C Platte wird immer voller, auch wenn ich was lösche! (Trojaner,Virus????)

MrTrololol · 05.05.2015, 13:33

Hallo, ich hoffe mal das ist das passende Unterforum, ich hab schon seit längerer Zeit ein Problem und zwar das meine C Platte nicht mehr aufhört voller zu werden! Egal was ich da lösche! Und so langsam weiß ich auch nicht mehr was ich löschen soll, denn das meiste sieht mir sehr nach Windows Zeug aus. Dazu stürzen auch immer Spiele ab (Z.b. Minecraft) und ich weiß nicht warum. Meine Familie sagt das liegt an der C Platte.

Es wäre nicht mein erster Trojaner, denn ich hatte schon Coinminer doch der ist nach einer Zeit verschwunden nachdem ich ihn dauerhaft im Taskmanager ect. blockiert habe.

Habt ihr eine Ahnung was das sein kann? Und bitte kommt mir nicht mit so komischen Fachbegriffen, ich bin est 13 und hab wenig Ahnung davon

schrauber · 05.05.2015, 14:12

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

MrTrololol · 06.05.2015, 14:13

FRST: hxxp://uploadir.com/u/2hi7r1oz
Addition: hxxp://uploadir.com/u/99ww42zf

(xx durch tt ersetzen)

schrauber · 07.05.2015, 07:08

Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.
Ich kann auf Arbeit keine Anhänge öffnen, danke.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

MrTrololol · 07.05.2015, 14:22

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-05-2015
Ran by User (administrator) on USER-PC on 06-05-2015 15:08:07
Running from D:\Desktop
Loaded Profiles: User (Available profiles: User & Gast)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(The Within Network, LLC) C:\Windows\UnsignedThemesSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
() D:\DiskBoss\bin\diskbsa.exe
(Microsoft Corporation) C:\Program Files\Microsoft SDKs\Kinect\v1.0 Beta2\Service\KinectManagementService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(LogMeIn Inc.) D:\hamachi-2.exe
(LogMeIn, Inc.) D:\LMIGuardianSvc.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() D:\RocketDock\RocketDock.exe
(Valve Corporation) F:\Steam\Steam.exe
(Valve Corporation) F:\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) F:\Steam\bin\steamwebhelper.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11776104 2011-02-11] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-11-05] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2691480 2014-03-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227648 2015-03-15] (AVAST Software)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => D:\hamachi-2-ui.exe [3978600 2015-03-30] (LogMeIn Inc.)
HKU\S-1-5-21-1306849734-3710355425-1743561091-1000\...\Run: [Optimizer Pro] => C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe
HKU\S-1-5-21-1306849734-3710355425-1743561091-1000\...\Run: [ccleaner] => C:\Program Files\CCleaner\CCleaner64.exe [5655832 2013-02-19] (Piriform Ltd)
HKU\S-1-5-21-1306849734-3710355425-1743561091-1000\...\MountPoints2: {26949fe5-a70b-11e3-856d-1c6f65c57380} - H:\setup.exe
HKU\S-1-5-21-1306849734-3710355425-1743561091-1000\...\MountPoints2: {58c4c8c8-b700-11e1-8319-806e6f6e6963} - E:\Setup.exe
HKU\S-1-5-21-1306849734-3710355425-1743561091-1000\...\MountPoints2: {9aefbe48-7ecd-11e4-a5df-806e6f6e6963} - E:\Autorun.exe
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll File Not Found
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2013-06-05]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll [2014-03-20] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll [2014-03-20] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll [2014-03-20] ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2014-12-08] (AVAST Software)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.delta-homes.com/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=hp&from=wpm0226&uid=WDCXWD5000AAKX-003CA0_WD-WMAYUL23437434374&ts=1393417979
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.delta-homes.com/web/?type=ds&ts=1388677181&from=wpm0102&uid=WDCXWD5000AAKX-003CA0_WD-WMAYUL23437434374&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.delta-homes.com/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=hp&from=wpm0226&uid=WDCXWD5000AAKX-003CA0_WD-WMAYUL23437434374&ts=1393417979
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.delta-homes.com/web/?type=ds&ts=1388677181&from=wpm0102&uid=WDCXWD5000AAKX-003CA0_WD-WMAYUL23437434374&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-1306849734-3710355425-1743561091-1000\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-1306849734-3710355425-1743561091-1000\Software\Microsoft\Internet Explorer\Main,BrowserMngr Start Page = hxxp://search.babylon.com/?affID=114435&tt=040912_ccp_3612_7&babsrc=HP_ss&mntrId=146fdb5a000000000000f8d1110f3288
HKU\S-1-5-21-1306849734-3710355425-1743561091-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
HKU\S-1-5-21-1306849734-3710355425-1743561091-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
URLSearchHook: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000 - (No Name) - {00000000-6E41-4FD3-8538-502F5495E5FC} - No File
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.delta-homes.com/web/?type=ds&ts=1388677181&from=wpm0102&uid=WDCXWD5000AAKX-003CA0_WD-WMAYUL23437434374&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.delta-homes.com/web/?type=ds&ts=1388677181&from=wpm0102&uid=WDCXWD5000AAKX-003CA0_WD-WMAYUL23437434374&q={searchTerms}
SearchScopes: HKLM -> {B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B} URL = hxxp://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=stonicrio&chnl=stonicrio&cd=2XzuyEtN2Y1L1Qzu0F0E0DtCtCtCtD0FtAtBzzzz0D0ByD0AtN0D0Tzu0CtBzyzytN1L2XzutBtFtBtFtDtFtAyEyE&cr=558138381
SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKLM-x32 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=9905d4fc-145d-43a1-9a92-631e7c905f6c&searchtype=ds&q={searchTerms}&installDate=11/05/2013
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.chatzum.com/?q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.delta-homes.com/web/?type=ds&ts=1388677181&from=wpm0102&uid=WDCXWD5000AAKX-003CA0_WD-WMAYUL23437434374&q={searchTerms}
SearchScopes: HKLM-x32 -> {B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B} URL = hxxp://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=stonicrio&chnl=stonicrio&cd=2XzuyEtN2Y1L1Qzu0F0E0DtCtCtCtD0FtAtBzzzz0D0ByD0AtN0D0Tzu0CtBzyzytN1L2XzutBtFtBtFtDtFtAyEyE&cr=558138381
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = 
SearchScopes: HKU\.DEFAULT -> {3BDD00DF-3A9B-42F1-B08D-10E6A5848B5E} URL = 
SearchScopes: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000 -> BrowserMngrDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=DE&userid=9905d4fc-145d-43a1-9a92-631e7c905f6c&searchtype=ds&q={searchTerms}&installDate=11/05/2013
SearchScopes: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000 -> {00EEBA74-6C89-459C-8521-8862ADD26F3C} URL = hxxp://search.chatzum.com/?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3314958&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SPAFEA9D17-7355-40B5-AFB6-BB32CF4148FD&q={searchTerms}&SSPV=
SearchScopes: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.golsearch.com/?q={searchTerms}&babsrc=SP_ss_Btisdt6&mntrId=146FFED1110F3288&affID=119357&tsp=4991
SearchScopes: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000 -> {13D79C44-92CC-4CAA-91F0-DA25B2904008} URL = hxxp://www.mysearchresults.com/search?&c=3500&t=07&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000 -> {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=NCE&o=&src=crm&q={searchTerms}&locale=&apn_ptnrs=&apn_dtid=&apn_uid=B6E67E14-2F6D-49AD-9EA2-00A2CEA164D9&apn_sauid=49A8737A-50C9-482B-BCC6-98696B7DE0D1
SearchScopes: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000 -> {2643C3B0-E0B1-4572-807F-59E63509FBFF} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYDE&apn_uid=A97E7CE8-7D92-4880-A103-EB6F71F5BCDF&apn_sauid=2BD4D2EE-A052-4892-AEA5-5266F427EE1F
SearchScopes: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=ds&from=wpm0226&uid=WDCXWD5000AAKX-003CA0_WD-WMAYUL23437434374&ts=1393417979&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000 -> {3BDD00DF-3A9B-42F1-B08D-10E6A5848B5E} URL = hxxp://www.claro-search.com/?q={searchTerms}&affID=114506&tt=0113_7&babsrc=SP_clro&mntrId=146fdb5a000000000000f8d1110f3288
SearchScopes: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000 -> {511901A0-F060-468D-A66B-A3B394D2CC58} URL = hxxp://searchou.com/?q={searchTerms}&id=146fdb5a000000000000fed1110f3288&affilt=5&r=62
SearchScopes: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000 -> {71B200D7-E862-42D7-AFAC-14F2CA9496B9} URL = hxxp://search.softonic.com/INF00040/tb_v1?q={searchTerms}&SearchSource=4&cc=&r=421
SearchScopes: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000 -> {94231F5B-8FAA-4336-8EA2-81CCAAFB04F9} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2801948
SearchScopes: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://search.fbdownloader.com/search.php?channel=de&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000 -> {96bd48dd-741b-41ae-ac4a-aff96ba00f7e} URL = hxxp://search.chatzum.com/?q={SearchTerms}
SearchScopes: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000 -> {B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B} URL = hxxp://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=stonicrio&chnl=stonicrio&cd=2XzuyEtN2Y1L1Qzu0F0E0DtCtCtCtD0FtAtBzzzz0D0ByD0AtN0D0Tzu0CtBzyzytN1L2XzutBtFtBtFtDtFtAyEyE&cr=558138381
SearchScopes: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000 -> {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://mystart.incredibar.com/mb165/?search={searchTerms}&loc=IB_DS&a=6PQIrXsmc3&i=26
SearchScopes: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2013-08-10] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-12-08] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: No Name -> {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} ->  No File
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-08-10] (Oracle Corporation)
BHO: No Name -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} ->  No File
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
BHO-x32: No Name -> {553318DA-D010-469E-84B1-496563CAE1BF} ->  No File
BHO-x32: No Name -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} ->  No File
BHO-x32: ividi Helper Object -> {8B8B2E80-1444-451D-AC8E-EB9A847F3887} -> C:\Program Files (x86)\Unitech LLC\ividi\1.8.23.0\bh\ividi.dll [2013-07-25] (Unitech LLC)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-12-08] (AVAST Software)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: No Name -> {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} ->  No File
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
BHO-x32: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} ->  No File
BHO-x32: No Name -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} ->  No File
BHO-x32: No Name -> {EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD} ->  No File
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - No Name - {9E131A93-EED7-4BEB-B015-A0ADB30B5646} -  No File
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Toolbar: HKLM-x32 - No Name - {3004627E-F8E9-4E8B-909D-316753CBA923} -  No File
Toolbar: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000 -> No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} -  No File
Toolbar: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000 -> No Name - {977AE9CC-AF83-45E8-9E03-E2798216E2D5} -  No File
Toolbar: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000 -> No Name - {77F8C945-4B74-4BD6-A073-E0D1997EDCE8} -  No File
Toolbar: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000 -> No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rd032c3e.default
FF Homepage: www.google.com
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-14] ()
FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll No File
FF Plugin: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\system32\npDeployJava1.dll [2013-08-10] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-08-10] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2014-03-21] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-14] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll No File
FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [2013-05-31] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll No File
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin -> C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-03-04] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-03-04] (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2013-05-26] (Pando Networks)
FF Plugin-x32: @tools.updaterss.com/SaveSenseLive Update;version=3 -> C:\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll [2014-02-14] (SaveSense)
FF Plugin-x32: @tools.updaterss.com/SaveSenseLive Update;version=9 -> C:\Program Files (x86)\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll [2014-02-14] (SaveSense)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-08-03] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2014-03-21] (Adobe Systems)
FF Plugin HKU\S-1-5-21-1306849734-3710355425-1743561091-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-03-25] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-1306849734-3710355425-1743561091-1000: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2013-05-26] (Pando Networks)
FF Plugin HKU\S-1-5-21-1306849734-3710355425-1743561091-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll No File
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rd032c3e.default\searchplugins\google-images.xml [2014-10-15]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rd032c3e.default\searchplugins\google-maps.xml [2014-10-15]
FF Extension: YouTube mp3 - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rd032c3e.default\Extensions\info@youtube-mp3.org.xpi [2015-05-06]
FF Extension: ProxTube - Unblock YouTube - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rd032c3e.default\Extensions\{2541D29A-DB9E-4c1e-949A-31EFB4AEF4E7}.xpi [2014-07-29]
FF Extension: Adblock Plus - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rd032c3e.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-03-30]
FF HKLM-x32\...\Firefox\Extensions: [webbooster@iminent.com] - C:\Program Files (x86)\Iminent\webbooster@iminent.com
FF HKLM-x32\...\Firefox\Extensions: [quick_start@gmail.com] - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\qlgmssc2.default\extensions\quick_start@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-12-08]
FF HKU\S-1-5-21-1306849734-3710355425-1743561091-1000\...\Firefox\Extensions: [specialsavings@superfish.com] - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles/kk70s3jg.default\extensions\specialsavings@superfish.com
FF HKU\S-1-5-21-1306849734-3710355425-1743561091-1000\...\Firefox\Extensions: [addlyrics@addlyrics.net] - C:\Program Files (x86)\AddLyrics\FF
FF HKU\S-1-5-21-1306849734-3710355425-1743561091-1000\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-03-26]
FF HKU\S-1-5-21-1306849734-3710355425-1743561091-1000\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\rd032c3e.default\extensions\cliqz@cliqz.com
FF HKU\S-1-5-21-1306849734-3710355425-1743561091-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]

