Avira und Windows Defender deaktivieren sich von selbst

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:24-06-2015
Ran by Leon (administrator) on LEON-PC on 25-06-2015 19:24:26
Running from C:\Users\Leon\Desktop
Loaded Profiles: Leon (Available Profiles: Leon)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe
(Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Spotify Ltd) C:\Users\Leon\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7203032 2014-05-21] (Realtek Semiconductor)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-02-13] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [35696 2009-02-28] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [730416 2015-06-11] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe [130864 2015-05-21] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-725278241-2998144640-1580927871-1000\...\Run: [Spotify Web Helper] => C:\Users\Leon\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2023480 2015-06-18] (Spotify Ltd)
HKU\S-1-5-21-725278241-2998144640-1580927871-1000\...\MountPoints2: {e96adfff-e349-11e3-862c-806e6f6e6963} - E:\autorun.exe
ShellIconOverlayIdentifiers: [egisPSDP] -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec MyWinLocker\x64\psdprotect.dll [2010-02-01] (Egis Technology Inc.)
ShellIconOverlayIdentifiers-x32: [egisPSDP] -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec MyWinLocker\x86\psdprotect.dll [2010-02-01] (Egis Technology Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
SearchScopes: HKLM-x32 -> DefaultScope value is missing
SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKU\S-1-5-21-725278241-2998144640-1580927871-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27] (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-23] (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-23] (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-23] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-23] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-17] (Google Inc.)

