Windows 8 Proxyserver werden nach 4-5 Stunden automatisch auf LAN gesetzt

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 20:13 on 04/06/2015 (Julian)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:03-06-2015
Ran by Julian (administrator) on DOPPELKRONE on 04-06-2015 20:14:28
Running from C:\Users\Julian\Downloads
Loaded Profiles: Julian (Available Profiles: Julian)
Platform: Windows 8 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 10 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
() C:\AMD\amdacpusrsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Hewlett-Packard ) C:\Program Files\IDT\WDM\Beats64.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\CSP\1.3.374.0\McCSPServiceHost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(McAfee, Inc.) C:\Program Files\McAfee\MAT\McPvTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(McAfee, Inc.) C:\Program Files\McAfee.com\Agent\mcupdate.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [BeatsOSDApp] => C:\Program Files\IDT\WDM\beats64.exe [37888 2012-09-19] (Hewlett-Packard )
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1425408 2012-09-19] (IDT, Inc.)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-02] (CyberLink Corp.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-04-17] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe [643064 2015-02-09] (McAfee, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
HKU\S-1-5-21-405010376-2912808974-240719208-1001\...\Run: [HydraVisionDesktopManager] => C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [389120 2013-12-06] (AMD)
HKU\S-1-5-21-405010376-2912808974-240719208-1001\...\Run: [mapdisk] => C:\Users\Julian\Documents\ArmAWork\mapdisk.bat [49 2015-05-10] ()
HKU\S-1-5-21-405010376-2912808974-240719208-1001\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7799576 2015-05-15] (SUPERAntiSpyware)
HKU\S-1-5-21-405010376-2912808974-240719208-1001\...\MountPoints2: {a9018ad2-0863-11e5-be82-bc5ff4f88168} - "F:\autorun.exe" 

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPDSK13/4
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPDSK13/4
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPDSK13/4
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPDSK13/4
HKU\S-1-5-21-405010376-2912808974-240719208-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPDSK13/4
HKU\S-1-5-21-405010376-2912808974-240719208-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPDSK13/4
SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM -> {F60A5872-8C5B-4A34-AB92-2B79C529D769} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF
SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM-x32 -> {F60A5872-8C5B-4A34-AB92-2B79C529D769} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-405010376-2912808974-240719208-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKU\S-1-5-21-405010376-2912808974-240719208-1001 -> {F60A5872-8C5B-4A34-AB92-2B79C529D769} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-05-14] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-05-14] (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2012-07-09] (Hewlett-Packard)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2015-05-25] (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2015-05-25] (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2015-05-25] (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2015-05-25] (McAfee, Inc.)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\McAfee\MSC\McSnIePl64.dll [2015-02-27] (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\MSC\McSnIePl.dll [2015-02-27] (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-05-08] ()
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2015-01-13] (EA Digital Illusions CE AB)
FF Plugin: @esn/npbattlelog,version=2.7.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.0\npbattlelogx64.dll [2015-04-23] (EA Digital Illusions CE AB)
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2015-02-27] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-05-08] ()
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2015-01-13] (EA Digital Illusions CE AB)
FF Plugin-x32: @esn/npbattlelog,version=2.7.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.0\npbattlelog.dll [2015-04-23] (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-07-18] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-07-18] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-05-14] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-05-14] (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2015-02-27] ()
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-19] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-19] (Google Inc.)
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee WebAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2015-05-11]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2015-05-11]