Chrome: 
=======
CHR StartupUrls: Default -> "https://www.google.com/?trackid=sp-006"
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Funmoods Chat) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbjciahceamgodcoidkjpchnokgfpphh [2013-04-16]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-12-08]
CHR Extension: (Funmoods) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj [2013-06-14]
CHR Extension: (Claro Toolbar) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcillohgikpecbmgioknapdpcjofaafl [2013-04-15]
CHR Extension: (OfferMosquito) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk [2013-06-11]
CHR Extension: (iVIDI.org plugin) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\giacfgjdclhnmkacnfbaljbmpnelflol [2014-12-08]
CHR Extension: (Avast Online Security) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-12-08]
CHR Extension: (iVidi Chrome Toolbar) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpdhgpkkloealnjnmepfhanpcleldbef [2013-09-14]
CHR Extension: (Google Wallet) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-08]
CHR HKLM\...\Chrome\Extension: [bbjciahceamgodcoidkjpchnokgfpphh] - C:\Users\User\AppData\Local\funmoods.crx [2012-10-25]
CHR HKLM\...\Chrome\Extension: [cjpglkicenollcignonpgiafdgfeehoj] - C:\Users\User\AppData\Local\funmoods-speeddial_sf.crx [2012-10-25]
CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\Web Assistant\source.crx [Not Found]
CHR HKU\S-1-5-21-1306849734-3710355425-1743561091-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bbjciahceamgodcoidkjpchnokgfpphh] - C:\Users\User\AppData\Local\funmoods.crx [2012-10-25]
CHR HKU\S-1-5-21-1306849734-3710355425-1743561091-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [cjpglkicenollcignonpgiafdgfeehoj] - C:\Users\User\AppData\Local\funmoods-speeddial_sf.crx [2012-10-25]
CHR HKU\S-1-5-21-1306849734-3710355425-1743561091-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [gbmdkmlcnbapgegninelmjbfibaghdmk] - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\ext_offermosquito\ext_offermosquito.crx [2013-12-19]
CHR HKLM-x32\...\Chrome\Extension: [bbjciahceamgodcoidkjpchnokgfpphh] - C:\Users\User\AppData\Local\funmoods.crx [2012-10-25]
CHR HKLM-x32\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [cjpglkicenollcignonpgiafdgfeehoj] - C:\Users\User\AppData\Local\funmoods-speeddial_sf.crx [2012-10-25]
CHR HKLM-x32\...\Chrome\Extension: [dcillohgikpecbmgioknapdpcjofaafl] - C:\Users\User\AppData\Roaming\BabSolution\CR\Claro.crx [2013-04-15]
CHR HKLM-x32\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\Web Assistant\source.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2014-12-08]
CHR HKLM-x32\...\Chrome\Extension: [fjoijdanhaiflhibkljeklcghcmmfffh] - No Path Or update_url value
CHR HKLM-x32\...\Chrome\Extension: [giacfgjdclhnmkacnfbaljbmpnelflol] - C:\Program Files (x86)\iVIDI.org plugin\ividiplg.crx [2012-11-05]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-08]
CHR HKLM-x32\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - \User Data\Default\Extensions\newtab.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [jbolfgndggfhhpbnkgnpjkfhinclbigj] - No Path Or update_url value
CHR HKLM-x32\...\Chrome\Extension: [kpdhgpkkloealnjnmepfhanpcleldbef] - C:\Program Files (x86)\Unitech LLC\ividi\1.8.23.0\ividi.crx [2013-07-25]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-08] (AVAST Software)
S3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-12-08] (Avast Software)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 DiskBoss Service; D:\DiskBoss\bin\diskbsa.exe [118784 2015-04-08] () [File not signed]
R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG) [File not signed]
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [File not signed]
R2 Hamachi2Svc; D:\hamachi-2.exe [2490216 2015-03-30] (LogMeIn Inc.)
R2 KinectManagement; C:\Program Files\Microsoft SDKs\Kinect\v1.0 Beta2\Service\KinectManagementService.exe [131584 2011-09-24] (Microsoft Corporation) [File not signed]
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18956064 2014-07-25] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-09-04] ()
S2 savesenselive; C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [146920 2014-02-14] (SaveSense)
S3 savesenselivem; C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [146920 2014-02-14] (SaveSense)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 UnsignedThemes; C:\Windows\UnsignedThemesSvc.exe [24168 2009-07-13] (The Within Network, LLC)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S3 iPod Service; "C:\Program Files\iPod\bin\iPodService.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-12-08] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-12-08] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-12-08] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-12-08] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-08] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-12-08] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-12-08] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-12-08] ()
S3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv_x64.sys [44928 2012-10-11] (ManyCam LLC)
S3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [28160 2013-01-31] (ManyCam LLC)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-07-25] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
S3 TBPanel; No ImagePath
R2 uxpatch; C:\Windows\system32\drivers\uxpatch.sys [30568 2009-07-13] ()
R3 V0770Vid; C:\Windows\System32\DRIVERS\V0770Vid.sys [379776 2012-06-01] (Creative Technology Ltd.)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-12-08] (Avast Software)
R3 ysusb64; C:\Windows\System32\drivers\ysusb64.sys [110952 2012-09-27] (Yamaha Corporation)
S3 ALSysIO; \??\C:\Users\User\AppData\Local\Temp\ALSysIO64.sys [X]
S3 gdrv; \??\C:\Windows\gdrv.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-06 14:53 - 2015-05-06 15:08 - 00000000 ___DC () C:\FRST
2015-05-05 23:09 - 2015-05-06 02:00 - 00000000 ____D () C:\ProgramData\Adobe
2015-05-05 23:06 - 2015-05-05 23:06 - 00000000 ____D () C:\ProgramData\Apple
2015-05-05 15:42 - 2015-05-05 15:42 - 00000000 ____D () C:\Program Files (x86)\Paint.NET
2015-05-05 14:13 - 2015-05-05 14:13 - 00000000 ____D () C:\Users\User\AppData\Local\DiskBoss
2015-05-05 14:13 - 2015-05-05 14:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DiskBoss
2015-04-25 02:00 - 2015-04-25 02:12 - 00000000 ___DC () C:\MATS
2015-04-24 22:10 - 2015-04-24 22:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-24 17:12 - 2015-04-24 17:13 - 00000197 _____ () C:\Windows\system32\2015-04-24-15-12-45.013-AvastVBoxSVC.exe-3244.log
2015-04-23 20:00 - 2015-04-23 20:01 - 00000000 ___DC () C:\Program Files\Java
2015-04-23 08:31 - 2015-04-23 08:31 - 00000197 _____ () C:\Windows\system32\2015-04-23-06-31-26.083-AvastVBoxSVC.exe-2992.log
2015-04-22 15:22 - 2015-04-22 15:22 - 00000197 _____ () C:\Windows\system32\2015-04-22-13-22-37.036-AvastVBoxSVC.exe-2188.log
2015-04-21 15:02 - 2015-04-21 15:02 - 00000197 _____ () C:\Windows\system32\2015-04-21-13-02-31.048-AvastVBoxSVC.exe-376.log
2015-04-20 20:11 - 2015-04-20 20:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2015-04-20 20:11 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2015-04-20 20:11 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2015-04-20 20:11 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2015-04-20 20:08 - 2015-04-20 20:12 - 00000000 ____D () C:\Users\User\AppData\Roaming\Riot Games
2015-04-20 11:12 - 2015-04-20 11:12 - 00000197 _____ () C:\Windows\system32\2015-04-20-09-12-47.010-AvastVBoxSVC.exe-3280.log
2015-04-20 00:23 - 2015-04-20 00:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-04-19 18:32 - 2015-04-19 18:32 - 00000197 _____ () C:\Windows\system32\2015-04-19-16-32-08.096-AvastVBoxSVC.exe-2984.log
2015-04-16 18:12 - 2015-04-02 02:17 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-04-16 18:12 - 2015-04-02 01:49 - 00342704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-04-16 18:12 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-04-16 18:12 - 2015-03-13 06:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-04-16 18:12 - 2015-03-13 06:25 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-04-16 18:12 - 2015-03-13 06:09 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-04-16 18:12 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-04-16 18:12 - 2015-03-13 06:08 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-04-16 18:12 - 2015-03-13 06:08 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-04-16 18:12 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-04-16 18:12 - 2015-03-13 06:06 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-04-16 18:12 - 2015-03-13 06:00 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-04-16 18:12 - 2015-03-13 05:59 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-04-16 18:12 - 2015-03-13 05:55 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-04-16 18:12 - 2015-03-13 05:54 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-04-16 18:12 - 2015-03-13 05:54 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-04-16 18:12 - 2015-03-13 05:53 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-04-16 18:12 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-04-16 18:12 - 2015-03-13 05:44 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-04-16 18:12 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-04-16 18:12 - 2015-03-13 05:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-04-16 18:12 - 2015-03-13 05:40 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-04-16 18:12 - 2015-03-13 05:32 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-04-16 18:12 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-04-16 18:12 - 2015-03-13 05:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-04-16 18:12 - 2015-03-13 05:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-04-16 18:12 - 2015-03-13 05:27 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-04-16 18:12 - 2015-03-13 05:27 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-04-16 18:12 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-04-16 18:12 - 2015-03-13 05:26 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-04-16 18:12 - 2015-03-13 05:23 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-04-16 18:12 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-04-16 18:12 - 2015-03-13 05:20 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-04-16 18:12 - 2015-03-13 05:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-04-16 18:12 - 2015-03-13 05:17 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-04-16 18:12 - 2015-03-13 05:16 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-04-16 18:12 - 2015-03-13 05:15 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-04-16 18:12 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-04-16 18:12 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-04-16 18:12 - 2015-03-13 05:06 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-04-16 18:12 - 2015-03-13 05:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-04-16 18:12 - 2015-03-13 05:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-04-16 18:12 - 2015-03-13 05:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-04-16 18:12 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-04-16 18:12 - 2015-03-13 04:57 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-04-16 18:12 - 2015-03-13 04:56 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-04-16 18:12 - 2015-03-13 04:54 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-04-16 18:12 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-04-16 18:12 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-04-16 18:12 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-04-16 18:12 - 2015-03-13 04:43 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-04-16 18:12 - 2015-03-13 04:42 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-04-16 18:12 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-04-16 18:12 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-04-16 18:12 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-04-16 18:12 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-04-16 18:12 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-04-16 18:12 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-04-16 17:54 - 2015-04-19 23:08 - 00000000 ____D () C:\Windows\rescache
2015-04-16 16:31 - 2015-04-16 16:31 - 00000197 _____ () C:\Windows\system32\2015-04-16-14-31-31.082-AvastVBoxSVC.exe-1976.log
2015-04-16 11:53 - 2015-04-16 11:53 - 00000197 _____ () C:\Windows\system32\2015-04-16-09-53-06.057-AvastVBoxSVC.exe-3280.log
2015-04-15 22:21 - 2015-04-15 22:21 - 00000000 _____ () C:\Users\User\AppData\Local\{F551F45B-549C-4468-9D59-3C399921574F}
2015-04-15 19:49 - 2015-03-17 07:22 - 05557696 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-15 19:49 - 2015-03-17 07:22 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-04-15 19:49 - 2015-03-17 07:22 - 00095672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-04-15 19:49 - 2015-03-17 07:19 - 01727904 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-15 19:49 - 2015-03-17 07:17 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-04-15 19:49 - 2015-03-17 07:17 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-04-15 19:49 - 2015-03-17 07:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-04-15 19:49 - 2015-03-17 07:16 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-04-15 19:49 - 2015-03-17 07:16 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-04-15 19:49 - 2015-03-17 07:16 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-04-15 19:49 - 2015-03-17 07:16 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-04-15 19:49 - 2015-03-17 07:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-04-15 19:49 - 2015-03-17 07:16 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-04-15 19:49 - 2015-03-17 07:16 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-04-15 19:49 - 2015-03-17 07:16 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-04-15 19:49 - 2015-03-17 07:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-04-15 19:49 - 2015-03-17 07:16 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-04-15 19:49 - 2015-03-17 07:16 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-04-15 19:49 - 2015-03-17 07:16 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-04-15 19:49 - 2015-03-17 07:16 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-04-15 19:49 - 2015-03-17 07:16 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-04-15 19:49 - 2015-03-17 07:16 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-04-15 19:49 - 2015-03-17 07:16 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-04-15 19:49 - 2015-03-17 07:16 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-04-15 19:49 - 2015-03-17 07:16 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-04-15 19:49 - 2015-03-17 07:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-04-15 19:49 - 2015-03-17 07:16 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-04-15 19:49 - 2015-03-17 07:15 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-04-15 19:49 - 2015-03-17 07:15 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-04-15 19:49 - 2015-03-17 07:15 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-04-15 19:49 - 2015-03-17 07:13 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-04-15 19:49 - 2015-03-17 07:13 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-04-15 19:49 - 2015-03-17 07:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-04-15 19:49 - 2015-03-17 07:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-04-15 19:49 - 2015-03-17 07:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 07:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 07:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-04-15 19:49 - 2015-03-17 07:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-04-15 19:49 - 2015-03-17 06:59 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-04-15 19:49 - 2015-03-17 06:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-04-15 19:49 - 2015-03-17 06:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-04-15 19:49 - 2015-03-17 06:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-04-15 19:49 - 2015-03-17 06:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-04-15 19:49 - 2015-03-17 06:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-04-15 19:49 - 2015-03-17 06:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-04-15 19:49 - 2015-03-17 06:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-04-15 19:49 - 2015-03-17 06:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-04-15 19:49 - 2015-03-17 06:57 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-04-15 19:49 - 2015-03-17 06:56 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-04-15 19:49 - 2015-03-17 06:56 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-04-15 19:49 - 2015-03-17 06:56 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-04-15 19:49 - 2015-03-17 06:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-04-15 19:49 - 2015-03-17 06:56 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-04-15 19:49 - 2015-03-17 06:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-04-15 19:49 - 2015-03-17 06:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-04-15 19:49 - 2015-03-17 06:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-04-15 19:49 - 2015-03-17 06:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-04-15 19:49 - 2015-03-17 06:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-04-15 19:49 - 2015-03-17 06:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-04-15 19:49 - 2015-03-17 06:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 06:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 05:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-04-15 19:49 - 2015-03-17 05:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-04-15 19:49 - 2015-03-17 05:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 05:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-04-15 19:49 - 2015-03-17 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-04-15 19:34 - 2015-03-25 05:24 - 03298816 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-15 19:34 - 2015-03-25 05:24 - 02553856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-15 19:34 - 2015-03-25 05:24 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-15 19:34 - 2015-03-25 05:24 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-15 19:34 - 2015-03-25 05:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-15 19:34 - 2015-03-25 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-15 19:34 - 2015-03-25 05:24 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-15 19:34 - 2015-03-25 05:24 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-15 19:34 - 2015-03-25 05:23 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-15 19:34 - 2015-03-25 05:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-15 19:34 - 2015-03-25 05:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-15 19:34 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-04-15 19:34 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-04-15 19:34 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-04-15 19:34 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-04-15 19:34 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-04-15 19:30 - 2015-03-23 05:25 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-15 19:30 - 2015-03-23 05:25 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-15 19:30 - 2015-03-23 05:24 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-15 19:30 - 2015-03-23 05:24 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-15 19:30 - 2015-03-23 05:24 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-15 19:30 - 2015-03-23 05:24 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-04-15 19:30 - 2015-03-23 05:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-15 19:30 - 2015-03-23 05:17 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-15 19:23 - 2015-03-10 05:25 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-04-15 19:23 - 2015-03-10 05:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-04-15 19:23 - 2015-03-10 05:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-04-15 19:23 - 2015-03-10 05:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-04-15 19:23 - 2015-03-05 07:12 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-04-15 19:23 - 2015-03-05 06:05 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-04-15 19:17 - 2015-02-25 05:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-15 19:06 - 2015-03-04 06:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2015-04-15 19:06 - 2015-03-04 06:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-15 19:06 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2015-04-15 18:05 - 2015-04-15 18:05 - 00000197 _____ () C:\Windows\system32\2015-04-15-16-05-42.017-AvastVBoxSVC.exe-3328.log
2015-04-14 22:44 - 2015-04-14 22:44 - 00000000 ____D () C:\Users\User\AppData\Local\openvr
2015-04-14 18:51 - 2015-04-14 18:52 - 00000197 _____ () C:\Windows\system32\2015-04-14-16-51-39.030-AvastVBoxSVC.exe-2112.log
2015-04-13 16:00 - 2015-04-13 16:00 - 00000197 _____ () C:\Windows\system32\2015-04-13-14-00-23.007-AvastVBoxSVC.exe-1800.log
2015-04-11 18:04 - 2015-04-11 18:04 - 00000197 _____ () C:\Windows\system32\2015-04-11-16-04-46.029-AvastVBoxSVC.exe-1736.log
2015-04-11 09:43 - 2015-04-11 09:43 - 00000247 _____ () C:\Windows\system32\2015-04-11-07-43-16.001-aswFe.exe-1748.log
2015-04-11 09:38 - 2015-04-11 09:43 - 00000247 _____ () C:\Windows\system32\2015-04-11-07-38-51.090-aswFe.exe-5392.log
2015-04-11 09:38 - 2015-04-11 09:38 - 00000197 _____ () C:\Windows\system32\2015-04-11-07-38-47.030-AvastVBoxSVC.exe-6024.log
2015-04-11 09:26 - 2015-04-11 09:26 - 00000197 _____ () C:\Windows\system32\2015-04-11-07-26-32.003-AvastVBoxSVC.exe-3304.log
2015-04-10 15:36 - 2015-04-20 00:23 - 00000000 ____D () C:\ProgramData\Skype
2015-04-09 13:49 - 2015-05-06 14:17 - 00043251 _____ () C:\Windows\WindowsUpdate.log
2015-04-07 03:01 - 2015-04-07 03:01 - 00000000 ___SD () C:\Windows\SysWOW64\GWX
2015-04-07 03:01 - 2015-04-07 03:01 - 00000000 ___SD () C:\Windows\system32\GWX
2015-04-06 14:33 - 2015-04-06 14:33 - 00014500 _____ () C:\Users\User\4px_reference Marvin Minecon.pdn