Chrome: 
=======
CHR Profile: C:\Users\Leon\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Leon\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-05-24]
CHR Extension: (Google Drive) - C:\Users\Leon\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-24]
CHR Extension: (YouTube) - C:\Users\Leon\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-24]
CHR Extension: (Google Search) - C:\Users\Leon\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-24]
CHR Extension: (Avira Browser Safety) - C:\Users\Leon\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-11-07]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Leon\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-04]
CHR Extension: (Google Wallet) - C:\Users\Leon\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-24]
CHR Extension: (Gmail) - C:\Users\Leon\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-24]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [827184 2015-06-11] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [450808 2015-06-11] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [450808 2015-06-11] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1188360 2015-06-11] (Avira Operations GmbH & Co. KG)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-20] (Apple Inc.)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [208632 2015-05-21] (Avira Operations GmbH & Co. KG)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
S4 MWLService; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [305520 2010-02-01] (Egis Technology Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2014-05-22] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [153256 2015-06-11] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132656 2015-06-11] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [44088 2015-03-10] (Avira Operations GmbH & Co. KG)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-25 19:24 - 2015-06-25 19:24 - 00013428 _____ C:\Users\Leon\Desktop\FRST.txt
2015-06-25 19:20 - 2015-06-25 19:20 - 00000470 _____ C:\Users\Leon\Desktop\defogger_disable.log
2015-06-25 19:10 - 2015-06-25 19:10 - 02112512 _____ (Farbar) C:\Users\Leon\Desktop\FRST64.exe
2015-06-25 19:10 - 2015-06-25 19:10 - 00380416 _____ C:\Users\Leon\Desktop\Gmer-19357.exe
2015-06-25 19:09 - 2015-06-25 19:09 - 00050477 _____ C:\Users\Leon\Desktop\Defogger.exe
2015-06-25 19:09 - 2015-06-25 19:09 - 00000000 ____D C:\Users\Leon\Desktop\Dateien
2015-06-25 18:09 - 2015-06-25 19:03 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-06-25 18:09 - 2015-06-25 18:09 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\Leon\Downloads\mbam-setup-2.1.6.1022.exe
2015-06-25 18:09 - 2015-06-25 18:09 - 00001104 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-06-25 18:09 - 2015-06-25 18:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-06-25 18:09 - 2015-06-25 18:09 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-06-25 18:09 - 2015-04-14 09:37 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-06-25 18:09 - 2015-04-14 09:37 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-06-25 18:09 - 2015-04-14 09:37 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-06-25 15:15 - 2015-06-25 15:15 - 00168899 _____ C:\Users\Leon\AppData\Local\recently-used.xbel
2015-06-22 15:07 - 2015-06-22 15:07 - 00000000 ____D C:\Users\Leon\Downloads\A320_130f_Hotfix
2015-06-22 15:02 - 2015-06-22 15:02 - 00000000 ____D C:\Users\Leon\AppData\Roaming\RAASPRO
2015-06-22 15:02 - 2015-06-22 15:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FS2Crew2012
2015-06-22 14:48 - 2015-06-22 14:49 - 00000000 ____D C:\Users\Leon\Downloads\AS_AIRBUS-A320-A321_FSX-P3D-FSXSTEAM
2015-06-22 14:36 - 2015-06-22 14:42 - 1093038517 _____ C:\Users\Leon\Downloads\AS_AIRBUS-A318-A319_FSX-P3D-FSXSTEAM.zip
2015-06-22 14:36 - 2015-06-22 14:42 - 1033849304 _____ C:\Users\Leon\Downloads\AS_AIRBUS-A320-A321_FSX-P3D-FSXSTEAM.zip
2015-06-22 14:30 - 2015-06-22 14:31 - 12557210 _____ C:\Users\Leon\Downloads\A320_130f_Hotfix.zip
2015-06-17 19:15 - 2015-06-17 19:15 - 00499041 _____ C:\Users\Leon\Downloads\brand_guideline_logos_0.zip
2015-06-17 19:15 - 2015-06-17 19:15 - 00000000 ____D C:\Users\Leon\Downloads\brand_guideline_logos_0
2015-06-17 18:06 - 2015-06-17 18:06 - 00799182 _____ C:\Users\Leon\Downloads\tuupola-jquery_lazyload-1.9.3-0-g2cfbdb5.zip
2015-06-17 18:06 - 2015-06-17 18:06 - 00000000 ____D C:\Users\Leon\Downloads\tuupola-jquery_lazyload-1.9.3-0-g2cfbdb5
2015-06-10 20:33 - 2015-06-10 20:33 - 00000000 ____D C:\Users\Leon\AppData\Local\GWX
2015-06-10 16:16 - 2015-05-25 20:24 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-06-10 16:16 - 2015-05-25 20:23 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-06-10 16:16 - 2015-05-25 20:23 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-06-10 16:16 - 2015-05-25 20:21 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-06-10 16:16 - 2015-05-25 20:19 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-06-10 16:16 - 2015-05-25 20:19 - 01255424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-06-10 16:16 - 2015-05-25 20:19 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-06-10 16:16 - 2015-05-25 20:19 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-06-10 16:16 - 2015-05-25 20:19 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-06-10 16:16 - 2015-05-25 20:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-06-10 16:16 - 2015-05-25 20:19 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-06-10 16:16 - 2015-05-25 20:19 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-06-10 16:16 - 2015-05-25 20:19 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-06-10 16:16 - 2015-05-25 20:19 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-06-10 16:16 - 2015-05-25 20:19 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-06-10 16:16 - 2015-05-25 20:19 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-06-10 16:16 - 2015-05-25 20:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-06-10 16:16 - 2015-05-25 20:19 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-06-10 16:16 - 2015-05-25 20:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-06-10 16:16 - 2015-05-25 20:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-06-10 16:16 - 2015-05-25 20:19 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-06-10 16:16 - 2015-05-25 20:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-06-10 16:16 - 2015-05-25 20:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-06-10 16:16 - 2015-05-25 20:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-06-10 16:16 - 2015-05-25 20:19 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-06-10 16:16 - 2015-05-25 20:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-06-10 16:16 - 2015-05-25 20:18 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-06-10 16:16 - 2015-05-25 20:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-06-10 16:16 - 2015-05-25 20:18 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-06-10 16:16 - 2015-05-25 20:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-06-10 16:16 - 2015-05-25 20:18 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-06-10 16:16 - 2015-05-25 20:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-06-10 16:16 - 2015-05-25 20:18 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-06-10 16:16 - 2015-05-25 20:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-06-10 16:16 - 2015-05-25 20:18 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-06-10 16:16 - 2015-05-25 20:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-06-10 16:16 - 2015-05-25 20:18 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-06-10 16:16 - 2015-05-25 20:18 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-06-10 16:16 - 2015-05-25 20:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-06-10 16:16 - 2015-05-25 20:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-06-10 16:16 - 2015-05-25 20:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-06-10 16:16 - 2015-05-25 20:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-06-10 16:16 - 2015-05-25 20:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-06-10 16:16 - 2015-05-25 20:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 20:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 20:07 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-06-10 16:16 - 2015-05-25 20:07 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-06-10 16:16 - 2015-05-25 20:04 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-06-10 16:16 - 2015-05-25 20:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-06-10 16:16 - 2015-05-25 20:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-06-10 16:16 - 2015-05-25 20:01 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-06-10 16:16 - 2015-05-25 20:01 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-06-10 16:16 - 2015-05-25 20:01 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-06-10 16:16 - 2015-05-25 20:01 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-06-10 16:16 - 2015-05-25 20:01 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-06-10 16:16 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-06-10 16:16 - 2015-05-25 20:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-06-10 16:16 - 2015-05-25 20:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-06-10 16:16 - 2015-05-25 20:01 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-06-10 16:16 - 2015-05-25 20:01 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-06-10 16:16 - 2015-05-25 20:01 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-06-10 16:16 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-06-10 16:16 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-06-10 16:16 - 2015-05-25 20:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-06-10 16:16 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-06-10 16:16 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-06-10 16:16 - 2015-05-25 20:00 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-06-10 16:16 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-06-10 16:16 - 2015-05-25 19:59 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-06-10 16:16 - 2015-05-25 19:59 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-06-10 16:16 - 2015-05-25 19:59 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-06-10 16:16 - 2015-05-25 19:59 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-06-10 16:16 - 2015-05-25 19:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-06-10 16:16 - 2015-05-25 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-06-10 16:16 - 2015-05-25 19:55 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-06-10 16:16 - 2015-05-25 19:55 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-06-10 16:16 - 2015-05-25 19:55 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 19:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 19:08 - 03206144 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-06-10 16:16 - 2015-05-25 19:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-06-10 16:16 - 2015-05-25 18:50 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-06-10 16:16 - 2015-05-25 18:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-06-10 16:16 - 2015-05-25 18:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 18:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-06-10 16:16 - 2015-05-25 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-06-10 16:16 - 2015-05-22 20:18 - 01021440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-06-10 16:16 - 2015-05-22 20:18 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-06-10 16:16 - 2015-05-22 20:18 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-06-10 16:16 - 2015-05-22 20:18 - 00423424 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-06-10 16:16 - 2015-05-22 20:18 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-06-10 16:16 - 2015-05-22 20:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-06-10 16:16 - 2015-05-22 20:13 - 01119232 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-06-10 16:16 - 2015-05-21 15:19 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-06-10 16:16 - 2015-04-29 20:22 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-06-10 16:16 - 2015-04-29 20:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-06-10 16:16 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-06-10 16:16 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-06-10 16:16 - 2015-04-29 20:19 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-06-10 16:16 - 2015-04-29 20:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-06-10 16:16 - 2015-04-29 20:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-06-10 16:16 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-06-10 16:16 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-06-10 16:16 - 2015-04-29 20:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-06-10 16:16 - 2015-04-24 20:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-06-10 16:16 - 2015-04-24 19:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2015-06-10 16:15 - 2015-06-01 21:16 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-06-10 16:15 - 2015-06-01 20:07 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-06-10 16:15 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-06-10 16:15 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-06-10 16:15 - 2015-05-23 05:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-06-10 16:15 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-06-10 16:15 - 2015-05-23 05:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-06-10 16:15 - 2015-05-23 05:15 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-06-10 16:15 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-06-10 16:15 - 2015-05-23 05:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-06-10 16:15 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-06-10 16:15 - 2015-05-23 05:09 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-06-10 16:15 - 2015-05-23 05:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-06-10 16:15 - 2015-05-23 05:06 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-06-10 16:15 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-06-10 16:15 - 2015-05-23 05:05 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-06-10 16:15 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-06-10 16:15 - 2015-05-23 04:57 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-06-10 16:15 - 2015-05-23 04:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-06-10 16:15 - 2015-05-23 04:49 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-06-10 16:15 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-06-10 16:15 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-06-10 16:15 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-06-10 16:15 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-06-10 16:15 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-06-10 16:15 - 2015-05-23 04:37 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-06-10 16:15 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-06-10 16:15 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-06-10 16:15 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-06-10 16:15 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-06-10 16:15 - 2015-05-22 21:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-06-10 16:15 - 2015-05-22 21:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-06-10 16:15 - 2015-05-22 21:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-06-10 16:15 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-06-10 16:15 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-06-10 16:15 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-06-10 16:15 - 2015-05-22 21:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-06-10 16:15 - 2015-05-22 20:59 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-06-10 16:15 - 2015-05-22 20:53 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-06-10 16:15 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-06-10 16:15 - 2015-05-22 20:52 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-06-10 16:15 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-06-10 16:15 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-06-10 16:15 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-06-10 16:15 - 2015-05-22 20:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-06-10 16:15 - 2015-05-22 20:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-06-10 16:15 - 2015-05-22 20:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-06-10 16:15 - 2015-05-22 20:36 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-06-10 16:15 - 2015-05-22 20:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-06-10 16:15 - 2015-05-22 20:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-06-10 16:15 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-06-10 16:15 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-06-10 16:15 - 2015-05-22 20:07 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-06-10 16:15 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-06-10 16:15 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-06-10 16:15 - 2015-05-22 20:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-06-10 16:15 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-06-10 16:15 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-06-10 16:15 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-06-10 16:15 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-06-10 16:15 - 2015-04-11 05:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2015-06-09 19:25 - 2015-06-09 19:25 - 06477032 _____ (Tim Kosse) C:\Users\Leon\Downloads\FileZilla_3.11.0.2_win64-setup.exe
2015-06-07 17:37 - 2015-06-07 17:54 - 00000000 ____D C:\Users\Leon\Desktop\Flugzeuge am Himmel
2015-06-03 22:11 - 2015-06-03 22:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Drzewiecki Design
2015-06-03 22:05 - 2015-06-03 22:07 - 463523665 _____ C:\Users\Leon\Downloads\DD_EETN-TALLINN-FSX.exe
2015-06-03 19:51 - 2015-06-03 19:51 - 00041618 _____ C:\Users\Leon\Downloads\CenterlightsFSX.zip
2015-06-03 19:46 - 2015-06-03 19:46 - 00001182 _____ C:\Users\Public\Desktop\Aerosoft Launcher.lnk
2015-06-03 17:59 - 2015-06-03 18:00 - 24966772 _____ C:\Users\Leon\Downloads\ejetsv2-fsx-liveries (1).zip
2015-06-03 17:32 - 2015-06-03 17:46 - 00000000 ____D C:\Users\Leon\Downloads\texture
2015-06-03 17:32 - 2015-06-03 17:32 - 00000278 _____ C:\Users\Leon\Downloads\texture.zip
2015-06-03 17:18 - 2015-06-22 15:14 - 00000000 ____D C:\Users\Leon\Downloads\4b8adc5932237900b0add76ca93d138c-a320_cfm_lufthansa_d-aipb
2015-06-03 17:18 - 2015-06-03 17:18 - 00000000 ____D C:\Users\Leon\Downloads\84adc9a9cfb7f84d2f166f2ee293fb28-a321_iae_lufthansa_d-aidv
2015-06-03 17:00 - 2015-06-03 17:00 - 18440867 _____ C:\Users\Leon\Downloads\4b8adc5932237900b0add76ca93d138c-a320_cfm_lufthansa_d-aipb.zip
2015-06-03 16:59 - 2015-06-03 17:00 - 17950990 _____ C:\Users\Leon\Downloads\84adc9a9cfb7f84d2f166f2ee293fb28-a321_iae_lufthansa_d-aidv.zip
2015-05-30 18:46 - 2015-05-30 18:46 - 00000179 _____ C:\Users\Leon\FSDreamTeam_GSX.reg
2015-05-30 18:16 - 2015-05-30 18:16 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Lockheed Martin
2015-05-30 18:16 - 2015-05-30 18:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FsDreamTeam
2015-05-30 18:15 - 2015-05-30 18:35 - 00000000 ____D C:\ProgramData\Virtuali
2015-05-30 18:14 - 2015-05-30 18:15 - 96102184 _____ (VIRTUALI Sagl ) C:\Users\Leon\Downloads\gsx_fsx_setup.exe
2015-05-29 22:48 - 2015-05-29 22:49 - 16864083 _____ C:\Users\Leon\Downloads\FS15_KroegerHKD302_Tandem_by_SP77.zip
2015-05-29 17:37 - 2015-05-29 17:37 - 07072745 _____ C:\Users\Leon\Downloads\OBS_0_651b_Installer (1).exe
2015-05-26 11:53 - 2015-05-26 11:53 - 00000000 ____D C:\Users\Leon\Downloads\SETRA_S215UL_Modded_V1.2_OMSI2
2015-05-26 11:51 - 2015-05-26 11:52 - 80903112 _____ C:\Users\Leon\Downloads\SETRA_S215UL_Modded_V1.2_OMSI2.zip
2015-05-26 11:50 - 2015-05-26 11:50 - 00010838 _____ C:\Users\Leon\Downloads\Tettau.hof

