531 (HKLM\...\8474-7877-9059-0204) (Version: 2.0.0.1412161531 - Copyright 2013 SAMSUNG)
Smart View 2.0 (HKLM-x32\...\{FBAAAFAE-08A8-4C63-87EA-4AEA9DEE53E1}) (Version: 1.0.0.0 - Samsung)
Sniper Elite 3 (HKLM-x32\...\Steam App 238090) (Version:  - Rebellion)
Sound Blaster Cinema (HKLM-x32\...\{8801CA65-921A-4CCC-9D63-879D1D0BAA97}) (Version: 1.00.05 - Creative Technology Limited)
SpywareBlaster 5.0 (HKLM-x32\...\SpywareBlaster_is1) (Version: 5.0.0 - BrightFort LLC)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Styx Master of Shadows Version 1.02 u2 (HKLM-x32\...\Styx Master of Shadows_is1) (Version: 1.02 u2 - Focus Home Interactive)
TeamSpeak 3 Client (HKU\S-1-5-21-3822476009-2779597456-3556243849-1001\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TeamSpeak 3 Client (HKU\S-1-5-21-3822476009-2779597456-3556243849-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Evil Within Version 1.03 (HKLM-x32\...\The Evil Within_is1) (Version: 1.03 - Bethesda Softworks)
Tunngle Version Tunngle (HKLM-x32\...\Tunngle_is1) (Version: Tunngle - Tunngle.net GmbH)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
War of the Vikings (HKLM-x32\...\Steam App 234530) (Version:  - Fatshark)
WinRAR 5.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

27-12-2014 10:56:15 avast! antivirus system restore point
05-01-2015 14:42:40 Removed Nitro Pro 9
06-01-2015 17:58:05 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610
06-01-2015 17:58:32 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727
12-01-2015 19:48:04 DirectX wurde installiert

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {06F0A4F7-5C0E-4A4E-9891-115D8BB1BB7A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {0820C623-FAEF-4BEA-98FF-732ABF99DDF1} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-12-27] (AVAST Software)
Task: {3F44F165-1715-49CC-88CE-E76605977750} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-09] (Adobe Systems Incorporated)
Task: {578BD0C1-382A-4707-BC5A-2C6444ACCC0D} - System32\Tasks\Lenovo\LSC\Time72Task => C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCService.exe
Task: {5B034B70-7E9F-4AC1-AF28-BDA1204BC398} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2013-08-27] (ASUSTek Computer Inc.)
Task: {667EB267-19D6-464F-AB94-B5970AD11301} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2014-12-23] (Microsoft Corporation)
Task: {6B766908-6524-445F-9D09-E63DD6C122AA} - System32\Tasks\{C45421BB-DF42-408D-9F00-EA4FDB9E7020} => pcalua.exe -a "C:\Program Files (x86)\Arc\ArcLauncher.exe" -d C:\Users\Sabri\Desktop\Spiele -c gamecustom nw
Task: {A29D5B8F-3F8A-4DAF-9AD4-20BAD5FE47F0} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-12-11] (Microsoft Corporation)
Task: {AB04FA19-5ABC-481D-B557-FE121BB7AFE6} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe
Task: {B702E6A5-40CE-4B91-AA32-B2E46397F4ED} - System32\Tasks\Lenovo\LSC\RebootCountTask => C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCService.exe
Task: {BD104CDA-FDB0-4046-A822-7850673AFDAF} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 35 => C:\Program Files (x86)\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe [2014-09-10] (Lenovo)
Task: {BD35275C-3A96-4FA1-B4E7-09846E9F2C6F} - System32\Tasks\Java Platform SE Auto Updater => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-10-07] (Oracle Corporation)
Task: {CB840FF7-B16D-469A-9F23-C17040DDA721} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\AVG\AVG PC TuneUp\OneClick.exe [2014-11-24] (AVG Technologies)
Task: {D7868CD5-D4B0-48CD-A98B-4FD0EC5F1154} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-11-04] (Microsoft Corporation)
Task: {E77BB68C-4E4F-4178-8E32-7C45DCDD73EF} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2014-12-23] (Microsoft Corporation)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2014-12-06 20:35 - 2014-12-06 21:14 - 00076888 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe
2014-11-24 12:48 - 2014-11-24 12:48 - 00713528 _____ () C:\Program Files (x86)\AVG\AVG PC TuneUp\avgrepliba.dll
2014-12-27 10:56 - 2014-12-27 10:56 - 00388208 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxDDU.dll
2014-12-27 10:56 - 2014-12-27 10:56 - 05851328 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxRT.dll
2014-11-24 12:49 - 2014-11-24 12:49 - 00856888 _____ () C:\Program Files (x86)\AVG\AVG PC TuneUp\tulnga.dll
2014-12-09 05:45 - 2012-11-01 11:23 - 00089600 _____ () C:\WINDOWS\SYSTEM32\CmdRtr64.DLL
2014-12-09 05:45 - 2012-11-01 11:21 - 00325120 _____ () C:\WINDOWS\SYSTEM32\APOMgr64.DLL
2013-06-05 15:51 - 2013-06-05 15:51 - 00430080 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\BrandingNet4.dll
2013-06-05 15:51 - 2013-06-05 15:51 - 00032768 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\BrandingResourcesNet4.dll
2015-01-13 10:43 - 2015-01-13 10:43 - 02909696 _____ () C:\Program Files\AVAST Software\Avast\defs\15011300\algo.dll
2014-12-27 10:56 - 2014-12-27 10:56 - 04495336 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\x86\VBoxRT-x86.dll
2014-12-27 10:56 - 2014-12-27 10:56 - 38562088 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-12-04 20:28 - 2014-11-26 17:40 - 03758192 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-12-14 19:07 - 2014-11-18 18:45 - 00002048 _____ () C:\Program Files (x86)\DAEMON Tools Pro\MSIMG32.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\Temp:5C321E34
AlternateDataStreams: C:\Users\Sabri\SkyDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: LSCWinService => 3
MSCONFIG\Services: MaxthonUpdateSvc => 2
MSCONFIG\Services: NitroDriverReadSpool9 => 2
MSCONFIG\Services: nlsX86cc => 2
MSCONFIG\Services: RichVideo64 => 2
HKLM\...\StartupApproved\Run: => "ISCT Tray"
HKLM\...\StartupApproved\Run: => "Samsung Link"
HKLM\...\StartupApproved\Run32: => "UpdReg"
HKLM\...\StartupApproved\Run32: => "Sound Blaster Cinema"
HKLM\...\StartupApproved\Run32: => "Super Charger"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKU\S-1-5-21-3822476009-2779597456-3556243849-1001\...\StartupApproved\Run: => "HydraVisionDesktopManager"
HKU\S-1-5-21-3822476009-2779597456-3556243849-1001\...\StartupApproved\Run: => "DAEMON Tools Pro Agent"
HKU\S-1-5-21-3822476009-2779597456-3556243849-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-3822476009-2779597456-3556243849-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\StartupApproved\Run: => "HydraVisionDesktopManager"
HKU\S-1-5-21-3822476009-2779597456-3556243849-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\StartupApproved\Run: => "DAEMON Tools Pro Agent"
HKU\S-1-5-21-3822476009-2779597456-3556243849-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\StartupApproved\Run: => "Skype"

========================= Accounts: ==========================

Administrator (S-1-5-21-3822476009-2779597456-3556243849-500 - Administrator - Disabled)
Gast (S-1-5-21-3822476009-2779597456-3556243849-501 - Limited - Disabled)
Sabri (S-1-5-21-3822476009-2779597456-3556243849-1001 - Administrator - Enabled) => C:\Users\Sabri

==================== Faulty Device Manager Devices =============

Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Standardtastatur (PS/2)
Description: Standardtastatur (PS/2)
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardtastaturen)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/13/2015 11:50:44 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DTShellHlp.exe, Version: 6.0.0.444, Zeitstempel: 0x54608b99
Name des fehlerhaften Moduls: DTShellHlp.exe, Version: 6.0.0.444, Zeitstempel: 0x54608b99
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00005391
ID des fehlerhaften Prozesses: 0x16c8
Startzeit der fehlerhaften Anwendung: 0xDTShellHlp.exe0
Pfad der fehlerhaften Anwendung: DTShellHlp.exe1
Pfad des fehlerhaften Moduls: DTShellHlp.exe2
Berichtskennung: DTShellHlp.exe3
Vollständiger Name des fehlerhaften Pakets: DTShellHlp.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: DTShellHlp.exe5

Error: (01/13/2015 11:49:01 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Gmer-19357.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83
Name des fehlerhaften Moduls: Gmer-19357.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000011aa
ID des fehlerhaften Prozesses: 0x1700
Startzeit der fehlerhaften Anwendung: 0xGmer-19357.exe0
Pfad der fehlerhaften Anwendung: Gmer-19357.exe1
Pfad des fehlerhaften Moduls: Gmer-19357.exe2
Berichtskennung: Gmer-19357.exe3
Vollständiger Name des fehlerhaften Pakets: Gmer-19357.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Gmer-19357.exe5

Error: (01/13/2015 11:47:42 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Gmer-19357.exe, Version 2.1.19357.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 16f4

Startzeit: 01d02f1e435f5af2

Endzeit: 0

Anwendungspfad: C:\Users\Sabri\Desktop\PC-SCHUTZ\Gmer-19357.exe

Berichts-ID: 97ab3f27-9b11-11e4-8270-448a5ba4cf02

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (01/13/2015 11:46:45 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Gmer-19357.exe, Version 2.1.19357.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1548

Startzeit: 01d02f1e2550b8eb

Endzeit: 0

Anwendungspfad: C:\Users\Sabri\Desktop\PC-SCHUTZ\Gmer-19357.exe

Berichts-ID: 76123c31-9b11-11e4-8270-448a5ba4cf02

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (01/13/2015 11:46:08 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DTShellHlp.exe, Version: 6.0.0.444, Zeitstempel: 0x54608b99
Name des fehlerhaften Moduls: DTShellHlp.exe, Version: 6.0.0.444, Zeitstempel: 0x54608b99
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00005391
ID des fehlerhaften Prozesses: 0x8bc
Startzeit der fehlerhaften Anwendung: 0xDTShellHlp.exe0
Pfad der fehlerhaften Anwendung: DTShellHlp.exe1
Pfad des fehlerhaften Moduls: DTShellHlp.exe2
Berichtskennung: DTShellHlp.exe3
Vollständiger Name des fehlerhaften Pakets: DTShellHlp.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: DTShellHlp.exe5

Error: (01/13/2015 11:46:03 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DTShellHlp.exe, Version: 6.0.0.444, Zeitstempel: 0x54608b99
Name des fehlerhaften Moduls: DTShellHlp.exe, Version: 6.0.0.444, Zeitstempel: 0x54608b99
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00005391
ID des fehlerhaften Prozesses: 0x1674
Startzeit der fehlerhaften Anwendung: 0xDTShellHlp.exe0
Pfad der fehlerhaften Anwendung: DTShellHlp.exe1
Pfad des fehlerhaften Moduls: DTShellHlp.exe2
Berichtskennung: DTShellHlp.exe3
Vollständiger Name des fehlerhaften Pakets: DTShellHlp.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: DTShellHlp.exe5

Error: (01/13/2015 11:45:58 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DTShellHlp.exe, Version: 6.0.0.444, Zeitstempel: 0x54608b99
Name des fehlerhaften Moduls: DTShellHlp.exe, Version: 6.0.0.444, Zeitstempel: 0x54608b99
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00005391
ID des fehlerhaften Prozesses: 0x988
Startzeit der fehlerhaften Anwendung: 0xDTShellHlp.exe0
Pfad der fehlerhaften Anwendung: DTShellHlp.exe1
Pfad des fehlerhaften Moduls: DTShellHlp.exe2
Berichtskennung: DTShellHlp.exe3
Vollständiger Name des fehlerhaften Pakets: DTShellHlp.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: DTShellHlp.exe5

Error: (01/13/2015 11:45:54 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Gmer-19357.exe, Version 2.1.19357.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 46c

Startzeit: 01d02f1e0df0cd72

Endzeit: 15

Anwendungspfad: C:\Users\Sabri\Desktop\PC-SCHUTZ\Gmer-19357.exe

Berichts-ID: 578e1d5a-9b11-11e4-8270-448a5ba4cf02

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (01/13/2015 11:45:13 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DTShellHlp.exe, Version: 6.0.0.444, Zeitstempel: 0x54608b99
Name des fehlerhaften Moduls: DTShellHlp.exe, Version: 6.0.0.444, Zeitstempel: 0x54608b99
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00005391
ID des fehlerhaften Prozesses: 0x152c
Startzeit der fehlerhaften Anwendung: 0xDTShellHlp.exe0
Pfad der fehlerhaften Anwendung: DTShellHlp.exe1
Pfad des fehlerhaften Moduls: DTShellHlp.exe2
Berichtskennung: DTShellHlp.exe3
Vollständiger Name des fehlerhaften Pakets: DTShellHlp.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: DTShellHlp.exe5

Error: (01/13/2015 11:45:07 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DTShellHlp.exe, Version: 6.0.0.444, Zeitstempel: 0x54608b99
Name des fehlerhaften Moduls: DTShellHlp.exe, Version: 6.0.0.444, Zeitstempel: 0x54608b99
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00005391
ID des fehlerhaften Prozesses: 0x17fc
Startzeit der fehlerhaften Anwendung: 0xDTShellHlp.exe0
Pfad der fehlerhaften Anwendung: DTShellHlp.exe1
Pfad des fehlerhaften Moduls: DTShellHlp.exe2
Berichtskennung: DTShellHlp.exe3
Vollständiger Name des fehlerhaften Pakets: DTShellHlp.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: DTShellHlp.exe5


System errors:
=============
Error: (01/13/2015 11:27:00 AM) (Source: DCOM) (EventID: 10010) (User: SABRI-PC)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (01/13/2015 11:26:30 AM) (Source: DCOM) (EventID: 10010) (User: SABRI-PC)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (01/13/2015 11:14:24 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Superfetch" wurde mit folgendem Fehler beendet: 
%%1062

Error: (01/13/2015 11:14:22 AM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Der Dienst Windows Update konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.