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-06 15:05 - 2013-06-05 07:27 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-06 14:57 - 2009-07-14 06:45 - 00023056 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-06 14:57 - 2009-07-14 06:45 - 00023056 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-06 14:21 - 2014-02-14 23:16 - 00000928 _____ () C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job
2015-05-06 12:55 - 2012-12-06 16:38 - 00000000 ____D () C:\Users\User\AppData\Local\LogMeIn Hamachi
2015-05-06 12:51 - 2014-02-14 23:16 - 00000924 _____ () C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job
2015-05-06 12:51 - 2012-09-09 16:20 - 00000374 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2015-05-06 12:50 - 2013-07-12 16:25 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-05-06 12:50 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-06 02:00 - 2012-07-04 16:14 - 00000000 ____D () C:\Users\User\AppData\Local\Adobe
2015-05-05 23:13 - 2012-10-09 12:35 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype
2015-05-05 21:05 - 2013-08-10 06:07 - 00000000 ____D () C:\Users\User\AppData\Roaming\.minecraft
2015-05-05 16:12 - 2014-11-22 15:37 - 04911616 ___SH () C:\Users\User\Thumbs.db
2015-05-05 15:45 - 2013-01-23 18:42 - 00000000 ____D () C:\Users\User\AppData\Local\Paint.NET
2015-05-05 14:17 - 2012-10-26 23:34 - 00000000 ____D () C:\Temp
2015-05-04 12:25 - 2013-02-07 22:41 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-05-03 19:32 - 2009-07-14 19:58 - 00713634 _____ () C:\Windows\system32\perfh007.dat
2015-05-03 19:32 - 2009-07-14 19:58 - 00153750 _____ () C:\Windows\system32\perfc007.dat
2015-05-03 19:32 - 2009-07-14 07:13 - 01647328 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-03 01:27 - 2012-10-29 22:00 - 00041472 _____ () C:\Users\User\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-04-28 22:15 - 2014-03-04 12:00 - 00000000 ____D () C:\Users\User\AppData\Roaming\Audacity
2015-04-26 12:35 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-04-25 12:40 - 2014-11-21 21:27 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-04-20 20:13 - 2013-05-26 13:48 - 00000000 ____D () C:\Users\User\AppData\Local\PMB Files
2015-04-20 20:13 - 2013-05-26 13:48 - 00000000 ____D () C:\ProgramData\PMB Files
2015-04-20 00:23 - 2014-10-15 15:45 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-04-19 23:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat
2015-04-17 00:59 - 2012-12-30 02:39 - 01620672 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-04-16 16:25 - 2014-12-11 08:31 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-16 16:25 - 2014-05-08 03:18 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-16 16:25 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-04-16 12:09 - 2013-08-10 03:00 - 00000000 ____D () C:\Windows\system32\MRT
2015-04-16 11:59 - 2012-06-16 10:48 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-04-14 23:04 - 2013-03-21 23:08 - 00007619 _____ () C:\Users\User\AppData\Local\Resmon.ResmonCfg
2015-04-14 22:36 - 2013-06-05 07:27 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-04-14 22:36 - 2013-06-05 07:27 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-04-14 22:36 - 2012-06-16 10:47 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-11 16:05 - 2014-06-18 14:32 - 00000000 ____D () C:\Users\User\AppData\Roaming\Sony
2015-04-10 14:27 - 2013-04-21 16:34 - 00000000 ___DC () C:\Program Files\Adobe
2015-04-06 23:52 - 2014-09-27 01:07 - 00000000 ____D () C:\Users\User\AppData\Roaming\.technic
2015-04-06 15:18 - 2012-06-16 11:20 - 00000000 ____D () C:\Program Files (x86)\Adobe