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-25 19:24 - 2014-12-22 20:00 - 00000000 ____D C:\FRST
2015-06-25 19:23 - 2014-05-22 10:33 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-25 19:22 - 2014-05-21 17:05 - 01117888 _____ C:\Windows\WindowsUpdate.log
2015-06-25 19:22 - 2014-05-21 17:01 - 00908058 _____ C:\Windows\PFRO.log
2015-06-25 19:22 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-25 19:22 - 2009-07-14 06:51 - 00178471 _____ C:\Windows\setupact.log
2015-06-25 19:10 - 2009-07-14 06:45 - 00023152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-25 19:10 - 2009-07-14 06:45 - 00023152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-25 19:06 - 2014-05-22 10:33 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-25 19:01 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Registration
2015-06-25 15:21 - 2014-05-22 11:12 - 00000000 ____D C:\Users\Leon\AppData\Local\Spotify
2015-06-25 15:15 - 2014-05-22 13:08 - 00000000 ____D C:\Users\Leon\AppData\Local\gtk-2.0
2015-06-25 15:15 - 2014-05-22 13:06 - 00000000 ____D C:\Users\Leon\.gimp-2.8
2015-06-25 15:13 - 2014-05-22 11:12 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Spotify
2015-06-25 14:10 - 2014-05-22 02:57 - 00699092 _____ C:\Windows\system32\perfh007.dat
2015-06-25 14:10 - 2014-05-22 02:57 - 00149232 _____ C:\Windows\system32\perfc007.dat
2015-06-25 14:10 - 2009-07-14 07:13 - 01619284 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-24 19:28 - 2015-01-21 16:12 - 00000000 ____D C:\Users\Leon\AppData\Roaming\FileZilla
2015-06-23 19:47 - 2014-12-19 15:26 - 00000000 ____D C:\Users\Leon\Documents\Flight Simulator X-Dateien
2015-06-23 18:45 - 2014-07-21 13:00 - 00000000 ____D C:\REX Essential Plus Overdrive
2015-06-22 15:03 - 2014-05-22 11:03 - 00409349 _____ C:\Windows\DirectX.log
2015-06-22 14:59 - 2014-05-21 17:13 - 00121928 _____ C:\Users\Leon\AppData\Local\GDIPFONTCACHEV1.DAT
2015-06-22 14:59 - 2009-07-14 06:45 - 00427952 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-21 12:15 - 2015-04-05 22:32 - 00000000 ____D C:\Users\Leon\Downloads\2010-10-21_e195_lufthansa_d-aebe
2015-06-13 21:58 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-06-12 11:51 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-06-11 12:48 - 2014-05-22 10:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-06-11 12:47 - 2014-12-23 15:15 - 00153256 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-06-11 12:47 - 2014-12-23 15:15 - 00132656 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-06-10 20:30 - 2014-12-11 10:25 - 00000000 ____D C:\Windows\system32\appraiser
2015-06-10 20:30 - 2014-05-23 12:10 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-06-10 20:29 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-06-10 19:47 - 2014-05-21 22:59 - 00000000 ____D C:\Windows\system32\MRT
2015-06-10 19:43 - 2014-05-21 22:59 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-10 16:09 - 2014-12-23 15:12 - 00000000 ____D C:\ProgramData\Avira
2015-06-10 16:09 - 2014-12-17 18:46 - 00000000 ____D C:\Program Files (x86)\Avira
2015-06-10 16:09 - 2014-05-22 10:30 - 00000000 ____D C:\ProgramData\Package Cache
2015-06-07 19:18 - 2014-05-22 11:13 - 00000000 ____D C:\Program Files (x86)\Steam
2015-06-03 19:46 - 2014-06-04 15:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aerosoft
2015-06-03 19:46 - 2010-05-12 14:01 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-05-31 19:23 - 2015-05-25 11:52 - 00000000 ____D C:\Program Files\OBS
2015-05-31 19:23 - 2015-05-25 11:52 - 00000000 ____D C:\Program Files (x86)\OBS
2015-05-30 18:54 - 2014-12-31 15:52 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Virtuali
2015-05-30 18:46 - 2014-05-21 17:13 - 00000000 ____D C:\Users\Leon
2015-05-30 18:15 - 2014-12-31 15:48 - 00000000 ____D C:\ProgramData\Esellerate
2015-05-29 22:32 - 2014-05-22 11:56 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Skype
2015-05-29 22:25 - 2014-05-22 11:56 - 00000000 ____D C:\ProgramData\Skype
2015-05-29 17:52 - 2015-05-18 14:28 - 00000983 _____ C:\Omsi.lnk
2015-05-27 15:23 - 2014-10-26 16:53 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Audacity

==================== Files in the root of some directories =======

2015-06-25 15:15 - 2015-06-25 15:15 - 0168899 _____ () C:\Users\Leon\AppData\Local\recently-used.xbel
2014-05-21 17:18 - 2014-05-21 17:18 - 0000594 _____ () C:\ProgramData\ArcadeDeluxe4.log
2014-05-21 18:43 - 2014-05-21 18:43 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2010-05-12 14:08 - 2010-01-27 16:40 - 0131472 _____ () C:\ProgramData\FullRemove.exe

Files to move or delete:
====================
C:\Users\Leon\FlightBeam_Washington Dulles Intl - HD.reg
C:\Users\Leon\FSDreamTeam_GSX.reg


Some files in TEMP:
====================
C:\Users\Leon\AppData\Local\Temp\avgnt.exe
C:\Users\Leon\AppData\Local\Temp\SkypeSetup.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-06-14 11:50

==================== End of log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version:24-06-2015
Ran by Leon at 2015-06-25 19:25:34
Running from C:\Users\Leon\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-725278241-2998144640-1580927871-500 - Administrator - Disabled)
Gast (S-1-5-21-725278241-2998144640-1580927871-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-725278241-2998144640-1580927871-1002 - Limited - Enabled)
Leon (S-1-5-21-725278241-2998144640-1580927871-1000 - Administrator - Enabled) => C:\Users\Leon