Chrome: 
=======
CHR Profile: C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-05-03]
CHR Extension: (YouTube) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-05-03]
CHR Extension: (Adblock Plus) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-05-03]
CHR Extension: (Google Search) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-05-03]
CHR Extension: (AdBlock) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-05-03]
CHR Extension: (Bookmark Manager) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-03]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-03]
CHR Extension: (Into The Mist) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgihmkgobaljfehcadcckdggpeojaadh [2015-05-03]
CHR Extension: (Google Wallet) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-03]
CHR Extension: (Gmail) - C:\Users\Julian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-03]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-06-02]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-06-02]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-07-23] (SUPERAntiSpyware.com)
R2 amdacpusrsvc; C:\AMD\amdacpusrsvc.exe [94208 2013-12-06] () [File not signed]
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [441216 2015-05-06] ()
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [85504 2012-08-15] (Hewlett-Packard Company) [File not signed]
R2 HPConnectedRemote; c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe [35232 2012-08-29] (Hewlett-Packard)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [155368 2015-05-25] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [562200 2015-02-27] (McAfee, Inc.)
R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.3.374.0\McCSPServiceHost.exe [422632 2015-01-22] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [601864 2015-02-27] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1050952 2014-11-06] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [221832 2014-10-01] (McAfee, Inc.)
R2 mfevtp; C:\WINDOWS\system32\mfevtps.exe [189920 2014-10-01] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1997168 2015-06-03] (Electronic Arts)
R2 PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [76152 2015-05-05] ()
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76152 2015-06-01] ()
S2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [321536 2012-09-19] (IDT, Inc.) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [15440 2012-07-26] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 amdacpksd; C:\WINDOWS\system32\drivers\amdacpksd.sys [274656 2014-04-18] (Advanced Micro Devices)
S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [215040 2013-12-19] (Advanced Micro Devices)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72136 2014-10-01] (McAfee, Inc.)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-04-14] (Malwarebytes Corporation)
R2 McPvDrv; C:\Windows\system32\drivers\McPvDrv.sys [76064 2014-09-11] (McAfee, Inc.)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181584 2014-10-01] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313680 2014-10-01] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70608 2014-10-01] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [526360 2014-10-01] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786304 2014-10-01] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [447440 2014-09-19] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96600 2014-09-19] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348560 2014-10-01] (McAfee, Inc.)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
S3 x323e501; C:\Windows\SysWOW64\drivers\x323e501.sys [44896 2014-06-12] (Your Corporation) [File not signed]
R3 x643e501; C:\Windows\System32\drivers\x643e501.sys [68832 2014-06-12] (Your Corporation) [File not signed]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-04 20:14 - 2015-06-04 20:15 - 00020191 _____ C:\Users\Julian\Downloads\FRST.txt
2015-06-04 20:14 - 2015-06-04 20:14 - 02108928 _____ (Farbar) C:\Users\Julian\Downloads\FRST64.exe
2015-06-04 20:14 - 2015-06-04 20:14 - 00000000 ____D C:\FRST
2015-06-04 20:13 - 2015-06-04 20:13 - 00000474 _____ C:\Users\Julian\Downloads\defogger_disable.log
2015-06-04 20:13 - 2015-06-04 20:13 - 00000000 _____ C:\Users\Julian\defogger_reenable
2015-06-04 20:12 - 2015-06-04 20:12 - 00050477 _____ C:\Users\Julian\Downloads\Defogger.exe
2015-06-04 20:08 - 2015-06-04 20:08 - 00000117 _____ C:\WINDOWS\system32\netcfg-28468.txt
2015-06-04 20:06 - 2015-06-04 20:06 - 00000117 _____ C:\WINDOWS\system32\netcfg-85062234.txt
2015-06-04 19:58 - 2015-06-04 20:06 - 00000000 ____D C:\AdwCleaner
2015-06-04 07:14 - 2015-06-04 07:14 - 00000117 _____ C:\WINDOWS\system32\netcfg-38663796.txt
2015-06-04 07:14 - 2015-06-04 07:14 - 00000117 _____ C:\WINDOWS\system32\netcfg-38663000.txt
2015-06-03 20:30 - 2015-06-03 20:30 - 00000117 _____ C:\WINDOWS\system32\netcfg-26656.txt
2015-06-03 20:27 - 2015-06-03 20:27 - 00000117 _____ C:\WINDOWS\system32\netcfg-521687.txt
2015-06-03 20:19 - 2015-06-03 20:19 - 00000117 _____ C:\WINDOWS\system32\netcfg-35453.txt
2015-06-03 20:18 - 2015-06-03 20:18 - 00000117 _____ C:\WINDOWS\system32\netcfg-82453265.txt
2015-06-03 14:55 - 2015-06-03 14:55 - 00000117 _____ C:\WINDOWS\system32\netcfg-63067125.txt
2015-06-03 14:55 - 2015-06-03 14:55 - 00000117 _____ C:\WINDOWS\system32\netcfg-63065796.txt
2015-06-03 07:14 - 2015-06-03 07:14 - 00000117 _____ C:\WINDOWS\system32\netcfg-35037453.txt
2015-06-03 07:14 - 2015-06-03 07:14 - 00000117 _____ C:\WINDOWS\system32\netcfg-35036140.txt
2015-06-02 21:31 - 2015-06-02 21:31 - 00000117 _____ C:\WINDOWS\system32\netcfg-34265.txt
2015-06-02 21:00 - 2015-06-02 21:00 - 00000117 _____ C:\WINDOWS\system32\netcfg-50009765.txt
2015-06-02 20:44 - 2015-06-02 20:44 - 00000117 _____ C:\WINDOWS\system32\netcfg-49050203.txt
2015-06-02 20:44 - 2015-06-02 20:44 - 00000117 _____ C:\WINDOWS\system32\netcfg-49044109.txt
2015-06-02 20:40 - 2015-06-02 20:40 - 00000117 _____ C:\WINDOWS\system32\netcfg-48765671.txt
2015-06-02 20:36 - 2015-06-02 20:36 - 00000117 _____ C:\WINDOWS\system32\netcfg-48579062.txt
2015-06-02 13:59 - 2015-06-02 13:59 - 00002426 _____ C:\Users\Julian\Documents\PRMumbleCertificateBackup.p12
2015-06-02 13:59 - 2015-06-02 13:59 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Project Reality
2015-06-02 13:48 - 2015-06-02 13:48 - 00007334 _____ C:\Users\Julian\Desktop\21 Guns.odt
2015-06-02 07:09 - 2015-06-02 07:09 - 02231296 _____ C:\Users\Julian\Downloads\adwcleaner_4.206.exe
2015-06-02 07:08 - 2015-06-02 07:08 - 00000117 _____ C:\WINDOWS\system32\netcfg-86015.txt
2015-06-01 22:04 - 2015-06-01 22:04 - 00000117 _____ C:\WINDOWS\system32\netcfg-2408640.txt
2015-06-01 21:58 - 2015-06-01 21:58 - 00000117 _____ C:\WINDOWS\system32\netcfg-2048750.txt
2015-06-01 21:58 - 2015-06-01 21:58 - 00000117 _____ C:\WINDOWS\system32\netcfg-2039281.txt
2015-06-01 21:41 - 2015-06-01 21:41 - 00000000 ____D C:\Users\Julian\Documents\SavedGames
2015-06-01 21:41 - 2015-06-01 21:41 - 00000000 ____D C:\Program Files (x86)\Microsoft XNA
2015-06-01 21:24 - 2015-06-01 21:25 - 00000117 _____ C:\WINDOWS\system32\netcfg-33562.txt
2015-06-01 21:24 - 2015-06-01 21:24 - 00000117 _____ C:\WINDOWS\system32\netcfg-1584250.txt
2015-06-01 21:17 - 2015-06-01 21:17 - 00000117 _____ C:\WINDOWS\system32\netcfg-1197562.txt
2015-06-01 21:10 - 2015-06-01 21:10 - 00000156 _____ C:\WINDOWS\system32\netcfg-755218.txt
2015-06-01 21:10 - 2015-06-01 21:10 - 00000117 _____ C:\WINDOWS\system32\netcfg-759546.txt
2015-06-01 21:09 - 2015-06-01 21:09 - 00000117 _____ C:\WINDOWS\system32\netcfg-694921.txt
2015-06-01 21:09 - 2015-06-01 21:09 - 00000117 _____ C:\WINDOWS\system32\netcfg-684078.txt
2015-06-01 21:08 - 2015-06-01 21:08 - 00000131 _____ C:\WINDOWS\system32\netcfg-652875.txt
2015-06-01 21:04 - 2015-06-01 21:04 - 00000117 _____ C:\WINDOWS\system32\netcfg-397203.txt
2015-06-01 21:04 - 2015-06-01 21:04 - 00000117 _____ C:\WINDOWS\system32\netcfg-394156.txt
2015-06-01 21:04 - 2015-06-01 21:04 - 00000117 _____ C:\WINDOWS\system32\netcfg-394109.txt
2015-06-01 21:04 - 2015-06-01 21:04 - 00000117 _____ C:\WINDOWS\system32\netcfg-392593.txt
2015-06-01 21:04 - 2015-06-01 21:04 - 00000117 _____ C:\WINDOWS\system32\netcfg-387640.txt
2015-06-01 21:03 - 2015-06-01 21:03 - 00000117 _____ C:\WINDOWS\system32\netcfg-345078.txt
2015-06-01 21:03 - 2015-06-01 21:03 - 00000117 _____ C:\WINDOWS\system32\netcfg-320609.txt
2015-06-01 21:02 - 2015-06-01 21:02 - 00000117 _____ C:\WINDOWS\system32\netcfg-315765.txt
2015-06-01 21:02 - 2015-06-01 21:02 - 00000117 _____ C:\WINDOWS\system32\netcfg-315218.txt
2015-06-01 21:02 - 2015-06-01 21:02 - 00000117 _____ C:\WINDOWS\system32\netcfg-268531.txt
2015-06-01 20:59 - 2015-06-01 21:00 - 00000117 _____ C:\WINDOWS\system32\netcfg-136437.txt
2015-06-01 20:57 - 2015-06-01 20:57 - 00000117 _____ C:\WINDOWS\system32\netcfg-2467406.txt
2015-06-01 20:56 - 2015-06-01 20:56 - 00000117 _____ C:\WINDOWS\system32\netcfg-2442062.txt
2015-06-01 20:56 - 2015-06-01 20:56 - 00000117 _____ C:\WINDOWS\system32\netcfg-2439187.txt
2015-06-01 20:56 - 2015-06-01 20:56 - 00000117 _____ C:\WINDOWS\system32\netcfg-2383968.txt
2015-06-01 20:55 - 2015-06-01 20:55 - 00000117 _____ C:\WINDOWS\system32\netcfg-2375484.txt
2015-06-01 20:55 - 2015-06-01 20:55 - 00000117 _____ C:\WINDOWS\system32\netcfg-2359031.txt
2015-06-01 20:55 - 2015-06-01 20:55 - 00000117 _____ C:\WINDOWS\system32\netcfg-2351750.txt
2015-06-01 20:17 - 2015-06-01 20:17 - 00000117 _____ C:\WINDOWS\system32\netcfg-95859.txt
2015-06-01 20:15 - 2015-06-01 20:15 - 00000117 _____ C:\WINDOWS\system32\netcfg-16540656.txt
2015-06-01 20:15 - 2015-06-01 20:15 - 00000117 _____ C:\WINDOWS\system32\netcfg-16529484.txt
2015-06-01 20:10 - 2015-06-01 20:10 - 00000117 _____ C:\WINDOWS\system32\netcfg-16248187.txt
2015-06-01 20:09 - 2015-06-01 20:09 - 00000000 ___SH C:\ProgramData\.rdata
2015-06-01 20:08 - 2015-06-02 13:57 - 00000000 ____D C:\Users\Julian\Documents\ProjectReality
2015-06-01 20:08 - 2015-06-01 20:08 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Project Reality
2015-06-01 20:07 - 2015-05-23 11:00 - 00912744 _____ C:\WINDOWS\SysWOW64\pbsvc.exe
2015-06-01 20:06 - 2015-06-01 20:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Project Reality
2015-06-01 19:55 - 2015-06-01 19:55 - 00000000 ____D C:\Program Files (x86)\Project Reality
2015-06-01 19:54 - 2015-06-01 19:54 - 01640984 _____ C:\Users\Julian\Downloads\SetupVirtualCloneDrive5470.exe
2015-06-01 19:54 - 2015-06-01 19:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elaborate Bytes
2015-06-01 19:54 - 2015-06-01 19:54 - 00000000 ____D C:\Program Files (x86)\Elaborate Bytes
2015-06-01 19:52 - 2015-06-01 19:52 - 00000000 ____D C:\Users\Julian\AppData\Roaming\CyberLink
2015-06-01 15:47 - 2015-06-01 15:47 - 00000000 ____D C:\Users\Julian\Downloads\Project Reality
2015-06-01 15:46 - 2015-06-01 15:46 - 01998432 _____ (BitTorrent Inc.) C:\Users\Julian\Downloads\uTorrent.exe
2015-06-01 15:45 - 2015-06-01 15:45 - 00034899 _____ C:\Users\Julian\Downloads\prbf2_1.3.0.0_full.iso.torrent
2015-06-01 15:40 - 2015-06-01 15:40 - 00000117 _____ C:\WINDOWS\system32\netcfg-35421.txt
2015-06-01 15:38 - 2015-06-01 15:38 - 00000117 _____ C:\WINDOWS\system32\netcfg-30150796.txt
2015-06-01 07:17 - 2015-06-01 07:17 - 00000117 _____ C:\WINDOWS\system32\netcfg-39687.txt
2015-06-01 07:16 - 2015-06-01 07:16 - 00000117 _____ C:\WINDOWS\system32\netcfg-79095828.txt
2015-06-01 07:04 - 2015-06-01 07:04 - 00000117 _____ C:\WINDOWS\system32\netcfg-78385000.txt
2015-06-01 07:04 - 2015-06-01 07:04 - 00000117 _____ C:\WINDOWS\system32\netcfg-78379859.txt
2015-05-31 16:39 - 2015-05-31 16:40 - 00000000 ____D C:\Users\Julian\AppData\Local\BoringManGame
2015-05-31 10:06 - 2015-05-31 10:06 - 00000117 _____ C:\WINDOWS\system32\netcfg-2907500.txt
2015-05-31 10:06 - 2015-05-31 10:06 - 00000117 _____ C:\WINDOWS\system32\netcfg-2906375.txt
2015-05-31 09:18 - 2015-05-31 09:18 - 00000117 _____ C:\WINDOWS\system32\netcfg-44171.txt
2015-05-31 09:17 - 2015-05-31 09:17 - 00000117 _____ C:\WINDOWS\system32\netcfg-93623562.txt
2015-05-30 14:21 - 2015-05-30 14:21 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2015-05-30 07:16 - 2015-05-30 07:16 - 00000117 _____ C:\WINDOWS\system32\netcfg-32234.txt
2015-05-29 22:35 - 2015-05-29 22:36 - 00000117 _____ C:\WINDOWS\system32\netcfg-19701625.txt
2015-05-29 17:08 - 2015-05-29 17:08 - 00000117 _____ C:\WINDOWS\system32\netcfg-31781.txt
2015-05-29 17:06 - 2015-05-29 17:06 - 00000117 _____ C:\WINDOWS\system32\netcfg-239634734.txt
2015-05-29 16:34 - 2015-06-04 16:34 - 00000536 _____ C:\WINDOWS\Tasks\SUPERAntiSpyware Scheduled Task 67c2b035-fecc-4d2a-8ba8-00a8fe698830.job
2015-05-29 16:34 - 2015-05-31 02:00 - 00000536 _____ C:\WINDOWS\Tasks\SUPERAntiSpyware Scheduled Task aaa8925f-9669-4325-850f-97719cd41fc4.job
2015-05-29 16:34 - 2015-05-29 16:34 - 00003598 _____ C:\WINDOWS\System32\Tasks\SUPERAntiSpyware Scheduled Task aaa8925f-9669-4325-850f-97719cd41fc4
2015-05-29 16:34 - 2015-05-29 16:34 - 00003516 _____ C:\WINDOWS\System32\Tasks\SUPERAntiSpyware Scheduled Task 67c2b035-fecc-4d2a-8ba8-00a8fe698830
