Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Windows 8 - Internet wird abends sehr langsam (https://www.trojaner-board.de/156330-windows-8-internet-abends-sehr-langsam.html)

95Marcel95 10.07.2014 21:50
Windows 8 - Internet wird abends sehr langsam
 
Guten Tag.

Ich habe das Problem das mein Internet Abends immer sehr langsam ist.
Deswegen kann ich Abends nicht mehr machen, wofür och Internet brauche.

hxxp://www.speedtest.net/my-result/3616872102

Hier alle notwendigen Sachen:

Laufwerksemulationen abschalten mit Defogger - Erledigt

Code:
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 22:19 on 10/07/2014 (Administrator)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
Systemscan mit FRST - Im Anhang

Scan mit GMER - wird nachgereicht

schrauber 11.07.2014 07:08
Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.
Ich kann auf Arbeit keine Anhänge öffnen, danke.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

95Marcel95 11.07.2014 11:28
FRST - Teil 1

Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-07-2014
Ran by Administrator (administrator) on MARCEL on 10-07-2014 22:27:20
Running from C:\Users\Administrator\Downloads
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(HP) C:\Program Files (x86)\HP SimplePass\TrueSuiteService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicShellService.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Authentec Inc.) C:\Program Files\Protector Suite\upeksvr.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(AuthenTec Inc.) C:\Program Files (x86)\HP SimplePass\TouchControl.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Bitsum LLC) C:\Program Files\Process Lasso\ProcessGovernor.exe
(Bitsum LLC) C:\Program Files\Process Lasso\ProcessLasso.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Fork Ltd.) C:\Prey\platform\windows\cronsvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(devolo AG) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\nis.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(Softwareentwicklung Remus - ArchiCrypt) C:\Windows\SysWOW64\STGRAMDiskHandler64.exe
(Connectify) C:\Program Files (x86)\Connectify\ConnectifyService.exe
(Connectify) C:\Program Files (x86)\Connectify\Connectifyd.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86)\devolo\plcnetui\plcnetui.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Talk\TalkMonitor.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
() C:\Program Files (x86)\Acronis\DriveMonitor\adm_tray.exe
(CyberLink) C:\Program Files (x86)\CyberLink\SoftDMA\Kernel\DMR\DMREngine_iSale.exe
(Steganos Software GmbH) C:\Program Files (x86)\Steganos Privacy Suite 14\SteganosHotKeyService.exe
(Microsoft Corporation) C:\Windows\System32\msdt.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Steganos Software GmbH) C:\Program Files (x86)\Steganos Privacy Suite 14\fredirstarter.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\nis.exe
(Microsoft Corporation) C:\Windows\System32\sdiagnhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
() C:\Program Files (x86)\HP SimplePass\IEWebSiteLogon.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Clientnew\ts3client_win64.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\SndVol.exe
(Bohemia Interactive) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3.exe
(Valve Corporation) C:\Program Files (x86)\Steam\GameOverlayUI.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Oracle Corporation) C:\Program Files (x86)\Java\jre7\bin\jp2launcher.exe
(Oracle Corporation) C:\Program Files (x86)\Java\jre7\bin\java.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\nvspcap64.dll [1225920 2014-04-30] (NVIDIA Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [478984 2012-12-15] (Adobe Systems Incorporated)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2874168 2012-09-15] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2013-06-03] (IDT, Inc.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2199840 2014-04-30] (NVIDIA Corporation)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [462400 2011-02-12] (Acronis)
HKLM\...\Run: [AdAwareTray] => C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5152.0\AdAwareTray.exe [3987288 2013-12-11] ()
HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [581024 2012-09-07] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285240 2012-09-28] (Intel Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-04-23] (Apple Inc.)
HKLM-x32\...\Run: [ROCCATTalk] => C:\Program Files (x86)\ROCCAT\Talk\TalkMonitor.EXE [2154496 2011-07-12] (ROCCAT GmbH)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-04-10] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-10-26] (cyberlink)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [186408 2013-12-04] (Geek Software GmbH)
HKLM-x32\...\Run: [adm_tray.exe] => C:\Program Files (x86)\Acronis\DriveMonitor\adm_tray.exe [470120 2011-02-24] ()
HKLM-x32\...\Run: [DMREngine_iSale] => C:\Program Files (x86)\CyberLink\SoftDMA\Kernel\DMR\DMREngine_iSale.exe [306024 2013-07-29] (CyberLink)
HKLM-x32\...\Run: [Steganos HotKeys] => C:\Program Files (x86)\Steganos Privacy Suite 14\SteganosHotKeyService.exe [100864 2013-12-18] (Steganos Software GmbH)
HKLM-x32\...\Run: [SSS14 File Redirection Starter] => C:\Program Files (x86)\Steganos Privacy Suite 14\fredirstarter.exe [17920 2013-12-18] (Steganos Software GmbH)
HKLM-x32\...\Run: [WsmUpdater] => C:\Program Files (x86)\Web Solution Mart\Fake Webcam Codecs Pack\Updater.exe [292208 2012-05-18] (Web Solution Mart)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2014-05-27] (Hewlett-Packard)
HKLM\...\Winlogon: [Userinit] c:\windows\system32\userinit.exe,c:\program files\soluto\soluto.exe /userinit,C:\Windows\SysWOW64\MPK\mpk.exe
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\psfus: C:\Program Files\Protector Suite\psqlpwd.dll (Authentec Inc.)
HKU\.DEFAULT\...\Run: [OKAYFREEDOM_Agent] => "C:\Program Files (x86)\OkayFreedom\OkayFreedomClient.exe" -agent
HKU\S-1-5-21-3786530795-813635038-3550015045-500\...\Run: [C:\Program Files (x86)\NetMeter\NetMeter.exe] => C:\Program Files (x86)\NetMeter\NetMeter.exe [293888 2009-08-09] ()
HKU\S-1-5-21-3786530795-813635038-3550015045-500\...\MountPoints2: {1f320137-84ee-11e2-be72-806e6f6e6963} - "E:\autorun.exe"
AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [166568 2014-06-13] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [146480 2014-06-13] (NVIDIA Corporation)
Lsa: [Notification Packages] scecli C:\Program Files\Protector Suite\psqlpwd.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)
Startup: C:\Users\Marcel-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 2050 J510 series.lnk
ShortcutTarget: Tintenwarnungen überwachen - HP Deskjet 2050 J510 series.lnk -> C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
Startup: C:\Users\Marcel-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\uiStub.exe - Verknüpfung.lnk
ShortcutTarget: uiStub.exe - Verknüpfung.lnk -> C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\uiStub.exe (No File)
ShellIconOverlayIdentifiers:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
ShellIconOverlayIdentifiers:  SkyDrivePro1 (ErrorConflict) -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers:  SkyDrivePro2 (SyncInProgress) -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers:  SkyDrivePro3 (InSync) -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: ShareOverlay -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
ShellIconOverlayIdentifiers: UEAFOverlay -> {F2F31467-B1AC-4df0-AE79-FD5FA085E22B} => C:\Program Files\Protector Suite\farchns.dll (Authentec Inc.)
ShellIconOverlayIdentifiers: UEAFOverlayOpen -> {A3E208F7-0E3A-4182-A7A6-B169D5D691AA} => C:\Program Files\Protector Suite\farchns.dll (Authentec Inc.)
ShellIconOverlayIdentifiers-x32:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers-x32:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers-x32:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
ShellIconOverlayIdentifiers-x32:  SkyDrivePro1 (ErrorConflict) -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32:  SkyDrivePro2 (SyncInProgress) -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32:  SkyDrivePro3 (InSync) -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: ShareOverlay -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)

==================== Internet (Whitelisted) ====================

ProxyServer: http=127.0.0.1:13828
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPNTDFJS
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM - {F4FB02E6-D448-4915-9B53-67D5766FFFFA} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {D944BB61-2E34-4DBF-A683-47E505C587DC} URL =
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL =
SearchScopes: HKCU - {F4FB02E6-D448-4915-9B53-67D5766FFFFA} URL =
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation)
BHO: RoboForm Toolbar Helper - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_64.dll (IvoSoft)
BHO-x32: No Name - {206E52E0-D52E-11D4-AD54-0000E86C26F6} - C:\Program Files (x86)\FreshDevices\FreshDownload\fdcatch.dll (FreshDevices Corp.)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation)
BHO-x32: Pagealicious - {60C07B56-542E-4054-A503-4E9E08DF2F84} - C:\Program Files (x86)\Pagealicious\Pagealicious.dll (TODO: <Company name>)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: RoboForm Toolbar Helper - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: No Name - {C4415769-1588-4AD6-9624-B2E69DB78D1A} -  No File
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM - Steganos Password Manager Toolbar - {9C65D12D-CF9D-454D-8049-61965D8C6FFF} - C:\Program Files (x86)\Steganos Privacy Suite 14\SPMIEToolbar64.dll (Steganos Software GmbH)
Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
Toolbar: HKLM-x32 - FreshDownload Bar - {ED0E8CA5-42FB-4B18-997B-769E0408E79D} - C:\Program Files (x86)\FreshDevices\FreshDownload\fdiebar.dll (FreshDevices Corp.)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Steganos Password Manager Toolbar - {9C65D12D-CF9D-454D-8049-61965D8C6FFF} - C:\Program Files (x86)\Steganos Privacy Suite 14\SPMIEToolbar.dll (Steganos Software GmbH)
Toolbar: HKLM-x32 - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1209149.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @authentec.com/ffwloplugin - C:\Program Files (x86)\HP SimplePass\npffwloplugin.dll ( HP)
FF Plugin-x32: @gametap.com/npdd,version=1.0 - C:\Program Files (x86)\Downloader\npdd.dll (Metaboli)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF [2013-12-26]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn [2014-07-10]
FF HKLM-x32\...\Firefox\Extensions: [{00F0643E-B367-4779-B45D-7046EBA37A88}] - C:\Program Files (x86)\Steganos Privacy Suite 14\spmplugin3
FF Extension: Steganos Password Manager - C:\Program Files (x86)\Steganos Privacy Suite 14\spmplugin3 [2014-01-10]
FF HKLM-x32\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox
FF Extension: RoboForm Toolbar for Firefox - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox [2014-02-05]

Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR Extension: (Google Docs) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-05-06]
CHR Extension: (Google Drive) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-06]
CHR Extension: (YouTube) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-06]
CHR Extension: (Adblock Plus) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-06-06]
CHR Extension: (Search) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-06]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2014-05-06]
CHR Extension: (Website Logon) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\kanflfepiobnpjbljmngfgegijhdpljm [2014-05-06]
CHR Extension: (Norton Identity Protection) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2014-05-12]
CHR Extension: (Google Wallet) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-06]
CHR Extension: (Google Mail) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-06]
CHR Extension: (RoboForm) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnlccmojcmeohlpggmfnbbiapkmbliob [2014-05-06]
CHR HKLM-x32\...\Chrome\Extension: [hdokiejnpimakedhajhdlcegeplioahd] - C:\Program Files (x86)\LastPass\lpchrome.crx [2013-07-29]
CHR HKLM-x32\...\Chrome\Extension: [kanflfepiobnpjbljmngfgegijhdpljm] - C:\Program Files (x86)\HP SimplePass\tschrome.crx [2013-04-01]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\Exts\Chrome.crx [2014-05-23]
CHR HKLM-x32\...\Chrome\Extension: [pnlccmojcmeohlpggmfnbbiapkmbliob] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Chrome\rf-chrome.crx [2014-02-05]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2014-07-04] () [File not signed]
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-07-17] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-07-17] (BlueStack Systems, Inc.)
R2 ClassicShellService; C:\Program Files\Classic Shell\ClassicShellService.exe [68608 2013-06-29] (IvoSoft) [File not signed]
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [241776 2013-01-28] (CyberLink)
R2 Connectify; C:\Program Files (x86)\Connectify\ConnectifyService.exe [487936 2013-12-23] (Connectify) [File not signed]
R2 CronService; C:\Prey\platform\windows\cronsvc.exe [23552 2013-05-08] (Fork Ltd.) [File not signed]
R2 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [3128856 2012-02-28] (devolo AG)
S3 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\DfsdkS64.exe [544768 2009-08-24] (mst software GmbH, Germany) [File not signed]
S4 EBOOSTRSVC; C:\Program Files\eBoostr\EBstrSvc.exe [814328 2012-04-17] (eBoostr.com)
R2 FPLService; C:\Program Files (x86)\HP SimplePass\TrueSuiteService.exe [1641768 2013-06-07] (HP)
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [86528 2012-09-27] (Hewlett-Packard Company) [File not signed]
R2 HPConnectedRemote; C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe [38712 2013-01-10] (Hewlett-Packard)
R3 ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2012-02-01] (Intel Corporation) [File not signed]
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-05-09] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-05-09] (Intel Corporation)
S4 lansweeperservice; C:\Program Files (x86)\Lansweeper\Service\Lansweeperservice.exe [8115200 2013-12-12] (Lansweeper) [File not signed]
S4 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5152.0\AdAwareService.exe [513736 2013-12-11] ()
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\NIS.exe [276376 2014-05-11] (Symantec Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21009352 2014-04-30] (NVIDIA Corporation)
S3 OpenVPNService; C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe [14848 2011-12-15] () [File not signed]
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2013-12-29] ()
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013.SP5\RpcAgentSrv.exe [72344 2008-11-25] (SiSoftware) [File not signed]
S4 SBUpd; C:\Program Files\Common Files\SpeedBit\SBUpdate\sbu.exe [2541688 2014-03-04] (Speedbit Ltd.)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia)
S2 sfrem01; C:\Windows\system32\sfrem01.exe [601208 2006-07-05] (Protection Technology (StarForce))
S4 SolutoLauncherService; C:\Program Files\Soluto\SolutoLauncherService.exe [221728 2013-08-17] (Soluto)
S4 SolutoRemoteService; C:\Program Files\Soluto\SolutoRemoteService.exe [1942528 2013-08-17] (GlavSoft LLC.) [File not signed]
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [333824 2013-06-03] (IDT, Inc.) [File not signed]
R2 Steganos Volatile Disk; C:\WINDOWS\SysWOW64\STGRAMDiskHandler64.exe [450560 2013-07-17] (Softwareentwicklung Remus - ArchiCrypt) [File not signed]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 TrueService; C:\Program Files\Common Files\AuthenTec\TrueService.exe [401856 2013-01-07] (AuthenTec, Inc.)
S4 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [28160 2012-09-06] () [File not signed]
S4 VideoAcceleratorService; C:\Program Files (x86)\SpeedBit Video Accelerator\VideoAcceleratorService.exe [298152 2014-03-04] (SPEEDbit)
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2013-11-24] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [18384 2013-09-04] (Intel(R) Corporation)
S2 BetterMarkIt; C:\Program Files (x86)\bettermarkit\BetterMarkIt153.exe [X]
S4 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [X]
S2 MBAMScheduler; "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe" [X]
S2 MBAMService; "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe" [X]

==================== Drivers (Whitelisted) ====================

S3 AIDA64Driver; C:\Program Files (x86)\FinalWire\AIDA64 Extreme\kerneld.x64 [34136 2014-02-11] ()
R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20140703.001\BHDrvx64.sys [1530160 2014-05-10] (Symantec Corporation)
S2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-07-17] (BlueStack Systems)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1503000.00C\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R1 cnnctfy3; C:\Windows\system32\DRIVERS\cnnctfy3.sys [35352 2014-01-10] (Connectify)
R0 eBoost; C:\Windows\System32\drivers\eBoost.sys [189816 2012-04-17] (eBoostr.com)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [486192 2014-06-11] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142128 2014-06-11] (Symantec Corporation)
S3 FreshIO; C:\Program Files (x86)\FreshDevices\FreshDiagnose\FreshIO.sys [2410 2004-10-26] () [File not signed]
S3 fwdrv; C:\Windows\system32\DRIVERS\fwdrv.sys [26320 2012-12-14] (Web Solution Mart)
S3 hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [46136 2013-07-03] (LogMeIn Inc.)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20140709.001\IDSvia64.sys [525016 2014-07-03] (Symantec Corporation)
R2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [26328 2013-07-23] (Intel Corporation)
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115600 2010-01-29] (EZB Systems, Inc.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-08-27] (Intel Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140710.001\ENG64.SYS [126040 2014-07-04] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140710.001\EX64.SYS [2099288 2014-07-04] (Symantec Corporation)
R1 networx; C:\Windows\System32\drivers\networx.sys [43512 2013-10-21] (NetFilterSDK.com)
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2012-01-31] (CACE Technologies)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19744 2014-04-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia)
S3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [47632 2013-04-29] (Panda Security, S.L.)
S3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [273040 2013-07-30] (Realtek Semiconductor Corp.)
R3 rtbth; C:\Windows\System32\drivers\rtbth.sys [1204424 2014-01-30] (Ralink Technology, Corp.)
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013.SP5\WNt500x64\Sandra.sys [23112 2009-08-07] (SiSoftware)
S3 SBUpdd; C:\Program Files\Common Files\SpeedBit\SBUpdate\sbw.sys [41368 2014-03-04] ()
R0 sfdrv01a; C:\Windows\System32\drivers\sfdrv01a.sys [77432 2009-02-03] (Protection Technology (StarForce))
R0 sfvfs02; C:\Windows\System32\drivers\sfvfs02.sys [107384 2007-02-08] (Protection Technology (StarForce))
R1 SLEE_18_DRIVER; C:\WINDOWS\Sleen1864.sys [109144 2013-11-18] (Softwareentwicklung Remus - ArchiCrypt - )
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [41272 2012-09-15] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-09-15] (Synaptics Incorporated)
R1 SRTSP; C:\Windows\System32\Drivers\NISx64\1503000.00C\SRTSP64.SYS [875736 2014-02-13] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1503000.00C\SRTSPX64.SYS [36952 2013-09-10] (Symantec Corporation)
R1 STGMFEngine64; C:\WINDOWS\system32\drivers\STGMFEngine64.sys [28576 2013-07-17] (Softwareentwicklung Remus - ArchiCrypt.com)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1503000.00C\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1503000.00C\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NISx64\1503000.00C\SymELAM.sys [23568 2013-09-10] (Symantec Corporation)
R3 SymEvent; C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-12-26] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1503000.00C\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1503000.00C\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation)
S3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [329800 2013-07-17] (BitDefender S.R.L.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
S3 WinRing0_1_2_0; C:\Program Files (x86)\BatteryCare\WinRing0x64.sys [14544 2008-07-26] (OpenLibSys.org)
R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2012-08-31] (Hewlett-Packard Development Company, L.P.)
S3 ALSysIO; \??\C:\Users\Marcel-\AppData\Local\Temp\ALSysIO64.sys [X]
S3 BtAudioBusSrv; \SystemRoot\System32\Drivers\BtAudioBus.sys [X]
S3 BthL2caScoIfSrv; \SystemRoot\System32\Drivers\BtL2caScoIf.sys [X]
S3 btUrbFilterDrv; \SystemRoot\System32\Drivers\IvtUrbBtFlt.sys [X]
S3 cpuz136; \??\C:\WINDOWS\TEMP\cpuz136\cpuz136_x64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-10 22:27 - 2014-07-10 22:27 - 00000000 _____ () C:\Users\Administrator\Downloads\FRST.txt
2014-07-10 22:26 - 2014-07-10 22:26 - 02084864 _____ (Farbar) C:\Users\Administrator\Downloads\FRST64.exe
2014-07-10 22:19 - 2014-07-10 22:19 - 00000488 _____ () C:\Users\Administrator\Downloads\defogger_disable.log
2014-07-10 22:19 - 2014-07-10 22:19 - 00000000 _____ () C:\Users\Administrator\defogger_reenable
2014-07-10 22:18 - 2014-07-10 22:18 - 00050477 _____ () C:\Users\Administrator\Downloads\Defogger.exe
2014-07-10 22:13 - 2014-07-10 22:13 - 00961360 _____ (Chip Digital GmbH) C:\Users\Administrator\Downloads\HijackThis - CHIP-Installer.exe
2014-07-10 21:58 - 2014-07-10 21:58 - 28013520 _____ (Wireshark development team) C:\Users\Administrator\Downloads\Wireshark-win64-1.10.8.exe
2014-07-09 20:03 - 2014-07-09 20:03 - 07719416 _____ (devolo AG) C:\Users\Administrator\Downloads\software-dlan-500-av-wireless-plus-v3-0-0-firmware-updater.exe
2014-07-09 19:56 - 2014-07-09 19:56 - 00002030 _____ () C:\Users\Public\Desktop\devolo dLAN Cockpit.lnk
2014-07-09 19:56 - 2014-07-09 19:56 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\de.devolo.dLAN.Cockpit
2014-07-09 19:56 - 2014-07-09 19:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\devolo
2014-07-09 19:55 - 2014-07-09 19:56 - 00000000 ____D () C:\Program Files (x86)\devolo
2014-07-09 13:32 - 2014-06-26 22:55 - 00703968 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-07-09 13:32 - 2014-06-26 22:55 - 00105440 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-09 13:23 - 2014-04-14 05:29 - 01018880 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2014-07-09 12:24 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-07-09 12:24 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-07-09 12:24 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-07-09 12:24 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-07-09 12:24 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-07-09 12:24 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-07-09 12:24 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-07-09 12:24 - 2014-06-19 01:46 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-07-09 12:24 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-07-09 12:24 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-07-09 12:24 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-07-09 12:24 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-07-09 12:24 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-07-09 12:24 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-07-09 12:24 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-07-09 12:24 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-07-09 12:24 - 2014-06-19 00:57 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-07-09 12:24 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-07-09 12:24 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-07-09 12:24 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-07-09 12:24 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-07-09 12:24 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-07-09 12:24 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-07-09 12:24 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-07-09 12:24 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-07-09 12:24 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-07-09 12:24 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-07-09 12:24 - 2014-06-17 00:26 - 00779264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osk.exe
2014-07-09 12:24 - 2014-06-17 00:24 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2014-07-09 12:24 - 2014-06-06 16:20 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-07-09 12:24 - 2014-06-06 15:04 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2014-07-09 12:24 - 2014-06-06 14:18 - 00488960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2014-07-09 12:24 - 2014-05-30 05:03 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2014-07-09 12:24 - 2014-05-29 14:02 - 00565576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-07-09 12:24 - 2014-05-29 09:55 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-07-09 12:24 - 2014-05-29 08:40 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-07-09 12:24 - 2014-05-29 08:37 - 00436224 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2014-07-09 12:24 - 2014-05-29 07:34 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2014-07-09 12:24 - 2014-05-29 07:27 - 01417216 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-07-09 12:23 - 2014-05-31 12:07 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-07-09 12:23 - 2014-05-31 12:06 - 00555736 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2014-07-09 12:23 - 2014-05-31 05:40 - 13287936 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-07-09 12:23 - 2014-05-31 05:30 - 11792384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-07-09 12:23 - 2014-05-31 05:12 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-09 12:23 - 2014-05-31 05:06 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-07-09 12:23 - 2014-05-31 05:03 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-07-09 12:23 - 2014-05-31 05:01 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-09 12:23 - 2014-05-31 04:56 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-07-09 12:23 - 2014-05-31 04:54 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-07-09 12:23 - 2014-05-31 04:48 - 03463680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-07-09 12:23 - 2014-05-31 04:37 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-07-09 12:23 - 2014-05-31 04:36 - 00923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-07-09 12:23 - 2014-05-31 04:35 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2014-07-09 12:23 - 2014-05-31 04:32 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-07-08 21:22 - 2014-07-08 21:22 - 00001147 _____ () C:\Users\Administrator\Desktop\FreePortScanner.lnk
2014-07-08 21:22 - 2014-07-08 21:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreePortScanner
2014-07-08 21:22 - 2014-07-08 21:22 - 00000000 ____D () C:\Program Files (x86)\Nsasoft
2014-07-08 21:18 - 2014-07-08 21:18 - 00598416 _____ (Nsasoft LLC. ) C:\Users\Administrator\Downloads\free-port-scanner_10262.exe
2014-07-08 11:51 - 2014-07-08 11:51 - 01017285 _____ () C:\Users\Administrator\Downloads\ARMA III Alpha Super L33T Menu 4.7 SPJESTER_[www.unknowncheats.me]_.zip
2014-07-07 22:34 - 2014-07-07 22:34 - 00019761 _____ () C:\Users\Administrator\Downloads\313_mpgh.net.rar
2014-07-07 22:34 - 2014-07-04 21:48 - 00219645 _____ () C:\Users\Administrator\Desktop\313.sqf
2014-07-07 19:03 - 2014-07-07 19:40 - 00000527 _____ () C:\Users\Administrator\Documents\arma3.CT
2014-07-07 18:59 - 2014-07-07 18:59 - 00001107 _____ () C:\Users\Administrator\Desktop\Cheat Engine.lnk
2014-07-07 18:59 - 2014-07-07 18:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.4
2014-07-07 18:59 - 2014-07-07 18:59 - 00000000 ____D () C:\Program Files (x86)\Cheat Engine 6.4
2014-07-07 18:53 - 2014-07-07 18:53 - 09052432 _____ (Cheat Engine ) C:\Users\Administrator\Downloads\CheatEngine64.exe
2014-07-07 18:46 - 2014-07-07 18:46 - 00017100 _____ () C:\Users\Administrator\Downloads\_src.zip
2014-07-07 17:09 - 2014-07-07 17:11 - 00000000 ____D () C:\Program Files (x86)\Quick Memory Editor
2014-07-07 17:09 - 2014-07-07 17:09 - 02125503 _____ (softcows.com ) C:\Users\Administrator\Downloads\Quick Memory Editor.exe
2014-07-07 17:09 - 2014-07-07 17:09 - 00001111 _____ () C:\Users\Marcel-\Desktop\Quick Memory Editor.lnk
2014-07-07 17:09 - 2014-07-07 17:09 - 00001111 _____ () C:\Users\Administrator\Desktop\Quick Memory Editor.lnk
2014-07-07 17:09 - 2014-07-07 17:09 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Quick Memory Editor
2014-07-07 17:09 - 2014-07-07 17:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Quick Memory Editor
2014-07-05 13:52 - 2014-07-05 13:52 - 00002317 _____ () C:\Users\Administrator\Downloads\DayZ Mod & SA ammo Values by ThirtySix.txt
2014-07-04 17:51 - 2014-07-05 13:22 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-07-04 17:51 - 2014-07-05 13:22 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-07-04 17:50 - 2014-06-13 04:11 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2014-07-04 17:50 - 2014-06-13 04:11 - 00062808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2014-07-04 17:44 - 2014-06-13 04:59 - 01890264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6434043.dll
2014-07-04 17:44 - 2014-06-13 04:59 - 01542088 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6434043.dll
2014-07-04 17:44 - 2014-06-13 04:59 - 00026353 _____ () C:\WINDOWS\system32\nvinfo.pb
2014-07-04 17:44 - 2014-06-13 04:48 - 13911928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 13824408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 11272544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 11211224 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 04248520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 03989464 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 00946120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 00909256 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 00902616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 00869336 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 00391456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 00348120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 31512352 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 24198616 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 18625768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 17553032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 16122344 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 14497528 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 12860888 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2014-07-04 17:44 - 2014-06-13 04:47 - 00502048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 00417568 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 00033736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys
2014-07-04 17:44 - 2014-06-13 04:46 - 22994392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2014-07-04 17:44 - 2014-06-13 04:46 - 15294296 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2014-07-04 17:44 - 2014-06-13 04:46 - 02814120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2014-07-04 17:44 - 2014-06-13 04:46 - 00965312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2014-07-04 17:44 - 2014-06-13 04:46 - 00846832 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2014-07-04 17:44 - 2014-06-13 04:46 - 00354016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2014-07-04 17:44 - 2014-06-13 04:46 - 00305600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2014-07-04 17:44 - 2014-06-13 04:46 - 00166568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2014-07-04 17:44 - 2014-06-13 04:46 - 00146480 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2014-07-04 17:44 - 2014-06-13 04:45 - 03196304 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2014-07-04 15:23 - 2014-07-04 15:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ad-Aware Antivirus
2014-07-04 15:23 - 2014-07-04 15:23 - 00000000 ____D () C:\Program Files\Lavasoft
2014-07-04 15:23 - 2014-07-04 15:23 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft
2014-07-04 15:01 - 2014-07-04 15:01 - 00000000 ____D () C:\WINDOWS\Panther
2014-07-04 14:55 - 2014-07-04 14:55 - 00000842 _____ () C:\WINDOWS\setupact.log
2014-07-04 14:55 - 2014-07-04 14:55 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-07-04 14:35 - 2014-07-04 14:35 - 00002263 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (6).lnk
2014-07-04 14:30 - 2014-07-04 14:30 - 00000000 ____D () C:\Users\Administrator\AppData\Local\NPE
2014-07-04 12:39 - 2014-07-04 12:39 - 03081712 ____N (Symantec Corporation) C:\Users\Administrator\Downloads\NPE.exe
2014-07-04 12:32 - 2014-07-04 12:32 - 00002263 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (5).lnk
2014-07-04 12:20 - 2014-07-04 12:20 - 00002263 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (4).lnk
2014-07-04 12:15 - 2014-07-04 12:37 - 00001436 _____ () C:\Users\Administrator\Desktop\Google Chrome.lnk
2014-07-04 12:15 - 2014-07-04 12:15 - 00002299 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (3).lnk
2014-07-04 12:15 - 2014-07-04 12:15 - 00002299 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (2).lnk
2014-07-04 12:15 - 2014-07-04 12:15 - 00001079 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-07-04 12:15 - 2014-07-04 12:15 - 00001023 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-04 12:13 - 2014-05-09 01:06 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2014-07-04 12:12 - 2014-07-05 13:41 - 00000000 ____D () C:\Users\Administrator\AppData\Local\LogMeIn Rescue Applet
2014-07-04 12:12 - 2014-07-04 12:12 - 00002299 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec.lnk
2014-07-04 12:06 - 2014-04-18 10:21 - 01126912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-07-04 12:06 - 2014-04-18 10:09 - 08652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-07-04 12:06 - 2014-04-18 09:51 - 00836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-07-04 12:06 - 2014-04-18 09:49 - 05833216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-07-04 12:06 - 2014-04-06 18:31 - 21268952 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-07-04 12:06 - 2014-04-06 18:20 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-07-04 12:06 - 2014-04-06 17:22 - 18755672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-07-04 12:06 - 2014-04-06 13:55 - 16872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-07-04 12:06 - 2014-04-06 13:54 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-07-04 12:06 - 2014-04-06 12:52 - 00955904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-07-04 12:06 - 2014-04-06 12:51 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-07-04 12:06 - 2014-04-06 12:37 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-07-04 12:06 - 2014-04-03 10:12 - 02124840 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2014-07-04 12:06 - 2014-04-03 05:53 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2014-07-04 12:06 - 2014-04-03 04:53 - 04269056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-07-04 12:06 - 2014-03-31 07:42 - 07425368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-07-04 12:06 - 2014-03-31 00:54 - 01308160 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2014-07-04 12:06 - 2014-03-20 02:44 - 06645248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-07-04 12:06 - 2014-03-20 01:33 - 05774848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-07-04 12:06 - 2014-03-19 06:18 - 02688000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-07-04 12:06 - 2014-03-18 07:00 - 07173120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2014-07-04 12:06 - 2014-03-18 06:52 - 05104640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2014-07-04 12:05 - 2014-04-18 16:57 - 00032600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-07-04 12:05 - 2014-04-18 16:44 - 01466856 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-07-04 12:05 - 2014-04-18 15:29 - 01200288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-07-04 12:05 - 2014-04-18 11:44 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll
2014-07-04 12:05 - 2014-04-18 10:32 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-07-04 12:05 - 2014-04-14 11:20 - 00324888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2014-07-04 12:05 - 2014-04-14 10:01 - 00285144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2014-07-04 12:05 - 2014-04-11 08:13 - 01200128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2014-07-04 12:05 - 2014-04-11 06:51 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2014-07-04 12:05 - 2014-04-11 06:23 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2014-07-04 12:05 - 2014-04-11 05:30 - 00449536 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2014-07-04 12:05 - 2014-04-09 13:53 - 00337240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-07-04 12:05 - 2014-04-09 08:39 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll
2014-07-04 12:05 - 2014-04-09 07:44 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll
2014-07-04 12:05 - 2014-04-09 05:33 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2014-07-04 12:05 - 2014-04-08 04:01 - 00589656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2014-07-04 12:05 - 2014-04-06 18:34 - 00372568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2014-07-04 12:05 - 2014-04-06 18:34 - 00275800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2014-07-04 12:05 - 2014-04-06 18:32 - 00125496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2014-07-04 12:05 - 2014-04-06 18:30 - 00201920 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2014-07-04 12:05 - 2014-04-06 18:24 - 00360792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2014-07-04 12:05 - 2014-04-06 18:20 - 01403856 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 01379064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00881616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00765408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00609448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00491744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00467496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00463256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00364640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00244880 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-07-04 12:05 - 2014-04-06 18:20 - 00233912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00028408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2014-07-04 12:05 - 2014-04-06 17:23 - 00098584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2014-07-04 12:05 - 2014-04-06 17:22 - 00178184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 01209616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 00707048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 00669856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 00518544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 00406504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 00387896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-07-04 12:05 - 2014-04-06 14:51 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2014-07-04 12:05 - 2014-04-06 14:33 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-07-04 12:05 - 2014-04-06 13:26 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2014-07-04 12:05 - 2014-04-06 13:01 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-07-04 12:05 - 2014-04-06 12:36 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2014-07-04 12:05 - 2014-04-06 12:05 - 01222656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-07-04 12:05 - 2014-04-06 11:59 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2014-07-04 12:05 - 2014-04-03 10:12 - 00307304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2014-07-04 12:05 - 2014-04-03 10:12 - 00130144 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2014-07-04 12:05 - 2014-04-03 06:03 - 00230808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2014-07-04 12:05 - 2014-04-03 06:03 - 00111528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpapi.dll
2014-07-04 12:05 - 2014-04-03 04:53 - 00677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-07-04 12:05 - 2014-04-03 04:51 - 01584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2014-07-04 12:05 - 2014-04-03 04:23 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-07-04 12:05 - 2014-04-03 04:23 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tlscsp.dll
2014-07-04 12:05 - 2014-04-03 04:22 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\tlscsp.dll
2014-07-04 12:05 - 2014-04-01 08:23 - 00384856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-07-04 12:05 - 2014-03-31 02:41 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2014-07-04 12:05 - 2014-03-31 02:01 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2014-07-04 12:05 - 2014-03-31 01:43 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2014-07-04 12:05 - 2014-03-31 00:49 - 01287168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-07-04 12:05 - 2014-03-28 17:58 - 00407016 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2014-07-04 12:05 - 2014-03-27 08:16 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-07-04 12:05 - 2014-03-27 07:36 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2014-07-04 12:05 - 2014-03-27 06:59 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-07-04 12:05 - 2014-03-27 06:48 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2014-07-04 12:05 - 2014-03-27 06:19 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2014-07-04 12:05 - 2014-03-27 05:46 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2014-07-04 12:05 - 2014-03-27 05:15 - 00718336 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2014-07-04 12:05 - 2014-03-27 05:10 - 01436160 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2014-07-04 12:05 - 2014-03-25 00:58 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2014-07-04 12:05 - 2014-03-20 05:48 - 00263424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-07-04 12:05 - 2014-03-19 10:07 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-07-04 12:05 - 2014-03-18 10:19 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2014-07-04 12:05 - 2014-03-17 07:09 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-07-04 12:05 - 2014-03-17 06:11 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-07-04 12:05 - 2014-03-17 05:01 - 00486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2014-07-04 12:05 - 2014-03-17 04:47 - 01025024 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-07-04 12:05 - 2014-03-17 04:45 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2014-07-04 12:05 - 2014-03-14 08:26 - 00491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll
2014-07-04 12:05 - 2014-03-14 08:10 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll
2014-07-04 12:05 - 2014-03-06 14:42 - 00310616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-07-04 12:04 - 2014-04-06 14:58 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll
2014-07-04 12:04 - 2014-04-06 14:24 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2014-07-04 12:04 - 2014-04-06 14:06 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srclient.dll
2014-07-04 12:04 - 2014-04-06 13:20 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-07-04 12:04 - 2014-03-31 00:35 - 01029120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-07-04 12:04 - 2014-03-31 00:11 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-07-04 12:04 - 2014-03-30 23:47 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-07-04 12:04 - 2014-03-19 10:15 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-07-04 12:04 - 2014-03-19 09:24 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-07-04 12:04 - 2014-03-19 09:17 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2014-07-04 12:04 - 2014-03-19 08:36 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-07-04 12:04 - 2014-03-19 07:56 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-07-04 12:04 - 2014-03-19 07:45 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2014-07-04 12:04 - 2014-03-19 07:19 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-07-04 12:04 - 2014-03-19 07:07 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-07-04 12:04 - 2014-03-19 07:02 - 01527296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-07-04 12:04 - 2014-03-19 07:00 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2014-07-04 12:04 - 2014-03-19 06:51 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2014-07-04 12:04 - 2014-03-19 06:31 - 02100736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-07-04 12:01 - 2014-07-04 12:02 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Administrator\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-07-04 11:56 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-07-04 11:56 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-07-04 11:56 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe
2014-07-04 11:56 - 2014-05-01 15:31 - 03048904 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-07-04 11:56 - 2014-05-01 15:31 - 00055328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wpcfltr.sys
2014-07-04 11:56 - 2014-05-01 09:14 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2014-07-04 11:56 - 2014-05-01 09:05 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2014-07-04 11:56 - 2014-05-01 08:51 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2014-07-04 11:56 - 2014-05-01 07:24 - 02834944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll
2014-07-04 01:11 - 2014-07-04 01:11 - 00000000 _____ () C:\Recovery.txt
2014-07-03 23:39 - 2014-07-03 23:39 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Steganos
2014-07-03 23:39 - 2014-07-03 23:39 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Intel Corporation
2014-07-03 23:39 - 2014-07-03 23:39 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\CyberLink
2014-07-03 23:39 - 2014-07-03 23:39 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Adobe
2014-07-03 23:38 - 2014-07-03 23:38 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Synaptics
2014-07-03 23:38 - 2014-07-03 23:38 - 00000000 ____D () C:\Users\Gast\AppData\Local\Adobe
2014-07-03 22:58 - 2014-07-04 01:21 - 00000000 ____D () C:\e6aaee25e6e797ecb198316b31d5ca
2014-07-03 22:36 - 2014-07-03 22:36 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Hewlett-Packard
2014-07-03 22:36 - 2014-07-03 22:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Power2Go8
2014-07-03 22:36 - 2014-07-03 22:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Hewlett-Packard
2014-07-03 22:36 - 2014-07-03 22:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-07-03 22:35 - 2014-07-04 01:20 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-03 22:35 - 2014-07-04 01:20 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-03 22:35 - 2014-07-04 01:20 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-03 22:35 - 2014-07-04 01:20 - 00000000 ____D () C:\Users\Gast
2014-07-03 22:35 - 2014-07-03 23:38 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Apple Computer
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Vorlagen
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Startmenü
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Netzwerkumgebung
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Lokale Einstellungen
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Eigene Dateien
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Druckumgebung
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Documents\Eigene Musik
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Documents\Eigene Bilder
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\AppData\Local\Verlauf
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\AppData\Local\Anwendungsdaten
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Anwendungsdaten
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 ____D () C:\Users\Gast\AppData\Local\NVIDIA Corporation
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 ____D () C:\Users\Gast\AppData\Local\NVIDIA
2014-07-03 22:35 - 2014-01-23 19:01 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Macromedia
2014-07-03 22:35 - 2013-11-24 17:07 - 00000000 ____D () C:\Users\Gast\Documents\hp.system.package.metadata
2014-07-03 22:35 - 2013-11-24 17:07 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\IObit
2014-07-03 22:35 - 2013-11-24 17:07 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Genie9
2014-07-03 22:35 - 2013-11-24 17:07 - 00000000 ____D () C:\Users\Gast\AppData\Local\Microsoft Help
2014-07-03 22:35 - 2013-11-24 17:07 - 00000000 ____D ()