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Antivirus (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3007 - Acer Incorporated)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.02.3006 - Acer Incorporated)
Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3001 - Acer Incorporated)
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.0.7220 - Adobe Systems Inc.)
Adobe Flash Player 10 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 10.0.32.18 - Adobe Systems Incorporated)
Adobe Reader 9.1 MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-A91000000001}) (Version: 9.1.0 - Adobe Systems Incorporated)
Advanced Omnibus Driver Version 1.4 (HKLM-x32\...\{E084E6F2-2B8A-4A71-938F-0C4C808EA439}_is1) (Version: 1.4 - PeDePe)
Advertising Center (x32 Version: 0.0.0.2 - Nero AG) Hidden
Aerosoft's - Aerosoft Launcher (HKLM-x32\...\{EE11CFFC-898C-4875-8A63-8B732A9AD43B}) (Version: 1.2.0.3 - Aerosoft)
Aerosoft's - Airbus A320-A321 - FSX (HKLM-x32\...\Airbus A320-A321 - FSX) (Version: 1.30 - Aerosoft)
aerosoft's - Approaching Innsbruck X (HKLM-x32\...\{70864384-DD19-44CB-A999-A917F32F623D}) (Version: 1.20 - aerosoft)
Aerosoft's - Bergen X - FSX (HKLM-x32\...\Bergen X - FSX) (Version: 1.01 - Aerosoft)
Aerosoft's - Corfu X (HKLM-x32\...\{8A073262-FB25-4224-AE36-C2725A616E05}) (Version: 1.11 - Aerosoft)
aerosoft's - German Airports 2 - 2012 (Leipzig X) (HKLM-x32\...\{9FFA7B38-A803-4B13-9C16-186EA429FC03}) (Version: 1.00 - aerosoft)
aerosoft's - German Airports 2 - 2012 (Muenster X) (HKLM-x32\...\{E243B940-CB49-447F-AD2E-99DD5103ACA6}) (Version: 1.00 - aerosoft)
aerosoft's - German Airports 3 - 2012 (Hamburg FSX) (HKLM-x32\...\{EA6E7823-9E5B-4EDD-9750-C3C87FDF0460}) (Version: 1.04 - aerosoft)
Aerosoft's - Heraklion X (HKLM-x32\...\{0CA7BE0D-3DC3-4F04-B64D-9AA2041B76AB}) (Version: 1.10 - Aerosoft)
aerosoft's - Ibiza X for FSX (HKLM-x32\...\{941D385A-610B-4754-9090-4D9517F7D5FF}) (Version: 1.01 - aerosoft)
Aerosoft's - London City Airport X - FSX (HKLM-x32\...\London City Airport X - FSX) (Version:  - )
Aerosoft's - Mallorca X Evolution - FSX (HKLM-x32\...\Mallorca X Evolution - FSX) (Version: 1.00 - Aerosoft)
aerosoft's - Mega Airport Amsterdam FSX (HKLM-x32\...\{0A297C87-BF52-43FD-AD75-EE72228E4457}) (Version: 1.04 - aerosoft)
aerosoft's - Mega Airport Barcelona X (HKLM-x32\...\{A8736347-B854-400E-A060-19321AD85B98}) (Version: 1.01 - aerosoft)
Aerosoft's - Mega Airport Berlin Brandenburg - FSX (HKLM-x32\...\Mega Airport Berlin Brandenburg - FSX) (Version: 1.11 - Aerosoft)
Aerosoft's - Mega Airport Dublin - FSX (HKLM-x32\...\Mega Airport Dublin - FSX) (Version: 1.10 - Aerosoft)
Aerosoft's - Mega Airport Duesseldorf - FSX (HKLM-x32\...\Mega Airport Duesseldorf - FSX) (Version:  - )
aerosoft's - Mega Airport Frankfurt X (HKLM-x32\...\{BAEE0C24-C8C2-4820-9DF4-887909F1A286}) (Version: 1.04 - aerosoft)
Aerosoft's - Mega Airport Lisbon V2.0 - FSX (HKLM-x32\...\Mega Airport Lisbon V2.0 - FSX) (Version: 2.01 - Aerosoft)
Aerosoft's - Mega Airport London Heathrow Xtended - FSX (HKLM-x32\...\Mega Airport London Heathrow Xtended - FSX) (Version: 1.00 - Aerosoft)
Aerosoft's - Mega Airport London Heathrow Xtended Jetway patch - FSX (HKLM-x32\...\{148A6D18-432E-4824-9D37-ED49789DE064}) (Version: 1.00 - Aerosoft)
aerosoft's - Mega Airport Munich X (HKLM-x32\...\{1B19DA07-6870-4E60-9171-5C53AD21A0E0}) (Version: 1.02 - aerosoft)
Aerosoft's - Mega Airport Zurich 2012 - FSX (HKLM-x32\...\{463A571A-B793-459B-BEA8-028DC323AAB0}) (Version: 1.02 - Aerosoft)
Aerosoft's - MyTraffic 2013 (HKLM-x32\...\{37F50C53-EDED-4FFE-9877-532A335C5C18}) (Version: 1.00 - Aerosoft)
aerosoft's - Nice Cote dAzur X (HKLM-x32\...\{90447E05-DE8E-470D-8D3E-C871D2AE74AF}) (Version: 1.10 - aerosoft)
aerosoft's - OMSI 2 - Drei Generationen (HKLM-x32\...\{C88376AA-BF64-40F4-9AD6-F8A18DA394F2}) (Version: 1.20 - aerosoft)
aerosoft's - OMSI 2 - Hamburg (HKLM-x32\...\{5BF6B590-F7F5-46B5-B5F4-B0CA93423AD6}) (Version: 2.02 - aerosoft)
aerosoft's - OMSI 2 - Stadtbus O305 (HKLM-x32\...\{AE36259F-2F4F-44FA-87B7-3D1792ADDCA2}) (Version: 1.10 - aerosoft)
Aerosoft's - Skiathos X - FSX (HKLM-x32\...\Skiathos X - FSX) (Version: 1.00 - )
Aerosoft's - Twin Otter X Extended - FSX (HKLM-x32\...\Twin Otter X Extended - FSX) (Version: 1.11 - Aerosoft)
Airport Firefighters - The Simulation (HKLM-x32\...\Steam App 350530) (Version:  - )
AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Apple Application Support (32-Bit) (HKLM-x32\...\{447CDCE5-F555-429B-BFA6-642C3C6D684F}) (Version: 3.1.2 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{0DF7096B-715A-4233-8633-C7A16ED6D616}) (Version: 3.1.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team)
Avira (HKLM-x32\...\{0696cc37-db90-4000-be99-4a173ca7c8af}) (Version: 1.1.39.17987 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.39.17987 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.11.574 - Avira Operations GmbH & Co. KG)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Construction-Simulator 2015 (HKLM-x32\...\Steam App 289950) (Version:  - weltenbauer. Software Entwicklung GmbH)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DIE SIEDLER - Das Erbe der Könige - Gold Edition (HKLM-x32\...\{E08DE897-B6AF-4DFF-9E90-131E80C876B4}) (Version: 1.00.0000 - Blue Byte)
Emergency 5 - Deluxe Edition (HKLM-x32\...\Steam App 328140) (Version:  - Sixteen Tons Entertainment)
eSobi v2 (HKLM-x32\...\InstallShield_{15D967B5-A4BE-42AE-9E84-64CD062B25AA}) (Version: 2.0.4.000274 - esobi Inc.)
eSobi v2 (x32 Version: 2.0.4.000274 - esobi Inc.) Hidden
Farming Simulator 2013 (HKLM-x32\...\Steam App 220260) (Version:  - Giants Software)
FeelThere E-Jets v.2 SP1 (HKU\S-1-5-21-725278241-2998144640-1580927871-1000\...\FeelThere E-Jets v.2 SP1) (Version:  - )
Firefighters 2014 (HKLM-x32\...\Steam App 291910) (Version:  - VIS - Visual Imagination Software)
FlightBeam Washington Dulles FSX (HKLM-x32\...\FlightBeam Washington Dulles FSX_is1) (Version: 1.2.6 - FlightBeam.)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
FS2Crew: iFly737NG Button Control Edition (HKLM-x32\...\FS2Crew: iFly737NG Button Control Edition) (Version:  - )
FSDreamTeam GSX FSX (HKLM-x32\...\FSDreamTeam GSX FSX_is1) (Version: 1.9.0.9 - VIRTUALI Sagl)
FSX - Airbus A340-500 Basepack (HKLM-x32\...\FSX - Airbus A340-500 Basepack_is1) (Version:  - Thomas Ruth)
FSX - Airbus A340-500 Emirates (HKLM-x32\...\FSX - Airbus A340-500 Emirates_is1) (Version:  - Mario Monfrecola)
GeoGebra 5 (HKLM-x32\...\GeoGebra 5) (Version: 5.0.44.0 - International GeoGebra Institute)
GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.130 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
GoPro Studio 2.0.1 (HKLM-x32\...\GoPro Studio) (Version: 2.0.1 - WoodmanLabs Inc. d.b.a. GoPro)
Hotkey Utility (HKLM-x32\...\Hotkey Utility) (Version: 2.05.3001 - Acer Incorporated)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3003 - Acer Incorporated)
iFly Jets - The 737NG for FSX (HKLM-x32\...\iFly Jets - The 737NG for FSX) (Version:  - )
iFly Jets - The 747-400 V2 for FSX (HKLM-x32\...\iFly Jets - The 747-400 V2 for FSX) (Version:  - )
ImagXpress (x32 Version: 7.0.74.0 - Nero AG) Hidden
Inkscape 0.48.5 (HKLM-x32\...\Inkscape) (Version: 0.48.5 - )
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.0.19 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
iTunes (HKLM\...\{D227565A-0033-40AD-89BA-653A205CDC11}) (Version: 12.1.1.4 - Apple Inc.)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Java SE Development Kit 8 Update 25 (HKLM-x32\...\{32A3A4F4-B792-11D6-A78A-00B0D0180250}) (Version: 8.0.250.18 - Oracle Corporation)
Java-Editor 12.29, 2014.09.14 (HKLM-x32\...\{65FBA21B-7F80-4E4E-B275-0958D2648F94}_is1) (Version:  - Gerhard Röhner)
Just Flight - 146-200/300 Jetliner Expansion for FSX (HKLM-x32\...\{26D94D51-3341-46D2-ACA7-FD1B7F1ED14D}) (Version: 1.00.000 - Just Flight)
Just Flight - 146-200/300 Jetliner for FSX (HKLM-x32\...\{E37D25D8-56E4-480C-8010-B3B6FF96AC8F}) (Version: 1.00.000 - Just Flight)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
Landwirtschafts Simulator 15 (HKLM-x32\...\FarmingSimulator2015DE_is1) (Version: 1.2.0.0 - GIANTS Software)
Lexmark Pro5500 Series Deinstallationsprogamm (HKLM\...\Lexmark Pro5500 Series) (Version:  - Lexmark International, Inc.)
MAGIX Speed burnR (MSI) (HKLM-x32\...\MX.{AB8304F0-383F-4F80-8988-87727C415BF7}) (Version: 7.0.2.6 - MAGIX Software GmbH)
MAGIX Speed burnR (MSI) (Version: 7.0.2.6 - MAGIX Software GmbH) Hidden
MAGIX Video deluxe 2015 (HKLM\...\MX.{FFDC29E6-5C7C-4AA8-AF5A-99E015165382}) (Version: 14.0.0.159 - MAGIX Software GmbH)
MAGIX Video deluxe 2015 (Version: 14.0.0.159 - MAGIX Software GmbH) Hidden
Majestic MJC8Q400 (HKLM-x32\...\MJC8Q400) (Version:  - )
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Flight Simulator X Service Pack 2 (HKLM-x32\...\{E7CC4B85-DC2F-463F-8FEB-E7398E25C19A}) (Version: 10.0.61472.0 - Microsoft Game Studios)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 24.5.0 - Mozilla)
Mozilla Thunderbird 31.7.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 31.7.0 (x86 de)) (Version: 31.7.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser und SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MyWinLocker (x32 Version: 3.1.206.0 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\InstallShield_{738BF5C3-AF7B-4BB0-B7EF-E505EFC756BE}) (Version: 3.1.206.0 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 3.1.206.0 - Egis Technology Inc.) Hidden
Nero 9 Essentials (HKLM-x32\...\{8f9d5e25-6d54-4b98-a0fd-c0e10f922788}) (Version:  - Nero AG)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.4 - Notepad++ Team)
OMSI 2 (HKLM-x32\...\Steam App 252530) (Version:  - MR-Software GbR)
OpenOffice 4.1.0 (HKLM-x32\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation)
PMDG 777-200LR/F Base Package FSX (HKLM-x32\...\{0F16340B-5B5B-4531-8D87-4952E3BCA6E6}) (Version: 1.10.6155 - PMDG Simulations, LLC.)
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
RAAS Professional by FS2Crew (LOCKED) (HKLM-x32\...\RAAS Professional by FS2Crew (LOCKED)) (Version:  - )
Raptr (HKLM-x32\...\Raptr) (Version:  - )
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.67.1226.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7071 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{46710AEB-ACE9-4386-9DFB-8B65153BFA74}) (Version: 1.01.0094 - REALTEK Semiconductor Corp.)
RECYCLE (HKLM-x32\...\Steam App 294830) (Version:  - rondomedia GmbH)
REX Essential Plus Overdrive (HKLM-x32\...\REX Essential Plus Overdrive 3.6.2013.0415) (Version: 3.6.2013.0415 - REX Game Studios)
REX Essential Plus Overdrive (x32 Version: 3.6.2013.0415 - REX Game Studios) Hidden
Shredder (Version: 2.0.5.0 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.5.0 - Egis Technology Inc.) Hidden
Skype™ 7.5 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.5.101 - Skype Technologies S.A.)
Spintires (HKLM-x32\...\Steam App 263280) (Version:  - Oovee® Game Studios)
Spotify (HKU\S-1-5-21-725278241-2998144640-1580927871-1000\...\Spotify) (Version: 1.0.7.157.g2a6526f9 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
Stronghold 2 (HKLM-x32\...\{16D2C649-CBA8-44EE-B730-12584667D487}) (Version: 1.00 - Firefly Studios)
Suvarnabhumi International Airport (HKLM-x32\...\FSX_A_A_SCENERIES_SUVARNABHUMI_INT_is1) (Version: 1.0.0.0 - SimMarket)
TeamSpeak 3 Client (HKU\S-1-5-21-725278241-2998144640-1580927871-1000\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
VistaMare ViMaCore X (HKLM-x32\...\ViMaCore X) (Version:  - )
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.00.3013 - Acer Incorporated)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.10 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
Wise Auto Shutdown 1.38 (HKLM-x32\...\Wise Auto Shutdown_is1) (Version: 1.38 - WiseCleaner.com, Inc.)
ZSPD Shanghai 2014 FSX (HKLM-x32\...\{0A365F89-A2B8-40C9-BB66-2ABE0BA0F820}) (Version: 1.0.0 - Imagine Simulation)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-725278241-2998144640-1580927871-1000_Classes\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-725278241-2998144640-1580927871-1000_Classes\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-725278241-2998144640-1580927871-1000_Classes\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-725278241-2998144640-1580927871-1000_Classes\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\ooofilt_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-725278241-2998144640-1580927871-1000_Classes\CLSID\{AE424E85-F6DF-4910-A6A9-438797986431}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\propertyhdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-725278241-2998144640-1580927871-1000_Classes\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)