2015-05-29 16:33 - 2015-06-02 16:34 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2015-05-29 16:33 - 2015-06-01 07:11 - 00001963 _____ C:\Users\Julian\Desktop\SUPERAntiSpyware Free Edition.lnk
2015-05-29 16:33 - 2015-05-29 16:33 - 00000000 ____D C:\Users\Julian\AppData\Roaming\SUPERAntiSpyware.com
2015-05-29 16:33 - 2015-05-29 16:33 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2015-05-29 16:33 - 2015-05-29 16:33 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2015-05-29 16:32 - 2015-05-29 16:33 - 22078544 _____ (SUPERAntiSpyware) C:\Users\Julian\Downloads\SUPERAntiSpyware.exe
2015-05-29 15:55 - 2015-06-02 21:03 - 00136408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-05-29 15:55 - 2015-05-29 15:55 - 00001104 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-05-29 15:55 - 2015-05-29 15:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-05-29 15:55 - 2015-05-29 15:55 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-05-29 15:55 - 2015-05-29 15:55 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-05-29 15:55 - 2015-04-14 09:38 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-05-29 15:55 - 2015-04-14 09:37 - 00107736 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-05-29 15:55 - 2015-04-14 09:37 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-05-29 15:52 - 2015-05-29 15:53 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\Julian\Downloads\mbam-setup-2.1.6.1022.exe
2015-05-29 14:10 - 2015-05-29 14:10 - 00000117 _____ C:\WINDOWS\system32\netcfg-229078578.txt
2015-05-29 14:10 - 2015-05-29 14:10 - 00000117 _____ C:\WINDOWS\system32\netcfg-229066671.txt
2015-05-29 12:46 - 2015-05-29 12:46 - 00000117 _____ C:\WINDOWS\system32\netcfg-224032640.txt
2015-05-29 12:45 - 2015-05-29 12:45 - 00000117 _____ C:\WINDOWS\system32\netcfg-223965593.txt
2015-05-29 10:04 - 2015-05-29 10:04 - 00000117 _____ C:\WINDOWS\system32\netcfg-214284468.txt
2015-05-29 10:03 - 2015-05-29 10:03 - 00000117 _____ C:\WINDOWS\system32\netcfg-214217593.txt
2015-05-29 09:20 - 2015-05-29 09:20 - 00000117 _____ C:\WINDOWS\system32\netcfg-211671156.txt
2015-05-29 09:06 - 2015-05-29 09:06 - 00000117 _____ C:\WINDOWS\system32\netcfg-210824609.txt
2015-05-29 09:00 - 2015-05-29 09:00 - 00000117 _____ C:\WINDOWS\system32\netcfg-210481187.txt
2015-05-29 08:58 - 2015-05-29 08:58 - 00000117 _____ C:\WINDOWS\system32\netcfg-210350593.txt
2015-05-29 08:54 - 2015-05-29 08:54 - 00000117 _____ C:\WINDOWS\system32\netcfg-210103328.txt
2015-05-29 08:53 - 2015-05-29 08:53 - 00000117 _____ C:\WINDOWS\system32\netcfg-210032812.txt
2015-05-29 07:09 - 2015-05-29 07:09 - 00000117 _____ C:\WINDOWS\system32\netcfg-203779562.txt
2015-05-29 07:09 - 2015-05-29 07:09 - 00000117 _____ C:\WINDOWS\system32\netcfg-203778812.txt
2015-05-28 14:18 - 2015-05-28 14:18 - 00000117 _____ C:\WINDOWS\system32\netcfg-142699234.txt
2015-05-28 14:17 - 2015-05-28 14:17 - 00000117 _____ C:\WINDOWS\system32\netcfg-142633921.txt
2015-05-28 13:27 - 2015-05-28 13:27 - 00000117 _____ C:\WINDOWS\system32\netcfg-139648750.txt
2015-05-27 22:14 - 2015-05-27 22:14 - 00000117 _____ C:\WINDOWS\system32\netcfg-84857203.txt
2015-05-27 19:55 - 2015-05-27 19:55 - 00000117 _____ C:\WINDOWS\system32\netcfg-76500875.txt
2015-05-27 19:55 - 2015-05-27 19:55 - 00000117 _____ C:\WINDOWS\system32\netcfg-76498046.txt
2015-05-27 16:53 - 2015-05-27 16:53 - 00000117 _____ C:\WINDOWS\system32\netcfg-65593640.txt
2015-05-27 16:52 - 2015-05-27 16:52 - 00000117 _____ C:\WINDOWS\system32\netcfg-65527796.txt
2015-05-27 16:43 - 2015-05-27 16:43 - 00000117 _____ C:\WINDOWS\system32\netcfg-64983843.txt
2015-05-27 16:43 - 2015-05-27 16:43 - 00000117 _____ C:\WINDOWS\system32\netcfg-64981765.txt
2015-05-27 16:40 - 2015-05-27 16:40 - 00000117 _____ C:\WINDOWS\system32\netcfg-64797812.txt
2015-05-27 16:40 - 2015-05-27 16:40 - 00000117 _____ C:\WINDOWS\system32\netcfg-64795781.txt
2015-05-27 16:32 - 2015-05-27 16:32 - 00000117 _____ C:\WINDOWS\system32\netcfg-64341734.txt
2015-05-27 16:31 - 2015-05-27 16:31 - 00000117 _____ C:\WINDOWS\system32\netcfg-64277140.txt
2015-05-27 15:49 - 2015-05-27 15:49 - 00000117 _____ C:\WINDOWS\system32\netcfg-61751968.txt
2015-05-26 22:39 - 2015-05-26 22:39 - 00000117 _____ C:\WINDOWS\system32\netcfg-9656312.txt
2015-05-26 21:07 - 2015-05-26 21:07 - 00000000 ____D C:\Users\Julian\AppData\Local\Ubisoft
2015-05-26 19:59 - 2015-05-26 19:59 - 00000117 _____ C:\WINDOWS\system32\netcfg-51937.txt
2015-05-26 19:58 - 2015-05-26 19:58 - 00000117 _____ C:\WINDOWS\system32\netcfg-534750.txt
2015-05-26 19:56 - 2015-05-26 19:56 - 00070144 _____ C:\WINDOWS\SysWOW64\tasks.dll
2015-05-26 19:50 - 2015-05-26 19:50 - 00000117 _____ C:\WINDOWS\system32\netcfg-58703.txt
2015-05-26 19:50 - 2015-05-26 19:50 - 00000117 _____ C:\WINDOWS\system32\netcfg-52187.txt
2015-05-24 18:06 - 2015-05-24 18:06 - 00000000 ____D C:\Users\Julian\AppData\Local\CrashRpt
2015-05-24 18:05 - 2015-05-24 18:05 - 00000000 ____D C:\Users\Julian\Documents\Square Enix
2015-05-24 12:13 - 2015-05-24 12:13 - 00000117 _____ C:\WINDOWS\system32\netcfg-42374234.txt
2015-05-24 12:13 - 2015-05-24 12:13 - 00000117 _____ C:\WINDOWS\system32\netcfg-42372296.txt
2015-05-24 12:04 - 2015-05-24 12:04 - 00000117 _____ C:\WINDOWS\system32\netcfg-41803468.txt
2015-05-24 12:04 - 2015-05-24 12:04 - 00000117 _____ C:\WINDOWS\system32\netcfg-41798140.txt
2015-05-24 10:14 - 2015-05-24 10:14 - 00000000 ____D C:\Users\Julian\AppData\Local\openvr
2015-05-24 00:36 - 2015-05-24 00:36 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Illusion
2015-05-24 00:36 - 2015-05-24 00:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Illusion
2015-05-24 00:28 - 2015-05-24 00:28 - 00000117 _____ C:\WINDOWS\system32\netcfg-57437.txt
2015-05-24 00:26 - 2015-05-24 00:26 - 00000117 _____ C:\WINDOWS\system32\netcfg-460252890.txt
2015-05-24 00:19 - 2015-05-30 21:49 - 00000000 ____D C:\ProgramData\Recovery
2015-05-23 23:22 - 2015-06-04 19:57 - 00003280 _____ C:\WINDOWS\System32\Tasks\Softcomp Software Job
2015-05-23 23:22 - 2015-05-23 23:22 - 00000000 ____D C:\Program Files (x86)\Softcomp Software
2015-05-23 23:22 - 2015-05-23 23:22 - 00000000 _____ C:\Users\Julian\AppData\Roaming\4BCD.tmp
2015-05-23 21:30 - 2015-05-23 21:30 - 00000000 ____D C:\ProgramData\Mozilla
2015-05-23 21:30 - 2015-05-23 21:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-05-23 17:55 - 2015-05-23 17:55 - 00000117 _____ C:\WINDOWS\system32\netcfg-436794890.txt
2015-05-23 17:54 - 2015-05-23 17:54 - 00000117 _____ C:\WINDOWS\system32\netcfg-436783265.txt
2015-05-23 17:00 - 2015-05-23 17:00 - 00000117 _____ C:\WINDOWS\system32\netcfg-433501187.txt
2015-05-23 17:00 - 2015-05-23 17:00 - 00000117 _____ C:\WINDOWS\system32\netcfg-433495468.txt
2015-05-23 10:00 - 2015-05-23 10:00 - 00000000 ___HD C:\WINDOWS\system32\CanonIJ Uninstaller Information
2015-05-23 10:00 - 2015-05-23 10:00 - 00000000 ___HD C:\ProgramData\CanonBJ
2015-05-23 10:00 - 2015-05-23 10:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP550 series
2015-05-23 09:59 - 2010-04-24 05:00 - 00336896 _____ (CANON INC.) C:\WINDOWS\system32\CNMLM9Z.DLL
2015-05-23 09:21 - 2015-05-23 09:21 - 00000117 _____ C:\WINDOWS\system32\netcfg-405956218.txt
2015-05-23 09:21 - 2015-05-23 09:21 - 00000117 _____ C:\WINDOWS\system32\netcfg-405955281.txt
2015-05-22 13:19 - 2015-05-22 13:19 - 00000117 _____ C:\WINDOWS\system32\netcfg-333864453.txt
2015-05-22 13:19 - 2015-05-22 13:19 - 00000117 _____ C:\WINDOWS\system32\netcfg-333853734.txt
2015-05-22 07:16 - 2015-05-22 07:16 - 00000117 _____ C:\WINDOWS\system32\netcfg-312110312.txt
2015-05-22 07:16 - 2015-05-22 07:16 - 00000117 _____ C:\WINDOWS\system32\netcfg-312109359.txt
2015-05-21 21:09 - 2015-06-01 21:05 - 00000258 _____ C:\Users\Julian\Desktop\ED.txt
2015-05-21 07:08 - 2015-05-21 07:08 - 00000117 _____ C:\WINDOWS\system32\netcfg-224709906.txt
2015-05-21 07:08 - 2015-05-21 07:08 - 00000117 _____ C:\WINDOWS\system32\netcfg-224702796.txt
2015-05-20 21:55 - 2015-05-20 21:55 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2015-05-20 21:55 - 2009-04-03 16:01 - 01321984 _____ (CANON INC.) C:\WINDOWS\system32\SETBDBD.tmp
2015-05-20 21:55 - 2009-04-03 16:00 - 00092672 _____ (CANON INC.) C:\WINDOWS\system32\CNC550I.dll
2015-05-20 21:55 - 2009-04-03 15:57 - 00106496 _____ (CANON INC.) C:\WINDOWS\SysWOW64\CNC550U.dll
2015-05-20 21:55 - 2009-03-19 14:39 - 00328192 _____ (CANON INC.) C:\WINDOWS\system32\CNC550L.dll
2015-05-20 21:55 - 2009-03-19 14:38 - 00303104 _____ (CANON INC.) C:\WINDOWS\SysWOW64\CNC550L.dll
2015-05-20 21:55 - 2008-12-01 11:21 - 00012800 _____ C:\WINDOWS\SysWOW64\CNC173DD.TBL
2015-05-20 21:55 - 2008-08-25 18:02 - 00017920 _____ (CANON INC.) C:\WINDOWS\system32\CNHMCA6.dll
2015-05-20 21:55 - 2008-08-25 18:02 - 00015872 _____ (CANON INC.) C:\WINDOWS\SysWOW64\CNHMCA.dll
2015-05-20 21:48 - 2015-06-02 13:50 - 00000000 ____D C:\Users\Julian\Documents\Schule
2015-05-20 07:17 - 2015-05-20 07:17 - 00000117 _____ C:\WINDOWS\system32\netcfg-138836234.txt
2015-05-20 07:17 - 2015-05-20 07:17 - 00000117 _____ C:\WINDOWS\system32\netcfg-138835437.txt
2015-05-19 22:28 - 2015-05-19 22:28 - 00000000 ____D C:\Users\Julian\Documents\Elite Dangerous
2015-05-19 20:03 - 2015-05-19 20:03 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Frontier Developments
2015-05-19 20:03 - 2015-05-19 20:03 - 00000000 ____D C:\Users\Julian\AppData\Local\Frontier Developments
2015-05-19 19:55 - 2015-05-19 19:55 - 00000000 ____D C:\Users\Julian\AppData\Local\Frontier_Developments
2015-05-19 19:30 - 2015-05-19 19:30 - 00000117 _____ C:\WINDOWS\system32\netcfg-96423578.txt
2015-05-19 19:28 - 2015-05-19 19:28 - 00000117 _____ C:\WINDOWS\system32\netcfg-96350062.txt
2015-05-19 19:25 - 2015-05-19 19:25 - 00000117 _____ C:\WINDOWS\system32\netcfg-96146125.txt
2015-05-19 19:25 - 2015-05-19 19:25 - 00000117 _____ C:\WINDOWS\system32\netcfg-96140062.txt
2015-05-19 19:18 - 2015-05-19 19:18 - 00000117 _____ C:\WINDOWS\system32\netcfg-95751468.txt
2015-05-19 19:18 - 2015-05-19 19:18 - 00000117 _____ C:\WINDOWS\system32\netcfg-95750171.txt
2015-05-18 16:42 - 2015-05-18 16:42 - 00000117 _____ C:\WINDOWS\system32\netcfg-47562.txt
2015-05-18 16:40 - 2015-05-18 16:40 - 00000117 _____ C:\WINDOWS\system32\netcfg-572609.txt
2015-05-18 16:31 - 2015-05-18 16:31 - 00000117 _____ C:\WINDOWS\system32\netcfg-39406.txt
2015-05-18 16:30 - 2015-05-18 16:30 - 00000117 _____ C:\WINDOWS\system32\netcfg-71468.txt
2015-05-18 16:29 - 2015-05-18 16:29 - 00000117 _____ C:\WINDOWS\system32\netcfg-49625.txt
2015-05-18 16:28 - 2015-05-18 16:28 - 00000117 _____ C:\WINDOWS\system32\netcfg-704749593.txt
2015-05-18 15:58 - 2015-05-18 15:58 - 00000117 _____ C:\WINDOWS\system32\netcfg-702910546.txt
2015-05-18 15:58 - 2015-05-18 15:58 - 00000117 _____ C:\WINDOWS\system32\netcfg-702910015.txt
2015-05-18 06:09 - 2015-05-18 06:09 - 00000000 ____D C:\Program Files (x86)\SystemRequirementsLab
2015-05-17 20:43 - 2015-05-17 20:43 - 00000117 _____ C:\WINDOWS\system32\netcfg-633663687.txt
2015-05-17 20:43 - 2015-05-17 20:43 - 00000117 _____ C:\WINDOWS\system32\netcfg-633661921.txt
2015-05-17 20:22 - 2015-05-17 20:22 - 00000000 ____D C:\Users\Julian\AppData\Local\Targem
2015-05-17 16:33 - 2015-05-17 16:33 - 00000000 ____D C:\Users\Julian\Documents\4A Games
2015-05-17 16:31 - 2015-05-17 16:31 - 00000000 ____D C:\Users\Julian\AppData\Local\4A Games
2015-05-17 12:09 - 2015-05-17 18:53 - 00000000 ____D C:\Users\Julian\AppData\Roaming\SpaceEngineers
2015-05-17 08:59 - 2015-05-17 08:59 - 00000117 _____ C:\WINDOWS\system32\netcfg-591390593.txt
2015-05-17 08:59 - 2015-05-17 08:59 - 00000117 _____ C:\WINDOWS\system32\netcfg-591389390.txt
2015-05-16 10:37 - 2015-05-16 10:37 - 00000117 _____ C:\WINDOWS\system32\netcfg-510882765.txt
2015-05-16 10:37 - 2015-05-16 10:37 - 00000117 _____ C:\WINDOWS\system32\netcfg-510875265.txt
2015-05-15 23:56 - 2015-05-15 23:56 - 00000117 _____ C:\WINDOWS\system32\netcfg-472443296.txt
2015-05-15 23:56 - 2015-05-15 23:56 - 00000117 _____ C:\WINDOWS\system32\netcfg-472441843.txt
2015-05-15 12:16 - 2015-05-15 12:16 - 00000117 _____ C:\WINDOWS\system32\netcfg-430429937.txt
2015-05-15 12:16 - 2015-05-15 12:16 - 00000117 _____ C:\WINDOWS\system32\netcfg-430428343.txt
2015-05-15 10:34 - 2015-05-15 10:34 - 00000117 _____ C:\WINDOWS\system32\netcfg-424291953.txt
2015-05-15 10:34 - 2015-05-15 10:34 - 00000117 _____ C:\WINDOWS\system32\netcfg-424290703.txt
2015-05-15 08:55 - 2015-05-15 08:55 - 00000117 _____ C:\WINDOWS\system32\netcfg-418378984.txt
2015-05-15 08:55 - 2015-05-15 08:55 - 00000117 _____ C:\WINDOWS\system32\netcfg-418377656.txt
2015-05-14 22:53 - 2015-05-14 22:53 - 00000117 _____ C:\WINDOWS\system32\netcfg-382244828.txt
2015-05-14 22:53 - 2015-05-14 22:53 - 00000117 _____ C:\WINDOWS\system32\netcfg-382238093.txt
2015-05-14 19:27 - 2015-05-14 19:27 - 00001438 _____ C:\Users\Public\Desktop\Free YouTube Download.lnk
2015-05-14 19:27 - 2015-05-14 19:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2015-05-14 19:27 - 2015-05-14 19:27 - 00000000 ____D C:\Program Files (x86)\Free Codec Pack
2015-05-14 19:27 - 2015-05-14 19:27 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2015-05-14 19:26 - 2015-05-14 19:27 - 00000000 ____D C:\Users\Julian\AppData\Roaming\DVDVideoSoft
2015-05-14 11:27 - 2015-05-14 11:27 - 00000000 ____D C:\ProgramData\Sun