==================== Files in the root of some directories =======

2013-07-31 19:52 - 1999-05-06 16:10 - 0139770 _____ () C:\Program Files (x86)\1st.tun
2013-07-31 19:51 - 1999-05-06 16:10 - 0142120 _____ () C:\Program Files (x86)\2nd.tun
2013-07-31 19:51 - 1999-05-06 16:10 - 0197554 _____ () C:\Program Files (x86)\3rd.tun
2013-07-31 19:51 - 1999-05-07 18:03 - 1322772 _____ () C:\Program Files (x86)\alien.tun
2013-07-31 19:51 - 1999-05-07 18:04 - 1312636 _____ () C:\Program Files (x86)\amazon.tun
2013-07-31 19:51 - 1999-05-07 18:04 - 1302204 _____ () C:\Program Files (x86)\armor.tun
2013-07-31 19:51 - 1999-05-07 18:04 - 1089380 _____ () C:\Program Files (x86)\bonus.tun
2013-07-31 19:51 - 1999-05-06 15:51 - 1293382 _____ () C:\Program Files (x86)\builder.tun
2013-07-31 19:51 - 1999-05-07 18:04 - 1587308 _____ () C:\Program Files (x86)\cannon.tun
2013-07-31 19:51 - 1999-05-06 16:10 - 0344332 _____ () C:\Program Files (x86)\Circuit1.tun
2013-07-31 19:51 - 1999-05-06 16:10 - 0339858 _____ () C:\Program Files (x86)\Circuit2.tun
2013-07-31 19:51 - 1999-05-06 16:10 - 0270280 _____ () C:\Program Files (x86)\Circuit3.tun
2013-07-31 19:51 - 1999-05-06 16:10 - 0279274 _____ () C:\Program Files (x86)\Circuit4.tun
2013-07-31 19:51 - 1999-05-06 16:10 - 0263574 _____ () C:\Program Files (x86)\Circuit5.tun
2013-07-31 19:51 - 1999-05-06 16:10 - 0408634 _____ () C:\Program Files (x86)\Circuit6.tun
2013-07-31 19:51 - 1999-05-06 15:51 - 1481506 _____ () C:\Program Files (x86)\credits.tun
2013-07-31 19:51 - 1999-05-07 18:05 - 1114308 _____ () C:\Program Files (x86)\docks.tun
2013-07-31 19:51 - 1999-05-07 18:05 - 1730480 _____ () C:\Program Files (x86)\forest.tun
2013-07-31 19:51 - 1999-04-28 13:30 - 1248046 _____ () C:\Program Files (x86)\GameIntr.tun
2013-07-31 19:51 - 1999-05-06 16:11 - 0316076 _____ () C:\Program Files (x86)\gencar.tun
2013-07-31 19:51 - 1999-05-07 18:07 - 1510908 _____ () C:\Program Files (x86)\gold.tun
2013-07-31 19:51 - 2001-01-12 15:46 - 0413696 _____ () C:\Program Files (x86)\GolDP.dll
2013-04-04 22:50 - 2013-04-04 23:06 - 4126720 _____ () C:\Program Files (x86)\GUTC72E.tmp
2013-06-14 23:14 - 2013-06-14 23:21 - 4167680 _____ () C:\Program Files (x86)\GUTF8CC.tmp
2013-07-31 19:51 - 1999-05-07 18:07 - 1296324 _____ () C:\Program Files (x86)\hook.tun
2013-07-31 19:51 - 1999-06-01 13:16 - 8437760 _____ () C:\Program Files (x86)\HVSCmp.avi
2013-07-31 19:51 - 1999-04-28 16:43 - 0209356 _____ () C:\Program Files (x86)\HvsIntro.tun
2013-07-31 19:51 - 1999-05-07 18:07 - 1453020 _____ () C:\Program Files (x86)\ice.tun
2013-07-31 19:51 - 1999-06-29 16:19 - 24696320 _____ () C:\Program Files (x86)\introcmp.avi
2013-07-31 19:52 - 1999-05-07 18:08 - 1312782 _____ () C:\Program Files (x86)\island.tun
2013-07-31 19:51 - 1999-05-07 18:08 - 1376048 _____ () C:\Program Files (x86)\knight.tun
2013-07-31 19:52 - 1999-11-02 12:32 - 19642024 _____ () C:\Program Files (x86)\LEGO.JAM
2013-07-31 19:52 - 2001-01-12 15:53 - 0987222 _____ () C:\Program Files (x86)\LEGORacers.exe
2013-07-31 19:52 - 1999-07-22 13:53 - 7295342 _____ () C:\Program Files (x86)\lmicmp.avi
2013-07-31 19:52 - 1999-05-06 16:10 - 0154936 _____ () C:\Program Files (x86)\Lose.tun
2013-07-31 19:52 - 1999-05-07 18:08 - 1342612 _____ () C:\Program Files (x86)\luck.tun
2013-07-31 19:52 - 1999-05-07 18:08 - 1719604 _____ () C:\Program Files (x86)\magma.tun
2013-07-31 19:52 - 1999-05-07 18:09 - 1260964 _____ () C:\Program Files (x86)\meteor.tun
2013-07-31 19:52 - 1999-05-07 18:09 - 2116428 _____ () C:\Program Files (x86)\moat.tun
2013-07-31 19:52 - 1999-05-07 18:09 - 1281624 _____ () C:\Program Files (x86)\parrot.tun
2013-07-31 19:52 - 1999-03-25 10:34 - 1242260 _____ () C:\Program Files (x86)\pyrmid.tun
2013-07-31 19:52 - 2003-08-19 11:45 - 0022724 _____ () C:\Program Files (x86)\Readme.txt
2013-07-31 19:52 - 1999-05-07 18:10 - 1310724 _____ () C:\Program Files (x86)\reward.tun
2013-07-31 19:52 - 1999-05-07 18:10 - 1322788 _____ () C:\Program Files (x86)\rocket.tun
2013-07-31 19:52 - 1999-05-07 18:10 - 1587332 _____ () C:\Program Files (x86)\royal.tun
2013-07-31 19:52 - 1999-05-06 16:11 - 1093360 _____ () C:\Program Files (x86)\RRacer.tun
2013-07-31 19:52 - 1999-05-06 16:11 - 0742136 _____ () C:\Program Files (x86)\RRCar.tun
2013-07-31 19:52 - 1999-05-07 18:12 - 1282960 _____ () C:\Program Files (x86)\skull.tun
2013-07-31 19:52 - 1999-05-07 18:13 - 1242244 _____ () C:\Program Files (x86)\sphinx.tun
2013-07-31 19:52 - 1999-05-07 18:13 - 1409796 _____ () C:\Program Files (x86)\stars.tun
2013-07-31 19:52 - 1999-05-06 15:50 - 0044582 _____ () C:\Program Files (x86)\start.tun
2013-07-31 19:52 - 1999-05-06 15:50 - 1354524 _____ () C:\Program Files (x86)\test.tun
2013-07-31 19:52 - 1999-05-06 15:50 - 1273738 _____ () C:\Program Files (x86)\theme.tun
2013-07-31 19:52 - 1999-05-07 18:13 - 1375688 _____ () C:\Program Files (x86)\tomb.tun
2013-07-31 19:52 - 1999-05-07 18:13 - 1696400 _____ () C:\Program Files (x86)\ufo.tun
2013-07-31 19:51 - 2013-07-31 19:53 - 0017444 _____ () C:\Program Files (x86)\Uninst.isu
2013-07-31 19:52 - 1999-05-06 16:11 - 0253186 _____ () C:\Program Files (x86)\VVCar.tun
2013-07-31 19:52 - 1999-05-07 18:14 - 1199328 _____ () C:\Program Files (x86)\whip.tun
2013-07-31 19:52 - 1999-06-08 13:40 - 0170158 _____ () C:\Program Files (x86)\win.tun
2013-07-31 19:52 - 1999-05-07 18:14 - 1359814 _____ () C:\Program Files (x86)\witch.tun
2013-04-17 20:12 - 2013-02-09 23:55 - 0114176 _____ () C:\Users\User\AppData\Roaming\BabMaint.exe
2013-03-21 19:52 - 2013-03-22 22:42 - 0064379 _____ () C:\Users\User\AppData\Roaming\l0g
2011-03-07 14:12 - 2011-03-07 14:12 - 0055632 _____ (Microsoft Corporation) C:\Users\User\AppData\Roaming\MCHAM.exe
2014-02-14 23:16 - 2014-02-14 23:16 - 0000043 _____ () C:\Users\User\AppData\Roaming\WB.CFG
2012-10-29 22:00 - 2015-05-03 01:27 - 0041472 _____ () C:\Users\User\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-10-25 16:29 - 2012-10-25 16:29 - 0290500 _____ () C:\Users\User\AppData\Local\funmoods-speeddial_sf.crx
2012-10-25 16:29 - 2012-10-25 16:29 - 0031465 _____ () C:\Users\User\AppData\Local\funmoods.crx
2013-12-24 22:25 - 2013-12-24 22:25 - 2239272 _____ () C:\Users\User\AppData\Local\omesuperv.exe
2014-02-16 00:27 - 2014-02-16 00:27 - 0011306 _____ () C:\Users\User\AppData\Local\recently-used.xbel
2013-03-21 23:08 - 2015-04-14 23:04 - 0007619 _____ () C:\Users\User\AppData\Local\Resmon.ResmonCfg
2014-11-22 16:00 - 2014-11-22 16:00 - 0000000 _____ () C:\Users\User\AppData\Local\{0DCE3377-E915-4448-9078-04410B80FDD3}
2014-11-08 14:02 - 2014-11-08 14:02 - 0000000 _____ () C:\Users\User\AppData\Local\{4CEB48F7-A3B9-47C0-AFC9-CC107537FD12}
2015-04-15 22:21 - 2015-04-15 22:21 - 0000000 _____ () C:\Users\User\AppData\Local\{F551F45B-549C-4468-9D59-3C399921574F}

Some content of TEMP:
====================
C:\Users\Gast\AppData\Local\Temp\si_sparpilot.exe
C:\Users\Gast\AppData\Local\Temp\ubiCC55.tmp.exe
C:\Users\Gast\AppData\Local\Temp\ubiE259.tmp.exe
C:\Users\Gast\AppData\Local\Temp\zipsetup.exe


Some zero byte size files/folders:
==========================
C:\Windows\System32\jnwmon.dll

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-04 00:13

==================== End Of Log ============================

--- --- ---

MrTrololol · 07.05.2015, 14:25

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 06-05-2015
Ran by User at 2015-05-06 15:08:34
Running from D:\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1306849734-3710355425-1743561091-500 - Administrator - Disabled)
Gast (S-1-5-21-1306849734-3710355425-1743561091-501 - Administrator - Enabled) => C:\Users\Gast
HomeGroupUser$ (S-1-5-21-1306849734-3710355425-1743561091-1576 - Limited - Enabled)
User (S-1-5-21-1306849734-3710355425-1743561091-1000 - Administrator - Enabled) => C:\Users\User