Microsoft Office Sessions:
=========================
Error: (01/13/2015 11:50:44 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: DTShellHlp.exe6.0.0.44454608b99DTShellHlp.exe6.0.0.44454608b99c00000050000539116c801d02f1ec67341dcC:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exeC:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe057db475-9b12-11e4-8270-448a5ba4cf02

Error: (01/13/2015 11:49:01 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Gmer-19357.exe2.1.19357.052e7ea83Gmer-19357.exe2.1.19357.052e7ea83c0000005000011aa170001d02f1e8431d7edC:\Users\Sabri\AppData\Local\Temp\DMR\Downloads\fc14996dfa99adfc7baae624196888c5\7b485ad519eff9d7d5dd42c4b366b648\Gmer-19357.exeC:\Users\Sabri\AppData\Local\Temp\DMR\Downloads\fc14996dfa99adfc7baae624196888c5\7b485ad519eff9d7d5dd42c4b366b648\Gmer-19357.exec85dd16a-9b11-11e4-8270-448a5ba4cf02

Error: (01/13/2015 11:47:42 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Gmer-19357.exe2.1.19357.016f401d02f1e435f5af20C:\Users\Sabri\Desktop\PC-SCHUTZ\Gmer-19357.exe97ab3f27-9b11-11e4-8270-448a5ba4cf02

Error: (01/13/2015 11:46:45 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Gmer-19357.exe2.1.19357.0154801d02f1e2550b8eb0C:\Users\Sabri\Desktop\PC-SCHUTZ\Gmer-19357.exe76123c31-9b11-11e4-8270-448a5ba4cf02

Error: (01/13/2015 11:46:08 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: DTShellHlp.exe6.0.0.44454608b99DTShellHlp.exe6.0.0.44454608b99c0000005000053918bc01d02f1e22379bceC:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exeC:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe614c313a-9b11-11e4-8270-448a5ba4cf02

Error: (01/13/2015 11:46:03 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: DTShellHlp.exe6.0.0.44454608b99DTShellHlp.exe6.0.0.44454608b99c000000500005391167401d02f1e1f00fe99C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exeC:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe5e17f794-9b11-11e4-8270-448a5ba4cf02

Error: (01/13/2015 11:45:58 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: DTShellHlp.exe6.0.0.44454608b99DTShellHlp.exe6.0.0.44454608b99c00000050000539198801d02f1e1c0f8266C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exeC:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe5b241818-9b11-11e4-8270-448a5ba4cf02

Error: (01/13/2015 11:45:54 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Gmer-19357.exe2.1.19357.046c01d02f1e0df0cd7215C:\Users\Sabri\Desktop\PC-SCHUTZ\Gmer-19357.exe578e1d5a-9b11-11e4-8270-448a5ba4cf02

Error: (01/13/2015 11:45:13 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: DTShellHlp.exe6.0.0.44454608b99DTShellHlp.exe6.0.0.44454608b99c000000500005391152c01d02f1e017bd89aC:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exeC:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe408e0c13-9b11-11e4-8270-448a5ba4cf02

Error: (01/13/2015 11:45:07 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: DTShellHlp.exe6.0.0.44454608b99DTShellHlp.exe6.0.0.44454608b99c00000050000539117fc01d02f1dfd997acbC:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exeC:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe3cb53d3b-9b11-11e4-8270-448a5ba4cf02


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-4460 CPU @ 3.20GHz
Percentage of memory in use: 25%
Total physical RAM: 8143.91 MB
Available physical RAM: 6030.52 MB
Total Pagefile: 9423.91 MB
Available Pagefile: 6437.26 MB
Total Virtual: 131072 MB
Available Virtual: 131071.83 MB

==================== Drives ================================

Drive c: (Windows8_OS) (Fixed) (Total:905.25 GB) (Free:302.17 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 01FE9960)

Partition: GPT Partition Type.

==================== End Of Log ============================
         

krieg ich heute noch eine antwort?

krieg ich heute noch eine antwort?

Willste mich verkacken? Du hast vor 45min erst die logs gepostet. in meiner Sig steht nach 24h warten kannste mal ne Pm schicken .

das hier ist Freizeit, schneller geht es im PC Fachladen, kostet 150 Tacken die Stunde. Also immer locker


Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Ja sorry das sollte jetzt nicht so rüber kommen ich weiss deine mühe zu schätzen .die logs sind aber seid heute mittag drauf aber egal hast ja jetzt geantwortet 😄
Sobald ich zuhause bin kommen die anderen logs

selbst wenn es heute Mittag wäre. Ich hab aktuell 200 User, nicht nur einen. Achso, ja und noch nen echten Beruf nebenbei

Hier die logs von eben grade

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 13.01.2015
Suchlauf-Zeit: 17:06:25
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.4.1028
Malware Datenbank: v2015.01.13.12
Rootkit Datenbank: v2015.01.07.01
Lizenz: Premium
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Selbstschutz: Aktiviert

Betriebssystem: Windows 8.1
CPU: x64
Dateisystem: NTFS
Benutzer: Sabri

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 329757
Verstrichene Zeit: 7 Min, 5 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente erkannt)

Module: 0
(Keine schädliche Elemente erkannt)

Registrierungsschlüssel: 0
(Keine schädliche Elemente erkannt)

Registrierungswerte: 0
(Keine schädliche Elemente erkannt)

Registrierungsdaten: 0
(Keine schädliche Elemente erkannt)

Ordner: 0
(Keine schädliche Elemente erkannt)

Dateien: 0
(Keine schädliche Elemente erkannt)

Physische Sektoren: 0
(Keine schädliche Elemente erkannt)


(end)
         

adw log von heute mittag

# AdwCleaner v4.107 - Bericht erstellt am 13/01/2015 um 12:16:18
# Aktualisiert 07/01/2015 von Xplode
# Database : 2015-01-13.2 [Live]
# Betriebssystem : Windows 8.1  (64 bits)
# Benutzername : Sabri - SABRI-PC
# Gestartet von : C:\Users\Sabri\Desktop\PC-SCHUTZ\AdwCleaner_4.107.exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gefunden : C:\Program Files (x86)\Amazon\ABB

***** [ Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden : HKCU\Software\Classes\pokki
Schlüssel Gefunden : HKCU\Software\OCS
Schlüssel Gefunden : [x64] HKCU\Software\OCS
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{00B11DA2-75ED-4364-ABA5-9A95B1F5E946}

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Mozilla Firefox v34.0.5 (x86 de)


*************************

AdwCleaner[R0].txt - [1625 octets] - [16/12/2014 17:41:23]
AdwCleaner[R1].txt - [960 octets] - [13/01/2015 12:16:18]

########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [1019 octets] ##########
         

adw log von eben

# AdwCleaner v4.107 - Bericht erstellt am 13/01/2015 um 17:14:46
# Aktualisiert 07/01/2015 von Xplode
# Database : 2015-01-13.2 [Live]
# Betriebssystem : Windows 8.1  (64 bits)
# Benutzername : Sabri - SABRI-PC
# Gestartet von : C:\Users\Sabri\Desktop\PC-SCHUTZ\AdwCleaner_4.107.exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Mozilla Firefox v34.0.5 (x86 de)


*************************

AdwCleaner[R0].txt - [1625 octets] - [16/12/2014 17:41:23]
AdwCleaner[R1].txt - [1103 octets] - [13/01/2015 12:16:18]
AdwCleaner[R2].txt - [746 octets] - [13/01/2015 17:14:46]
AdwCleaner[S0].txt - [1118 octets] - [13/01/2015 12:20:14]

########## EOF - C:\AdwCleaner\AdwCleaner[R2].txt - [865 octets] ##########
         

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.1 (12.28.2014:1)
OS: Windows 8.1 x64
Ran by Sabri on 13.01.2015 at 17:22:26,29
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 13.01.2015 at 17:24:47,77
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-01-2015 02
Ran by Sabri (administrator) on SABRI-PC on 13-01-2015 17:26:35
Running from C:\Users\Sabri\Desktop\PC-SCHUTZ
Loaded Profile: Sabri (Available profiles: Sabri)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
() C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe
(MSI) C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe
(Micro-Star International) C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
(MSI) C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Micro-Star International) C:\MSI\Smart Utilities\SuperRAIDSvc.exe
(AVG Technologies) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(AVG Technologies) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
(Realtek Semiconductor) C:\Program Files (x86)\MSI\NetworkGenie\NetworkGenie.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7570136 2014-04-14] (Realtek Semiconductor)
HKLM\...\Run: [MBCfg64] => C:\WINDOWS\system32\RunDLL32.exe C:\WINDOWS\system32\MBCfg64.dll,RunDLLEntry MBCfg64
HKLM\...\Run: [ISCT Tray] => C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe [5860656 2014-04-03] (Intel Corporation)
HKLM\...\Run: [Samsung Link] => C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe [607584 2014-12-16] (Copyright 2013 SAMSUNG)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-20] (IvoSoft)
HKLM-x32\...\Run: [Sound Blaster Cinema] => C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe [711680 2013-08-16] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] => C:\WINDOWS\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-09] (AVAST Software)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55568 2014-12-08] (Raptr, Inc)
HKLM-x32\...\Run: [Live Update] => C:\Program Files (x86)\MSI\Live Update\Live Update.exe [3484624 2014-11-27] (Micro-Star International)
HKLM-x32\...\Run: [Command Center] => C:\Program Files (x86)\MSI\Command Center\StartCommandCenter.exe [797648 2014-11-11] ()
HKLM-x32\...\Run: [Fast Boot] => C:\Program Files (x86)\MSI\Fast Boot\StartFastBoot.exe [764472 2012-09-19] ()
HKLM-x32\...\Run: [Super Charger] => C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe [1014736 2014-07-22] (MSI)
HKU\S-1-5-21-3822476009-2779597456-3556243849-1001\...\Run: [DAEMON Tools Pro Agent] => C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe [3761424 2014-11-10] (Disc Soft Ltd)
HKU\S-1-5-21-3822476009-2779597456-3556243849-1001\...\Policies\system: [DisableLockWorkstation] 0
HKU\S-1-5-21-3822476009-2779597456-3556243849-1001\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\S-1-5-21-3822476009-2779597456-3556243849-1001\...\MountPoints2: {68882223-83b2-11e4-826b-448a5ba4cf02} - "E:\setup.exe" 
AppInit_DLLs-x32: ￿Ȅ獒瑬 => "￿Ȅ獒瑬" File Not Found
IFEO\AcroRd32.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\adobe air application installer.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\appvlp.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\dtagent.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\dtimgeditor.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\dtpro.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\excel.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\gputweak.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\groove.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\infopath.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\isctmodernui.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\lync.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\msaccess.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\msoev.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\msotd.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\msouc.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\mspub.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\ocpubmgr.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\onenote.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\onenotem.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\origin.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\originer.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\outlook.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\powerpnt.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\samsung link menu start.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\setlang.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\winword.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-3822476009-2779597456-3556243849-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-3822476009-2779597456-3556243849-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-3822476009-2779597456-3556243849-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
HKU\S-1-5-21-3822476009-2779597456-3556243849-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3822476009-2779597456-3556243849-1001 -> {B68BE3AA-F549-498C-99A8-3F297020C2E9} URL = 
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll (IvoSoft)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Sabri\AppData\Roaming\Mozilla\Firefox\Profiles\0w5lwyf0.default
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll ()
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Sabri\AppData\Roaming\Mozilla\Firefox\Profiles\0w5lwyf0.default\searchplugins\google-images.xml
FF SearchPlugin: C:\Users\Sabri\AppData\Roaming\Mozilla\Firefox\Profiles\0w5lwyf0.default\searchplugins\google-maps.xml
FF Extension: Adblock Plus - C:\Users\Sabri\AppData\Roaming\Mozilla\Firefox\Profiles\0w5lwyf0.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-01-06]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-12-27]