==================== Restore Points =========================


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0C135C99-D67E-4700-8960-DF78C84CA037} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Logon-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {604EACA5-E2F5-45DF-BDCD-8A369E3CCB4D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-24] (Google Inc.)
Task: {65AE76E3-90C0-487B-AF9E-7233573AD952} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {6DF158B0-3ECB-4A75-BF58-53D00D6D0E49} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {781EDB5B-1C4E-4CC3-AD38-ABF6FC17B59F} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {7FF3754A-3A2E-4110-BE95-5F6236F072F9} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {86E7921B-0A23-43DB-BFFA-E8E3E0EAE1A6} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {A8663EFB-EA2C-4673-9023-99427CCE6EF1} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2014-03-19] (Microsoft)
Task: {B59DCCC0-7C1B-4BE8-9D2E-609595D71D05} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {B8D00CC4-F9EF-4B48-9779-4CB8CDA6A6CB} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Time-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {B96844D2-74C7-47BB-83BD-BDBA6FA02213} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {EC3887B3-C4D4-4DFC-8D57-1365F2AB35A9} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => schtasks
Task: {FDB56D16-A626-4D55-9952-EEAF72E1F047} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-24] (Google Inc.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2015-02-13 05:20 - 2015-02-13 05:20 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-02-13 05:20 - 2015-02-13 05:20 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\Temp:054203E4