95Marcel95 11.07.2014 11:29
Frst - Teil 2

Code:
C:\Users\Gast\AppData\Local\Apple Computer
2014-07-03 22:33 - 2014-07-03 22:33 - 00000095 _____ () C:\WINDOWS\general.log
2014-07-03 22:12 - 2012-10-15 13:23 - 00072154 _____ () C:\Users\Administrator\Desktop\procexp.chm
2014-07-03 22:10 - 2014-07-03 22:10 - 01243655 _____ () C:\Users\Administrator\Downloads\ProcessExplorer_16.02.zip
2014-07-03 22:10 - 2014-07-03 22:10 - 01243655 _____ () C:\Users\Administrator\Downloads\ProcessExplorer_16.02 (1).zip
2014-07-03 21:27 - 2014-07-03 21:28 - 00000000 ____D () C:\ProgramData\MicroWorld
2014-07-02 20:08 - 2014-07-02 20:08 - 00000222 _____ () C:\Users\Administrator\Desktop\Warface.url
2014-07-02 17:33 - 2014-07-04 01:20 - 00000000 ____D () C:\Users\Administrator\AppData\Local\MetaGeek,_LLC
2014-07-02 17:31 - 2014-07-02 17:31 - 00000000 ____D () C:\Program Files (x86)\MetaGeek
2014-07-02 17:29 - 2014-07-04 01:49 - 00000000 __SHD () C:\ProgramData\MPK
2014-07-02 14:58 - 2014-07-02 15:00 - 104857600 _____ () C:\Users\Administrator\Downloads\1370091038249.rar
2014-07-01 15:26 - 2014-07-04 17:35 - 00000000 ____D () C:\Users\Administrator\Documents\DayZ
2014-07-01 15:26 - 2014-07-01 17:20 - 00000000 ____D () C:\Users\Administrator\AppData\Local\DayZ
2014-07-01 13:55 - 2014-07-04 01:49 - 00000000 ____D () C:\Users\Administrator\AppData\Local\BrowseEmAll
2014-07-01 13:35 - 2014-07-01 13:36 - 00000658 _____ () C:\WINDOWS\ie7_main.log
2014-07-01 13:35 - 2014-07-01 13:35 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Mozilla
2014-07-01 13:35 - 2014-07-01 13:35 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Mozilla
2014-07-01 13:35 - 2014-07-01 13:35 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Macromedia
2014-07-01 12:31 - 2014-07-01 12:31 - 04229130 _____ () C:\Users\Administrator\Downloads\dsl_803a_752dpw_fw_30.05.219-20121116.bin
2014-07-01 12:29 - 2014-07-01 12:29 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Skype
2014-06-29 14:27 - 2014-06-29 14:27 - 00008446 _____ () C:\Users\Administrator\Downloads\GimmeMoarFrames-master.zip
2014-06-29 14:13 - 2014-06-29 14:13 - 00008195 _____ () C:\Users\Administrator\Downloads\ArmA3mark_28082013.zip (1).7z
2014-06-26 19:56 - 2014-06-27 23:05 - 00000000 ____D () C:\Users\Administrator\Desktop\PDAY+17Tr-LNG_v22.1
2014-06-26 17:23 - 2014-06-26 17:23 - 00000000 ____D () C:\Users\Administrator\Documents\7 Days To Die
2014-06-26 13:53 - 2014-06-26 13:53 - 00328420 _____ () C:\Users\Administrator\Downloads\PAYDAY 2 - Ultimate Trainer v3.0 (Hack&Dev, PierreDjays)_[www.unknowncheats.me]_.rar
2014-06-26 13:48 - 2014-06-26 13:48 - 00337186 _____ () C:\Users\Administrator\Downloads\superficialsuitev26_[www.unknowncheats.me]_.zip
2014-06-26 13:44 - 2014-06-26 13:45 - 16392851 _____ () C:\Users\Administrator\Downloads\PPv15R_[www.unknowncheats.me]_.rar
2014-06-26 13:42 - 2014-06-26 13:42 - 00293691 _____ () C:\Users\Administrator\Downloads\Pay Day 2 Level Hack_[www.unknowncheats.me]_.rar
2014-06-26 13:37 - 2014-06-26 13:37 - 00358029 _____ () C:\Users\Administrator\Downloads\Stealth Suite v0.4_[www.unknowncheats.me]_.rar
2014-06-26 00:54 - 2014-06-26 00:54 - 02521973 _____ () C:\Users\Administrator\Downloads\PDAY+17Tr-LNG_v30.2.rar
2014-06-25 22:50 - 2014-06-25 22:51 - 02463584 _____ () C:\Users\Administrator\Downloads\PDAY+17Tr-LNG_v22.1.rar
2014-06-25 22:28 - 2014-06-25 22:28 - 00304852 _____ () C:\Users\Administrator\Desktop\InjectorPack_[www.unknowncheats.me]_.rar.mwt
2014-06-25 22:27 - 2014-06-25 22:27 - 00328420 _____ () C:\Users\Administrator\Desktop\PAYDAY 2 - Ultimate Trainer v3.0 (Hack&Dev, PierreDjays)_[www.unknowncheats.me]_.rar
2014-06-25 22:23 - 2014-06-25 22:24 - 16392851 _____ () C:\Users\Administrator\Desktop\PPv15R_[www.unknowncheats.me]_.rar
2014-06-25 21:15 - 2014-06-25 22:30 - 00000000 ____D () C:\Users\Administrator\AppData\Local\PAYDAY 2
2014-06-24 16:44 - 2014-06-24 16:44 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Quadriga Games
2014-06-23 16:36 - 2014-06-23 16:36 - 00382459 _____ () C:\Users\Administrator\Downloads\housing.rar
2014-06-23 15:51 - 2014-06-23 15:51 - 00453232 _____ () C:\Users\Administrator\Downloads\CBA_A3_RC1.zip
2014-06-23 15:51 - 2014-06-23 15:51 - 00001682 _____ () C:\Users\Administrator\Downloads\@DEditor_v12.rar
2014-06-23 14:55 - 2014-06-23 14:55 - 00005367 _____ () C:\Users\Administrator\Downloads\@101_editor_vv1.14.0601.rar
2014-06-23 14:00 - 2014-06-23 14:00 - 07563927 _____ () C:\Users\Administrator\Downloads\@mcc_sandbox_r5.rar
2014-06-23 13:59 - 2014-06-23 13:59 - 01413902 _____ () C:\Users\Administrator\Downloads\sample missions.rar
2014-06-21 22:07 - 2014-06-21 22:08 - 22618750 _____ () C:\Users\Administrator\Downloads\MCaRMOD31.7z
2014-06-21 20:06 - 2014-06-21 20:11 - 16970521 _____ () C:\Users\Administrator\Downloads\@DAM.rar
2014-06-17 14:25 - 2014-07-04 12:32 - 00000000 ____D () C:\Users\Administrator\Desktop\11_files
2014-06-17 14:25 - 2014-06-17 14:25 - 00316184 _____ () C:\Users\Administrator\Desktop\11.htm
2014-06-16 15:45 - 2014-06-16 15:46 - 00000470 _____ () C:\Users\Administrator\Downloads\listen-dsl (1).asx
2014-06-16 11:52 - 2014-06-16 11:52 - 00000000 ____D () C:\WINDOWS\system32\Soluto
2014-06-15 14:41 - 2014-06-15 14:54 - 50377528 _____ () C:\Users\Administrator\Downloads\re2-1.0.7.7z.001
2014-06-15 12:40 - 2014-06-15 12:40 - 00000000 ____D () C:\Users\Administrator\.android
2014-06-15 10:49 - 2014-06-15 10:49 - 00000000 ____D () C:\Users\Administrator\VirtualBox VMs
2014-06-15 10:46 - 2014-06-15 15:52 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Genymobile
2014-06-15 10:45 - 2014-06-15 15:52 - 00000000 ____D () C:\Users\Administrator\.VirtualBox
2014-06-15 10:44 - 2014-06-15 10:44 - 00000000 ____D () C:\Program Files\Oracle
2014-06-15 10:42 - 2014-07-09 14:53 - 00001047 _____ () C:\Users\Public\Desktop\Genymotion.lnk
2014-06-15 10:42 - 2014-07-09 14:53 - 00001040 _____ () C:\Users\Public\Desktop\Genymotion Shell.lnk
2014-06-15 10:42 - 2014-07-04 01:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Genymotion
2014-06-15 10:42 - 2014-06-15 10:42 - 00000000 ____D () C:\Program Files\Genymobile
2014-06-15 10:28 - 2014-06-15 10:28 - 02321658 _____ () C:\Users\Administrator\Downloads\de.lotumlabs.questionsforfriendsnorth_quickdownload_330.apk
2014-06-15 10:26 - 2014-06-15 10:39 - 122656544 _____ (Genymobile ) C:\Users\Administrator\Downloads\genymotion-2.2.2-vbox.exe
2014-06-13 21:22 - 2014-06-13 21:22 - 03355384 _____ (Reincubate Ltd) C:\Users\Administrator\Downloads\iphonebackupextractor-latest.exe
2014-06-13 21:22 - 2014-06-13 21:22 - 00001346 _____ () C:\Users\Administrator\Desktop\iPhone Backup Extractor.lnk
2014-06-13 21:22 - 2014-06-13 21:22 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Reincubate
2014-06-13 21:22 - 2014-06-13 21:22 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Reincubate
2014-06-13 20:34 - 2014-07-04 01:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-06-13 20:34 - 2014-06-13 20:34 - 00001795 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-06-13 20:33 - 2014-06-13 20:34 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-06-13 20:33 - 2014-06-13 20:34 - 00000000 ____D () C:\Program Files\iTunes
2014-06-13 20:33 - 2014-06-13 20:34 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-06-13 20:33 - 2014-06-13 20:33 - 00000000 ____D () C:\Program Files\iPod
2014-06-13 20:24 - 2014-06-13 20:24 - 112616784 _____ (Apple Inc.) C:\Users\Administrator\Downloads\iTunes64Setup.exe
2014-06-13 00:55 - 2014-06-13 00:55 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\hpqlog
2014-06-13 00:34 - 2014-06-13 00:34 - 00000924 _____ () C:\Users\Administrator\Downloads\Downloads - Verknüpfung.lnk
2014-06-12 18:26 - 2014-06-12 18:26 - 00001187 _____ () C:\Users\Administrator\Downloads\CarpetBombingAirstrike.rar
2014-06-12 18:13 - 2014-06-12 18:13 - 00000954 _____ () C:\Users\Administrator\Downloads\ccip_arma3.7z
2014-06-12 18:01 - 2014-06-12 18:01 - 00023753 _____ () C:\Users\Administrator\Downloads\dsl_gear_selection_v1-4.Altis.7z
2014-06-12 16:12 - 2014-06-12 16:12 - 00000000 ____D () C:\Users\Administrator\Downloads\[ExpToObj]_v6.Stratis
2014-06-12 16:11 - 2014-06-12 16:11 - 00201024 _____ () C:\Users\Administrator\Downloads\[ExpToObj]_v6.Stratis.zip
2014-06-12 16:05 - 2014-06-12 16:06 - 00000000 ____D () C:\Users\Administrator\Downloads\LKnukev0.9
2014-06-12 15:27 - 2014-06-12 15:27 - 00000000 ____D () C:\Users\Administrator\Downloads\[DEMO]Nuke.Altis
2014-06-12 15:26 - 2014-06-12 15:26 - 00115565 _____ () C:\Users\Administrator\Downloads\[DEMO]Nuke.Altis.rar
2014-06-12 15:23 - 2014-06-12 15:23 - 00007906 _____ () C:\Users\Administrator\Downloads\JEMAND_SCUD.7z
2014-06-12 15:22 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-06-12 15:22 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-06-12 15:22 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-06-12 15:22 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-06-12 15:21 - 2014-06-12 15:21 - 09396076 _____ () C:\Users\Administrator\Downloads\LKnukev0.9.rar
2014-06-12 15:18 - 2014-05-10 05:46 - 02151424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-06-12 15:18 - 2014-05-10 05:22 - 01312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-06-12 15:18 - 2014-04-03 09:59 - 02518872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-06-12 15:18 - 2014-04-03 09:59 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-06-12 15:13 - 2014-05-05 06:02 - 03360256 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-06-12 15:13 - 2014-04-30 13:16 - 01336648 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-06-12 15:13 - 2014-04-30 05:51 - 01064448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2014-06-12 15:02 - 2014-04-30 06:43 - 01975296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2014-06-12 15:02 - 2014-04-30 06:26 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2014-06-12 15:02 - 2014-04-30 05:47 - 01509888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-06-12 14:55 - 2014-06-12 14:55 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-06-12 14:55 - 2014-06-12 14:55 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-06-12 14:55 - 2014-06-12 14:55 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-06-12 14:39 - 2014-06-12 14:39 - 00000470 _____ () C:\Users\Administrator\Downloads\listen-dsl.asx
2014-06-12 14:35 - 2014-06-12 14:35 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-06-11 14:05 - 2014-06-11 14:28 - 50532267 _____ () C:\Users\Administrator\Downloads\WAPMOD.Ver.1.09.zip
2014-06-11 13:59 - 2014-06-11 14:00 - 10625881 _____ () C:\Users\Administrator\Downloads\ArmA_Editing-Guide_Deluxe_Edition.rar
2014-06-10 21:51 - 2014-06-10 21:51 - 00010015 _____ () C:\Users\Administrator\Desktop\1.txt
2014-06-10 01:18 - 2014-06-10 01:18 - 00498949 _____ () C:\Users\Administrator\Downloads\Chat*Logger++*1.2.rar

==================== One Month Modified Files and Folders =======

2015-07-25 04:24 - 2013-08-21 22:41 - 00000000 ____D () C:\Users\Marcel-\Downloads\Guru3D.com
2014-07-10 22:27 - 2014-07-10 22:27 - 00000000 _____ () C:\Users\Administrator\Downloads\FRST.txt
2014-07-10 22:27 - 2013-11-24 13:00 - 00000000 ____D () C:\FRST
2014-07-10 22:26 - 2014-07-10 22:26 - 02084864 _____ (Farbar) C:\Users\Administrator\Downloads\FRST64.exe
2014-07-10 22:26 - 2014-05-07 19:01 - 00003954 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{C9FAFC92-2B20-4764-8366-96A2BE62BCF4}
2014-07-10 22:24 - 2014-05-20 19:55 - 01170485 _____ () C:\WINDOWS\WindowsUpdate.log
2014-07-10 22:21 - 2014-02-08 23:20 - 00000406 _____ () C:\WINDOWS\Tasks\bettermarkit_wd.job
2014-07-10 22:19 - 2014-07-10 22:19 - 00000488 _____ () C:\Users\Administrator\Downloads\defogger_disable.log
2014-07-10 22:19 - 2014-07-10 22:19 - 00000000 _____ () C:\Users\Administrator\defogger_reenable
2014-07-10 22:19 - 2014-05-06 12:14 - 00000000 ____D () C:\Users\Administrator
2014-07-10 22:18 - 2014-07-10 22:18 - 00050477 _____ () C:\Users\Administrator\Downloads\Defogger.exe
2014-07-10 22:13 - 2014-07-10 22:13 - 00961360 _____ (Chip Digital GmbH) C:\Users\Administrator\Downloads\HijackThis - CHIP-Installer.exe
2014-07-10 22:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-07-10 21:58 - 2014-07-10 21:58 - 28013520 _____ (Wireshark development team) C:\Users\Administrator\Downloads\Wireshark-win64-1.10.8.exe
2014-07-10 21:54 - 2014-05-06 14:00 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\TS3Client
2014-07-10 21:52 - 2013-12-30 19:42 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-07-10 21:49 - 2013-07-29 15:12 - 00001126 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-10 21:43 - 2014-05-06 12:26 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Arma 3
2014-07-10 21:43 - 2013-07-29 16:37 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-07-10 21:07 - 2013-09-30 06:14 - 01984420 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-07-10 21:07 - 2013-09-30 05:56 - 00843606 _____ () C:\WINDOWS\system32\perfh007.dat
2014-07-10 21:07 - 2013-09-30 05:56 - 00192300 _____ () C:\WINDOWS\system32\perfc007.dat
2014-07-10 21:05 - 2014-05-06 12:22 - 00003594 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3786530795-813635038-3550015045-500
2014-07-10 21:05 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-07-10 20:59 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-07-10 20:59 - 2013-07-29 15:12 - 00001122 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-10 20:57 - 2014-06-08 11:48 - 00046080 ___SH () C:\Users\Administrator\Desktop\Thumbs.db
2014-07-10 20:52 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-07-10 20:45 - 2013-08-04 01:00 - 00000000 ____D () C:\Program Files (x86)\BlueStacks
2014-07-10 20:45 - 2013-03-04 18:07 - 00000000 ____D () C:\Program Files (x86)\HP SimplePass
2014-07-09 20:15 - 2013-12-26 23:22 - 00000000 ____D () C:\WINDOWS\system32\Drivers\NISx64
2014-07-09 20:03 - 2014-07-09 20:03 - 07719416 _____ (devolo AG) C:\Users\Administrator\Downloads\software-dlan-500-av-wireless-plus-v3-0-0-firmware-updater.exe
2014-07-09 19:56 - 2014-07-09 19:56 - 00002030 _____ () C:\Users\Public\Desktop\devolo dLAN Cockpit.lnk
2014-07-09 19:56 - 2014-07-09 19:56 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\de.devolo.dLAN.Cockpit
2014-07-09 19:56 - 2014-07-09 19:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\devolo
2014-07-09 19:56 - 2014-07-09 19:55 - 00000000 ____D () C:\Program Files (x86)\devolo
2014-07-09 19:55 - 2014-05-06 12:17 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Adobe
2014-07-09 19:55 - 2014-05-06 12:15 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Adobe
2014-07-09 14:53 - 2014-06-15 10:42 - 00001047 _____ () C:\Users\Public\Desktop\Genymotion.lnk
2014-07-09 14:53 - 2014-06-15 10:42 - 00001040 _____ () C:\Users\Public\Desktop\Genymotion Shell.lnk
2014-07-09 14:53 - 2014-04-29 21:18 - 00001062 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2014-07-09 14:45 - 2014-03-30 18:58 - 05113000 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-07-09 14:41 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-07-09 14:41 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-09 14:41 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-09 14:41 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-07-09 14:35 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-07-09 14:31 - 2014-05-29 12:45 - 00006214 _____ () C:\WINDOWS\PFRO.log
2014-07-09 13:32 - 2014-01-15 21:44 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-07-09 13:27 - 2013-10-16 20:51 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-07-09 13:27 - 2013-08-01 19:39 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-09 13:27 - 2013-07-29 19:24 - 96441528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-07-09 13:27 - 2013-07-29 19:24 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-07-09 13:21 - 2013-09-30 05:59 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-09 00:37 - 2013-09-15 22:50 - 00000000 ____D () C:\Users\Marcel-\Desktop\Bilder
2014-07-08 21:22 - 2014-07-08 21:22 - 00001147 _____ () C:\Users\Administrator\Desktop\FreePortScanner.lnk
2014-07-08 21:22 - 2014-07-08 21:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreePortScanner
2014-07-08 21:22 - 2014-07-08 21:22 - 00000000 ____D () C:\Program Files (x86)\Nsasoft
2014-07-08 21:18 - 2014-07-08 21:18 - 00598416 _____ (Nsasoft LLC. ) C:\Users\Administrator\Downloads\free-port-scanner_10262.exe
2014-07-08 11:51 - 2014-07-08 11:51 - 01017285 _____ () C:\Users\Administrator\Downloads\ARMA III Alpha Super L33T Menu 4.7 SPJESTER_[www.unknowncheats.me]_.zip
2014-07-07 22:34 - 2014-07-07 22:34 - 00019761 _____ () C:\Users\Administrator\Downloads\313_mpgh.net.rar
2014-07-07 19:40 - 2014-07-07 19:03 - 00000527 _____ () C:\Users\Administrator\Documents\arma3.CT
2014-07-07 18:59 - 2014-07-07 18:59 - 00001107 _____ () C:\Users\Administrator\Desktop\Cheat Engine.lnk
2014-07-07 18:59 - 2014-07-07 18:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.4
2014-07-07 18:59 - 2014-07-07 18:59 - 00000000 ____D () C:\Program Files (x86)\Cheat Engine 6.4
2014-07-07 18:53 - 2014-07-07 18:53 - 09052432 _____ (Cheat Engine ) C:\Users\Administrator\Downloads\CheatEngine64.exe
2014-07-07 18:46 - 2014-07-07 18:46 - 00017100 _____ () C:\Users\Administrator\Downloads\_src.zip
2014-07-07 17:11 - 2014-07-07 17:09 - 00000000 ____D () C:\Program Files (x86)\Quick Memory Editor
2014-07-07 17:09 - 2014-07-07 17:09 - 02125503 _____ (softcows.com ) C:\Users\Administrator\Downloads\Quick Memory Editor.exe
2014-07-07 17:09 - 2014-07-07 17:09 - 00001111 _____ () C:\Users\Marcel-\Desktop\Quick Memory Editor.lnk
2014-07-07 17:09 - 2014-07-07 17:09 - 00001111 _____ () C:\Users\Administrator\Desktop\Quick Memory Editor.lnk
2014-07-07 17:09 - 2014-07-07 17:09 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Quick Memory Editor
2014-07-07 17:09 - 2014-07-07 17:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Quick Memory Editor
2014-07-05 13:52 - 2014-07-05 13:52 - 00002317 _____ () C:\Users\Administrator\Downloads\DayZ Mod & SA ammo Values by ThirtySix.txt
2014-07-05 13:41 - 2014-07-04 12:12 - 00000000 ____D () C:\Users\Administrator\AppData\Local\LogMeIn Rescue Applet
2014-07-05 13:22 - 2014-07-04 17:51 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-07-05 13:22 - 2014-07-04 17:51 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-07-05 13:20 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-07-05 13:20 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-07-04 21:48 - 2014-07-07 22:34 - 00219645 _____ () C:\Users\Administrator\Desktop\313.sqf
2014-07-04 17:51 - 2013-11-24 16:52 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-07-04 17:51 - 2013-07-31 22:50 - 00000000 ____D () C:\temp
2014-07-04 17:50 - 2013-11-24 16:51 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-07-04 17:50 - 2013-11-24 16:51 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-07-04 17:39 - 2014-05-23 00:16 - 00000000 ____D () C:\NVIDIA
2014-07-04 17:35 - 2014-07-01 15:26 - 00000000 ____D () C:\Users\Administrator\Documents\DayZ
2014-07-04 16:05 - 2014-01-03 18:30 - 00000000 ____D () C:\Program Files\KMSpico
2014-07-04 15:35 - 2014-01-10 23:49 - 00000000 ____D () C:\Program Files (x86)\Connectify
2014-07-04 15:35 - 2014-01-10 18:22 - 00000000 ____D () C:\Program Files (x86)\Steganos Privacy Suite 14
2014-07-04 15:35 - 2013-07-29 15:38 - 00000000 ____D () C:\Program Files\Classic Shell
2014-07-04 15:24 - 2013-07-29 17:23 - 00000000 ____D () C:\Program Files (x86)\SpeedFan
2014-07-04 15:23 - 2014-07-04 15:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ad-Aware Antivirus
2014-07-04 15:23 - 2014-07-04 15:23 - 00000000 ____D () C:\Program Files\Lavasoft
2014-07-04 15:23 - 2014-07-04 15:23 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft
2014-07-04 15:20 - 2014-05-26 16:44 - 00000000 ____D () C:\Users\Administrator\YaCy
2014-07-04 15:01 - 2014-07-04 15:01 - 00000000 ____D () C:\WINDOWS\Panther
2014-07-04 14:55 - 2014-07-04 14:55 - 00000842 _____ () C:\WINDOWS\setupact.log
2014-07-04 14:55 - 2014-07-04 14:55 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-07-04 14:35 - 2014-07-04 14:35 - 00002263 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (6).lnk
2014-07-04 14:30 - 2014-07-04 14:30 - 00000000 ____D () C:\Users\Administrator\AppData\Local\NPE
2014-07-04 12:39 - 2014-07-04 12:39 - 03081712 ____N (Symantec Corporation) C:\Users\Administrator\Downloads\NPE.exe
2014-07-04 12:37 - 2014-07-04 12:15 - 00001436 _____ () C:\Users\Administrator\Desktop\Google Chrome.lnk
2014-07-04 12:32 - 2014-07-04 12:32 - 00002263 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (5).lnk
2014-07-04 12:32 - 2014-06-17 14:25 - 00000000 ____D () C:\Users\Administrator\Desktop\11_files
2014-07-04 12:29 - 2014-01-10 23:45 - 00000000 ____D () C:\ProgramData\eboostr
2014-07-04 12:20 - 2014-07-04 12:20 - 00002263 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (4).lnk
2014-07-04 12:18 - 2012-07-26 10:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP
2014-07-04 12:17 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-07-04 12:15 - 2014-07-04 12:15 - 00002299 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (3).lnk
2014-07-04 12:15 - 2014-07-04 12:15 - 00002299 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (2).lnk
2014-07-04 12:15 - 2014-07-04 12:15 - 00001079 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-07-04 12:15 - 2014-07-04 12:15 - 00001023 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-04 12:15 - 2013-07-29 15:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-04 12:12 - 2014-07-04 12:12 - 00002299 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec.lnk
2014-07-04 12:02 - 2014-07-04 12:01 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Administrator\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-07-04 02:03 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-04 02:03 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-04 02:03 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-04 01:50 - 2014-06-15 10:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Genymotion
2014-07-04 01:50 - 2014-06-13 20:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-07-04 01:50 - 2014-05-29 00:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Process Lasso
2014-07-04 01:50 - 2014-05-29 00:03 - 00000000 ____D () C:\Program Files\Process Lasso
2014-07-04 01:50 - 2014-05-06 16:30 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\vlc
2014-07-04 01:50 - 2014-05-06 12:26 - 00000000 ____D () C:\Users\Administrator\Documents\Arma 3
2014-07-04 01:50 - 2014-05-06 12:18 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Cyberlink SoftDMA
2014-07-04 01:50 - 2014-04-29 21:18 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Clientnew
2014-07-04 01:50 - 2014-03-04 20:12 - 00000000 ____D () C:\ProgramData\SpeedBit
2014-07-04 01:50 - 2014-02-08 23:05 - 00000000 ____D () C:\Users\Marcel-\AppData\Roaming\BitTorrent
2014-07-04 01:50 - 2014-01-19 13:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CasinoClub
2014-07-04 01:50 - 2013-12-26 13:08 - 00000000 ____D () C:\Users\Marcel-\AppData\Local\Cyberlink SoftDMA
2014-07-04 01:50 - 2013-11-24 16:58 - 00000000 ____D () C:\Users\Marcel-
2014-07-04 01:50 - 2013-10-16 17:06 - 00000000 ____D () C:\Users\Marcel-\AppData\Local\Akamai
2014-07-04 01:50 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\WindowsInternal.Inbox.Shared
2014-07-04 01:50 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-07-04 01:50 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-07-04 01:50 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-07-04 01:50 - 2013-08-21 22:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-07-04 01:50 - 2013-07-30 23:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2014-07-04 01:50 - 2013-07-29 17:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-07-04 01:49 - 2014-07-02 17:29 - 00000000 __SHD () C:\ProgramData\MPK
2014-07-04 01:49 - 2014-07-01 13:55 - 00000000 ____D () C:\Users\Administrator\AppData\Local\BrowseEmAll
2014-07-04 01:49 - 2013-07-29 17:33 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-07-04 01:44 - 2014-05-09 15:42 - 00000000 ____D () C:\WINDOWS\Minidump
2014-07-04 01:44 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\registration
2014-07-04 01:42 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2014-07-04 01:40 - 2014-05-29 00:03 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\ProcessLasso
2014-07-04 01:40 - 2014-05-28 09:54 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Skype
2014-07-04 01:39 - 2013-07-29 17:32 - 00000000 ____D () C:\ProgramData\Skype
2014-07-04 01:37 - 2013-08-01 19:39 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-07-04 01:36 - 2014-01-19 13:08 - 00000000 ____D () C:\Program Files (x86)\Casino
2014-07-04 01:21 - 2014-07-03 22:58 - 00000000 ____D () C:\e6aaee25e6e797ecb198316b31d5ca
2014-07-04 01:20 - 2014-07-03 22:35 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-04 01:20 - 2014-07-03 22:35 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-04 01:20 - 2014-07-03 22:35 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-04 01:20 - 2014-07-03 22:35 - 00000000 ____D () C:\Users\Gast
2014-07-04 01:20 - 2014-07-02 17:33 - 00000000 ____D () C:\Users\Administrator\AppData\Local\MetaGeek,_LLC
2014-07-04 01:11 - 2014-07-04 01:11 - 00000000 _____ () C:\Recovery.txt
2014-07-03 23:39 - 2014-07-03 23:39 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Steganos
2014-07-03 23:39 - 2014-07-03 23:39 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Intel Corporation
2014-07-03 23:39 - 2014-07-03 23:39 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\CyberLink
2014-07-03 23:39 - 2014-07-03 23:39 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Adobe
2014-07-03 23:38 - 2014-07-03 23:38 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Synaptics
2014-07-03 23:38 - 2014-07-03 23:38 - 00000000 ____D () C:\Users\Gast\AppData\Local\Adobe
2014-07-03 23:38 - 2014-07-03 22:35 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Apple Computer
2014-07-03 22:36 - 2014-07-03 22:36 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Hewlett-Packard
2014-07-03 22:36 - 2014-07-03 22:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Power2Go8
2014-07-03 22:36 - 2014-07-03 22:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Hewlett-Packard
2014-07-03 22:36 - 2014-07-03 22:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Vorlagen
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Startmenü
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Netzwerkumgebung
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Lokale Einstellungen
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Eigene Dateien
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Druckumgebung
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Documents\Eigene Musik
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Documents\Eigene Bilder
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\AppData\Local\Verlauf
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\AppData\Local\Anwendungsdaten
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Anwendungsdaten
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 ____D () C:\Users\Gast\AppData\Local\NVIDIA Corporation
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 ____D () C:\Users\Gast\AppData\Local\NVIDIA
2014-07-03 22:33 - 2014-07-03 22:33 - 00000095 _____ () C:\WINDOWS\general.log
2014-07-03 22:10 - 2014-07-03 22:10 - 01243655 _____ () C:\Users\Administrator\Downloads\ProcessExplorer_16.02.zip
2014-07-03 22:10 - 2014-07-03 22:10 - 01243655 _____ () C:\Users\Administrator\Downloads\ProcessExplorer_16.02 (1).zip
2014-07-03 21:28 - 2014-07-03 21:27 - 00000000 ____D () C:\ProgramData\MicroWorld
2014-07-02 20:08 - 2014-07-02 20:08 - 00000222 _____ () C:\Users\Administrator\Desktop\Warface.url
2014-07-02 17:31 - 2014-07-02 17:31 - 00000000 ____D () C:\Program Files (x86)\MetaGeek
2014-07-02 15:00 - 2014-07-02 14:58 - 104857600 _____ () C:\Users\Administrator\Downloads\1370091038249.rar
2014-07-02 14:25 - 2013-07-30 12:29 - 00000052 _____ () C:\WINDOWS\SysWOW64\DOErrors.log
2014-07-01 17:20 - 2014-07-01 15:26 - 00000000 ____D () C:\Users\Administrator\AppData\Local\DayZ
2014-07-01 13:36 - 2014-07-01 13:35 - 00000658 _____ () C:\WINDOWS\ie7_main.log
2014-07-01 13:35 - 2014-07-01 13:35 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Mozilla
2014-07-01 13:35 - 2014-07-01 13:35 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Mozilla
2014-07-01 13:35 - 2014-07-01 13:35 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Macromedia
2014-07-01 12:31 - 2014-07-01 12:31 - 04229130 _____ () C:\Users\Administrator\Downloads\dsl_803a_752dpw_fw_30.05.219-20121116.bin
2014-07-01 12:29 - 2014-07-01 12:29 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Skype
2014-06-29 14:27 - 2014-06-29 14:27 - 00008446 _____ () C:\Users\Administrator\Downloads\GimmeMoarFrames-master.zip
2014-06-29 14:13 - 2014-06-29 14:13 - 00008195 _____ () C:\Users\Administrator\Downloads\ArmA3mark_28082013.zip (1).7z
2014-06-27 23:05 - 2014-06-26 19:56 - 00000000 ____D () C:\Users\Administrator\Desktop\PDAY+17Tr-LNG_v22.1
2014-06-26 22:55 - 2014-07-09 13:32 - 00703968 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-06-26 22:55 - 2014-07-09 13:32 - 00105440 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-06-26 17:23 - 2014-06-26 17:23 - 00000000 ____D () C:\Users\Administrator\Documents\7 Days To Die
2014-06-26 16:56 - 2014-01-03 15:09 - 00000000 ____D () C:\Users\Marcel-\Desktop\Bewerbung
2014-06-26 13:53 - 2014-06-26 13:53 - 00328420 _____ () C:\Users\Administrator\Downloads\PAYDAY 2 - Ultimate Trainer v3.0 (Hack&Dev, PierreDjays)_[www.unknowncheats.me]_.rar
2014-06-26 13:48 - 2014-06-26 13:48 - 00337186 _____ () C:\Users\Administrator\Downloads\superficialsuitev26_[www.unknowncheats.me]_.zip
2014-06-26 13:45 - 2014-06-26 13:44 - 16392851 _____ () C:\Users\Administrator\Downloads\PPv15R_[www.unknowncheats.me]_.rar
2014-06-26 13:42 - 2014-06-26 13:42 - 00293691 _____ () C:\Users\Administrator\Downloads\Pay Day 2 Level Hack_[www.unknowncheats.me]_.rar
2014-06-26 13:37 - 2014-06-26 13:37 - 00358029 _____ () C:\Users\Administrator\Downloads\Stealth Suite v0.4_[www.unknowncheats.me]_.rar
2014-06-26 00:54 - 2014-06-26 00:54 - 02521973 _____ () C:\Users\Administrator\Downloads\PDAY+17Tr-LNG_v30.2.rar
2014-06-25 22:51 - 2014-06-25 22:50 - 02463584 _____ () C:\Users\Administrator\Downloads\PDAY+17Tr-LNG_v22.1.rar
2014-06-25 22:30 - 2014-06-25 21:15 - 00000000 ____D () C:\Users\Administrator\AppData\Local\PAYDAY 2
2014-06-25 22:28 - 2014-06-25 22:28 - 00304852 _____ () C:\Users\Administrator\Desktop\InjectorPack_[www.unknowncheats.me]_.rar.mwt
2014-06-25 22:27 - 2014-06-25 22:27 - 00328420 _____ () C:\Users\Administrator\Desktop\PAYDAY 2 - Ultimate Trainer v3.0 (Hack&Dev, PierreDjays)_[www.unknowncheats.me]_.rar
2014-06-25 22:24 - 2014-06-25 22:23 - 16392851 _____ () C:\Users\Administrator\Desktop\PPv15R_[www.unknowncheats.me]_.rar
2014-06-24 16:44 - 2014-06-24 16:44 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Quadriga Games
2014-06-23 16:36 - 2014-06-23 16:36 - 00382459 _____ () C:\Users\Administrator\Downloads\housing.rar
2014-06-23 15:51 - 2014-06-23 15:51 - 00453232 _____ () C:\Users\Administrator\Downloads\CBA_A3_RC1.zip
2014-06-23 15:51 - 2014-06-23 15:51 - 00001682 _____ () C:\Users\Administrator\Downloads\@DEditor_v12.rar
2014-06-23 14:55 - 2014-06-23 14:55 - 00005367 _____ () C:\Users\Administrator\Downloads\@101_editor_vv1.14.0601.rar
2014-06-23 14:00 - 2014-06-23 14:00 - 07563927 _____ () C:\Users\Administrator\Downloads\@mcc_sandbox_r5.rar
2014-06-23 13:59 - 2014-06-23 13:59 - 01413902 _____ () C:\Users\Administrator\Downloads\sample missions.rar
2014-06-21 22:08 - 2014-06-21 22:07 - 22618750 _____ () C:\Users\Administrator\Downloads\MCaRMOD31.7z
2014-06-21 20:11 - 2014-06-21 20:06 - 16970521 _____ () C:\Users\Administrator\Downloads\@DAM.rar
2014-06-19 03:39 - 2014-07-09 12:24 - 23464448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-06-19 02:48 - 2014-07-09 12:24 - 02768384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-06-19 02:16 - 2014-07-09 12:24 - 17276416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-06-19 02:09 - 2014-07-09 12:24 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-06-19 01:51 - 2014-07-09 12:24 - 05721088 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-06-19 01:50 - 2014-07-09 12:24 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-06-19 01:48 - 2014-07-09 12:24 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-06-19 01:46 - 2014-07-09 12:24 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-06-19 01:39 - 2014-07-09 12:24 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-06-19 01:33 - 2014-07-09 12:24 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-06-19 01:32 - 2014-07-09 12:24 - 02179072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-06-19 01:27 - 2014-07-09 12:24 - 02040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-06-19 01:12 - 2014-07-09 12:24 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-06-19 00:59 - 2014-07-09 12:24 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-06-19 00:58 - 2014-07-09 12:24 - 02266112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-06-19 00:58 - 2014-07-09 12:24 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-06-19 00:57 - 2014-07-09 12:24 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-06-19 00:52 - 2014-07-09 12:24 - 04254720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-06-19 00:51 - 2014-07-09 12:24 - 13527040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-06-19 00:49 - 2014-07-09 12:24 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-06-19 00:45 - 2014-07-09 12:24 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-06-19 00:35 - 2014-07-09 12:24 - 11742208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-06-19 00:34 - 2014-07-09 12:24 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-06-19 00:15 - 2014-07-09 12:24 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-06-19 00:13 - 2014-07-09 12:24 - 01791488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-06-19 00:09 - 2014-07-09 12:24 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-06-19 00:07 - 2014-07-09 12:24 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-06-17 14:25 - 2014-06-17 14:25 - 00316184 _____ () C:\Users\Administrator\Desktop\11.htm
2014-06-17 00:26 - 2014-07-09 12:24 - 00779264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osk.exe
2014-06-17 00:24 - 2014-07-09 12:24 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2014-06-16 15:46 - 2014-06-16 15:45 - 00000470 _____ () C:\Users\Administrator\Downloads\listen-dsl (1).asx
2014-06-16 11:52 - 2014-06-16 11:52 - 00000000 ____D () C:\WINDOWS\system32\Soluto
2014-06-15 15:52 - 2014-06-15 10:46 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Genymobile
2014-06-15 15:52 - 2014-06-15 10:45 - 00000000 ____D () C:\Users\Administrator\.VirtualBox
2014-06-15 14:54 - 2014-06-15 14:41 - 50377528 _____ () C:\Users\Administrator\Downloads\re2-1.0.7.7z.001
2014-06-15 14:46 - 2014-01-10 19:24 - 00000022 _____ () C:\Users\Marcel-\Downloads\foto.zip
2014-06-15 14:45 - 2014-04-05 14:29 - 00002816 _____ () C:\Users\Marcel-\Downloads\Nicht bestätigt 90835.crdownload
2014-06-15 12:40 - 2014-06-15 12:40 - 00000000 ____D () C:\Users\Administrator\.android
2014-06-15 10:49 - 2014-06-15 10:49 - 00000000 ____D () C:\Users\Administrator\VirtualBox VMs
2014-06-15 10:44 - 2014-06-15 10:44 - 00000000 ____D () C:\Program Files\Oracle
2014-06-15 10:42 - 2014-06-15 10:42 - 00000000 ____D () C:\Program Files\Genymobile
2014-06-15 10:39 - 2014-06-15 10:26 - 122656544 _____ (Genymobile ) C:\Users\Administrator\Downloads\genymotion-2.2.2-vbox.exe
2014-06-15 10:28 - 2014-06-15 10:28 - 02321658 _____ () C:\Users\Administrator\Downloads\de.lotumlabs.questionsforfriendsnorth_quickdownload_330.apk
2014-06-13 21:22 - 2014-06-13 21:22 - 03355384 _____ (Reincubate Ltd) C:\Users\Administrator\Downloads\iphonebackupextractor-latest.exe
2014-06-13 21:22 - 2014-06-13 21:22 - 00001346 _____ () C:\Users\Administrator\Desktop\iPhone Backup Extractor.lnk
2014-06-13 21:22 - 2014-06-13 21:22 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Reincubate
2014-06-13 21:22 - 2014-06-13 21:22 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Reincubate
2014-06-13 20:35 - 2014-05-06 12:14 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Apple Computer
2014-06-13 20:34 - 2014-06-13 20:34 - 00001795 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-06-13 20:34 - 2014-06-13 20:33 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-06-13 20:34 - 2014-06-13 20:33 - 00000000 ____D () C:\Program Files\iTunes
2014-06-13 20:34 - 2014-06-13 20:33 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-06-13 20:33 - 2014-06-13 20:33 - 00000000 ____D () C:\Program Files\iPod
2014-06-13 20:33 - 2013-08-12 01:06 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-06-13 20:24 - 2014-06-13 20:24 - 112616784 _____ (Apple Inc.) C:\Users\Administrator\Downloads\iTunes64Setup.exe
2014-06-13 04:59 - 2014-07-04 17:44 - 01890264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6434043.dll
2014-06-13 04:59 - 2014-07-04 17:44 - 01542088 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6434043.dll
2014-06-13 04:59 - 2014-07-04 17:44 - 00026353 _____ () C:\WINDOWS\system32\nvinfo.pb
2014-06-13 04:48 - 2014-07-04 17:44 - 13911928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 13824408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 11272544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 11211224 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 04248520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 03989464 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 00946120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 00909256 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 00902616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 00869336 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 00391456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 00348120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 31512352 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 24198616 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 18625768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 17553032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 16122344 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 14497528 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 12860888 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2014-06-13 04:47 - 2014-07-04 17:44 - 00502048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 00417568 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 00033736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys
2014-06-13 04:46 - 2014-07-04 17:44 - 22994392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2014-06-13 04:46 - 2014-07-04 17:44 - 15294296 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2014-06-13 04:46 - 2014-07-04 17:44 - 02814120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2014-06-13 04:46 - 2014-07-04 17:44 - 00965312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2014-06-13 04:46 - 2014-07-04 17:44 - 00846832 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2014-06-13 04:46 - 2014-07-04 17:44 - 00354016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2014-06-13 04:46 - 2014-07-04 17:44 - 00305600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2014-06-13 04:46 - 2014-07-04 17:44 - 00166568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2014-06-13 04:46 - 2014-07-04 17:44 - 00146480 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2014-06-13 04:45 - 2014-07-04 17:44 - 03196304 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2014-06-13 04:11 - 2014-07-04 17:50 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2014-06-13 04:11 - 2014-07-04 17:50 - 00062808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2014-06-13 04:11 - 2013-12-11 20:21 - 01083736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2014-06-13 04:11 - 2013-11-24 16:52 - 06783960 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2014-06-13 04:11 - 2013-11-24 16:52 - 03523360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2014-06-13 04:11 - 2013-11-24 16:52 - 02560968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2014-06-13 04:11 - 2013-11-24 16:52 - 00933208 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2014-06-13 04:11 - 2013-11-24 16:52 - 00387528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2014-06-13 00:55 - 2014-06-13 00:55 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\hpqlog
2014-06-13 00:34 - 2014-06-13 00:34 - 00000924 _____ () C:\Users\Administrator\Downloads\Downloads - Verknüpfung.lnk
2014-06-12 18:26 - 2014-06-12 18:26 - 00001187 _____ () C:\Users\Administrator\Downloads\CarpetBombingAirstrike.rar
2014-06-12 18:13 - 2014-06-12 18:13 - 00000954 _____ () C:\Users\Administrator\Downloads\ccip_arma3.7z
2014-06-12 18:01 - 2014-06-12 18:01 - 00023753 _____ () C:\Users\Administrator\Downloads\dsl_gear_selection_v1-4.Altis.7z
2014-06-12 16:12 - 2014-06-12 16:12 - 00000000 ____D () C:\Users\Administrator\Downloads\[ExpToObj]_v6.Stratis
2014-06-12 16:11 - 2014-06-12 16:11 - 00201024 _____ () C:\Users\Administrator\Downloads\[ExpToObj]_v6.Stratis.zip
2014-06-12 16:06 - 2014-06-12 16:05 - 00000000 ____D () C:\Users\Administrator\Downloads\LKnukev0.9
2014-06-12 15:27 - 2014-06-12 15:27 - 00000000 ____D () C:\Users\Administrator\Downloads\[DEMO]Nuke.Altis
2014-06-12 15:26 - 2014-06-12 15:26 - 00115565 _____ () C:\Users\Administrator\Downloads\[DEMO]Nuke.Altis.rar
2014-06-12 15:23 - 2014-06-12 15:23 - 00007906 _____ () C:\Users\Administrator\Downloads\JEMAND_SCUD.7z
2014-06-12 15:23 - 2014-05-27 11:25 - 00000000 ____D () C:\Users\Administrator\AppData\Local\PboM
2014-06-12 15:21 - 2014-06-12 15:21 - 09396076 _____ () C:\Users\Administrator\Downloads\LKnukev0.9.rar
2014-06-12 14:55 - 2014-06-12 14:55 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-06-12 14:55 - 2014-06-12 14:55 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-06-12 14:55 - 2014-06-12 14:55 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-06-12 14:55 - 2014-06-12 14:55 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-06-12 14:55 - 2014-06-12 14:55 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-06-12 14:39 - 2014-06-12 14:39 - 00000470 _____ () C:\Users\Administrator\Downloads\listen-dsl.asx
2014-06-12 14:35 - 2014-06-12 14:35 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-06-11 14:28 - 2014-06-11 14:05 - 50532267 _____ () C:\Users\Administrator\Downloads\WAPMOD.Ver.1.09.zip
2014-06-11 14:00 - 2014-06-11 13:59 - 10625881 _____ () C:\Users\Administrator\Downloads\ArmA_Editing-Guide_Deluxe_Edition.rar
2014-06-10 21:51 - 2014-06-10 21:51 - 00010015 _____ () C:\Users\Administrator\Desktop\1.txt
2014-06-10 20:38 - 2013-07-30 12:29 - 00000000 _____ () C:\WINDOWS\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-06-10 01:18 - 2014-06-10 01:18 - 00498949 _____ () C:\Users\Administrator\Downloads\Chat*Logger++*1.2.rar

Files to move or delete:
====================
C:\Users\Marcel-\FireDepartment3_setup.exe


Some content of TEMP:
====================
C:\Users\Marcel-\AppData\Local\Temp\BatteryBarSetup-3.6.3.exe
C:\Users\Marcel-\AppData\Local\Temp\SkypeSetup.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-04 21:14

==================== End Of Log ===========================

95Marcel95 11.07.2014 11:32
GMER - hängt sich bei C:\Windows\System32\kernel.appcore.dll auf.
Bleibt Stundenlang bei der Datei.