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2014-12-27]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-27]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S4 AllShare Framework DMS; C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe [404360 2013-12-21] (Samsung) [File not signed]
S4 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-27] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [104416 2014-12-27] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-12-27] (Avast Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [448384 2014-12-04] ()
S4 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2449592 2014-11-12] (Microsoft Corporation)
S4 Disc Soft Bus Service; C:\Program Files (x86)\DAEMON Tools Pro\DiscSoftBusService.exe [2216208 2014-11-10] (Disc Soft Ltd)
S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [175136 2015-01-09] (EasyAntiCheat Ltd)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
S4 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [209712 2014-04-03] ()
S4 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-04-03] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
S3 MSIBIOSData_CC; C:\Program Files (x86)\MSI\Command Center\BIOSData\MSIBIOSDataService.exe [2099712 2014-10-21] (MSI) [File not signed]
S3 MSIClock_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\MSIClockService.exe [4026880 2014-09-26] (MSI) [File not signed]
S3 MSICOMM_CC; C:\Program Files (x86)\MSI\Command Center\MSICommService.exe [2117632 2014-11-05] () [File not signed]
S3 MSICPU_CC; C:\Program Files (x86)\MSI\Command Center\CPU\MSICPUService.exe [4157440 2014-09-26] () [File not signed]
R2 MSICTL_CC; C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe [1993216 2014-09-26] () [File not signed]
S3 MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\MSIDDRService.exe [2242048 2014-10-21] () [File not signed]
S3 MSISMB_CC; C:\Program Files (x86)\MSI\Command Center\SMBus\MSISMBService.exe [2063360 2014-07-28] () [File not signed]
S3 MSISuperIO_CC; C:\Program Files (x86)\MSI\Command Center\SuperIO\MSISuperIOService.exe [575488 2014-10-29] () [File not signed]
R2 MSI_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe [103992 2012-10-26] (MSI)
R2 MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [1732048 2014-11-27] (Micro-Star International)
R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [162800 2014-03-17] (MSI)
S4 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1900400 2014-12-06] (Electronic Arts)
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2014-12-06] ()
S4 Samsung Link Service; C:\Program Files\Samsung\Samsung Link\Samsung Link.exe [616288 2014-12-16] (Copyright 2013 SAMSUNG)
R2 SuperRAIDSvc; C:\MSI\Smart Utilities\SuperRAIDSvc.exe [29648 2014-08-13] (Micro-Star International)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2604856 2014-11-24] (AVG Technologies)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [762320 2014-11-04] (Tunngle.net GmbH)
R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [42808 2014-11-24] (AVG Technologies)
R2 UxTuneUp; C:\Windows\SysWOW64\uxtuneup.dll [35640 2014-11-24] (AVG Technologies)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [18384 2014-08-07] (Intel(R) Corporation)
S3 COMSysApp; %SystemRoot%\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 AcpiCtlDrv; C:\Windows\System32\drivers\AcpiCtlDrv.sys [25880 2012-07-17] (Intel Corporation)
S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-12-27] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2014-12-27] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-12-27] (AVAST Software)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [449936 2014-12-27] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-12-27] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-12-27] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-27] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-12-27] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-12-27] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-12-27] ()
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [222720 2014-03-11] (Advanced Micro Devices)
R3 dtscsibus; C:\Windows\system32\DRIVERS\dtscsibus.sys [29864 2014-12-14] (Disc Soft Ltd)
S3 GeneStor; C:\Windows\System32\drivers\GeneStor.sys [103656 2013-10-21] (GenesysLogic)
R3 ikbevent; C:\Windows\system32\DRIVERS\ikbevent.sys [22216 2014-02-03] ()
R3 imsevent; C:\Windows\system32\DRIVERS\imsevent.sys [22728 2014-02-03] ()
S3 INETMON; C:\WINDOWS\System32\Drivers\INETMON.sys [25800 2014-04-03] ()
R2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [28912 2014-06-17] (Intel Corporation)
R3 ISCT; C:\Windows\System32\drivers\ISCTD.sys [44744 2014-02-03] ()
R1 mbamchameleon; C:\WINDOWS\system32\drivers\mbamchameleon.sys [93400 2014-11-21] (Malwarebytes Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [129752 2015-01-13] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2014-11-21] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [118272 2014-04-03] (Intel Corporation)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3344352 2013-07-08] (Intel Corporation)
R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\Super Charger\NTIOLib_X64.sys [13368 2012-10-25] (MSI)
R3 NTIOLib_1_0_4; C:\Program Files (x86)\MSI\Live Update\NTIOLib_X64.sys [14136 2010-10-22] (MSI)
S3 NTIOLib_1_0_6; C:\Program Files (x86)\Setup Files\Ms7850v450\NTIOLib_X64.sys [13808 2014-04-16] (MSI)
R3 NTIOLib_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\NTIOLib_X64.sys [13368 2012-10-26] (MSI)
S3 NTIOLib_MSIClock_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\NTIOLib_X64.sys [13368 2012-11-20] (MSI)
S3 NTIOLib_MSICOMM_CC; C:\Program Files (x86)\MSI\Command Center\NTIOLib_X64.sys [13368 2012-11-19] (MSI)
S3 NTIOLib_MSICPU_CC; C:\Program Files (x86)\MSI\Command Center\CPU\NTIOLib_X64.sys [13368 2012-11-20] (MSI)
S3 NTIOLib_MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\NTIOLib_X64.sys [13368 2012-11-26] (MSI)
S3 NTIOLib_MSIRatio_CC; C:\Program Files (x86)\MSI\Command Center\CPU\CPU_Ratio\NTIOLib_X64.sys [13368 2012-11-20] (MSI)
S3 NTIOLib_MSISMB_CC; C:\Program Files (x86)\MSI\Command Center\SMBus\NTIOLib_X64.sys [13368 2012-11-19] (MSI)
S3 NTIOLib_MSISuperIO_CC; C:\Program Files (x86)\MSI\Command Center\SuperIO\NTIOLib_X64.sys [13368 2012-11-19] (MSI)
R3 NTIOLib_MSI_RAID; C:\MSI\Smart Utilities\NTIOLib_X64.sys [13808 2014-03-17] (MSI)
S3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [1936088 2013-07-31] (Realtek Semiconductor Corporation                           )
R3 tap0901t; C:\Windows\system32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [14112 2014-08-28] (TuneUp Software)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-12-27] (Avast Software)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
S3 ALSysIO; \??\C:\Users\Sabri\AppData\Local\Temp\ALSysIO64.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
S3 RwDrv; \??\C:\WINDOWS\system32\Drivers\RwDrv.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-13 17:24 - 2015-01-13 17:24 - 00000614 _____ () C:\Users\Sabri\Desktop\JRT.txt
2015-01-13 17:18 - 2015-01-13 17:15 - 00000944 _____ () C:\Users\Sabri\Desktop\AdwCleaner[R2].txt
2015-01-13 17:18 - 2015-01-13 12:17 - 00001103 _____ () C:\Users\Sabri\Desktop\AdwCleaner[R1].txt
2015-01-13 17:13 - 2015-01-13 17:13 - 00001178 _____ () C:\Users\Sabri\Desktop\mbam.txt
2015-01-13 14:56 - 2015-01-13 14:56 - 00000000 ___HD () C:\SuperChargerProfile
2015-01-13 14:54 - 2015-01-13 17:21 - 00000294 _____ () C:\WINDOWS\Tasks\RtlNetworkGenieVistaStart.job
2015-01-13 14:54 - 2015-01-13 14:54 - 00002548 _____ () C:\WINDOWS\System32\Tasks\RtlNetworkGenieVistaStart
2015-01-13 14:54 - 2011-09-14 18:16 - 00032360 _____ (NT Kernel Resources) C:\WINDOWS\system32\Drivers\ndisrd.sys
2015-01-13 14:49 - 2015-01-13 14:49 - 00000000 ____D () C:\uninstall
2015-01-13 14:49 - 2015-01-13 14:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI Intel Extreme Tuning Utility
2015-01-13 14:49 - 2015-01-13 14:49 - 00000000 ____D () C:\Program Files\Microsoft Synchronization Services
2015-01-13 14:49 - 2015-01-13 14:49 - 00000000 ____D () C:\Program Files\Microsoft SQL Server Compact Edition
2015-01-13 14:49 - 2015-01-13 14:49 - 00000000 ____D () C:\Program Files (x86)\Setup Files
2015-01-13 14:49 - 2015-01-13 14:49 - 00000000 ____D () C:\Program Files (x86)\Microsoft Synchronization Services
2015-01-13 14:49 - 2015-01-13 14:49 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-01-13 14:44 - 2015-01-13 14:44 - 00000000 ___HD () C:\MSIServiceCfg_CC
2015-01-13 14:44 - 2015-01-13 14:44 - 00000000 ____D () C:\Intel
2015-01-13 14:44 - 2013-02-08 11:04 - 00000000 _____ () C:\RAMDiskImage.img
2015-01-13 14:33 - 2015-01-13 14:55 - 00000000 ____D () C:\MSI
2015-01-13 14:33 - 2015-01-13 14:33 - 00002062 _____ () C:\Users\Public\Desktop\MSI Live Update 6.lnk
2015-01-13 14:33 - 2014-04-30 16:23 - 00011248 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\acpimof.dll
2015-01-13 13:53 - 2015-01-13 13:53 - 00000000 ____D () C:\ProgramData\ATI
2015-01-13 13:49 - 2015-01-13 13:49 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\library_dir
2015-01-13 13:49 - 2015-01-13 13:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved
2015-01-13 13:48 - 2015-01-13 14:53 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\Raptr
2015-01-13 13:48 - 2015-01-13 13:49 - 00000000 ____D () C:\Program Files (x86)\Raptr
2015-01-13 13:48 - 2015-01-13 13:48 - 00053736 _____ () C:\WINDOWS\SysWOW64\CCCInstall_201501131348379278.log
2015-01-13 13:48 - 2015-01-13 13:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-01-13 13:48 - 2015-01-13 13:48 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2015-01-13 13:48 - 2015-01-13 13:48 - 00000000 ____D () C:\Program Files (x86)\AMD
2015-01-13 13:47 - 2015-01-13 13:47 - 00000000 ____D () C:\WINDOWS\LastGood.Tmp
2015-01-13 13:45 - 2015-01-13 13:45 - 00000398 _____ () C:\SetupCD.txt
2015-01-13 13:45 - 2015-01-13 13:45 - 00000000 ____D () C:\AMD
2015-01-13 13:43 - 2015-01-13 13:43 - 00000000 __SHD () C:\Users\Sabri\AppData\Local\EmieBrowserModeList
2015-01-13 13:32 - 2015-01-13 13:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell
2015-01-13 13:32 - 2015-01-13 13:32 - 00000000 ____D () C:\Program Files\Classic Shell
2015-01-13 13:26 - 2015-01-13 13:26 - 06791360 _____ (IvoSoft) C:\Users\Sabri\Downloads\ClassicShellSetup_4_1_0.exe
2015-01-13 11:56 - 2015-01-13 11:56 - 59797360 _____ (AVAST Software) C:\Users\Sabri\Downloads\vpsupd.exe
2015-01-13 11:48 - 2015-01-13 11:48 - 01174816 _____ () C:\Users\Sabri\Downloads\Gmer-19357 - CHIP-Installer.exe
2015-01-13 11:41 - 2015-01-13 17:26 - 00000000 ____D () C:\FRST
2015-01-13 11:08 - 2015-01-13 11:08 - 00000000 ____D () C:\WINDOWS\ERUNT
2015-01-13 11:08 - 2014-11-11 01:39 - 22290560 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-01-13 11:08 - 2014-11-11 01:17 - 19731824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-01-13 11:08 - 2014-11-08 03:03 - 00733696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2015-01-13 11:08 - 2014-11-08 02:49 - 01154048 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2015-01-13 11:08 - 2014-10-31 01:51 - 18823168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-01-13 11:08 - 2014-10-31 01:10 - 15158784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-01-13 11:07 - 2014-11-17 21:17 - 00672984 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2015-01-13 11:07 - 2014-11-17 21:17 - 00273240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2015-01-13 11:07 - 2014-11-15 20:05 - 00801584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2015-01-13 11:07 - 2014-11-15 07:29 - 00962216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2015-01-13 11:07 - 2014-11-14 15:36 - 00055776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-01-13 11:07 - 2014-11-14 08:10 - 03558400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-01-13 11:07 - 2014-11-14 07:58 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsDatabase.dll
2015-01-13 11:07 - 2014-11-14 07:58 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-01-13 11:07 - 2014-11-14 07:57 - 01027584 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-01-13 11:07 - 2014-11-14 07:57 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-01-13 11:07 - 2014-11-14 07:54 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2015-01-13 11:07 - 2014-11-14 07:54 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-01-13 11:07 - 2014-11-14 07:54 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-01-13 11:07 - 2014-11-14 07:53 - 00894976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-01-13 11:07 - 2014-11-14 07:52 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-01-13 11:07 - 2014-11-14 07:46 - 02171904 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2015-01-13 11:07 - 2014-11-14 07:46 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2015-01-13 11:07 - 2014-11-14 07:39 - 02819584 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2015-01-13 11:07 - 2014-11-14 06:04 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-01-13 11:07 - 2014-11-14 06:03 - 00885760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-01-13 11:07 - 2014-11-14 06:03 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-01-13 11:07 - 2014-11-14 06:01 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-01-13 11:07 - 2014-11-14 06:01 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-01-13 11:07 - 2014-11-14 05:53 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2015-01-13 11:07 - 2014-11-10 19:06 - 02485056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2015-01-13 11:07 - 2014-11-10 19:06 - 00473408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2015-01-13 11:07 - 2014-11-10 19:06 - 00428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2015-01-13 11:07 - 2014-11-10 19:06 - 00136512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2015-01-13 11:07 - 2014-11-10 03:57 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys
2015-01-13 11:07 - 2014-11-10 02:37 - 00845312 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2015-01-13 11:07 - 2014-11-10 02:34 - 01084416 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2015-01-13 11:07 - 2014-11-10 02:26 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2015-01-13 11:07 - 2014-11-10 02:20 - 00420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2015-01-13 11:07 - 2014-11-10 02:09 - 00272384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2015-01-13 11:07 - 2014-11-10 02:08 - 00702464 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2015-01-13 11:07 - 2014-11-10 02:06 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2015-01-13 11:07 - 2014-11-10 01:57 - 00624640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2015-01-13 11:07 - 2014-11-10 01:57 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2015-01-13 11:07 - 2014-11-08 11:42 - 01390928 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2015-01-13 11:07 - 2014-11-08 11:23 - 01127976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2015-01-13 11:07 - 2014-11-08 05:00 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys
2015-01-13 11:07 - 2014-11-08 05:00 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndistapi.sys
2015-01-13 11:07 - 2014-11-08 04:58 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rasl2tp.sys
2015-01-13 11:07 - 2014-11-08 04:58 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys
2015-01-13 11:07 - 2014-11-08 04:56 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\kmddsp.tsp
2015-01-13 11:07 - 2014-11-08 04:56 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmxs.dll
2015-01-13 11:07 - 2014-11-08 04:56 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasser.dll
2015-01-13 11:07 - 2014-11-08 04:24 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdiag.dll
2015-01-13 11:07 - 2014-11-08 04:13 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kmddsp.tsp
2015-01-13 11:07 - 2014-11-08 04:13 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasmxs.dll
2015-01-13 11:07 - 2014-11-08 04:13 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasser.dll
2015-01-13 11:07 - 2014-11-08 03:48 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdiag.dll
2015-01-13 11:07 - 2014-11-08 03:38 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2015-01-13 11:07 - 2014-11-08 03:17 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2015-01-13 11:07 - 2014-11-08 03:09 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascfg.dll
2015-01-13 11:07 - 2014-11-08 02:59 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rascfg.dll
2015-01-13 11:07 - 2014-11-08 02:58 - 04837376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2015-01-13 11:07 - 2014-11-07 04:58 - 00952896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2015-01-13 11:07 - 2014-11-07 04:20 - 00786120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2015-01-13 11:07 - 2014-11-05 03:12 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\QSHVHOST.DLL
2015-01-13 11:07 - 2014-11-05 03:12 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\QSVRMGMT.DLL
2015-01-13 11:07 - 2014-11-05 03:06 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2015-01-13 11:07 - 2014-11-05 02:44 - 00657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2015-01-13 11:07 - 2014-11-05 02:43 - 00252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2015-01-13 11:07 - 2014-11-05 02:41 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2015-01-13 11:07 - 2014-11-05 02:39 - 00155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\QSHVHOST.DLL
2015-01-13 11:07 - 2014-11-05 02:39 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\QSVRMGMT.DLL
2015-01-13 11:07 - 2014-11-05 02:33 - 00465408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2015-01-13 11:07 - 2014-11-05 02:21 - 00658432 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDApi.dll
2015-01-13 11:07 - 2014-11-05 02:20 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2015-01-13 11:07 - 2014-11-05 02:18 - 00507392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2015-01-13 11:07 - 2014-11-05 02:14 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2015-01-13 11:07 - 2014-11-05 02:06 - 00555520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSDApi.dll
2015-01-13 11:07 - 2014-11-04 20:33 - 00058176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2015-01-13 11:07 - 2014-11-04 20:25 - 00059712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdclass.sys
2015-01-13 11:07 - 2014-11-04 20:25 - 00051008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouclass.sys
2015-01-13 11:07 - 2014-11-04 07:55 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sermouse.sys
2015-01-13 11:07 - 2014-11-04 07:54 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\i8042prt.sys
2015-01-13 11:07 - 2014-11-04 07:54 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys
2015-01-13 11:07 - 2014-11-04 07:54 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouhid.sys
2015-01-13 11:07 - 2014-11-04 07:27 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe
2015-01-13 11:07 - 2014-11-04 06:01 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2015-01-13 11:07 - 2014-10-30 06:55 - 07473472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-01-13 11:07 - 2014-10-30 06:47 - 01499384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-01-13 11:07 - 2014-10-30 06:41 - 01733952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-01-13 11:07 - 2014-10-29 04:05 - 00551232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2015-01-13 11:07 - 2014-10-29 03:02 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2015-01-13 11:07 - 2014-10-29 03:02 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2015-01-13 11:07 - 2014-10-29 02:57 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm64.dll
2015-01-13 11:07 - 2014-10-29 02:55 - 00242176 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
2015-01-13 11:07 - 2014-10-29 02:15 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll
2015-01-13 11:07 - 2014-10-29 02:15 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wow32.dll
2015-01-13 11:07 - 2014-10-29 02:14 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe
2015-01-13 11:07 - 2014-10-29 02:13 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
2015-01-13 11:07 - 2014-10-29 02:13 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe
2015-01-13 11:07 - 2014-10-29 02:13 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\instnm.exe
2015-01-13 11:07 - 2014-10-26 23:10 - 00390841 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2015-01-13 11:07 - 2014-10-21 02:59 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\eventcls.dll
2015-01-13 11:07 - 2014-10-21 02:19 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eventcls.dll
2015-01-13 11:07 - 2014-10-21 01:50 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\vsstrace.dll
2015-01-13 11:07 - 2014-10-21 01:31 - 01574400 _____ (Microsoft Corporation) C:\WINDOWS\system32\vssapi.dll
2015-01-13 11:07 - 2014-10-21 01:31 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vsstrace.dll
2015-01-13 11:07 - 2014-10-21 01:30 - 01454080 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2015-01-13 11:07 - 2014-10-21 01:20 - 01142272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vssapi.dll
2015-01-13 11:07 - 2014-10-17 05:56 - 00238912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2015-01-13 11:07 - 2014-10-17 05:56 - 00153920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2015-01-13 11:07 - 2014-10-17 05:56 - 00039744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2015-01-13 11:07 - 2014-10-17 04:35 - 00086336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2015-01-13 11:00 - 2015-01-13 11:03 - 00000000 ____D () C:\Program Files (x86)\SpywareBlaster
2015-01-13 11:00 - 2015-01-13 11:00 - 04095448 _____ (BrightFort LLC ) C:\Users\Sabri\Downloads\spywareblastersetup50.exe
2015-01-13 11:00 - 2015-01-13 11:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpywareBlaster
2015-01-13 11:00 - 2015-01-13 11:00 - 00000000 ____D () C:\ProgramData\Licenses
2015-01-13 11:00 - 2011-11-04 05:13 - 01070352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCOMCTL.OCX
2015-01-13 11:00 - 2009-03-24 12:52 - 00129872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSSTDFMT.DLL
2015-01-13 10:49 - 2015-01-13 17:26 - 00000000 ____D () C:\Users\Sabri\Desktop\PC-SCHUTZ
2015-01-12 19:48 - 2015-01-12 19:48 - 00017475 _____ () C:\WINDOWS\DirectX.log
2015-01-12 19:46 - 2015-01-12 19:47 - 00000000 ___HD () C:\ArcTemp
2015-01-12 19:45 - 2015-01-12 19:45 - 00003182 _____ () C:\WINDOWS\System32\Tasks\{C45421BB-DF42-408D-9F00-EA4FDB9E7020}
2015-01-12 19:44 - 2015-01-12 19:44 - 00000000 ____D () C:\Users\Public\Documents\Arc
2015-01-12 17:50 - 2015-01-13 13:47 - 00000721 _____ () C:\WINDOWS\setupact.log
2015-01-12 14:19 - 2015-01-12 14:20 - 00000000 ____D () C:\Program Files (x86)\Tunngle
2015-01-12 14:19 - 2015-01-12 14:19 - 10306616 _____ (Perfect World Entertainment) C:\Users\Sabri\Downloads\ArcInstall_NW_20141223.exe
2015-01-12 14:19 - 2015-01-12 14:19 - 00001018 _____ () C:\Users\Public\Desktop\Tunngle.lnk
2015-01-12 14:19 - 2015-01-12 14:19 - 00000000 ____D () C:\Users\Sabri\Documents\Tunngle
2015-01-12 14:19 - 2015-01-12 14:19 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\Tunngle
2015-01-12 14:19 - 2015-01-12 14:19 - 00000000 ____D () C:\Users\Public\Documents\Tunngle
2015-01-12 14:19 - 2015-01-12 14:19 - 00000000 ____D () C:\ProgramData\Tunngle
2015-01-12 14:19 - 2015-01-12 14:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tunngle
2015-01-12 14:19 - 2009-09-16 07:02 - 00031232 _____ (Tunngle.net) C:\WINDOWS\system32\Drivers\tap0901t.sys
2015-01-12 14:15 - 2015-01-12 14:15 - 04501720 _____ (Tunngle.net GmbH ) C:\Users\Sabri\Downloads\Tunngle_Setup_v5.0.exe
2015-01-11 16:04 - 2015-01-11 16:04 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\Steam
2015-01-11 15:59 - 2015-01-11 15:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Evil Within
2015-01-11 15:35 - 2015-01-11 15:59 - 00000000 ____D () C:\Program Files (x86)\The Evil Within
2015-01-11 13:48 - 2015-01-11 14:28 - 00000000 ____D () C:\Users\Sabri\Downloads\The Evil Within
2015-01-11 13:46 - 2015-01-12 14:32 - 00000000 ____D () C:\Users\Sabri\Desktop\Spiele
2015-01-11 13:27 - 2015-01-11 13:27 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FreeArc
2015-01-11 13:27 - 2015-01-11 13:27 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\FreeArc
2015-01-11 13:27 - 2015-01-11 13:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeArc
2015-01-11 13:27 - 2015-01-11 13:27 - 00000000 ____D () C:\Program Files (x86)\FreeArc
2015-01-11 13:02 - 2015-01-11 13:02 - 00000000 _____ () C:\WINDOWS\setuperr.log
2015-01-10 23:15 - 2015-01-10 23:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ryse Son of Rome
2015-01-10 23:04 - 2015-01-10 23:25 - 00000000 ____D () C:\Program Files (x86)\Ryse Son of Rome
2015-01-10 08:32 - 2015-01-10 08:32 - 00002762 _____ () C:\WINDOWS\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2015-01-09 22:03 - 2015-01-09 22:03 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\Fatshark
2015-01-09 22:00 - 2015-01-09 21:36 - 00175136 _____ (EasyAntiCheat Ltd) C:\WINDOWS\SysWOW64\EasyAntiCheat.exe
2015-01-09 20:02 - 2015-01-10 20:10 - 00000000 ____D () C:\Users\Sabri\Downloads\Ryse_ Son of Rome
2015-01-07 19:17 - 2015-01-07 19:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Styx Master of Shadows
2015-01-07 19:11 - 2015-01-07 19:17 - 00000000 ____D () C:\Program Files (x86)\Styx Master of Shadows
2015-01-07 19:10 - 2015-01-07 19:10 - 00000000 ____D () C:\Users\Public\Documents\DAEMON Tools Images
2015-01-06 12:11 - 2015-01-06 12:12 - 00000197 _____ () C:\WINDOWS\system32\2015-01-06-11-11-36.057-AvastVBoxSVC.exe-3268.log
2015-01-06 12:10 - 2015-01-13 17:21 - 00003562 _____ () C:\WINDOWS\PFRO.log
2015-01-06 12:03 - 2015-01-06 12:16 - 00003706 _____ () C:\WINDOWS\System32\Tasks\Java Platform SE Auto Updater
2015-01-06 11:59 - 2014-11-24 12:48 - 00042808 _____ (AVG Technologies) C:\WINDOWS\system32\uxtuneup.dll
2015-01-06 11:59 - 2014-11-24 12:48 - 00035640 _____ (AVG Technologies) C:\WINDOWS\SysWOW64\uxtuneup.dll
2015-01-06 11:53 - 2015-01-06 11:53 - 00002244 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2015.lnk
2015-01-06 11:53 - 2015-01-06 11:53 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\AVG
2015-01-06 11:53 - 2015-01-06 11:53 - 00000000 ____D () C:\Users\Sabri\AppData\Local\Avg
2015-01-06 11:53 - 2015-01-06 11:53 - 00000000 ____D () C:\Program Files (x86)\AVG
2015-01-06 11:53 - 2014-11-24 12:48 - 00040248 _____ (AVG Technologies) C:\WINDOWS\system32\TURegOpt.exe
2015-01-06 11:53 - 2014-11-24 12:48 - 00029496 _____ (AVG Technologies) C:\WINDOWS\system32\authuitu.dll
2015-01-06 11:53 - 2014-11-24 12:48 - 00025400 _____ (AVG Technologies) C:\WINDOWS\SysWOW64\authuitu.dll
2015-01-06 11:52 - 2015-01-13 17:16 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\ClassicShell
2015-01-06 11:52 - 2015-01-06 11:53 - 00000000 ____D () C:\ProgramData\AVG
2015-01-06 11:52 - 2015-01-06 11:52 - 00000000 ____D () C:\ProgramData\ClassicShell
2015-01-05 17:27 - 2015-01-13 14:51 - 01717475 _____ () C:\WINDOWS\WindowsUpdate.log
2015-01-05 16:37 - 2015-01-05 16:37 - 00003886 _____ () C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2015-01-05 14:50 - 2015-01-13 17:21 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-01-05 14:49 - 2015-01-05 14:49 - 00001129 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-01-05 14:49 - 2015-01-05 14:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-01-05 14:49 - 2015-01-05 14:49 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-01-05 14:49 - 2015-01-05 14:49 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-01-05 14:49 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-01-05 14:49 - 2014-11-21 06:14 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-01-05 14:49 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-01-05 14:16 - 2015-01-05 14:16 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-01-04 20:20 - 2014-12-03 21:08 - 00000000 ____D () C:\Users\Sabri\Downloads\Styx Master of Shadows 1.02
2014-12-27 11:06 - 2014-12-27 11:06 - 00000247 _____ () C:\WINDOWS\system32\2014-12-27-10-06-16.041-aswFe.exe-1796.log
2014-12-27 11:03 - 2014-12-27 11:06 - 00000247 _____ () C:\WINDOWS\system32\2014-12-27-10-03-13.088-aswFe.exe-1672.log
2014-12-27 11:03 - 2014-12-27 11:03 - 00000197 _____ () C:\WINDOWS\system32\2014-12-27-10-03-12.097-AvastVBoxSVC.exe-5736.log
2014-12-27 10:57 - 2015-01-13 11:16 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2014-12-27 10:57 - 2014-12-27 10:57 - 01050432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys
2014-12-27 10:57 - 2014-12-27 10:57 - 00001997 _____ () C:\Users\Public\Desktop\Avast Internet Security.lnk
2014-12-27 10:57 - 2014-12-27 10:57 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\AVAST Software
2014-12-27 10:57 - 2014-12-27 10:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2014-12-27 10:57 - 2014-12-27 10:56 - 00436624 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-12-27 10:57 - 2014-12-27 10:56 - 00364512 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-12-27 10:57 - 2014-12-27 10:56 - 00267632 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-12-27 10:57 - 2014-12-27 10:56 - 00116728 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2014-12-27 10:57 - 2014-12-27 10:56 - 00093568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2014-12-27 10:57 - 2014-12-27 10:56 - 00083280 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-12-27 10:57 - 2014-12-27 10:56 - 00065776 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-12-27 10:57 - 2014-12-27 10:56 - 00029208 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2014-12-27 10:57 - 2014-12-27 10:56 - 00028184 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2014-12-27 10:56 - 2014-12-27 10:56 - 00449936 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNdisFlt.sys
2014-12-27 10:56 - 2014-12-27 10:56 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-12-27 10:56 - 2014-12-27 10:56 - 00000000 ____D () C:\Program Files\AVAST Software
2014-12-27 10:54 - 2014-12-27 10:56 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-12-25 15:30 - 2014-12-25 15:30 - 00000773 _____ () C:\WINDOWS\removeep.cmd
2014-12-25 15:28 - 2014-12-25 15:28 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\reaper
2014-12-21 01:08 - 2014-12-21 01:08 - 00000000 ____D () C:\Program Files (x86)\Lenovo
2014-12-19 22:30 - 2015-01-06 12:03 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\Skype
2014-12-19 22:30 - 2014-12-19 22:30 - 00000000 ____D () C:\Users\Sabri\AppData\Local\Skype
2014-12-19 20:07 - 2014-10-30 23:37 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2014-12-19 20:07 - 2014-10-30 23:34 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2014-12-19 14:39 - 2015-01-06 11:37 - 00000000 ____D () C:\ProgramData\Skype
2014-12-18 18:49 - 2014-12-18 18:49 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\Nitro
2014-12-18 18:42 - 2014-12-23 15:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-12-18 18:42 - 2014-12-23 15:08 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-12-16 17:41 - 2015-01-13 17:20 - 00000000 ____D () C:\AdwCleaner
2014-12-16 15:22 - 2014-12-16 15:23 - 00000000 ____D () C:\Users\Sabri\AppData\Local\SmartView2
2014-12-16 15:22 - 2014-12-16 15:22 - 00000000 ____D () C:\Program Files (x86)\SmartView2
2014-12-16 15:17 - 2014-12-16 15:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2014-12-16 15:17 - 2014-12-16 15:17 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack
2014-12-16 14:48 - 2014-12-27 10:48 - 00000000 ____D () C:\Users\Sabri\Documents\Sabri
2014-12-16 01:33 - 2014-12-26 19:08 - 00000000 ____D () C:\Users\Sabri\Desktop\FM cata
2014-12-16 01:33 - 2014-12-16 01:33 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\Nitro PDF
2014-12-15 19:34 - 2014-12-15 19:36 - 00001887 _____ () C:\Users\Sabri\Desktop\Samsung Link sabri_9@web.de.lnk
2014-12-15 19:34 - 2014-12-15 19:34 - 00000000 ____D () C:\Users\Sabri\Samsung Link
2014-12-15 19:34 - 2014-12-15 19:34 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\SAMSUNG
2014-12-14 23:32 - 2014-12-14 23:32 - 00000000 ____D () C:\Users\Sabri\Documents\Spiele
2014-12-14 23:18 - 2014-12-14 23:18 - 00000000 ____D () C:\Users\Sabri\AppData\Local\Risen3
2014-12-14 23:04 - 2014-12-14 23:15 - 00000000 ____D () C:\Program Files (x86)\Risen 3 - Titan Lords
2014-12-14 19:25 - 2014-12-18 23:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2014-12-14 19:06 - 2015-01-06 17:44 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\DAEMON Tools Pro
2014-12-14 19:06 - 2014-12-14 19:07 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Pro
2014-12-14 19:06 - 2014-12-14 19:06 - 00029864 _____ (Disc Soft Ltd) C:\WINDOWS\system32\Drivers\dtscsibus.sys
2014-12-14 19:06 - 2014-12-14 19:06 - 00001959 _____ () C:\Users\Public\Desktop\DAEMON Tools Pro.lnk
2014-12-14 19:06 - 2014-12-14 19:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Pro
2014-12-14 19:06 - 2014-12-14 19:06 - 00000000 ____D () C:\ProgramData\DAEMON Tools Pro
2014-12-14 18:32 - 2014-12-14 18:32 - 00000000 ____D () C:\Users\Sabri\AppData\Local\Skyrim
2014-12-14 18:32 - 2014-12-14 18:32 - 00000000 ____D () C:\ProgramData\Steam
2014-12-14 18:01 - 2014-12-14 18:01 - 00000000 ____D () C:\Users\Sabri\AppData\Local\Disc_Soft_Ltd
2014-12-14 18:00 - 2014-12-14 18:01 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\DAEMON Tools Ultra
2014-12-14 18:00 - 2014-12-14 18:00 - 00000000 ____D () C:\ProgramData\DAEMON Tools Ultra
2014-12-14 17:59 - 2014-12-14 17:59 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\WinRAR
2014-12-14 17:59 - 2014-12-14 17:59 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-12-14 17:59 - 2014-12-14 17:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-12-14 17:59 - 2014-12-14 17:59 - 00000000 ____D () C:\Program Files\WinRAR
2014-12-14 17:43 - 2014-12-14 17:47 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2014-12-14 17:27 - 2014-12-14 19:25 - 00000000 ____D () C:\Program Files\Samsung
2014-12-14 17:27 - 2014-12-14 17:27 - 00000000 ____D () C:\Users\Sabri\AppData\Local\SAMSUNG
2014-12-14 17:27 - 2014-12-14 17:27 - 00000000 ____D () C:\Users\Sabri\.swt
2014-12-14 17:27 - 2014-12-14 17:27 - 00000000 ____D () C:\Upload
2014-12-14 17:27 - 2014-12-14 17:27 - 00000000 ____D () C:\ProgramData\SAMSUNG
2014-12-14 16:49 - 2015-01-09 12:08 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\vlc
2014-12-14 16:01 - 2014-12-14 16:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-12-14 16:01 - 2014-12-14 16:01 - 00000000 ____D () C:\Program Files\VideoLAN
2014-12-14 15:29 - 2014-12-14 15:29 - 00002135 _____ () C:\Users\Sabri\Desktop\JDownloader 2.lnk
2014-12-14 15:29 - 2014-12-14 15:29 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader
2014-12-14 15:28 - 2015-01-11 15:33 - 00000000 ____D () C:\Users\Sabri\AppData\Local\JDownloader 2.0
2014-12-14 15:21 - 2014-12-14 15:21 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2014-12-14 15:21 - 2014-12-14 15:21 - 00000000 ____D () C:\ProgramData\Sun
2014-12-14 15:21 - 2014-12-14 15:21 - 00000000 ____D () C:\ProgramData\Oracle
2014-12-14 15:21 - 2014-12-14 15:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-12-14 15:21 - 2014-12-14 15:21 - 00000000 ____D () C:\Program Files (x86)\Java