2015-05-14 11:26 - 2015-05-14 11:26 - 00097888 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2015-05-14 11:26 - 2015-05-14 11:26 - 00000000 ____D C:\ProgramData\Oracle
2015-05-14 11:26 - 2015-05-14 11:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-05-14 11:26 - 2015-05-14 11:26 - 00000000 ____D C:\Program Files (x86)\Java
2015-05-14 11:23 - 2015-05-14 11:34 - 00000000 ____D C:\Program Files (x86)\ArmA3Sync
2015-05-14 11:23 - 2015-05-14 11:23 - 00001021 _____ C:\Users\Public\Desktop\ArmA3Sync.lnk
2015-05-14 11:23 - 2015-05-14 11:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArmA3Sync
2015-05-14 08:30 - 2015-05-14 08:30 - 00000117 _____ C:\WINDOWS\system32\netcfg-330497406.txt
2015-05-14 08:30 - 2015-05-14 08:30 - 00000117 _____ C:\WINDOWS\system32\netcfg-330496796.txt
2015-05-14 08:05 - 2015-05-14 08:05 - 00000117 _____ C:\WINDOWS\system32\netcfg-242256609.txt
2015-05-14 08:05 - 2015-05-14 08:05 - 00000117 _____ C:\WINDOWS\system32\netcfg-242246187.txt
2015-05-13 22:48 - 2015-05-13 22:48 - 00000117 _____ C:\WINDOWS\system32\netcfg-208832031.txt
2015-05-13 22:47 - 2015-05-13 22:47 - 00000117 _____ C:\WINDOWS\system32\netcfg-208776421.txt
2015-05-13 20:20 - 2015-05-13 20:20 - 00000117 _____ C:\WINDOWS\system32\netcfg-199983109.txt
2015-05-13 20:20 - 2015-05-13 20:20 - 00000117 _____ C:\WINDOWS\system32\netcfg-199948812.txt
2015-05-13 17:06 - 2015-05-13 17:06 - 00000117 _____ C:\WINDOWS\system32\netcfg-188302000.txt
2015-05-13 17:06 - 2015-05-13 17:06 - 00000117 _____ C:\WINDOWS\system32\netcfg-188291859.txt
2015-05-13 12:53 - 2015-05-13 12:54 - 00000156 _____ C:\WINDOWS\system32\netcfg-259820640.txt
2015-05-13 12:52 - 2015-05-13 12:52 - 00000131 _____ C:\WINDOWS\system32\netcfg-259813375.txt
2015-05-13 12:21 - 2015-05-13 12:21 - 00000156 _____ C:\WINDOWS\system32\netcfg-257928921.txt
2015-05-13 12:20 - 2015-05-13 12:20 - 00000131 _____ C:\WINDOWS\system32\netcfg-257855625.txt
2015-05-13 12:19 - 2015-05-13 12:19 - 00000131 _____ C:\WINDOWS\system32\netcfg-257831828.txt
2015-05-13 12:19 - 2015-05-13 12:19 - 00000131 _____ C:\WINDOWS\system32\netcfg-257800109.txt
2015-05-13 12:19 - 2015-05-13 12:19 - 00000117 _____ C:\WINDOWS\system32\netcfg-257815375.txt
2015-05-13 12:18 - 2015-05-13 12:18 - 00000131 _____ C:\WINDOWS\system32\netcfg-257772078.txt
2015-05-13 12:18 - 2015-05-13 12:18 - 00000117 _____ C:\WINDOWS\system32\netcfg-257761734.txt
2015-05-13 07:03 - 2015-05-13 07:03 - 00000117 _____ C:\WINDOWS\system32\netcfg-152112093.txt
2015-05-13 07:03 - 2015-05-13 07:03 - 00000117 _____ C:\WINDOWS\system32\netcfg-152111640.txt
2015-05-12 21:16 - 2015-05-12 21:16 - 00000117 _____ C:\WINDOWS\system32\netcfg-116903046.txt
2015-05-12 21:16 - 2015-05-12 21:16 - 00000117 _____ C:\WINDOWS\system32\netcfg-116902437.txt
2015-05-12 09:47 - 2015-05-12 09:47 - 00000117 _____ C:\WINDOWS\system32\netcfg-75647734.txt
2015-05-12 09:45 - 2015-05-12 09:45 - 00000117 _____ C:\WINDOWS\system32\netcfg-75519562.txt
2015-05-12 06:59 - 2015-05-12 06:59 - 00000000 ____D C:\Users\Julian\AppData\Roaming\LolClient
2015-05-11 20:53 - 2015-05-11 20:58 - 00000000 ____D C:\Users\Julian\Documents\DayZ
2015-05-11 20:53 - 2015-05-11 20:58 - 00000000 ____D C:\Users\Julian\AppData\Local\DayZ
2015-05-11 19:48 - 2015-05-11 19:48 - 00000000 ____D C:\ProgramData\Riot Games
2015-05-11 19:46 - 2015-05-11 19:46 - 00000000 ____D C:\Riot Games
2015-05-11 19:46 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll
2015-05-11 19:46 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll
2015-05-11 19:46 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll
2015-05-11 19:45 - 2015-05-23 10:35 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Riot Games
2015-05-11 19:44 - 2015-05-11 19:45 - 30668968 _____ (Riot Games) C:\Users\Julian\Downloads\LeagueofLegends_EUW_Installer_9_15_2014.exe
2015-05-11 12:59 - 2015-06-04 20:10 - 00000000 __RSD C:\Users\Julian\Documents\McAfee-Tresore
2015-05-11 12:59 - 2015-05-26 19:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2015-05-11 12:59 - 2015-05-11 12:59 - 00001918 _____ C:\Users\Public\Desktop\McAfee Total Protection.lnk
2015-05-11 12:59 - 2015-05-11 12:59 - 00000000 ____D C:\Users\Julian\AppData\Local\McAfee File Lock
2015-05-11 12:59 - 2014-09-11 14:33 - 00076064 _____ (McAfee, Inc.) C:\WINDOWS\system32\Drivers\McPvDrv.sys
2015-05-11 12:59 - 2013-09-23 13:49 - 00197704 _____ (McAfee, Inc.) C:\WINDOWS\system32\Drivers\HipShieldK.sys
2015-05-11 12:58 - 2015-05-26 19:51 - 00000000 ____D C:\Program Files (x86)\McAfee
2015-05-11 12:58 - 2015-05-11 12:59 - 00000000 ____D C:\Program Files\McAfee
2015-05-11 12:58 - 2015-05-11 12:58 - 00000000 ____D C:\Program Files\McAfee.com
2015-05-11 12:58 - 2015-05-11 12:58 - 00000000 ____D C:\Program Files (x86)\McAfee.com
2015-05-11 12:48 - 2015-05-11 12:48 - 00000117 _____ C:\WINDOWS\system32\netcfg-78656.txt
2015-05-11 12:46 - 2015-05-11 12:46 - 00000117 _____ C:\WINDOWS\system32\netcfg-334556500.txt
2015-05-11 12:37 - 2014-10-01 12:18 - 00189920 _____ (McAfee, Inc.) C:\WINDOWS\system32\mfevtps.exe
2015-05-11 08:58 - 2015-05-11 08:58 - 00000000 ____D C:\Users\Julian\Documents\Company of Heros 2 Replays
2015-05-10 19:00 - 2015-05-23 10:35 - 00000000 ____D C:\Users\Julian\Documents\ArmAWork
2015-05-10 18:56 - 2015-05-10 18:56 - 00000000 ____D C:\Program Files (x86)\Bohemia Interactive
2015-05-10 18:27 - 2015-05-10 18:28 - 00000000 ____D C:\Program Files (x86)\Dxtory Software
2015-05-10 18:27 - 2015-05-10 18:27 - 00001184 _____ C:\Users\Julian\Desktop\Dxtory.lnk
2015-05-10 18:27 - 2015-05-10 18:27 - 00000000 ____D C:\Users\Julian\AppData\Local\Dxtory Software
2015-05-10 18:27 - 2015-05-10 18:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dxtory2.0
2015-05-10 18:27 - 2013-02-15 22:44 - 08300544 _____ (Dxtory Software) C:\WINDOWS\SysWOW64\DxtoryCodec.dll
2015-05-10 18:27 - 2013-02-15 22:44 - 08043008 _____ (Dxtory Software) C:\WINDOWS\system32\DxtoryCodec.dll
2015-05-10 18:26 - 2015-05-10 18:26 - 00715038 _____ C:\WINDOWS\unins000.exe
2015-05-10 18:26 - 2015-05-10 18:26 - 00001994 _____ C:\WINDOWS\unins000.dat
2015-05-10 18:26 - 2011-12-07 19:37 - 00148992 _____ ( ) C:\WINDOWS\system32\lagarith.dll
2015-05-10 18:26 - 2011-12-07 19:32 - 00216064 _____ ( ) C:\WINDOWS\SysWOW64\lagarith.dll
2015-05-10 18:16 - 2015-05-10 18:16 - 00001170 _____ C:\Users\Public\Desktop\Camtasia Studio 8.lnk
2015-05-10 18:16 - 2015-05-10 18:16 - 00000000 ____D C:\ProgramData\TechSmith
2015-05-10 18:16 - 2015-05-10 18:16 - 00000000 ____D C:\ProgramData\regid.1995-08.com.techsmith
2015-05-10 18:16 - 2015-05-10 18:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
2015-05-10 18:16 - 2015-05-10 18:16 - 00000000 ____D C:\Program Files (x86)\QuickTime
2015-05-10 18:15 - 2015-05-10 18:15 - 00001958 _____ C:\Users\Julian\Desktop\Arma3 Screenshots.lnk
2015-05-10 18:14 - 2015-05-10 18:14 - 00000000 ____D C:\Users\Julian\AppData\Roaming\TechSmith
2015-05-10 18:13 - 2015-05-10 18:13 - 00000000 ____D C:\Users\Julian\Documents\Camtasia Studio
2015-05-10 17:49 - 2015-05-10 17:49 - 00000117 _____ C:\WINDOWS\system32\netcfg-266404750.txt
2015-05-10 17:48 - 2015-05-10 17:48 - 00000117 _____ C:\WINDOWS\system32\netcfg-266335640.txt
2015-05-10 12:35 - 2015-05-10 18:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive
2015-05-10 12:35 - 2015-05-10 12:36 - 00000000 ____D C:\Users\Julian\AppData\Local\ArmA 2
2015-05-10 08:46 - 2015-05-26 19:49 - 00000000 ____D C:\Users\Julian\Documents\ArmA 2
2015-05-10 08:46 - 2015-05-13 12:56 - 00000000 ____D C:\Users\Julian\AppData\Local\ArmA 2 OA
2015-05-10 08:46 - 2015-05-10 08:46 - 00000000 ____D C:\ProgramData\Bohemia Interactive Studio
2015-05-10 08:44 - 2015-05-10 18:56 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive
2015-05-10 08:42 - 2015-05-10 08:42 - 00001338 _____ C:\Users\Public\Desktop\DayZ Commander.lnk
2015-05-10 08:42 - 2015-05-10 08:42 - 00000000 ____D C:\Users\Julian\AppData\Local\DayZCommander
2015-05-10 08:42 - 2015-05-10 08:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dotjosh Studios
2015-05-10 08:42 - 2015-05-10 08:42 - 00000000 ____D C:\Program Files (x86)\Dotjosh Studios
2015-05-09 21:41 - 2015-05-09 21:41 - 00000000 ____D C:\Program Files (x86)\SPEEDLINK
2015-05-09 21:41 - 2014-06-12 08:26 - 00008074 _____ C:\WINDOWS\SysWOW64\Drivers\x323e501.cat
2015-05-09 21:41 - 2014-06-12 08:25 - 00068832 _____ (Your Corporation) C:\WINDOWS\system32\Drivers\x643e501.sys
2015-05-09 21:41 - 2014-06-12 08:25 - 00044896 _____ (Your Corporation) C:\WINDOWS\SysWOW64\Drivers\x323e501.sys
2015-05-09 13:27 - 2015-05-30 23:49 - 00000000 ____D C:\Users\Julian\AppData\Local\CrashDumps
2015-05-09 06:16 - 2015-05-23 20:25 - 00000000 ____D C:\Users\Julian\Documents\Survarium-Steam
2015-05-08 21:37 - 2015-05-08 21:37 - 00000000 ____D C:\Users\Julian\AppData\Local\DCS
2015-05-08 19:34 - 2015-05-08 19:34 - 00000932 _____ C:\Users\Public\Desktop\CPUID HWMonitor.lnk
2015-05-08 19:34 - 2015-05-08 19:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2015-05-08 19:34 - 2015-05-08 19:34 - 00000000 ____D C:\Program Files\CPUID
2015-05-08 19:12 - 2015-06-04 20:04 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-05-08 19:12 - 2015-05-09 13:27 - 00000000 ____D C:\Users\Julian\AppData\Local\SIX Networks
2015-05-08 19:12 - 2015-05-08 19:12 - 00003772 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-05-08 19:12 - 2015-05-08 19:12 - 00000000 ____D C:\Users\Julian\AppData\Roaming\SIX Networks
2015-05-08 19:12 - 2015-05-08 19:12 - 00000000 ____D C:\Users\Julian\AppData\Local\IsolatedStorage
2015-05-08 17:30 - 2015-05-08 19:12 - 00000000 ____D C:\Users\Julian\AppData\Local\PlaywithSIXbeta
2015-05-08 17:30 - 2015-05-08 17:30 - 00002279 _____ C:\Users\Julian\Desktop\Play withSIX BETA.lnk
2015-05-08 17:30 - 2015-05-08 17:30 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SIX Networks
2015-05-08 15:06 - 2015-05-08 15:09 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Pamela
2015-05-08 15:06 - 2015-05-08 15:06 - 00197632 _____ (PamConsult GmbH) C:\WINDOWS\SysWOW64\RemoteControl.dll
2015-05-08 15:06 - 2015-05-08 15:06 - 00000981 _____ C:\Users\Public\Desktop\Pamela for Skype.lnk
2015-05-08 15:06 - 2015-05-08 15:06 - 00000000 ____D C:\Users\Julian\Documents\Pamela
2015-05-08 15:06 - 2015-05-08 15:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pamela
2015-05-08 15:06 - 2015-05-08 15:06 - 00000000 ____D C:\Program Files (x86)\Pamela
2015-05-08 05:47 - 2015-05-08 05:47 - 00000000 ____D C:\Users\Julian\AppData\Roaming\OpenOffice
2015-05-08 05:41 - 2015-05-08 05:41 - 00000117 _____ C:\WINDOWS\system32\netcfg-49404531.txt
2015-05-08 05:41 - 2015-05-08 05:41 - 00000117 _____ C:\WINDOWS\system32\netcfg-49403625.txt
2015-05-07 21:24 - 2015-05-07 21:24 - 00000117 _____ C:\WINDOWS\system32\netcfg-19574265.txt
2015-05-07 21:23 - 2015-05-07 21:23 - 00000117 _____ C:\WINDOWS\system32\netcfg-19568140.txt
2015-05-07 20:37 - 2015-05-07 20:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoHotkey
2015-05-07 20:37 - 2015-05-07 20:37 - 00000000 ____D C:\Program Files\AutoHotkey
2015-05-07 19:46 - 2015-05-07 19:46 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Wargaming.net
2015-05-07 15:58 - 2015-05-07 15:58 - 00000117 _____ C:\WINDOWS\system32\netcfg-29046.txt
2015-05-07 15:58 - 2015-05-07 15:58 - 00000117 _____ C:\WINDOWS\system32\netcfg-27937.txt
2015-05-07 07:33 - 2015-05-07 07:33 - 00000000 ____D C:\Program Files (x86)\TechSmith
2015-05-07 07:21 - 2015-05-07 07:21 - 00000117 _____ C:\WINDOWS\system32\netcfg-48149531.txt
2015-05-07 07:21 - 2015-05-07 07:21 - 00000117 _____ C:\WINDOWS\system32\netcfg-48148812.txt
2015-05-06 18:00 - 2015-05-06 18:00 - 00000117 _____ C:\WINDOWS\system32\netcfg-63281.txt
2015-05-06 17:59 - 2015-05-06 17:59 - 00000117 _____ C:\WINDOWS\system32\netcfg-35890.txt
2015-05-06 17:59 - 2015-05-06 17:59 - 00000000 ____D C:\WINDOWS\Minidump
2015-05-06 07:30 - 2015-05-06 07:30 - 00000117 _____ C:\WINDOWS\system32\netcfg-119794109.txt
2015-05-06 07:30 - 2015-05-06 07:30 - 00000117 _____ C:\WINDOWS\system32\netcfg-119786703.txt
2015-05-05 21:13 - 2015-05-05 21:13 - 00076152 _____ C:\WINDOWS\system32\PnkBstrA.exe
2015-05-05 21:03 - 2015-05-05 21:03 - 00000000 ____D C:\Users\Julian\AppData\Local\PunkBuster
2015-05-05 21:01 - 2015-05-05 21:01 - 00000000 ____D C:\Users\Julian\Documents\Battlefield 4
2015-05-05 20:44 - 2015-05-05 20:44 - 00000000 ____D C:\Users\Julian\AppData\Local\ESN
2015-05-05 19:02 - 2015-05-05 19:02 - 00000117 _____ C:\WINDOWS\system32\netcfg-74952437.txt
2015-05-05 19:02 - 2015-05-05 19:02 - 00000117 _____ C:\WINDOWS\system32\netcfg-74951421.txt
2015-05-05 17:29 - 2015-05-05 17:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 4
2015-05-05 17:28 - 2015-06-01 20:07 - 00291496 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe
2015-05-05 17:28 - 2015-06-01 20:07 - 00291496 _____ C:\WINDOWS\SysWOW64\PnkBstrB.ex0
2015-05-05 17:28 - 2015-06-01 20:07 - 00076152 _____ C:\WINDOWS\SysWOW64\PnkBstrA.exe
2015-05-05 10:18 - 2015-05-05 10:18 - 00000117 _____ C:\WINDOWS\system32\netcfg-43467171.txt
2015-05-05 10:17 - 2015-05-05 10:17 - 00000117 _____ C:\WINDOWS\system32\netcfg-43401203.txt
2015-05-05 07:45 - 2015-05-05 07:45 - 00000117 _____ C:\WINDOWS\system32\netcfg-34338687.txt