==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-725278241-2998144640-1580927871-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Leon\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: MWLService => 3
MSCONFIG\Services: Nero BackItUp Scheduler 4.0 => 3
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^CineForm Status.lnk => C:\Windows\pss\CineForm Status.lnk.CommonStartup
MSCONFIG\startupreg: EgisTecPMMUpdate => "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"
MSCONFIG\startupreg: EgisUpdate => "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d
MSCONFIG\startupreg: Hotkey Utility => C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: LMab1err => "C:\Program Files\Lexmark\ErrorApp\LMab1err.exe"
MSCONFIG\startupreg: LMADLmon => "C:\Program Files (x86)\Lexmark Pro5500 Series\LMADLmon.exe"
MSCONFIG\startupreg: mwlDaemon => C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: Raptr => C:\PROGRA~2\Raptr\raptrstub.exe --startup
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Leon\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
MSCONFIG\startupreg: SuiteTray => "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
MSCONFIG\startupreg: USB3MON => "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{4AC9993B-A908-4709-9560-9A038954965F}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
FirewallRules: [{91690CE6-C132-4ABF-8EDD-41ECB42C18F3}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
FirewallRules: [{77E82A15-9AFB-49AE-A004-5E3EF44B6715}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{AC9F047D-11BF-415A-8CF4-99CFB5C5B1FB}] => (Allow) LPort=2869
FirewallRules: [{AF23C4EC-BF2B-447D-88AA-458ACE840BF0}] => (Allow) LPort=1900
FirewallRules: [TCP Query User{BF6C3D7A-47AF-4F0E-AC39-CAA8C3CF22B7}C:\users\leon\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\leon\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{5030CB93-6E61-4469-9BAA-B3F2AFECA2E9}C:\users\leon\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\leon\appdata\roaming\spotify\spotify.exe
FirewallRules: [{B399BB23-6603-45AB-8541-B75FA6B65920}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{E125E6C1-BFDE-43DB-9676-7A83CA2A9562}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{93F71CC9-E446-48C3-9C06-F9C03C8C4502}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Firefighters 2014\Firefighters2014-x64.exe
FirewallRules: [{06C8991E-2088-414C-B71F-4322B65EBACC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Firefighters 2014\Firefighters2014-x64.exe
FirewallRules: [{D09D763D-2469-45A0-B7A8-DBFD6568C73E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Farming Simulator 2013\FarmingSimulator2013Game.exe
FirewallRules: [{1C791783-27AC-41EF-93B7-1C9450FFDF08}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Farming Simulator 2013\FarmingSimulator2013Game.exe
FirewallRules: [{5804352B-BF0A-4867-B957-849F614646AE}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{41420F50-13A1-4A99-9829-5BF571CD1E14}] => (Allow) C:\Program Files\Lexmark\Status Center\lmsmc.exe
FirewallRules: [{EAD327B1-E4F1-41A1-8038-14557A73E4E1}] => (Allow) C:\Program Files\Lexmark\Status Center\lmsmc.exe
FirewallRules: [{5530BDA3-9942-4905-A2FB-DC7C5DA6CB8E}] => (Allow) C:\Program Files (x86)\Lexmark\PSU\lmpsu.exe
FirewallRules: [{D89F3497-26BA-4967-A7B9-B333565CDAE3}] => (Allow) C:\Program Files (x86)\Lexmark\PSU\lmpsu.exe
FirewallRules: [{11E174A7-A71D-438A-B2EE-28EEA320AEDC}] => (Allow) C:\Program Files (x86)\Lexmark Pro5500 Series\LMADLmon.exe
FirewallRules: [{55AF88A4-3A89-48BD-97DC-7C8518CFE643}] => (Allow) C:\Program Files (x86)\Lexmark Pro5500 Series\LMADLmon.exe
FirewallRules: [{5736D1A7-14BF-40F9-9EB0-B4CFE0502C5A}] => (Allow) C:\Program Files (x86)\Lexmark Pro5500 Series\LMADLlscn.exe
FirewallRules: [{BD38AAF0-31DB-435B-85DE-64E4079AB6C5}] => (Allow) C:\Program Files (x86)\Lexmark Pro5500 Series\LMADLlscn.exe
FirewallRules: [{1604F272-B1D6-46D3-80FF-4703BBE293A3}] => (Allow) C:\Program Files (x86)\Lexmark Pro5500 Series\LMabscw.dll
FirewallRules: [{49FCAC43-E314-49FF-9B72-A9E3986A674F}] => (Allow) C:\Program Files (x86)\Lexmark Pro5500 Series\LMabscw.dll
FirewallRules: [{AD3E567D-F989-4F8E-822F-FF3ABF4C318F}] => (Allow) C:\Program Files (x86)\Lexmark\NetworkTwain\LMZZZ_32__bc.dll
FirewallRules: [{3D7118BD-7920-4A8C-A3A9-4797AD7DA451}] => (Allow) C:\Program Files (x86)\Lexmark\NetworkTwain\LMZZZ_32__bc.dll
FirewallRules: [{5B9C6633-EAF4-4568-98CB-0D91169F2F9A}] => (Allow) C:\Program Files (x86)\Lexmark\NetworkTwain\LMzzz_32serv.dll
FirewallRules: [{FA1BAFC1-BAF9-4D55-BDEC-F2700A5D26F8}] => (Allow) C:\Program Files (x86)\Lexmark\NetworkTwain\LMzzz_32serv.dll
FirewallRules: [{8325F69A-FFE3-4B84-9C76-246D06696C6A}] => (Allow) C:\Program Files (x86)\Lexmark\NetworkTwain\lextwprotocol.dll
FirewallRules: [{1994432D-0521-45FA-A3F2-6C06257A1411}] => (Allow) C:\Program Files (x86)\Lexmark\NetworkTwain\lextwprotocol.dll
FirewallRules: [{6066199D-52CF-4F0E-B7BF-68113B5CF549}] => (Allow) C:\Windows\twain_32\Lexmark\NetworkTwain\lexnetworkds.ds
FirewallRules: [{D4CC8AEF-3B9B-4B0A-B166-D6E426895D9A}] => (Allow) C:\Windows\twain_32\Lexmark\NetworkTwain\lexnetworkds.ds
FirewallRules: [TCP Query User{55486D15-A584-4615-AAD0-345514C54F8C}C:\program files (x86)\lexmark pro5500 series\lmadlmon.exe] => (Block) C:\program files (x86)\lexmark pro5500 series\lmadlmon.exe
FirewallRules: [UDP Query User{86C36EBF-E6A2-47C2-81BC-761C837FBFBD}C:\program files (x86)\lexmark pro5500 series\lmadlmon.exe] => (Block) C:\program files (x86)\lexmark pro5500 series\lmadlmon.exe
FirewallRules: [{67FE1219-FC7E-4620-B471-8E3C7F8C7AE6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\OMSI 2\Omsi.exe
FirewallRules: [{7069B78D-D5BD-4114-8AD2-D149C9AA9600}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\OMSI 2\Omsi.exe
FirewallRules: [TCP Query User{BC4861AD-94FF-40C1-A943-7DC6EE2AE66E}C:\users\leon\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\leon\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{36F34E50-B52A-49A1-B40A-0E070B00BB47}C:\users\leon\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\leon\appdata\roaming\spotify\spotify.exe
FirewallRules: [{A90343D7-4A2D-4AD1-9C83-4F9F606A1FBB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spintires\SpinTires.exe
FirewallRules: [{188A4707-A248-4387-8E17-BA761C361248}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spintires\SpinTires.exe
FirewallRules: [{D00F2A75-2E2C-40AA-BD7B-7577074C129B}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{DE7D19B6-AFF4-46C1-B08D-06041F190457}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{8E11EBE2-C6F7-48CA-AB53-6CE42DDAEB2E}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold 2\Stronghold2.exe
FirewallRules: [{0A07AEE9-0322-4A89-AD3C-FD7174993193}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold 2\Stronghold2.exe
FirewallRules: [TCP Query User{F6C54115-F318-4F53-AE44-B409575B3535}C:\program files (x86)\ubisoft\blue byte\die siedler - das erbe der könige - gold edition\bin\settlershok.exe] => (Block) C:\program files (x86)\ubisoft\blue byte\die siedler - das erbe der könige - gold edition\bin\settlershok.exe
FirewallRules: [UDP Query User{53F3B869-0F80-4CE8-A02E-14E7C3990B55}C:\program files (x86)\ubisoft\blue byte\die siedler - das erbe der könige - gold edition\bin\settlershok.exe] => (Block) C:\program files (x86)\ubisoft\blue byte\die siedler - das erbe der könige - gold edition\bin\settlershok.exe
FirewallRules: [TCP Query User{683713A0-DDCA-4B0A-9713-2BA96FCEAA97}C:\program files (x86)\ubisoft\blue byte\die siedler - das erbe der könige - gold edition\extra1\bin\settlershok.exe] => (Block) C:\program files (x86)\ubisoft\blue byte\die siedler - das erbe der könige - gold edition\extra1\bin\settlershok.exe
FirewallRules: [UDP Query User{4518F365-27F1-4716-B5BE-C049A1CFDB5E}C:\program files (x86)\ubisoft\blue byte\die siedler - das erbe der könige - gold edition\extra1\bin\settlershok.exe] => (Block) C:\program files (x86)\ubisoft\blue byte\die siedler - das erbe der könige - gold edition\extra1\bin\settlershok.exe
FirewallRules: [TCP Query User{EFAEF7F7-1F15-448B-81FD-B2DF21127D9B}C:\program files (x86)\ubisoft\blue byte\die siedler - das erbe der könige - gold edition\extra2\bin\settlershok.exe] => (Allow) C:\program files (x86)\ubisoft\blue byte\die siedler - das erbe der könige - gold edition\extra2\bin\settlershok.exe
FirewallRules: [UDP Query User{B1261D16-FDA3-4CF9-9BE6-6132883C096F}C:\program files (x86)\ubisoft\blue byte\die siedler - das erbe der könige - gold edition\extra2\bin\settlershok.exe] => (Allow) C:\program files (x86)\ubisoft\blue byte\die siedler - das erbe der könige - gold edition\extra2\bin\settlershok.exe
FirewallRules: [{9777BA1F-B0E2-4DFB-8794-4FCA685F17E3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\RECYCLE\recycle.exe
FirewallRules: [{B8BFC509-F515-4434-8583-491AAD87B262}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\RECYCLE\recycle.exe
FirewallRules: [{CFFA5EFA-1316-4334-881E-3D4F9F7B3479}] => (Allow) C:\Program Files (x86)\Landwirtschafts Simulator 2015\FarmingSimulator2015.exe
FirewallRules: [{DBC81785-7523-40A4-8EE9-E94BE757C154}] => (Allow) C:\Program Files (x86)\Landwirtschafts Simulator 2015\FarmingSimulator2015.exe
FirewallRules: [{35795477-12CB-4B17-84F4-893A0F2766DA}] => (Allow) C:\Program Files (x86)\Landwirtschafts Simulator 2015\x86\FarmingSimulator2015Game.exe
FirewallRules: [{C5BC7FE7-5377-4804-861B-21DB8A6AD8D9}] => (Allow) C:\Program Files (x86)\Landwirtschafts Simulator 2015\x86\FarmingSimulator2015Game.exe
FirewallRules: [{13943722-F10E-4FB1-A62D-F3DEC18A1709}] => (Allow) C:\Program Files (x86)\Landwirtschafts Simulator 2015\x64\FarmingSimulator2015Game.exe
FirewallRules: [{58A4F47F-9E14-4AA7-8A8A-70351C1C6B0A}] => (Allow) C:\Program Files (x86)\Landwirtschafts Simulator 2015\x64\FarmingSimulator2015Game.exe
FirewallRules: [{35086D91-9062-4E2D-853C-0B76ED6CB4A4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ConSim2015\ConSim2015.exe
FirewallRules: [{AB2FC8E8-A182-4C69-AC9D-8349C4FD84BE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ConSim2015\ConSim2015.exe
FirewallRules: [TCP Query User{B42C90D7-9510-42B6-BC83-F1F38C30B885}C:\program files (x86)\microsoft games\microsoft flight simulator x\aerosoft\airbus a318_a319\airbusxconnectextended.exe] => (Block) C:\program files (x86)\microsoft games\microsoft flight simulator x\aerosoft\airbus a318_a319\airbusxconnectextended.exe
FirewallRules: [UDP Query User{B28587AC-B84A-4319-BFEF-A3D041C426DB}C:\program files (x86)\microsoft games\microsoft flight simulator x\aerosoft\airbus a318_a319\airbusxconnectextended.exe] => (Block) C:\program files (x86)\microsoft games\microsoft flight simulator x\aerosoft\airbus a318_a319\airbusxconnectextended.exe
FirewallRules: [{43ED3B5B-372A-47BB-A9C8-B691119CCE6F}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{B3894D47-CAC5-4F6C-B9CA-731504894C16}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{AAD4BC12-3D78-4A50-8C4C-6499A5E77EEF}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{60671507-77F6-4C8B-908D-0C87AA18B91F}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [TCP Query User{51BB1D0A-8346-4A5A-82D7-1FA875832425}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Block) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{E1488DCD-D75F-4C8B-98BA-0C47C1422190}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Block) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{52AF9D69-F9A0-4C02-A31B-0AE100730D71}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{24378FBF-3869-48D4-9080-27B6C3E72C94}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{8409A5CF-EA88-482F-9836-4C8458F27070}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{05E62404-9C6E-4B2B-A497-3D3D50C80109}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{A9798D56-13C1-4A25-8F93-32946304839E}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{C6471739-9AB7-48C8-9BC1-B1D8E8B2ED22}] => (Allow) 潡⹤硥e￿￿
FirewallRules: [{1BB347D5-F29B-46FC-BEBD-CCF0081ABBD9}] => (Allow) 潡⹤硥e￿￿
FirewallRules: [{5CD6B6A2-7661-4786-BCBA-4309A03069AD}] => (Allow) 潡⹤硥e￿￿
FirewallRules: [{6560AFCF-09C7-42B1-A637-3729BBD587D4}] => (Allow) 潡⹤硥e￿￿
FirewallRules: [{1BA6EFEE-B0CA-4F13-89A5-66E2B5C49E61}] => (Allow) 潡⹤硥e￿￿
FirewallRules: [{58DC982F-28C7-43A2-96A7-76B54A363C97}] => (Allow) 潡⹤硥e￿￿
FirewallRules: [TCP Query User{EDCFEA31-6DF8-4429-81FC-58BD1322DAC4}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Block) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{82D55106-B927-4E3B-88B7-994D0DEB3C4A}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Block) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{CD3F4AB9-1924-4B78-BA4C-C5C5EC61D9B3}] => (Allow) 潡⹤硥e￿￿
FirewallRules: [{1B9636DA-C9F1-4D98-99CC-AF17EAA34528}] => (Allow) 潡⹤硥e￿￿
FirewallRules: [{87C640E9-E836-48C2-9746-0A6FAC4EF080}] => (Allow) 潡⹤硥e￿￿
FirewallRules: [{D19EC2E3-970D-403F-B16E-EAAD879CD7D9}] => (Allow) 潡⹤硥e￿￿
FirewallRules: [{E8F18811-DD7B-4C6B-9A58-096C1BD822F8}] => (Allow) 潡⹤硥e￿￿
FirewallRules: [{A8231431-75AA-444C-92B9-8C171ECC108B}] => (Allow) 潡⹤硥e￿￿
FirewallRules: [{3844A501-42EC-473B-BB77-07B8FFB7F8B7}] => (Allow) 潡⹤硥e￿￿
FirewallRules: [{8215888D-2C73-4E2F-BE30-5885A1D45109}] => (Allow) 潡⹤硥e￿￿
FirewallRules: [{FAF9FCEE-CBE7-4F7B-8C5D-ED75EE77E7C0}] => (Allow) 潡⹤硥e￿￿
FirewallRules: [{C6516983-59A7-4A96-AE53-8EF708130DBE}] => (Allow) C:\Program Files\MAGIX\Video deluxe 2015\Videodeluxe.exe
FirewallRules: [{B58304AB-030D-4CA1-A537-1D03F47B449E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Emergency 5\bin\em5_launcher.exe
FirewallRules: [{81220746-AB21-4874-A367-8A3CB8EF19C8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Emergency 5\bin\em5_launcher.exe
FirewallRules: [{DCD1F00A-FDC2-4812-A66E-656C77A9ECCC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Airport Firefighters - The Simulation\airportfirefighters2015.exe
FirewallRules: [{DD14CC71-9DD8-4A11-A363-9DE24529DA81}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Airport Firefighters - The Simulation\airportfirefighters2015.exe
FirewallRules: [{09B2FE5E-4580-4F7D-8DA8-559401CC8AC6}] => (Allow) 潡⹤硥e￿￿
FirewallRules: [TCP Query User{5A04129B-BFAB-4D12-91BB-558DBFBD7F8B}C:\program files (x86)\microsoft games\microsoft flight simulator x\aerosoft\airbus a320_a321\airbusxconnectextended.exe] => (Block) C:\program files (x86)\microsoft games\microsoft flight simulator x\aerosoft\airbus a320_a321\airbusxconnectextended.exe
FirewallRules: [UDP Query User{E60B3BE5-605B-4FC0-B6A2-7FFD911AEF95}C:\program files (x86)\microsoft games\microsoft flight simulator x\aerosoft\airbus a320_a321\airbusxconnectextended.exe] => (Block) C:\program files (x86)\microsoft games\microsoft flight simulator x\aerosoft\airbus a320_a321\airbusxconnectextended.exe
FirewallRules: [{F72D4EA5-44BD-4028-9F6A-030BEB691305}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (06/14/2015 10:33:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7ae7f
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18869, Zeitstempel: 0x556366f2
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000510e2
ID des fehlerhaften Prozesses: 0x11dc
Startzeit der fehlerhaften Anwendung: 0xwmpnetwk.exe0
Pfad der fehlerhaften Anwendung: wmpnetwk.exe1
Pfad des fehlerhaften Moduls: wmpnetwk.exe2
Berichtskennung: wmpnetwk.exe3