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-13 17:26 - 2014-12-09 20:42 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-01-13 17:21 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-01-13 17:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-01-13 16:08 - 2014-12-04 22:04 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-01-13 15:23 - 2014-12-05 02:16 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3822476009-2779597456-3556243849-1001
2015-01-13 14:57 - 2014-07-19 01:37 - 00765378 _____ () C:\WINDOWS\system32\perfh007.dat
2015-01-13 14:57 - 2014-07-19 01:37 - 00159696 _____ () C:\WINDOWS\system32\perfc007.dat
2015-01-13 14:57 - 2013-08-31 16:40 - 01780340 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-01-13 14:56 - 2014-12-09 05:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI
2015-01-13 14:56 - 2014-12-09 05:47 - 00000000 ____D () C:\Program Files (x86)\MSI
2015-01-13 14:54 - 2014-07-18 15:47 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-01-13 14:54 - 2014-07-18 15:47 - 00000000 ____D () C:\ProgramData\Intel
2015-01-13 14:49 - 2014-07-18 15:48 - 00000000 ____D () C:\Program Files (x86)\Intel
2015-01-13 14:49 - 2014-07-18 15:46 - 00000000 ____D () C:\ProgramData\Package Cache
2015-01-13 14:48 - 2014-07-18 15:47 - 00000000 ____D () C:\Program Files\Intel
2015-01-13 13:50 - 2014-12-05 00:35 - 00000000 ____D () C:\Users\Sabri\AppData\Local\Sniper3
2015-01-13 13:50 - 2014-12-04 23:08 - 00000000 ____D () C:\Users\Sabri\Documents\DayZ
2015-01-13 13:48 - 2014-12-08 23:28 - 00000000 ____D () C:\Program Files\ATI Technologies
2015-01-13 13:48 - 2014-07-18 15:47 - 00000000 ____D () C:\ProgramData\AMD
2015-01-13 13:47 - 2014-07-18 15:46 - 00000000 ____D () C:\Program Files\AMD
2015-01-13 13:46 - 2014-07-18 15:46 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2015-01-13 12:21 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2015-01-13 12:20 - 2014-07-18 16:05 - 00000000 ____D () C:\Program Files (x86)\Amazon
2015-01-13 12:20 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2015-01-13 12:20 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2015-01-13 12:20 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\setup
2015-01-13 12:20 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\setup
2015-01-13 11:28 - 2013-08-22 16:20 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-01-13 11:15 - 2013-08-22 15:44 - 00492384 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-01-13 11:03 - 2014-07-18 16:05 - 00000000 ____D () C:\ProgramData\Temp
2015-01-13 10:37 - 2014-12-05 02:10 - 00000000 ____D () C:\Users\Sabri\AppData\Local\VirtualStore
2015-01-12 14:04 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-01-11 20:47 - 2014-12-06 18:17 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\TS3Client
2015-01-07 19:40 - 2014-12-09 23:40 - 00000000 ____D () C:\Users\Sabri\Documents\My Games
2015-01-06 12:15 - 2014-12-09 05:50 - 00009730 _____ () C:\WINDOWS\SysWOW64\Gms.log
2015-01-06 11:46 - 2014-12-05 02:10 - 00000000 ____D () C:\Users\Sabri\AppData\Local\Pokki
2015-01-06 11:40 - 2014-12-05 02:10 - 00000000 ____D () C:\Users\Sabri\AppData\Local\Packages
2015-01-05 14:25 - 2014-07-18 16:09 - 00000000 ____D () C:\ProgramData\Adobe
2015-01-05 14:17 - 2014-12-05 02:10 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\Adobe
2015-01-05 14:17 - 2014-12-04 20:21 - 00000000 ____D () C:\Users\Sabri\AppData\Local\Adobe
2015-01-05 14:16 - 2014-07-18 16:09 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-01-05 14:16 - 2014-07-18 16:04 - 00000000 ____D () C:\ProgramData\McAfee
2014-12-29 18:22 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-12-25 15:30 - 2014-12-05 02:11 - 00000000 ____D () C:\Users\Sabri\AppData\Local\Lenovo
2014-12-25 15:30 - 2014-07-18 16:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-12-21 01:08 - 2014-07-18 16:09 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Lenovo
2014-12-21 01:08 - 2014-07-18 16:09 - 00000000 ____D () C:\WINDOWS\Downloaded Installations
2014-12-18 23:43 - 2014-12-05 02:10 - 00000000 ____D () C:\Users\Sabri
2014-12-14 19:42 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache

Some content of TEMP:
====================
C:\Users\Sabri\AppData\Local\Temp\amd-catalyst-omega-14.12-without-dotnet45-win8.1-64bit.exe
C:\Users\Sabri\AppData\Local\Temp\AutoDetectUtilApp.exe
C:\Users\Sabri\AppData\Local\Temp\Command Center.exe
C:\Users\Sabri\AppData\Local\Temp\devcon64.exe
C:\Users\Sabri\AppData\Local\Temp\proxy_vole5857646728128945627.dll
C:\Users\Sabri\AppData\Local\Temp\Quarantine.exe
C:\Users\Sabri\AppData\Local\Temp\raptrpatch.exe
C:\Users\Sabri\AppData\Local\Temp\raptr_stub.exe
C:\Users\Sabri\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-12 14:03

==================== End Of Log ============================
         

--- --- ---


muss dazu erwähnen das die cpu auslastung grade wieder im norm berreich ist also 0-3% im leerlauf
--- --- ---

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

ESET logfile

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=7158e9c592918848ba237c791adcd91b
# engine=21947
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2015-01-13 05:16:58
# local_time=2015-01-13 06:16:58 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 3278676 46050711 0 0
# scanned=44895
# found=0
# cleaned=0
# scan_time=729
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=7158e9c592918848ba237c791adcd91b
# engine=21950
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2015-01-13 08:37:34
# local_time=2015-01-13 09:37:34 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 3294312 46062747 0 0
# scanned=258699
# found=4
# cleaned=0
# scan_time=4117
sh=85DEF24102641E15AE33EB7C38F43C87173D3DF2 ft=1 fh=e37d75ebc2eb4d25 vn="Win32/HackTool.Crack.CM potenziell unsichere Anwendung" ac=I fn="C:\Program Files (x86)\Styx Master of Shadows\Binaries\Win32\steam_api.dll"
sh=1060479A8BBCBAB7AEA8728B218AB333936A8013 ft=1 fh=1e00461ebe9c4dd0 vn="Variante von Win32/Packed.VMProtect.ABD Trojaner" ac=I fn="C:\Program Files (x86)\Styx Master of Shadows\Binaries\Win64\steam_api64.dll"
sh=FB3F7E2BF56F5EA06763303CDAA0E962E975E063 ft=1 fh=c0dea5299389dc4e vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Sabri\AppData\Local\Temp\DMR\dmr_72.exe"
sh=B3F23722DDD6DAAA48741B4D3B332831DA82059C ft=1 fh=91f5829c63a4a6fc vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Sabri\Downloads\Gmer-19357 - CHIP-Installer.exe"
         

 Results of screen317's Security Check version 0.99.93  
   x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Windows Defender   
avast! Antivirus   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 MVPS Hosts File  
 SpywareBlaster 5.0    
 AVG PC TuneUp 2015  
 AVG PC TuneUp 2015 (de-DE) 
 AVG PC TuneUp 2015  
 Java 8 Update 25  
 Java version 32-bit out of Date! 
 Adobe Flash Player 	16.0.0.257  
 Adobe Reader XI  
 Mozilla Firefox (34.0.5) 
````````Process Check: objlist.exe by Laurent````````  
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbam.exe  
 Malwarebytes Anti-Malware mbamscheduler.exe   
 AVAST Software Avast AvastSvc.exe  
 AVAST Software Avast afwServ.exe  
 AVAST Software Avast ng vbox\AvastVBoxSVC.exe 
 AVAST Software Avast ng ngservice.exe 
 AVAST Software Avast avastui.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  % 
````````````````````End of Log``````````````````````
         

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-01-2015 02
Ran by Sabri (administrator) on SABRI-PC on 13-01-2015 21:48:52
Running from C:\Users\Sabri\Desktop\PC-SCHUTZ
Loaded Profile: Sabri (Available profiles: Sabri)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
() C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe
(MSI) C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe
(Micro-Star International) C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
(MSI) C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Micro-Star International) C:\MSI\Smart Utilities\SuperRAIDSvc.exe
(AVG Technologies) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(AVG Technologies) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7570136 2014-04-14] (Realtek Semiconductor)
HKLM\...\Run: [MBCfg64] => C:\WINDOWS\system32\RunDLL32.exe C:\WINDOWS\system32\MBCfg64.dll,RunDLLEntry MBCfg64
HKLM\...\Run: [ISCT Tray] => C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe [5860656 2014-04-03] (Intel Corporation)
HKLM\...\Run: [Samsung Link] => C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe [607584 2014-12-16] (Copyright 2013 SAMSUNG)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-20] (IvoSoft)
HKLM-x32\...\Run: [Sound Blaster Cinema] => C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe [711680 2013-08-16] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] => C:\WINDOWS\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-09] (AVAST Software)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55568 2014-12-08] (Raptr, Inc)
HKLM-x32\...\Run: [Live Update] => C:\Program Files (x86)\MSI\Live Update\Live Update.exe [3484624 2014-11-27] (Micro-Star International)
HKLM-x32\...\Run: [Command Center] => C:\Program Files (x86)\MSI\Command Center\StartCommandCenter.exe [797648 2014-11-11] ()
HKLM-x32\...\Run: [Fast Boot] => C:\Program Files (x86)\MSI\Fast Boot\StartFastBoot.exe [764472 2012-09-19] ()
HKLM-x32\...\Run: [Super Charger] => C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe [1014736 2014-07-22] (MSI)
HKU\S-1-5-21-3822476009-2779597456-3556243849-1001\...\Run: [DAEMON Tools Pro Agent] => C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe [3761424 2014-11-10] (Disc Soft Ltd)
HKU\S-1-5-21-3822476009-2779597456-3556243849-1001\...\Policies\system: [DisableLockWorkstation] 0
HKU\S-1-5-21-3822476009-2779597456-3556243849-1001\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\S-1-5-21-3822476009-2779597456-3556243849-1001\...\MountPoints2: {68882223-83b2-11e4-826b-448a5ba4cf02} - "E:\setup.exe" 
AppInit_DLLs-x32: ￿Ȅ獒瑬 => "￿Ȅ獒瑬" File Not Found
IFEO\AcroRd32.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\adobe air application installer.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\appvlp.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\dtagent.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\dtimgeditor.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\dtpro.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\excel.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\gputweak.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\groove.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\infopath.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\isctmodernui.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\lync.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\msaccess.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\msoev.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\msotd.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\msouc.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\mspub.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\ocpubmgr.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\onenote.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\onenotem.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\origin.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\originer.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\outlook.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\powerpnt.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\samsung link menu start.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\setlang.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\winword.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-3822476009-2779597456-3556243849-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-3822476009-2779597456-3556243849-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-3822476009-2779597456-3556243849-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
HKU\S-1-5-21-3822476009-2779597456-3556243849-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3822476009-2779597456-3556243849-1001 -> {B68BE3AA-F549-498C-99A8-3F297020C2E9} URL = 
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll (IvoSoft)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Sabri\AppData\Roaming\Mozilla\Firefox\Profiles\0w5lwyf0.default
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_16_0_0_257.dll ()
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_257.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Sabri\AppData\Roaming\Mozilla\Firefox\Profiles\0w5lwyf0.default\searchplugins\google-images.xml
FF SearchPlugin: C:\Users\Sabri\AppData\Roaming\Mozilla\Firefox\Profiles\0w5lwyf0.default\searchplugins\google-maps.xml
FF Extension: Adblock Plus - C:\Users\Sabri\AppData\Roaming\Mozilla\Firefox\Profiles\0w5lwyf0.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-01-06]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-12-27]