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-04 20:13 - 2015-05-03 15:01 - 00003594 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-405010376-2912808974-240719208-1001
2015-06-04 20:13 - 2015-05-03 14:55 - 00000000 ____D C:\Users\Julian
2015-06-04 20:08 - 2015-05-03 15:06 - 00001138 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-04 20:08 - 2012-07-26 09:22 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-06-04 20:06 - 2015-05-03 18:01 - 00065536 _____ C:\WINDOWS\system32\spu_storage.bin
2015-06-04 20:00 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\system32\sru
2015-06-04 19:58 - 2015-05-03 15:19 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Skype
2015-06-04 19:17 - 2015-05-03 15:06 - 00001142 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-04 19:08 - 2015-05-03 15:13 - 00000000 ____D C:\Program Files (x86)\Steam
2015-06-04 16:06 - 2015-05-03 15:05 - 00594025 _____ C:\WINDOWS\WindowsUpdate.log
2015-06-03 22:29 - 2015-05-03 15:18 - 00000000 ____D C:\ProgramData\Origin
2015-06-03 22:28 - 2015-05-03 15:25 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Origin
2015-06-03 22:27 - 2015-05-03 15:18 - 00000000 ____D C:\Program Files (x86)\Origin
2015-06-03 07:17 - 2012-07-26 09:21 - 00034878 _____ C:\WINDOWS\setupact.log
2015-06-03 07:16 - 2015-05-03 18:00 - 00000000 ____D C:\ProgramData\Package Cache
2015-06-03 07:15 - 2015-05-03 18:02 - 00000000 ____D C:\AMD
2015-06-02 21:47 - 2012-12-12 05:21 - 00745562 _____ C:\WINDOWS\system32\perfh007.dat
2015-06-02 21:47 - 2012-12-12 05:21 - 00169488 _____ C:\WINDOWS\system32\perfc007.dat
2015-06-02 21:47 - 2012-07-26 09:28 - 01752656 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-06-02 21:30 - 2012-07-26 07:26 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-06-02 21:02 - 2012-08-01 19:02 - 00691720 _____ C:\WINDOWS\PFRO.log
2015-06-02 13:53 - 2015-05-03 15:38 - 00000000 ____D C:\Users\Julian\Documents\My Games
2015-06-02 07:11 - 2015-05-03 15:19 - 00000000 ____D C:\ProgramData\Skype
2015-06-01 21:34 - 2015-05-03 15:32 - 00000000 ____D C:\Users\Julian\Desktop\PC Spiele
2015-06-01 21:18 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-06-01 18:01 - 2012-07-26 07:26 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2015-06-01 15:39 - 2012-07-26 11:45 - 00000000 ____D C:\WINDOWS\ShellNew
2015-05-31 17:29 - 2015-05-03 20:06 - 00000000 ____D C:\Users\Julian\AppData\Roaming\TS3Client
2015-05-31 16:58 - 2015-05-04 10:37 - 00000000 ____D C:\Users\Julian\AppData\Local\Arma 3
2015-05-31 14:10 - 2015-05-03 15:47 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2015-05-30 14:21 - 2012-12-11 20:24 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2015-05-28 16:35 - 2015-05-04 10:37 - 00000000 ____D C:\Users\Julian\Documents\Arma 3
2015-05-27 20:44 - 2015-05-03 15:38 - 00000000 ____D C:\WarThunder
2015-05-26 19:56 - 2015-05-03 14:56 - 00001371 _____ C:\Users\Julian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-05-26 19:48 - 2015-05-03 15:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-05-26 19:48 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\registration
2015-05-23 21:30 - 2015-05-03 15:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2015-05-20 21:55 - 2012-07-26 10:12 - 00000000 __RSD C:\WINDOWS\Media
2015-05-19 03:12 - 2015-05-03 15:06 - 00004114 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-05-19 03:12 - 2015-05-03 15:06 - 00003878 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-05-18 20:11 - 2012-12-11 20:41 - 00168193 _____ C:\WINDOWS\DirectX.log
2015-05-11 19:19 - 2015-05-04 17:02 - 00000000 ____D C:\ProgramData\McAfee
2015-05-11 12:59 - 2015-05-04 17:02 - 00000000 ____D C:\Program Files\Common Files\McAfee
2015-05-11 12:58 - 2012-07-26 10:12 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2015-05-11 12:47 - 2012-12-11 20:43 - 00000000 ____D C:\ProgramData\Norton
2015-05-10 18:44 - 2015-05-03 15:15 - 00000000 ____D C:\Users\Julian\AppData\Roaming\Notepad++
2015-05-09 21:41 - 2012-12-11 20:30 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-05-08 20:56 - 2015-05-04 13:37 - 00008296 _____ C:\Users\Julian\Documents\TombRaider.log
2015-05-08 17:32 - 2015-05-04 08:50 - 00000000 ____D C:\Users\Julian\AppData\Local\SquirrelTemp
2015-05-07 20:59 - 2015-05-03 15:44 - 00000000 ____D C:\Users\Julian\Documents\Guild Wars 2
2015-05-07 18:21 - 2015-05-04 10:36 - 00000000 ____D C:\Users\Julian\AppData\Local\Arma 3 Launcher
2015-05-06 17:59 - 2015-05-03 14:29 - 00139406 ____N C:\WINDOWS\Minidump\050615-22609-01.dmp
2015-05-05 21:01 - 2015-05-03 15:25 - 00000000 ____D C:\Users\Julian\AppData\Local\Origin
2015-05-05 21:01 - 2015-05-03 15:18 - 00000000 ____D C:\ProgramData\Electronic Arts