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-1306849734-3710355425-1743561091-1000\...\uTorrent) (Version: 3.3.2.30488 - BitTorrent Inc.)
Ace of Spades (HKLM-x32\...\Steam App 224540) (Version:  - Jagex Limited)
Action! (HKLM-x32\...\Mirillis Action!) (Version: 1.18.0 - Mirillis)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.7.0.1530 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.5.1.369 - Adobe Systems Incorporated)
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.5 - Adobe Systems Incorporated)
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Reader X (10.1.11) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.11 - Adobe Systems Incorporated)
Advanced Disk Recovery (HKLM-x32\...\{2AA44AF4-C116-4219-B800-4573E7E6D421}_is1) (Version: 2.5.500.15827 - Systweak Software)
Akamai NetSession Interface (HKU\S-1-5-21-1306849734-3710355425-1743561091-1000\...\Akamai) (Version:  - Akamai Technologies, Inc)
Aladdin (HKLM-x32\...\Aladdin) (Version:  - )
Apple Application Support (HKLM-x32\...\{21FC2093-6E43-460B-B9B0-5F5AA35BBB0F}) (Version: 3.0 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{FE86CB0C-FCB3-4358-B4B0-B0A41E33B3DD}) (Version: 7.1.0.32 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Assassin's Creed Revelations 1.02 (HKLM-x32\...\{33A22B2D-55BA-4508-B767-BF2E9C21A73F}) (Version: 1.02 - Ubisoft)
Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team)
AutoIt v3.3.8.1 (HKLM-x32\...\AutoItv3) (Version:  - AutoIt Team)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.0.2208 - AVAST Software)
Avidemux 2.6 (32-bit) (HKLM-x32\...\Avidemux 2.6) (Version: 2.6.7.8981 - )
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.3.2.3825 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.5.1 - EA Digital Illusions CE AB)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Borderlands 2 (HKLM-x32\...\Steam App 49520) (Version:  - Gearbox Software)
CCleaner (HKLM\...\CCleaner) (Version: 3.28 - Piriform)
Claro Chrome Toolbar (HKLM-x32\...\Claro Chrome Toolbar) (Version:  - Visual Tools) <==== ATTENTION
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dawn of War - Dark Crusade (HKLM-x32\...\{FF39FC01-819B-42E4-AE49-1968AF12DDD4}) (Version: 1.00.0000 - THQ)
Dawn of War - Soulstorm (HKLM-x32\...\{20533183-D42D-4261-A125-956736FBEA8C}) (Version: 1.00.0000 - THQ)
Dawn of War - Soulstorm (x32 Version: 1.00.0000 - THQ) Hidden
DC Mod Manager (HKLM-x32\...\DC Mod Manager) (Version:  - )
Die Schlacht um Mittelerde™ II (HKLM-x32\...\{2A9F95AB-65A3-432c-8631-B8BC5BF7477A}) (Version:  - )
DiskBoss 5.5.12 (HKLM-x32\...\DiskBoss) (Version: 5.5.12 - Flexense Computing Systems Ltd.)
Disneys Donald Duck (HKLM-x32\...\Donald Duck) (Version:  - )
Disneys Peter Pan Rückkehr nach Nimmerland (HKLM-x32\...\{A6B0E526-D1E8-11D5-AA2E-0008C760B784}) (Version:  - )
Fallout: New Vegas (HKLM-x32\...\Steam App 22380) (Version:  - Obsidian Entertainment)
FileParade bundle uninstaller (HKLM-x32\...\FileParade bundle uninstaller) (Version: 2.0.0.3 - FileParade) <==== ATTENTION
FilesFrog Update Checker (HKLM-x32\...\FilesFrog Update Checker) (Version:  - ) <==== ATTENTION
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{39AB2E37-1A55-4292-A5D3-971E9F70D0F8}) (Version: 2.1.32.0 - MAGIX AG)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Free YouTube to MP3 Converter version 3.12.31.325 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.31.325 - DVDVideoSoft Ltd.)
Fuse (HKLM-x32\...\Steam App 257400) (Version:  - Mixamo)
GameSpy Arcade (HKLM-x32\...\GameSpy Arcade) (Version:  - )
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Facepunch Studios)
GCFScape 1.3.1 (HKLM-x32\...\GCFScape_is1) (Version:  - Ryan Gregg)
GIMP 2.8.6 (HKLM\...\GIMP-2_is1) (Version: 2.8.6 - The GIMP Team)
Hotfix für Microsoft Visual C++ 2010 Express - DEU (KB2635973) (HKLM-x32\...\{DEEB5FE3-40F5-3C5B-8F85-5306EF3C08F4}.KB2635973) (Version: 1 - Microsoft Corporation)
Iminent (x32 Version: 6.44.21.0 - Iminent) Hidden <==== ATTENTION
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1118 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.0.1008 - Intel Corporation)
iTunes (HKLM\...\{96B53CA8-5ABB-49D8-96F1-F6C0D73A76C6}) (Version: 11.1.4.62 - Apple Inc.)
Java 7 Update 21 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217021FF}) (Version: 7.0.210 - Oracle)
Java 7 Update 25 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417025FF}) (Version: 7.0.250 - Oracle)
Java SE Development Kit 7 Update 25 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170250}) (Version: 1.7.0.250 - Oracle)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
LEGO Insel 2 (HKLM-x32\...\{85967580-EBC2-11D4-AEA3-0050046A88ED}) (Version:  - )
LEGO Lord of the Rings (HKLM-x32\...\Steam App 214510) (Version:  - Traveller's Tales)
LEGO Racers (HKLM-x32\...\LEGO Racers) (Version:  - )
LEGO Universe (HKLM-x32\...\NetDevil_LEGO_Universe_is1) (Version:  - LEGO Software)
Lion Transformation Pack (HKLM-x32\...\UX Pack) (Version: 1.0 - Windows X's Live)
Live! Cam Sync HD VF0770 Driver (1.00.02.00) (HKLM\...\Creative VF0770) (Version:  - Creative Technology Ltd.)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.328 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.328 - LogMeIn, Inc.) Hidden
MAGIX Content und Soundpools (HKLM-x32\...\MAGIX_GlobalContent) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Goya burnR (MSI) (HKLM-x32\...\MAGIX_{752F3DA2-9D44-4A2C-A65C-544525EACA81}) (Version: 4.3.2.0 - MAGIX AG)
MAGIX Goya burnR (MSI) (Version: 4.3.2.0 - MAGIX AG) Hidden
MAGIX Music Maker 2013 (HKLM-x32\...\MAGIX_{3F5C2BC0-B7D7-4114-B273-3B1460B2452B}) (Version: 19.0.1.36 - MAGIX AG)
MAGIX Music Maker 2013 (Version: 19.0.1.36 - MAGIX AG) Hidden
MAGIX Music Maker 2013 Trial Soundpools (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Screenshare (HKLM-x32\...\MAGIX_{8EBA7109-16D0-4174-8DF2-B87A67199532}) (Version: 4.3.6.1987 - MAGIX AG)
MAGIX Screenshare (Version: 4.3.6.1987 - MAGIX AG) Hidden
MAGIX Speed burnR (MSI) (HKLM-x32\...\MAGIX_{0D951CBB-743C-4A68-8C85-97D89A61D7CD}) (Version: 7.0.2.6 - MAGIX AG)
MAGIX Speed burnR (MSI) (Version: 7.0.2.6 - MAGIX AG) Hidden
MAGIX Video deluxe 2014 (HKLM-x32\...\MX.{EA62B22F-AB0A-406B-80A9-8036D3CE3446}) (Version: 13.0.0.30 - MAGIX AG)
MAGIX Video deluxe 2014 (Version: 13.0.0.30 - MAGIX AG) Hidden
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
MCI Screensaver (HKLM-x32\...\MCI Screensaver) (Version:  - )
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Halo Trial (HKLM-x32\...\Halo Trial) (Version:  - Microsoft)
Microsoft Help Viewer 1.0 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.0 Language Pack - DEU) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation)
Microsoft Help Viewer 1.1 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.1 Language Pack - DEU) (Version: 1.1.40219 - Microsoft Corporation)
Microsoft Kinect 1.0 Beta2 SDK (HKLM\...\{BB8DB4E0-F448-4637-9D87-9FD57D1288D2}) (Version: 1.0.0.45 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1306849734-3710355425-1743561091-1000\...\OneDriveSetup.exe) (Version: 17.0.4035.0328 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 DEU (HKLM\...\{C3EAE456-7E7A-451F-80EF-F34C7A13C558}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Runtime - 10.0.40219 (HKLM\...\{1C7C8AAF-A16D-32E8-89E5-F6D165DE0BCE}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Runtime - 10.0.40219 (HKLM-x32\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Express - DEU (HKLM-x32\...\Microsoft Visual C++ 2010 Express - DEU) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (HKLM\...\{3C983A67-DFB2-3D3D-AD9E-CA1A5A09FD18}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Service Pack 1 (HKLM-x32\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Minecraft 1.7.5 (HKLM-x32\...\Minecraft 1.7.5) (Version: 1.7.5 - Mojang)
Mocap Device Plug-in (MS Beta) v1.21 Trial (HKLM-x32\...\{D6DC878B-CB45-4D2B-B7B7-28FF16B57B8C}) (Version: 1.21.2119.1 - Reallusion Inc.)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 37.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.2 (x86 de)) (Version: 37.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.1.1 - Mozilla)
mp3-2-wav converter 1.14 (HKLM-x32\...\mp3-2-wav) (Version:  - )
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
NVIDIA 3D Vision Controller-Treiber 335.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 335.21 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Optimizer Pro v3.0 (HKLM-x32\...\Optimizer Pro_is1) (Version: 3.0 - PC Utilities Pro) <==== ATTENTION
Origin (HKLM-x32\...\Origin) (Version: 9.4.20.386 - Electronic Arts, Inc.)
paint.net (HKLM\...\{19BD2C33-16A8-4ED1-B9EA-D9E35B21EC42}) (Version: 4.0.5 - dotPDN LLC)
PaintTool SAI Ver.1 (HKLM-x32\...\PaintToolSAI) (Version:  - )
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.9 - Pando Networks Inc.)
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
PileFile reminder (HKU\S-1-5-21-1306849734-3710355425-1743561091-1000\...\{56837588-F559-40CF-91D9-D439D405FB28}) (Version:  - Escolade Solutions LTD) <==== ATTENTION
Poker Night 2 (HKLM-x32\...\Steam App 234710) (Version:  - Telltale Games)
Poker Night at the Inventory (HKLM-x32\...\Steam App 31280) (Version:  - Telltale Games)
Portal 2 (HKLM-x32\...\Steam App 620) (Version:  - Valve)
PosteRazor (HKLM-x32\...\PosteRazor_is1) (Version: 1.5.2 - Alessandro Portale)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.38.113.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6307 - Realtek Semiconductor Corp.)
RealWorld Cursor Editor (HKLM-x32\...\{4B2DEF0C-51B4-4250-A082-7C3CD4FB2828}) (Version: 7.1.0 - RealWorld Graphics)
RocketDock 1.3.5 (HKLM-x32\...\RocketDock_is1) (Version:  - Punk Software)
Scrolls (HKLM-x32\...\{AA53ACF4-5893-4F7C-8589-32F6A4266125}) (Version: 1.0.0.0 - Mojang)
SHIELD Streaming (Version: 3.1.100 - NVIDIA Corporation) Hidden
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Source Filmmaker (HKLM-x32\...\Steam App 1840) (Version:  - Valve)
Source SDK Base 2006 (HKLM-x32\...\Steam App 215) (Version:  - Valve)
Star Wars: The Old Republic (HKLM-x32\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
SupTab (HKLM-x32\...\SupTab) (Version: 1.1.1.0 - ) <==== ATTENTION
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)
Team Fortress 2 Uncut Launcher v4.0 (HKLM-x32\...\{54948AF6-4D45-4871-A295-F9FF06EF3AFE}_is1) (Version:  - Milka2009)
Techne (HKU\S-1-5-21-1306849734-3710355425-1743561091-1000\...\244a1e8693fd9c7e) (Version: 1.3.0.15 - ZeuX and r4wk)
Terraria (HKLM-x32\...\Steam App 105600) (Version:  - Re-Logic)
Text-To-Speech-Runtime (HKLM-x32\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
The Forest (HKLM-x32\...\Steam App 242760) (Version:  - Endnight Games Ltd)
TP-LINK Wireless Client Utility (HKLM-x32\...\{7A2A107B-9695-423F-9462-8F17C178BD35}) (Version: 7.0 - TP-LINK)
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.89 - TuneUp Software) Hidden
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Unitech LLC toolbar   (HKLM-x32\...\ividi) (Version: 1.8.23.0 - Unitech LLC) <==== ATTENTION
Unity Web Player (HKU\S-1-5-21-1306849734-3710355425-1743561091-1000\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
UxStyle Core Beta (HKLM\...\{8E363055-15E5-4D8A-9C69-A0A9DE9A3337}) (Version: 0.2.1.1 - The Within Network, LLC)
Vtune 7.21 (HKLM-x32\...\MySSID_is1) (Version:  - )
Warhammer 40,000 Space Marine (HKLM-x32\...\Steam App 55150) (Version:  - Relic)
Warhammer 40,000: Dawn Of War - Gold Edition (HKLM-x32\...\{D0B36BAF-3E9D-423E-8821-ED238C18DB0A}) (Version: 1.51 - THQ)
Warhammer® 40,000™: Dawn of War® II – Retribution™ (HKLM-x32\...\Steam App 56400) (Version:  - Relic Entertainment)
Warhammer® 40,000™: Dawn of War® II (HKLM-x32\...\Steam App 15620) (Version:  - Relic)
Web-Cake 3.00 (HKLM\...\{C4ED781C-7394-4906-AAFF-D6AB64FF7C38}) (Version: 3.00 - Web Cake LLC) <==== ATTENTION
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
XMedia Recode Version 3.1.7.8 (HKLM-x32\...\{DDA3C325-47B2-4730-9672-BF3771C08799}_is1) (Version: 3.1.7.8 - XMedia Recode)
XSplit Broadcaster (HKLM-x32\...\{781B7F3D-8107-4049-80C0-16FF46420184}) (Version: 1.3.1306.2101 - SplitMediaLabs)
Yamaha Steinberg USB Driver (HKLM-x32\...\InstallShield_{BD21DB89-00D4-4D6D-9614-E35A5DE792C6}) (Version: 1.7.1 - Yamaha Corporation)
Yamaha Steinberg USB Driver (Version: 1.7.1 - Yamaha Corporation) Hidden
Zeta Producer 11 11.2.3 (nur entfernen) (HKU\S-1-5-21-1306849734-3710355425-1743561091-1000\...\ZetaProducer11) (Version: 11.2.3 - Zeta Software GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000_Classes\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll No File
CustomCLSID: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000_Classes\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll No File
CustomCLSID: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000_Classes\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll No File
CustomCLSID: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000_Classes\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\ooofilt_x64.dll No File
CustomCLSID: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000_Classes\CLSID\{9387317a-548d-4b70-a88f-f699e584cad8}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\User\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000_Classes\CLSID\{AE424E85-F6DF-4910-A6A9-438797986431}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\propertyhdl_x64.dll No File
CustomCLSID: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\User\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000_Classes\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll No File
CustomCLSID: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\User\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\User\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\User\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\FileSyncApi64.dll (Microsoft Corporation)