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2014-12-27]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-27]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S4 AllShare Framework DMS; C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe [404360 2013-12-21] (Samsung) [File not signed]
S4 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-27] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [104416 2014-12-27] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-12-27] (Avast Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [448384 2014-12-04] ()
S4 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2449592 2014-11-12] (Microsoft Corporation)
S4 Disc Soft Bus Service; C:\Program Files (x86)\DAEMON Tools Pro\DiscSoftBusService.exe [2216208 2014-11-10] (Disc Soft Ltd)
S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [175136 2015-01-09] (EasyAntiCheat Ltd)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
S4 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [209712 2014-04-03] ()
S4 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-04-03] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
S3 MSIBIOSData_CC; C:\Program Files (x86)\MSI\Command Center\BIOSData\MSIBIOSDataService.exe [2099712 2014-10-21] (MSI) [File not signed]
S3 MSIClock_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\MSIClockService.exe [4026880 2014-09-26] (MSI) [File not signed]
S3 MSICOMM_CC; C:\Program Files (x86)\MSI\Command Center\MSICommService.exe [2117632 2014-11-05] () [File not signed]
S3 MSICPU_CC; C:\Program Files (x86)\MSI\Command Center\CPU\MSICPUService.exe [4157440 2014-09-26] () [File not signed]
R2 MSICTL_CC; C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe [1993216 2014-09-26] () [File not signed]
S3 MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\MSIDDRService.exe [2242048 2014-10-21] () [File not signed]
S3 MSISMB_CC; C:\Program Files (x86)\MSI\Command Center\SMBus\MSISMBService.exe [2063360 2014-07-28] () [File not signed]
S3 MSISuperIO_CC; C:\Program Files (x86)\MSI\Command Center\SuperIO\MSISuperIOService.exe [575488 2014-10-29] () [File not signed]
R2 MSI_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe [103992 2012-10-26] (MSI)
R2 MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [1732048 2014-11-27] (Micro-Star International)
R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [162800 2014-03-17] (MSI)
S4 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1900400 2014-12-06] (Electronic Arts)
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2014-12-06] ()
S4 Samsung Link Service; C:\Program Files\Samsung\Samsung Link\Samsung Link.exe [616288 2014-12-16] (Copyright 2013 SAMSUNG)
R2 SuperRAIDSvc; C:\MSI\Smart Utilities\SuperRAIDSvc.exe [29648 2014-08-13] (Micro-Star International)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2604856 2014-11-24] (AVG Technologies)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [762320 2014-11-04] (Tunngle.net GmbH)
R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [42808 2014-11-24] (AVG Technologies)
R2 UxTuneUp; C:\Windows\SysWOW64\uxtuneup.dll [35640 2014-11-24] (AVG Technologies)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [18384 2014-08-07] (Intel(R) Corporation)
S3 COMSysApp; %SystemRoot%\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 AcpiCtlDrv; C:\Windows\System32\drivers\AcpiCtlDrv.sys [25880 2012-07-17] (Intel Corporation)
S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-12-27] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2014-12-27] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-12-27] (AVAST Software)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [449936 2014-12-27] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-12-27] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-12-27] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-27] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-12-27] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-12-27] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-12-27] ()
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [222720 2014-03-11] (Advanced Micro Devices)
R3 dtscsibus; C:\Windows\system32\DRIVERS\dtscsibus.sys [29864 2014-12-14] (Disc Soft Ltd)
S3 GeneStor; C:\Windows\System32\drivers\GeneStor.sys [103656 2013-10-21] (GenesysLogic)
R3 ikbevent; C:\Windows\system32\DRIVERS\ikbevent.sys [22216 2014-02-03] ()
R3 imsevent; C:\Windows\system32\DRIVERS\imsevent.sys [22728 2014-02-03] ()
S3 INETMON; C:\WINDOWS\System32\Drivers\INETMON.sys [25800 2014-04-03] ()
R2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [28912 2014-06-17] (Intel Corporation)
R3 ISCT; C:\Windows\System32\drivers\ISCTD.sys [44744 2014-02-03] ()
R1 mbamchameleon; C:\WINDOWS\system32\drivers\mbamchameleon.sys [93400 2014-11-21] (Malwarebytes Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [129752 2015-01-13] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2014-11-21] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [118272 2014-04-03] (Intel Corporation)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3344352 2013-07-08] (Intel Corporation)
R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\Super Charger\NTIOLib_X64.sys [13368 2012-10-25] (MSI)
R3 NTIOLib_1_0_4; C:\Program Files (x86)\MSI\Live Update\NTIOLib_X64.sys [14136 2010-10-22] (MSI)
S3 NTIOLib_1_0_6; C:\Program Files (x86)\Setup Files\Ms7850v450\NTIOLib_X64.sys [13808 2014-04-16] (MSI)
R3 NTIOLib_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\NTIOLib_X64.sys [13368 2012-10-26] (MSI)
S3 NTIOLib_MSIClock_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\NTIOLib_X64.sys [13368 2012-11-20] (MSI)
S3 NTIOLib_MSICOMM_CC; C:\Program Files (x86)\MSI\Command Center\NTIOLib_X64.sys [13368 2012-11-19] (MSI)
S3 NTIOLib_MSICPU_CC; C:\Program Files (x86)\MSI\Command Center\CPU\NTIOLib_X64.sys [13368 2012-11-20] (MSI)
S3 NTIOLib_MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\NTIOLib_X64.sys [13368 2012-11-26] (MSI)
S3 NTIOLib_MSIRatio_CC; C:\Program Files (x86)\MSI\Command Center\CPU\CPU_Ratio\NTIOLib_X64.sys [13368 2012-11-20] (MSI)
S3 NTIOLib_MSISMB_CC; C:\Program Files (x86)\MSI\Command Center\SMBus\NTIOLib_X64.sys [13368 2012-11-19] (MSI)
S3 NTIOLib_MSISuperIO_CC; C:\Program Files (x86)\MSI\Command Center\SuperIO\NTIOLib_X64.sys [13368 2012-11-19] (MSI)
R3 NTIOLib_MSI_RAID; C:\MSI\Smart Utilities\NTIOLib_X64.sys [13808 2014-03-17] (MSI)
S3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [1936088 2013-07-31] (Realtek Semiconductor Corporation                           )
R3 tap0901t; C:\Windows\system32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [14112 2014-08-28] (TuneUp Software)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-12-27] (Avast Software)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
S3 ALSysIO; \??\C:\Users\Sabri\AppData\Local\Temp\ALSysIO64.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
S3 RwDrv; \??\C:\WINDOWS\system32\Drivers\RwDrv.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-13 21:45 - 2015-01-13 21:45 - 00000498 _____ () C:\Users\Sabri\Desktop\eset.txt
2015-01-13 21:32 - 2015-01-13 21:32 - 01660616 _____ (ESET) C:\Users\Sabri\Desktop\eset_smart_security_live_installer_.exe
2015-01-13 21:28 - 2015-01-13 21:28 - 00003681 _____ () C:\Users\Sabri\Desktop\eset keys.txt
2015-01-13 20:26 - 2015-01-13 20:26 - 02347384 _____ (ESET) C:\Users\Sabri\Downloads\esetsmartinstaller_deu(1).exe
2015-01-13 18:21 - 2015-01-13 18:21 - 00001190 _____ () C:\Users\Sabri\Desktop\checkup.txt
2015-01-13 18:15 - 2015-01-13 18:15 - 00852504 _____ () C:\Users\Sabri\Downloads\SecurityCheck.exe
2015-01-13 18:02 - 2015-01-13 18:02 - 02347384 _____ (ESET) C:\Users\Sabri\Downloads\esetsmartinstaller_deu.exe
2015-01-13 18:02 - 2015-01-13 18:02 - 00000000 ____D () C:\Program Files (x86)\ESET
2015-01-13 14:56 - 2015-01-13 14:56 - 00000000 ___HD () C:\SuperChargerProfile
2015-01-13 14:54 - 2015-01-13 21:21 - 00000294 _____ () C:\WINDOWS\Tasks\RtlNetworkGenieVistaStart.job
2015-01-13 14:54 - 2015-01-13 14:54 - 00002548 _____ () C:\WINDOWS\System32\Tasks\RtlNetworkGenieVistaStart
2015-01-13 14:54 - 2011-09-14 18:16 - 00032360 _____ (NT Kernel Resources) C:\WINDOWS\system32\Drivers\ndisrd.sys
2015-01-13 14:49 - 2015-01-13 14:49 - 00000000 ____D () C:\uninstall
2015-01-13 14:49 - 2015-01-13 14:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI Intel Extreme Tuning Utility
2015-01-13 14:49 - 2015-01-13 14:49 - 00000000 ____D () C:\Program Files\Microsoft Synchronization Services
2015-01-13 14:49 - 2015-01-13 14:49 - 00000000 ____D () C:\Program Files\Microsoft SQL Server Compact Edition
2015-01-13 14:49 - 2015-01-13 14:49 - 00000000 ____D () C:\Program Files (x86)\Setup Files
2015-01-13 14:49 - 2015-01-13 14:49 - 00000000 ____D () C:\Program Files (x86)\Microsoft Synchronization Services
2015-01-13 14:49 - 2015-01-13 14:49 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-01-13 14:44 - 2015-01-13 14:44 - 00000000 ___HD () C:\MSIServiceCfg_CC
2015-01-13 14:44 - 2015-01-13 14:44 - 00000000 ____D () C:\Intel
2015-01-13 14:44 - 2013-02-08 11:04 - 00000000 _____ () C:\RAMDiskImage.img
2015-01-13 14:33 - 2015-01-13 14:55 - 00000000 ____D () C:\MSI
2015-01-13 14:33 - 2015-01-13 14:33 - 00002062 _____ () C:\Users\Public\Desktop\MSI Live Update 6.lnk
2015-01-13 14:33 - 2014-04-30 16:23 - 00011248 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\acpimof.dll
2015-01-13 13:53 - 2015-01-13 13:53 - 00000000 ____D () C:\ProgramData\ATI
2015-01-13 13:49 - 2015-01-13 13:49 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\library_dir
2015-01-13 13:49 - 2015-01-13 13:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved
2015-01-13 13:48 - 2015-01-13 14:53 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\Raptr
2015-01-13 13:48 - 2015-01-13 13:49 - 00000000 ____D () C:\Program Files (x86)\Raptr
2015-01-13 13:48 - 2015-01-13 13:48 - 00053736 _____ () C:\WINDOWS\SysWOW64\CCCInstall_201501131348379278.log
2015-01-13 13:48 - 2015-01-13 13:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-01-13 13:48 - 2015-01-13 13:48 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2015-01-13 13:48 - 2015-01-13 13:48 - 00000000 ____D () C:\Program Files (x86)\AMD
2015-01-13 13:47 - 2015-01-13 13:47 - 00000000 ____D () C:\WINDOWS\LastGood.Tmp
2015-01-13 13:45 - 2015-01-13 13:45 - 00000398 _____ () C:\SetupCD.txt
2015-01-13 13:45 - 2015-01-13 13:45 - 00000000 ____D () C:\AMD
2015-01-13 13:43 - 2015-01-13 13:43 - 00000000 __SHD () C:\Users\Sabri\AppData\Local\EmieBrowserModeList
2015-01-13 13:32 - 2015-01-13 13:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell
2015-01-13 13:32 - 2015-01-13 13:32 - 00000000 ____D () C:\Program Files\Classic Shell
2015-01-13 13:26 - 2015-01-13 13:26 - 06791360 _____ (IvoSoft) C:\Users\Sabri\Downloads\ClassicShellSetup_4_1_0.exe
2015-01-13 11:56 - 2015-01-13 11:56 - 59797360 _____ (AVAST Software) C:\Users\Sabri\Downloads\vpsupd.exe
2015-01-13 11:41 - 2015-01-13 21:48 - 00000000 ____D () C:\FRST
2015-01-13 11:08 - 2015-01-13 11:08 - 00000000 ____D () C:\WINDOWS\ERUNT
2015-01-13 11:08 - 2014-11-11 01:39 - 22290560 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-01-13 11:08 - 2014-11-11 01:17 - 19731824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-01-13 11:08 - 2014-11-08 03:03 - 00733696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2015-01-13 11:08 - 2014-11-08 02:49 - 01154048 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2015-01-13 11:08 - 2014-10-31 01:51 - 18823168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-01-13 11:08 - 2014-10-31 01:10 - 15158784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-01-13 11:07 - 2014-11-17 21:17 - 00672984 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2015-01-13 11:07 - 2014-11-17 21:17 - 00273240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2015-01-13 11:07 - 2014-11-15 20:05 - 00801584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2015-01-13 11:07 - 2014-11-15 07:29 - 00962216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2015-01-13 11:07 - 2014-11-14 15:36 - 00055776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-01-13 11:07 - 2014-11-14 08:10 - 03558400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-01-13 11:07 - 2014-11-14 07:58 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsDatabase.dll
2015-01-13 11:07 - 2014-11-14 07:58 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-01-13 11:07 - 2014-11-14 07:57 - 01027584 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-01-13 11:07 - 2014-11-14 07:57 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-01-13 11:07 - 2014-11-14 07:54 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2015-01-13 11:07 - 2014-11-14 07:54 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-01-13 11:07 - 2014-11-14 07:54 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-01-13 11:07 - 2014-11-14 07:53 - 00894976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-01-13 11:07 - 2014-11-14 07:52 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-01-13 11:07 - 2014-11-14 07:46 - 02171904 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2015-01-13 11:07 - 2014-11-14 07:46 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2015-01-13 11:07 - 2014-11-14 07:39 - 02819584 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2015-01-13 11:07 - 2014-11-14 06:04 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-01-13 11:07 - 2014-11-14 06:03 - 00885760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-01-13 11:07 - 2014-11-14 06:03 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-01-13 11:07 - 2014-11-14 06:01 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-01-13 11:07 - 2014-11-14 06:01 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-01-13 11:07 - 2014-11-14 05:53 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2015-01-13 11:07 - 2014-11-10 19:06 - 02485056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2015-01-13 11:07 - 2014-11-10 19:06 - 00473408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2015-01-13 11:07 - 2014-11-10 19:06 - 00428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2015-01-13 11:07 - 2014-11-10 19:06 - 00136512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2015-01-13 11:07 - 2014-11-10 03:57 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys
2015-01-13 11:07 - 2014-11-10 02:37 - 00845312 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2015-01-13 11:07 - 2014-11-10 02:34 - 01084416 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2015-01-13 11:07 - 2014-11-10 02:26 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2015-01-13 11:07 - 2014-11-10 02:20 - 00420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2015-01-13 11:07 - 2014-11-10 02:09 - 00272384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2015-01-13 11:07 - 2014-11-10 02:08 - 00702464 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2015-01-13 11:07 - 2014-11-10 02:06 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2015-01-13 11:07 - 2014-11-10 01:57 - 00624640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2015-01-13 11:07 - 2014-11-10 01:57 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2015-01-13 11:07 - 2014-11-08 11:42 - 01390928 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2015-01-13 11:07 - 2014-11-08 11:23 - 01127976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2015-01-13 11:07 - 2014-11-08 05:00 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys
2015-01-13 11:07 - 2014-11-08 05:00 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndistapi.sys
2015-01-13 11:07 - 2014-11-08 04:58 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rasl2tp.sys
2015-01-13 11:07 - 2014-11-08 04:58 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys
2015-01-13 11:07 - 2014-11-08 04:56 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\kmddsp.tsp
2015-01-13 11:07 - 2014-11-08 04:56 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmxs.dll
2015-01-13 11:07 - 2014-11-08 04:56 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasser.dll
2015-01-13 11:07 - 2014-11-08 04:24 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdiag.dll
2015-01-13 11:07 - 2014-11-08 04:13 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kmddsp.tsp
2015-01-13 11:07 - 2014-11-08 04:13 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasmxs.dll
2015-01-13 11:07 - 2014-11-08 04:13 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasser.dll
2015-01-13 11:07 - 2014-11-08 03:48 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdiag.dll
2015-01-13 11:07 - 2014-11-08 03:38 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2015-01-13 11:07 - 2014-11-08 03:17 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2015-01-13 11:07 - 2014-11-08 03:09 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascfg.dll
2015-01-13 11:07 - 2014-11-08 02:59 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rascfg.dll
2015-01-13 11:07 - 2014-11-08 02:58 - 04837376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2015-01-13 11:07 - 2014-11-07 04:58 - 00952896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2015-01-13 11:07 - 2014-11-07 04:20 - 00786120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2015-01-13 11:07 - 2014-11-05 03:12 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\QSHVHOST.DLL
2015-01-13 11:07 - 2014-11-05 03:12 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\QSVRMGMT.DLL
2015-01-13 11:07 - 2014-11-05 03:06 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2015-01-13 11:07 - 2014-11-05 02:44 - 00657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2015-01-13 11:07 - 2014-11-05 02:43 - 00252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2015-01-13 11:07 - 2014-11-05 02:41 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2015-01-13 11:07 - 2014-11-05 02:39 - 00155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\QSHVHOST.DLL
2015-01-13 11:07 - 2014-11-05 02:39 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\QSVRMGMT.DLL
2015-01-13 11:07 - 2014-11-05 02:33 - 00465408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2015-01-13 11:07 - 2014-11-05 02:21 - 00658432 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDApi.dll
2015-01-13 11:07 - 2014-11-05 02:20 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2015-01-13 11:07 - 2014-11-05 02:18 - 00507392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2015-01-13 11:07 - 2014-11-05 02:14 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2015-01-13 11:07 - 2014-11-05 02:06 - 00555520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSDApi.dll
2015-01-13 11:07 - 2014-11-04 20:33 - 00058176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2015-01-13 11:07 - 2014-11-04 20:25 - 00059712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdclass.sys
2015-01-13 11:07 - 2014-11-04 20:25 - 00051008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouclass.sys
2015-01-13 11:07 - 2014-11-04 07:55 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sermouse.sys
2015-01-13 11:07 - 2014-11-04 07:54 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\i8042prt.sys
2015-01-13 11:07 - 2014-11-04 07:54 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys
2015-01-13 11:07 - 2014-11-04 07:54 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouhid.sys
2015-01-13 11:07 - 2014-11-04 07:27 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe
2015-01-13 11:07 - 2014-11-04 06:01 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2015-01-13 11:07 - 2014-10-30 06:55 - 07473472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-01-13 11:07 - 2014-10-30 06:47 - 01499384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-01-13 11:07 - 2014-10-30 06:41 - 01733952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-01-13 11:07 - 2014-10-29 04:05 - 00551232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2015-01-13 11:07 - 2014-10-29 03:02 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2015-01-13 11:07 - 2014-10-29 03:02 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2015-01-13 11:07 - 2014-10-29 02:57 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm64.dll
2015-01-13 11:07 - 2014-10-29 02:55 - 00242176 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
2015-01-13 11:07 - 2014-10-29 02:15 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll
2015-01-13 11:07 - 2014-10-29 02:15 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wow32.dll
2015-01-13 11:07 - 2014-10-29 02:14 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe
2015-01-13 11:07 - 2014-10-29 02:13 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
2015-01-13 11:07 - 2014-10-29 02:13 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe
2015-01-13 11:07 - 2014-10-29 02:13 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\instnm.exe
2015-01-13 11:07 - 2014-10-26 23:10 - 00390841 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2015-01-13 11:07 - 2014-10-21 02:59 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\eventcls.dll
2015-01-13 11:07 - 2014-10-21 02:19 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eventcls.dll
2015-01-13 11:07 - 2014-10-21 01:50 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\vsstrace.dll
2015-01-13 11:07 - 2014-10-21 01:31 - 01574400 _____ (Microsoft Corporation) C:\WINDOWS\system32\vssapi.dll
2015-01-13 11:07 - 2014-10-21 01:31 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vsstrace.dll
2015-01-13 11:07 - 2014-10-21 01:30 - 01454080 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2015-01-13 11:07 - 2014-10-21 01:20 - 01142272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vssapi.dll
2015-01-13 11:07 - 2014-10-17 05:56 - 00238912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2015-01-13 11:07 - 2014-10-17 05:56 - 00153920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2015-01-13 11:07 - 2014-10-17 05:56 - 00039744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2015-01-13 11:07 - 2014-10-17 04:35 - 00086336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2015-01-13 11:00 - 2015-01-13 11:03 - 00000000 ____D () C:\Program Files (x86)\SpywareBlaster
2015-01-13 11:00 - 2015-01-13 11:00 - 04095448 _____ (BrightFort LLC ) C:\Users\Sabri\Downloads\spywareblastersetup50.exe
2015-01-13 11:00 - 2015-01-13 11:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpywareBlaster
2015-01-13 11:00 - 2015-01-13 11:00 - 00000000 ____D () C:\ProgramData\Licenses
2015-01-13 11:00 - 2011-11-04 05:13 - 01070352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCOMCTL.OCX
2015-01-13 11:00 - 2009-03-24 12:52 - 00129872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSSTDFMT.DLL
2015-01-13 10:49 - 2015-01-13 21:48 - 00000000 ____D () C:\Users\Sabri\Desktop\PC-SCHUTZ
2015-01-12 19:48 - 2015-01-12 19:48 - 00017475 _____ () C:\WINDOWS\DirectX.log
2015-01-12 19:46 - 2015-01-12 19:47 - 00000000 ___HD () C:\ArcTemp
2015-01-12 19:45 - 2015-01-12 19:45 - 00003182 _____ () C:\WINDOWS\System32\Tasks\{C45421BB-DF42-408D-9F00-EA4FDB9E7020}
2015-01-12 19:44 - 2015-01-12 19:44 - 00000000 ____D () C:\Users\Public\Documents\Arc
2015-01-12 17:50 - 2015-01-13 13:47 - 00000721 _____ () C:\WINDOWS\setupact.log
2015-01-12 14:19 - 2015-01-12 14:20 - 00000000 ____D () C:\Program Files (x86)\Tunngle
2015-01-12 14:19 - 2015-01-12 14:19 - 10306616 _____ (Perfect World Entertainment) C:\Users\Sabri\Downloads\ArcInstall_NW_20141223.exe
2015-01-12 14:19 - 2015-01-12 14:19 - 00001018 _____ () C:\Users\Public\Desktop\Tunngle.lnk
2015-01-12 14:19 - 2015-01-12 14:19 - 00000000 ____D () C:\Users\Sabri\Documents\Tunngle
2015-01-12 14:19 - 2015-01-12 14:19 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\Tunngle
2015-01-12 14:19 - 2015-01-12 14:19 - 00000000 ____D () C:\Users\Public\Documents\Tunngle
2015-01-12 14:19 - 2015-01-12 14:19 - 00000000 ____D () C:\ProgramData\Tunngle
2015-01-12 14:19 - 2015-01-12 14:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tunngle
2015-01-12 14:19 - 2009-09-16 07:02 - 00031232 _____ (Tunngle.net) C:\WINDOWS\system32\Drivers\tap0901t.sys
2015-01-12 14:15 - 2015-01-12 14:15 - 04501720 _____ (Tunngle.net GmbH ) C:\Users\Sabri\Downloads\Tunngle_Setup_v5.0.exe
2015-01-11 16:04 - 2015-01-11 16:04 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\Steam
2015-01-11 15:59 - 2015-01-11 15:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Evil Within
2015-01-11 15:35 - 2015-01-11 15:59 - 00000000 ____D () C:\Program Files (x86)\The Evil Within
2015-01-11 13:48 - 2015-01-11 14:28 - 00000000 ____D () C:\Users\Sabri\Downloads\The Evil Within
2015-01-11 13:46 - 2015-01-12 14:32 - 00000000 ____D () C:\Users\Sabri\Desktop\Spiele
2015-01-11 13:27 - 2015-01-11 13:27 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FreeArc
2015-01-11 13:27 - 2015-01-11 13:27 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\FreeArc
2015-01-11 13:27 - 2015-01-11 13:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeArc
2015-01-11 13:27 - 2015-01-11 13:27 - 00000000 ____D () C:\Program Files (x86)\FreeArc
2015-01-11 13:02 - 2015-01-11 13:02 - 00000000 _____ () C:\WINDOWS\setuperr.log
2015-01-10 23:15 - 2015-01-10 23:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ryse Son of Rome
2015-01-10 23:04 - 2015-01-10 23:25 - 00000000 ____D () C:\Program Files (x86)\Ryse Son of Rome
2015-01-10 08:32 - 2015-01-10 08:32 - 00002762 _____ () C:\WINDOWS\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2015-01-09 22:03 - 2015-01-09 22:03 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\Fatshark
2015-01-09 22:00 - 2015-01-09 21:36 - 00175136 _____ (EasyAntiCheat Ltd) C:\WINDOWS\SysWOW64\EasyAntiCheat.exe
2015-01-09 20:02 - 2015-01-10 20:10 - 00000000 ____D () C:\Users\Sabri\Downloads\Ryse_ Son of Rome
2015-01-07 19:17 - 2015-01-07 19:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Styx Master of Shadows
2015-01-07 19:11 - 2015-01-07 19:17 - 00000000 ____D () C:\Program Files (x86)\Styx Master of Shadows
2015-01-07 19:10 - 2015-01-07 19:10 - 00000000 ____D () C:\Users\Public\Documents\DAEMON Tools Images
2015-01-06 12:11 - 2015-01-06 12:12 - 00000197 _____ () C:\WINDOWS\system32\2015-01-06-11-11-36.057-AvastVBoxSVC.exe-3268.log
2015-01-06 12:10 - 2015-01-13 17:21 - 00003562 _____ () C:\WINDOWS\PFRO.log
2015-01-06 12:03 - 2015-01-06 12:16 - 00003706 _____ () C:\WINDOWS\System32\Tasks\Java Platform SE Auto Updater
2015-01-06 11:59 - 2014-11-24 12:48 - 00042808 _____ (AVG Technologies) C:\WINDOWS\system32\uxtuneup.dll
2015-01-06 11:59 - 2014-11-24 12:48 - 00035640 _____ (AVG Technologies) C:\WINDOWS\SysWOW64\uxtuneup.dll
2015-01-06 11:53 - 2015-01-06 11:53 - 00002244 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2015.lnk
2015-01-06 11:53 - 2015-01-06 11:53 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\AVG
2015-01-06 11:53 - 2015-01-06 11:53 - 00000000 ____D () C:\Users\Sabri\AppData\Local\Avg
2015-01-06 11:53 - 2015-01-06 11:53 - 00000000 ____D () C:\Program Files (x86)\AVG
2015-01-06 11:53 - 2014-11-24 12:48 - 00040248 _____ (AVG Technologies) C:\WINDOWS\system32\TURegOpt.exe
2015-01-06 11:53 - 2014-11-24 12:48 - 00029496 _____ (AVG Technologies) C:\WINDOWS\system32\authuitu.dll
2015-01-06 11:53 - 2014-11-24 12:48 - 00025400 _____ (AVG Technologies) C:\WINDOWS\SysWOW64\authuitu.dll
2015-01-06 11:52 - 2015-01-13 21:41 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\ClassicShell
2015-01-06 11:52 - 2015-01-06 11:53 - 00000000 ____D () C:\ProgramData\AVG
2015-01-06 11:52 - 2015-01-06 11:52 - 00000000 ____D () C:\ProgramData\ClassicShell
2015-01-05 17:27 - 2015-01-13 14:51 - 01717475 _____ () C:\WINDOWS\WindowsUpdate.log
2015-01-05 16:37 - 2015-01-05 16:37 - 00003886 _____ () C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2015-01-05 14:50 - 2015-01-13 21:38 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-01-05 14:49 - 2015-01-05 14:49 - 00001129 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-01-05 14:49 - 2015-01-05 14:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-01-05 14:49 - 2015-01-05 14:49 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-01-05 14:49 - 2015-01-05 14:49 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-01-05 14:49 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-01-05 14:49 - 2014-11-21 06:14 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-01-05 14:49 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-01-05 14:16 - 2015-01-05 14:16 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-01-04 20:20 - 2014-12-03 21:08 - 00000000 ____D () C:\Users\Sabri\Downloads\Styx Master of Shadows 1.02
2014-12-27 11:06 - 2014-12-27 11:06 - 00000247 _____ () C:\WINDOWS\system32\2014-12-27-10-06-16.041-aswFe.exe-1796.log
2014-12-27 11:03 - 2014-12-27 11:06 - 00000247 _____ () C:\WINDOWS\system32\2014-12-27-10-03-13.088-aswFe.exe-1672.log
2014-12-27 11:03 - 2014-12-27 11:03 - 00000197 _____ () C:\WINDOWS\system32\2014-12-27-10-03-12.097-AvastVBoxSVC.exe-5736.log
2014-12-27 10:57 - 2015-01-13 20:57 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2014-12-27 10:57 - 2014-12-27 10:57 - 01050432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys
2014-12-27 10:57 - 2014-12-27 10:57 - 00001997 _____ () C:\Users\Public\Desktop\Avast Internet Security.lnk
2014-12-27 10:57 - 2014-12-27 10:57 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\AVAST Software
2014-12-27 10:57 - 2014-12-27 10:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2014-12-27 10:57 - 2014-12-27 10:56 - 00436624 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-12-27 10:57 - 2014-12-27 10:56 - 00364512 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-12-27 10:57 - 2014-12-27 10:56 - 00267632 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-12-27 10:57 - 2014-12-27 10:56 - 00116728 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2014-12-27 10:57 - 2014-12-27 10:56 - 00093568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2014-12-27 10:57 - 2014-12-27 10:56 - 00083280 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-12-27 10:57 - 2014-12-27 10:56 - 00065776 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-12-27 10:57 - 2014-12-27 10:56 - 00029208 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2014-12-27 10:57 - 2014-12-27 10:56 - 00028184 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2014-12-27 10:56 - 2014-12-27 10:56 - 00449936 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNdisFlt.sys
2014-12-27 10:56 - 2014-12-27 10:56 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-12-27 10:56 - 2014-12-27 10:56 - 00000000 ____D () C:\Program Files\AVAST Software
2014-12-27 10:54 - 2014-12-27 10:56 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-12-25 15:30 - 2014-12-25 15:30 - 00000773 _____ () C:\WINDOWS\removeep.cmd
2014-12-25 15:28 - 2014-12-25 15:28 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\reaper
2014-12-21 01:08 - 2014-12-21 01:08 - 00000000 ____D () C:\Program Files (x86)\Lenovo
2014-12-19 22:30 - 2015-01-06 12:03 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\Skype
2014-12-19 22:30 - 2014-12-19 22:30 - 00000000 ____D () C:\Users\Sabri\AppData\Local\Skype
2014-12-19 20:07 - 2014-10-30 23:37 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2014-12-19 20:07 - 2014-10-30 23:34 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2014-12-19 14:39 - 2015-01-06 11:37 - 00000000 ____D () C:\ProgramData\Skype
2014-12-18 18:49 - 2014-12-18 18:49 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\Nitro
2014-12-18 18:42 - 2014-12-23 15:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-12-18 18:42 - 2014-12-23 15:08 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-12-16 17:41 - 2015-01-13 17:20 - 00000000 ____D () C:\AdwCleaner
2014-12-16 15:22 - 2014-12-16 15:23 - 00000000 ____D () C:\Users\Sabri\AppData\Local\SmartView2
2014-12-16 15:22 - 2014-12-16 15:22 - 00000000 ____D () C:\Program Files (x86)\SmartView2
2014-12-16 15:17 - 2014-12-16 15:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2014-12-16 15:17 - 2014-12-16 15:17 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack
2014-12-16 14:48 - 2014-12-27 10:48 - 00000000 ____D () C:\Users\Sabri\Documents\Sabri
2014-12-16 01:33 - 2014-12-26 19:08 - 00000000 ____D () C:\Users\Sabri\Desktop\FM cata
2014-12-16 01:33 - 2014-12-16 01:33 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\Nitro PDF
2014-12-15 19:34 - 2014-12-15 19:36 - 00001887 _____ () C:\Users\Sabri\Desktop\Samsung Link sabri_9@web.de.lnk
2014-12-15 19:34 - 2014-12-15 19:34 - 00000000 ____D () C:\Users\Sabri\Samsung Link
2014-12-15 19:34 - 2014-12-15 19:34 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\SAMSUNG
2014-12-14 23:32 - 2014-12-14 23:32 - 00000000 ____D () C:\Users\Sabri\Documents\Spiele
2014-12-14 23:18 - 2014-12-14 23:18 - 00000000 ____D () C:\Users\Sabri\AppData\Local\Risen3
2014-12-14 23:04 - 2014-12-14 23:15 - 00000000 ____D () C:\Program Files (x86)\Risen 3 - Titan Lords
2014-12-14 19:25 - 2014-12-18 23:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2014-12-14 19:06 - 2015-01-06 17:44 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\DAEMON Tools Pro
2014-12-14 19:06 - 2014-12-14 19:07 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Pro
2014-12-14 19:06 - 2014-12-14 19:06 - 00029864 _____ (Disc Soft Ltd) C:\WINDOWS\system32\Drivers\dtscsibus.sys
2014-12-14 19:06 - 2014-12-14 19:06 - 00001959 _____ () C:\Users\Public\Desktop\DAEMON Tools Pro.lnk
2014-12-14 19:06 - 2014-12-14 19:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Pro
2014-12-14 19:06 - 2014-12-14 19:06 - 00000000 ____D () C:\ProgramData\DAEMON Tools Pro
2014-12-14 18:32 - 2014-12-14 18:32 - 00000000 ____D () C:\Users\Sabri\AppData\Local\Skyrim
2014-12-14 18:32 - 2014-12-14 18:32 - 00000000 ____D () C:\ProgramData\Steam
2014-12-14 18:01 - 2014-12-14 18:01 - 00000000 ____D () C:\Users\Sabri\AppData\Local\Disc_Soft_Ltd
2014-12-14 18:00 - 2014-12-14 18:01 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\DAEMON Tools Ultra
2014-12-14 18:00 - 2014-12-14 18:00 - 00000000 ____D () C:\ProgramData\DAEMON Tools Ultra
2014-12-14 17:59 - 2014-12-14 17:59 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\WinRAR
2014-12-14 17:59 - 2014-12-14 17:59 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-12-14 17:59 - 2014-12-14 17:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-12-14 17:59 - 2014-12-14 17:59 - 00000000 ____D () C:\Program Files\WinRAR
2014-12-14 17:43 - 2014-12-14 17:47 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2014-12-14 17:27 - 2014-12-14 19:25 - 00000000 ____D () C:\Program Files\Samsung
2014-12-14 17:27 - 2014-12-14 17:27 - 00000000 ____D () C:\Users\Sabri\AppData\Local\SAMSUNG
2014-12-14 17:27 - 2014-12-14 17:27 - 00000000 ____D () C:\Users\Sabri\.swt
2014-12-14 17:27 - 2014-12-14 17:27 - 00000000 ____D () C:\Upload
2014-12-14 17:27 - 2014-12-14 17:27 - 00000000 ____D () C:\ProgramData\SAMSUNG
2014-12-14 16:49 - 2015-01-09 12:08 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\vlc
2014-12-14 16:01 - 2014-12-14 16:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-12-14 16:01 - 2014-12-14 16:01 - 00000000 ____D () C:\Program Files\VideoLAN
2014-12-14 15:29 - 2014-12-14 15:29 - 00002135 _____ () C:\Users\Sabri\Desktop\JDownloader 2.lnk
2014-12-14 15:29 - 2014-12-14 15:29 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader
2014-12-14 15:28 - 2015-01-11 15:33 - 00000000 ____D () C:\Users\Sabri\AppData\Local\JDownloader 2.0
2014-12-14 15:21 - 2014-12-14 15:21 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2014-12-14 15:21 - 2014-12-14 15:21 - 00000000 ____D () C:\ProgramData\Sun
2014-12-14 15:21 - 2014-12-14 15:21 - 00000000 ____D () C:\ProgramData\Oracle
2014-12-14 15:21 - 2014-12-14 15:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-12-14 15:21 - 2014-12-14 15:21 - 00000000 ____D () C:\Program Files (x86)\Java