==================== Files in the root of some directories =======

2015-05-23 23:22 - 2015-05-23 23:22 - 0000000 _____ () C:\Users\Julian\AppData\Roaming\4BCD.tmp
2015-06-01 20:09 - 2015-06-01 20:09 - 0000000 ___SH () C:\ProgramData\.rdata

Some files in TEMP:
====================
C:\Users\Julian\AppData\Local\Temp\Quarantine.exe
C:\Users\Julian\AppData\Local\Temp\sqlite3.dll
C:\Users\Julian\AppData\Local\Temp\tmp52EE.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-06-02 07:26

==================== End of log ============================
         

scan result of Farbar Recovery Scan Tool (x64) Version:03-06-2015
Ran by Julian at 2015-06-04 20:15:18
Running from C:\Users\Julian\Downloads
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-405010376-2912808974-240719208-500 - Administrator - Disabled)
Gast (S-1-5-21-405010376-2912808974-240719208-501 - Limited - Disabled)
Julian (S-1-5-21-405010376-2912808974-240719208-1001 - Administrator - Enabled) => C:\Users\Julian

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {DA9F8ED0-D0DE-39CC-F55A-51AB4CC1B556}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {61FE6F34-F6E4-3642-CFEA-6AD93746FFEB}
FW: McAfee Firewall (Enabled) {E2A40FF5-9AB1-3894-DE05-F89EB212F22D}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

ACP Application (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (HKLM\...\{6119B3A6-3603-9695-0398-CDF2AF0A13F8}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
ANNO 1404 - Königsedition (HKLM-x32\...\{3D9CF3CA-3AB0-4A82-9853-D7C43FD1D775}) (Version: 3.10.0000 - Ubisoft)
Arma 2 (HKLM-x32\...\Steam App 33910) (Version:  - Bohemia Interactive)
Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version:  - Bohemia Interactive)
Arma 3 (HKLM-x32\...\Steam App 107410) (Version:  - Bohemia Interactive)
ArmA3Sync 1.4.58 (HKLM-x32\...\{F097E7D7-D093-4394-9EED-43AFCCD12B7A}_is1) (Version: 1.4.58 - The [S.o.E] team)
AutoHotkey 1.1.20.03 (HKLM\...\AutoHotkey) (Version: 1.1.20.03 - Lexikos)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.4.2.30944 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.6.2 - EA Digital Illusions CE AB)
BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version:  - )
BattlEye Uninstall (HKLM-x32\...\BattlEye for A2) (Version:  - )
BinMake Uninstall (HKLM-x32\...\BinMake) (Version:  - )
BinPBO Personal Edition Uninstall (HKLM-x32\...\BinPBO Personal Edition) (Version:  - )
BI's Tools drive Uninstall (HKLM-x32\...\BI's Tools drive) (Version:  - )
Borderlands 2 (HKLM-x32\...\Steam App 49520) (Version:  - Gearbox Software)
Boring Man - Online Tactical Stickman Combat (HKLM-x32\...\Steam App 346120) (Version:  - Spasman Games)
Call of Duty: Black Ops II - Multiplayer (HKLM-x32\...\Steam App 202990) (Version:  - Treyarch)
Call of Duty: Black Ops II - Zombies (HKLM-x32\...\Steam App 212910) (Version:  - )
Camtasia Studio 8 (HKLM-x32\...\{BFA04EE0-8240-4667-8D53-45496A901C33}) (Version: 8.1.2.1327 - TechSmith Corporation)
Canon MP550 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP550_series) (Version:  - )
Company of Heroes 2 - Beta (HKLM-x32\...\Steam App 317170) (Version:  - )
Company of Heroes 2 (HKLM-x32\...\Steam App 231430) (Version:  - Relic Entertainment)
Connected Music powered by Universal Music Group version 1.0 (HKLM-x32\...\{46037DC7-F927-46DF-935F-D6F122BDD34B}_is1) (Version: 1.0 - Snowite)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
CPUID HWMonitor 1.27 (HKLM\...\CPUID HWMonitor_is1) (Version:  - )
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1.5510 - CyberLink Corp.)
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.1.1916 - CyberLink Corp.)
CyberLink PhotoDirector (HKLM-x32\...\InstallShield_{4862344A-A39C-4897-ACD4-A1BED5163C5A}) (Version: 2.0.1.3109 - CyberLink Corp.)
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.1.1902 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.1.1925 - CyberLink Corp.)
CyberLink PowerDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.1.4319 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)
DayZ Commander (HKLM-x32\...\{668B7711-6DAF-465F-9BE2-F3C07C962131}) (Version: 0.92.117 - Dotjosh Studios)
DCS World (HKLM-x32\...\Steam App 223750) (Version:  - Eagle Dynamics)
DETOUR (HKLM-x32\...\Steam App 92100) (Version:  - Sandswept Studios)
Dxtory version 2.0.122 (HKLM-x32\...\Dxtory2.0_is1) (Version: 2.0.122 - Dxtory Software)
Elite: Dangerous (HKLM-x32\...\Steam App 359320) (Version:  - Frontier Developments)
FontToTga Uninstall (HKLM-x32\...\FontToTga) (Version:  - )
Free YouTube Download version 3.2.58.505 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.58.505 - DVDVideoSoft Ltd.)
FSM Editor Personal Edition Uninstall (HKLM-x32\...\FSM Editor Personal Edition) (Version:  - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.81 - Google Inc.)
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version:  - NCsoft Corporation, Ltd.)
Hewlett-Packard ACLM.NET v1.2.0.0 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP Connected Music (Meridian - installer) (HKLM-x32\...\StartHPConnectedMusic) (Version: v1.0 - Meridian Audio Ltd)
HP Connected Remote (HKLM-x32\...\{F243A34B-AB7F-4065-B770-B85B767C247C}) (Version: 1.0.1206 - Hewlett-Packard)
HP Registration Service (HKLM\...\{E4D6CCF2-0AAF-4B9C-9DE5-893EDC9B4BAA}) (Version: 1.0.5976.4186 - Hewlett-Packard)
HP Support Assistant (HKLM-x32\...\{FF27F674-821E-4BA2-985B-DDF539C2CD03}) (Version: 7.0.33.6 - Hewlett-Packard Company)
HP Support Information (HKLM-x32\...\{B2B7B1C8-7C8B-476C-BE2C-049731C55992}) (Version: 12.00.0000 - Hewlett-Packard)
HydraVision (x32 Version: 4.2.252.0 - Advanced Micro Devices, Inc.) Hidden
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6418.0 - IDT)
Insurgency (HKLM-x32\...\Steam App 222880) (Version:  - New World Interactive)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
Just Cause 2 (HKLM-x32\...\Steam App 8190) (Version:  - Avalanche Studios)
Just Cause 2: Multiplayer Mod (HKLM-x32\...\Steam App 259080) (Version:  - Avalanche Studios)
Lagarith Lossless Codec (1.3.27) (HKLM-x32\...\{F59AC46C-10C3-4023-882C-4212A92283B3}_is1) (Version:  - )
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
McAfee Total Protection (HKLM-x32\...\MSC) (Version: 13.6.1599 - McAfee, Inc.)
McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.0.314 - McAfee, Inc.)
Metro 2033 (HKLM-x32\...\Steam App 43110) (Version:  - 4A Games)
Microsoft Office (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.6120.5004 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 31.7.0 - Mozilla)
Mozilla Thunderbird 31.7.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 31.7.0 (x86 de)) (Version: 31.7.0 - Mozilla)
Nosgoth (HKLM-x32\...\Steam App 200110) (Version: 150516.109666 - Square Enix Ltd)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.7 - Notepad++ Team)
NVIDIA Graphics Driver 305.29 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 305.29 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.5.12.2862 - Electronic Arts, Inc.)
Oxygen 2 Personal Edition Uninstall (HKLM-x32\...\Oxygen 2 Personal Edition) (Version:  - )
paint.net (HKLM\...\{19BD2C33-16A8-4ED1-B9EA-D9E35B21EC42}) (Version: 4.0.5 - dotPDN LLC)
Pamela Basic 4.9 (HKLM-x32\...\Pamela) (Version: 4.9 - PamConsult GmbH)
PlanetSide 2 (HKLM-x32\...\Steam App 218230) (Version:  - Daybreak Games)
PlanetSide 2 (HKU\S-1-5-21-405010376-2912808974-240719208-1001\...\SOE-PlanetSide 2) (Version:  - Sony Online Entertainment)
Play withSIX Windows client (HKU\S-1-5-21-405010376-2912808974-240719208-1001\...\PlaywithSIX) (Version: 1.66.1184.1 - SIX Networks GmbH)
Play withSIX Windows client (HKU\S-1-5-21-405010376-2912808974-240719208-1001\...\PlaywithSIXbeta) (Version: 1.67.1215.1-beta - SIX Networks GmbH)
Portal 2 (HKLM-x32\...\Steam App 620) (Version:  - Valve)
Project Reality: BF2 (HKLM\...\Project Reality: BF2 (pr)_is1) (Version: v1.3 - Project Reality)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.994 - Even Balance, Inc.)
Recovery Manager (x32 Version: 5.5.0.5530 - CyberLink Corp.) Hidden
Skype™ 7.5 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.5.101 - Skype Technologies S.A.)
Sound Tools Uninstall (HKLM-x32\...\Sound Tools) (Version:  - )
Space Engineers (HKLM-x32\...\Steam App 244850) (Version:  - Keen Software House)
SPEEDLINK PHANTOM HAWK Flightstick (HKLM-x32\...\{762C7640-64D8-4A0F-9A53-29EA560914AB}) (Version: v3.61a - lsw)
Star Conflict (HKLM-x32\...\Steam App 212070) (Version:  - Star Gem Inc.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 6.0.1194 - SUPERAntiSpyware.com)
System Requirements Lab Detection (HKLM-x32\...\{6C62D0A2-04A9-4DB9-A7A3-C3B2E6D48040}) (Version: 6.1.4.0 - Husdawg, LLC)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
Terraria (HKLM-x32\...\Steam App 105600) (Version:  - Re-Logic)
TexView 2 Uninstall (HKLM-x32\...\TexView 2) (Version:  - )
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
Tom Clancy's Ghost Recon Phantoms - EU (HKLM-x32\...\Steam App 272350) (Version:  - Ubisoft Singapore)
Tomb Raider (HKLM-x32\...\Steam App 203160) (Version:  - Crystal Dynamics)
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.4.7.0 - Elaborate Bytes)
Visitor 3 Uninstall (HKLM-x32\...\Visitor 3) (Version:  - )
War Thunder Launcher 1.0.1.522 (HKLM-x32\...\{ed8deea4-29fa-3932-9612-e2122d8a62d9}}_is1) (Version:  - Gaijin Entertainment)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
World of Tanks (HKU\S-1-5-21-405010376-2912808974-240719208-1001\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812eu}_is1) (Version:  - Wargaming.net)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Restore Points =========================

18-05-2015 20:10:11 DirectX wurde installiert
23-05-2015 10:32:54 Installed League of Legends
24-05-2015 18:57:39 DirectX wurde installiert
26-05-2015 19:45:51 Wiederherstellungsvorgang
30-05-2015 21:50:34 Julians PC Backup (Adware Steam)
01-06-2015 20:06:27 DirectX wurde installiert
02-06-2015 21:32:08 JuliansPC nach Scans

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2012-07-26 07:26 - 2012-07-26 07:26 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0060CB52-DDFE-4DB1-B34A-C9F676E7AEA2} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2012-08-07] (Hewlett-Packard Company)
Task: {0584A9D0-548B-4584-A1F5-AFC733BBB91E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-15] (Hewlett-Packard Company)
Task: {13D7DAD8-DD86-49ED-A898-5A471DCC0CBF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-03] (Google Inc.)
Task: {14B897A1-9843-456F-A379-65EF33258F2D} - System32\Tasks\SUPERAntiSpyware Scheduled Task 67c2b035-fecc-4d2a-8ba8-00a8fe698830 => C:\Program Files\SUPERAntiSpyware\SASTask.exe [2013-11-07] (SUPERAdBlocker.com)
Task: {1C36ACBB-410B-42FF-9B7A-649221E514FF} - System32\Tasks\Softcomp Software Job => C:\Program Files (x86)\Softcomp Software\swjob.exe [2015-05-23] (SecureSoft)
Task: {6610576F-D0F7-48B9-B6DD-8D65F0772EAB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-03] (Google Inc.)
Task: {9C2C73EF-8F74-4D85-8595-CF3A203FB276} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-15] (Hewlett-Packard Company)
Task: {CBB8E25F-DC11-4303-A171-84E906B24FB1} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-05-08] (Adobe Systems Incorporated)
Task: {DB0AEA9B-8DAA-41D3-B9C1-26A0AB405C60} - System32\Tasks\SUPERAntiSpyware Scheduled Task aaa8925f-9669-4325-850f-97719cd41fc4 => C:\Program Files\SUPERAntiSpyware\SASTask.exe [2013-11-07] (SUPERAdBlocker.com)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\SUPERAntiSpyware Scheduled Task 67c2b035-fecc-4d2a-8ba8-00a8fe698830.job => C:\Program Files\SUPERAntiSpyware\SASTask.exedC:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
Task: C:\WINDOWS\Tasks\SUPERAntiSpyware Scheduled Task aaa8925f-9669-4325-850f-97719cd41fc4.job => C:\Program Files\SUPERAntiSpyware\SASTask.exedC:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