Error: (06/11/2015 03:34:04 PM) (Source: System Restore) (EventID: 8211) (User: )
Description: Der geplante Wiederherstellungspunkt konnte nicht erstellt werden. Zusätzliche Informationen: (0x8004231f).

Error: (06/11/2015 03:34:04 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Beschreibung = Geplanter Prüfpunkt; Fehler = 0x8004231f).

Error: (06/11/2015 01:03:13 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Videodeluxe.exe, Version: 14.0.0.159, Zeitstempel: 0x53f619a9
Name des fehlerhaften Moduls: Videodeluxe.exe, Version: 14.0.0.159, Zeitstempel: 0x53f619a9
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000003adb52
ID des fehlerhaften Prozesses: 0x15d8
Startzeit der fehlerhaften Anwendung: 0xVideodeluxe.exe0
Pfad der fehlerhaften Anwendung: Videodeluxe.exe1
Pfad des fehlerhaften Moduls: Videodeluxe.exe2
Berichtskennung: Videodeluxe.exe3

Error: (06/06/2015 09:48:39 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (06/03/2015 07:48:59 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: aeroSOFTLauncher.exe, Version: 1.0.0.2, Zeitstempel: 0x4d2b1b5b
Name des fehlerhaften Moduls: aeroSign-dll.dll, Version: 0.0.0.0, Zeitstempel: 0x4d259f7a
Ausnahmecode: 0xc0000417
Fehleroffset: 0x0001942f
ID des fehlerhaften Prozesses: 0x16ac
Startzeit der fehlerhaften Anwendung: 0xaeroSOFTLauncher.exe0
Pfad der fehlerhaften Anwendung: aeroSOFTLauncher.exe1
Pfad des fehlerhaften Moduls: aeroSOFTLauncher.exe2
Berichtskennung: aeroSOFTLauncher.exe3

Error: (05/28/2015 05:35:43 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm ConSim2015.exe, Version 4.6.4.7404 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: ae8

Startzeit: 01d09958bc300ae9

Endzeit: 80

Anwendungspfad: C:\Program Files (x86)\Steam\steamapps\common\ConSim2015\ConSim2015.exe

Berichts-ID: 291e4aac-054f-11e5-a75e-e03f491722e1

Error: (05/24/2015 00:44:32 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (05/19/2015 08:31:24 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (05/18/2015 03:28:55 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Omsi.exe, Version 2.2.17.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1554

Startzeit: 01d0916d207d7482

Endzeit: 50

Anwendungspfad: C:\Program Files (x86)\Steam\steamapps\common\OMSI 2\Omsi.exe

Berichts-ID: cb033d77-fd61-11e4-aba7-e03f491722e1


System errors:
=============
Error: (06/25/2015 07:24:02 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (06/25/2015 07:12:13 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Avira Real-Time Protection" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert.

Error: (06/25/2015 07:11:22 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Real-Time Protection" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (06/25/2015 07:10:29 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Real-Time Protection" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (06/25/2015 07:03:08 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (06/25/2015 06:08:52 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Avira Real-Time Protection" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert.

Error: (06/25/2015 06:07:30 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Real-Time Protection" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (06/25/2015 06:07:04 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Real-Time Protection" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (06/25/2015 05:59:19 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (06/25/2015 05:55:25 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Avira Real-Time Protection" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert.


Microsoft Office:
=========================
Error: (06/14/2015 10:33:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: wmpnetwk.exe12.0.7601.175144ce7ae7fntdll.dll6.1.7601.18869556366f2c000000500000000000510e211dc01d0a67ccdb07bf4C:\Program Files\Windows Media Player\wmpnetwk.exeC:\Windows\SYSTEM32\ntdll.dll13a12e28-1270-11e5-9276-e03f491722e1

Error: (06/11/2015 03:34:04 PM) (Source: System Restore) (EventID: 8211) (User: )
Description: 0x8004231f

Error: (06/11/2015 03:34:04 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreationGeplanter Prüfpunkt0x8004231f

Error: (06/11/2015 01:03:13 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Videodeluxe.exe14.0.0.15953f619a9Videodeluxe.exe14.0.0.15953f619a9c000000500000000003adb5215d801d0a429066d1f2fC:\Program Files\MAGIX\Video deluxe 2015\Videodeluxe.exeC:\Program Files\MAGIX\Video deluxe 2015\Videodeluxe.exe7396bebd-1029-11e5-b8ff-e03f491722e1

Error: (06/06/2015 09:48:39 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (06/03/2015 07:48:59 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: aeroSOFTLauncher.exe1.0.0.24d2b1b5baeroSign-dll.dll0.0.0.04d259f7ac00004170001942f16ac01d09e257f05f720C:\Program Files (x86)\Aerosoft\Launcher\aeroSOFTLauncher.exeC:\Program Files (x86)\Aerosoft\Launcher\aeroSign-dll.dllcf9ff82c-0a18-11e5-a76d-e03f491722e1