Code:
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-07-11 12:29:50
Windows 6.2.9200  x64 \Device\Harddisk0\DR0 -> \Device\00000036 TOSHIBA_MQ01ABD100 rev.AX001C 931.51GB
Running: Gmer-19357.exe; Driver: C:\Users\Administrator\AppData\Local\Temp\uwldypog.sys


---- Kernel code sections - GMER 2.1 ----

.text  C:\WINDOWS\System32\win32k.sys!W32pServiceTable                                                                                                        fffff96000126600 15 bytes [00, F8, 09, 02, 80, 32, 72, ...]
.text  C:\WINDOWS\System32\win32k.sys!W32pServiceTable + 16                                                                                                  fffff96000126610 11 bytes [00, BC, FB, FF, 00, 77, B2, ...]

---- User code sections - GMER 2.1 ----

.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleInformation                                                              00007ffd5e3028c0 7 bytes JMP 00007ffe5d240260
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\KERNEL32.DLL!RegQueryValueExW                                                                    00007ffd5e3043d8 7 bytes JMP 00007ffe5d240298
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExA                                                                      00007ffd5e3b1f20 7 bytes JMP 00007ffe5d240308
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExW                                                                      00007ffd5e3b40b4 7 bytes JMP 00007ffe5d240340
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\KERNEL32.DLL!RegDeleteValueW                                                                      00007ffd5e3b4510 7 bytes JMP 00007ffe5d2402d0
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\KERNEL32.DLL!K32EnumProcessModulesEx                                                              00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2401f0
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\KERNEL32.DLL!K32GetMappedFileNameW                                                                00007ffd5e3dcf10 7 bytes JMP 00007ffe5d240228
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW                                                                  00007ffd5d252300 7 bytes JMP 00007ffe5d2400d8
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                                                                        00007ffd5d255770 5 bytes JMP 00007ffe5d240180
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW                                                                    00007ffd5d255860 5 bytes JMP 00007ffe5d240148
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW                                                                00007ffd5d255a30 5 bytes JMP 00007ffe5d240110
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW                                                              00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2401b8
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\USER32.dll!CreateWindowExW                                                                        00007ffd5e08b6f4 10 bytes JMP 00007ffe5d240420
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesW                                                                    00007ffd5e0945d8 5 bytes JMP 00007ffe5d2403e8
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\USER32.dll!DisplayConfigGetDeviceInfo                                                            00007ffd5e094750 9 bytes JMP 00007ffe5d240378
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesA                                                                    00007ffd5e0a4fc0 5 bytes JMP 00007ffe5d2403b0
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\USER32.dll!ChangeDisplaySettingsExW                                                              00007ffd5e0a5cb0 5 bytes JMP 00007ffe5d240458
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList                                                                00007ffd5dc91500 1 byte JMP 00007ffe5d240490
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList + 2                                                            00007ffd5dc91502 6 bytes {JMP 0xffffffffff5aef90}
.text  C:\WINDOWS\system32\dwm.exe[548] C:\WINDOWS\system32\GDI32.dll!D3DKMTQueryAdapterInfo                                                                  00007ffd5dc91750 8 bytes JMP 00007ffe5d2404c8
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleInformation                                00007ffd5e3028c0 7 bytes JMP 00007ffe5d240260
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\KERNEL32.DLL!RegQueryValueExW                                        00007ffd5e3043d8 7 bytes JMP 00007ffe5d240298
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExA                                          00007ffd5e3b1f20 7 bytes JMP 00007ffe5d240308
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExW                                          00007ffd5e3b40b4 7 bytes JMP 00007ffe5d240340
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\KERNEL32.DLL!RegDeleteValueW                                        00007ffd5e3b4510 7 bytes JMP 00007ffe5d2402d0
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\KERNEL32.DLL!K32EnumProcessModulesEx                                00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2401f0
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\KERNEL32.DLL!K32GetMappedFileNameW                                  00007ffd5e3dcf10 7 bytes JMP 00007ffe5d240228
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW                                      00007ffd5d252300 7 bytes JMP 00007ffe5d2400d8
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                                          00007ffd5d255770 5 bytes JMP 00007ffe5d240180
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW                                        00007ffd5d255860 5 bytes JMP 00007ffe5d240148
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW                                    00007ffd5d255a30 5 bytes JMP 00007ffe5d240110
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW                                  00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2401b8
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\SYSTEM32\combase.dll!CoSetProxyBlanket                                        00007ffd5d739318 7 bytes JMP 00007ffe5d240538
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\SYSTEM32\combase.dll!CoCreateInstance                                        00007ffd5d73cbe0 7 bytes JMP 00007ffe5d240500
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\USER32.dll!CreateWindowExW                                          00007ffd5e08b6f4 10 bytes JMP 00007ffe5d240420
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesW                                      00007ffd5e0945d8 5 bytes JMP 00007ffe5d2403e8
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\USER32.dll!DisplayConfigGetDeviceInfo                                00007ffd5e094750 9 bytes JMP 00007ffe5d240378
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesA                                      00007ffd5e0a4fc0 5 bytes JMP 00007ffe5d2403b0
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\USER32.dll!ChangeDisplaySettingsExW                                  00007ffd5e0a5cb0 5 bytes JMP 00007ffe5d240458
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList                                  00007ffd5dc91500 1 byte JMP 00007ffe5d240490
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList + 2                              00007ffd5dc91502 6 bytes {JMP 0xffffffffff5aef90}
.text  C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[972] C:\WINDOWS\system32\GDI32.dll!D3DKMTQueryAdapterInfo                                    00007ffd5dc91750 8 bytes JMP 00007ffe5d2404c8
.text  C:\WINDOWS\system32\nvvsvc.exe[304] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506                                                            00007ffd5e4b169a 4 bytes [4B, 5E, FD, 7F]
.text  C:\WINDOWS\system32\nvvsvc.exe[304] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514                                                            00007ffd5e4b16a2 4 bytes [4B, 5E, FD, 7F]
.text  C:\WINDOWS\system32\nvvsvc.exe[304] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118                                                                00007ffd5e4b181a 4 bytes [4B, 5E, FD, 7F]
.text  C:\WINDOWS\system32\nvvsvc.exe[304] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142                                                                00007ffd5e4b1832 4 bytes [4B, 5E, FD, 7F]
.text  C:\Windows\System32\WUDFHost.exe[1588] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506                                                          00007ffd5e4b169a 4 bytes [4B, 5E, FD, 7F]
.text  C:\Windows\System32\WUDFHost.exe[1588] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514                                                          00007ffd5e4b16a2 4 bytes [4B, 5E, FD, 7F]
.text  C:\Windows\System32\WUDFHost.exe[1588] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118                                                            00007ffd5e4b181a 4 bytes [4B, 5E, FD, 7F]
.text  C:\Windows\System32\WUDFHost.exe[1588] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142                                                            00007ffd5e4b1832 4 bytes [4B, 5E, FD, 7F]
.text  C:\WINDOWS\System32\spoolsv.exe[1820] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506                                                          00007ffd5e4b169a 4 bytes [4B, 5E, FD, 7F]
.text  C:\WINDOWS\System32\spoolsv.exe[1820] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514                                                          00007ffd5e4b16a2 4 bytes [4B, 5E, FD, 7F]
.text  C:\WINDOWS\System32\spoolsv.exe[1820] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118                                                              00007ffd5e4b181a 4 bytes [4B, 5E, FD, 7F]
.text  C:\WINDOWS\System32\spoolsv.exe[1820] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142                                                              00007ffd5e4b1832 4 bytes [4B, 5E, FD, 7F]
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleInformation                                            00007ffd5e3028c0 7 bytes JMP 00007ffe5d240260
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\KERNEL32.DLL!RegQueryValueExW                                                  00007ffd5e3043d8 7 bytes JMP 00007ffe5d240298
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExA                                                    00007ffd5e3b1f20 7 bytes JMP 00007ffe5d240308
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExW                                                    00007ffd5e3b40b4 7 bytes JMP 00007ffe5d240340
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\KERNEL32.DLL!RegDeleteValueW                                                    00007ffd5e3b4510 7 bytes JMP 00007ffe5d2402d0
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\KERNEL32.DLL!K32EnumProcessModulesEx                                            00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2401f0
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\KERNEL32.DLL!K32GetMappedFileNameW                                              00007ffd5e3dcf10 7 bytes JMP 00007ffe5d240228
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW                                                00007ffd5d252300 7 bytes JMP 00007ffe5d2400d8
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                                                      00007ffd5d255770 5 bytes JMP 00007ffe5d240180
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW                                                  00007ffd5d255860 5 bytes JMP 00007ffe5d240148
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW                                              00007ffd5d255a30 5 bytes JMP 00007ffe5d240110
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW                                            00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2401b8
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\USER32.dll!CreateWindowExW                                                      00007ffd5e08b6f4 10 bytes JMP 00007ffe5d240420
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesW                                                  00007ffd5e0945d8 5 bytes JMP 00007ffe5d2403e8
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\USER32.dll!DisplayConfigGetDeviceInfo                                          00007ffd5e094750 9 bytes JMP 00007ffe5d240378
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesA                                                  00007ffd5e0a4fc0 5 bytes JMP 00007ffe5d2403b0
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\USER32.dll!ChangeDisplaySettingsExW                                            00007ffd5e0a5cb0 5 bytes JMP 00007ffe5d240458
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList                                              00007ffd5dc91500 1 byte JMP 00007ffe5d240490
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList + 2                                          00007ffd5dc91502 6 bytes {JMP 0xffffffffff5aef90}
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\GDI32.dll!D3DKMTQueryAdapterInfo                                                00007ffd5dc91750 8 bytes JMP 00007ffe5d2404c8
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\SYSTEM32\combase.dll!CoSetProxyBlanket                                                  00007ffd5d739318 7 bytes JMP 00007ffe5d240538
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\SYSTEM32\combase.dll!CoCreateInstance                                                    00007ffd5d73cbe0 7 bytes JMP 00007ffe5d240500
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506                                              00007ffd5e4b169a 4 bytes [4B, 5E, FD, 7F]
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514                                              00007ffd5e4b16a2 4 bytes [4B, 5E, FD, 7F]
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118                                                00007ffd5e4b181a 4 bytes [4B, 5E, FD, 7F]
.text  C:\Program Files\Protector Suite\upeksvr.exe[2216] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142                                                00007ffd5e4b1832 4 bytes [4B, 5E, FD, 7F]
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleInformation                                    00007ffd5e3028c0 7 bytes JMP 00007ffe5d240260
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\KERNEL32.DLL!RegQueryValueExW                                            00007ffd5e3043d8 7 bytes JMP 00007ffe5d240298
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExA                                              00007ffd5e3b1f20 7 bytes JMP 00007ffe5d240308
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExW                                              00007ffd5e3b40b4 7 bytes JMP 00007ffe5d240340
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\KERNEL32.DLL!RegDeleteValueW                                            00007ffd5e3b4510 7 bytes JMP 00007ffe5d2402d0
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\KERNEL32.DLL!K32EnumProcessModulesEx                                    00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2401f0
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\KERNEL32.DLL!K32GetMappedFileNameW                                      00007ffd5e3dcf10 7 bytes JMP 00007ffe5d240228
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW                                          00007ffd5d252300 7 bytes JMP 00007ffe5d2400d8
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                                              00007ffd5d255770 5 bytes JMP 00007ffe5d240180
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW                                            00007ffd5d255860 5 bytes JMP 00007ffe5d240148
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW                                        00007ffd5d255a30 5 bytes JMP 00007ffe5d240110
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW                                      00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2401b8
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\USER32.dll!CreateWindowExW                                              00007ffd5e08b6f4 10 bytes JMP 00007ffe5d240420
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesW                                          00007ffd5e0945d8 5 bytes JMP 00007ffe5d2403e8
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\USER32.dll!DisplayConfigGetDeviceInfo                                    00007ffd5e094750 9 bytes JMP 00007ffe5d240378
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesA                                          00007ffd5e0a4fc0 5 bytes JMP 00007ffe5d2403b0
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\USER32.dll!ChangeDisplaySettingsExW                                      00007ffd5e0a5cb0 5 bytes JMP 00007ffe5d240458
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList                                      00007ffd5dc91500 1 byte JMP 00007ffe5d240490
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList + 2                                  00007ffd5dc91502 6 bytes {JMP 0xffffffffff5aef90}
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\system32\GDI32.dll!D3DKMTQueryAdapterInfo                                        00007ffd5dc91750 8 bytes JMP 00007ffe5d2404c8
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\SYSTEM32\combase.dll!CoSetProxyBlanket                                            00007ffd5d739318 7 bytes JMP 00007ffe5d240538
.text  C:\Program Files\Classic Shell\ClassicStartMenu.exe[2888] C:\WINDOWS\SYSTEM32\combase.dll!CoCreateInstance                                            00007ffd5d73cbe0 7 bytes JMP 00007ffe5d240500
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleInformation                                                      00007ffd5e3028c0 7 bytes JMP 00007ffe5d240260
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\system32\KERNEL32.DLL!RegQueryValueExW                                                            00007ffd5e3043d8 7 bytes JMP 00007ffe5d240298
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExA                                                              00007ffd5e3b1f20 7 bytes JMP 00007ffe5d240308
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExW                                                              00007ffd5e3b40b4 7 bytes JMP 00007ffe5d240340
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\system32\KERNEL32.DLL!RegDeleteValueW                                                              00007ffd5e3b4510 7 bytes JMP 00007ffe5d2402d0
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\system32\KERNEL32.DLL!K32EnumProcessModulesEx                                                      00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2401f0
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\system32\KERNEL32.DLL!K32GetMappedFileNameW                                                        00007ffd5e3dcf10 7 bytes JMP 00007ffe5d240228
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW                                                          00007ffd5d252300 7 bytes JMP 00007ffe5d2400d8
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                                                                00007ffd5d255770 5 bytes JMP 00007ffe5d240180
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW                                                            00007ffd5d255860 5 bytes JMP 00007ffe5d240148
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW                                                        00007ffd5d255a30 5 bytes JMP 00007ffe5d240110
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW                                                      00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2401b8
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\SYSTEM32\combase.dll!CoSetProxyBlanket                                                            00007ffd5d739318 7 bytes JMP 00007ffe5d240538
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\SYSTEM32\combase.dll!CoCreateInstance                                                              00007ffd5d73cbe0 7 bytes JMP 00007ffe5d240500
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\SYSTEM32\user32.dll!CreateWindowExW                                                                00007ffd5e08b6f4 10 bytes JMP 00007ffe5d240420
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\SYSTEM32\user32.dll!EnumDisplayDevicesW                                                            00007ffd5e0945d8 5 bytes JMP 00007ffe5d2403e8
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\SYSTEM32\user32.dll!DisplayConfigGetDeviceInfo                                                    00007ffd5e094750 9 bytes JMP 00007ffe5d240378
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\SYSTEM32\user32.dll!EnumDisplayDevicesA                                                            00007ffd5e0a4fc0 5 bytes JMP 00007ffe5d2403b0
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\SYSTEM32\user32.dll!ChangeDisplaySettingsExW                                                      00007ffd5e0a5cb0 5 bytes JMP 00007ffe5d240458
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList                                                        00007ffd5dc91500 1 byte JMP 00007ffe5d240490
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList + 2                                                    00007ffd5dc91502 6 bytes {JMP 0xffffffffff5aef90}
.text  C:\WINDOWS\system32\taskhostex.exe[3032] C:\WINDOWS\system32\GDI32.dll!D3DKMTQueryAdapterInfo                                                          00007ffd5dc91750 8 bytes JMP 00007ffe5d2404c8
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleInformation                                                        00007ffd5e3028c0 7 bytes JMP 00007ffe5d240260
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\KERNEL32.DLL!RegQueryValueExW                                                                00007ffd5e3043d8 7 bytes JMP 00007ffe5d240298
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExA                                                                  00007ffd5e3b1f20 7 bytes JMP 00007ffe5d240308
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExW                                                                  00007ffd5e3b40b4 7 bytes JMP 00007ffe5d240340
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\KERNEL32.DLL!RegDeleteValueW                                                                00007ffd5e3b4510 7 bytes JMP 00007ffe5d2402d0
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\KERNEL32.DLL!K32EnumProcessModulesEx                                                        00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2401f0
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\KERNEL32.DLL!K32GetMappedFileNameW                                                          00007ffd5e3dcf10 7 bytes JMP 00007ffe5d240228
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW                                                              00007ffd5d252300 7 bytes JMP 00007ffe5d2400d8
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                                                                  00007ffd5d255770 5 bytes JMP 00007ffe5d240180
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW                                                                00007ffd5d255860 5 bytes JMP 00007ffe5d240148
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW                                                            00007ffd5d255a30 5 bytes JMP 00007ffe5d240110
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW                                                          00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2401b8
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\USER32.dll!CreateWindowExW                                                                  00007ffd5e08b6f4 10 bytes JMP 00007ffe5d240420
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesW                                                              00007ffd5e0945d8 5 bytes JMP 00007ffe5d2403e8
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\USER32.dll!DisplayConfigGetDeviceInfo                                                        00007ffd5e094750 9 bytes JMP 00007ffe5d240378
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesA                                                              00007ffd5e0a4fc0 5 bytes JMP 00007ffe5d2403b0
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\USER32.dll!ChangeDisplaySettingsExW                                                          00007ffd5e0a5cb0 5 bytes JMP 00007ffe5d240458
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList                                                          00007ffd5dc91500 1 byte JMP 00007ffe5d240490
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList + 2                                                      00007ffd5dc91502 6 bytes {JMP 0xffffffffff5aef90}
.text  C:\WINDOWS\system32\taskeng.exe[3056] C:\WINDOWS\system32\GDI32.dll!D3DKMTQueryAdapterInfo                                                            00007ffd5dc91750 8 bytes JMP 00007ffe5d2404c8
.text  C:\Program Files\Process Lasso\processgovernor.exe[2680] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleInformation                                      00007ffd5e3028c0 7 bytes JMP 00007ffe5d240260
.text  C:\Program Files\Process Lasso\processgovernor.exe[2680] C:\WINDOWS\system32\KERNEL32.DLL!RegQueryValueExW                                            00007ffd5e3043d8 7 bytes JMP 00007ffe5d240298
.text  C:\Program Files\Process Lasso\processgovernor.exe[2680] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExA                                              00007ffd5e3b1f20 7 bytes JMP 00007ffe5d240308
.text  C:\Program Files\Process Lasso\processgovernor.exe[2680] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExW                                              00007ffd5e3b40b4 7 bytes JMP 00007ffe5d240340
.text  C:\Program Files\Process Lasso\processgovernor.exe[2680] C:\WINDOWS\system32\KERNEL32.DLL!RegDeleteValueW                                              00007ffd5e3b4510 7 bytes JMP 00007ffe5d2402d0
.text  C:\Program Files\Process Lasso\processgovernor.exe[2680] C:\WINDOWS\system32\KERNEL32.DLL!K32EnumProcessModulesEx                                      00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2401f0
.text  C:\Program Files\Process Lasso\processgovernor.exe[2680] C:\WINDOWS\system32\KERNEL32.DLL!K32GetMappedFileNameW                                        00007ffd5e3dcf10 7 bytes JMP 00007ffe5d240228
.text  C:\Program Files\Process Lasso\processgovernor.exe[2680] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW                                          00007ffd5d252300 7 bytes JMP 00007ffe5d2400d8
.text  C:\Program Files\Process Lasso\processgovernor.exe[2680] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                                                00007ffd5d255770 5 bytes JMP 00007ffe5d240180
.text  C:\Program Files\Process Lasso\processgovernor.exe[2680] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW                                            00007ffd5d255860 5 bytes JMP 00007ffe5d240148
.text  C:\Program Files\Process Lasso\processgovernor.exe[2680] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW                                        00007ffd5d255a30 5 bytes JMP 00007ffe5d240110
.text  C:\Program Files\Process Lasso\processgovernor.exe[2680] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW                                      00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2401b8
.text  C:\Program Files\Process Lasso\processgovernor.exe[2680] C:\WINDOWS\SYSTEM32\combase.dll!CoSetProxyBlanket                                            00007ffd5d739318 7 bytes JMP 00007ffe5d240538
.text  C:\Program Files\Process Lasso\processgovernor.exe[2680] C:\WINDOWS\SYSTEM32\combase.dll!CoCreateInstance                                              00007ffd5d73cbe0 7 bytes JMP 00007ffe5d240500
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleInformation                                  00007ffd5e3028c0 7 bytes JMP 00007ffe5d240260
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\KERNEL32.DLL!RegQueryValueExW                                        00007ffd5e3043d8 7 bytes JMP 00007ffe5d240298
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExA                                          00007ffd5e3b1f20 7 bytes JMP 00007ffe5d240308
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExW                                          00007ffd5e3b40b4 7 bytes JMP 00007ffe5d240340
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\KERNEL32.DLL!RegDeleteValueW                                          00007ffd5e3b4510 7 bytes JMP 00007ffe5d2402d0
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\KERNEL32.DLL!K32EnumProcessModulesEx                                  00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2401f0
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\KERNEL32.DLL!K32GetMappedFileNameW                                    00007ffd5e3dcf10 7 bytes JMP 00007ffe5d240228
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW                                      00007ffd5d252300 7 bytes JMP 00007ffe5d2400d8
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                                            00007ffd5d255770 5 bytes JMP 00007ffe5d240180
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW                                        00007ffd5d255860 5 bytes JMP 00007ffe5d240148
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW                                    00007ffd5d255a30 5 bytes JMP 00007ffe5d240110
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW                                  00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2401b8
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\USER32.dll!CreateWindowExW                                            00007ffd5e08b6f4 10 bytes JMP 00007ffe5d240420
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesW                                        00007ffd5e0945d8 5 bytes JMP 00007ffe5d2403e8
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\USER32.dll!DisplayConfigGetDeviceInfo                                00007ffd5e094750 9 bytes JMP 00007ffe5d240378
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesA                                        00007ffd5e0a4fc0 5 bytes JMP 00007ffe5d2403b0
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\USER32.dll!ChangeDisplaySettingsExW                                  00007ffd5e0a5cb0 5 bytes JMP 00007ffe5d240458
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList                                    00007ffd5dc91500 1 byte JMP 00007ffe5d240490
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList + 2                                00007ffd5dc91502 6 bytes {JMP 0xffffffffff5aef90}
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\system32\GDI32.dll!D3DKMTQueryAdapterInfo                                      00007ffd5dc91750 8 bytes JMP 00007ffe5d2404c8
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\SYSTEM32\combase.dll!CoSetProxyBlanket                                        00007ffd5d739318 7 bytes JMP 00007ffe5d240538
.text  C:\Program Files\NVIDIA Corporation\Display\nvtray.exe[1132] C:\WINDOWS\SYSTEM32\combase.dll!CoCreateInstance                                          00007ffd5d73cbe0 7 bytes JMP 00007ffe5d240500
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleInformation                        00007ffd5e3028c0 7 bytes JMP 00007ffe5d220260
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\KERNEL32.DLL!RegQueryValueExW                                00007ffd5e3043d8 7 bytes JMP 00007ffe5d220298
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExA                                  00007ffd5e3b1f20 7 bytes JMP 00007ffe5d220308
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExW                                  00007ffd5e3b40b4 7 bytes JMP 00007ffe5d220340
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\KERNEL32.DLL!RegDeleteValueW                                00007ffd5e3b4510 7 bytes JMP 00007ffe5d2202d0
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\KERNEL32.DLL!K32EnumProcessModulesEx                        00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2201f0
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\KERNEL32.DLL!K32GetMappedFileNameW                          00007ffd5e3dcf10 7 bytes JMP 00007ffe5d220228
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW                              00007ffd5d252300 7 bytes JMP 00007ffe5d2200d8
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                                  00007ffd5d255770 5 bytes JMP 00007ffe5d220180
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW                                00007ffd5d255860 5 bytes JMP 00007ffe5d220148
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW                            00007ffd5d255a30 5 bytes JMP 00007ffe5d220110
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW                          00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2201b8
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\USER32.dll!CreateWindowExW                                  00007ffd5e08b6f4 10 bytes JMP 00007ffe5d220420
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesW                              00007ffd5e0945d8 5 bytes JMP 00007ffe5d2203e8
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\USER32.dll!DisplayConfigGetDeviceInfo                        00007ffd5e094750 9 bytes JMP 00007ffe5d220378
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesA                              00007ffd5e0a4fc0 5 bytes JMP 00007ffe5d2203b0
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\USER32.dll!ChangeDisplaySettingsExW                          00007ffd5e0a5cb0 5 bytes JMP 00007ffe5d220458
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList                          00007ffd5dc91500 1 byte JMP 00007ffe5d220490
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList + 2                      00007ffd5dc91502 6 bytes {JMP 0xffffffffff58ef90}
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\system32\GDI32.dll!D3DKMTQueryAdapterInfo                            00007ffd5dc91750 8 bytes JMP 00007ffe5d2204c8
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\SYSTEM32\d3d9.dll!Direct3DCreate9Ex                                  00007ffd4f3ca234 5 bytes JMP 00007ffd5d2205a8
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\SYSTEM32\d3d9.dll!Direct3DCreate9                                    00007ffd4f3e2300 6 bytes JMP 00007ffd5d220570
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\SYSTEM32\combase.dll!CoSetProxyBlanket                                00007ffd5d739318 7 bytes JMP 00007ffe5d220538
.text  C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe[1116] C:\WINDOWS\SYSTEM32\combase.dll!CoCreateInstance                                00007ffd5d73cbe0 7 bytes JMP 00007ffe5d220500
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleInformation                                                  00007ffd5e3028c0 7 bytes JMP 00007ffe5d240260
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\system32\KERNEL32.DLL!RegQueryValueExW                                                          00007ffd5e3043d8 7 bytes JMP 00007ffe5d240298
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExA                                                            00007ffd5e3b1f20 7 bytes JMP 00007ffe5d240308
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExW                                                            00007ffd5e3b40b4 7 bytes JMP 00007ffe5d240340
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\system32\KERNEL32.DLL!RegDeleteValueW                                                          00007ffd5e3b4510 7 bytes JMP 00007ffe5d2402d0
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\system32\KERNEL32.DLL!K32EnumProcessModulesEx                                                  00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2401f0
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\system32\KERNEL32.DLL!K32GetMappedFileNameW                                                    00007ffd5e3dcf10 7 bytes JMP 00007ffe5d240228
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW                                                        00007ffd5d252300 7 bytes JMP 00007ffe5d2400d8
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                                                            00007ffd5d255770 5 bytes JMP 00007ffe5d240180
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW                                                          00007ffd5d255860 5 bytes JMP 00007ffe5d240148
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW                                                      00007ffd5d255a30 5 bytes JMP 00007ffe5d240110
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW                                                    00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2401b8
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\SYSTEM32\user32.dll!CreateWindowExW                                                            00007ffd5e08b6f4 10 bytes JMP 00007ffe5d240420
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\SYSTEM32\user32.dll!EnumDisplayDevicesW                                                        00007ffd5e0945d8 5 bytes JMP 00007ffe5d2403e8
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\SYSTEM32\user32.dll!DisplayConfigGetDeviceInfo                                                  00007ffd5e094750 9 bytes JMP 00007ffe5d240378
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\SYSTEM32\user32.dll!EnumDisplayDevicesA                                                        00007ffd5e0a4fc0 5 bytes JMP 00007ffe5d2403b0
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\SYSTEM32\user32.dll!ChangeDisplaySettingsExW                                                    00007ffd5e0a5cb0 5 bytes JMP 00007ffe5d240458
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList                                                    00007ffd5dc91500 1 byte JMP 00007ffe5d240490
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList + 2                                                00007ffd5dc91502 6 bytes {JMP 0xffffffffff5aef90}
.text  C:\WINDOWS\system32\wbem\unsecapp.exe[3760] C:\WINDOWS\system32\GDI32.dll!D3DKMTQueryAdapterInfo                                                      00007ffd5dc91750 8 bytes JMP 00007ffe5d2404c8
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleInformation                                          00007ffd5e3028c0 7 bytes JMP 00007ffe5d240260
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\KERNEL32.DLL!RegQueryValueExW                                                  00007ffd5e3043d8 7 bytes JMP 00007ffe5d240298
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExA                                                    00007ffd5e3b1f20 7 bytes JMP 00007ffe5d240308
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExW                                                    00007ffd5e3b40b4 7 bytes JMP 00007ffe5d240340
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\KERNEL32.DLL!RegDeleteValueW                                                  00007ffd5e3b4510 7 bytes JMP 00007ffe5d2402d0
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\KERNEL32.DLL!K32EnumProcessModulesEx                                          00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2401f0
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\KERNEL32.DLL!K32GetMappedFileNameW                                            00007ffd5e3dcf10 7 bytes JMP 00007ffe5d240228
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW                                                00007ffd5d252300 7 bytes JMP 00007ffe5d2400d8
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                                                    00007ffd5d255770 5 bytes JMP 00007ffe5d240180
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW                                                  00007ffd5d255860 5 bytes JMP 00007ffe5d240148
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW                                              00007ffd5d255a30 5 bytes JMP 00007ffe5d240110
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW                                            00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2401b8
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506                                            00007ffd5e4b169a 4 bytes [4B, 5E, FD, 7F]
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514                                            00007ffd5e4b16a2 4 bytes [4B, 5E, FD, 7F]
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118                                                00007ffd5e4b181a 4 bytes [4B, 5E, FD, 7F]
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142                                                00007ffd5e4b1832 4 bytes [4B, 5E, FD, 7F]
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\USER32.dll!CreateWindowExW                                                    00007ffd5e08b6f4 10 bytes JMP 00007ffe5d240420
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesW                                                00007ffd5e0945d8 5 bytes JMP 00007ffe5d2403e8
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\USER32.dll!DisplayConfigGetDeviceInfo                                          00007ffd5e094750 9 bytes JMP 00007ffe5d240378
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesA                                                00007ffd5e0a4fc0 5 bytes JMP 00007ffe5d2403b0
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\USER32.dll!ChangeDisplaySettingsExW                                            00007ffd5e0a5cb0 5 bytes JMP 00007ffe5d240458
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList                                            00007ffd5dc91500 1 byte JMP 00007ffe5d240490
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList + 2                                        00007ffd5dc91502 6 bytes {JMP 0xffffffffff5aef90}
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\system32\GDI32.dll!D3DKMTQueryAdapterInfo                                              00007ffd5dc91750 8 bytes JMP 00007ffe5d2404c8
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\SYSTEM32\combase.dll!CoSetProxyBlanket                                                  00007ffd5d739318 7 bytes JMP 00007ffe5d240538
.text  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[5352] C:\WINDOWS\SYSTEM32\combase.dll!CoCreateInstance                                                  00007ffd5d73cbe0 7 bytes JMP 00007ffe5d240500
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleInformation                                                  00007ffd5e3028c0 7 bytes JMP 00007ffe5d240260
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\KERNEL32.DLL!RegQueryValueExW                                                          00007ffd5e3043d8 7 bytes JMP 00007ffe5d240298
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExA                                                            00007ffd5e3b1f20 7 bytes JMP 00007ffe5d240308
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExW                                                            00007ffd5e3b40b4 7 bytes JMP 00007ffe5d240340
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\KERNEL32.DLL!RegDeleteValueW                                                          00007ffd5e3b4510 7 bytes JMP 00007ffe5d2402d0
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\KERNEL32.DLL!K32EnumProcessModulesEx                                                  00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2401f0
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\KERNEL32.DLL!K32GetMappedFileNameW                                                    00007ffd5e3dcf10 7 bytes JMP 00007ffe5d240228
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW                                                        00007ffd5d252300 7 bytes JMP 00007ffe5d2400d8
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                                                            00007ffd5d255770 5 bytes JMP 00007ffe5d240180
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW                                                          00007ffd5d255860 5 bytes JMP 00007ffe5d240148
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW                                                      00007ffd5d255a30 5 bytes JMP 00007ffe5d240110
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW                                                    00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2401b8
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList                                                    00007ffd5dc91500 1 byte JMP 00007ffe5d240490
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList + 2                                                00007ffd5dc91502 6 bytes {JMP 0xffffffffff5aef90}
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\GDI32.dll!D3DKMTQueryAdapterInfo                                                      00007ffd5dc91750 8 bytes JMP 00007ffe5d2404c8
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\USER32.dll!CreateWindowExW                                                            00007ffd5e08b6f4 10 bytes JMP 00007ffe5d240420
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesW                                                        00007ffd5e0945d8 5 bytes JMP 00007ffe5d2403e8
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\USER32.dll!DisplayConfigGetDeviceInfo                                                  00007ffd5e094750 9 bytes JMP 00007ffe5d240378
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesA                                                        00007ffd5e0a4fc0 5 bytes JMP 00007ffe5d2403b0
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\system32\USER32.dll!ChangeDisplaySettingsExW                                                    00007ffd5e0a5cb0 5 bytes JMP 00007ffe5d240458
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\SYSTEM32\combase.dll!CoSetProxyBlanket                                                          00007ffd5d739318 7 bytes JMP 00007ffe5d240538
.text  C:\Program Files\IDT\WDM\sttray64.exe[5400] C:\WINDOWS\SYSTEM32\combase.dll!CoCreateInstance                                                          00007ffd5d73cbe0 7 bytes JMP 00007ffe5d240500
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleInformation                      00007ffd5e3028c0 7 bytes JMP 00007ffe5d240260
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\KERNEL32.DLL!RegQueryValueExW                            00007ffd5e3043d8 7 bytes JMP 00007ffe5d240298
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExA                              00007ffd5e3b1f20 7 bytes JMP 00007ffe5d240308
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExW                              00007ffd5e3b40b4 7 bytes JMP 00007ffe5d240340
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\KERNEL32.DLL!RegDeleteValueW                              00007ffd5e3b4510 7 bytes JMP 00007ffe5d2402d0
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\KERNEL32.DLL!K32EnumProcessModulesEx                      00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2401f0
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\KERNEL32.DLL!K32GetMappedFileNameW                        00007ffd5e3dcf10 7 bytes JMP 00007ffe5d240228
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW                          00007ffd5d252300 7 bytes JMP 00007ffe5d2400d8
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                                00007ffd5d255770 5 bytes JMP 00007ffe5d240180
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW                            00007ffd5d255860 5 bytes JMP 00007ffe5d240148
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW                        00007ffd5d255a30 5 bytes JMP 00007ffe5d240110
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW                      00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2401b8
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\USER32.dll!CreateWindowExW                                00007ffd5e08b6f4 10 bytes JMP 00007ffe5d240420
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesW                            00007ffd5e0945d8 5 bytes JMP 00007ffe5d2403e8
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\USER32.dll!DisplayConfigGetDeviceInfo                    00007ffd5e094750 9 bytes JMP 00007ffe5d240378
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesA                            00007ffd5e0a4fc0 5 bytes JMP 00007ffe5d2403b0
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\USER32.dll!ChangeDisplaySettingsExW                      00007ffd5e0a5cb0 5 bytes JMP 00007ffe5d240458
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList                        00007ffd5dc91500 1 byte JMP 00007ffe5d240490
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList + 2                    00007ffd5dc91502 6 bytes {JMP 0xffffffffff5aef90}
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\system32\GDI32.dll!D3DKMTQueryAdapterInfo                          00007ffd5dc91750 8 bytes JMP 00007ffe5d2404c8
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\SYSTEM32\combase.dll!CoSetProxyBlanket                            00007ffd5d739318 7 bytes JMP 00007ffe5d240538
.text  C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe[5448] C:\WINDOWS\SYSTEM32\combase.dll!CoCreateInstance                              00007ffd5d73cbe0 7 bytes JMP 00007ffe5d240500
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleInformation                                                        00007ffd5e3028c0 7 bytes JMP 00007ffe5d240260
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\KERNEL32.DLL!RegQueryValueExW                                                              00007ffd5e3043d8 7 bytes JMP 00007ffe5d240298
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExA                                                                00007ffd5e3b1f20 7 bytes JMP 00007ffe5d240308
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExW                                                                00007ffd5e3b40b4 7 bytes JMP 00007ffe5d240340
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\KERNEL32.DLL!RegDeleteValueW                                                                00007ffd5e3b4510 7 bytes JMP 00007ffe5d2402d0
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\KERNEL32.DLL!K32EnumProcessModulesEx                                                        00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2401f0
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\KERNEL32.DLL!K32GetMappedFileNameW                                                          00007ffd5e3dcf10 7 bytes JMP 00007ffe5d240228
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW                                                            00007ffd5d252300 7 bytes JMP 00007ffe5d2400d8
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                                                                  00007ffd5d255770 5 bytes JMP 00007ffe5d240180
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW                                                              00007ffd5d255860 5 bytes JMP 00007ffe5d240148
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW                                                          00007ffd5d255a30 5 bytes JMP 00007ffe5d240110
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW                                                        00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2401b8
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\USER32.dll!CreateWindowExW                                                                  00007ffd5e08b6f4 10 bytes JMP 00007ffe5d240420
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesW                                                              00007ffd5e0945d8 5 bytes JMP 00007ffe5d2403e8
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\USER32.dll!DisplayConfigGetDeviceInfo                                                      00007ffd5e094750 9 bytes JMP 00007ffe5d240378
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesA                                                              00007ffd5e0a4fc0 5 bytes JMP 00007ffe5d2403b0
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\USER32.dll!ChangeDisplaySettingsExW                                                        00007ffd5e0a5cb0 5 bytes JMP 00007ffe5d240458
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList                                                          00007ffd5dc91500 1 byte JMP 00007ffe5d240490
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList + 2                                                      00007ffd5dc91502 6 bytes {JMP 0xffffffffff5aef90}
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\GDI32.dll!D3DKMTQueryAdapterInfo                                                            00007ffd5dc91750 8 bytes JMP 00007ffe5d2404c8
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\SYSTEM32\combase.dll!CoSetProxyBlanket                                                              00007ffd5d739318 7 bytes JMP 00007ffe5d240538
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\SYSTEM32\combase.dll!CoCreateInstance                                                                00007ffd5d73cbe0 7 bytes JMP 00007ffe5d240500
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506                                                          00007ffd5e4b169a 4 bytes [4B, 5E, FD, 7F]
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514                                                          00007ffd5e4b16a2 4 bytes [4B, 5E, FD, 7F]
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118                                                            00007ffd5e4b181a 4 bytes [4B, 5E, FD, 7F]
.text  C:\Windows\System32\igfxpers.exe[5532] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142                                                            00007ffd5e4b1832 4 bytes [4B, 5E, FD, 7F]
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\KERNEL32.DLL!K32GetModuleInformation                                        00007ffd5e3028c0 7 bytes JMP 00007ffe5d240260
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\KERNEL32.DLL!RegQueryValueExW                                              00007ffd5e3043d8 7 bytes JMP 00007ffe5d240298
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExA                                                00007ffd5e3b1f20 7 bytes JMP 00007ffe5d240308
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\KERNEL32.DLL!RegSetValueExW                                                00007ffd5e3b40b4 7 bytes JMP 00007ffe5d240340
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\KERNEL32.DLL!RegDeleteValueW                                                00007ffd5e3b4510 7 bytes JMP 00007ffe5d2402d0
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\KERNEL32.DLL!K32EnumProcessModulesEx                                        00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2401f0
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\KERNEL32.DLL!K32GetMappedFileNameW                                          00007ffd5e3dcf10 7 bytes JMP 00007ffe5d240228
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW                                            00007ffd5d252300 7 bytes JMP 00007ffe5d2400d8
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                                                  00007ffd5d255770 5 bytes JMP 00007ffe5d240180
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW                                              00007ffd5d255860 5 bytes JMP 00007ffe5d240148
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW                                          00007ffd5d255a30 5 bytes JMP 00007ffe5d240110
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW                                        00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2401b8
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 506                                          00007ffd5e4b169a 4 bytes [4B, 5E, FD, 7F]
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\PSAPI.DLL!GetModuleBaseNameA + 514                                          00007ffd5e4b16a2 4 bytes [4B, 5E, FD, 7F]
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 118                                            00007ffd5e4b181a 4 bytes [4B, 5E, FD, 7F]
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\PSAPI.DLL!QueryWorkingSet + 142                                            00007ffd5e4b1832 4 bytes [4B, 5E, FD, 7F]
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\USER32.dll!CreateWindowExW                                                  00007ffd5e08b6f4 10 bytes JMP 00007ffe5d240420
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesW                                              00007ffd5e0945d8 5 bytes JMP 00007ffe5d2403e8
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\USER32.dll!DisplayConfigGetDeviceInfo                                      00007ffd5e094750 9 bytes JMP 00007ffe5d240378
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesA                                              00007ffd5e0a4fc0 5 bytes JMP 00007ffe5d2403b0
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\USER32.dll!ChangeDisplaySettingsExW                                        00007ffd5e0a5cb0 5 bytes JMP 00007ffe5d240458
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList                                          00007ffd5dc91500 1 byte JMP 00007ffe5d240490
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList + 2                                      00007ffd5dc91502 6 bytes {JMP 0xffffffffff5aef90}
.text  C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE[5540] C:\WINDOWS\system32\GDI32.dll!D3DKMTQueryAdapterInfo                                            00007ffd5dc91750 8 bytes JMP 00007ffe5d2404c8
.text  C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe[1480] C:\WINDOWS\system32\KERNEL32.dll!K32GetModuleInformation                    00007ffd5e3028c0 7 bytes JMP 00007ffe5d240260
.text  C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe[1480] C:\WINDOWS\system32\KERNEL32.dll!RegQueryValueExW                          00007ffd5e3043d8 7 bytes JMP 00007ffe5d240298
.text  C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe[1480] C:\WINDOWS\system32\KERNEL32.dll!RegSetValueExA                            00007ffd5e3b1f20 7 bytes JMP 00007ffe5d240308
.text  C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe[1480] C:\WINDOWS\system32\KERNEL32.dll!RegSetValueExW                            00007ffd5e3b40b4 7 bytes JMP 00007ffe5d240340
.text  C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe[1480] C:\WINDOWS\system32\KERNEL32.dll!RegDeleteValueW                            00007ffd5e3b4510 7 bytes JMP 00007ffe5d2402d0
.text  C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe[1480] C:\WINDOWS\system32\KERNEL32.dll!K32EnumProcessModulesEx                    00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2401f0
.text  C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe[1480] C:\WINDOWS\system32\KERNEL32.dll!K32GetMappedFileNameW                      00007ffd5e3dcf10 7 bytes JMP 00007ffe5d240228
.text  C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe[1480] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW                        00007ffd5d252300 7 bytes JMP 00007ffe5d2400d8
.text  C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe[1480] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary                              00007ffd5d255770 5 bytes JMP 00007ffe5d240180
.text  C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe[1480] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW                          00007ffd5d255860 5 bytes JMP 00007ffe5d240148
.text  C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe[1480] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW                      00007ffd5d255a30 5 bytes JMP 00007ffe5d240110
.text  C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe[1480] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW                    00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2401b8
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe[3064] C:\WINDOWS\system32\psapi.dll!GetModuleBaseNameA + 506  00007ffd5e4b169a 4 bytes [4B, 5E, FD, 7F]
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe[3064] C:\WINDOWS\system32\psapi.dll!GetModuleBaseNameA + 514  00007ffd5e4b16a2 4 bytes [4B, 5E, FD, 7F]
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe[3064] C:\WINDOWS\system32\psapi.dll!QueryWorkingSet + 118      00007ffd5e4b181a 4 bytes [4B, 5E, FD, 7F]
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe[3064] C:\WINDOWS\system32\psapi.dll!QueryWorkingSet + 142      00007ffd5e4b1832 4 bytes [4B, 5E, FD, 7F]
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\KERNEL32.dll!K32GetModuleInformation    00007ffd5e3028c0 7 bytes JMP 00007ffe5d240260
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\KERNEL32.dll!RegQueryValueExW          00007ffd5e3043d8 7 bytes JMP 00007ffe5d240298
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\KERNEL32.dll!RegSetValueExA            00007ffd5e3b1f20 7 bytes JMP 00007ffe5d240308
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\KERNEL32.dll!RegSetValueExW            00007ffd5e3b40b4 7 bytes JMP 00007ffe5d240340
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\KERNEL32.dll!RegDeleteValueW            00007ffd5e3b4510 7 bytes JMP 00007ffe5d2402d0
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\KERNEL32.dll!K32EnumProcessModulesEx    00007ffd5e3dcea0 7 bytes JMP 00007ffe5d2401f0
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\KERNEL32.dll!K32GetMappedFileNameW      00007ffd5e3dcf10 7 bytes JMP 00007ffe5d240228
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleW        00007ffd5d252300 7 bytes JMP 00007ffe5d2400d8
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\KERNELBASE.dll!FreeLibrary              00007ffd5d255770 5 bytes JMP 00007ffe5d240180
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\KERNELBASE.dll!LoadLibraryExW          00007ffd5d255860 5 bytes JMP 00007ffe5d240148
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleHandleExW      00007ffd5d255a30 5 bytes JMP 00007ffe5d240110
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\KERNELBASE.dll!GetModuleFileNameExW    00007ffd5d2ca3f0 5 bytes JMP 00007ffe5d2401b8
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\SYSTEM32\combase.dll!CoSetProxyBlanket          00007ffd5d739318 7 bytes JMP 00007ffe5d240538
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\SYSTEM32\combase.dll!CoCreateInstance            00007ffd5d73cbe0 7 bytes JMP 00007ffe5d240500
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\USER32.dll!CreateWindowExW              00007ffd5e08b6f4 10 bytes JMP 00007ffe5d240420
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesW          00007ffd5e0945d8 5 bytes JMP 00007ffe5d2403e8
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\USER32.dll!DisplayConfigGetDeviceInfo  00007ffd5e094750 9 bytes JMP 00007ffe5d240378
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\USER32.dll!EnumDisplayDevicesA          00007ffd5e0a4fc0 5 bytes JMP 00007ffe5d2403b0
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\USER32.dll!ChangeDisplaySettingsExW    00007ffd5e0a5cb0 5 bytes JMP 00007ffe5d240458
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList      00007ffd5dc91500 1 byte JMP 00007ffe5d240490
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\GDI32.dll!D3DKMTGetDisplayModeList + 2  00007ffd5dc91502 6 bytes {JMP 0xffffffffff5aef90}
.text  C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe[5416] C:\WINDOWS\system32\GDI32.dll!D3DKMTQueryAdapterInfo        00007ffd5dc91750 8 bytes JMP 00007ffe5d2404c8
.text  C:\Program Files\Windows Media Player\wmpnetwk.exe[5888] C:\WINDOWS\SYSTEM32\WSOCK32.dll!setsockopt + 194                                              00007ffd4a3a1f6a 4 bytes [3A, 4A, FD, 7F]
.text  C:\Program Files\Windows Media Player\wmpnetwk.exe[5888] C:\WINDOWS\SYSTEM32\WSOCK32.dll!setsockopt + 218                                              00007ffd4a3a1f82 4 bytes [3A, 4A, FD, 7F]