==================== Restore Points  =========================

11-04-2015 04:38:55 Windows Update
11-04-2015 16:05:57 Removed Vegas Pro 13.0 (64-bit)
11-04-2015 16:06:54 Removed Vegas Pro 12.0 (64-bit)
11-04-2015 16:07:18 Removed Vegas Pro 13.0 (64-bit)
11-04-2015 16:11:48 Windows Update
11-04-2015 18:44:17 Removed Vegas Pro 13.0 (64-bit)
12-04-2015 03:00:10 Windows Update
12-04-2015 19:00:06 Windows-Sicherung
13-04-2015 16:03:14 Windows Update
14-04-2015 00:17:25 Windows Update
16-04-2015 11:55:39 Windows Update
17-04-2015 00:53:59 Windows Update
19-04-2015 19:00:19 Windows-Sicherung
20-04-2015 00:21:03 Windows Update
20-04-2015 20:10:15 Installed League of Legends
20-04-2015 20:11:25 DirectX wurde installiert
24-04-2015 17:19:09 Windows Update
25-04-2015 01:42:19 Removed Vegas Pro 13.0 (64-bit)
25-04-2015 02:00:33 Wiederherstellungspunkt vor Vegas Pro 13.0 (64-bit) wurde mithilfe der Problembehandlung für die Programminstallation und -deinstallation entfernt.
25-04-2015 02:01:26  Vegas Pro 13.0 (64-bit) 
25-04-2015 02:09:51 Removed Vegas Pro 12.0 (64-bit)
25-04-2015 02:11:56 Wiederherstellungspunkt vor Vegas Pro 12.0 (64-bit) wurde mithilfe der Problembehandlung für die Programminstallation und -deinstallation entfernt.
25-04-2015 02:12:33  Vegas Pro 12.0 (64-bit) 
26-04-2015 19:00:19 Windows-Sicherung
28-04-2015 10:37:04 Windows Update
03-05-2015 19:00:26 Windows-Sicherung
05-05-2015 09:50:47 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {02BF5743-89DE-40BA-AE62-E0B34C9015F1} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {15B98ADD-8FC8-43A9-9BB5-A4884334506F} - System32\Tasks\{9108575A-09BF-4145-89B5-79CE7F0E6CD6} => Firefox.exe hxxp://ui.skype.com/ui/0/6.0.0.126/de/go/help.faq.installer?LastError=112
Task: {23FD15CA-4602-4A94-BA76-C99D754425B4} - System32\Tasks\{8DAA928B-1030-432A-9C42-416F96CEE578} => pcalua.exe -a "C:\Users\User\Desktop\Minecraft Modinstaller für SDK  Waffen Mod 1.2.5\Minecraft Modinstaller für SDK  Waffen Mod 1.2.5\Installer Only Windows.exe" -d "C:\Users\User\Desktop\Minecraft Modinstaller für SDK  Waffen Mod 1.2.5\Minecraft Modinstaller für SDK  Waffen Mod 1.2.5"
Task: {255C816F-94F7-4112-BE15-65DD8E7F8F79} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {26A915CA-63F0-4B55-9D18-FCD4F7980676} - System32\Tasks\{1C980488-3565-4935-85A2-986AA7B0A0FD} => Firefox.exe hxxp://ui.skype.com/ui/0/6.0.0.126/de/abandoninstall?page=tsProgressBar
Task: {35BCF6C3-4B3B-4D90-8D08-70C6623336AE} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-02-19] (Piriform Ltd)
Task: {3BDCF50F-7994-4EA4-818B-B4874B2581AA} - System32\Tasks\{BC499D53-F375-4CAC-B4FF-1709AD9A92DD} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.0.0.126/de/abandoninstall?page=tsMain
Task: {4A39390D-5360-48D9-92F1-70D20B1D9CF5} - System32\Tasks\{F44EA89D-BF02-4A2C-87A2-413F35398BE1} => pcalua.exe -a E:\SETUP.EXE -d E:\
Task: {4ED59197-6D4E-4BC8-A848-967710D82F9B} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-12-08] (AVAST Software)
Task: {50ADDDF2-6A5F-4C3F-B799-1F114D72AF2B} - System32\Tasks\{22EE4CD2-F38B-45A8-A40A-E4D936290369} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.0.0.126/de/abandoninstall?page=tsProgressBar
Task: {512AD99A-D75F-44F9-B69E-FE32EB13D205} - System32\Tasks\{77924281-202D-4C1E-A090-50375942D578} => Firefox.exe hxxp://ui.skype.com/ui/0/6.0.0.126/de/go/help.faq.installer?LastError=112
Task: {574B9529-A9EB-4A36-B261-CB22F8CE32E6} - System32\Tasks\{E4F1F9C5-F805-43BA-AAFA-91640B7E718F} => Firefox.exe hxxp://ui.skype.com/ui/0/6.0.0.126/de/go/help.faq.installer?LastError=1603
Task: {57E66C2C-8CF1-4AA3-B01C-95DFDDF5EA9A} - System32\Tasks\{7BE0C553-5BDE-4BD8-BF8B-72094EB9C428} => pcalua.exe -a D:\DXSETUP.exe -d D:\
Task: {614A6AF3-2973-4297-8F59-25C756C47BEF} - System32\Tasks\{DEE46DCC-B79C-436E-8384-8F8B0CE94CAC} => pcalua.exe -a E:\directx\dxsetup.exe -d E:\directx
Task: {6A84735C-3013-4ABD-9E41-DCA34EAAA404} - System32\Tasks\SaveSenseLiveUpdateTaskMachineCore => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [2014-02-14] (SaveSense) <==== ATTENTION
Task: {700E631F-1A95-4036-A8E6-138E75DC89EB} - System32\Tasks\{A770B1C0-9B1E-4D6D-A1F5-C2965AA153BA} => pcalua.exe -a C:\Users\User\Desktop\wlsetup-web.exe -d C:\Users\User\Desktop
Task: {72A69B7A-0422-4ED4-9014-33EECDB7D18A} - System32\Tasks\{9A7798E5-0D4E-4D9E-9EFC-D2BAFC369595} => Firefox.exe hxxp://ui.skype.com/ui/0/6.5.0.158/de/go/help.faq.installer?LastError=1603
Task: {8FD3C211-1B2D-43AA-B7B1-99A1C0E1388B} - System32\Tasks\{5BC8F54B-C5F8-4CA9-9502-BD35632C5CCC} => pcalua.exe -a E:\Xfire_installer.exe -d E:\
Task: {961DD346-CA3C-4F49-846F-48E1270E1B6D} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)
Task: {96906180-7FED-4EF3-9827-8F9EB949271D} - System32\Tasks\{6FCEA635-1302-4AB7-A0EC-F245731197CD} => Firefox.exe hxxp://www.skype.com/go/downloading-beta?source=installer&amp;ver=5.11.0.102&amp;LastError=-9
Task: {AFEB50BB-AF20-4F91-9442-B99F42C2830E} - System32\Tasks\{C7EAE540-73C5-44AC-9ECB-9BF282F55D95} => pcalua.exe -a D:\Xfire\uninst.exe
Task: {B37B6D67-162C-4957-9F36-BCCB4FB4B4F9} - System32\Tasks\{07BBC16B-CA33-4CAB-A044-A3AD62611710} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{FF39FC01-819B-42E4-AE49-1968AF12DDD4}\setup.exe" -c -runfromtemp -l0x0007 -removeonly
Task: {B7EE71C6-D226-47B9-BD14-981C02195EF8} - System32\Tasks\SaveSenseLiveUpdateTaskMachineUA => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [2014-02-14] (SaveSense) <==== ATTENTION
Task: {BE327020-B5F5-4537-952E-6E9440232556} - System32\Tasks\{B4A14636-E3CD-473D-A697-9B28A068CE48} => Firefox.exe hxxp://www.skype.com/go/downloading-beta?source=installer&amp;ver=5.11.0.102&amp;LastError=-9
Task: {C3FEF1BC-4FF9-487E-8E6D-44EAA4B77728} - System32\Tasks\{A5865682-E62C-4E0E-BE95-CE3A0671B206} => Firefox.exe hxxp://ui.skype.com/ui/0/6.3.0.105/de/go/help.faq.installer?LastError=1603
Task: {C79A20C4-426A-4E2F-B5B9-A4F3E5460869} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-14] (Adobe Systems Incorporated)
Task: {CEC02B70-CB49-4E10-9073-019E5F417388} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe
Task: {DBBE9B0C-8B58-4337-A27A-30A7973F4792} - System32\Tasks\SaveSense => C:\Users\User\AppData\Roaming\SAVESE~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {ED3E66A4-A42C-4BDA-AC72-9D2A21B3AFA7} - System32\Tasks\AdobeAAMUpdater-1.0-User-PC-User => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-02-27] (Adobe Systems Incorporated)
Task: {F64AB2AA-3947-480F-AD69-6B923284222D} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\SaveSense.job => C:\Users\User\AppData\Roaming\SAVESE~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineCore.job => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe <==== ATTENTION
Task: C:\Windows\Tasks\SaveSenseLiveUpdateTaskMachineUA.job => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) ==============

2013-07-12 16:24 - 2014-03-04 15:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-04-08 16:31 - 2015-04-08 16:31 - 00118784 _____ () D:\DiskBoss\bin\diskbsa.exe
2014-09-04 15:06 - 2014-09-04 15:06 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-03-20 11:24 - 2014-03-20 11:24 - 00667808 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll
2013-05-18 16:30 - 2007-09-02 13:58 - 00495616 _____ () D:\RocketDock\RocketDock.exe
2015-05-05 23:09 - 2015-05-05 23:09 - 02926592 _____ () C:\Program Files\AVAST Software\Avast\defs\15050501\algo.dll
2015-05-06 12:50 - 2015-05-06 12:50 - 02926592 _____ () C:\Program Files\AVAST Software\Avast\defs\15050600\algo.dll
2014-02-06 01:52 - 2014-02-06 01:52 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-06 01:52 - 2014-02-06 01:52 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2015-04-08 16:22 - 2015-04-08 16:22 - 02752512 _____ () D:\DiskBoss\bin\libdbs.dll
2015-04-08 16:19 - 2015-04-08 16:19 - 00724992 _____ () D:\DiskBoss\bin\libpal.dll
2014-12-08 22:23 - 2014-12-08 22:23 - 38562088 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-10-16 15:34 - 2014-10-16 15:34 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\93182e9779b8be0f688fd0784df6d7fb\IsdiInterop.ni.dll
2012-06-15 17:38 - 2010-11-05 23:50 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2013-05-18 16:30 - 2007-09-02 13:57 - 00069632 _____ () D:\RocketDock\RocketDock.dll
2014-12-09 16:31 - 2015-03-10 08:37 - 00775680 _____ () F:\Steam\SDL2.dll
2015-01-20 23:46 - 2014-12-02 02:29 - 05002752 _____ () F:\Steam\v8.dll
2015-01-20 23:46 - 2014-12-02 02:29 - 01612800 _____ () F:\Steam\icui18n.dll
2015-01-20 23:46 - 2014-12-02 02:29 - 01210368 _____ () F:\Steam\icuuc.dll
2014-12-09 16:31 - 2015-04-14 01:44 - 02371776 _____ () F:\Steam\video.dll
2014-12-09 16:31 - 2014-12-01 23:31 - 02396672 _____ () F:\Steam\libavcodec-56.dll
2014-12-09 16:31 - 2014-12-01 23:31 - 00442880 _____ () F:\Steam\libavutil-54.dll
2014-12-09 16:31 - 2014-12-01 23:31 - 00479744 _____ () F:\Steam\libavformat-56.dll
2014-12-09 16:31 - 2014-12-01 23:31 - 00332800 _____ () F:\Steam\libavresample-2.dll
2014-12-09 16:31 - 2014-12-01 23:31 - 00485888 _____ () F:\Steam\libswscale-3.dll
2014-12-09 16:34 - 2015-04-14 01:44 - 00702656 _____ () F:\Steam\bin\chromehtml.DLL
2014-12-09 16:34 - 2015-02-25 03:58 - 34641288 _____ () F:\Steam\bin\libcef.dll
2014-12-09 16:34 - 2015-02-25 03:58 - 01709960 _____ () F:\Steam\bin\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\Temp:A1EDB939