==================== Loaded Modules (Whitelisted) ==============

2013-12-06 16:24 - 2013-12-06 16:24 - 00094208 _____ () C:\AMD\amdacpusrsvc.exe
2015-05-05 17:28 - 2015-06-01 20:07 - 00076152 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe
2015-05-27 16:23 - 2015-05-22 22:22 - 01281864 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.81\libglesv2.dll
2015-05-27 16:23 - 2015-05-22 22:22 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.81\libegl.dll
2012-12-11 20:36 - 2012-06-08 05:34 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2012-06-08 13:34 - 2012-06-08 13:34 - 00016400 _____ () c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
2012-12-11 20:30 - 2012-07-18 10:50 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\.rdata:X

==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-405010376-2912808974-240719208-1001\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-21-405010376-2912808974-240719208-1001\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-21-405010376-2912808974-240719208-1001\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-21-405010376-2912808974-240719208-1001\...\sony.com -> sony.com


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-405010376-2912808974-240719208-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.2.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\Run32: => "Raptr"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "VirtualCloneDrive"
HKU\S-1-5-21-405010376-2912808974-240719208-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-405010376-2912808974-240719208-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-405010376-2912808974-240719208-1001\...\StartupApproved\Run: => "mapdisk"
HKU\S-1-5-21-405010376-2912808974-240719208-1001\...\StartupApproved\Run: => "SUPERAntiSpyware"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{96470BAB-A0C7-479C-AF13-A7B57092F2DB}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDirector10\PDR10.EXE
FirewallRules: [{76712EC5-7F00-4B04-A334-20C7AF3F618F}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE
FirewallRules: [{C0D1A767-3145-40ED-9252-245AE3F328C0}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{86654B28-7DE0-44F8-B077-D6596746B646}] => (Allow) LPort=2869
FirewallRules: [{8ECBEC1C-F024-493D-B45D-6333E7AF2287}] => (Allow) LPort=1900
FirewallRules: [{E328AF95-B81C-4206-A46A-661F9E90178F}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{407FF396-987E-4DFE-9149-74BC8961BBAD}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{5F28A5FD-D634-4B99-A619-2123F43F8D3E}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{61EE9070-F423-45F3-AA69-55032B6B61AE}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{7217D4E1-D5A0-425D-BA7B-0F774F3ED241}] => (Allow) C:\WarThunder\launcher.exe
FirewallRules: [{9C8D01C2-57F6-4894-98A9-955EBBD9094A}] => (Allow) C:\WarThunder\launcher.exe
FirewallRules: [{DA881993-3C3C-493B-A4E6-59B5FA6C456E}] => (Allow) C:\WarThunder\bpreport.exe
FirewallRules: [{D7BBF19A-729F-44EB-BD2E-6D34D1BE2147}] => (Allow) C:\WarThunder\bpreport.exe
FirewallRules: [{8D60AB5A-3B9B-4B52-8E05-53E272A46C89}] => (Allow) C:\Program Files (x86)\Ubisoft\Related Designs\ANNO 1404 - Königsedition\Anno4.exe
FirewallRules: [{0A3A44D1-A7F6-4636-A33A-1A9A208C1DA4}] => (Allow) C:\Program Files (x86)\Ubisoft\Related Designs\ANNO 1404 - Königsedition\Anno4.exe
FirewallRules: [{87DD5890-E1BE-43E2-B7B7-A51DE5DFC467}] => (Allow) C:\Program Files (x86)\Ubisoft\Related Designs\ANNO 1404 - Königsedition\Addon.exe
FirewallRules: [{212C7AF7-51EC-4983-A291-D3490CA7810D}] => (Allow) C:\Program Files (x86)\Ubisoft\Related Designs\ANNO 1404 - Königsedition\Addon.exe
FirewallRules: [{8B5ABAA9-36ED-4CB7-8699-8B7FCC1D8159}] => (Allow) C:\Program Files (x86)\Ubisoft\Related Designs\ANNO 1404 - Königsedition\tools\Anno4Web.exe
FirewallRules: [{F69FC9FC-FF1F-4A5C-876C-2112D5945838}] => (Allow) C:\Program Files (x86)\Ubisoft\Related Designs\ANNO 1404 - Königsedition\tools\Anno4Web.exe
FirewallRules: [{EC060B8E-4FB2-43FC-8754-F1CCD4C0B761}] => (Allow) C:\Program Files (x86)\Ubisoft\Related Designs\ANNO 1404 - Königsedition\tools\AddonWeb.exe
FirewallRules: [{11D07F40-633A-4802-98F7-169BE14DF6A6}] => (Allow) C:\Program Files (x86)\Ubisoft\Related Designs\ANNO 1404 - Königsedition\tools\AddonWeb.exe
FirewallRules: [{C957C1E1-5E4B-4A39-8536-9FE1DD4243D1}] => (Allow) C:\Program Files (x86)\Ubisoft\Related Designs\ANNO 1404 - Königsedition\tools\Benchmark.exe
FirewallRules: [{2E46ED77-07F1-41E3-94D8-7606D7E30096}] => (Allow) C:\Program Files (x86)\Ubisoft\Related Designs\ANNO 1404 - Königsedition\tools\Benchmark.exe
FirewallRules: [{D8C1982C-982C-4829-8706-96B3A333B7FD}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{7A3DA085-6AED-4331-8466-297A0294B0BE}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{5668D222-8677-4A4B-B297-EB3AB904897F}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{08A60A81-1329-44F8-B46E-70E9D7B68906}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{39BA1D78-0B67-44AD-9B8A-3477001ED055}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{8636B8DF-FB20-49AA-9E82-7EBE11AFD520}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{6A8442E5-8A6E-492E-8DDC-CA2C4D9D8175}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{F3C34583-62B6-4F57-802F-564EEF47EC4A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{4A3706BD-DF14-4A8A-9013-C0CA32EB84C2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Company of Heroes 2\RelicCoH2.exe
FirewallRules: [{84C8F2E9-190B-4946-B156-0E0153641FF3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Company of Heroes 2\RelicCoH2.exe
FirewallRules: [{3D0A8F53-8C36-47BA-973B-0339977546C1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{B39E2603-FB1C-412B-88C8-8F781D1EB3BD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{479C2E08-2041-4C7B-BE4D-F01EADC93083}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\insurgency2\insurgency.exe
FirewallRules: [{6239B774-3CBD-4B46-947A-248A89AABDF5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\insurgency2\insurgency.exe
FirewallRules: [TCP Query User{8DA331C3-3442-49B4-8CEC-826E01DF9109}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{C0D79126-22E5-4FFD-84AE-DA766B994D91}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{49DF24D1-265E-4C10-83D2-C274FBD8E77F}] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{BDDDE57C-8A38-44D3-BA18-608FD8E14608}] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{541EF528-80BB-45A1-AF57-2AB3A1E3BDA4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PlanetSide 2\LaunchPad.exe
FirewallRules: [{844BB65C-BA28-48FB-AC1F-B0E62DE03059}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PlanetSide 2\LaunchPad.exe
FirewallRules: [{18AED9EB-2EDA-47BC-B35E-69440693073B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DCSWorld\Run.exe
FirewallRules: [{40BFDABC-A0F9-4175-98D1-9998E8FCDEEC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DCSWorld\Run.exe
FirewallRules: [{FE880E33-BE72-441D-A405-DD9FE715F979}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 2 Operation Arrowhead\ArmA2OA_BE.exe
FirewallRules: [{43769CDC-5A70-4995-9F19-0BE7FE56E1D9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 2 Operation Arrowhead\ArmA2OA_BE.exe
FirewallRules: [{1CF91E01-BD97-48FD-88F9-D10A35F7A63A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe
FirewallRules: [{741FFD6B-6188-498E-AF50-B0278864C59D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe
FirewallRules: [{79816BA7-954D-471B-90C5-3874DB278D77}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 2\arma2.exe
FirewallRules: [{F23B4D43-83D1-4359-8C5F-8EA8E50F90D8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 2\arma2.exe
FirewallRules: [{B2D8D67E-F60B-4DE3-B1A6-18A5568D0533}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [{67D1CFF6-1261-464A-B1F9-15A0AD8DCE96}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [{54B6EADE-E5DF-4AEE-83D5-3C1FF838DF66}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{4DF0CD93-AD0A-4010-919C-6428E66E1BA8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{C67BAB42-5438-476A-9B38-43029C7C92E8}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
FirewallRules: [{29825E2B-AF08-42F8-80EE-E1811E6CB331}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{DAE55582-3927-41A3-AA16-1C41B03B4CF9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{717A1D59-EF00-4C55-BF3D-160A8B37E9FB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{F4FC3C2F-8B21-4693-BEF8-A5D5E53C5D13}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{AFD19B1B-A6F7-4AAC-B702-C2B75646552D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [{9CCAB1D6-94D7-4EA0-BF64-A5B651C52FE5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [{22DD932D-25A5-40BF-8C10-CC027803229F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Company of Heroes Relaunch\RelicCOH.exe
FirewallRules: [{37D69128-1934-47D3-88B2-D2643BD0CE0B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Company of Heroes Relaunch\RelicCOH.exe
FirewallRules: [{26424433-4CCE-4345-8580-1DA2B271A01A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Metro 2033\metro2033.exe
FirewallRules: [{B4731514-4008-4274-9396-FA94851F0CB4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Metro 2033\metro2033.exe
FirewallRules: [{CA6B7064-567E-4E27-83E1-442D078FDC3F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\star conflict\game.exe
FirewallRules: [{2B2E2649-8FAC-4F40-BC1E-A29E96E22A3B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\star conflict\game.exe
FirewallRules: [{676A3583-4947-47D1-8E9A-DFE856E20D87}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{55DF46BA-AE7C-480D-BFA5-9C474F7331BF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{EE66297E-2E37-4A82-A62F-759AE0C4D924}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Elite Dangerous\EDLaunch.exe
FirewallRules: [{0384B602-A840-430B-8E1F-17B68D12DE43}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Elite Dangerous\EDLaunch.exe
FirewallRules: [{9693413F-F99C-465A-9B13-B564DF31141F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe
FirewallRules: [{0C3510DB-1FB0-493D-8269-DAED4D7977B9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe
FirewallRules: [{CF4B4106-4350-4752-9631-C3E175685FBD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe
FirewallRules: [{3D32CB33-2B0B-42AD-A731-63EE797CD49D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe
FirewallRules: [{8B370CBA-E68A-472B-AFDE-49115A1BD2D7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Just Cause 2\JustCause2.exe
FirewallRules: [{FCA973D7-02A0-4B88-8ED1-4834A6C8C1B1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Just Cause 2\JustCause2.exe
FirewallRules: [{63FAD79F-E3EB-4A82-B400-0EC124537637}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Just Cause 2 - Multiplayer Mod\JcmpLauncher.exe
FirewallRules: [{CF09FBCA-9DD0-478A-8512-D27ACDE21614}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Just Cause 2 - Multiplayer Mod\JcmpLauncher.exe
FirewallRules: [{29142AA0-5E84-40A8-950F-08230CE68B33}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Tom Clancy's Ghost Recon Phantoms - EU\Launcher.exe
FirewallRules: [{7750F6C8-E78C-4CF4-90F0-76C805E2123D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Tom Clancy's Ghost Recon Phantoms - EU\Launcher.exe
FirewallRules: [{1A52D44D-FC1B-47B9-BD6C-840E735B3EDF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Boring Man - Online Tactical Stickman Combat\BoringManGame.exe
FirewallRules: [{690CEB47-1CE1-4BC1-BD0E-1A55798D7C51}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Boring Man - Online Tactical Stickman Combat\BoringManGame.exe
FirewallRules: [{EF46DD10-9CA3-4C9E-B156-88EBAB593609}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Boring Man - Online Tactical Stickman Combat\BoringEditor\BoringEditor.exe
FirewallRules: [{A2C5266D-78B5-4785-89B1-C23171F50231}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Boring Man - Online Tactical Stickman Combat\BoringEditor\BoringEditor.exe
FirewallRules: [{D2A44642-6506-438C-9D9D-9538583EA715}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Terraria\Terraria.exe
FirewallRules: [{712A4FFB-140A-4C47-929D-3A18BB78A580}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Terraria\Terraria.exe
FirewallRules: [{29562532-69EA-4D6E-A76E-6030AEFDFF61}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe
FirewallRules: [{270F8E87-1223-4322-B744-24D13E98AD0D}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe
FirewallRules: [{38790A65-338C-419D-AF37-49B07E7EB6FE}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe
FirewallRules: [{034AEFB9-D804-4108-842F-9EC9B5F8510D}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe
FirewallRules: [{8559318C-B6BE-4C29-BA39-8841FE21D1FE}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{00C75709-49F9-4880-88B2-CB07D3749D23}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Black Ops II\t6zm.exe
FirewallRules: [{F9775B3B-A409-4DE8-8246-4EDE98CB1ACB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Black Ops II\t6zm.exe
FirewallRules: [{A3ADE46D-AF4A-42E0-8ADF-A30AC6DD8E96}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\nosgoth\Binaries\Win32\Nosgoth.exe
FirewallRules: [{C17AA04B-1530-4CCA-9CFA-01FA5E949996}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\nosgoth\Binaries\Win32\Nosgoth.exe
FirewallRules: [{42D749E4-D009-4A62-9686-E4F31825F770}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{40B410E3-02AB-457A-BD52-D4215221A112}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{93A3A054-BB4A-475B-A5E0-207C14025186}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{8370DAF7-FF98-46BD-A0F0-95CDCA2AC67F}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{9C2A4CDE-2883-4E48-93FC-7E36D96630FF}] => (Allow) C:\Program Files (x86)\Project Reality\Project Reality BF2\prbf2.exe
FirewallRules: [{A2289978-7605-4921-BE21-D5117DD04FC0}] => (Allow) C:\Program Files (x86)\Project Reality\Project Reality BF2\mods\pr\bin\PRLauncher.exe
FirewallRules: [{4477EF60-9F83-49BF-8DF4-195C82A1E488}] => (Allow) C:\Program Files (x86)\Project Reality\Project Reality BF2\mods\pr\bin\PRUpdater.exe
FirewallRules: [{FEF80893-79BB-4A68-8B72-978E144A3502}] => (Allow) C:\Program Files (x86)\Project Reality\Project Reality BF2\mods\pr\bin\PRMumble\PRMumble.exe
FirewallRules: [{EB6F4E06-FEE5-4632-BC95-E14283347EEF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DETOUR\Detour.exe
FirewallRules: [{BEC3ED47-AB41-4499-9BCB-D8E9E84EF9BD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DETOUR\Detour.exe
FirewallRules: [{19C93A53-D14A-4ACA-BA0F-BEB1EE572B16}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Company of Heroes 2 - Beta\RelicCoH2.exe
FirewallRules: [{747FE75C-17DC-4D27-96DC-4546CC854AF9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Company of Heroes 2 - Beta\RelicCoH2.exe