95Marcel95 11.07.2014 12:22
Addition.txt

Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-07-2014
Ran by Administrator at 2014-07-11 13:21:21
Running from C:\Users\Administrator\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Norton Internet Security (Enabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
AS: Norton Internet Security (Enabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466}
FW: Norton Internet Security (Enabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}

==================== Installed Programs ======================

µTorrent (HKLM-x32\...\uTorrent) (Version: 3.1.0 - )
1.0 (HKLM-x32\...\Pagealicious_is1) (Version: 1.0.0.0 - ) <==== ATTENTION
337 GAMES (HKCU\...\337Games) (Version: 1.1.1.0 - )
3DMark 11 (HKLM-x32\...\{46EDCFA5-7EDB-46A9-B093-1C6237470CEC}) (Version: 1.0.5 - Futuremark Corporation)
7 Days to Die (HKLM-x32\...\Steam App 251570) (Version:  - The Fun Pimps)
888casino (HKLM-x32\...\888casino) (Version:  - )
99 Slot Machine (HKLM-x32\...\{902f54fb-b3bf-457e-bce7-b92345b3dc23}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Acronis Drive Monitor (HKLM-x32\...\{706AE61D-40A4-4F50-8359-FE8F6F7FA461}) (Version: 1.0.566 - Acronis)
Ad-Aware Antivirus (HKLM\...\{7994B53E-9CAF-414E-904C-63AA00D64B52}_AdAwareUpdater) (Version: 11.1.5152.0 - Lavasoft)
AdAwareInstaller (Version: 11.1.5152.0 - Lavasoft) Hidden
AdAwareUpdater (Version: 11.1.5152.0 - Lavasoft) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 14.0.0.110 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 14.0.0.110 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.05) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.05 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.9.149 - Adobe Systems, Inc.)
AIDA64 Extreme v4.20 (HKLM-x32\...\AIDA64 Extreme_is1) (Version: 4.20 - FinalWire Ltd.)
AkkuLine Batterie-Tool (HKLM-x32\...\{5FF02438-DDE5-4D8E-8291-577CC1A2C014}) (Version: 1.0.0 - AkkuLine.de)
AllDup 3.4.24 (HKLM-x32\...\AllDup_is1) (Version: 3.4.24 - Michael Thummerer Software Design)
AntimalwareEngine (Version: 2.6.0.0 - Lavasoft) Hidden
Apple Application Support (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Applon (HKLM-x32\...\Applon) (Version:  - Applon)
Arma 3 (HKLM-x32\...\Steam App 107410) (Version:  - Bohemia Interactive)
Ashampoo WinOptimizer 10 v.10.3.0 (HKLM-x32\...\{4209F371-88D4-AB00-ED2B-D6520C84D9D5}_is1) (Version: 10.03.00 - Ashampoo GmbH & Co. KG)
AuthenTec TrueAPI 64-bit (Version: 1.6.0.87 - AuthenTec, Inc.) Hidden
AutoHotkey 1.1.14.03 (HKLM\...\AutoHotkey) (Version: 1.1.14.03 - Lexikos)
Azureus (HKLM-x32\...\Azureus) (Version: 2.5.0.4 - )
BatteryBar (remove only) (HKLM\...\BatteryBar) (Version:  - )
BatteryCare 0.9.16.0 (HKLM-x32\...\{C6A6036D-FBD0-4324-BEAA-C0845257160C}_is1) (Version: 0.9.16.0 - Filipe Lourenço)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.0 - EA Digital Illusions CE AB)
Begado (HKLM-x32\...\{82149c0c-52f4-42eb-9683-55ae065bad30}) (Version: 13.1.0-NuWorks - Nuworks Gaming)
BinMake Uninstall (HKLM-x32\...\BinMake) (Version:  - )
BinPBO Personal Edition Uninstall (HKLM-x32\...\BinPBO Personal Edition) (Version:  - )
Blackjack Ballroom Casino (HKLM-x32\...\bjballroom) (Version: 16.9.2.739 - )
BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.7.16.910 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM-x32\...\{FB93553A-CBA7-44FE-BD70-A996C859DD06}) (Version: 0.7.16.910 - BlueStack Systems, Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Burnout Paradise: The Ultimate Box (HKLM-x32\...\Steam App 24740) (Version:  - Criterion Games)
bwin Download Casino (HKLM-x32\...\bwincomCasino) (Version:  - bwincom)
bwin Poker (HKLM-x32\...\bwincomPoker) (Version:  - bwincom)
Call of Duty: Black Ops II (HKLM-x32\...\Steam App 202970) (Version:  - Treyarch)
Call of Duty: Ghosts (HKLM-x32\...\Steam App 209160) (Version:  - Infinity Ward)
Camtasia Studio 8 (HKLM-x32\...\{8F6F7194-0734-4CDA-8C04-6B766F2241A6}) (Version: 8.0.4.1060 - TechSmith Corporation)
Captain Cooks Casino (HKLM-x32\...\captaincooks) (Version: 16.10.1.1475 - )
Casino Action (HKLM-x32\...\casinoaction) (Version: 16.9.2.739 - )
Casino Bellevue French (HKLM-x32\...\{917703e6-dc9f-42df-850d-3c41a383ef5d}) (Version: 13.1.0-RTG - RealTimeGaming Software)
CasinoClub (HKLM-x32\...\CasinoClub ) (Version:  - GtechG2)
CasinoRedKings (HKLM-x32\...\CasinoRedKings) (Version:  - )
CCleaner (HKLM\...\CCleaner) (Version: 4.07 - Piriform)
Cheat Engine 6.3 (HKLM-x32\...\Cheat Engine 6.3_is1) (Version:  - Cheat Engine)
Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version:  - Cheat Engine)
Cirrus Casino (HKLM-x32\...\{8b250990-e347-403b-834e-6073f512efe7}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Classic Shell (HKLM\...\{FEA1590B-540A-41FC-A95C-664493C82A21}) (Version: 3.6.8 - IvoSoft)
Cleaning Suite v2.1 (HKLM-x32\...\Cleaning Suite_is1) (Version:  - ASCOMP Software GmbH)
Cocoa Casino (HKLM-x32\...\CocoaCasino) (Version: 1.0 - Rival)
Connected Music powered by Universal Music Group version 1.0 (HKLM-x32\...\{46037DC7-F927-46DF-935F-D6F122BDD34B}_is1) (Version: 1.0 - Snowite)
Connectify (HKLM\...\Connectify) (Version: 7.2.1.29658 - Connectify)
ConvertHelper 2.2 (HKLM-x32\...\{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1) (Version:  - DownloadHelper)
Core Temp 1.0 RC5 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.0 - Alcpu)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version:  - Valve)
Craften Terminal Beta 3.4.5005.37007 (HKLM-x32\...\{4e7c3936-7c06-4ef0-928b-c5d92f372578}_is1) (Version: 3.4.5005.37007 - Craften.de)
Crysis 2 Maximum Edition (HKLM-x32\...\Steam App 108800) (Version:  - Crytek Studios)
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.4.6515 - CyberLink Corp.)
CyberLink LabelPrint (x32 Version: 2.5.4.6515 - CyberLink Corp.) Hidden
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.5.3606 - CyberLink Corp.)
CyberLink Media Suite 10 (x32 Version: 10.0.5.3606 - CyberLink Corp.) Hidden
CyberLink PhotoDirector (HKLM-x32\...\InstallShield_{4862344A-A39C-4897-ACD4-A1BED5163C5A}) (Version: 2.0.2.3317 - CyberLink Corp.)
CyberLink PhotoDirector (x32 Version: 2.0.2.3317 - CyberLink Corp.) Hidden
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.3.2527 - CyberLink Corp.)
CyberLink Power2Go 8 (x32 Version: 8.0.3.2527 - CyberLink Corp.) Hidden
CyberLink PowerDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.8.5511 - CyberLink Corp.)
CyberLink PowerDVD (x32 Version: 10.0.8.5511 - CyberLink Corp.) Hidden
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.5.6.6119 - CyberLink Corp.)
CyberLink YouCam (x32 Version: 3.5.6.6119 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)
Dead Space (HKLM-x32\...\Steam App 17470) (Version:  - EA Redwood Shores)
Definition Update for Microsoft Office 2010 (KB982726) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{043645C8-48EC-458F-B9BD-9C8F15CEF6F7}) (Version:  - Microsoft)
Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D1C35197-B856-45E2-BA67-5ABB6B0CA9C2}) (Version:  - Microsoft)
Defraggler (HKLM\...\Defraggler) (Version: 2.16 - Piriform)
Desktop Media 1.7 (HKLM-x32\...\Desktop Media_is1) (Version:  - Ian Perez)
Deutschland Digital 1.0.0 (HKLM-x32\...\Deutschland Digital_is1) (Version: 1.0.0 - Ashampoo GmbH & Co. KG)
devolo dLAN Cockpit (HKLM-x32\...\dlancockpit) (Version: 3.2.0.0 - devolo AG)
Die Sims™ 3 Late Night (HKLM-x32\...\{45057FCE-5784-48BE-8176-D9D00AF56C3C}) (Version: 6.5.1 - Electronic Arts)
Die Sims™ 3 Luxus-Accessoires (HKLM-x32\...\{71828142-5A24-4BD0-97E7-976DA08CE6CF}) (Version: 3.0.38 - Electronic Arts)
Die*Sims™*3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.42.130 - Electronic Arts)
dLAN Cockpit (x32 Version: 3.2.28 - devolo AG) Hidden
Download.am (HKLM-x32\...\Download.am) (Version:  - )
Downloader (HKLM-x32\...\Downloader) (Version:  - )
Driver Manager v1.02 (HKLM-x32\...\Driver Manager_is1) (Version:  - L5 Software Group, LLC)
DriverAgent by eSupport.com (HKLM-x32\...\DriverAgent_is1) (Version:  - Copyright © 2013 eSupport.com, Inc • All Rights Reserved)
EasyBCD 2.2 (HKLM-x32\...\EasyBCD) (Version: 2.2 - NeoSmart Technologies)
eBesucher Restarter 1.2 (HKLM-x32\...\{3F099090-131B-4D94-97CF-6FD738F51C01}_is1) (Version: 1.2.04.0 - eBesucher)
eBoostr 4 (HKLM\...\eBoostr 1) (Version: 4.5 - eBoostr)
Emergency 2014 (HKLM-x32\...\Steam App 260930) (Version:  - Promotion Software)
Energy Star (HKLM-x32\...\{FC0ADA4D-8FA5-4452-8AFF-F0A0BAC97EF7}) (Version: 1.0.9 - Hewlett-Packard Company)
ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
EuroCityCasino (HKLM-x32\...\EuroCityCasino) (Version: 1.2 - Cassava Enterprises (Gibraltar) Limited)
EuroCityCasino (x32 Version: 1.2 - Cassava Enterprises (Gibraltar) Limited) Hidden
EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
Fake Webcam 7.3 (HKLM-x32\...\fakewebcam7.3.0_is1) (Version: 7.3.0 - Web Solution Mart)
Fake Webcam Codecs Pack 1.0.0 (HKLM\...\fwccpsetup_is1) (Version: 1.0.0 - Web Solution Mart)
Far Cry 3 (HKLM-x32\...\{E3B9C5A9-BD7A-4B56-B754-FAEA7DD6FA88}) (Version: 1.05 - Ubisoft)
Far Cry 3 Digital Deluxe Edition DLC (HKLM-x32\...\Digital Deluxe Edition DLC_is1) (Version: 1.0 - Ubisoft)
FileViewPro (HKLM\...\FileViewPro_is1) (Version: 4.0 - Solvusoft Corporation)
FileZilla Client 3.2.7.1 (HKLM-x32\...\FileZilla Client) (Version: 3.2.7.1 - )
Fire Department 3 (HKLM-x32\...\Fire Department 3_is1) (Version:  - Metaboli)
Folderico 4.0 RC12 (HKLM-x32\...\Folderico) (Version: 4.0 RC12 - Shedko ( www.softq.org ))
FormatFactory 3.1.1 (HKLM-x32\...\FormatFactory) (Version: 3.1.1 - Free Time)
Fotogalerie (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Free Mouse Auto Clicker 3.1 (HKLM-x32\...\{7D9D583E-EC8B-4390-B3A4-017B8182C8FF}_is1) (Version:  - Advanced Mouse Auto Clicker ltd.)
Free YouTube to MP3 Converter version 3.12.16.1030 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.16.1030 - DVDVideoSoft Ltd.)
FreePortScanner 2.8.4 (HKLM-x32\...\FreePortScanner_is1) (Version:  - Nsasoft LLC.)
FreshDiagnose (HKLM-x32\...\FreshDevices - FreshDiagnose_is1) (Version:  - )
FreshDownload (HKLM-x32\...\FreshDevices - FreshDownload_is1) (Version:  - )
FSM Editor Personal Edition Uninstall (HKLM-x32\...\FSM Editor Personal Edition) (Version:  - )
Futuremark SystemInfo (HKLM-x32\...\{BEE64C14-BEF1-4610-8A68-A16EAA47B882}) (Version: 4.17.0 - Futuremark Corporation)
Gaming Club (HKLM-x32\...\gamingclub) (Version: 16.9.2.739 - )
Genie Timeline (HKLM-x32\...\Genie Timeline) (Version: 4.0 - Genie9)
Genymotion version 2.2.2 (HKLM\...\{6D180286-D4DF-40EF-9227-923B9C07C08A}_is1) (Version: 2.2.2 - Genymobile)
Golden Tiger Casino (HKLM-x32\...\goldentiger) (Version: 16.9.2.739 - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
Grand Theft Auto IV (HKLM-x32\...\{579BA58C-F33D-4970-9953-B94B43768AC3}) (Version: 1.00.0000 - Rockstar Games)
Grand Theft Auto IV (x32 Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden
Grepo (HKLM-x32\...\Grepo) (Version:  - Grepo)
GrFinger Desktop Identity 1.1 (HKLM-x32\...\{37d8695b-ab6c-40a9-97a2-f7a4813f53ad}_is1) (Version: 1.1 - Griaule Biometrics.)
GrFinger Desktop Login 1.1.0 (HKLM-x32\...\{11E1DD13-311D-474C-92C8-2E531A996B0D}_is1) (Version: 1.1.0 - Griaule Biometrics.)
Hewlett-Packard ACLM.NET v1.2.1.1 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
Hex-Editor MX (HKLM-x32\...\{7FC7AD70-1DF3-4B84-9AA2-4FB680F45572}_is1) (Version: 6.0 - NEXT-Soft)
HitFilm 2 Express (HKLM\...\{A6E81EFB-2A19-4B5B-8C48-D4E5DB3AD547}) (Version: 2.0.2522.46168 - FXhome)
Hitman 2: Silent Assassin (HKLM-x32\...\Steam App 6850) (Version:  - IO Interactive)
HomeTab 3.7 (HKLM-x32\...\{3a4935b3-b7a0-4065-8ccc-0030471b33f1}_is1) (Version: 3.7 - HomeTab) <==== ATTENTION
HP 3D DriveGuard (HKLM\...\{AB5BCC55-18E2-46C7-9405-FF61CB888F05}) (Version: 4.2.9.1 - Hewlett-Packard Company)
HP Connected Music (Meridian - installer) (HKLM-x32\...\StartHPConnectedMusic) (Version: v1.0 - Meridian Audio Ltd)
HP Connected Remote (HKLM-x32\...\{F243A34B-AB7F-4065-B770-B85B767C247C}) (Version: 1.7.271 - Hewlett-Packard)
HP CoolSense (HKLM-x32\...\{59F8C5AA-91BD-423D-BF05-09A80F39898F}) (Version: 2.10.62 - Hewlett-Packard Company)
HP Customer Experience Enhancements (x32 Version: 6.0.1.7 - Hewlett-Packard) Hidden
HP Deskjet 2050 J510 series - Grundlegende Software für das Gerät (HKLM\...\{DF37555F-0259-43DA-B60C-47106FA14AA3}) (Version: 28.0.1313.0 - Hewlett-Packard Co.)
HP Deskjet 2050 J510 series Hilfe (HKLM-x32\...\{7A3DF2E2-CF13-44FB-A93E-F71D5381DB3F}) (Version: 140.0.61.61 - Hewlett Packard)
HP Documentation (HKLM-x32\...\{53D3E126-699A-4D92-AA66-6560D573553E}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Postscript Converter (Version: 3.1.3591 - Hewlett-Packard) Hidden
HP Quick Launch (HKLM-x32\...\{E5823036-6F09-4D0A-B05C-E2BAA129288A}) (Version: 3.0.6 - Hewlett-Packard Company)
HP Recovery Manager (x32 Version: 8.00 - Hewlett-Packard) Hidden
HP Registration Service (HKLM\...\{C2E428EB-116E-41C0-9E84-B22DE9CCA42F}) (Version: 1.1.6232.4245 - Hewlett-Packard)
HP SimplePass (HKLM-x32\...\{4BACA3B8-F63A-44ED-9A8D-48B4D02AD268}) (Version: 6.0.100.276 - Hewlett-Packard)
HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
HP Utility Center (HKLM\...\{2AFEFC93-F0C7-4390-BB51-F914EC546B30}) (Version: 2.1.6 - Hewlett-Packard Company)
HP Wireless Button Driver (HKLM-x32\...\{30B2D1D8-0A07-4B71-9553-0710C5D31E35}) (Version: 1.1.2.1 - Hewlett-Packard Company)
iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.)
iDevice Manager (HKLM-x32\...\FE5AE7DC-7B01-4263-A94C-B4526C276550_is1) (Version: 3.2.3.0 - Marx Software)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6482.0 - IDT)
iFunbox (v2.7.2386.747), iFunbox DevTeam (HKLM-x32\...\iFunbox_is1) (Version: v2.7.2386.747 - )
Infestation Survivor Stories version 1.0 (HKLM-x32\...\{BC3051A7-1021-4B57-A3DA-AAC24566FAE7}_is1) (Version: 1.0 - OP Productions LLC)
Intel Extreme Tuning Utility (HKLM-x32\...\{1bcf77e1-2519-41dc-a594-9936f5f42203}) (Version: 4.2.0.8 - Intel Corporation)
Intel Extreme Tuning Utility (x32 Version: 4.2.0.8 - Intel Corporation) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation)
Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.36943 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.3.1520 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3379 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.9.1002 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.27.798.1 - Intel Corporation) Hidden
Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\{3FD0C489-0F02-481a-A3E1-9754CD396761}) (Version:  - Intel Corporation)
iPhone Backup Extractor (HKCU\...\iPhone Backup Extractor) (Version: 4.9.23.0 - Reincubate Ltd)
iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.)
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
KMSpico 3.1 (HKLM\...\KMSpico v3.1_is1) (Version: 3.1 - )
La Riviera Casino English (HKLM-x32\...\{db038d9f-a724-4409-84be-685fce5c604f}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Lagarith lossless video codec (Remove Only) (HKLM\...\LAGARITH) (Version:  - )
Lansweeper (HKLM-x32\...\Lansweeper_is1) (Version: 5.1 - Lansweeper.com)
LastPass(uninstall only) (HKLM-x32\...\LastPass) (Version:  - LastPass)
Logitech Gaming Software (Version: 8.45.88 - Logitech Inc.) Hidden
Lucky Emperor Casino (HKLM-x32\...\luckyemperor) (Version: 16.9.2.739 - )
Medal of Honor(TM) Multiplayer (HKLM-x32\...\Steam App 47830) (Version:  - Electronic Arts)
Medal of Honor(TM) Single Player (HKLM-x32\...\Steam App 47790) (Version:  - Electronic Arts)
Mediatek Bluetooth (HKLM\...\{66D292E3-6228-3AF1-EDED-6D53C63DBCB7}) (Version: 11.0.748.2 - Mediatek)
Microsoft Access MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft DCF MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Excel MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Groove MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Lync MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office 32-bit Components 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Office 32-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft OneNote MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Publisher MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{90ffcee5-8608-4e94-8c18-a4feb4f83fb8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Windows 8 ESU (HKLM-x32\...\{E7E058CF-4638-49D4-936D-AC6DAE3B002E}) (Version: 1.1.1 - Hewlett-Packard)
Microsoft Word MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Mighty Slots (HKLM-x32\...\{565493c1-3580-4f39-ba73-f4c375f5e9bd}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Migration System Updater RBP (HKLM-x32\...\Migration System Updater RBP) (Version: 1.2.0.0 - )
MiPony 2.1.0 (HKLM-x32\...\MiPony) (Version: 2.1.0 - )
Mirror's Edge (HKLM-x32\...\Steam App 17410) (Version:  - DICE)
Movie Maker (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Mozilla Firefox 26.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 26.0 (x86 de)) (Version: 26.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 26.0 - Mozilla)
MPC-HC 1.7.0 (HKLM-x32\...\{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1) (Version: 1.7.0.7858 - MPC-HC Team)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1108.0727 - Microsoft) Hidden
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
Mummys Gold Casino (HKLM-x32\...\mummysgold) (Version: 16.6.1.11212 - )
NetMeter 1.1.4 BETA (HKLM-x32\...\NetMeter_is1) (Version:  - ReadError)
NetSpeedMeter (HKLM-x32\...\NetSpeedMeter) (Version: 0.9 - )
NetWorx 5.2.11 (HKLM\...\NetWorx_is1) (Version:  - Softperfect Research)
Norton Internet Security (HKLM-x32\...\NIS) (Version: 21.3.0.12 - Symantec Corporation)
Notebook Hardware Control 2.0 Pre-Release-06 Bugfix (HKLM-x32\...\Notebook Hardware Control) (Version: 2.0 Pre-Release-06 Bugfix - Manfred Jaider)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.5 - Notepad++ Team)
NTREGOPT 1.1j (HKLM-x32\...\NTREGOPT_is1) (Version:  - Lars Hederer)
NVIDIA GeForce Experience 2.0.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.0.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 340.43 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.43 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.157.1165 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Optimus Update 12.4.67 (Version: 12.4.67 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA ShadowPlay 12.4.67 (Version: 12.4.67 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 340.43 (Version: 340.43 - NVIDIA Corporation) Hidden
NVIDIA Update 12.4.67 (Version: 12.4.67 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 12.4.67 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.23 (Version: 1.2.23 - NVIDIA Corporation) Hidden
OpenVPN 2.2.2 (HKLM-x32\...\OpenVPN) (Version: 2.2.2 - )
Opera Stable 20.0.1387.91 (HKLM-x32\...\Opera 20.0.1387.91) (Version: 20.0.1387.91 - Opera Software ASA)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Overwolf (HKLM-x32\...\{0A337036-B73E-4C85-8D32-3851F84B7CFE}) (Version: 0.46.271 - Overwolf)
Oxygen 2 Personal Edition Uninstall (HKLM-x32\...\Oxygen 2 Personal Edition) (Version:  - )
Pagealicious (HKLM-x32\...\Pagealicious) (Version:  - Pagealicious) <==== ATTENTION
Paint.NET v3.5.11 (HKLM\...\{72EF03F5-0507-4861-9A44-D99FD4C41418}) (Version: 3.61.0 - dotPDN LLC)
Palace Of Chance (HKLM-x32\...\{f51a5449-9174-4e90-a0b2-bd67e0a9a87e}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Paros 3.2.13 (HKLM-x32\...\Paros_is1) (Version:  - parosproxy.org)
PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version:  - OVERKILL - a Starbreeze Studio.)
PBO Manager v.1.4 beta (HKLM\...\{127B5371-1802-4EDD-A25A-A43BF761D383}) (Version: 1.4.0 -  )
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
PDF24 Creator 6.1.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
PhotoME Beta-Release (HKLM-x32\...\PhotoME Beta-Release_is1) (Version: 0.8ß2 - Jens Duttke)
Platinum Play Online (HKLM-x32\...\platinumplay) (Version: 16.9.2.739 - )
Plenty Jackpot (HKLM-x32\...\{f748bdcf-1691-49d4-b5a6-20abf8d9d2b9}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Plus500 (HKLM-x32\...\Plus500) (Version:  - )
PokerStars.eu (HKLM-x32\...\PokerStars.eu) (Version:  - PokerStars.eu)
PremiumSoft Navicat Data Modeler 1.0 (HKLM-x32\...\PremiumSoft Navicat Data Modeler_is1) (Version: 1.0.12 - PremiumSoft CyberTech Ltd.)
Process Lasso (HKLM-x32\...\ProcessLasso) (Version: 6.7.0.52 - Bitsum)
Project 64 version 2.1.0.1 (HKLM-x32\...\Project 64_is1) (Version: 2.1.0.1 - )
Protector Suite 2012 (HKLM\...\{C767056D-3CE2-442D-BC78-F05E94F450D0}) (Version: 5.9.8.7279 - Authentec Inc.)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Quatro Casino (HKLM-x32\...\quatro) (Version: 16.9.2.739 - )
Quick Memory Editor 5.5 (HKLM-x32\...\Quick Memory Editor_is1) (Version:  - softcows.com)
QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
Ralink RT3290 802.11bgn Wi-Fi Adapter (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 5.0.37.0 - Mediatek)
Real Vegas Online USD German (HKLM-x32\...\{fc52c158-f28f-477d-a59d-0ace8b0e212c}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.2.612.2012 - Realtek)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.2.8400.29034 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.49 - Piriform)
Registry System Wizard.NET (HKLM\...\{110ED870-1DF3-4574-A679-E2C4A8163211}_is1) (Version: 0.13.731.51 - WinFAQ)
RegRunner 3.2.2009.5 (HKLM-x32\...\RegRunner2009_is1) (Version:  - Bernd Dietzel)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Revo Uninstaller Pro 3.0.8 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.0.8 - VS Revo Group, Ltd.)
RoboForm 7-9-3-9 (All Users) (HKLM-x32\...\AI RoboForm) (Version: 7-9-3-9 - Siber Systems)
ROCCAT Kone Pure Mouse Driver (HKLM-x32\...\{4905245D-56E7-4176-BE68-962728B803D6}) (Version:  - Roccat GmbH)
ROCCAT Talk Driver (HKLM-x32\...\{0B2044E4-B4A7-4413-ABB1-99E04C7DF405}) (Version:  - Roccat GmbH)
Roulette Bot Plus (HKLM-x32\...\RBPlus) (Version: 1.3.8.4 - www.roulettebotplus.com)
RoulettePilot (HKLM-x32\...\{54AA4107-5A3C-4E97-893E-735D5127BB73}) (Version: 1.3.94 - JemeSoft)
Royal Vegas (HKLM-x32\...\royalvegas) (Version: 16.9.2.739 - )
RubySlots (HKLM-x32\...\{137b5d7d-6afe-4b69-be23-b2e949c20065}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Rust (HKLM-x32\...\Steam App 252490) (Version:  - Facepunch Studios)
Saints Row: The Third (HKLM-x32\...\Steam App 55230) (Version:  - Volition)
Secunia PSI (3.0.0.9016) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia)
Security Task Manager 1.8d (HKLM-x32\...\Security Task Manager) (Version: 1.8d - Neuber Software)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version:  - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (Version:  - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version:  - Microsoft) Hidden
SHIELD Streaming (Version: 2.1.108 - NVIDIA Corporation) Hidden
SiSoftware Sandra Lite 2014.RTM (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2396}_is1) (Version: 20.10.2014.2 - SiSoftware)
Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Slot Nuts (HKLM-x32\...\{4f250443-a5ef-43a3-984b-972bc15c69d9}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Slotocash Casino (HKLM-x32\...\{7d1d90b3-acd3-49de-9bce-079aef80ef9b}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Slots Inferno (HKLM-x32\...\{ef159e9a-ca8c-4e71-bf97-d1f4eec75004}) (Version: 13.1.0-RTG - RealTimeGaming Software)
SoftDMA (HKLM-x32\...\{AA4BF92B-2AAF-11DA-9D78-000129760D75}) (Version: 2.0.6729 - CyberLink Corp.)
Soluto (HKLM\...\{223FA2A7-10F3-4F74-900C-154C98F81687}) (Version: 1.3.1414.1 - Soluto)
Sophos Virus Removal Tool (HKLM-x32\...\{B829E117-D072-41EA-9606-9826A38D34C1}) (Version: 2.4 - Sophos Limited)
Sound Tools Uninstall (HKLM-x32\...\Sound Tools) (Version:  - )
SpeedBit Video Accelerator (HKLM-x32\...\SpeedBit Video Accelerator) (Version: 3380(build_3064) - SpeedBit Ltd.)
Spin Palace Casino (HKLM-x32\...\spinpalace) (Version: 16.8.3.393 - )
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
Steganos Privacy Suite 14 (HKLM-x32\...\{9F07D3B6-3801-4C33-B20E-39CC29E63253}) (Version: 14.2.1 - Steganos Software GmbH)
Studie zur Verbesserung von HP Deskjet 2050 J510 series Produkten (HKLM\...\{C559DE9F-9451-49E5-9176-316E36192409}) (Version: 28.0.1313.0 - Hewlett-Packard Co.)
Superior Casino (HKLM-x32\...\SuperiorCasino) (Version: 1.0 - Rival)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.15.0 - Synaptics Incorporated)
System Requirements Lab CYRI (HKLM-x32\...\{F3FCB08B-E752-444D-86A0-0634A4F3B23D}) (Version: 6.0.8.0 - Husdawg, LLC)
System Requirements Lab Detection (HKLM-x32\...\{A407FC22-36BF-4C82-A516-59D94BC505A9}) (Version: 1.0.5.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TexView 2 Uninstall (HKLM-x32\...\TexView 2) (Version:  - )
The Bridge  (HKLM-x32\...\Steam App 204240) (Version:  - Ty Taylor and Mario Castañeda)
Tiny Media Player v1.0 (HKLM-x32\...\Tiny Media Player_is1) (Version: 1.0.0.0 - ) <==== ATTENTION
Tom Clancy's Splinter Cell® Blacklist™ (HKLM-x32\...\{A6356F2F-D3E1-4D83-9AA2-72871DD0C298}) (Version: 1.03 - Ubisoft)
TrueCrypt (HKLM-x32\...\TrueCrypt) (Version: 7.1a - TrueCrypt Foundation)
Tweaking.com - Windows Repair (All in One) (HKLM-x32\...\Tweaking.com - Windows Repair (All in One)) (Version: 2.7.1 - Tweaking.com)
UDPixel.exe (HKLM-x32\...\UDPixel) (Version:  - )
UltraISO Premium V9.53 (HKLM-x32\...\UltraISO_is1) (Version:  - )
Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
Update for Microsoft Access 2010 (KB2553446) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{FEF4C57D-0975-4D3C-ACC7-DCD038C3788F}) (Version:  - Microsoft)
Update for Microsoft Excel 2010 (KB2837600) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{17815BC8-062D-49BE-B40C-B54149C85CE3}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2881085) 64-Bit Edition (HKLM\...\{90150000-0016-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{58D92858-3C94-4C2F-A8E4-AEFF9304C3CF}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2881085) 64-Bit Edition (HKLM\...\{90150000-0018-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{58D92858-3C94-4C2F-A8E4-AEFF9304C3CF}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2881085) 64-Bit Edition (HKLM\...\{90150000-001B-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{58D92858-3C94-4C2F-A8E4-AEFF9304C3CF}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2881085) 64-Bit Edition (HKLM\...\{90150000-00C1-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{58D92858-3C94-4C2F-A8E4-AEFF9304C3CF}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2881085) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{58D92858-3C94-4C2F-A8E4-AEFF9304C3CF}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{84B191B5-5319-463A-A305-8C4D53B1D20A}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{DB0B0CDF-77EC-47B0-94E2-4738573A1E58}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817396) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{1AA82E2E-7DB7-4C70-910C-BBB657A6B3A5}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2850074) 64-Bit Edition (HKLM\...\{90150000-012B-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{CE9A9D7C-B6FB-4F6C-8BDE-9A1ADBBAC1EE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553092) (HKLM\...\{90140000-0044-0407-1000-0000000FF1CE}_Office14.PROPLUSR_{E636FE63-842B-4F4B-9884-DA189ACC0B91}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553092) (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{E636FE63-842B-4F4B-9884-DA189ACC0B91}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{79C725A1-3964-421C-A528-78C1C083C7C7}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{95BE5D45-A3DD-4CB1-8C35-D75DD7B4D862}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{95BE5D45-A3DD-4CB1-8C35-D75DD7B4D862}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{EBD18DE5-BC84-4B57-9A30-097044871F9A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{4AD36582-256B-433D-8593-F31773A15CA4}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{4AD36582-256B-433D-8593-F31773A15CA4}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{F216169C-2B40-429B-8370-B5BA06EC5423}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{F216169C-2B40-429B-8370-B5BA06EC5423}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{B6AD7E27-012A-4B63-82BA-AF62893E5435}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{07DC9C6C-E916-4F42-8677-716930ED0393}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825635) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{6E760BBA-B83F-4C2D-918F-5F91EF6C9861}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 64-Bit Edition (HKLM\...\{90140000-0044-0407-1000-0000000FF1CE}_Office14.PROPLUSR_{43F59F4D-7179-497E-BE99-BC6F7D1DDCBA}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{43F59F4D-7179-497E-BE99-BC6F7D1DDCBA}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2837581) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{D1F3B526-7EB2-4701-92DB-0784988D78DE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2837606) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{52BEF8AE-9324-40A1-9A92-E5A8FB63A475}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878252) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{56551B9F-2FE1-4705-ACF0-8FA920535E18}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878252) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{56551B9F-2FE1-4705-ACF0-8FA920535E18}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 64-Bit Edition (HKLM\...\{90140000-001F-0407-1000-0000000FF1CE}_Office14.PROPLUSR_{8F699D53-05FB-488E-B7D3-E4E47257BE5D}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 64-Bit Edition (HKLM\...\{90140000-001F-0409-1000-0000000FF1CE}_Office14.PROPLUSR_{324703B5-6765-489D-9B9B-B082D34F882E}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 64-Bit Edition (HKLM\...\{90140000-001F-040C-1000-0000000FF1CE}_Office14.PROPLUSR_{4B9B2BAF-EE1F-4B60-A4D9-17B7BEEB13A1}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760344) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{EF77B4A6-DFEC-4010-A87D-9B6BF87FABEC}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760544) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{62857CDD-2985-4939-91BA-19ED0B0031A5}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2768012) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{0814662C-FD28-4DE0-ACE5-EE50D1D6C8FB}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817302) 64-Bit Edition (HKLM\...\{90150000-0016-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{E79EFFDB-192A-4D9E-A2DB-C0F774E6EC32}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817302) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{E79EFFDB-192A-4D9E-A2DB-C0F774E6EC32}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2826040) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{C4AEA56A-0759-4D08-9FAB-31A92137D0B8}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2837644) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D692E9FF-84BF-4F44-A0EA-D58ECE0D538E}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2863843) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{290D80DE-03AB-47EC-9402-108AF4CE4F66}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880457) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{EC2AF602-2730-4B05-9438-06CDE43153F2}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-006E-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880464) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{88B29AA5-71EE-4692-91E2-E89407F0B783}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880478) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{8116ED50-F1E7-49E1-9D8D-421497D34B0F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881035) 64-Bit Edition (HKLM\...\{90150000-0016-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{885C981B-F1E3-430A-A099-31CA9D28C251}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881035) 64-Bit Edition (HKLM\...\{90150000-0090-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{885C981B-F1E3-430A-A099-31CA9D28C251}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881035) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{885C981B-F1E3-430A-A099-31CA9D28C251}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881074) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{9A479F9C-C1EC-4833-A115-A8B7A60480BD}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881084) 64-Bit Edition (HKLM\...\{90150000-001F-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{00BBBFFE-8889-4953-956A-77DDE975A947}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881084) 64-Bit Edition (HKLM\...\{90150000-001F-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{3A12DFA2-3FF5-450E-BDB1-A742551A5D1A}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881084) 64-Bit Edition (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}_Office15.PROPLUSR_{EA8072E8-E3CF-46DF-A5DE-9F5975344327}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881084) 64-Bit Edition (HKLM\...\{90150000-001F-0410-1000-0000000FF1CE}_Office15.PROPLUSR_{BF0D921F-E77E-4E03-BE71-46D9D2C7A36A}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881086) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{ED3A8E98-FDD4-493F-A0EC-141821573EC2}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881086) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{ED3A8E98-FDD4-493F-A0EC-141821573EC2}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2881087) 64-Bit Edition (HKLM\...\{90150000-00BA-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{3C6F4768-FB23-4ECF-8328-5C47E0664B65}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2881087) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{3C6F4768-FB23-4ECF-8328-5C47E0664B65}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2881087) 64-Bit Edition (HKLM\...\{90150000-00C1-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{3C6F4768-FB23-4ECF-8328-5C47E0664B65}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2881087) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{3C6F4768-FB23-4ECF-8328-5C47E0664B65}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{3029C408-1DD1-4273-8E58-87CB1B638FC8}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{3029C408-1DD1-4273-8E58-87CB1B638FC8}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2881082) 64-Bit Edition (HKLM\...\{90150000-00A1-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{BFD66A5D-F608-441E-9282-41E13F5E7412}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2881082) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{BFD66A5D-F608-441E-9282-41E13F5E7412}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2881082) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{BFD66A5D-F608-441E-9282-41E13F5E7412}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 64-Bit Edition (HKLM\...\{90140000-001A-0407-1000-0000000FF1CE}_Office14.PROPLUSR_{6164E0E5-C903-488C-93AF-1B7AF7EBC331}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{DDDC32A5-9528-4771-B91A-97A8E1D7957B}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2880470) 64-Bit Edition (HKLM\...\{90150000-001A-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{34A169EC-990A-4DAE-AC65-9F981158B7DB}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2880470) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{34A169EC-990A-4DAE-AC65-9F981158B7DB}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 64-Bit Edition (HKLM\...\{90140000-0018-0407-1000-0000000FF1CE}_Office14.PROPLUSR_{FD360122-6829-4497-97C1-1BF578EF695B}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{A20A650C-F820-4CE4-AEA5-EC140192FAFB}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2881075) 64-Bit Edition (HKLM\...\{90150000-0018-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{C8955821-EDAC-4E65-BEF3-C9C0A049517A}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2881075) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{C8955821-EDAC-4E65-BEF3-C9C0A049517A}) (Version:  - Microsoft)
Update for Microsoft Publisher 2013 (KB2880999) 64-Bit Edition (HKLM\...\{90150000-0019-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{C07147B9-CC0B-4CC1-A107-A705889A54F2}) (Version:  - Microsoft)
Update for Microsoft Publisher 2013 (KB2880999) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{C07147B9-CC0B-4CC1-A107-A705889A54F2}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{77374F16-2DC6-4EEF-AFAD-C59FDA2E010D}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{77374F16-2DC6-4EEF-AFAD-C59FDA2E010D}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2880526) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{F6F342A1-530B-4D48-A468-1E3F70928984}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2837587) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{C950A55F-82E3-4CC8-8FA2-E8A2A0F651F3}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition (HKLM\...\{90150000-006E-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}) (Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2880529) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{89FDC8D9-FB84-4EFE-950D-AF4EECC3B64C}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2878319) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{BC51FE30-3A56-4802-8D9E-E9BC05B56B49}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2881005) 64-Bit Edition (HKLM\...\{90150000-001A-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{125BAFEC-EB26-45C3-B97A-475162C6BDC0}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2881005) 64-Bit Edition (HKLM\...\{90150000-001B-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{125BAFEC-EB26-45C3-B97A-475162C6BDC0}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2881005) 64-Bit Edition (HKLM\...\{90150000-012B-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{125BAFEC-EB26-45C3-B97A-475162C6BDC0}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2881005) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{125BAFEC-EB26-45C3-B97A-475162C6BDC0}) (Version:  - Microsoft)
Uplay (HKLM-x32\...\Uplay) (Version: 4.5 - Ubisoft)
URL2JPEG 1.1 (HKLM-x32\...\URL2JPEG_is1) (Version:  - )
Usenet.nl (HKLM-x32\...\Usenet.nl_is1) (Version:  - )
UxStyle Core Beta (HKLM\...\{8E363055-15E5-4D8A-9C69-A0A9DE9A3337}) (Version: 0.2.2.0 - The Within Network, LLC)
Validity WBF DDK (HKLM\...\{1F91C200-8F0F-4009-A75E-DB6CE151BD4E}) (Version: 4.4.234.0 - Validity Sensors, Inc.)
Virtual City Casino (HKLM-x32\...\virtualcity) (Version: 16.9.2.739 - )
Visitor 3 Uninstall (HKLM-x32\...\Visitor 3) (Version:  - )
VLC media player 2.1.2 (HKLM-x32\...\VLC media player) (Version: 2.1.2 - VideoLAN)
VPNAutoconnect (HKLM-x32\...\{8E557F21-99AE-440D-8058-CD8CB3302E13}) (Version: 1.15 - globalip)
Watch_Dogs (HKLM-x32\...\Uplay Install 274) (Version:  - Ubisoft)
Windows Live Communications Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3503.0728 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
WinRAR 5.00 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)
WinSCP 5.5 (HKLM-x32\...\winscp3_is1) (Version: 5.5 - Martin Prikryl)
WinZip Driver Updater (HKLM-x32\...\{9854A5C4-5BE5-46E2-A989-352DD8B37E20}_is1) (Version: 1.0.648.10744 - WinZip Computing, S.L. (WinZip Computing))
Wise Registry Cleaner 7.92 (HKLM-x32\...\Wise Registry Cleaner_is1) (Version: 7.92 - WiseCleaner.com, Inc.)
WorldPainter 1.5.0 (HKLM\...\4144-4862-0472-7103) (Version: 1.5.0 - pepsoft.org)
Your Software Deals 1.0.0 (HKLM-x32\...\Your Software Deals_is1) (Version: 1.0.0 - Ashampoo GmbH & Co. KG)
Yukon Gold (HKLM-x32\...\yukongold) (Version: 16.10.1.1475 - )