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-13 21:26 - 2014-12-09 20:42 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-01-13 20:27 - 2014-12-09 20:42 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-01-13 20:23 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-01-13 18:18 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-01-13 16:08 - 2014-12-04 22:04 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-01-13 15:23 - 2014-12-05 02:16 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3822476009-2779597456-3556243849-1001
2015-01-13 14:57 - 2014-07-19 01:37 - 00765378 _____ () C:\WINDOWS\system32\perfh007.dat
2015-01-13 14:57 - 2014-07-19 01:37 - 00159696 _____ () C:\WINDOWS\system32\perfc007.dat
2015-01-13 14:57 - 2013-08-31 16:40 - 01780340 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-01-13 14:56 - 2014-12-09 05:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI
2015-01-13 14:56 - 2014-12-09 05:47 - 00000000 ____D () C:\Program Files (x86)\MSI
2015-01-13 14:54 - 2014-07-18 15:47 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-01-13 14:54 - 2014-07-18 15:47 - 00000000 ____D () C:\ProgramData\Intel
2015-01-13 14:49 - 2014-07-18 15:48 - 00000000 ____D () C:\Program Files (x86)\Intel
2015-01-13 14:49 - 2014-07-18 15:46 - 00000000 ____D () C:\ProgramData\Package Cache
2015-01-13 14:48 - 2014-07-18 15:47 - 00000000 ____D () C:\Program Files\Intel
2015-01-13 13:50 - 2014-12-05 00:35 - 00000000 ____D () C:\Users\Sabri\AppData\Local\Sniper3
2015-01-13 13:50 - 2014-12-04 23:08 - 00000000 ____D () C:\Users\Sabri\Documents\DayZ
2015-01-13 13:48 - 2014-12-08 23:28 - 00000000 ____D () C:\Program Files\ATI Technologies
2015-01-13 13:48 - 2014-07-18 15:47 - 00000000 ____D () C:\ProgramData\AMD
2015-01-13 13:47 - 2014-07-18 15:46 - 00000000 ____D () C:\Program Files\AMD
2015-01-13 13:46 - 2014-07-18 15:46 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2015-01-13 12:21 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2015-01-13 12:20 - 2014-07-18 16:05 - 00000000 ____D () C:\Program Files (x86)\Amazon
2015-01-13 12:20 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2015-01-13 12:20 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2015-01-13 12:20 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\setup
2015-01-13 12:20 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\setup
2015-01-13 11:28 - 2013-08-22 16:20 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-01-13 11:15 - 2013-08-22 15:44 - 00492384 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-01-13 11:03 - 2014-07-18 16:05 - 00000000 ____D () C:\ProgramData\Temp
2015-01-13 10:37 - 2014-12-05 02:10 - 00000000 ____D () C:\Users\Sabri\AppData\Local\VirtualStore
2015-01-12 14:04 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-01-11 20:47 - 2014-12-06 18:17 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\TS3Client
2015-01-07 19:40 - 2014-12-09 23:40 - 00000000 ____D () C:\Users\Sabri\Documents\My Games
2015-01-06 12:15 - 2014-12-09 05:50 - 00009730 _____ () C:\WINDOWS\SysWOW64\Gms.log
2015-01-06 11:46 - 2014-12-05 02:10 - 00000000 ____D () C:\Users\Sabri\AppData\Local\Pokki
2015-01-06 11:40 - 2014-12-05 02:10 - 00000000 ____D () C:\Users\Sabri\AppData\Local\Packages
2015-01-05 14:25 - 2014-07-18 16:09 - 00000000 ____D () C:\ProgramData\Adobe
2015-01-05 14:17 - 2014-12-05 02:10 - 00000000 ____D () C:\Users\Sabri\AppData\Roaming\Adobe
2015-01-05 14:17 - 2014-12-04 20:21 - 00000000 ____D () C:\Users\Sabri\AppData\Local\Adobe
2015-01-05 14:16 - 2014-07-18 16:09 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-01-05 14:16 - 2014-07-18 16:04 - 00000000 ____D () C:\ProgramData\McAfee
2014-12-29 18:22 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-12-25 15:30 - 2014-12-05 02:11 - 00000000 ____D () C:\Users\Sabri\AppData\Local\Lenovo
2014-12-25 15:30 - 2014-07-18 16:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-12-21 01:08 - 2014-07-18 16:09 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Lenovo
2014-12-21 01:08 - 2014-07-18 16:09 - 00000000 ____D () C:\WINDOWS\Downloaded Installations
2014-12-18 23:43 - 2014-12-05 02:10 - 00000000 ____D () C:\Users\Sabri
2014-12-14 19:42 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache

Some content of TEMP:
====================
C:\Users\Sabri\AppData\Local\Temp\amd-catalyst-omega-14.12-without-dotnet45-win8.1-64bit.exe
C:\Users\Sabri\AppData\Local\Temp\AutoDetectUtilApp.exe
C:\Users\Sabri\AppData\Local\Temp\Command Center.exe
C:\Users\Sabri\AppData\Local\Temp\devcon64.exe
C:\Users\Sabri\AppData\Local\Temp\proxy_vole5857646728128945627.dll
C:\Users\Sabri\AppData\Local\Temp\Quarantine.exe
C:\Users\Sabri\AppData\Local\Temp\raptrpatch.exe
C:\Users\Sabri\AppData\Local\Temp\raptr_stub.exe
C:\Users\Sabri\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-12 14:03

==================== End Of Log ============================
         

--- --- ---



Mich wundert es nur das Esets Online Scanner was findet und mein Avast nicht. wobei ich denke das 2 sachen vom Chip-Installer kommen und die anderen 2 ein No-CD-Crack ist. Werde wohl auf Eset umsteigen
und nun?
habe alle 4 gelöscht

Lass die Finger von TuneUp, falls Dir was an deinem Rechner liegt


Fertig

Die Reihenfolge ist hier entscheidend.

1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
   • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
   • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
   • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
3. Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
   • Schließe alle offenen Programme.
   • Starte die delfix.exe mit einem Doppelklick.
   • Setze vor jede Funktion ein Häkchen.
   • Klicke auf Start.
   • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
   • Starte deinen Rechner abschließend neu.
4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

• Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
• Windows Updates
  • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
  • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
• Gehe sicher das die automatischen Updates aktiviert sind.
• Software Updates
  Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
  Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

• Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

• MalwareBytes Anti Malware
  Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
  Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
  Ein Tutorial zur Verwendung findest Du hier.
• WinPatrol
  Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

• SpywareBlaster
  Eine kurze Einführung findest du Hier
• MVPs hosts file
  Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
• WOT (Web of trust)
  Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

• Opera
• Mozilla Firefox.
  • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
  • NoScript
    Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    
  • AdblockPlus
    Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
    Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts

• Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
• verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
• Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
• Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Vielen Dank

Mein PC funktioniert wieder einwandfrei

Hast mir sehr geholfen Lob kommt aufjedenfall
Von meiner Sicht alles erledigt

MfG

Gern Geschehen