==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (06/04/2015 08:10:21 PM) (Source: HPConnectedRemote) (EventID: 0) (User: )
Description: HPConnectedRemote can only run on HP computers.

Error: (06/04/2015 08:08:39 PM) (Source: Windows Search Service) (EventID: 10021) (User: )
Description: Die Registrierungsinformationen der Leistungsindikatoren für WSearchIdxPi für die Instanz   konnten wegen des folgenden Fehlers nicht abgerufen werden: Der Vorgang wurde erfolgreich beendet.   0x0.

Error: (06/04/2015 08:08:39 PM) (Source: Windows Search Service) (EventID: 3007) (User: )
Description: Die Leistungsüberwachung für den Gatherer-Dienst kann nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.

Kontext:  Anwendung, SystemIndex Katalog

Error: (06/04/2015 08:08:35 PM) (Source: Windows Search Service) (EventID: 3006) (User: )
Description: Die Leistungsüberwachung kann für den Gatherer-Dienst nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.

Error: (06/04/2015 08:06:35 PM) (Source: HPConnectedRemote) (EventID: 0) (User: )
Description: HPConnectedRemote can only run on HP computers.

Error: (06/04/2015 07:18:08 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2486) (User: Doppelkrone)
Description: Die App „windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.

Error: (06/03/2015 08:32:49 PM) (Source: HPConnectedRemote) (EventID: 0) (User: )
Description: HPConnectedRemote can only run on HP computers.

Error: (06/03/2015 08:31:09 PM) (Source: Windows Search Service) (EventID: 10021) (User: )
Description: Die Registrierungsinformationen der Leistungsindikatoren für WSearchIdxPi für die Instanz   konnten wegen des folgenden Fehlers nicht abgerufen werden: Der Vorgang wurde erfolgreich beendet.   0x0.

Error: (06/03/2015 08:31:09 PM) (Source: Windows Search Service) (EventID: 3007) (User: )
Description: Die Leistungsüberwachung für den Gatherer-Dienst kann nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.

Kontext:  Anwendung, SystemIndex Katalog

Error: (06/03/2015 08:31:09 PM) (Source: Windows Search Service) (EventID: 3006) (User: )
Description: Die Leistungsüberwachung kann für den Gatherer-Dienst nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.


System errors:
=============
Error: (06/04/2015 08:06:57 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (06/04/2015 08:06:57 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "WSearch" konnte sich nicht als "NT AUTHORITY\SYSTEM" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%50

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (06/04/2015 08:06:32 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "SAS Core Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 1000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (06/04/2015 08:06:32 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Intel(R) Capability Licensing Service Interface" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (06/04/2015 08:06:32 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (06/04/2015 08:06:32 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Presentation Foundation-Schriftartcache 3.0.0.0 erreicht.

Error: (06/04/2015 08:06:29 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (06/04/2015 08:06:29 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Steam Client Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (06/04/2015 08:06:27 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Management and Security Application User Notification Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (06/04/2015 08:06:27 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "HP Support Assistant Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.


Microsoft Office:
=========================
Error: (06/04/2015 08:10:21 PM) (Source: HPConnectedRemote) (EventID: 0) (User: )
Description: HPConnectedRemote can only run on HP computers.

Error: (06/04/2015 08:08:39 PM) (Source: Windows Search Service) (EventID: 10021) (User: )
Description: WSearchIdxPiDer Vorgang wurde erfolgreich beendet.   0x0

Error: (06/04/2015 08:08:39 PM) (Source: Windows Search Service) (EventID: 3007) (User: )
Description: Kontext:  Anwendung, SystemIndex Katalog

Error: (06/04/2015 08:08:35 PM) (Source: Windows Search Service) (EventID: 3006) (User: )
Description: 

Error: (06/04/2015 08:06:35 PM) (Source: HPConnectedRemote) (EventID: 0) (User: )
Description: HPConnectedRemote can only run on HP computers.

Error: (06/04/2015 07:18:08 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2486) (User: Doppelkrone)
Description: windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel

Error: (06/03/2015 08:32:49 PM) (Source: HPConnectedRemote) (EventID: 0) (User: )
Description: HPConnectedRemote can only run on HP computers.

Error: (06/03/2015 08:31:09 PM) (Source: Windows Search Service) (EventID: 10021) (User: )
Description: WSearchIdxPiDer Vorgang wurde erfolgreich beendet.   0x0

Error: (06/03/2015 08:31:09 PM) (Source: Windows Search Service) (EventID: 3007) (User: )
Description: Kontext:  Anwendung, SystemIndex Katalog

Error: (06/03/2015 08:31:09 PM) (Source: Windows Search Service) (EventID: 3006) (User: )
Description: 


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i7-3770 CPU @ 3.40GHz
Percentage of memory in use: 24%
Total physical RAM: 8146.03 MB
Available physical RAM: 6131.92 MB
Total Pagefile: 8546.03 MB
Available Pagefile: 6010.45 MB
Total Virtual: 8192 MB
Available Virtual: 8191.77 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:1549.54 GB) (Free:1096.61 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Daten) (Fixed) (Total:300 GB) (Free:286.87 GB) NTFS
Drive e: (Recovery Image) (Fixed) (Total:11.21 GB) (Free:1.3 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 1863 GB) (Disk ID: C3AE4E60)

Partition: GPT Partition Type.

==================== End of log ============================
         

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-06-04 20:19:59
Windows 6.2.9200  x64 \Device\Harddisk0\DR0 -> \Device\00000034 ST2000DM001-9YN164 rev.HP16 1863,02GB
Running: Gmer-19357.exe; Driver: C:\Users\Julian\AppData\Local\Temp\uwdcrpoc.sys


---- User code sections - GMER 2.1 ----

.text   C:\WINDOWS\system32\atiesrxx.exe[312] C:\WINDOWS\system32\PSAPI.DLL!GetProcessImageFileNameA + 306                            000007fb82a9177a 4 bytes [A9, 82, FB, 07]
.text   C:\WINDOWS\system32\atiesrxx.exe[312] C:\WINDOWS\system32\PSAPI.DLL!GetProcessImageFileNameA + 314                            000007fb82a91782 4 bytes [A9, 82, FB, 07]
.text   C:\WINDOWS\system32\atieclxx.exe[1116] C:\WINDOWS\system32\PSAPI.DLL!GetProcessImageFileNameA + 306                           000007fb82a9177a 4 bytes [A9, 82, FB, 07]
.text   C:\WINDOWS\system32\atieclxx.exe[1116] C:\WINDOWS\system32\PSAPI.DLL!GetProcessImageFileNameA + 314                           000007fb82a91782 4 bytes [A9, 82, FB, 07]
.text   C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1136] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 690             000007fb7da71532 4 bytes [A7, 7D, FB, 07]
.text   C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1136] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 698             000007fb7da7153a 4 bytes [A7, 7D, FB, 07]
.text   C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1136] C:\WINDOWS\SYSTEM32\MSIMG32.dll!TransparentBlt + 246           000007fb7da7165a 4 bytes [A7, 7D, FB, 07]
.text   C:\WINDOWS\System32\spoolsv.exe[1672] C:\WINDOWS\system32\PSAPI.DLL!GetProcessImageFileNameA + 306                            000007fb82a9177a 4 bytes [A9, 82, FB, 07]
.text   C:\WINDOWS\System32\spoolsv.exe[1672] C:\WINDOWS\system32\PSAPI.DLL!GetProcessImageFileNameA + 314                            000007fb82a91782 4 bytes [A9, 82, FB, 07]
.text   C:\WINDOWS\system32\mfevtps.exe[1728] C:\WINDOWS\system32\psapi.dll!GetProcessImageFileNameA + 306                            000007fb82a9177a 4 bytes [A9, 82, FB, 07]
.text   C:\WINDOWS\system32\mfevtps.exe[1728] C:\WINDOWS\system32\psapi.dll!GetProcessImageFileNameA + 314                            000007fb82a91782 4 bytes [A9, 82, FB, 07]
.text   C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe[2320] C:\WINDOWS\system32\PSAPI.DLL!GetProcessImageFileNameA + 306   000007fb82a9177a 4 bytes [A9, 82, FB, 07]
.text   C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe[2320] C:\WINDOWS\system32\PSAPI.DLL!GetProcessImageFileNameA + 314   000007fb82a91782 4 bytes [A9, 82, FB, 07]
.text   C:\WINDOWS\Explorer.EXE[3848] C:\WINDOWS\system32\PSAPI.DLL!GetProcessImageFileNameA + 306                                    000007fb82a9177a 4 bytes [A9, 82, FB, 07]
.text   C:\WINDOWS\Explorer.EXE[3848] C:\WINDOWS\system32\PSAPI.DLL!GetProcessImageFileNameA + 314                                    000007fb82a91782 4 bytes [A9, 82, FB, 07]
.text   C:\WINDOWS\Explorer.EXE[3848] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 690                                              000007fb7da71532 4 bytes [A7, 7D, FB, 07]
.text   C:\WINDOWS\Explorer.EXE[3848] C:\WINDOWS\SYSTEM32\MSIMG32.dll!GradientFill + 698                                              000007fb7da7153a 4 bytes [A7, 7D, FB, 07]
.text   C:\WINDOWS\Explorer.EXE[3848] C:\WINDOWS\SYSTEM32\MSIMG32.dll!TransparentBlt + 246                                            000007fb7da7165a 4 bytes [A7, 7D, FB, 07]
.text   C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe[6088] C:\WINDOWS\system32\PSAPI.DLL!GetProcessImageFileNameA + 306  000007fb82a9177a 4 bytes [A9, 82, FB, 07]
.text   C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe[6088] C:\WINDOWS\system32\PSAPI.DLL!GetProcessImageFileNameA + 314  000007fb82a91782 4 bytes [A9, 82, FB, 07]