==================== Restore Points  =========================

09-07-2014 11:11:28 Windows Update

==================== Hosts content: ==========================

2014-05-25 15:54 - 2014-05-25 15:54 - 00000855 ____N C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1      localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {0FA1A03F-0DF5-49C5-892C-3504BCAED217} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\WSCStub.exe [2014-05-11] (Symantec Corporation)
Task: {12CB99FC-B5A5-4EFA-9D7A-824A5E62A21E} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
Task: {13D6BEC2-4F49-413C-A6B8-0344D2432715} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2013-11-20] (Apple Inc.)
Task: {1C9F59DA-654B-4894-BDA2-6E4EDECEAF12} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-10-22] (Piriform Ltd)
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {23AC52F5-8580-45CB-B1E0-7191BCFBA116} - System32\Tasks\Core Temp Autostart Marcel- => C:\Program Files\Core Temp\Core Temp.exe [2013-03-01] ()
Task: {23D857CA-BF22-4A04-AA4A-DA2240EE4878} - System32\Tasks\AutoKMSCustom => C:\Windows\AutoKMS\AutoKMS.exe
Task: {2640F111-D57D-42F8-8A11-60853CD1387C} - System32\Tasks\KMS Activation => C:\Program Files\KMSpico\RandomFile.exe [2013-02-20] ()
Task: {27C6C059-8CCA-4C8D-960F-9E2734268940} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {32618FFD-E0B0-4B98-9C85-AA0481A1A951} - System32\Tasks\MigrationUpdateTask => C:\Users\Marcel-\AppData\Local\MigsUpdater\mupdater.exe [2013-05-05] ()
Task: {336BAB55-2DA1-4780-AD94-2E086438F6C9} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {3E11A519-2A26-40FA-BA5F-D2E50B305A06} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {4D9D0384-E8FD-4892-87F4-19AA55AB2CAC} - System32\Tasks\Hewlett-Packard\HP CoolSense\HP CoolSense Start at Logon => C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [2013-06-07] (Hewlett-Packard Development Company, L.P.)
Task: {506831CD-00D1-4F67-845E-84E44C1B9507} - System32\Tasks\CLMLSvc_P2G8 => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2012-06-08] (CyberLink)
Task: {50C3F803-BD50-4C53-A15F-090E62B8A9AA} - System32\Tasks\HPCustParticipation HP Deskjet 2050 J510 series => C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\HPCustPartic.exe [2012-10-02] (Hewlett-Packard Co.)
Task: {55092CAC-D12E-4296-AAA0-1685B33362E5} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
Task: {553F743B-82E6-4BA0-BAF9-B5BFD58949FB} - \FreeDriverScout No Task File <==== ATTENTION
Task: {58989ABF-57C3-407B-8C81-1BCA9416732E} - \Browser Updater\Browser Updater No Task File <==== ATTENTION
Task: {5D33FF06-1668-492B-9171-2630C1FB1D35} - System32\Tasks\WinZipDriverUpdaterRunAtStartup => C:\Program Files (x86)\WinZip Driver Updater\winzipdu.exe [2011-06-03] (WinZip Computing, S.L. (WinZip Computing))
Task: {62DB234A-C438-4711-9F08-D65079BAAD5E} - \Lyrics Seeker Update No Task File <==== ATTENTION
Task: {64470945-96F4-4918-B67A-39204842F0A3} - System32\Tasks\CLVDLauncher => C:\Program Files (x86)\CyberLink\Power2Go8\CLVDLauncher.exe [2012-07-24] (CyberLink Corp.)
Task: {69455FB1-79D7-4B3C-B9B8-CE09B65512EA} - System32\Tasks\Run RoboForm TaskBar Icon => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2014-02-05] (Siber Systems)
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6C22B245-996E-4330-9B02-9294EC214DC6} - System32\Tasks\Process Lasso Management Console (GUI) => C:\Program Files\Process Lasso\processlasso.exe [2014-03-22] (Bitsum LLC)
Task: {6C4FF4F7-7C6C-4D22-BE63-591EC71E8A9C} - System32\Tasks\Open URL by RoboForm => Rundll32.exe url.dll,FileProtocolHandler "hxxp://www.roboform.com/test-pass.html?aaa=KICMLMLMHMOJPMLMKJGMCNNMKMNMKJCNLMOJLJOJCNGMPMLJGMCNLJPMLMOJHMNJGMJMMMJJLMHMJNJICMIMCNGMCNMMFMOMOMCNPMCNGMJMPMPMFMJMCNMMCNGMJMPMPMCNNMJNPICMLMFMHJOJCJCJGJFMPMJNHICMHJOJCJCJGJJNBJCMCLOJNIMJKJDJCNJNKJCMJNNICMJNDJCMLJKJJNMJCMPMFMOMFMPMJNFICMGJLJKJBJLIGJLIGJKJMIBNKJHIKJ"
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {741886BD-A31B-4091-AF14-70C0DD619152} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {7503F03F-6AC7-4A5D-8E43-8EFB1FE33FF9} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-07-09] (Microsoft Corporation)
Task: {75AB702E-FF88-4FF3-BDBD-89E0DA4B89CD} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {7F99F21B-9CA0-44DA-A60F-0A42F66D3E2E} - System32\Tasks\One-Click Optimizer => C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\WO10.exe [2013-11-19] (Ashampoo Development GmbH & Co. KG)
Task: {80B08F8E-9E69-4435-9AB2-D00F3081010B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {884D20A1-5739-4D17-82C0-B9407FB84AC2} - \Omiga Plus RunAsStdUser No Task File <==== ATTENTION
Task: {89AF243C-674B-49E5-8FEB-7A1547E0ACB9} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2013-03-07] (Intel Corporation)
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {912AB2C4-9240-4E65-892E-3AE1E1D60256} - \YourFile DownloaderUpdate No Task File <==== ATTENTION
Task: {9879667E-2B99-4069-8709-DA19907B3463} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2014-03-21] (Hewlett-Packard)
Task: {9978D875-53BE-4C87-A596-8CDE007A76A4} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-11] (Adobe Systems Incorporated)
Task: {9A9B703E-AD6C-4335-91D0-660F961398FB} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {9B907E53-51D1-4E4F-809D-D2094FC5D372} - \Software Updater No Task File <==== ATTENTION
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {A2774BCD-5537-46DA-98BB-BF76F2A18DE5} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {A346AA6B-B7C6-4E1D-B7E3-02F66B64E5D2} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe <==== ATTENTION
Task: {A447104A-8E57-4418-9C8B-3853E8C89E0E} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
Task: {A5153CAB-0552-427D-A033-D4FB35AD5BEF} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {A5FFB92D-D594-4D26-B41D-C65468A63103} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv
Task: {A667E848-CDDC-45C1-91E7-3EE8ABE28ABD} - System32\Tasks\Razer_Game_Booster_AutoUpdate => C:\Program Files (x86)\Razer\Razer Game Booster\AutoUpdate.exe <==== ATTENTION
Task: {AB99FD7F-9DA6-43A0-94D3-964EEAAC5758} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload
Task: {AED82269-BCBE-4230-ABEC-7D94F4B95C01} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {B04E2456-58BD-4751-9645-1D5608E10979} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {B63F6A1A-4549-4E57-9632-A39E9D6EC4DB} - \GoforFilesUpdate No Task File <==== ATTENTION
Task: {BBFC3058-BE71-456C-B94E-AF8A23DF32C9} - \BitGuard No Task File <==== ATTENTION
Task: {C3B1819F-758B-4347-A8A8-FD74D9E6F68C} - \SomotoUpdateCheckerAutoStart No Task File <==== ATTENTION
Task: {C781B977-6657-422A-A232-B58EF18964F3} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis Install => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {C80AF85D-0DE5-4AE3-899B-B8916253ACB9} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-02-22] (Microsoft Corporation)
Task: {CA8BA137-AF1E-40C5-AC3A-C112C0F486D1} - System32\Tasks\AdobeAAMUpdater-1.0-Marcel-Marcel- => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-12-15] (Adobe Systems Incorporated)
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {DCF83D36-1162-4AFA-9ED0-AA3BA1001799} - System32\Tasks\bettermarkit_wd => C:\Program Files (x86)\bettermarkit\BetterMarkIt_wd.exe <==== ATTENTION
Task: {DFC64FB6-105F-4B5E-A251-F03421F42FD8} - System32\Tasks\Process Lasso Core Engine Only => C:\Program Files\Process Lasso\processgovernor.exe [2014-03-22] (Bitsum LLC)
Task: {E38542F9-3B46-480C-A33C-E5CC9166002A} - \Desk 365 RunAsStdUser No Task File <==== ATTENTION
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {E85048F2-499A-4739-B946-CAFCBF74F9A5} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {E87BAC48-E898-445E-A579-7BF2C0FBCDF7} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2013-03-07] (Intel Corporation)
Task: {EA4A368E-47ED-4F4A-8E6E-B53BE571D24D} - \preispilotSWU No Task File <==== ATTENTION
Task: {F05A359A-94F3-487A-9D2F-E2396354886A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {FCBD29E0-A339-4238-8176-42BBE985A43F} - \Software Updater Ui No Task File <==== ATTENTION
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\AutoKMSCustom.job => C:\Windows\AutoKMS\AutoKMS.exe
Task: C:\WINDOWS\Tasks\bettermarkit_wd.job => C:\Program Files (x86)\bettermarkit\BetterMarkIt_wd.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

==================== Loaded Modules (whitelisted) =============

2013-11-24 16:52 - 2014-06-13 04:11 - 00118728 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2013-09-05 01:17 - 2013-09-05 01:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2012-06-28 20:21 - 2012-06-28 20:21 - 00019456 _____ () C:\Program Files\PBO Manager v.1.4 beta\PboShellExt.dll
2013-11-17 14:18 - 2013-12-29 15:50 - 00076888 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe
2013-06-07 05:16 - 2013-06-07 05:16 - 04073768 _____ () C:\Program Files (x86)\HP SimplePass\IEWebSiteLogon.exe
2013-10-04 00:42 - 2013-10-04 00:42 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-02-24 20:07 - 2011-02-24 20:07 - 00470120 _____ () C:\Program Files (x86)\Acronis\DriveMonitor\adm_tray.exe
2013-01-10 14:38 - 2013-01-10 14:38 - 00124728 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPItunesModule.dll
2013-01-10 14:38 - 2013-01-10 14:38 - 00051512 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPItunesProxy.dll
2013-01-10 14:38 - 2013-01-10 14:38 - 00018432 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\PowerDVD.dll
2013-12-01 22:35 - 2013-12-01 22:35 - 01102336 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\System.Data.SQLite.dll
2013-01-10 14:37 - 2013-01-10 14:37 - 00180224 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\zxing.dll
2014-05-06 12:16 - 2014-05-06 12:16 - 00124728 _____ () C:\Users\Administrator\AppData\Local\assembly\dl3\MJZDWRBC.9QP\LM6HZG0W.COB\4f8ed896\00041553_2fefcd01\HPItunesModule.DLL
2014-05-06 12:16 - 2014-05-06 12:16 - 00018432 _____ () C:\Users\Administrator\AppData\Local\assembly\dl3\MJZDWRBC.9QP\LM6HZG0W.COB\cd4e248e\00041553_2fefcd01\PowerDVD.DLL
2014-07-10 22:31 - 2014-07-10 22:31 - 00380416 _____ () C:\Users\Administrator\Downloads\Gmer-19357.exe
2014-02-28 11:14 - 2014-02-28 11:14 - 00173568 _____ () C:\Program Files\TeamSpeak 3 Clientnew\quazip.dll
2014-02-27 16:51 - 2014-02-27 16:51 - 01080832 _____ () C:\Program Files\TeamSpeak 3 Clientnew\platforms\qwindows.dll
2014-02-27 16:51 - 2014-02-27 16:51 - 00833024 _____ () C:\Program Files\TeamSpeak 3 Clientnew\sqldrivers\qsqlite.dll
2014-02-28 15:07 - 2014-02-28 15:07 - 00102344 _____ () C:\Program Files\TeamSpeak 3 Clientnew\soundbackends\directsound_win64.dll
2014-02-28 15:07 - 2014-02-28 15:07 - 00108488 _____ () C:\Program Files\TeamSpeak 3 Clientnew\soundbackends\windowsaudiosession_win64.dll
2014-02-27 16:51 - 2014-02-27 16:51 - 00030208 _____ () C:\Program Files\TeamSpeak 3 Clientnew\imageformats\qgif.dll
2014-02-27 16:51 - 2014-02-27 16:51 - 00233984 _____ () C:\Program Files\TeamSpeak 3 Clientnew\imageformats\qjpeg.dll
2014-02-28 15:10 - 2014-02-28 15:10 - 00563656 _____ () C:\Program Files\TeamSpeak 3 Clientnew\plugins\clientquery_plugin.dll
2014-02-28 15:10 - 2014-02-28 15:10 - 00577480 _____ () C:\Program Files\TeamSpeak 3 Clientnew\plugins\teamspeak_control_plugin.dll
2014-02-27 16:51 - 2014-02-27 16:51 - 00159232 _____ () C:\Program Files\TeamSpeak 3 Clientnew\accessible\qtaccessiblewidgets.dll
2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2009-08-23 19:58 - 2009-08-23 19:58 - 00094208 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2013-06-07 05:16 - 2013-06-07 05:16 - 00019240 _____ () C:\Program Files (x86)\HP SimplePass\DownloadManager.dll
2014-01-10 23:50 - 2013-12-23 20:59 - 00376608 _____ () C:\Program Files (x86)\Connectify\NativeLibrary.dll
2014-01-10 23:50 - 2013-12-23 20:59 - 03170080 _____ () C:\Program Files (x86)\Connectify\ConnectifyNAT.dll
2014-01-10 23:50 - 2013-12-23 20:59 - 00714016 _____ () C:\Program Files (x86)\Connectify\log4cplus.dll
2014-01-10 23:50 - 2013-12-23 20:59 - 00354080 _____ () C:\Program Files (x86)\Connectify\LibDispatch.dll
2013-07-30 20:45 - 2012-06-08 05:34 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2012-06-08 11:34 - 2012-06-08 11:34 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
2011-02-24 19:39 - 2011-02-24 19:39 - 00012128 _____ () C:\Program Files (x86)\Common Files\Acronis\DriveMonitor\Common\icudt38.dll
2013-12-26 13:06 - 2013-07-29 15:19 - 00369000 _____ () C:\Program Files (x86)\CyberLink\SoftDMA\Kernel\DMR\CLNetMediaDMA.dll
2013-08-16 18:40 - 2013-05-09 04:23 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2014-06-11 14:51 - 2014-06-05 15:58 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\libglesv2.dll
2014-06-11 14:51 - 2014-06-05 15:58 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\libegl.dll
2014-06-11 14:51 - 2014-06-05 15:58 - 04217672 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\pdf.dll
2014-06-11 14:51 - 2014-06-05 15:58 - 00414536 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll
2014-06-11 14:51 - 2014-06-05 15:58 - 01732424 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ffmpegsumo.dll
2014-07-04 11:51 - 2014-05-31 03:27 - 01116672 _____ () C:\Program Files (x86)\Steam\libavcodec-55.dll
2014-07-04 11:51 - 2014-05-31 03:27 - 00399360 _____ () C:\Program Files (x86)\Steam\libavformat-55.dll
2014-07-04 11:51 - 2014-05-31 03:27 - 00331264 _____ () C:\Program Files (x86)\Steam\libavresample-1.dll
2014-07-04 11:51 - 2014-05-31 03:27 - 00438784 _____ () C:\Program Files (x86)\Steam\libavutil-53.dll
2014-07-04 11:52 - 2014-06-27 00:40 - 00764416 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2014-07-11 12:19 - 2014-07-10 20:21 - 02139328 _____ () C:\Program Files (x86)\Steam\video.dll
2014-07-04 11:51 - 2014-04-29 02:37 - 00519168 _____ () C:\Program Files (x86)\Steam\libswscale-2.dll
2014-07-11 12:19 - 2014-07-10 20:21 - 01116864 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2014-07-04 11:51 - 2014-05-02 01:35 - 20628160 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2014-07-04 11:51 - 2013-06-15 01:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll
2014-07-04 11:51 - 2013-06-15 01:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll
2014-07-04 11:51 - 2013-06-15 01:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll
2014-06-11 14:51 - 2014-06-05 15:58 - 14612296 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"

==================== EXE Association (whitelisted) =============


==================== MSCONFIG/TASK MANAGER disabled items =========

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: BEService => 3
MSCONFIG\Services: EBOOSTRSVC => 2
MSCONFIG\Services: lansweeperservice => 2
MSCONFIG\Services: LavasoftAdAwareService11 => 2
MSCONFIG\Services: SBUpd => 2
MSCONFIG\Services: SolutoLauncherService => 2
MSCONFIG\Services: SolutoRemoteService => 3
MSCONFIG\Services: SolutoService => 2
MSCONFIG\Services: valWBFPolicyService => 2
MSCONFIG\Services: VideoAcceleratorService => 2
MSCONFIG\startupreg: DAEMON Tools Lite => "c:\program files (x86)\daemon tools lite\dtlite.exe" -autorun
MSCONFIG\startupreg: iTunesHelper => "c:\program files (x86)\itunes\ituneshelper.exe"
MSCONFIG\startupreg: LogMeIn Hamachi Ui =>
MSCONFIG\startupreg: Steam => "c:\program files (x86)\steam\steam.exe" -silent
HKLM\...\StartupApproved\StartupFolder: => "GrFinger Desktop Identity.lnk"
HKLM\...\StartupApproved\StartupFolder: => "Secunia PSI Tray.lnk"
HKLM\...\StartupApproved\Run: => "BCSSync"
HKLM\...\StartupApproved\Run: => "Launch LCore"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "AdAwareTray"
HKLM\...\StartupApproved\Run32: => "RemoteControl10"
HKLM\...\StartupApproved\Run32: => "BlueStacks Agent"
HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui"
HKLM\...\StartupApproved\Run32: => "AdobeCS6ServiceManager"
HKLM\...\StartupApproved\Run32: => "SwitchBoard"
HKLM\...\StartupApproved\Run32: => "IObit Malware Fighter"
HKLM\...\StartupApproved\Run32: => "WsmUpdater"
HKCU\...\StartupApproved\Run: => "C:\Program Files (x86)\NetMeter\NetMeter.exe"

==================== Faulty Device Manager Devices =============

Name: HP Truevision HD
Description: USB-Videogerät
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: Microsoft
Service: usbvideo
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Fake Webcam
Description: Fake Webcam
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Web Solution Mart
Service: fwdrv
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (07/11/2014 00:21:35 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418154

Error: (07/11/2014 00:17:53 PM) (Source: XTUService) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
  bei IronCity.Core.Server.CoreServer.Start()
  bei XtuService.XtuService1.OnStart(String[] args)
  bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (07/11/2014 00:16:03 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: IAStorDataMgrSvc.exe, Version: 11.5.9.1002, Zeitstempel: 0x5065e128
Name des fehlerhaften Moduls: IAStorUtil.ni.dll, Version: 11.5.9.1002, Zeitstempel: 0x5065e124
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002f3fd
ID des fehlerhaften Prozesses: 0x1698
Startzeit der fehlerhaften Anwendung: 0xIAStorDataMgrSvc.exe0
Pfad der fehlerhaften Anwendung: IAStorDataMgrSvc.exe1
Pfad des fehlerhaften Moduls: IAStorDataMgrSvc.exe2
Berichtskennung: IAStorDataMgrSvc.exe3
Vollständiger Name des fehlerhaften Pakets: IAStorDataMgrSvc.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: IAStorDataMgrSvc.exe5

Error: (07/11/2014 00:15:57 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: IAStorDataMgrSvc.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.NullReferenceException
Stapel:
  bei IAStorUtil.SystemDataModelListener.ProcessSystemDataModelChanges()
  bei IAStorUtil.SystemDataModelListener.LoadSavedSystemState()
  bei IAStorDataMgr.EventRelay.<Start>b__0(System.Object)
  bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
  bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
  bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
  bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
  bei System.Threading.ThreadPoolWorkQueue.Dispatch()
  bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (07/11/2014 02:00:59 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 188343

Error: (07/11/2014 02:00:59 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/11/2014 02:00:58 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 187140

Error: (07/11/2014 02:00:58 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 187140

Error: (07/11/2014 02:00:58 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/11/2014 02:00:57 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 185937


System errors:
=============
Error: (07/11/2014 01:01:06 PM) (Source: DCOM) (EventID: 10010) (User: Marcel)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (07/11/2014 01:00:36 PM) (Source: DCOM) (EventID: 10010) (User: Marcel)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (07/11/2014 00:51:44 PM) (Source: DCOM) (EventID: 10010) (User: Marcel)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (07/11/2014 00:51:14 PM) (Source: DCOM) (EventID: 10010) (User: Marcel)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (07/11/2014 00:19:57 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Rapid Storage-Technologie" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (07/11/2014 00:15:37 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Dateiversionsverlauf-Dienst" wurde nicht richtig gestartet.

Error: (07/11/2014 00:13:51 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "EASYBOX",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{1FBFFE96-8B39-4350-9283-7908E8EE162E}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (07/11/2014 00:11:02 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "BlueStacks Android Service" ist vom Dienst "BlueStacks Hypervisor" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%2

Error: (07/11/2014 00:10:43 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "MBAMService" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (07/11/2014 00:10:43 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "MBAMScheduler" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2


Microsoft Office Sessions:
=========================
Error: (07/11/2014 00:21:35 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418154

Error: (07/11/2014 00:17:53 PM) (Source: XTUService) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
  bei IronCity.Core.Server.CoreServer.Start()
  bei XtuService.XtuService1.OnStart(String[] args)
  bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (07/11/2014 00:16:03 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: IAStorDataMgrSvc.exe11.5.9.10025065e128IAStorUtil.ni.dll11.5.9.10025065e124c00000050002f3fd169801cf9cf11205ac80C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exeC:\WINDOWS\assembly\NativeImages_v4.0.30319_32\IAStorUtil\d1bcba4535bd6be21398119cbec8d64e\IAStorUtil.ni.dll5c4a112e-08e4-11e4-bf67-f4b7e256f89e

Error: (07/11/2014 00:15:57 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: IAStorDataMgrSvc.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.NullReferenceException
Stapel:
  bei IAStorUtil.SystemDataModelListener.ProcessSystemDataModelChanges()
  bei IAStorUtil.SystemDataModelListener.LoadSavedSystemState()
  bei IAStorDataMgr.EventRelay.<Start>b__0(System.Object)
  bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
  bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
  bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
  bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
  bei System.Threading.ThreadPoolWorkQueue.Dispatch()
  bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (07/11/2014 02:00:59 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 188343

Error: (07/11/2014 02:00:59 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/11/2014 02:00:58 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 187140

Error: (07/11/2014 02:00:58 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 187140

Error: (07/11/2014 02:00:58 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/11/2014 02:00:57 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 185937


CodeIntegrity Errors:
===================================
  Date: 2013-12-26 22:30:21.833
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:30:16.427
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:30:14.982
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:30:06.419
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:17:07.949
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:17:05.109
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:17:05.094
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:17:05.094
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:17:05.078
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:17:04.578
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info ===========================

Percentage of memory in use: 26%
Total physical RAM: 16273.27 MB
Available physical RAM: 11880.16 MB
Total Pagefile: 65425.27 MB
Available Pagefile: 61080.59 MB
Total Virtual: 131072 MB
Available Virtual: 131071.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:912.59 GB) (Free:306.04 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (RECOVERY) (Fixed) (Total:17.8 GB) (Free:16.84 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (DLAN-500AV-WRLP) (CDROM) (Total:0.11 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: A50E1C7D)

Partition: GPT Partition Type.

==================== End Of Log ============================

schrauber 12.07.2014 07:37
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ProxyServer: http=127.0.0.1:13828

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.




Adware & Co. deinstallieren

Solltest Du ein Programm nicht finden oder nicht deinstallieren können, mache bitte mit dem nächsten Schritt weiter:




Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.

95Marcel95 13.07.2014 11:26
ADWCleaner -

Code:
# AdwCleaner v3.215 - Bericht erstellt am 13/07/2014 um 11:52:06
# Aktualisiert 09/07/2014 von Xplode
# Betriebssystem : Windows 8.1  (64 bits)
# Benutzername : Administrator - MARCEL
# Gestartet von : C:\Users\Administrator\Downloads\adwcleaner_3.215.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Users\Administrator\AppData\Local\Temp\OCS
Ordner Gelöscht : C:\Users\Marcel-\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp
Datei Gelöscht : C:\WINDOWS\System32\Tasks\Browser Updater

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\OCS

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17126


-\\ Mozilla Firefox v26.0 (de)

[ Datei : C:\Users\Marcel-\AppData\Roaming\Mozilla\Firefox\Profiles\ib40vd22.default\prefs.js ]


-\\ Google Chrome v35.0.1916.153

[ Datei : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ Datei : C:\Users\Marcel-\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R7].txt - [1606 octets] - [12/07/2014 11:40:21]
AdwCleaner[S4].txt - [1481 octets] - [13/07/2014 11:52:06]

########## EOF - C:\AdwCleaner\AdwCleaner[S4].txt - [1541 octets] ##########
JRT -
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 8.1 x64
Ran by Administrator on 12.07.2014 at 12:08:18,91
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 12.07.2014 at 12:16:14,99
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Fixlog -

Code:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 10-07-2014
Ran by Administrator at 2014-07-12 11:13:33 Run:1
Running from C:\Users\Administrator\Downloads
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
ProxyServer: http=127.0.0.1:13828
*****************

HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value deleted successfully.

==== End of Fixlog ====
Mbam -

Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 12.07.2014
Suchlauf-Zeit: 11:32:05
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.07.12.01
Rootkit Datenbank: v2014.07.09.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 8.1
CPU: x64
Dateisystem: NTFS
Benutzer: Administrator

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 439236
Verstrichene Zeit: 33 Min, 30 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 19
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{60C07B56-542E-4054-A503-4E9E08DF2F84}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b],
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{DB404724-1080-40D5-9E8E-B641E8069BAF}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b],
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{D3032E47-FCC2-4511-9871-987F89486A7D}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b],
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{D3032E47-FCC2-4511-9871-987F89486A7D}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b],
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{DB404724-1080-40D5-9E8E-B641E8069BAF}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b],
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{60C07B56-542E-4054-A503-4E9E08DF2F84}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b],
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\CLASSES\Pagealicous.MyObjectWithSite, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b],
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\CLASSES\Pagealicous.MyObjectWithSite.1, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b],
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Pagealicous.MyObjectWithSite, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b],
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Pagealicous.MyObjectWithSite.1, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b],
PUP.Optional.Pagealicious.A, HKU\S-1-5-21-3786530795-813635038-3550015045-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{60C07B56-542E-4054-A503-4E9E08DF2F84}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b],
PUP.Optional.Pagealicious.A, HKU\S-1-5-21-3786530795-813635038-3550015045-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{60C07B56-542E-4054-A503-4E9E08DF2F84}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b],
PUP.Optional.Pagealicious.A, HKU\S-1-5-21-3786530795-813635038-3550015045-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{60C07B56-542E-4054-A503-4E9E08DF2F84}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b],
PUP.Optional.Pagealicious.A, HKU\S-1-5-21-3786530795-813635038-3550015045-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{60C07B56-542E-4054-A503-4E9E08DF2F84}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b],
PUP.Optional.Outbrowse, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{6D4506CE-F855-4657-AA38-DB6B1F733982}, In Quarantäne, [9908207e48339d99656cf5983cc611ef],
PUP.Optional.Outbrowse, HKLM\SOFTWARE\CLASSES\TYPELIB\{03771AEF-400D-4A13-B712-25878EC4A3F5}, In Quarantäne, [9908207e48339d99656cf5983cc611ef],
PUP.Optional.Outbrowse, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{03771AEF-400D-4A13-B712-25878EC4A3F5}, In Quarantäne, [9908207e48339d99656cf5983cc611ef],
PUP.Optional.Zwangi, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{47AE1BA9-0BD1-44F4-88AE-45F8F7B605EF}, In Quarantäne, [9a07efaf631880b60d03e27854ae9868],
Refog.Keylogger, HKLM\SOFTWARE\Refog Software, In Quarantäne, [069b7b23f5869c9ad15e5f1319ea7090],

Registrierungswerte: 1
PUM.Bad.Proxy, HKU\S-1-5-21-3786530795-813635038-3550015045-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|ProxyServer, http=127.0.0.1:13828, In Quarantäne, [b1f0dac456256fc7f1dc13fba55f5da3]

Registrierungsdaten: 8
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[049da4fa6d0e7eb8e1375e3f2ada0bf5]
Refog.Keylogger, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON|Userinit, c:\windows\system32\userinit.exe,c:\program files\soluto\soluto.exe /userinit,C:\Windows\SysWOW64\MPK\mpk.exe, Gut: (Userinit.exe), Schlecht: (c:\windows\system32\userinit.exe,c:\program files\soluto\soluto.exe /userinit,C:\Windows\SysWOW64\MPK\mpk.exe),Ersetzt,[21803b63413a06302b673b5f9e660cf4]
PUP.Optional.Snapdo, HKU\S-1-5-21-3786530795-813635038-3550015045-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=hp&installDate=29/07/2013, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=hp&installDate=29/07/2013),Ersetzt,[7a2759455f1c57df3554dbc182821be5]
PUP.Optional.Snapdo, HKU\S-1-5-21-3786530795-813635038-3550015045-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013),Ersetzt,[7031bce23645f046f691edaf659f9b65]
PUP.Optional.Snapdo, HKU\S-1-5-21-3786530795-813635038-3550015045-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013),Ersetzt,[fea3f4aa9dde49ed8dfb7626c3416799]
PUP.Optional.Snapdo, HKU\S-1-5-21-3786530795-813635038-3550015045-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013),Ersetzt,[1c85d8c685f60234ff8bdbc11fe5a957]
PUP.Optional.Snapdo, HKU\S-1-5-21-3786530795-813635038-3550015045-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013),Ersetzt,[cdd427775d1e280e305b3e5e11f301ff]
PUP.Optional.SnapDo.A, HKU\S-1-5-21-3786530795-813635038-3550015045-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013),Ersetzt,[4061415d7dfe40f667bcf99a60a48f71]

Ordner: 6
Refog.Keylogger, C:\ProgramData\MPK, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\2, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\3, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\CPDA, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\CPDM, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],

Dateien: 225
PUP.Optional.Pagealicious.A, C:\Program Files (x86)\Pagealicious\Pagealicious.dll, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b],
PUP.Optional.OutBrowse, C:\Users\Administrator\Downloads\setup (1).exe, In Quarantäne, [5e43f7a7710a5dd9720adba622dfd927],
PUP.Optional.FlashPro, C:\Users\Administrator\Downloads\flashplayerpro-setup.exe, In Quarantäne, [d2cf861894e7979ff1f66920db29b947],
PUP.Optional.OutBrowse, C:\Users\Administrator\Downloads\setup (2).exe, In Quarantäne, [bee3ccd24833f73f5725542de12047b9],
PUP.Optional.OutBrowse, C:\Users\Administrator\Downloads\setup.exe, In Quarantäne, [148d9fffb5c6e6502a522d54ea17ab55],
PUP.Optional.AppsInstaller, C:\Users\Marcel-\Downloads\AVS_Media_Player (1).exe, In Quarantäne, [faa737672b5055e18d5e9c87ae56a858],
PUP.Optional.AppsInstaller, C:\Users\Marcel-\Downloads\AVS_Media_Player (2).exe, In Quarantäne, [d1d0d8c6b1ca1b1b34b760c32cd8728e],
PUP.Optional.AppsInstaller, C:\Users\Marcel-\Downloads\AVS_Media_Player.exe, In Quarantäne, [8918ff9fb8c3f046806b79aaaa5a738d],
Trojan.FakeFlash, C:\Users\Marcel-\Downloads\flash.exe, In Quarantäne, [3e63e8b6c4b7f0461dfa4957ac55ce32],
PUP.Optional.BetterMarkIT.A, C:\Windows\System32\Tasks\BETTERMARKIT_WD, In Quarantäne, [dec3e2bc5f1c7fb7af4517a5b44e29d7],
PUP.Optional.BetterDeals.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Local Storage\HTTP_STATIC.BETTERDEALS00.BETTERDEALS.CO_0.LOCALSTORAGE, In Quarantäne, [445d3d617efd0135e7ba9e24956d3ec2],
PUP.Optional.BetterDeals.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Local Storage\HTTP_STATIC.BETTERDEALS00.BETTERDEALS.CO_0.LOCALSTORAGE-JOURNAL, In Quarantäne, [049ddbc35328e74f5e43566cad5558a8],
PUP.Optional.LiveLyrics.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Local Storage\HTTP_STATIC.LIVELYRICS00.LIVE-LYRICS.COM_0.LOCALSTORAGE, In Quarantäne, [ddc47b23d9a273c344989532867cf907],
PUP.Optional.LiveLyrics.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Local Storage\HTTP_STATIC.LIVELYRICS00.LIVE-LYRICS.COM_0.LOCALSTORAGE-JOURNAL, In Quarantäne, [38699806bac10234c517c304679bb749],
PUP.Optional.LiveLyrics.A, C:\Users\Marcel-\AppData\Local\Google\Chrome\User Data\Default\Local Storage\HTTP_STATIC.LIVELYRICS00.LIVE-LYRICS.COM_0.LOCALSTORAGE, In Quarantäne, [0998eab47209af8727b57750a260df21],
PUP.Optional.LiveLyrics.A, C:\Users\Marcel-\AppData\Local\Google\Chrome\User Data\Default\Local Storage\HTTP_STATIC.LIVELYRICS00.LIVE-LYRICS.COM_0.LOCALSTORAGE-JOURNAL, In Quarantäne, [5b46d6c87308171fc01c3f887b87ba46],
PUP.Optional.QuickStart.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Local Storage\CHROME-EXTENSION_PELMEIDFHDLHLBJIMPABFCBNNOJBBOMA_0.LOCALSTORAGE, In Quarantäne, [08998c12e49794a2e43c48cdd03442be],
PUP.Optional.QuickStart.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Local Storage\CHROME-EXTENSION_PELMEIDFHDLHLBJIMPABFCBNNOJBBOMA_0.LOCALSTORAGE-JOURNAL, In Quarantäne, [e3beecb212693303fa2669acde26b54b],
Refog.Keylogger, C:\ProgramData\MPK\M0000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\S0000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\D0000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7351219097, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7385941435, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7420663310, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7455386921, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7490107523, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7524830671, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7583405324, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7618127546, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7652849768, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7687571991, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7722294213, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7757016551, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7791738657, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7826460880, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7861183102, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7930627546, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7965349768, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8000071991, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8034794329, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8069516435, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8104238657, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8138960880, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8173683102, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8208405324, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8243127662, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8277849768, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8312571991, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8347294213, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8382016435, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8416738773, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8451460880, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8520905440, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8555627662, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8590349768, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8625071991, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8659794213, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8694516435, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8729238657, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8763960880, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8798683218, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8833405324, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8868127546, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8902849768, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8937572107, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8972294213, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9007016435, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9041738657, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9111183102, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9145905324, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9180627546, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9215349768, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9250071991, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9284794213, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9319516435, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9354238657, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9388960880, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9423683102, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9458405440, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9493127662, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9527849768, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9562571991, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9597294329, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9632016551, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9701460995, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9736183102, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9770905324, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9805627546, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9840349768, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9875071991, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9909794213, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9944516435, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9979238657, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_0013960880, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5008969560, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5043691782, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5078414120, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5113136227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5147858449, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5182580671, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5252025231, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5286747338, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5321469560, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5356191782, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5390914120, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5425636227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5460358449, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5495080671, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5529802894, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5564525116, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5604447569, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5633969560, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5668691782, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5703414005, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5738136227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5772858449, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7895905324, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8486183218, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9076460880, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9666738657, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5217303009, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5807580671, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6397858565, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6988136227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7992769444, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8684584259, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5842302894, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5877025116, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5911747454, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5946469560, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5981191782, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6015914005, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6050636227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6085358449, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6120080671, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6154802894, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6189525116, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6224247338, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6258969560, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6293701736, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6328414120, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6363136227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6432580671, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6467302894, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6502025116, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6536747338, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6571469560, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6606191782, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6640914005, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6675636227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6710358449, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6745080671, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6779802894, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6814525116, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6849247338, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6883969676, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6918691782, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6953414005, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7022858449, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7471936690, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7506658796, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7541381019, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7576103009, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7610826042, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7645548264, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7680269676, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7714992824, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7749714699, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7784436227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7819158449, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7853880671, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7888603356, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7923325000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7958047569, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8027492014, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8062214236, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8096936227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8131658333, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8166381019, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8201103241, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8235825000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8270547222, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8305269444, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8339993287, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8374714005, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8409436806, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8444158333, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8478880903, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8513602778, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8548325116, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8719305208, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8754036343, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8788749769, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8823471875, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8858194213, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8892916319, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8927672454, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8962360764, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8997082986, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9077732523, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9112456481, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9229980787, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9264198148, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9298920602, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9333642593, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9368364699, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9403086921, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9437809028, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9472531250, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9512835069, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9547557060, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9582278935, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9945159375, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9979883449, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\S0000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\2\D0000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\2\I41823_9135415857, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\2\I41823_9839565046, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\2\S0000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\3\D0000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\3\D0000-journal, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\3\I41823_9449521991, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\3\I41823_9881432176, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\3\S0000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\CPDM\cpfm.bin, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],

Physische Sektoren: 0
(No malicious items detected)


(end)
Mbam -

Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 12.07.2014
Suchlauf-Zeit: 11:32:05
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.07.12.01
Rootkit Datenbank: v2014.07.09.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 8.1
CPU: x64
Dateisystem: NTFS
Benutzer: Administrator

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 439236
Verstrichene Zeit: 33 Min, 30 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 19
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{60C07B56-542E-4054-A503-4E9E08DF2F84}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b],
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{DB404724-1080-40D5-9E8E-B641E8069BAF}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b],
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{D3032E47-FCC2-4511-9871-987F89486A7D}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b],
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{D3032E47-FCC2-4511-9871-987F89486A7D}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b],
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{DB404724-1080-40D5-9E8E-B641E8069BAF}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b],
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{60C07B56-542E-4054-A503-4E9E08DF2F84}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b],
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\CLASSES\Pagealicous.MyObjectWithSite, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b],
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\CLASSES\Pagealicous.MyObjectWithSite.1, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b],
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Pagealicous.MyObjectWithSite, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b],
PUP.Optional.Pagealicious.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Pagealicous.MyObjectWithSite.1, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b],
PUP.Optional.Pagealicious.A, HKU\S-1-5-21-3786530795-813635038-3550015045-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{60C07B56-542E-4054-A503-4E9E08DF2F84}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b],
PUP.Optional.Pagealicious.A, HKU\S-1-5-21-3786530795-813635038-3550015045-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{60C07B56-542E-4054-A503-4E9E08DF2F84}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b],
PUP.Optional.Pagealicious.A, HKU\S-1-5-21-3786530795-813635038-3550015045-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{60C07B56-542E-4054-A503-4E9E08DF2F84}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b],
PUP.Optional.Pagealicious.A, HKU\S-1-5-21-3786530795-813635038-3550015045-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{60C07B56-542E-4054-A503-4E9E08DF2F84}, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b],
PUP.Optional.Outbrowse, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{6D4506CE-F855-4657-AA38-DB6B1F733982}, In Quarantäne, [9908207e48339d99656cf5983cc611ef],
PUP.Optional.Outbrowse, HKLM\SOFTWARE\CLASSES\TYPELIB\{03771AEF-400D-4A13-B712-25878EC4A3F5}, In Quarantäne, [9908207e48339d99656cf5983cc611ef],
PUP.Optional.Outbrowse, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{03771AEF-400D-4A13-B712-25878EC4A3F5}, In Quarantäne, [9908207e48339d99656cf5983cc611ef],
PUP.Optional.Zwangi, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{47AE1BA9-0BD1-44F4-88AE-45F8F7B605EF}, In Quarantäne, [9a07efaf631880b60d03e27854ae9868],
Refog.Keylogger, HKLM\SOFTWARE\Refog Software, In Quarantäne, [069b7b23f5869c9ad15e5f1319ea7090],