Error: (05/28/2015 05:35:43 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: ConSim2015.exe4.6.4.7404ae801d09958bc300ae980C:\Program Files (x86)\Steam\steamapps\common\ConSim2015\ConSim2015.exe291e4aac-054f-11e5-a75e-e03f491722e1

Error: (05/24/2015 00:44:32 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (05/19/2015 08:31:24 PM) (Source: SideBySide) (EventID: 63) (User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllc:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (05/18/2015 03:28:55 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Omsi.exe2.2.17.0155401d0916d207d748250C:\Program Files (x86)\Steam\steamapps\common\OMSI 2\Omsi.execb033d77-fd61-11e4-aba7-e03f491722e1


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-4670K CPU @ 3.40GHz
Percentage of memory in use: 21%
Total physical RAM: 8130.07 MB
Available physical RAM: 6409.98 MB
Total Pagefile: 16258.36 MB
Available Pagefile: 14339.75 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:456.45 GB) (Free:1.72 GB) NTFS
Drive d: (DATA) (Fixed) (Total:456.96 GB) (Free:220.11 GB) NTFS
Drive e: (Landwirtschafts-Simulator 2015) (CDROM) (Total:1.87 GB) (Free:0 GB) UDF
Drive l: (VERBATIM HD) (Fixed) (Total:1862.56 GB) (Free:339.67 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: A34DF892)
Partition 1: (Not Active) - (Size=18 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=456.5 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=457 GB) - (Type=07 NTFS)

========================================================
Disk: 6 (Size: 1863 GB) (Disk ID: D4652359)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=0C)

==================== End of log ============================
         

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-06-25 19:50:07
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 Hitachi_HDT721010SLA360 rev.ST6OA31B 931,51GB
Running: Gmer-19357.exe; Driver: C:\Users\Leon\AppData\Local\Temp\pxldapog.sys


---- User code sections - GMER 2.1 ----

.text   C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe[1804] C:\Windows\syswow64\psapi.dll!GetModuleFileNameExW + 17                                    0000000075d01401 2 bytes JMP 76c3b21b C:\Windows\syswow64\kernel32.dll
.text   C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe[1804] C:\Windows\syswow64\psapi.dll!EnumProcessModules + 17                                      0000000075d01419 2 bytes JMP 76c3b346 C:\Windows\syswow64\kernel32.dll
.text   C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe[1804] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 17                                    0000000075d01431 2 bytes JMP 76cb8f29 C:\Windows\syswow64\kernel32.dll
.text   C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe[1804] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 42                                    0000000075d0144a 2 bytes CALL 76c1489d C:\Windows\syswow64\kernel32.dll
.text   ...                                                                                                                                                       * 9
.text   C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe[1804] C:\Windows\syswow64\psapi.dll!EnumDeviceDrivers + 17                                       0000000075d014dd 2 bytes JMP 76cb8822 C:\Windows\syswow64\kernel32.dll
.text   C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe[1804] C:\Windows\syswow64\psapi.dll!GetDeviceDriverBaseNameA + 17                                0000000075d014f5 2 bytes JMP 76cb89f8 C:\Windows\syswow64\kernel32.dll
.text   C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe[1804] C:\Windows\syswow64\psapi.dll!QueryWorkingSetEx + 17                                       0000000075d0150d 2 bytes JMP 76cb8718 C:\Windows\syswow64\kernel32.dll
.text   C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe[1804] C:\Windows\syswow64\psapi.dll!GetDeviceDriverBaseNameW + 17                                0000000075d01525 2 bytes JMP 76cb8ae2 C:\Windows\syswow64\kernel32.dll
.text   C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe[1804] C:\Windows\syswow64\psapi.dll!GetModuleBaseNameW + 17                                      0000000075d0153d 2 bytes JMP 76c2fca8 C:\Windows\syswow64\kernel32.dll
.text   C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe[1804] C:\Windows\syswow64\psapi.dll!EnumProcesses + 17                                           0000000075d01555 2 bytes JMP 76c368ef C:\Windows\syswow64\kernel32.dll
.text   C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe[1804] C:\Windows\syswow64\psapi.dll!GetProcessMemoryInfo + 17                                    0000000075d0156d 2 bytes JMP 76cb8fe3 C:\Windows\syswow64\kernel32.dll
.text   C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe[1804] C:\Windows\syswow64\psapi.dll!GetPerformanceInfo + 17                                      0000000075d01585 2 bytes JMP 76cb8b42 C:\Windows\syswow64\kernel32.dll
.text   C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe[1804] C:\Windows\syswow64\psapi.dll!QueryWorkingSet + 17                                         0000000075d0159d 2 bytes JMP 76cb86dc C:\Windows\syswow64\kernel32.dll
.text   C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe[1804] C:\Windows\syswow64\psapi.dll!GetModuleBaseNameA + 17                                      0000000075d015b5 2 bytes JMP 76c2fd41 C:\Windows\syswow64\kernel32.dll
.text   C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe[1804] C:\Windows\syswow64\psapi.dll!GetModuleFileNameExA + 17                                    0000000075d015cd 2 bytes JMP 76c3b2dc C:\Windows\syswow64\kernel32.dll
.text   C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe[1804] C:\Windows\syswow64\psapi.dll!GetProcessImageFileNameW + 20                                0000000075d016b2 2 bytes JMP 76cb8ea4 C:\Windows\syswow64\kernel32.dll
.text   C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe[1804] C:\Windows\syswow64\psapi.dll!GetProcessImageFileNameW + 31                                0000000075d016bd 2 bytes JMP 76cb8671 C:\Windows\syswow64\kernel32.dll
.text   C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[3300] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17      0000000075d01401 2 bytes JMP 76c3b21b C:\Windows\syswow64\kernel32.dll
.text   C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[3300] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17        0000000075d01419 2 bytes JMP 76c3b346 C:\Windows\syswow64\kernel32.dll
.text   C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[3300] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17      0000000075d01431 2 bytes JMP 76cb8f29 C:\Windows\syswow64\kernel32.dll
.text   C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[3300] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42      0000000075d0144a 2 bytes CALL 76c1489d C:\Windows\syswow64\kernel32.dll
.text   ...                                                                                                                                                       * 9
.text   C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[3300] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17         0000000075d014dd 2 bytes JMP 76cb8822 C:\Windows\syswow64\kernel32.dll
.text   C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[3300] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17  0000000075d014f5 2 bytes JMP 76cb89f8 C:\Windows\syswow64\kernel32.dll
.text   C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[3300] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17         0000000075d0150d 2 bytes JMP 76cb8718 C:\Windows\syswow64\kernel32.dll
.text   C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[3300] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17  0000000075d01525 2 bytes JMP 76cb8ae2 C:\Windows\syswow64\kernel32.dll
.text   C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[3300] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17        0000000075d0153d 2 bytes JMP 76c2fca8 C:\Windows\syswow64\kernel32.dll
.text   C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[3300] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17             0000000075d01555 2 bytes JMP 76c368ef C:\Windows\syswow64\kernel32.dll
.text   C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[3300] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17      0000000075d0156d 2 bytes JMP 76cb8fe3 C:\Windows\syswow64\kernel32.dll
.text   C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[3300] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17        0000000075d01585 2 bytes JMP 76cb8b42 C:\Windows\syswow64\kernel32.dll
.text   C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[3300] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17           0000000075d0159d 2 bytes JMP 76cb86dc C:\Windows\syswow64\kernel32.dll
.text   C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[3300] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17        0000000075d015b5 2 bytes JMP 76c2fd41 C:\Windows\syswow64\kernel32.dll
.text   C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[3300] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17      0000000075d015cd 2 bytes JMP 76c3b2dc C:\Windows\syswow64\kernel32.dll
.text   C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[3300] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20  0000000075d016b2 2 bytes JMP 76cb8ea4 C:\Windows\syswow64\kernel32.dll
.text   C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[3300] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31  0000000075d016bd 2 bytes JMP 76cb8671 C:\Windows\syswow64\kernel32.dll

---- Threads - GMER 2.1 ----

Thread  c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [1988:2240]                                                                                000007fef620bc60
Thread  c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [1996:3148]                                                                               000007fef678f5f8
Thread  c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [1996:3156]                                                                               000007fef620bc60

---- EOF - GMER 2.1 ----
         

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 25.06.2015
Suchlauf-Zeit: 18:10:18
Logdatei:  Malwarebytes Anti-Malware .txt
Administrator: Ja

Version: 2.01.6.1022
Malware Datenbank: v2015.06.25.04
Rootkit Datenbank: v2015.06.22.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Leon

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 380577
Verstrichene Zeit: 18 Min, 47 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente gefunden)

Module: 0
(Keine schädliche Elemente gefunden)

Registrierungsschlüssel: 1
PUP.Optional.IEPluginServices.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\IePluginServices, In Quarantäne, [28c0ae102e5c0630d766c54c9b69768a], 

Registrierungswerte: 0
(Keine schädliche Elemente gefunden)

Registrierungsdaten: 0
(Keine schädliche Elemente gefunden)

Ordner: 0
(Keine schädliche Elemente gefunden)

Dateien: 0
(Keine schädliche Elemente gefunden)

Physische Sektoren: 0
(Keine schädliche Elemente gefunden)


(end)