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-21-1306849734-3710355425-1743561091-1000\...\sony.com -> sony.com


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1306849734-3710355425-1743561091-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\User\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

FirewallRules: [TCP Query User{80786454-F7C4-4A99-A7C3-4C534D1B0B20}D:\steam\steam.exe] => (Allow) D:\steam\steam.exe
FirewallRules: [UDP Query User{B694CC10-1809-41B9-A9DF-65AE3DEA2331}D:\steam\steam.exe] => (Allow) D:\steam\steam.exe
FirewallRules: [TCP Query User{A6876FE7-0217-42C7-955B-F4828E167AB2}D:\steam\steamapps\common\sourcefilmmaker\game\sfm.exe] => (Allow) D:\steam\steamapps\common\sourcefilmmaker\game\sfm.exe
FirewallRules: [UDP Query User{62744FB3-B0A2-4B66-B670-FE2C670E8977}D:\steam\steamapps\common\sourcefilmmaker\game\sfm.exe] => (Allow) D:\steam\steamapps\common\sourcefilmmaker\game\sfm.exe
FirewallRules: [{B4BA7DFB-DA69-4391-9B21-381BD2850D89}] => (Allow) D:\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{1A677552-1F2B-48AE-8BB7-B92DD2AB9CC7}] => (Allow) D:\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [TCP Query User{D61CB2D2-EB73-43AC-AAF8-638F93FFA05A}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{572C458B-5921-4CF2-9EB6-E5812A4FE887}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{EBC83D94-F609-49FC-8F28-08DF4FF3B187}C:\users\user\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\user\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{7D8614FD-BD8B-44D7-B468-014A16D2C5EB}C:\users\user\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\user\appdata\local\akamai\netsession_win.exe
FirewallRules: [{59FA9E3B-E665-42F5-AC9F-3A22F5C2FEEB}] => (Allow) D:\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{BEE314DE-D983-4B1A-83B8-80564F487745}] => (Allow) D:\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{37D8B392-4A6B-4D11-900E-5AC87611FB28}] => (Allow) D:\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{1EC0E655-3B33-41A3-9F59-10111DE2B8E2}] => (Allow) D:\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{007EC83B-16FE-4D7C-9734-3EFF35E57CD5}] => (Allow) D:\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{3FBEFCD5-8A34-4202-8D27-D39FCABA09A2}] => (Allow) D:\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [TCP Query User{6B1FC136-C997-4C93-BFFA-7168509AA5A7}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{CA8CFF6F-B7E1-4EF4-ABA2-FC64B6E654D8}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{49FC79FA-43AA-45C3-B2AA-606B09541DA0}] => (Allow) D:\Steam\SteamApps\common\SourceFilmmaker\game\bin\qsdklauncher.exe
FirewallRules: [{AEF297E7-1448-48FA-BB7F-5860CDA8A27C}] => (Allow) D:\Steam\SteamApps\common\SourceFilmmaker\game\bin\qsdklauncher.exe
FirewallRules: [{D301F96F-25AD-4984-93EC-9D6D13F487EF}] => (Allow) D:\Steam\Steam.exe
FirewallRules: [{E6F82C63-0718-4629-933B-787F92D0E230}] => (Allow) D:\Steam\Steam.exe
FirewallRules: [TCP Query User{3AEADEED-1186-420A-8321-56D52F2823F9}C:\users\user\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\user\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{EC98AF0B-0965-471C-AD3D-68F40B2B3848}C:\users\user\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\user\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [{134654D2-5F5E-4C75-8D53-FD7981627849}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{FB7B20C9-D627-4C56-AD19-5A6CC11FFAE1}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{FA9CB461-BF53-42CA-A154-8C75412552EA}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{BBDCB9A2-8ED4-4B65-AEB7-DE6DC6B4AF6F}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [TCP Query User{0E3BEBCF-6C89-4BE4-A893-51E8ED515C5E}C:\program files (x86)\thq\dawn of war\w40kwa.exe] => (Block) C:\program files (x86)\thq\dawn of war\w40kwa.exe
FirewallRules: [UDP Query User{8431B5C6-1926-49B2-9757-DB3075C2F6BF}C:\program files (x86)\thq\dawn of war\w40kwa.exe] => (Block) C:\program files (x86)\thq\dawn of war\w40kwa.exe
FirewallRules: [TCP Query User{66613581-F768-44FE-A29C-7200F0D94A75}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{3110BE15-EA3C-44FE-A13B-089480F6152D}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{E8B1D1B6-2E6D-4090-AC92-4572FC83355B}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{91A5AE6F-B08A-4B1C-8223-6EEA739DB300}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{FA838E6E-D6DE-4F6E-A9BB-81E388286969}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{C21BDFED-572B-41DA-B80B-5BB80F488916}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{FCDB6980-DAE9-4066-B233-4AC16D64D0AC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{81886CD1-BD85-4ACD-825C-5955A83823D1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{5484CE07-7C89-4082-805D-24526E8A5216}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{BD9E29B8-9800-404F-ABEF-FCACC1919327}] => (Allow) LPort=2869
FirewallRules: [{B6E132C7-0CA8-4E9F-AA64-CDB3F2C2D864}] => (Allow) LPort=1900
FirewallRules: [{68B31F6C-932E-4D1F-BE1E-9C3217132998}] => (Allow) D:\Steam\SteamApps\common\The Forest\TheForest.exe
FirewallRules: [{E99C5C0C-45FD-4D8B-8F15-01266C3A0B49}] => (Allow) D:\Steam\SteamApps\common\The Forest\TheForest.exe
FirewallRules: [TCP Query User{C599DF19-CCCD-4693-AB2A-F55E0861CE63}D:\desktop\luni_test_v3\char\luni_test.exe] => (Allow) D:\desktop\luni_test_v3\char\luni_test.exe
FirewallRules: [UDP Query User{A1502137-3C67-4435-968B-B5E7425C5A55}D:\desktop\luni_test_v3\char\luni_test.exe] => (Allow) D:\desktop\luni_test_v3\char\luni_test.exe
FirewallRules: [TCP Query User{83BEDFD9-ECFB-46D8-AB5A-B0DD115CD704}D:\desktop\luni_test_v3\auth\luni_test.exe] => (Allow) D:\desktop\luni_test_v3\auth\luni_test.exe
FirewallRules: [UDP Query User{4CD8C4A7-5F4D-45BF-B1ED-ABF2E634C692}D:\desktop\luni_test_v3\auth\luni_test.exe] => (Allow) D:\desktop\luni_test_v3\auth\luni_test.exe
FirewallRules: [TCP Query User{EE1FF62E-9F6A-448D-AFE5-0E9BBD0D477C}D:\desktop\luni_test_v3\world\luni_test.exe] => (Allow) D:\desktop\luni_test_v3\world\luni_test.exe
FirewallRules: [UDP Query User{54AD15BF-55FC-4ACA-B3C5-F29C1F16B574}D:\desktop\luni_test_v3\world\luni_test.exe] => (Allow) D:\desktop\luni_test_v3\world\luni_test.exe
FirewallRules: [{8C3F9432-A270-4773-8C29-C2F68EED2A97}] => (Allow) D:\Steam\SteamApps\common\aceofspades\aos.exe
FirewallRules: [{B2D7C2B9-A476-4EDD-85E8-B0A3037221DC}] => (Allow) D:\Steam\SteamApps\common\aceofspades\aos.exe
FirewallRules: [{6184B52A-DC1A-44C9-85BC-34D0214A8FD4}] => (Allow) D:\Steam\bin\steamwebhelper.exe
FirewallRules: [{01074A97-96B9-4392-963E-FE4621896D9B}] => (Allow) D:\Steam\bin\steamwebhelper.exe
FirewallRules: [{5A12F411-74BF-41C6-81AC-CD9C94935517}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{A56374FA-904B-448D-A4EE-4256D34E1329}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{B1B9AF44-0251-4CAF-96F4-BAB1521D116D}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{147612B3-B970-4391-9A6A-7B58BB957C78}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{19C36E9B-4C21-4718-992D-D1960B0B4A87}] => (Allow) D:\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{22A9358B-A2B3-4775-A86F-DD9A76EA4459}] => (Allow) D:\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{FD0339CE-DDCD-42EE-B50B-4853F8537515}] => (Allow) D:\Steam\SteamApps\common\LEGO Lord of the Rings\LEGOLOTR.exe
FirewallRules: [{1BB44536-2F8C-44B0-BCCD-1681E7588F4C}] => (Allow) D:\Steam\SteamApps\common\LEGO Lord of the Rings\LEGOLOTR.exe
FirewallRules: [{4B22AEA1-F568-4E55-8AC9-2560A46A487E}] => (Allow) D:\Steam\SteamApps\common\Fuse\Code\Build\Output\bin\Release\Fuse.exe
FirewallRules: [{287957F3-A1F0-4439-B7ED-C6900B87E83C}] => (Allow) D:\Steam\SteamApps\common\Fuse\Code\Build\Output\bin\Release\Fuse.exe
FirewallRules: [{30D9C44C-D233-43AB-B11D-4EF75C2DC1F2}] => (Allow) D:\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{09CDA8A0-49F3-4C8D-8ED1-E336A94552C8}] => (Allow) D:\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{F3C70085-1B1F-4CDC-9C89-77DEC0129965}] => (Allow) F:\Steam\Steam.exe
FirewallRules: [{A1506F29-D519-4F08-9E67-059ADF83A94B}] => (Allow) F:\Steam\Steam.exe
FirewallRules: [{384D598B-887E-4AC9-9440-39C66948FF80}] => (Allow) F:\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{0FA889B8-E861-4065-A8A1-E6B31CEC5A23}] => (Allow) F:\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{1133A4E3-3709-4F97-8CE0-53513FBA00C4}] => (Allow) F:\Steam\SteamApps\common\The Forest\TheForest.exe
FirewallRules: [{7C34E557-F947-4164-BE5E-63E19172495C}] => (Allow) F:\Steam\SteamApps\common\The Forest\TheForest.exe
FirewallRules: [TCP Query User{7D3C1E1B-66F0-4CF3-ADB2-9BA4256F0235}F:\steam\steamapps\common\garrysmod\hl2.exe] => (Block) F:\steam\steamapps\common\garrysmod\hl2.exe
FirewallRules: [UDP Query User{8FA58D9A-AAA9-482D-93AD-5309448D28FD}F:\steam\steamapps\common\garrysmod\hl2.exe] => (Block) F:\steam\steamapps\common\garrysmod\hl2.exe
FirewallRules: [{4D83F2CB-CE41-4C7C-B67C-1260C1CAB2EE}] => (Allow) F:\Der Herr der Ringe Vogelding\game.dat
FirewallRules: [{F7B3BF2C-B975-4C73-B5D6-5307EC2B9788}] => (Allow) F:\Der Herr der Ringe Vogelding\game.dat
FirewallRules: [{87AE59EA-8715-4A35-847B-F3387C73BC21}] => (Allow) F:\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{9D92CEDB-751B-4037-9159-7BD99E4A5465}] => (Allow) F:\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [TCP Query User{A796D97B-60CE-408C-BC7E-B5940F81F786}F:\iclonemocapdevice.exe] => (Block) F:\iclonemocapdevice.exe
FirewallRules: [UDP Query User{6DC8CE30-FC2B-4B75-BEB1-ABB7ED01DD3D}F:\iclonemocapdevice.exe] => (Block) F:\iclonemocapdevice.exe
FirewallRules: [{2AB0DB92-73F5-47E1-A59E-0B644679D42F}] => (Allow) F:\Steam\SteamApps\common\Warhammer 40,000 Space Marine\SpaceMarine.exe
FirewallRules: [{42E90404-0C53-4336-89CC-3E790C8C19FB}] => (Allow) F:\Steam\SteamApps\common\Warhammer 40,000 Space Marine\SpaceMarine.exe
FirewallRules: [TCP Query User{7032E987-B55E-4EA1-A413-748B49EA8CEF}D:\desktop\spiele\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) D:\desktop\spiele\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{441A5853-A5E2-471E-AD49-3C218D9C40E1}D:\desktop\spiele\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) D:\desktop\spiele\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{64AC3BE1-1FBD-49DF-B603-60108ED2EA50}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D72122B2-CBA0-4BED-961F-5F3EA8AAE05F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{60F5568A-F88A-4841-A301-A8A8669CAF98}D:\skype\phone\skype.exe] => (Allow) D:\skype\phone\skype.exe
FirewallRules: [UDP Query User{F00E8449-7863-48C9-82AC-32E12CC781E6}D:\skype\phone\skype.exe] => (Allow) D:\skype\phone\skype.exe
FirewallRules: [{857FC203-1643-454C-A1BA-B1382FC9CF5E}] => (Allow) F:\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{BE625315-4371-4060-A041-CED30FE50CA5}] => (Allow) F:\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [TCP Query User{A7BA164B-D0AE-4F8B-BAF0-0C8EC4DD562B}F:\thq\dawn of war dark crusade\dawn of war - dark crusade\darkcrusade.exe] => (Allow) F:\thq\dawn of war dark crusade\dawn of war - dark crusade\darkcrusade.exe
FirewallRules: [UDP Query User{80565C10-F08D-4202-8783-CC8B137B0713}F:\thq\dawn of war dark crusade\dawn of war - dark crusade\darkcrusade.exe] => (Allow) F:\thq\dawn of war dark crusade\dawn of war - dark crusade\darkcrusade.exe
FirewallRules: [{8273FAE8-9617-45DF-8B80-EB23E1BB591B}] => (Allow) F:\Steam\SteamApps\common\Portal 2\portal2.exe
FirewallRules: [{D5923787-7B22-413A-BD02-6F61376FCDF3}] => (Allow) F:\Steam\SteamApps\common\Portal 2\portal2.exe
FirewallRules: [{33203DFB-8ED7-4502-8C89-A3680DF0FD65}] => (Allow) F:\Steam\SteamApps\common\Dawn of War II - Retribution\DOW2.exe
FirewallRules: [{586EE0DF-9915-4916-8DBB-D39D5F0053BB}] => (Allow) F:\Steam\SteamApps\common\Dawn of War II - Retribution\DOW2.exe
FirewallRules: [{D9CC9132-DFD3-4256-A521-45CFA613E42D}] => (Allow) F:\Steam\SteamApps\common\Fuse\Code\Build\Output\bin\Release\Fuse.exe
FirewallRules: [{C07A52B5-2D06-4183-A23A-956D46068D0F}] => (Allow) F:\Steam\SteamApps\common\Fuse\Code\Build\Output\bin\Release\Fuse.exe
FirewallRules: [{87B84F4B-054F-4F0D-8141-137DE0987057}] => (Allow) F:\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{B8AF6B17-6446-4FAF-B3A7-F6BAEA0B6901}] => (Allow) F:\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{4B1E3F75-3708-4145-A1F6-80247DFA3ACA}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{A5FACA6C-7E66-4AEE-B749-EB28A828850D}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{DC7266E6-41C3-4373-9456-DD567EF06A2B}] => (Allow) F:\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{0E17583A-4C77-4875-AC79-0A5FEDBF60A2}] => (Allow) F:\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{2EF4CE8E-5613-45B7-9FCD-C4452E327575}] => (Allow) F:\Steam\SteamApps\common\SourceFilmmaker\game\sfm.exe
FirewallRules: [{330A7CF6-BA12-403C-97E3-F31C7AE6BF2A}] => (Allow) F:\Steam\SteamApps\common\SourceFilmmaker\game\sfm.exe
FirewallRules: [{1B8DBBBF-C4CA-4681-BB31-12049B645DD9}] => (Allow) F:\Steam\SteamApps\common\SourceFilmmaker\game\bin\qsdklauncher.exe
FirewallRules: [{6F4EF713-7A99-4138-AF98-FA696C241633}] => (Allow) F:\Steam\SteamApps\common\SourceFilmmaker\game\bin\qsdklauncher.exe
FirewallRules: [{8001B4C3-7C07-456A-9504-9DFAF46575E0}] => (Allow) F:\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{2175A5AF-B5E5-4486-80E9-361F6000E739}] => (Allow) F:\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{38A02A61-12DB-4772-A6CE-DE94F420D086}] => (Allow) F:\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [{02AE2BEE-3FE2-45A6-9295-F48D0B72F6F5}] => (Allow) F:\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [{780E9818-6076-488A-8A84-9172C0D60817}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{E7FC7305-E481-471D-9154-2DFAF76CD981}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{5BC9D792-3FBB-4858-B858-8846647BC2BB}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{EE4D50D7-6D80-40C8-953E-50DE4F66452C}C:\program files (x86)\pando networks\media booster\pmb.exe] => (Allow) C:\program files (x86)\pando networks\media booster\pmb.exe
FirewallRules: [UDP Query User{0D18855E-7FBC-4E43-950A-B6DFD6C5390E}C:\program files (x86)\pando networks\media booster\pmb.exe] => (Allow) C:\program files (x86)\pando networks\media booster\pmb.exe
FirewallRules: [{299B2EB3-A296-40D3-882C-490F81E04D2A}] => (Block) C:\program files (x86)\pando networks\media booster\pmb.exe
FirewallRules: [{FC0D00D8-A575-4551-ABBC-255FA6B0E62B}] => (Block) C:\program files (x86)\pando networks\media booster\pmb.exe