Registrierungswerte: 1
PUM.Bad.Proxy, HKU\S-1-5-21-3786530795-813635038-3550015045-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|ProxyServer, http=127.0.0.1:13828, In Quarantäne, [b1f0dac456256fc7f1dc13fba55f5da3]

Registrierungsdaten: 8
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[049da4fa6d0e7eb8e1375e3f2ada0bf5]
Refog.Keylogger, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON|Userinit, c:\windows\system32\userinit.exe,c:\program files\soluto\soluto.exe /userinit,C:\Windows\SysWOW64\MPK\mpk.exe, Gut: (Userinit.exe), Schlecht: (c:\windows\system32\userinit.exe,c:\program files\soluto\soluto.exe /userinit,C:\Windows\SysWOW64\MPK\mpk.exe),Ersetzt,[21803b63413a06302b673b5f9e660cf4]
PUP.Optional.Snapdo, HKU\S-1-5-21-3786530795-813635038-3550015045-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=hp&installDate=29/07/2013, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=hp&installDate=29/07/2013),Ersetzt,[7a2759455f1c57df3554dbc182821be5]
PUP.Optional.Snapdo, HKU\S-1-5-21-3786530795-813635038-3550015045-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013),Ersetzt,[7031bce23645f046f691edaf659f9b65]
PUP.Optional.Snapdo, HKU\S-1-5-21-3786530795-813635038-3550015045-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013),Ersetzt,[fea3f4aa9dde49ed8dfb7626c3416799]
PUP.Optional.Snapdo, HKU\S-1-5-21-3786530795-813635038-3550015045-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013),Ersetzt,[1c85d8c685f60234ff8bdbc11fe5a957]
PUP.Optional.Snapdo, HKU\S-1-5-21-3786530795-813635038-3550015045-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013),Ersetzt,[cdd427775d1e280e305b3e5e11f301ff]
PUP.Optional.SnapDo.A, HKU\S-1-5-21-3786530795-813635038-3550015045-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?publisher=SoftPublisherYB&dpid=SoftPublisherYB&co=DE&userid=37f90be3-c453-4c13-87fd-4abbdb8769c8&searchtype=ds&q={searchTerms}&installDate=29/07/2013),Ersetzt,[4061415d7dfe40f667bcf99a60a48f71]

Ordner: 6
Refog.Keylogger, C:\ProgramData\MPK, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\2, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\3, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\CPDA, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\CPDM, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],

Dateien: 225
PUP.Optional.Pagealicious.A, C:\Program Files (x86)\Pagealicious\Pagealicious.dll, In Quarantäne, [4061c4dac8b394a231f15ef60df5b54b],
PUP.Optional.OutBrowse, C:\Users\Administrator\Downloads\setup (1).exe, In Quarantäne, [5e43f7a7710a5dd9720adba622dfd927],
PUP.Optional.FlashPro, C:\Users\Administrator\Downloads\flashplayerpro-setup.exe, In Quarantäne, [d2cf861894e7979ff1f66920db29b947],
PUP.Optional.OutBrowse, C:\Users\Administrator\Downloads\setup (2).exe, In Quarantäne, [bee3ccd24833f73f5725542de12047b9],
PUP.Optional.OutBrowse, C:\Users\Administrator\Downloads\setup.exe, In Quarantäne, [148d9fffb5c6e6502a522d54ea17ab55],
PUP.Optional.AppsInstaller, C:\Users\Marcel-\Downloads\AVS_Media_Player (1).exe, In Quarantäne, [faa737672b5055e18d5e9c87ae56a858],
PUP.Optional.AppsInstaller, C:\Users\Marcel-\Downloads\AVS_Media_Player (2).exe, In Quarantäne, [d1d0d8c6b1ca1b1b34b760c32cd8728e],
PUP.Optional.AppsInstaller, C:\Users\Marcel-\Downloads\AVS_Media_Player.exe, In Quarantäne, [8918ff9fb8c3f046806b79aaaa5a738d],
Trojan.FakeFlash, C:\Users\Marcel-\Downloads\flash.exe, In Quarantäne, [3e63e8b6c4b7f0461dfa4957ac55ce32],
PUP.Optional.BetterMarkIT.A, C:\Windows\System32\Tasks\BETTERMARKIT_WD, In Quarantäne, [dec3e2bc5f1c7fb7af4517a5b44e29d7],
PUP.Optional.BetterDeals.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Local Storage\HTTP_STATIC.BETTERDEALS00.BETTERDEALS.CO_0.LOCALSTORAGE, In Quarantäne, [445d3d617efd0135e7ba9e24956d3ec2],
PUP.Optional.BetterDeals.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Local Storage\HTTP_STATIC.BETTERDEALS00.BETTERDEALS.CO_0.LOCALSTORAGE-JOURNAL, In Quarantäne, [049ddbc35328e74f5e43566cad5558a8],
PUP.Optional.LiveLyrics.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Local Storage\HTTP_STATIC.LIVELYRICS00.LIVE-LYRICS.COM_0.LOCALSTORAGE, In Quarantäne, [ddc47b23d9a273c344989532867cf907],
PUP.Optional.LiveLyrics.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Local Storage\HTTP_STATIC.LIVELYRICS00.LIVE-LYRICS.COM_0.LOCALSTORAGE-JOURNAL, In Quarantäne, [38699806bac10234c517c304679bb749],
PUP.Optional.LiveLyrics.A, C:\Users\Marcel-\AppData\Local\Google\Chrome\User Data\Default\Local Storage\HTTP_STATIC.LIVELYRICS00.LIVE-LYRICS.COM_0.LOCALSTORAGE, In Quarantäne, [0998eab47209af8727b57750a260df21],
PUP.Optional.LiveLyrics.A, C:\Users\Marcel-\AppData\Local\Google\Chrome\User Data\Default\Local Storage\HTTP_STATIC.LIVELYRICS00.LIVE-LYRICS.COM_0.LOCALSTORAGE-JOURNAL, In Quarantäne, [5b46d6c87308171fc01c3f887b87ba46],
PUP.Optional.QuickStart.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Local Storage\CHROME-EXTENSION_PELMEIDFHDLHLBJIMPABFCBNNOJBBOMA_0.LOCALSTORAGE, In Quarantäne, [08998c12e49794a2e43c48cdd03442be],
PUP.Optional.QuickStart.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Local Storage\CHROME-EXTENSION_PELMEIDFHDLHLBJIMPABFCBNNOJBBOMA_0.LOCALSTORAGE-JOURNAL, In Quarantäne, [e3beecb212693303fa2669acde26b54b],
Refog.Keylogger, C:\ProgramData\MPK\M0000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\S0000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\D0000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7351219097, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7385941435, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7420663310, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7455386921, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7490107523, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7524830671, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7583405324, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7618127546, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7652849768, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7687571991, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7722294213, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7757016551, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7791738657, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7826460880, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7861183102, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7930627546, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7965349768, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8000071991, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8034794329, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8069516435, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8104238657, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8138960880, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8173683102, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8208405324, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8243127662, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8277849768, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8312571991, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8347294213, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8382016435, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8416738773, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8451460880, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8520905440, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8555627662, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8590349768, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8625071991, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8659794213, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8694516435, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8729238657, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8763960880, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8798683218, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8833405324, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8868127546, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8902849768, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8937572107, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8972294213, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9007016435, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9041738657, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9111183102, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9145905324, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9180627546, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9215349768, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9250071991, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9284794213, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9319516435, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9354238657, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9388960880, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9423683102, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9458405440, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9493127662, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9527849768, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9562571991, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9597294329, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9632016551, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9701460995, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9736183102, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9770905324, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9805627546, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9840349768, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9875071991, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9909794213, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9944516435, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9979238657, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_0013960880, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5008969560, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5043691782, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5078414120, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5113136227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5147858449, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5182580671, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5252025231, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5286747338, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5321469560, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5356191782, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5390914120, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5425636227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5460358449, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5495080671, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5529802894, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5564525116, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5604447569, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5633969560, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5668691782, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5703414005, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5738136227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5772858449, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_7895905324, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_8486183218, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9076460880, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41822_9666738657, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5217303009, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5807580671, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6397858565, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6988136227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7992769444, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8684584259, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5842302894, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5877025116, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5911747454, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5946469560, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_5981191782, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6015914005, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6050636227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6085358449, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6120080671, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6154802894, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6189525116, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6224247338, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6258969560, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6293701736, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6328414120, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6363136227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6432580671, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6467302894, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6502025116, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6536747338, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6571469560, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6606191782, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6640914005, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6675636227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6710358449, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6745080671, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6779802894, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6814525116, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6849247338, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6883969676, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6918691782, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_6953414005, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7022858449, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7471936690, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7506658796, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7541381019, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7576103009, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7610826042, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7645548264, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7680269676, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7714992824, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7749714699, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7784436227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7819158449, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7853880671, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7888603356, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7923325000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_7958047569, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8027492014, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8062214236, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8096936227, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8131658333, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8166381019, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8201103241, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8235825000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8270547222, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8305269444, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8339993287, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8374714005, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8409436806, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8444158333, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8478880903, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8513602778, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8548325116, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8719305208, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8754036343, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8788749769, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8823471875, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8858194213, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8892916319, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8927672454, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8962360764, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_8997082986, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9077732523, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9112456481, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9229980787, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9264198148, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9298920602, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9333642593, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9368364699, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9403086921, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9437809028, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9472531250, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9512835069, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9547557060, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9582278935, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9945159375, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\I41823_9979883449, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\1\S0000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\2\D0000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\2\I41823_9135415857, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\2\I41823_9839565046, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\2\S0000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\3\D0000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\3\D0000-journal, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\3\I41823_9449521991, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\3\I41823_9881432176, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\3\S0000, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],
Refog.Keylogger, C:\ProgramData\MPK\CPDM\cpfm.bin, In Quarantäne, [b6ebaef0502b270fefaabbd343bfe61a],

Physische Sektoren: 0
(No malicious items detected)


(end)

95Marcel95 13.07.2014 11:28
FRST - Teil 1

Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-07-2014
Ran by Administrator (administrator) on MARCEL on 13-07-2014 12:12:54
Running from C:\Users\Administrator\Downloads
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(HP) C:\Program Files (x86)\HP SimplePass\TrueSuiteService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicShellService.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Authentec Inc.) C:\Program Files\Protector Suite\upeksvr.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Fork Ltd.) C:\Prey\platform\windows\cronsvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(devolo AG) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\nis.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(Softwareentwicklung Remus - ArchiCrypt) C:\Windows\SysWOW64\STGRAMDiskHandler64.exe
(Connectify) C:\Program Files (x86)\Connectify\ConnectifyService.exe
(Connectify) C:\Program Files (x86)\Connectify\Connectifyd.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(AuthenTec Inc.) C:\Program Files (x86)\HP SimplePass\TouchControl.exe
() C:\Program Files (x86)\HP SimplePass\IEWebSiteLogon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\nis.exe
(Bitsum LLC) C:\Program Files\Process Lasso\ProcessLasso.exe
(Bitsum LLC) C:\Program Files\Process Lasso\ProcessGovernor.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Talk\TalkMonitor.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
() C:\Program Files (x86)\Acronis\DriveMonitor\adm_tray.exe
(CyberLink) C:\Program Files (x86)\CyberLink\SoftDMA\Kernel\DMR\DMREngine_iSale.exe
(Steganos Software GmbH) C:\Program Files (x86)\Steganos Privacy Suite 14\SteganosHotKeyService.exe
(Steganos Software GmbH) C:\Program Files (x86)\Steganos Privacy Suite 14\fredirstarter.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\nvspcap64.dll [1225920 2014-04-30] (NVIDIA Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [478984 2012-12-15] (Adobe Systems Incorporated)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2874168 2012-09-15] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2013-06-03] (IDT, Inc.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2199840 2014-04-30] (NVIDIA Corporation)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [462400 2011-02-12] (Acronis)
HKLM\...\Run: [AdAwareTray] => "C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5152.0\AdAwareTray.exe"
HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [581024 2012-09-07] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285240 2012-09-28] (Intel Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-04-23] (Apple Inc.)
HKLM-x32\...\Run: [ROCCATTalk] => C:\Program Files (x86)\ROCCAT\Talk\TalkMonitor.EXE [2154496 2011-07-12] (ROCCAT GmbH)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-04-10] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-10-26] (cyberlink)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [186408 2013-12-04] (Geek Software GmbH)
HKLM-x32\...\Run: [adm_tray.exe] => C:\Program Files (x86)\Acronis\DriveMonitor\adm_tray.exe [470120 2011-02-24] ()
HKLM-x32\...\Run: [DMREngine_iSale] => C:\Program Files (x86)\CyberLink\SoftDMA\Kernel\DMR\DMREngine_iSale.exe [306024 2013-07-29] (CyberLink)
HKLM-x32\...\Run: [Steganos HotKeys] => C:\Program Files (x86)\Steganos Privacy Suite 14\SteganosHotKeyService.exe [100864 2013-12-18] (Steganos Software GmbH)
HKLM-x32\...\Run: [SSS14 File Redirection Starter] => C:\Program Files (x86)\Steganos Privacy Suite 14\fredirstarter.exe [17920 2013-12-18] (Steganos Software GmbH)
HKLM-x32\...\Run: [WsmUpdater] => C:\Program Files (x86)\Web Solution Mart\Fake Webcam Codecs Pack\Updater.exe [292208 2012-05-18] (Web Solution Mart)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2014-05-27] (Hewlett-Packard)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\psfus: C:\Program Files\Protector Suite\psqlpwd.dll (Authentec Inc.)
HKU\.DEFAULT\...\Run: [OKAYFREEDOM_Agent] => "C:\Program Files (x86)\OkayFreedom\OkayFreedomClient.exe" -agent
HKU\S-1-5-21-3786530795-813635038-3550015045-500\...\Run: [C:\Program Files (x86)\NetMeter\NetMeter.exe] => C:\Program Files (x86)\NetMeter\NetMeter.exe [293888 2009-08-09] ()
HKU\S-1-5-21-3786530795-813635038-3550015045-500\...\MountPoints2: {1f320137-84ee-11e2-be72-806e6f6e6963} - "E:\autorun.exe"
AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [166568 2014-06-13] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [146480 2014-06-13] (NVIDIA Corporation)
Lsa: [Notification Packages] scecli C:\Program Files\Protector Suite\psqlpwd.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)
Startup: C:\Users\Marcel-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 2050 J510 series.lnk
ShortcutTarget: Tintenwarnungen überwachen - HP Deskjet 2050 J510 series.lnk -> C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
Startup: C:\Users\Marcel-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\uiStub.exe - Verknüpfung.lnk
ShortcutTarget: uiStub.exe - Verknüpfung.lnk -> C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\uiStub.exe (No File)
ShellIconOverlayIdentifiers:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
ShellIconOverlayIdentifiers:  SkyDrivePro1 (ErrorConflict) -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers:  SkyDrivePro2 (SyncInProgress) -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers:  SkyDrivePro3 (InSync) -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: ShareOverlay -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
ShellIconOverlayIdentifiers: UEAFOverlay -> {F2F31467-B1AC-4df0-AE79-FD5FA085E22B} => C:\Program Files\Protector Suite\farchns.dll (Authentec Inc.)
ShellIconOverlayIdentifiers: UEAFOverlayOpen -> {A3E208F7-0E3A-4182-A7A6-B169D5D691AA} => C:\Program Files\Protector Suite\farchns.dll (Authentec Inc.)
ShellIconOverlayIdentifiers-x32:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers-x32:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers-x32:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
ShellIconOverlayIdentifiers-x32:  SkyDrivePro1 (ErrorConflict) -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32:  SkyDrivePro2 (SyncInProgress) -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32:  SkyDrivePro3 (InSync) -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: ShareOverlay -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)

==================== Internet (Whitelisted) ====================

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPNTDFJS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPNTDFJS
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM - {F4FB02E6-D448-4915-9B53-67D5766FFFFA} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL =
SearchScopes: HKCU - {F4FB02E6-D448-4915-9B53-67D5766FFFFA} URL =
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation)
BHO: RoboForm Toolbar Helper - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_64.dll (IvoSoft)
BHO-x32: No Name - {206E52E0-D52E-11D4-AD54-0000E86C26F6} - C:\Program Files (x86)\FreshDevices\FreshDownload\fdcatch.dll (FreshDevices Corp.)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: RoboForm Toolbar Helper - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: No Name - {C4415769-1588-4AD6-9624-B2E69DB78D1A} -  No File
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM - Steganos Password Manager Toolbar - {9C65D12D-CF9D-454D-8049-61965D8C6FFF} - C:\Program Files (x86)\Steganos Privacy Suite 14\SPMIEToolbar64.dll (Steganos Software GmbH)
Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
Toolbar: HKLM-x32 - FreshDownload Bar - {ED0E8CA5-42FB-4B18-997B-769E0408E79D} - C:\Program Files (x86)\FreshDevices\FreshDownload\fdiebar.dll (FreshDevices Corp.)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Steganos Password Manager Toolbar - {9C65D12D-CF9D-454D-8049-61965D8C6FFF} - C:\Program Files (x86)\Steganos Privacy Suite 14\SPMIEToolbar.dll (Steganos Software GmbH)
Toolbar: HKLM-x32 - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1209149.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @authentec.com/ffwloplugin - C:\Program Files (x86)\HP SimplePass\npffwloplugin.dll ( HP)
FF Plugin-x32: @gametap.com/npdd,version=1.0 - C:\Program Files (x86)\Downloader\npdd.dll (Metaboli)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF [2013-12-26]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn [2014-07-13]
FF HKLM-x32\...\Firefox\Extensions: [{00F0643E-B367-4779-B45D-7046EBA37A88}] - C:\Program Files (x86)\Steganos Privacy Suite 14\spmplugin3
FF Extension: Steganos Password Manager - C:\Program Files (x86)\Steganos Privacy Suite 14\spmplugin3 [2014-01-10]
FF HKLM-x32\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox
FF Extension: RoboForm Toolbar for Firefox - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox [2014-02-05]

Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR Extension: (Google Docs) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-05-06]
CHR Extension: (Google Drive) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-06]
CHR Extension: (YouTube) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-06]
CHR Extension: (Adblock Plus) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-06-06]
CHR Extension: (Search) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-06]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2014-05-06]
CHR Extension: (Website Logon) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\kanflfepiobnpjbljmngfgegijhdpljm [2014-05-06]
CHR Extension: (Norton Identity Protection) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2014-05-12]
CHR Extension: (Google Wallet) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-06]
CHR Extension: (Google Mail) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-06]
CHR Extension: (RoboForm) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnlccmojcmeohlpggmfnbbiapkmbliob [2014-05-06]
CHR HKLM-x32\...\Chrome\Extension: [hdokiejnpimakedhajhdlcegeplioahd] - C:\Program Files (x86)\LastPass\lpchrome.crx [2013-07-29]
CHR HKLM-x32\...\Chrome\Extension: [kanflfepiobnpjbljmngfgegijhdpljm] - C:\Program Files (x86)\HP SimplePass\tschrome.crx [2013-04-01]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\Exts\Chrome.crx [2014-05-23]
CHR HKLM-x32\...\Chrome\Extension: [pnlccmojcmeohlpggmfnbbiapkmbliob] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Chrome\rf-chrome.crx [2014-02-05]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2014-07-04] () [File not signed]
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-07-17] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-07-17] (BlueStack Systems, Inc.)
R2 ClassicShellService; C:\Program Files\Classic Shell\ClassicShellService.exe [68608 2013-06-29] (IvoSoft) [File not signed]
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [241776 2013-01-28] (CyberLink)
R2 Connectify; C:\Program Files (x86)\Connectify\ConnectifyService.exe [487936 2013-12-23] (Connectify) [File not signed]
R2 CronService; C:\Prey\platform\windows\cronsvc.exe [23552 2013-05-08] (Fork Ltd.) [File not signed]
R2 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [3128856 2012-02-28] (devolo AG)
S3 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\DfsdkS64.exe [544768 2009-08-24] (mst software GmbH, Germany) [File not signed]
S4 EBOOSTRSVC; C:\Program Files\eBoostr\EBstrSvc.exe [814328 2012-04-17] (eBoostr.com)
R2 FPLService; C:\Program Files (x86)\HP SimplePass\TrueSuiteService.exe [1641768 2013-06-07] (HP)
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [86528 2012-09-27] (Hewlett-Packard Company) [File not signed]
R2 HPConnectedRemote; C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe [38712 2013-01-10] (Hewlett-Packard)
R3 ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2012-02-01] (Intel Corporation) [File not signed]
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-05-09] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-05-09] (Intel Corporation)
S4 lansweeperservice; C:\Program Files (x86)\Lansweeper\Service\Lansweeperservice.exe [8115200 2013-12-12] (Lansweeper) [File not signed]
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\NIS.exe [276376 2014-05-11] (Symantec Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21009352 2014-04-30] (NVIDIA Corporation)
S3 OpenVPNService; C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe [14848 2011-12-15] () [File not signed]
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2013-12-29] ()
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013.SP5\RpcAgentSrv.exe [72344 2008-11-25] (SiSoftware) [File not signed]
S4 SBUpd; C:\Program Files\Common Files\SpeedBit\SBUpdate\sbu.exe [2541688 2014-03-04] (Speedbit Ltd.)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia)
S2 sfrem01; C:\Windows\system32\sfrem01.exe [601208 2006-07-05] (Protection Technology (StarForce))
S4 SolutoLauncherService; C:\Program Files\Soluto\SolutoLauncherService.exe [221728 2013-08-17] (Soluto)
S4 SolutoRemoteService; C:\Program Files\Soluto\SolutoRemoteService.exe [1942528 2013-08-17] (GlavSoft LLC.) [File not signed]
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [333824 2013-06-03] (IDT, Inc.) [File not signed]
R2 Steganos Volatile Disk; C:\WINDOWS\SysWOW64\STGRAMDiskHandler64.exe [450560 2013-07-17] (Softwareentwicklung Remus - ArchiCrypt) [File not signed]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 TrueService; C:\Program Files\Common Files\AuthenTec\TrueService.exe [401856 2013-01-07] (AuthenTec, Inc.)
S4 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [28160 2012-09-06] () [File not signed]
S4 VideoAcceleratorService; C:\Program Files (x86)\SpeedBit Video Accelerator\VideoAcceleratorService.exe [298152 2014-03-04] (SPEEDbit)
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2013-11-24] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
S2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [18384 2013-09-04] (Intel(R) Corporation)
S2 BetterMarkIt; C:\Program Files (x86)\bettermarkit\BetterMarkIt153.exe [X]
S4 LavasoftAdAwareService11; "C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5152.0\AdAwareService.exe" [X]
S4 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [X]

==================== Drivers (Whitelisted) ====================

S3 AIDA64Driver; C:\Program Files (x86)\FinalWire\AIDA64 Extreme\kerneld.x64 [34136 2014-02-11] ()
R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20140703.001\BHDrvx64.sys [1530160 2014-05-10] (Symantec Corporation)
S2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-07-17] (BlueStack Systems)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1503000.00C\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R1 cnnctfy3; C:\Windows\system32\DRIVERS\cnnctfy3.sys [35352 2014-01-10] (Connectify)
R0 eBoost; C:\Windows\System32\drivers\eBoost.sys [189816 2012-04-17] (eBoostr.com)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [486192 2014-06-11] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142128 2014-06-11] (Symantec Corporation)
S3 FreshIO; C:\Program Files (x86)\FreshDevices\FreshDiagnose\FreshIO.sys [2410 2004-10-26] () [File not signed]
S3 fwdrv; C:\Windows\system32\DRIVERS\fwdrv.sys [26320 2012-12-14] (Web Solution Mart)
S3 hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [46136 2013-07-03] (LogMeIn Inc.)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20140711.001\IDSvia64.sys [525016 2014-07-03] (Symantec Corporation)
R2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [26328 2013-07-23] (Intel Corporation)
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115600 2010-01-29] (EZB Systems, Inc.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-13] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2014-05-12] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-08-27] (Intel Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140712.002\ENG64.SYS [126040 2014-07-04] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140712.002\EX64.SYS [2099288 2014-07-04] (Symantec Corporation)
R1 networx; C:\Windows\System32\drivers\networx.sys [43512 2013-10-21] (NetFilterSDK.com)
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2012-01-31] (CACE Technologies)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19744 2014-04-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia)
S3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [47632 2013-04-29] (Panda Security, S.L.)
S3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [273040 2013-07-30] (Realtek Semiconductor Corp.)
R3 rtbth; C:\Windows\System32\drivers\rtbth.sys [1204424 2014-01-30] (Ralink Technology, Corp.)
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013.SP5\WNt500x64\Sandra.sys [23112 2009-08-07] (SiSoftware)
S3 SBUpdd; C:\Program Files\Common Files\SpeedBit\SBUpdate\sbw.sys [41368 2014-03-04] ()
R0 sfdrv01a; C:\Windows\System32\drivers\sfdrv01a.sys [77432 2009-02-03] (Protection Technology (StarForce))
R0 sfvfs02; C:\Windows\System32\drivers\sfvfs02.sys [107384 2007-02-08] (Protection Technology (StarForce))
R1 SLEE_18_DRIVER; C:\WINDOWS\Sleen1864.sys [109144 2013-11-18] (Softwareentwicklung Remus - ArchiCrypt - )
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [41272 2012-09-15] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-09-15] (Synaptics Incorporated)
R1 SRTSP; C:\Windows\System32\Drivers\NISx64\1503000.00C\SRTSP64.SYS [875736 2014-02-13] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1503000.00C\SRTSPX64.SYS [36952 2013-09-10] (Symantec Corporation)
R1 STGMFEngine64; C:\WINDOWS\system32\drivers\STGMFEngine64.sys [28576 2013-07-17] (Softwareentwicklung Remus - ArchiCrypt.com)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1503000.00C\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1503000.00C\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NISx64\1503000.00C\SymELAM.sys [23568 2013-09-10] (Symantec Corporation)
R3 SymEvent; C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-12-26] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1503000.00C\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1503000.00C\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation)
S3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [329800 2013-07-17] (BitDefender S.R.L.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
S3 WinRing0_1_2_0; C:\Program Files (x86)\BatteryCare\WinRing0x64.sys [14544 2008-07-26] (OpenLibSys.org)
R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2012-08-31] (Hewlett-Packard Development Company, L.P.)
S3 ALSysIO; \??\C:\Users\Marcel-\AppData\Local\Temp\ALSysIO64.sys [X]
S3 BtAudioBusSrv; \SystemRoot\System32\Drivers\BtAudioBus.sys [X]
S3 BthL2caScoIfSrv; \SystemRoot\System32\Drivers\BtL2caScoIf.sys [X]
S3 btUrbFilterDrv; \SystemRoot\System32\Drivers\IvtUrbBtFlt.sys [X]
S3 cpuz136; \??\C:\WINDOWS\TEMP\cpuz136\cpuz136_x64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-13 12:12 - 2014-07-13 12:13 - 00043144 _____ () C:\Users\Administrator\Downloads\FRST.txt
2014-07-13 12:07 - 2014-07-13 12:07 - 02086912 _____ (Farbar) C:\Users\Administrator\Downloads\FRST64.exe
2014-07-13 12:07 - 2014-07-13 12:07 - 00000000 ____D () C:\Users\Administrator\Downloads\FRST-OlderVersion
2014-07-12 15:00 - 2014-07-12 15:00 - 00000222 _____ () C:\Users\Administrator\Desktop\Arma 3.url
2014-07-12 14:48 - 2014-07-12 14:48 - 00000975 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-07-12 14:47 - 2014-07-12 14:47 - 01141680 _____ () C:\Users\Administrator\Downloads\SteamSetup.exe
2014-07-12 12:16 - 2014-07-12 12:16 - 00000622 _____ () C:\Users\Administrator\Desktop\JRT.txt
2014-07-12 12:07 - 2014-07-12 12:07 - 00035171 _____ () C:\Users\Administrator\Desktop\mbam.txt
2014-07-12 11:38 - 2014-07-13 11:52 - 00000000 ____D () C:\AdwCleaner
2014-07-12 11:31 - 2014-07-13 12:03 - 00122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-07-12 11:30 - 2014-07-12 11:30 - 01348263 _____ () C:\Users\Administrator\Downloads\adwcleaner_3.215.exe
2014-07-12 11:30 - 2014-07-12 11:30 - 00001130 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-07-12 11:30 - 2014-07-12 11:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-07-12 11:30 - 2014-07-12 11:30 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-12 11:30 - 2014-07-12 11:30 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-07-12 11:30 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-07-12 11:30 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-07-12 11:30 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-07-12 11:29 - 2014-07-12 11:29 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Administrator\Downloads\mbam-setup-2.0.2.1012 (2).exe
2014-07-12 11:28 - 2014-07-12 11:28 - 00001111 _____ () C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2014-07-12 11:28 - 2014-07-12 11:28 - 00000000 ____D () C:\Users\Administrator\AppData\Local\VS Revo Group
2014-07-12 11:28 - 2009-12-30 10:21 - 00031800 _____ (VS Revo Group) C:\WINDOWS\system32\Drivers\revoflt.sys
2014-07-12 11:27 - 2014-07-12 11:27 - 10619688 _____ (VS Revo Group ) C:\Users\Administrator\Downloads\RevoUninProSetup.exe
2014-07-12 11:16 - 2014-07-12 11:16 - 00001298 _____ () C:\Users\Administrator\Desktop\Revo Uninstaller.lnk
2014-07-12 11:14 - 2014-07-12 11:14 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Administrator\Downloads\revosetup95.exe
2014-07-11 15:48 - 2014-07-11 15:50 - 01269712 _____ () C:\WINDOWS\Minidump\071114-48718-01.dmp
2014-07-11 13:21 - 2014-07-11 13:21 - 00094121 _____ () C:\Users\Administrator\Downloads\Addition.txt
2014-07-11 13:05 - 2014-07-11 13:05 - 00854390 _____ () C:\Users\Administrator\Downloads\SecurityCheck.exe
2014-07-10 23:56 - 2014-07-10 23:56 - 00019178 _____ () C:\Users\Administrator\Downloads\Backup Hack.zip
2014-07-10 23:56 - 2014-07-10 23:56 - 00019178 _____ () C:\Users\Administrator\Downloads\Backup Hack (1).zip
2014-07-10 23:08 - 2014-07-10 23:08 - 01016261 _____ (Thisisu) C:\Users\Administrator\Downloads\JRT (1).exe
2014-07-10 22:49 - 2014-07-10 22:49 - 00020597 _____ () C:\Users\Administrator\Downloads\FRST.rar
2014-07-10 22:31 - 2014-07-10 22:31 - 00380416 _____ () C:\Users\Administrator\Downloads\Gmer-19357.exe
2014-07-10 22:19 - 2014-07-10 22:19 - 00000488 _____ () C:\Users\Administrator\Downloads\defogger_disable.log
2014-07-10 22:19 - 2014-07-10 22:19 - 00000000 _____ () C:\Users\Administrator\defogger_reenable
2014-07-10 22:18 - 2014-07-10 22:18 - 00050477 _____ () C:\Users\Administrator\Downloads\Defogger.exe
2014-07-10 22:13 - 2014-07-10 22:13 - 00961360 _____ (Chip Digital GmbH) C:\Users\Administrator\Downloads\HijackThis - CHIP-Installer.exe
2014-07-10 21:58 - 2014-07-10 21:58 - 28013520 _____ (Wireshark development team) C:\Users\Administrator\Downloads\Wireshark-win64-1.10.8.exe
2014-07-09 20:03 - 2014-07-09 20:03 - 07719416 _____ (devolo AG) C:\Users\Administrator\Downloads\software-dlan-500-av-wireless-plus-v3-0-0-firmware-updater.exe
2014-07-09 19:56 - 2014-07-09 19:56 - 00002030 _____ () C:\Users\Public\Desktop\devolo dLAN Cockpit.lnk
2014-07-09 19:56 - 2014-07-09 19:56 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\de.devolo.dLAN.Cockpit
2014-07-09 19:56 - 2014-07-09 19:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\devolo
2014-07-09 19:55 - 2014-07-09 19:56 - 00000000 ____D () C:\Program Files (x86)\devolo
2014-07-09 13:32 - 2014-06-26 22:55 - 00703968 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-07-09 13:32 - 2014-06-26 22:55 - 00105440 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-09 13:23 - 2014-04-14 05:29 - 01018880 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2014-07-09 12:24 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-07-09 12:24 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-07-09 12:24 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-07-09 12:24 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-07-09 12:24 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-07-09 12:24 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-07-09 12:24 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-07-09 12:24 - 2014-06-19 01:46 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-07-09 12:24 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-07-09 12:24 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-07-09 12:24 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-07-09 12:24 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-07-09 12:24 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-07-09 12:24 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-07-09 12:24 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-07-09 12:24 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-07-09 12:24 - 2014-06-19 00:57 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-07-09 12:24 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-07-09 12:24 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-07-09 12:24 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-07-09 12:24 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-07-09 12:24 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-07-09 12:24 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-07-09 12:24 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-07-09 12:24 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-07-09 12:24 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-07-09 12:24 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-07-09 12:24 - 2014-06-17 00:26 - 00779264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osk.exe
2014-07-09 12:24 - 2014-06-17 00:24 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2014-07-09 12:24 - 2014-06-06 16:20 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-07-09 12:24 - 2014-06-06 15:04 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2014-07-09 12:24 - 2014-06-06 14:18 - 00488960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2014-07-09 12:24 - 2014-05-30 05:03 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2014-07-09 12:24 - 2014-05-29 14:02 - 00565576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-07-09 12:24 - 2014-05-29 09:55 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-07-09 12:24 - 2014-05-29 08:40 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-07-09 12:24 - 2014-05-29 08:37 - 00436224 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2014-07-09 12:24 - 2014-05-29 07:34 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2014-07-09 12:24 - 2014-05-29 07:27 - 01417216 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-07-09 12:23 - 2014-05-31 12:07 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-07-09 12:23 - 2014-05-31 12:06 - 00555736 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2014-07-09 12:23 - 2014-05-31 05:40 - 13287936 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-07-09 12:23 - 2014-05-31 05:30 - 11792384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-07-09 12:23 - 2014-05-31 05:12 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-09 12:23 - 2014-05-31 05:06 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-07-09 12:23 - 2014-05-31 05:03 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-07-09 12:23 - 2014-05-31 05:01 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-09 12:23 - 2014-05-31 04:56 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-07-09 12:23 - 2014-05-31 04:54 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-07-09 12:23 - 2014-05-31 04:48 - 03463680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-07-09 12:23 - 2014-05-31 04:37 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-07-09 12:23 - 2014-05-31 04:36 - 00923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-07-09 12:23 - 2014-05-31 04:35 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2014-07-09 12:23 - 2014-05-31 04:32 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-07-08 21:22 - 2014-07-08 21:22 - 00001147 _____ () C:\Users\Administrator\Desktop\FreePortScanner.lnk
2014-07-08 21:22 - 2014-07-08 21:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreePortScanner
2014-07-08 21:22 - 2014-07-08 21:22 - 00000000 ____D () C:\Program Files (x86)\Nsasoft
2014-07-08 21:18 - 2014-07-08 21:18 - 00598416 _____ (Nsasoft LLC. ) C:\Users\Administrator\Downloads\free-port-scanner_10262.exe
2014-07-08 11:51 - 2014-07-08 11:51 - 01017285 _____ () C:\Users\Administrator\Downloads\ARMA III Alpha Super L33T Menu 4.7 SPJESTER_[www.unknowncheats.me]_.zip
2014-07-07 22:34 - 2014-07-07 22:34 - 00019761 _____ () C:\Users\Administrator\Downloads\313_mpgh.net.rar
2014-07-07 22:34 - 2014-07-04 21:48 - 00219645 _____ () C:\Users\Administrator\Desktop\313.sqf
2014-07-07 19:03 - 2014-07-07 19:40 - 00000527 _____ () C:\Users\Administrator\Documents\arma3.CT
2014-07-07 18:59 - 2014-07-07 18:59 - 00001107 _____ () C:\Users\Administrator\Desktop\Cheat Engine.lnk
2014-07-07 18:59 - 2014-07-07 18:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.4
2014-07-07 18:59 - 2014-07-07 18:59 - 00000000 ____D () C:\Program Files (x86)\Cheat Engine 6.4
2014-07-07 18:53 - 2014-07-07 18:53 - 09052432 _____ (Cheat Engine ) C:\Users\Administrator\Downloads\CheatEngine64.exe
2014-07-07 18:46 - 2014-07-07 18:46 - 00017100 _____ () C:\Users\Administrator\Downloads\_src.zip
2014-07-07 17:09 - 2014-07-07 17:11 - 00000000 ____D () C:\Program Files (x86)\Quick Memory Editor
2014-07-07 17:09 - 2014-07-07 17:09 - 02125503 _____ (softcows.com ) C:\Users\Administrator\Downloads\Quick Memory Editor.exe
2014-07-07 17:09 - 2014-07-07 17:09 - 00001111 _____ () C:\Users\Marcel-\Desktop\Quick Memory Editor.lnk
2014-07-07 17:09 - 2014-07-07 17:09 - 00001111 _____ () C:\Users\Administrator\Desktop\Quick Memory Editor.lnk
2014-07-07 17:09 - 2014-07-07 17:09 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Quick Memory Editor
2014-07-07 17:09 - 2014-07-07 17:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Quick Memory Editor
2014-07-05 13:52 - 2014-07-05 13:52 - 00002317 _____ () C:\Users\Administrator\Downloads\DayZ Mod & SA ammo Values by ThirtySix.txt
2014-07-04 17:51 - 2014-07-05 13:22 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-07-04 17:51 - 2014-07-05 13:22 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-07-04 17:50 - 2014-06-13 04:11 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2014-07-04 17:50 - 2014-06-13 04:11 - 00062808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2014-07-04 17:44 - 2014-06-13 04:59 - 01890264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6434043.dll
2014-07-04 17:44 - 2014-06-13 04:59 - 01542088 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6434043.dll
2014-07-04 17:44 - 2014-06-13 04:59 - 00026353 _____ () C:\WINDOWS\system32\nvinfo.pb
2014-07-04 17:44 - 2014-06-13 04:48 - 13911928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 13824408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 11272544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 11211224 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 04248520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 03989464 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 00946120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 00909256 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 00902616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 00869336 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 00391456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2014-07-04 17:44 - 2014-06-13 04:48 - 00348120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 31512352 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 24198616 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 18625768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 17553032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 16122344 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 14497528 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 12860888 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2014-07-04 17:44 - 2014-06-13 04:47 - 00502048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 00417568 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2014-07-04 17:44 - 2014-06-13 04:47 - 00033736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys
2014-07-04 17:44 - 2014-06-13 04:46 - 22994392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2014-07-04 17:44 - 2014-06-13 04:46 - 15294296 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2014-07-04 17:44 - 2014-06-13 04:46 - 02814120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2014-07-04 17:44 - 2014-06-13 04:46 - 00965312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2014-07-04 17:44 - 2014-06-13 04:46 - 00846832 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2014-07-04 17:44 - 2014-06-13 04:46 - 00354016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2014-07-04 17:44 - 2014-06-13 04:46 - 00305600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2014-07-04 17:44 - 2014-06-13 04:46 - 00166568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2014-07-04 17:44 - 2014-06-13 04:46 - 00146480 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2014-07-04 17:44 - 2014-06-13 04:45 - 03196304 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2014-07-04 15:23 - 2014-07-04 15:23 - 00000000 ____D () C:\Program Files\Lavasoft
2014-07-04 15:23 - 2014-07-04 15:23 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft
2014-07-04 15:01 - 2014-07-04 15:01 - 00000000 ____D () C:\WINDOWS\Panther
2014-07-04 14:55 - 2014-07-04 14:55 - 00000842 _____ () C:\WINDOWS\setupact.log
2014-07-04 14:55 - 2014-07-04 14:55 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-07-04 14:35 - 2014-07-04 14:35 - 00002263 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (6).lnk
2014-07-04 14:30 - 2014-07-04 14:30 - 00000000 ____D () C:\Users\Administrator\AppData\Local\NPE
2014-07-04 12:39 - 2014-07-04 12:39 - 03081712 ____N (Symantec Corporation) C:\Users\Administrator\Downloads\NPE.exe
2014-07-04 12:32 - 2014-07-04 12:32 - 00002263 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (5).lnk
2014-07-04 12:20 - 2014-07-04 12:20 - 00002263 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (4).lnk
2014-07-04 12:15 - 2014-07-04 12:37 - 00001436 _____ () C:\Users\Administrator\Desktop\Google Chrome.lnk
2014-07-04 12:15 - 2014-07-04 12:15 - 00002299 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (3).lnk
2014-07-04 12:15 - 2014-07-04 12:15 - 00002299 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (2).lnk
2014-07-04 12:15 - 2014-07-04 12:15 - 00001079 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-07-04 12:15 - 2014-07-04 12:15 - 00001023 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-04 12:13 - 2014-05-09 01:06 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2014-07-04 12:12 - 2014-07-05 13:41 - 00000000 ____D () C:\Users\Administrator\AppData\Local\LogMeIn Rescue Applet
2014-07-04 12:12 - 2014-07-04 12:12 - 00002299 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec.lnk
2014-07-04 12:06 - 2014-04-18 10:21 - 01126912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-07-04 12:06 - 2014-04-18 10:09 - 08652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-07-04 12:06 - 2014-04-18 09:51 - 00836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-07-04 12:06 - 2014-04-18 09:49 - 05833216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-07-04 12:06 - 2014-04-06 18:31 - 21268952 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-07-04 12:06 - 2014-04-06 18:20 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-07-04 12:06 - 2014-04-06 17:22 - 18755672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-07-04 12:06 - 2014-04-06 13:55 - 16872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-07-04 12:06 - 2014-04-06 13:54 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-07-04 12:06 - 2014-04-06 12:52 - 00955904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-07-04 12:06 - 2014-04-06 12:51 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-07-04 12:06 - 2014-04-06 12:37 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-07-04 12:06 - 2014-04-03 10:12 - 02124840 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2014-07-04 12:06 - 2014-04-03 05:53 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2014-07-04 12:06 - 2014-04-03 04:53 - 04269056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-07-04 12:06 - 2014-03-31 07:42 - 07425368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-07-04 12:06 - 2014-03-31 00:54 - 01308160 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2014-07-04 12:06 - 2014-03-20 02:44 - 06645248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-07-04 12:06 - 2014-03-20 01:33 - 05774848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-07-04 12:06 - 2014-03-19 06:18 - 02688000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-07-04 12:06 - 2014-03-18 07:00 - 07173120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2014-07-04 12:06 - 2014-03-18 06:52 - 05104640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2014-07-04 12:05 - 2014-04-18 16:57 - 00032600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-07-04 12:05 - 2014-04-18 16:44 - 01466856 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-07-04 12:05 - 2014-04-18 15:29 - 01200288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-07-04 12:05 - 2014-04-18 11:44 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll
2014-07-04 12:05 - 2014-04-18 10:32 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-07-04 12:05 - 2014-04-14 11:20 - 00324888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2014-07-04 12:05 - 2014-04-14 10:01 - 00285144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2014-07-04 12:05 - 2014-04-11 08:13 - 01200128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2014-07-04 12:05 - 2014-04-11 06:51 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2014-07-04 12:05 - 2014-04-11 06:23 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2014-07-04 12:05 - 2014-04-11 05:30 - 00449536 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2014-07-04 12:05 - 2014-04-09 13:53 - 00337240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-07-04 12:05 - 2014-04-09 08:39 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll
2014-07-04 12:05 - 2014-04-09 07:44 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll
2014-07-04 12:05 - 2014-04-09 05:33 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2014-07-04 12:05 - 2014-04-08 04:01 - 00589656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2014-07-04 12:05 - 2014-04-06 18:34 - 00372568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2014-07-04 12:05 - 2014-04-06 18:34 - 00275800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2014-07-04 12:05 - 2014-04-06 18:32 - 00125496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2014-07-04 12:05 - 2014-04-06 18:30 - 00201920 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2014-07-04 12:05 - 2014-04-06 18:24 - 00360792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2014-07-04 12:05 - 2014-04-06 18:20 - 01403856 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 01379064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00881616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00765408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00609448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00491744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00467496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00463256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00364640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00244880 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-07-04 12:05 - 2014-04-06 18:20 - 00233912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-07-04 12:05 - 2014-04-06 18:20 - 00028408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2014-07-04 12:05 - 2014-04-06 17:23 - 00098584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2014-07-04 12:05 - 2014-04-06 17:22 - 00178184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 01209616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 00707048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 00669856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 00518544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 00406504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 00387896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-07-04 12:05 - 2014-04-06 17:16 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-07-04 12:05 - 2014-04-06 14:51 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2014-07-04 12:05 - 2014-04-06 14:33 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-07-04 12:05 - 2014-04-06 13:26 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2014-07-04 12:05 - 2014-04-06 13:01 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-07-04 12:05 - 2014-04-06 12:36 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2014-07-04 12:05 - 2014-04-06 12:05 - 01222656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-07-04 12:05 - 2014-04-06 11:59 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2014-07-04 12:05 - 2014-04-03 10:12 - 00307304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2014-07-04 12:05 - 2014-04-03 10:12 - 00130144 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2014-07-04 12:05 - 2014-04-03 06:03 - 00230808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2014-07-04 12:05 - 2014-04-03 06:03 - 00111528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpapi.dll
2014-07-04 12:05 - 2014-04-03 04:53 - 00677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-07-04 12:05 - 2014-04-03 04:51 - 01584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2014-07-04 12:05 - 2014-04-03 04:23 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-07-04 12:05 - 2014-04-03 04:23 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tlscsp.dll
2014-07-04 12:05 - 2014-04-03 04:22 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\tlscsp.dll
2014-07-04 12:05 - 2014-04-01 08:23 - 00384856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-07-04 12:05 - 2014-03-31 02:41 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2014-07-04 12:05 - 2014-03-31 02:01 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2014-07-04 12:05 - 2014-03-31 01:43 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2014-07-04 12:05 - 2014-03-31 00:49 - 01287168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-07-04 12:05 - 2014-03-28 17:58 - 00407016 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2014-07-04 12:05 - 2014-03-27 08:16 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-07-04 12:05 - 2014-03-27 07:36 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2014-07-04 12:05 - 2014-03-27 06:59 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-07-04 12:05 - 2014-03-27 06:48 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2014-07-04 12:05 - 2014-03-27 06:19 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2014-07-04 12:05 - 2014-03-27 05:46 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2014-07-04 12:05 - 2014-03-27 05:15 - 00718336 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2014-07-04 12:05 - 2014-03-27 05:10 - 01436160 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2014-07-04 12:05 - 2014-03-25 00:58 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2014-07-04 12:05 - 2014-03-20 05:48 - 00263424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-07-04 12:05 - 2014-03-19 10:07 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-07-04 12:05 - 2014-03-18 10:19 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2014-07-04 12:05 - 2014-03-17 07:09 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-07-04 12:05 - 2014-03-17 06:11 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-07-04 12:05 - 2014-03-17 05:01 - 00486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2014-07-04 12:05 - 2014-03-17 04:47 - 01025024 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-07-04 12:05 - 2014-03-17 04:45 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2014-07-04 12:05 - 2014-03-14 08:26 - 00491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll
2014-07-04 12:05 - 2014-03-14 08:10 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll
2014-07-04 12:05 - 2014-03-06 14:42 - 00310616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-07-04 12:04 - 2014-04-06 14:58 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll
2014-07-04 12:04 - 2014-04-06 14:24 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2014-07-04 12:04 - 2014-04-06 14:06 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srclient.dll
2014-07-04 12:04 - 2014-04-06 13:20 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-07-04 12:04 - 2014-03-31 00:35 - 01029120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-07-04 12:04 - 2014-03-31 00:11 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-07-04 12:04 - 2014-03-30 23:47 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-07-04 12:04 - 2014-03-19 10:15 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-07-04 12:04 - 2014-03-19 09:24 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-07-04 12:04 - 2014-03-19 09:17 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2014-07-04 12:04 - 2014-03-19 08:36 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-07-04 12:04 - 2014-03-19 07:56 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-07-04 12:04 - 2014-03-19 07:45 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2014-07-04 12:04 - 2014-03-19 07:19 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-07-04 12:04 - 2014-03-19 07:07 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-07-04 12:04 - 2014-03-19 07:02 - 01527296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-07-04 12:04 - 2014-03-19 07:00 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2014-07-04 12:04 - 2014-03-19 06:51 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2014-07-04 12:04 - 2014-03-19 06:31 - 02100736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-07-04 12:01 - 2014-07-04 12:02 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Administrator\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-07-04 11:56 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-07-04 11:56 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-07-04 11:56 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe
2014-07-04 11:56 - 2014-05-01 15:31 - 03048904 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-07-04 11:56 - 2014-05-01 15:31 - 00055328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wpcfltr.sys
2014-07-04 11:56 - 2014-05-01 09:14 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2014-07-04 11:56 - 2014-05-01 09:05 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2014-07-04 11:56 - 2014-05-01 08:51 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2014-07-04 11:56 - 2014-05-01 07:24 - 02834944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll
2014-07-04 01:11 - 2014-07-04 01:11 - 00000000 _____ () C:\Recovery.txt
2014-07-03 23:39 - 2014-07-03 23:39 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Steganos
2014-07-03 23:39 - 2014-07-03 23:39 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Intel Corporation
2014-07-03 23:39 - 2014-07-03 23:39 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\CyberLink
2014-07-03 23:39 - 2014-07-03 23:39 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Adobe
2014-07-03 23:38 - 2014-07-03 23:38 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Synaptics
2014-07-03 23:38 - 2014-07-03 23:38 - 00000000 ____D () C:\Users\Gast\AppData\Local\Adobe
2014-07-03 22:58 - 2014-07-04 01:21 - 00000000 ____D () C:\e6aaee25e6e797ecb198316b31d5ca
2014-07-03 22:36 - 2014-07-03 22:36 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Hewlett-Packard
2014-07-03 22:36 - 2014-07-03 22:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Power2Go8
2014-07-03 22:36 - 2014-07-03 22:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Hewlett-Packard
2014-07-03 22:36 - 2014-07-03 22:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-07-03 22:35 - 2014-07-04 01:20 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-03 22:35 - 2014-07-04 01:20 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-03 22:35 - 2014-07-04 01:20 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-03 22:35 - 2014-07-04 01:20 - 00000000 ____D () C:\Users\Gast
2014-07-03 22:35 - 2014-07-03 23:38 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Apple Computer
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Vorlagen
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Startmenü
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Netzwerkumgebung
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Lokale Einstellungen
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Eigene Dateien
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Druckumgebung
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Documents\Eigene Musik
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Documents\Eigene Bilder
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\AppData\Local\Verlauf
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\AppData\Local\Anwendungsdaten
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Anwendungsdaten
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 ____D () C:\Users\Gast\AppData\Local\NVIDIA Corporation
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 ____D () C:\Users\Gast\AppData\Local\NVIDIA
2014-07-03 22:35 - 2014-01-23 19:01 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Macromedia
2014-07-03 22:35 - 2013-11-24 17:07 - 00000000 ____D () C:\Users\Gast\Documents\hp.system.package.metadata
2014-07-03 22:35 - 2013-11-24 17:07 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\IObit
2014-07-03 22:35 - 2013-11-24 17:07 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Genie9
2014-07-03 22:35 - 2013-11-24 17:07 - 00000000 ____D () C:\Users\Gast\AppData\Local\Microsoft Help
2014-07-03 22:35 - 2013-11-24 17:07 - 00000000 ____D () C:\Users\Gast\AppData\Local\Apple Computer
2014-07-03 22:33 - 2014-07-03 22:33 - 00000095 _____ () C:\WINDOWS\general.log
2014-07-03 22:12 - 2012-10-15 13:23 - 00072154 _____ () C:\Users\Administrator\Desktop\procexp.chm
2014-07-03 22:10 - 2014-07-03 22:10 - 01243655 _____ () C:\Users\Administrator\Downloads\ProcessExplorer_16.02.zip
2014-07-03 22:10 - 2014-07-03 22:10 - 01243655 _____ () C:\Users\Administrator\Downloads\ProcessExplorer_16.02 (1).zip
2014-07-03 21:27 - 2014-07-03 21:28 - 00000000 ____D () C:\ProgramData\MicroWorld
2014-07-02 20:08 - 2014-07-02 20:08 - 00000222 _____ () C:\Users\Administrator\Desktop\Warface.url
2014-07-02 17:33 - 2014-07-04 01:20 - 00000000 ____D () C:\Users\Administrator\AppData\Local\MetaGeek,_LLC
2014-07-02 17:31 - 2014-07-02 17:31 - 00000000 ____D () C:\Program Files (x86)\MetaGeek
2014-07-02 14:58 - 2014-07-02 15:00 - 104857600 _____ () C:\Users\Administrator\Downloads\1370091038249.rar
2014-07-01 15:26 - 2014-07-04 17:35 - 00000000 ____D () C:\Users\Administrator\Documents\DayZ
2014-07-01 15:26 - 2014-07-01 17:20 - 00000000 ____D () C:\Users\Administrator\AppData\Local\DayZ
2014-07-01 13:55 - 2014-07-04 01:49 - 00000000 ____D () C:\Users\Administrator\AppData\Local\BrowseEmAll
2014-07-01 13:35 - 2014-07-01 13:36 - 00000658 _____ () C:\WINDOWS\ie7_main.log
2014-07-01 13:35 - 2014-07-01 13:35 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Mozilla
2014-07-01 13:35 - 2014-07-01 13:35 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Mozilla
2014-07-01 13:35 - 2014-07-01 13:35 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Macromedia
2014-07-01 12:31 - 2014-07-01 12:31 - 04229130 _____ () C:\Users\Administrator\Downloads\dsl_803a_752dpw_fw_30.05.219-20121116.bin
2014-07-01 12:29 - 2014-07-01 12:29 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Skype
2014-06-29 14:27 - 2014-06-29 14:27 - 00008446 _____ () C:\Users\Administrator\Downloads\GimmeMoarFrames-master.zip
2014-06-29 14:13 - 2014-06-29 14:13 - 00008195 _____ () C:\Users\Administrator\Downloads\ArmA3mark_28082013.zip (1).7z
2014-06-26 19:56 - 2014-06-27 23:05 - 00000000 ____D () C:\Users\Administrator\Desktop\PDAY+17Tr-LNG_v22.1
2014-06-26 17:23 - 2014-06-26 17:23 - 00000000 ____D () C:\Users\Administrator\Documents\7 Days To Die
2014-06-26 13:53 - 2014-06-26 13:53 - 00328420 _____ () C:\Users\Administrator\Downloads\PAYDAY 2 - Ultimate Trainer v3.0 (Hack&Dev, PierreDjays)_[www.unknowncheats.me]_.rar
2014-06-26 13:48 - 2014-06-26 13:48 - 00337186 _____ () C:\Users\Administrator\Downloads\superficialsuitev26_[www.unknowncheats.me]_.zip
2014-06-26 13:44 - 2014-06-26 13:45 - 16392851 _____ () C:\Users\Administrator\Downloads\PPv15R_[www.unknowncheats.me]_.rar
2014-06-26 13:42 - 2014-06-26 13:42 - 00293691 _____ () C:\Users\Administrator\Downloads\Pay Day 2 Level Hack_[www.unknowncheats.me]_.rar
2014-06-26 13:37 - 2014-06-26 13:37 - 00358029 _____ () C:\Users\Administrator\Downloads\Stealth Suite v0.4_[www.unknowncheats.me]_.rar
2014-06-26 00:54 - 2014-06-26 00:54 - 02521973 _____ () C:\Users\Administrator\Downloads\PDAY+17Tr-LNG_v30.2.rar
2014-06-25 22:50 - 2014-06-25 22:51 - 02463584 _____ () C:\Users\Administrator\Downloads\PDAY+17Tr-LNG_v22.1.rar
2014-06-25 22:28 - 2014-06-25 22:28 - 00304852 _____ () C:\Users\Administrator\Desktop\InjectorPack_[www.unknowncheats.me]_.rar.mwt
2014-06-25 22:27 - 2014-06-25 22:27 - 00328420 _____ () C:\Users\Administrator\Desktop\PAYDAY 2 - Ultimate Trainer v3.0 (Hack&Dev, PierreDjays)_[www.unknowncheats.me]_.rar
2014-06-25 22:23 - 2014-06-25 22:24 - 16392851 _____ () C:\Users\Administrator\Desktop\PPv15R_[www.unknowncheats.me]_.rar
2014-06-25 21:15 - 2014-06-25 22:30 - 00000000 ____D () C:\Users\Administrator\AppData\Local\PAYDAY 2
2014-06-24 16:44 - 2014-06-24 16:44 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Quadriga Games
2014-06-23 16:36 - 2014-06-23 16:36 - 00382459 _____ () C:\Users\Administrator\Downloads\housing.rar
2014-06-23 15:51 - 2014-06-23 15:51 - 00453232 _____ () C:\Users\Administrator\Downloads\CBA_A3_RC1.zip
2014-06-23 15:51 - 2014-06-23 15:51 - 00001682 _____ () C:\Users\Administrator\Downloads\@DEditor_v12.rar
2014-06-23 14:55 - 2014-06-23 14:55 - 00005367 _____ () C:\Users\Administrator\Downloads\@101_editor_vv1.14.0601.rar
2014-06-23 14:00 - 2014-06-23 14:00 - 07563927 _____ () C:\Users\Administrator\Downloads\@mcc_sandbox_r5.rar
2014-06-23 13:59 - 2014-06-23 13:59 - 01413902 _____ () C:\Users\Administrator\Downloads\sample missions.rar
2014-06-21 22:07 - 2014-06-21 22:08 - 22618750 _____ () C:\Users\Administrator\Downloads\MCaRMOD31.7z
2014-06-21 20:06 - 2014-06-21 20:11 - 16970521 _____ () C:\Users\Administrator\Downloads\@DAM.rar
2014-06-17 14:25 - 2014-07-04 12:32 - 00000000 ____D () C:\Users\Administrator\Desktop\11_files
2014-06-17 14:25 - 2014-06-17 14:25 - 00316184 _____ () C:\Users\Administrator\Desktop\11.htm
2014-06-16 15:45 - 2014-06-16 15:46 - 00000470 _____ () C:\Users\Administrator\Downloads\listen-dsl (1).asx
2014-06-16 11:52 - 2014-06-16 11:52 - 00000000 ____D () C:\WINDOWS\system32\Soluto
2014-06-15 14:41 - 2014-06-15 14:54 - 50377528 _____ () C:\Users\Administrator\Downloads\re2-1.0.7.7z.001
2014-06-15 12:40 - 2014-06-15 12:40 - 00000000 ____D () C:\Users\Administrator\.android
2014-06-15 10:49 - 2014-06-15 10:49 - 00000000 ____D () C:\Users\Administrator\VirtualBox VMs
2014-06-15 10:46 - 2014-06-15 15:52 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Genymobile
2014-06-15 10:45 - 2014-06-15 15:52 - 00000000 ____D () C:\Users\Administrator\.VirtualBox
2014-06-15 10:44 - 2014-06-15 10:44 - 00000000 ____D () C:\Program Files\Oracle
2014-06-15 10:42 - 2014-07-09 14:53 - 00001047 _____ () C:\Users\Public\Desktop\Genymotion.lnk
2014-06-15 10:42 - 2014-07-09 14:53 - 00001040 _____ () C:\Users\Public\Desktop\Genymotion Shell.lnk
2014-06-15 10:42 - 2014-07-04 01:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Genymotion
2014-06-15 10:42 - 2014-06-15 10:42 - 00000000 ____D () C:\Program Files\Genymobile
2014-06-15 10:28 - 2014-06-15 10:28 - 02321658 _____ () C:\Users\Administrator\Downloads\de.lotumlabs.questionsforfriendsnorth_quickdownload_330.apk
2014-06-15 10:26 - 2014-06-15 10:39 - 122656544 _____ (Genymobile ) C:\Users\Administrator\Downloads\genymotion-2.2.2-vbox.exe
2014-06-13 21:22 - 2014-06-13 21:22 - 03355384 _____ (Reincubate Ltd) C:\Users\Administrator\Downloads\iphonebackupextractor-latest.exe
2014-06-13 21:22 - 2014-06-13 21:22 - 00001346 _____ () C:\Users\Administrator\Desktop\iPhone Backup Extractor.lnk
2014-06-13 21:22 - 2014-06-13 21:22 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Reincubate
2014-06-13 21:22 - 2014-06-13 21:22 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Reincubate
2014-06-13 20:34 - 2014-07-04 01:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-06-13 20:34 - 2014-06-13 20:34 - 00001795 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-06-13 20:33 - 2014-06-13 20:34 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-06-13 20:33 - 2014-06-13 20:34 - 00000000 ____D () C:\Program Files\iTunes
2014-06-13 20:33 - 2014-06-13 20:34 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-06-13 20:33 - 2014-06-13 20:33 - 00000000 ____D () C:\Program Files\iPod
2014-06-13 20:24 - 2014-06-13 20:24 - 112616784 _____ (Apple Inc.) C:\Users\Administrator\Downloads\iTunes64Setup.exe
2014-06-13 00:55 - 2014-06-13 00:55 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\hpqlog
2014-06-13 00:34 - 2014-06-13 00:34 - 00000924 _____ () C:\Users\Administrator\Downloads\Downloads - Verknüpfung.lnk

95Marcel95 13.07.2014 11:29
FRST - Teil 2

Code:
==================== One Month Modified Files and Folders =======

2015-07-25 04:24 - 2013-08-21 22:41 - 00000000 ____D () C:\Users\Marcel-\Downloads\Guru3D.com
2014-07-13 12:13 - 2014-07-13 12:12 - 00043144 _____ () C:\Users\Administrator\Downloads\FRST.txt
2014-07-13 12:13 - 2014-05-20 19:55 - 01987962 _____ () C:\WINDOWS\WindowsUpdate.log
2014-07-13 12:12 - 2013-11-24 13:00 - 00000000 ____D () C:\FRST
2014-07-13 12:10 - 2013-07-29 16:37 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-07-13 12:09 - 2014-05-06 12:22 - 00003594 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3786530795-813635038-3550015045-500
2014-07-13 12:07 - 2014-07-13 12:07 - 02086912 _____ (Farbar) C:\Users\Administrator\Downloads\FRST64.exe
2014-07-13 12:07 - 2014-07-13 12:07 - 00000000 ____D () C:\Users\Administrator\Downloads\FRST-OlderVersion
2014-07-13 12:04 - 2013-09-30 06:14 - 01984420 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-07-13 12:04 - 2013-09-30 05:56 - 00843606 _____ () C:\WINDOWS\system32\perfh007.dat
2014-07-13 12:04 - 2013-09-30 05:56 - 00192300 _____ () C:\WINDOWS\system32\perfc007.dat
2014-07-13 12:03 - 2014-07-12 11:31 - 00122584 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-07-13 12:03 - 2014-02-08 23:20 - 00000406 _____ () C:\WINDOWS\Tasks\bettermarkit_wd.job
2014-07-13 12:03 - 2013-07-29 15:12 - 00001122 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-13 12:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-07-13 11:57 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-07-13 11:56 - 2014-03-30 18:58 - 05112912 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-07-13 11:55 - 2014-05-29 12:45 - 00061686 _____ () C:\WINDOWS\PFRO.log
2014-07-13 11:55 - 2013-08-20 16:40 - 00000000 ____D () C:\WINDOWS\Sun
2014-07-13 11:52 - 2014-07-12 11:38 - 00000000 ____D () C:\AdwCleaner
2014-07-13 11:52 - 2013-12-30 19:42 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-07-13 11:49 - 2013-07-29 15:12 - 00001126 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-13 11:35 - 2014-05-07 19:01 - 00003954 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{C9FAFC92-2B20-4764-8366-96A2BE62BCF4}
2014-07-13 11:19 - 2014-05-06 14:00 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\TS3Client
2014-07-12 19:09 - 2013-08-04 01:00 - 00000000 ____D () C:\Program Files (x86)\BlueStacks
2014-07-12 15:05 - 2014-05-06 12:26 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Arma 3
2014-07-12 15:00 - 2014-07-12 15:00 - 00000222 _____ () C:\Users\Administrator\Desktop\Arma 3.url
2014-07-12 15:00 - 2014-05-06 18:42 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-07-12 14:48 - 2014-07-12 14:48 - 00000975 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-07-12 14:47 - 2014-07-12 14:47 - 01141680 _____ () C:\Users\Administrator\Downloads\SteamSetup.exe
2014-07-12 13:15 - 2014-01-19 13:08 - 00000000 ____D () C:\Program Files (x86)\Casino
2014-07-12 12:16 - 2014-07-12 12:16 - 00000622 _____ () C:\Users\Administrator\Desktop\JRT.txt
2014-07-12 12:07 - 2014-07-12 12:07 - 00035171 _____ () C:\Users\Administrator\Desktop\mbam.txt
2014-07-12 12:06 - 2013-09-15 17:34 - 00000000 ____D () C:\Program Files (x86)\Pagealicious
2014-07-12 11:30 - 2014-07-12 11:30 - 01348263 _____ () C:\Users\Administrator\Downloads\adwcleaner_3.215.exe
2014-07-12 11:30 - 2014-07-12 11:30 - 00001130 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-07-12 11:30 - 2014-07-12 11:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-07-12 11:30 - 2014-07-12 11:30 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-12 11:30 - 2014-07-12 11:30 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-07-12 11:29 - 2014-07-12 11:29 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Administrator\Downloads\mbam-setup-2.0.2.1012 (2).exe
2014-07-12 11:28 - 2014-07-12 11:28 - 00001111 _____ () C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2014-07-12 11:28 - 2014-07-12 11:28 - 00000000 ____D () C:\Users\Administrator\AppData\Local\VS Revo Group
2014-07-12 11:28 - 2013-12-14 15:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2014-07-12 11:27 - 2014-07-12 11:27 - 10619688 _____ (VS Revo Group ) C:\Users\Administrator\Downloads\RevoUninProSetup.exe
2014-07-12 11:16 - 2014-07-12 11:16 - 00001298 _____ () C:\Users\Administrator\Desktop\Revo Uninstaller.lnk
2014-07-12 11:16 - 2013-11-23 00:24 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-07-12 11:14 - 2014-07-12 11:14 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Administrator\Downloads\revosetup95.exe
2014-07-12 10:56 - 2013-10-16 20:51 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-07-12 10:56 - 2013-08-01 19:39 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-11 15:50 - 2014-07-11 15:48 - 01269712 _____ () C:\WINDOWS\Minidump\071114-48718-01.dmp
2014-07-11 15:49 - 2014-05-06 12:14 - 00000000 ____D () C:\Users\Administrator
2014-07-11 15:48 - 2014-06-02 18:27 - 1036686094 _____ () C:\WINDOWS\MEMORY.DMP
2014-07-11 15:48 - 2014-05-09 15:42 - 00000000 ____D () C:\WINDOWS\Minidump
2014-07-11 13:21 - 2014-07-11 13:21 - 00094121 _____ () C:\Users\Administrator\Downloads\Addition.txt
2014-07-11 13:11 - 2013-12-30 19:42 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-07-11 13:05 - 2014-07-11 13:05 - 00854390 _____ () C:\Users\Administrator\Downloads\SecurityCheck.exe
2014-07-10 23:56 - 2014-07-10 23:56 - 00019178 _____ () C:\Users\Administrator\Downloads\Backup Hack.zip
2014-07-10 23:56 - 2014-07-10 23:56 - 00019178 _____ () C:\Users\Administrator\Downloads\Backup Hack (1).zip
2014-07-10 23:08 - 2014-07-10 23:08 - 01016261 _____ (Thisisu) C:\Users\Administrator\Downloads\JRT (1).exe
2014-07-10 22:49 - 2014-07-10 22:49 - 00020597 _____ () C:\Users\Administrator\Downloads\FRST.rar
2014-07-10 22:31 - 2014-07-10 22:31 - 00380416 _____ () C:\Users\Administrator\Downloads\Gmer-19357.exe
2014-07-10 22:19 - 2014-07-10 22:19 - 00000488 _____ () C:\Users\Administrator\Downloads\defogger_disable.log
2014-07-10 22:19 - 2014-07-10 22:19 - 00000000 _____ () C:\Users\Administrator\defogger_reenable
2014-07-10 22:18 - 2014-07-10 22:18 - 00050477 _____ () C:\Users\Administrator\Downloads\Defogger.exe
2014-07-10 22:13 - 2014-07-10 22:13 - 00961360 _____ (Chip Digital GmbH) C:\Users\Administrator\Downloads\HijackThis - CHIP-Installer.exe
2014-07-10 21:58 - 2014-07-10 21:58 - 28013520 _____ (Wireshark development team) C:\Users\Administrator\Downloads\Wireshark-win64-1.10.8.exe
2014-07-10 21:05 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-07-10 20:57 - 2014-06-08 11:48 - 00046080 ___SH () C:\Users\Administrator\Desktop\Thumbs.db
2014-07-10 20:52 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-07-10 20:45 - 2013-03-04 18:07 - 00000000 ____D () C:\Program Files (x86)\HP SimplePass
2014-07-09 20:15 - 2013-12-26 23:22 - 00000000 ____D () C:\WINDOWS\system32\Drivers\NISx64
2014-07-09 20:03 - 2014-07-09 20:03 - 07719416 _____ (devolo AG) C:\Users\Administrator\Downloads\software-dlan-500-av-wireless-plus-v3-0-0-firmware-updater.exe
2014-07-09 19:56 - 2014-07-09 19:56 - 00002030 _____ () C:\Users\Public\Desktop\devolo dLAN Cockpit.lnk
2014-07-09 19:56 - 2014-07-09 19:56 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\de.devolo.dLAN.Cockpit
2014-07-09 19:56 - 2014-07-09 19:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\devolo
2014-07-09 19:56 - 2014-07-09 19:55 - 00000000 ____D () C:\Program Files (x86)\devolo
2014-07-09 19:55 - 2014-05-06 12:15 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Adobe
2014-07-09 14:53 - 2014-06-15 10:42 - 00001047 _____ () C:\Users\Public\Desktop\Genymotion.lnk
2014-07-09 14:53 - 2014-06-15 10:42 - 00001040 _____ () C:\Users\Public\Desktop\Genymotion Shell.lnk
2014-07-09 14:53 - 2014-04-29 21:18 - 00001062 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2014-07-09 14:41 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-07-09 14:41 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-09 14:41 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-09 14:41 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-07-09 14:35 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-07-09 13:32 - 2014-01-15 21:44 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-07-09 13:32 - 2013-07-29 19:24 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-07-09 13:27 - 2013-07-29 19:24 - 96441528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-07-09 13:21 - 2013-09-30 05:59 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-09 00:37 - 2013-09-15 22:50 - 00000000 ____D () C:\Users\Marcel-\Desktop\Bilder
2014-07-08 21:22 - 2014-07-08 21:22 - 00001147 _____ () C:\Users\Administrator\Desktop\FreePortScanner.lnk
2014-07-08 21:22 - 2014-07-08 21:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreePortScanner
2014-07-08 21:22 - 2014-07-08 21:22 - 00000000 ____D () C:\Program Files (x86)\Nsasoft
2014-07-08 21:18 - 2014-07-08 21:18 - 00598416 _____ (Nsasoft LLC. ) C:\Users\Administrator\Downloads\free-port-scanner_10262.exe
2014-07-08 11:51 - 2014-07-08 11:51 - 01017285 _____ () C:\Users\Administrator\Downloads\ARMA III Alpha Super L33T Menu 4.7 SPJESTER_[www.unknowncheats.me]_.zip
2014-07-07 22:34 - 2014-07-07 22:34 - 00019761 _____ () C:\Users\Administrator\Downloads\313_mpgh.net.rar
2014-07-07 19:40 - 2014-07-07 19:03 - 00000527 _____ () C:\Users\Administrator\Documents\arma3.CT
2014-07-07 18:59 - 2014-07-07 18:59 - 00001107 _____ () C:\Users\Administrator\Desktop\Cheat Engine.lnk
2014-07-07 18:59 - 2014-07-07 18:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.4
2014-07-07 18:59 - 2014-07-07 18:59 - 00000000 ____D () C:\Program Files (x86)\Cheat Engine 6.4
2014-07-07 18:53 - 2014-07-07 18:53 - 09052432 _____ (Cheat Engine ) C:\Users\Administrator\Downloads\CheatEngine64.exe
2014-07-07 18:46 - 2014-07-07 18:46 - 00017100 _____ () C:\Users\Administrator\Downloads\_src.zip
2014-07-07 17:11 - 2014-07-07 17:09 - 00000000 ____D () C:\Program Files (x86)\Quick Memory Editor
2014-07-07 17:09 - 2014-07-07 17:09 - 02125503 _____ (softcows.com ) C:\Users\Administrator\Downloads\Quick Memory Editor.exe
2014-07-07 17:09 - 2014-07-07 17:09 - 00001111 _____ () C:\Users\Marcel-\Desktop\Quick Memory Editor.lnk
2014-07-07 17:09 - 2014-07-07 17:09 - 00001111 _____ () C:\Users\Administrator\Desktop\Quick Memory Editor.lnk
2014-07-07 17:09 - 2014-07-07 17:09 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Quick Memory Editor
2014-07-07 17:09 - 2014-07-07 17:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Quick Memory Editor
2014-07-05 13:52 - 2014-07-05 13:52 - 00002317 _____ () C:\Users\Administrator\Downloads\DayZ Mod & SA ammo Values by ThirtySix.txt
2014-07-05 13:41 - 2014-07-04 12:12 - 00000000 ____D () C:\Users\Administrator\AppData\Local\LogMeIn Rescue Applet
2014-07-05 13:22 - 2014-07-04 17:51 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-07-05 13:22 - 2014-07-04 17:51 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-07-05 13:20 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-07-05 13:20 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-07-04 21:48 - 2014-07-07 22:34 - 00219645 _____ () C:\Users\Administrator\Desktop\313.sqf
2014-07-04 17:51 - 2013-11-24 16:52 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-07-04 17:51 - 2013-07-31 22:50 - 00000000 ____D () C:\temp
2014-07-04 17:50 - 2013-11-24 16:51 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-07-04 17:50 - 2013-11-24 16:51 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-07-04 17:39 - 2014-05-23 00:16 - 00000000 ____D () C:\NVIDIA
2014-07-04 17:35 - 2014-07-01 15:26 - 00000000 ____D () C:\Users\Administrator\Documents\DayZ
2014-07-04 16:05 - 2014-01-03 18:30 - 00000000 ____D () C:\Program Files\KMSpico
2014-07-04 15:35 - 2014-01-10 23:49 - 00000000 ____D () C:\Program Files (x86)\Connectify
2014-07-04 15:35 - 2014-01-10 18:22 - 00000000 ____D () C:\Program Files (x86)\Steganos Privacy Suite 14
2014-07-04 15:35 - 2013-07-29 15:38 - 00000000 ____D () C:\Program Files\Classic Shell
2014-07-04 15:24 - 2013-07-29 17:23 - 00000000 ____D () C:\Program Files (x86)\SpeedFan
2014-07-04 15:23 - 2014-07-04 15:23 - 00000000 ____D () C:\Program Files\Lavasoft
2014-07-04 15:23 - 2014-07-04 15:23 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft
2014-07-04 15:20 - 2014-05-26 16:44 - 00000000 ____D () C:\Users\Administrator\YaCy
2014-07-04 15:01 - 2014-07-04 15:01 - 00000000 ____D () C:\WINDOWS\Panther
2014-07-04 14:55 - 2014-07-04 14:55 - 00000842 _____ () C:\WINDOWS\setupact.log
2014-07-04 14:55 - 2014-07-04 14:55 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-07-04 14:35 - 2014-07-04 14:35 - 00002263 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (6).lnk
2014-07-04 14:30 - 2014-07-04 14:30 - 00000000 ____D () C:\Users\Administrator\AppData\Local\NPE
2014-07-04 12:39 - 2014-07-04 12:39 - 03081712 ____N (Symantec Corporation) C:\Users\Administrator\Downloads\NPE.exe
2014-07-04 12:37 - 2014-07-04 12:15 - 00001436 _____ () C:\Users\Administrator\Desktop\Google Chrome.lnk
2014-07-04 12:32 - 2014-07-04 12:32 - 00002263 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (5).lnk
2014-07-04 12:32 - 2014-06-17 14:25 - 00000000 ____D () C:\Users\Administrator\Desktop\11_files
2014-07-04 12:29 - 2014-01-10 23:45 - 00000000 ____D () C:\ProgramData\eboostr
2014-07-04 12:20 - 2014-07-04 12:20 - 00002263 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (4).lnk
2014-07-04 12:18 - 2012-07-26 10:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP
2014-07-04 12:17 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-07-04 12:15 - 2014-07-04 12:15 - 00002299 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (3).lnk
2014-07-04 12:15 - 2014-07-04 12:15 - 00002299 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec (2).lnk
2014-07-04 12:15 - 2014-07-04 12:15 - 00001079 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-07-04 12:15 - 2014-07-04 12:15 - 00001023 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-04 12:15 - 2013-07-29 15:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-04 12:12 - 2014-07-04 12:12 - 00002299 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Symantec.lnk
2014-07-04 12:02 - 2014-07-04 12:01 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Administrator\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-07-04 02:03 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-04 02:03 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-04 02:03 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-04 01:50 - 2014-06-15 10:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Genymotion
2014-07-04 01:50 - 2014-06-13 20:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-07-04 01:50 - 2014-05-29 00:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Process Lasso
2014-07-04 01:50 - 2014-05-29 00:03 - 00000000 ____D () C:\Program Files\Process Lasso
2014-07-04 01:50 - 2014-05-06 16:30 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\vlc
2014-07-04 01:50 - 2014-05-06 12:26 - 00000000 ____D () C:\Users\Administrator\Documents\Arma 3
2014-07-04 01:50 - 2014-05-06 12:18 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Cyberlink SoftDMA
2014-07-04 01:50 - 2014-04-29 21:18 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Clientnew
2014-07-04 01:50 - 2014-03-04 20:12 - 00000000 ____D () C:\ProgramData\SpeedBit
2014-07-04 01:50 - 2014-02-08 23:05 - 00000000 ____D () C:\Users\Marcel-\AppData\Roaming\BitTorrent
2014-07-04 01:50 - 2013-12-26 13:08 - 00000000 ____D () C:\Users\Marcel-\AppData\Local\Cyberlink SoftDMA
2014-07-04 01:50 - 2013-11-24 16:58 - 00000000 ____D () C:\Users\Marcel-
2014-07-04 01:50 - 2013-10-16 17:06 - 00000000 ____D () C:\Users\Marcel-\AppData\Local\Akamai
2014-07-04 01:50 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\WindowsInternal.Inbox.Shared
2014-07-04 01:50 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-07-04 01:50 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-07-04 01:50 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-07-04 01:50 - 2013-08-21 22:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-07-04 01:50 - 2013-07-30 23:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2014-07-04 01:50 - 2013-07-29 17:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-07-04 01:49 - 2014-07-01 13:55 - 00000000 ____D () C:\Users\Administrator\AppData\Local\BrowseEmAll
2014-07-04 01:49 - 2013-07-29 17:33 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-07-04 01:44 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\registration
2014-07-04 01:42 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2014-07-04 01:40 - 2014-05-29 00:03 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\ProcessLasso
2014-07-04 01:40 - 2014-05-28 09:54 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Skype
2014-07-04 01:39 - 2013-07-29 17:32 - 00000000 ____D () C:\ProgramData\Skype
2014-07-04 01:37 - 2013-08-01 19:39 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-07-04 01:21 - 2014-07-03 22:58 - 00000000 ____D () C:\e6aaee25e6e797ecb198316b31d5ca
2014-07-04 01:20 - 2014-07-03 22:35 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-04 01:20 - 2014-07-03 22:35 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-04 01:20 - 2014-07-03 22:35 - 00000000 ___RD () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-04 01:20 - 2014-07-03 22:35 - 00000000 ____D () C:\Users\Gast
2014-07-04 01:20 - 2014-07-02 17:33 - 00000000 ____D () C:\Users\Administrator\AppData\Local\MetaGeek,_LLC
2014-07-04 01:11 - 2014-07-04 01:11 - 00000000 _____ () C:\Recovery.txt
2014-07-03 23:39 - 2014-07-03 23:39 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Steganos
2014-07-03 23:39 - 2014-07-03 23:39 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Intel Corporation
2014-07-03 23:39 - 2014-07-03 23:39 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\CyberLink
2014-07-03 23:39 - 2014-07-03 23:39 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Adobe
2014-07-03 23:38 - 2014-07-03 23:38 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Synaptics
2014-07-03 23:38 - 2014-07-03 23:38 - 00000000 ____D () C:\Users\Gast\AppData\Local\Adobe
2014-07-03 23:38 - 2014-07-03 22:35 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Apple Computer
2014-07-03 22:36 - 2014-07-03 22:36 - 00000000 ____D () C:\Users\Gast\AppData\Roaming\Hewlett-Packard
2014-07-03 22:36 - 2014-07-03 22:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Power2Go8
2014-07-03 22:36 - 2014-07-03 22:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Hewlett-Packard
2014-07-03 22:36 - 2014-07-03 22:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Vorlagen
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Startmenü
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Netzwerkumgebung
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Lokale Einstellungen
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Eigene Dateien
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Druckumgebung
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Documents\Eigene Musik
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Documents\Eigene Bilder
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\AppData\Local\Verlauf
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\AppData\Local\Anwendungsdaten
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 _SHDL () C:\Users\Gast\Anwendungsdaten
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 ____D () C:\Users\Gast\AppData\Local\NVIDIA Corporation
2014-07-03 22:35 - 2014-07-03 22:35 - 00000000 ____D () C:\Users\Gast\AppData\Local\NVIDIA
2014-07-03 22:33 - 2014-07-03 22:33 - 00000095 _____ () C:\WINDOWS\general.log
2014-07-03 22:10 - 2014-07-03 22:10 - 01243655 _____ () C:\Users\Administrator\Downloads\ProcessExplorer_16.02.zip
2014-07-03 22:10 - 2014-07-03 22:10 - 01243655 _____ () C:\Users\Administrator\Downloads\ProcessExplorer_16.02 (1).zip
2014-07-03 21:28 - 2014-07-03 21:27 - 00000000 ____D () C:\ProgramData\MicroWorld
2014-07-02 20:08 - 2014-07-02 20:08 - 00000222 _____ () C:\Users\Administrator\Desktop\Warface.url
2014-07-02 17:31 - 2014-07-02 17:31 - 00000000 ____D () C:\Program Files (x86)\MetaGeek
2014-07-02 15:00 - 2014-07-02 14:58 - 104857600 _____ () C:\Users\Administrator\Downloads\1370091038249.rar
2014-07-02 14:25 - 2013-07-30 12:29 - 00000052 _____ () C:\WINDOWS\SysWOW64\DOErrors.log
2014-07-01 17:20 - 2014-07-01 15:26 - 00000000 ____D () C:\Users\Administrator\AppData\Local\DayZ
2014-07-01 13:36 - 2014-07-01 13:35 - 00000658 _____ () C:\WINDOWS\ie7_main.log
2014-07-01 13:35 - 2014-07-01 13:35 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Mozilla
2014-07-01 13:35 - 2014-07-01 13:35 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Mozilla
2014-07-01 13:35 - 2014-07-01 13:35 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Macromedia
2014-07-01 12:31 - 2014-07-01 12:31 - 04229130 _____ () C:\Users\Administrator\Downloads\dsl_803a_752dpw_fw_30.05.219-20121116.bin
2014-07-01 12:29 - 2014-07-01 12:29 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Skype
2014-06-29 14:27 - 2014-06-29 14:27 - 00008446 _____ () C:\Users\Administrator\Downloads\GimmeMoarFrames-master.zip
2014-06-29 14:13 - 2014-06-29 14:13 - 00008195 _____ () C:\Users\Administrator\Downloads\ArmA3mark_28082013.zip (1).7z
2014-06-27 23:05 - 2014-06-26 19:56 - 00000000 ____D () C:\Users\Administrator\Desktop\PDAY+17Tr-LNG_v22.1
2014-06-26 22:55 - 2014-07-09 13:32 - 00703968 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-06-26 22:55 - 2014-07-09 13:32 - 00105440 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-06-26 17:23 - 2014-06-26 17:23 - 00000000 ____D () C:\Users\Administrator\Documents\7 Days To Die
2014-06-26 16:56 - 2014-01-03 15:09 - 00000000 ____D () C:\Users\Marcel-\Desktop\Bewerbung
2014-06-26 13:53 - 2014-06-26 13:53 - 00328420 _____ () C:\Users\Administrator\Downloads\PAYDAY 2 - Ultimate Trainer v3.0 (Hack&Dev, PierreDjays)_[www.unknowncheats.me]_.rar
2014-06-26 13:48 - 2014-06-26 13:48 - 00337186 _____ () C:\Users\Administrator\Downloads\superficialsuitev26_[www.unknowncheats.me]_.zip
2014-06-26 13:45 - 2014-06-26 13:44 - 16392851 _____ () C:\Users\Administrator\Downloads\PPv15R_[www.unknowncheats.me]_.rar
2014-06-26 13:42 - 2014-06-26 13:42 - 00293691 _____ () C:\Users\Administrator\Downloads\Pay Day 2 Level Hack_[www.unknowncheats.me]_.rar
2014-06-26 13:37 - 2014-06-26 13:37 - 00358029 _____ () C:\Users\Administrator\Downloads\Stealth Suite v0.4_[www.unknowncheats.me]_.rar
2014-06-26 00:54 - 2014-06-26 00:54 - 02521973 _____ () C:\Users\Administrator\Downloads\PDAY+17Tr-LNG_v30.2.rar
2014-06-25 22:51 - 2014-06-25 22:50 - 02463584 _____ () C:\Users\Administrator\Downloads\PDAY+17Tr-LNG_v22.1.rar
2014-06-25 22:30 - 2014-06-25 21:15 - 00000000 ____D () C:\Users\Administrator\AppData\Local\PAYDAY 2
2014-06-25 22:28 - 2014-06-25 22:28 - 00304852 _____ () C:\Users\Administrator\Desktop\InjectorPack_[www.unknowncheats.me]_.rar.mwt
2014-06-25 22:27 - 2014-06-25 22:27 - 00328420 _____ () C:\Users\Administrator\Desktop\PAYDAY 2 - Ultimate Trainer v3.0 (Hack&Dev, PierreDjays)_[www.unknowncheats.me]_.rar
2014-06-25 22:24 - 2014-06-25 22:23 - 16392851 _____ () C:\Users\Administrator\Desktop\PPv15R_[www.unknowncheats.me]_.rar
2014-06-24 16:44 - 2014-06-24 16:44 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Quadriga Games
2014-06-23 16:36 - 2014-06-23 16:36 - 00382459 _____ () C:\Users\Administrator\Downloads\housing.rar
2014-06-23 15:51 - 2014-06-23 15:51 - 00453232 _____ () C:\Users\Administrator\Downloads\CBA_A3_RC1.zip
2014-06-23 15:51 - 2014-06-23 15:51 - 00001682 _____ () C:\Users\Administrator\Downloads\@DEditor_v12.rar
2014-06-23 14:55 - 2014-06-23 14:55 - 00005367 _____ () C:\Users\Administrator\Downloads\@101_editor_vv1.14.0601.rar
2014-06-23 14:00 - 2014-06-23 14:00 - 07563927 _____ () C:\Users\Administrator\Downloads\@mcc_sandbox_r5.rar
2014-06-23 13:59 - 2014-06-23 13:59 - 01413902 _____ () C:\Users\Administrator\Downloads\sample missions.rar
2014-06-21 22:08 - 2014-06-21 22:07 - 22618750 _____ () C:\Users\Administrator\Downloads\MCaRMOD31.7z
2014-06-21 20:11 - 2014-06-21 20:06 - 16970521 _____ () C:\Users\Administrator\Downloads\@DAM.rar
2014-06-19 03:39 - 2014-07-09 12:24 - 23464448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-06-19 02:48 - 2014-07-09 12:24 - 02768384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-06-19 02:16 - 2014-07-09 12:24 - 17276416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-06-19 02:09 - 2014-07-09 12:24 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-06-19 01:51 - 2014-07-09 12:24 - 05721088 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-06-19 01:50 - 2014-07-09 12:24 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-06-19 01:48 - 2014-07-09 12:24 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-06-19 01:46 - 2014-07-09 12:24 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-06-19 01:39 - 2014-07-09 12:24 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-06-19 01:33 - 2014-07-09 12:24 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-06-19 01:32 - 2014-07-09 12:24 - 02179072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-06-19 01:27 - 2014-07-09 12:24 - 02040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-06-19 01:12 - 2014-07-09 12:24 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-06-19 00:59 - 2014-07-09 12:24 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-06-19 00:58 - 2014-07-09 12:24 - 02266112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-06-19 00:58 - 2014-07-09 12:24 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-06-19 00:57 - 2014-07-09 12:24 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-06-19 00:52 - 2014-07-09 12:24 - 04254720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-06-19 00:51 - 2014-07-09 12:24 - 13527040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-06-19 00:49 - 2014-07-09 12:24 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-06-19 00:45 - 2014-07-09 12:24 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-06-19 00:35 - 2014-07-09 12:24 - 11742208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-06-19 00:34 - 2014-07-09 12:24 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-06-19 00:15 - 2014-07-09 12:24 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-06-19 00:13 - 2014-07-09 12:24 - 01791488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-06-19 00:09 - 2014-07-09 12:24 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-06-19 00:07 - 2014-07-09 12:24 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-06-17 14:25 - 2014-06-17 14:25 - 00316184 _____ () C:\Users\Administrator\Desktop\11.htm
2014-06-17 00:26 - 2014-07-09 12:24 - 00779264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osk.exe
2014-06-17 00:24 - 2014-07-09 12:24 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2014-06-16 15:46 - 2014-06-16 15:45 - 00000470 _____ () C:\Users\Administrator\Downloads\listen-dsl (1).asx
2014-06-16 11:52 - 2014-06-16 11:52 - 00000000 ____D () C:\WINDOWS\system32\Soluto
2014-06-15 15:52 - 2014-06-15 10:46 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Genymobile
2014-06-15 15:52 - 2014-06-15 10:45 - 00000000 ____D () C:\Users\Administrator\.VirtualBox
2014-06-15 14:54 - 2014-06-15 14:41 - 50377528 _____ () C:\Users\Administrator\Downloads\re2-1.0.7.7z.001
2014-06-15 14:46 - 2014-01-10 19:24 - 00000022 _____ () C:\Users\Marcel-\Downloads\foto.zip
2014-06-15 14:45 - 2014-04-05 14:29 - 00002816 _____ () C:\Users\Marcel-\Downloads\Nicht bestätigt 90835.crdownload
2014-06-15 12:40 - 2014-06-15 12:40 - 00000000 ____D () C:\Users\Administrator\.android
2014-06-15 10:49 - 2014-06-15 10:49 - 00000000 ____D () C:\Users\Administrator\VirtualBox VMs
2014-06-15 10:44 - 2014-06-15 10:44 - 00000000 ____D () C:\Program Files\Oracle
2014-06-15 10:42 - 2014-06-15 10:42 - 00000000 ____D () C:\Program Files\Genymobile
2014-06-15 10:39 - 2014-06-15 10:26 - 122656544 _____ (Genymobile ) C:\Users\Administrator\Downloads\genymotion-2.2.2-vbox.exe
2014-06-15 10:28 - 2014-06-15 10:28 - 02321658 _____ () C:\Users\Administrator\Downloads\de.lotumlabs.questionsforfriendsnorth_quickdownload_330.apk
2014-06-13 21:22 - 2014-06-13 21:22 - 03355384 _____ (Reincubate Ltd) C:\Users\Administrator\Downloads\iphonebackupextractor-latest.exe
2014-06-13 21:22 - 2014-06-13 21:22 - 00001346 _____ () C:\Users\Administrator\Desktop\iPhone Backup Extractor.lnk
2014-06-13 21:22 - 2014-06-13 21:22 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Reincubate
2014-06-13 21:22 - 2014-06-13 21:22 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Reincubate
2014-06-13 20:35 - 2014-05-06 12:14 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Apple Computer
2014-06-13 20:34 - 2014-06-13 20:34 - 00001795 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-06-13 20:34 - 2014-06-13 20:33 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-06-13 20:34 - 2014-06-13 20:33 - 00000000 ____D () C:\Program Files\iTunes
2014-06-13 20:34 - 2014-06-13 20:33 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-06-13 20:33 - 2014-06-13 20:33 - 00000000 ____D () C:\Program Files\iPod
2014-06-13 20:33 - 2013-08-12 01:06 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-06-13 20:24 - 2014-06-13 20:24 - 112616784 _____ (Apple Inc.) C:\Users\Administrator\Downloads\iTunes64Setup.exe
2014-06-13 04:59 - 2014-07-04 17:44 - 01890264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6434043.dll
2014-06-13 04:59 - 2014-07-04 17:44 - 01542088 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6434043.dll
2014-06-13 04:59 - 2014-07-04 17:44 - 00026353 _____ () C:\WINDOWS\system32\nvinfo.pb
2014-06-13 04:48 - 2014-07-04 17:44 - 13911928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 13824408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 11272544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 11211224 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 04248520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 03989464 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 00946120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 00909256 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 00902616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 00869336 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 00391456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2014-06-13 04:48 - 2014-07-04 17:44 - 00348120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 31512352 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 24198616 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 18625768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 17553032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 16122344 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 14497528 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 12860888 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2014-06-13 04:47 - 2014-07-04 17:44 - 00502048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 00417568 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2014-06-13 04:47 - 2014-07-04 17:44 - 00033736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys
2014-06-13 04:46 - 2014-07-04 17:44 - 22994392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2014-06-13 04:46 - 2014-07-04 17:44 - 15294296 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2014-06-13 04:46 - 2014-07-04 17:44 - 02814120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2014-06-13 04:46 - 2014-07-04 17:44 - 00965312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2014-06-13 04:46 - 2014-07-04 17:44 - 00846832 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2014-06-13 04:46 - 2014-07-04 17:44 - 00354016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2014-06-13 04:46 - 2014-07-04 17:44 - 00305600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2014-06-13 04:46 - 2014-07-04 17:44 - 00166568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2014-06-13 04:46 - 2014-07-04 17:44 - 00146480 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2014-06-13 04:45 - 2014-07-04 17:44 - 03196304 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2014-06-13 04:11 - 2014-07-04 17:50 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2014-06-13 04:11 - 2014-07-04 17:50 - 00062808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2014-06-13 04:11 - 2013-12-11 20:21 - 01083736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2014-06-13 04:11 - 2013-11-24 16:52 - 06783960 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2014-06-13 04:11 - 2013-11-24 16:52 - 03523360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2014-06-13 04:11 - 2013-11-24 16:52 - 02560968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2014-06-13 04:11 - 2013-11-24 16:52 - 00933208 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2014-06-13 04:11 - 2013-11-24 16:52 - 00387528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2014-06-13 00:55 - 2014-06-13 00:55 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\hpqlog
2014-06-13 00:34 - 2014-06-13 00:34 - 00000924 _____ () C:\Users\Administrator\Downloads\Downloads - Verknüpfung.lnk