==================== Faulty Device Manager Devices =============

Name: RM-825|Nokia Lumia 820
Description: RM-825|Nokia Lumia 820
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: RM-825|Nokia Lumia 820
Description: RM-825|Nokia Lumia 820
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Nokia Lumia 820 (RM-825)
Description: Nokia Lumia 820 (RM-825)
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/06/2015 00:52:25 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Der Index kann nicht initialisiert werden.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (05/06/2015 00:52:25 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Die Anwendung kann nicht initialisiert werden.

Kontext: Windows Anwendung


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (05/06/2015 00:52:25 PM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (05/06/2015 00:52:25 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)

Error: (05/06/2015 00:52:22 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (05/06/2015 00:52:22 PM) (Source: Windows Search Service) (EventID: 9002) (User: )
Description: Die Eigenschaftenspeicherdaten können von Windows Search nicht geladen werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800) (0xc0041800)

Error: (05/06/2015 00:52:22 PM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (05/06/2015 00:52:21 PM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=4700} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (05/06/2015 00:52:21 PM) (Source: Windows Search Service) (EventID: 9000) (User: )
Description: Der Jet-Eigenschaftenspeicher kann von Windows Search nicht geöffnet werden.


Details:
	0x%08x (0xc0041800 - Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800))

Error: (05/06/2015 00:52:19 PM) (Source: ESENT) (EventID: 455) (User: )
Description: Windows (3300) Windows: Fehler -1811 beim Öffnen von Protokolldatei C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS002A0.log.


System errors:
=============
Error: (05/06/2015 00:53:13 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%-2140993535

Error: (05/06/2015 00:53:13 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: 
%%-2140993535

Error: (05/06/2015 00:53:13 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%-2140993535

Error: (05/06/2015 00:53:13 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: 
%%-2140993535

Error: (05/06/2015 00:53:13 PM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: 0x80630801

Error: (05/06/2015 00:53:13 PM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: 0x80630801

Error: (05/06/2015 00:53:05 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%-2140993535

Error: (05/06/2015 00:53:05 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: 
%%-2140993535

Error: (05/06/2015 00:53:05 PM) (Source: PNRPSvc) (EventID: 102) (User: )
Description: 0x80630801

Error: (05/06/2015 00:52:25 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.


Microsoft Office Sessions:
=========================
Error: (05/06/2015 00:52:25 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: 
Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (05/06/2015 00:52:25 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Kontext: Windows Anwendung


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (05/06/2015 00:52:25 PM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (05/06/2015 00:52:25 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)
Search.TripoliIndexer

Error: (05/06/2015 00:52:22 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
Search.JetPropStore

Error: (05/06/2015 00:52:22 PM) (Source: Windows Search Service) (EventID: 9002) (User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800) (0xc0041800)

Error: (05/06/2015 00:52:22 PM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: 
Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
The catalog is corrupt

Error: (05/06/2015 00:52:21 PM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: 
Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
4700

Error: (05/06/2015 00:52:21 PM) (Source: Windows Search Service) (EventID: 9000) (User: )
Description: 
Details:
	0x%08x (0xc0041800 - Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800))

Error: (05/06/2015 00:52:19 PM) (Source: ESENT) (EventID: 455) (User: )
Description: Windows3300Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS002A0.log-1811


CodeIntegrity Errors:
===================================
  Date: 2013-06-16 00:35:34.398
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\shell32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-15 23:58:05.621
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\shell32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-15 23:11:22.839
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\shell32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-15 12:26:58.341
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\shell32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-15 12:24:51.628
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\shell32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-15 12:21:19.446
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\shell32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-15 12:08:21.131
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\shell32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-15 11:47:02.894
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\shell32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-15 10:34:02.657
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\shell32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-15 10:04:06.629
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\shell32.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i3-2120 CPU @ 3.30GHz
Percentage of memory in use: 49%
Total physical RAM: 4079.42 MB
Available physical RAM: 2052.21 MB
Total Pagefile: 5715.29 MB
Available Pagefile: 2972.35 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:99.9 GB) (Free:0.5 GB) NTFS
Drive d: (Daten) (Fixed) (Total:365.76 GB) (Free:105.59 GB) NTFS
Drive e: (LOTRBFME2) (CDROM) (Total:5.68 GB) (Free:0 GB) UDF
Drive f: (Daten 2) (Fixed) (Total:931.51 GB) (Free:721.69 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 6D04A750)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=99.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=365.8 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 6464DA67)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== End Of Log ============================

schrauber · 08.05.2015, 09:00

Lade Dir bitte von hier

Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.

Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
Klicke auf Optionen und wähle als Sprache Deutsch.
Suche im Uninstallerfeld nach den Programmen:

Claro Chrome Toolbar

FileParade bundle uninstaller

FilesFrog Update Checker

Iminent

Optimizer Pro v3.0

PileFile reminder

SupTab

Unitech LLC toolbar

Web-Cake 3.00
Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
Wähle anschließend den Modus "Moderat" aus.
Reste löschen:
Klicke auf dann auf und dann auf .

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

MrTrololol · 20.05.2015, 08:01

PileFile reminder und Optimizer Pro v3.0 konnte er nicht "vollständig" deinstallieren und Web-Cake 3.00 und Iminent hat er in den Uninstallerfeld nicht gefunden. Dazu kommt das meine C Platte immer mehr Speicherplatz verloren hat als ich etwas davon deinstalliert habe! Ich erbitte um erneuten Rat!

schrauber · 20.05.2015, 20:30

Deinstalliere das was geht, dann:

TreeSize Free Download
Bitte TreeSize laden und laufen lassen. Wenn das Tool mit der Analyse fertig ist bitte einen Screenshot davon machen und hier posten.

MrTrololol · 23.07.2015, 17:05

Sorry das das so lang gedauert hat, doch das Problem ist für kurze Zeit verschwunden doch jetzt hab ich es wieder und nur noch 2 GB frei.

schrauber · 24.07.2015, 06:53

Systemwiederherstellung abschalten und wieder anschalten, dann so einstellen dass nur 5% Speicher genutzt werden, dann sinds gleich 25GB mehr PLatz.

Dann Combofix.

C Platte wird immer voller, auch wenn ich was lösche! (Trojaner,Virus????)

Plagegeister aller Art und deren Bekämpfung: C Platte wird immer voller, auch wenn ich was lösche! (Trojaner,Virus????)