Files to move or delete:
====================
C:\Users\Marcel-\FireDepartment3_setup.exe


Some content of TEMP:
====================
C:\Users\Administrator\AppData\Local\Temp\Quarantine.exe
C:\Users\Marcel-\AppData\Local\Temp\BatteryBarSetup-3.6.3.exe
C:\Users\Marcel-\AppData\Local\Temp\SkypeSetup.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-04 21:14

==================== End Of Log ============================

95Marcel95 13.07.2014 11:30
Addition -

Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-07-2014
Ran by Administrator at 2014-07-13 12:17:36
Running from C:\Users\Administrator\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Norton Internet Security (Enabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
AS: Norton Internet Security (Enabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466}
FW: Norton Internet Security (Enabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}

==================== Installed Programs ======================

1.0 (HKLM-x32\...\Pagealicious_is1) (Version: 1.0.0.0 - ) <==== ATTENTION
337 GAMES (HKCU\...\337Games) (Version: 1.1.1.0 - )
3DMark 11 (HKLM-x32\...\{46EDCFA5-7EDB-46A9-B093-1C6237470CEC}) (Version: 1.0.5 - Futuremark Corporation)
Acronis Drive Monitor (HKLM-x32\...\{706AE61D-40A4-4F50-8359-FE8F6F7FA461}) (Version: 1.0.566 - Acronis)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 14.0.0.110 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 14.0.0.110 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.05) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.05 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.9.149 - Adobe Systems, Inc.)
AIDA64 Extreme v4.20 (HKLM-x32\...\AIDA64 Extreme_is1) (Version: 4.20 - FinalWire Ltd.)
AkkuLine Batterie-Tool (HKLM-x32\...\{5FF02438-DDE5-4D8E-8291-577CC1A2C014}) (Version: 1.0.0 - AkkuLine.de)
AllDup 3.4.24 (HKLM-x32\...\AllDup_is1) (Version: 3.4.24 - Michael Thummerer Software Design)
AntimalwareEngine (Version: 2.6.0.0 - Lavasoft) Hidden
Apple Application Support (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Applon (HKLM-x32\...\Applon) (Version:  - Applon)
Arma 3 (HKLM-x32\...\Steam App 107410) (Version:  - Bohemia Interactive)
Ashampoo WinOptimizer 10 v.10.3.0 (HKLM-x32\...\{4209F371-88D4-AB00-ED2B-D6520C84D9D5}_is1) (Version: 10.03.00 - Ashampoo GmbH & Co. KG)
AuthenTec TrueAPI 64-bit (Version: 1.6.0.87 - AuthenTec, Inc.) Hidden
AutoHotkey 1.1.14.03 (HKLM\...\AutoHotkey) (Version: 1.1.14.03 - Lexikos)
Azureus (HKLM-x32\...\Azureus) (Version: 2.5.0.4 - )
BatteryBar (remove only) (HKLM\...\BatteryBar) (Version:  - )
BatteryCare 0.9.16.0 (HKLM-x32\...\{C6A6036D-FBD0-4324-BEAA-C0845257160C}_is1) (Version: 0.9.16.0 - Filipe Lourenço)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.0 - EA Digital Illusions CE AB)
BinMake Uninstall (HKLM-x32\...\BinMake) (Version:  - )
BinPBO Personal Edition Uninstall (HKLM-x32\...\BinPBO Personal Edition) (Version:  - )
BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.7.16.910 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM-x32\...\{FB93553A-CBA7-44FE-BD70-A996C859DD06}) (Version: 0.7.16.910 - BlueStack Systems, Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
bwin Download Casino (HKLM-x32\...\bwincomCasino) (Version:  - bwincom)
bwin Poker (HKLM-x32\...\bwincomPoker) (Version:  - bwincom)
Camtasia Studio 8 (HKLM-x32\...\{8F6F7194-0734-4CDA-8C04-6B766F2241A6}) (Version: 8.0.4.1060 - TechSmith Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 4.07 - Piriform)
Cheat Engine 6.3 (HKLM-x32\...\Cheat Engine 6.3_is1) (Version:  - Cheat Engine)
Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version:  - Cheat Engine)
Classic Shell (HKLM\...\{FEA1590B-540A-41FC-A95C-664493C82A21}) (Version: 3.6.8 - IvoSoft)
Cleaning Suite v2.1 (HKLM-x32\...\Cleaning Suite_is1) (Version:  - ASCOMP Software GmbH)
Connected Music powered by Universal Music Group version 1.0 (HKLM-x32\...\{46037DC7-F927-46DF-935F-D6F122BDD34B}_is1) (Version: 1.0 - Snowite)
Connectify (HKLM\...\Connectify) (Version: 7.2.1.29658 - Connectify)
ConvertHelper 2.2 (HKLM-x32\...\{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1) (Version:  - DownloadHelper)
Core Temp 1.0 RC5 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.0 - Alcpu)
Craften Terminal Beta 3.4.5005.37007 (HKLM-x32\...\{4e7c3936-7c06-4ef0-928b-c5d92f372578}_is1) (Version: 3.4.5005.37007 - Craften.de)
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.4.6515 - CyberLink Corp.)
CyberLink LabelPrint (x32 Version: 2.5.4.6515 - CyberLink Corp.) Hidden
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.5.3606 - CyberLink Corp.)
CyberLink Media Suite 10 (x32 Version: 10.0.5.3606 - CyberLink Corp.) Hidden
CyberLink PhotoDirector (HKLM-x32\...\InstallShield_{4862344A-A39C-4897-ACD4-A1BED5163C5A}) (Version: 2.0.2.3317 - CyberLink Corp.)
CyberLink PhotoDirector (x32 Version: 2.0.2.3317 - CyberLink Corp.) Hidden
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.3.2527 - CyberLink Corp.)
CyberLink Power2Go 8 (x32 Version: 8.0.3.2527 - CyberLink Corp.) Hidden
CyberLink PowerDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.8.5511 - CyberLink Corp.)
CyberLink PowerDVD (x32 Version: 10.0.8.5511 - CyberLink Corp.) Hidden
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.5.6.6119 - CyberLink Corp.)
CyberLink YouCam (x32 Version: 3.5.6.6119 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{043645C8-48EC-458F-B9BD-9C8F15CEF6F7}) (Version:  - Microsoft)
Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D1C35197-B856-45E2-BA67-5ABB6B0CA9C2}) (Version:  - Microsoft)
Defraggler (HKLM\...\Defraggler) (Version: 2.16 - Piriform)
Desktop Media 1.7 (HKLM-x32\...\Desktop Media_is1) (Version:  - Ian Perez)
devolo dLAN Cockpit (HKLM-x32\...\dlancockpit) (Version: 3.2.0.0 - devolo AG)
Die Sims™ 3 Late Night (HKLM-x32\...\{45057FCE-5784-48BE-8176-D9D00AF56C3C}) (Version: 6.5.1 - Electronic Arts)
Die Sims™ 3 Luxus-Accessoires (HKLM-x32\...\{71828142-5A24-4BD0-97E7-976DA08CE6CF}) (Version: 3.0.38 - Electronic Arts)
Die*Sims™*3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.42.130 - Electronic Arts)
dLAN Cockpit (x32 Version: 3.2.28 - devolo AG) Hidden
Download.am (HKLM-x32\...\Download.am) (Version:  - )
Downloader (HKLM-x32\...\Downloader) (Version:  - )
Driver Manager v1.02 (HKLM-x32\...\Driver Manager_is1) (Version:  - L5 Software Group, LLC)
DriverAgent by eSupport.com (HKLM-x32\...\DriverAgent_is1) (Version:  - Copyright © 2013 eSupport.com, Inc • All Rights Reserved)
EasyBCD 2.2 (HKLM-x32\...\EasyBCD) (Version: 2.2 - NeoSmart Technologies)
eBesucher Restarter 1.2 (HKLM-x32\...\{3F099090-131B-4D94-97CF-6FD738F51C01}_is1) (Version: 1.2.04.0 - eBesucher)
eBoostr 4 (HKLM\...\eBoostr 1) (Version: 4.5 - eBoostr)
Energy Star (HKLM-x32\...\{FC0ADA4D-8FA5-4452-8AFF-F0A0BAC97EF7}) (Version: 1.0.9 - Hewlett-Packard Company)
ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
Fake Webcam 7.3 (HKLM-x32\...\fakewebcam7.3.0_is1) (Version: 7.3.0 - Web Solution Mart)
Fake Webcam Codecs Pack 1.0.0 (HKLM\...\fwccpsetup_is1) (Version: 1.0.0 - Web Solution Mart)
Far Cry 3 (HKLM-x32\...\{E3B9C5A9-BD7A-4B56-B754-FAEA7DD6FA88}) (Version: 1.05 - Ubisoft)
Far Cry 3 Digital Deluxe Edition DLC (HKLM-x32\...\Digital Deluxe Edition DLC_is1) (Version: 1.0 - Ubisoft)
FileViewPro (HKLM\...\FileViewPro_is1) (Version: 4.0 - Solvusoft Corporation)
FileZilla Client 3.2.7.1 (HKLM-x32\...\FileZilla Client) (Version: 3.2.7.1 - )
Fire Department 3 (HKLM-x32\...\Fire Department 3_is1) (Version:  - Metaboli)
Folderico 4.0 RC12 (HKLM-x32\...\Folderico) (Version: 4.0 RC12 - Shedko ( www.softq.org ))
FormatFactory 3.1.1 (HKLM-x32\...\FormatFactory) (Version: 3.1.1 - Free Time)
Fotogalerie (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Free Mouse Auto Clicker 3.1 (HKLM-x32\...\{7D9D583E-EC8B-4390-B3A4-017B8182C8FF}_is1) (Version:  - Advanced Mouse Auto Clicker ltd.)
Free YouTube to MP3 Converter version 3.12.16.1030 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.16.1030 - DVDVideoSoft Ltd.)
FreePortScanner 2.8.4 (HKLM-x32\...\FreePortScanner_is1) (Version:  - Nsasoft LLC.)
FreshDiagnose (HKLM-x32\...\FreshDevices - FreshDiagnose_is1) (Version:  - )
FreshDownload (HKLM-x32\...\FreshDevices - FreshDownload_is1) (Version:  - )
FSM Editor Personal Edition Uninstall (HKLM-x32\...\FSM Editor Personal Edition) (Version:  - )
Futuremark SystemInfo (HKLM-x32\...\{BEE64C14-BEF1-4610-8A68-A16EAA47B882}) (Version: 4.17.0 - Futuremark Corporation)
Genie Timeline (HKLM-x32\...\Genie Timeline) (Version: 4.0 - Genie9)
Genymotion version 2.2.2 (HKLM\...\{6D180286-D4DF-40EF-9227-923B9C07C08A}_is1) (Version: 2.2.2 - Genymobile)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
Grand Theft Auto IV (HKLM-x32\...\{579BA58C-F33D-4970-9953-B94B43768AC3}) (Version: 1.00.0000 - Rockstar Games)
Grand Theft Auto IV (x32 Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden
Grepo (HKLM-x32\...\Grepo) (Version:  - Grepo)
GrFinger Desktop Identity 1.1 (HKLM-x32\...\{37d8695b-ab6c-40a9-97a2-f7a4813f53ad}_is1) (Version: 1.1 - Griaule Biometrics.)
GrFinger Desktop Login 1.1.0 (HKLM-x32\...\{11E1DD13-311D-474C-92C8-2E531A996B0D}_is1) (Version: 1.1.0 - Griaule Biometrics.)
Hewlett-Packard ACLM.NET v1.2.1.1 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
Hex-Editor MX (HKLM-x32\...\{7FC7AD70-1DF3-4B84-9AA2-4FB680F45572}_is1) (Version: 6.0 - NEXT-Soft)
HitFilm 2 Express (HKLM\...\{A6E81EFB-2A19-4B5B-8C48-D4E5DB3AD547}) (Version: 2.0.2522.46168 - FXhome)
HomeTab 3.7 (HKLM-x32\...\{3a4935b3-b7a0-4065-8ccc-0030471b33f1}_is1) (Version: 3.7 - HomeTab) <==== ATTENTION
HP 3D DriveGuard (HKLM\...\{AB5BCC55-18E2-46C7-9405-FF61CB888F05}) (Version: 4.2.9.1 - Hewlett-Packard Company)
HP Connected Music (Meridian - installer) (HKLM-x32\...\StartHPConnectedMusic) (Version: v1.0 - Meridian Audio Ltd)
HP Connected Remote (HKLM-x32\...\{F243A34B-AB7F-4065-B770-B85B767C247C}) (Version: 1.7.271 - Hewlett-Packard)
HP CoolSense (HKLM-x32\...\{59F8C5AA-91BD-423D-BF05-09A80F39898F}) (Version: 2.10.62 - Hewlett-Packard Company)
HP Customer Experience Enhancements (x32 Version: 6.0.1.7 - Hewlett-Packard) Hidden
HP Deskjet 2050 J510 series - Grundlegende Software für das Gerät (HKLM\...\{DF37555F-0259-43DA-B60C-47106FA14AA3}) (Version: 28.0.1313.0 - Hewlett-Packard Co.)
HP Deskjet 2050 J510 series Hilfe (HKLM-x32\...\{7A3DF2E2-CF13-44FB-A93E-F71D5381DB3F}) (Version: 140.0.61.61 - Hewlett Packard)
HP Documentation (HKLM-x32\...\{53D3E126-699A-4D92-AA66-6560D573553E}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Postscript Converter (Version: 3.1.3591 - Hewlett-Packard) Hidden
HP Quick Launch (HKLM-x32\...\{E5823036-6F09-4D0A-B05C-E2BAA129288A}) (Version: 3.0.6 - Hewlett-Packard Company)
HP Recovery Manager (x32 Version: 8.00 - Hewlett-Packard) Hidden
HP Registration Service (HKLM\...\{C2E428EB-116E-41C0-9E84-B22DE9CCA42F}) (Version: 1.1.6232.4245 - Hewlett-Packard)
HP SimplePass (HKLM-x32\...\{4BACA3B8-F63A-44ED-9A8D-48B4D02AD268}) (Version: 6.0.100.276 - Hewlett-Packard)
HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
HP Utility Center (HKLM\...\{2AFEFC93-F0C7-4390-BB51-F914EC546B30}) (Version: 2.1.6 - Hewlett-Packard Company)
HP Wireless Button Driver (HKLM-x32\...\{30B2D1D8-0A07-4B71-9553-0710C5D31E35}) (Version: 1.1.2.1 - Hewlett-Packard Company)
iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.)
iDevice Manager (HKLM-x32\...\FE5AE7DC-7B01-4263-A94C-B4526C276550_is1) (Version: 3.2.3.0 - Marx Software)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6482.0 - IDT)
iFunbox (v2.7.2386.747), iFunbox DevTeam (HKLM-x32\...\iFunbox_is1) (Version: v2.7.2386.747 - )
Infestation Survivor Stories version 1.0 (HKLM-x32\...\{BC3051A7-1021-4B57-A3DA-AAC24566FAE7}_is1) (Version: 1.0 - OP Productions LLC)
Intel Extreme Tuning Utility (HKLM-x32\...\{1bcf77e1-2519-41dc-a594-9936f5f42203}) (Version: 4.2.0.8 - Intel Corporation)
Intel Extreme Tuning Utility (x32 Version: 4.2.0.8 - Intel Corporation) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation)
Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.36943 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.3.1520 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3379 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.9.1002 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.27.798.1 - Intel Corporation) Hidden
Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\{3FD0C489-0F02-481a-A3E1-9754CD396761}) (Version:  - Intel Corporation)
iPhone Backup Extractor (HKCU\...\iPhone Backup Extractor) (Version: 4.9.23.0 - Reincubate Ltd)
iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.)
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
KMSpico 3.1 (HKLM\...\KMSpico v3.1_is1) (Version: 3.1 - )
La Riviera Casino English (HKLM-x32\...\{db038d9f-a724-4409-84be-685fce5c604f}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Lagarith lossless video codec (Remove Only) (HKLM\...\LAGARITH) (Version:  - )
Lansweeper (HKLM-x32\...\Lansweeper_is1) (Version: 5.1 - Lansweeper.com)
LastPass(uninstall only) (HKLM-x32\...\LastPass) (Version:  - LastPass)
Logitech Gaming Software (Version: 8.45.88 - Logitech Inc.) Hidden
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Mediatek Bluetooth (HKLM\...\{66D292E3-6228-3AF1-EDED-6D53C63DBCB7}) (Version: 11.0.748.2 - Mediatek)
Microsoft Access MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft DCF MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Excel MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Groove MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Lync MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office 32-bit Components 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Office 32-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft OneNote MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Publisher MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{90ffcee5-8608-4e94-8c18-a4feb4f83fb8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Windows 8 ESU (HKLM-x32\...\{E7E058CF-4638-49D4-936D-AC6DAE3B002E}) (Version: 1.1.1 - Hewlett-Packard)
Microsoft Word MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Mighty Slots (HKLM-x32\...\{565493c1-3580-4f39-ba73-f4c375f5e9bd}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Migration System Updater RBP (HKLM-x32\...\Migration System Updater RBP) (Version: 1.2.0.0 - )
MiPony 2.1.0 (HKLM-x32\...\MiPony) (Version: 2.1.0 - )
Movie Maker (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Mozilla Firefox 26.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 26.0 (x86 de)) (Version: 26.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 26.0 - Mozilla)
MPC-HC 1.7.0 (HKLM-x32\...\{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1) (Version: 1.7.0.7858 - MPC-HC Team)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1108.0727 - Microsoft) Hidden
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
Mummys Gold Casino (HKLM-x32\...\mummysgold) (Version: 16.6.1.11212 - )
NetMeter 1.1.4 BETA (HKLM-x32\...\NetMeter_is1) (Version:  - ReadError)
NetSpeedMeter (HKLM-x32\...\NetSpeedMeter) (Version: 0.9 - )
NetWorx 5.2.11 (HKLM\...\NetWorx_is1) (Version:  - Softperfect Research)
Norton Internet Security (HKLM-x32\...\NIS) (Version: 21.3.0.12 - Symantec Corporation)
Notebook Hardware Control 2.0 Pre-Release-06 Bugfix (HKLM-x32\...\Notebook Hardware Control) (Version: 2.0 Pre-Release-06 Bugfix - Manfred Jaider)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.5 - Notepad++ Team)
NTREGOPT 1.1j (HKLM-x32\...\NTREGOPT_is1) (Version:  - Lars Hederer)
NVIDIA GeForce Experience 2.0.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.0.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 340.43 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.43 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.157.1165 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Optimus Update 12.4.67 (Version: 12.4.67 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA ShadowPlay 12.4.67 (Version: 12.4.67 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 340.43 (Version: 340.43 - NVIDIA Corporation) Hidden
NVIDIA Update 12.4.67 (Version: 12.4.67 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 12.4.67 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.23 (Version: 1.2.23 - NVIDIA Corporation) Hidden
OpenVPN 2.2.2 (HKLM-x32\...\OpenVPN) (Version: 2.2.2 - )
Opera Stable 20.0.1387.91 (HKLM-x32\...\Opera 20.0.1387.91) (Version: 20.0.1387.91 - Opera Software ASA)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Overwolf (HKLM-x32\...\{0A337036-B73E-4C85-8D32-3851F84B7CFE}) (Version: 0.46.271 - Overwolf)
Oxygen 2 Personal Edition Uninstall (HKLM-x32\...\Oxygen 2 Personal Edition) (Version:  - )
Pagealicious (HKLM-x32\...\Pagealicious) (Version:  - Pagealicious) <==== ATTENTION
Paint.NET v3.5.11 (HKLM\...\{72EF03F5-0507-4861-9A44-D99FD4C41418}) (Version: 3.61.0 - dotPDN LLC)
Palace Of Chance (HKLM-x32\...\{f51a5449-9174-4e90-a0b2-bd67e0a9a87e}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Paros 3.2.13 (HKLM-x32\...\Paros_is1) (Version:  - parosproxy.org)
PBO Manager v.1.4 beta (HKLM\...\{127B5371-1802-4EDD-A25A-A43BF761D383}) (Version: 1.4.0 -  )
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
PDF24 Creator 6.1.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
PhotoME Beta-Release (HKLM-x32\...\PhotoME Beta-Release_is1) (Version: 0.8ß2 - Jens Duttke)
Platinum Play Online (HKLM-x32\...\platinumplay) (Version: 16.9.2.739 - )
Plenty Jackpot (HKLM-x32\...\{f748bdcf-1691-49d4-b5a6-20abf8d9d2b9}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Plus500 (HKLM-x32\...\Plus500) (Version:  - )
PokerStars.eu (HKLM-x32\...\PokerStars.eu) (Version:  - PokerStars.eu)
PremiumSoft Navicat Data Modeler 1.0 (HKLM-x32\...\PremiumSoft Navicat Data Modeler_is1) (Version: 1.0.12 - PremiumSoft CyberTech Ltd.)
Process Lasso (HKLM-x32\...\ProcessLasso) (Version: 6.7.0.52 - Bitsum)
Project 64 version 2.1.0.1 (HKLM-x32\...\Project 64_is1) (Version: 2.1.0.1 - )
Protector Suite 2012 (HKLM\...\{C767056D-3CE2-442D-BC78-F05E94F450D0}) (Version: 5.9.8.7279 - Authentec Inc.)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Quatro Casino (HKLM-x32\...\quatro) (Version: 16.9.2.739 - )
Quick Memory Editor 5.5 (HKLM-x32\...\Quick Memory Editor_is1) (Version:  - softcows.com)
QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
Ralink RT3290 802.11bgn Wi-Fi Adapter (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 5.0.37.0 - Mediatek)
Real Vegas Online USD German (HKLM-x32\...\{fc52c158-f28f-477d-a59d-0ace8b0e212c}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.2.612.2012 - Realtek)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.2.8400.29034 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.49 - Piriform)
Registry System Wizard.NET (HKLM\...\{110ED870-1DF3-4574-A679-E2C4A8163211}_is1) (Version: 0.13.731.51 - WinFAQ)
RegRunner 3.2.2009.5 (HKLM-x32\...\RegRunner2009_is1) (Version:  - Bernd Dietzel)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Revo Uninstaller Pro 3.0.8 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.0.8 - VS Revo Group, Ltd.)
RoboForm 7-9-3-9 (All Users) (HKLM-x32\...\AI RoboForm) (Version: 7-9-3-9 - Siber Systems)
ROCCAT Kone Pure Mouse Driver (HKLM-x32\...\{4905245D-56E7-4176-BE68-962728B803D6}) (Version:  - Roccat GmbH)
ROCCAT Talk Driver (HKLM-x32\...\{0B2044E4-B4A7-4413-ABB1-99E04C7DF405}) (Version:  - Roccat GmbH)
Roulette Bot Plus (HKLM-x32\...\RBPlus) (Version: 1.3.8.4 - www.roulettebotplus.com)
RoulettePilot (HKLM-x32\...\{54AA4107-5A3C-4E97-893E-735D5127BB73}) (Version: 1.3.94 - JemeSoft)
Royal Vegas (HKLM-x32\...\royalvegas) (Version: 16.9.2.739 - )
RubySlots (HKLM-x32\...\{137b5d7d-6afe-4b69-be23-b2e949c20065}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Secunia PSI (3.0.0.9016) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia)
Security Task Manager 1.8d (HKLM-x32\...\Security Task Manager) (Version: 1.8d - Neuber Software)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version:  - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (Version:  - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version:  - Microsoft) Hidden
SHIELD Streaming (Version: 2.1.108 - NVIDIA Corporation) Hidden
SiSoftware Sandra Lite 2014.RTM (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2396}_is1) (Version: 20.10.2014.2 - SiSoftware)
Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Slot Nuts (HKLM-x32\...\{4f250443-a5ef-43a3-984b-972bc15c69d9}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Slotocash Casino (HKLM-x32\...\{7d1d90b3-acd3-49de-9bce-079aef80ef9b}) (Version: 13.1.0-RTG - RealTimeGaming Software)
Slots Inferno (HKLM-x32\...\{ef159e9a-ca8c-4e71-bf97-d1f4eec75004}) (Version: 13.1.0-RTG - RealTimeGaming Software)
SoftDMA (HKLM-x32\...\{AA4BF92B-2AAF-11DA-9D78-000129760D75}) (Version: 2.0.6729 - CyberLink Corp.)
Soluto (HKLM\...\{223FA2A7-10F3-4F74-900C-154C98F81687}) (Version: 1.3.1414.1 - Soluto)
Sophos Virus Removal Tool (HKLM-x32\...\{B829E117-D072-41EA-9606-9826A38D34C1}) (Version: 2.4 - Sophos Limited)
Sound Tools Uninstall (HKLM-x32\...\Sound Tools) (Version:  - )
SpeedBit Video Accelerator (HKLM-x32\...\SpeedBit Video Accelerator) (Version: 3380(build_3064) - SpeedBit Ltd.)
Spin Palace Casino (HKLM-x32\...\spinpalace) (Version: 16.8.3.393 - )
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
Steganos Privacy Suite 14 (HKLM-x32\...\{9F07D3B6-3801-4C33-B20E-39CC29E63253}) (Version: 14.2.1 - Steganos Software GmbH)
Studie zur Verbesserung von HP Deskjet 2050 J510 series Produkten (HKLM\...\{C559DE9F-9451-49E5-9176-316E36192409}) (Version: 28.0.1313.0 - Hewlett-Packard Co.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.15.0 - Synaptics Incorporated)
System Requirements Lab CYRI (HKLM-x32\...\{F3FCB08B-E752-444D-86A0-0634A4F3B23D}) (Version: 6.0.8.0 - Husdawg, LLC)
System Requirements Lab Detection (HKLM-x32\...\{A407FC22-36BF-4C82-A516-59D94BC505A9}) (Version: 1.0.5.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TexView 2 Uninstall (HKLM-x32\...\TexView 2) (Version:  - )
Tiny Media Player v1.0 (HKLM-x32\...\Tiny Media Player_is1) (Version: 1.0.0.0 - ) <==== ATTENTION
Tom Clancy's Splinter Cell® Blacklist™ (HKLM-x32\...\{A6356F2F-D3E1-4D83-9AA2-72871DD0C298}) (Version: 1.03 - Ubisoft)
TrueCrypt (HKLM-x32\...\TrueCrypt) (Version: 7.1a - TrueCrypt Foundation)
Tweaking.com - Windows Repair (All in One) (HKLM-x32\...\Tweaking.com - Windows Repair (All in One)) (Version: 2.7.1 - Tweaking.com)
UDPixel.exe (HKLM-x32\...\UDPixel) (Version:  - )
UltraISO Premium V9.53 (HKLM-x32\...\UltraISO_is1) (Version:  - )
Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
Update for Microsoft Access 2010 (KB2553446) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{FEF4C57D-0975-4D3C-ACC7-DCD038C3788F}) (Version:  - Microsoft)
Update for Microsoft Excel 2010 (KB2837600) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{17815BC8-062D-49BE-B40C-B54149C85CE3}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2881085) 64-Bit Edition (HKLM\...\{90150000-0016-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{58D92858-3C94-4C2F-A8E4-AEFF9304C3CF}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2881085) 64-Bit Edition (HKLM\...\{90150000-0018-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{58D92858-3C94-4C2F-A8E4-AEFF9304C3CF}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2881085) 64-Bit Edition (HKLM\...\{90150000-001B-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{58D92858-3C94-4C2F-A8E4-AEFF9304C3CF}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2881085) 64-Bit Edition (HKLM\...\{90150000-00C1-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{58D92858-3C94-4C2F-A8E4-AEFF9304C3CF}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2881085) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{58D92858-3C94-4C2F-A8E4-AEFF9304C3CF}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{84B191B5-5319-463A-A305-8C4D53B1D20A}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{DB0B0CDF-77EC-47B0-94E2-4738573A1E58}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817396) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{1AA82E2E-7DB7-4C70-910C-BBB657A6B3A5}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2850074) 64-Bit Edition (HKLM\...\{90150000-012B-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{CE9A9D7C-B6FB-4F6C-8BDE-9A1ADBBAC1EE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553092) (HKLM\...\{90140000-0044-0407-1000-0000000FF1CE}_Office14.PROPLUSR_{E636FE63-842B-4F4B-9884-DA189ACC0B91}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553092) (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{E636FE63-842B-4F4B-9884-DA189ACC0B91}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{79C725A1-3964-421C-A528-78C1C083C7C7}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{95BE5D45-A3DD-4CB1-8C35-D75DD7B4D862}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{95BE5D45-A3DD-4CB1-8C35-D75DD7B4D862}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{EBD18DE5-BC84-4B57-9A30-097044871F9A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{4AD36582-256B-433D-8593-F31773A15CA4}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{4AD36582-256B-433D-8593-F31773A15CA4}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{F216169C-2B40-429B-8370-B5BA06EC5423}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{F216169C-2B40-429B-8370-B5BA06EC5423}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{B6AD7E27-012A-4B63-82BA-AF62893E5435}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{07DC9C6C-E916-4F42-8677-716930ED0393}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825635) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{6E760BBA-B83F-4C2D-918F-5F91EF6C9861}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 64-Bit Edition (HKLM\...\{90140000-0044-0407-1000-0000000FF1CE}_Office14.PROPLUSR_{43F59F4D-7179-497E-BE99-BC6F7D1DDCBA}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{43F59F4D-7179-497E-BE99-BC6F7D1DDCBA}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2837581) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{D1F3B526-7EB2-4701-92DB-0784988D78DE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2837606) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{52BEF8AE-9324-40A1-9A92-E5A8FB63A475}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878252) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{56551B9F-2FE1-4705-ACF0-8FA920535E18}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878252) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{56551B9F-2FE1-4705-ACF0-8FA920535E18}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 64-Bit Edition (HKLM\...\{90140000-001F-0407-1000-0000000FF1CE}_Office14.PROPLUSR_{8F699D53-05FB-488E-B7D3-E4E47257BE5D}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 64-Bit Edition (HKLM\...\{90140000-001F-0409-1000-0000000FF1CE}_Office14.PROPLUSR_{324703B5-6765-489D-9B9B-B082D34F882E}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 64-Bit Edition (HKLM\...\{90140000-001F-040C-1000-0000000FF1CE}_Office14.PROPLUSR_{4B9B2BAF-EE1F-4B60-A4D9-17B7BEEB13A1}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760344) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{EF77B4A6-DFEC-4010-A87D-9B6BF87FABEC}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760544) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{62857CDD-2985-4939-91BA-19ED0B0031A5}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2768012) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{0814662C-FD28-4DE0-ACE5-EE50D1D6C8FB}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817302) 64-Bit Edition (HKLM\...\{90150000-0016-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{E79EFFDB-192A-4D9E-A2DB-C0F774E6EC32}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817302) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{E79EFFDB-192A-4D9E-A2DB-C0F774E6EC32}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2826040) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{C4AEA56A-0759-4D08-9FAB-31A92137D0B8}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2837644) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D692E9FF-84BF-4F44-A0EA-D58ECE0D538E}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2863843) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{290D80DE-03AB-47EC-9402-108AF4CE4F66}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880457) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{EC2AF602-2730-4B05-9438-06CDE43153F2}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-006E-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880464) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{88B29AA5-71EE-4692-91E2-E89407F0B783}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880478) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{8116ED50-F1E7-49E1-9D8D-421497D34B0F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880987) 64-Bit Edition (HKLM\...\{90150000-006E-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{6F540E80-4BB2-413F-9648-52031AA237B7}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880987) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{6F540E80-4BB2-413F-9648-52031AA237B7}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880987) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{6F540E80-4BB2-413F-9648-52031AA237B7}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881035) 64-Bit Edition (HKLM\...\{90150000-0016-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{885C981B-F1E3-430A-A099-31CA9D28C251}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881035) 64-Bit Edition (HKLM\...\{90150000-0090-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{885C981B-F1E3-430A-A099-31CA9D28C251}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881035) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{885C981B-F1E3-430A-A099-31CA9D28C251}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881074) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{9A479F9C-C1EC-4833-A115-A8B7A60480BD}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881084) 64-Bit Edition (HKLM\...\{90150000-001F-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{00BBBFFE-8889-4953-956A-77DDE975A947}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881084) 64-Bit Edition (HKLM\...\{90150000-001F-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{3A12DFA2-3FF5-450E-BDB1-A742551A5D1A}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881084) 64-Bit Edition (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}_Office15.PROPLUSR_{EA8072E8-E3CF-46DF-A5DE-9F5975344327}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881084) 64-Bit Edition (HKLM\...\{90150000-001F-0410-1000-0000000FF1CE}_Office15.PROPLUSR_{BF0D921F-E77E-4E03-BE71-46D9D2C7A36A}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881086) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{ED3A8E98-FDD4-493F-A0EC-141821573EC2}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881086) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{ED3A8E98-FDD4-493F-A0EC-141821573EC2}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2881087) 64-Bit Edition (HKLM\...\{90150000-00BA-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{3C6F4768-FB23-4ECF-8328-5C47E0664B65}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2881087) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{3C6F4768-FB23-4ECF-8328-5C47E0664B65}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2881087) 64-Bit Edition (HKLM\...\{90150000-00C1-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{3C6F4768-FB23-4ECF-8328-5C47E0664B65}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2881087) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{3C6F4768-FB23-4ECF-8328-5C47E0664B65}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{3029C408-1DD1-4273-8E58-87CB1B638FC8}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{3029C408-1DD1-4273-8E58-87CB1B638FC8}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2881082) 64-Bit Edition (HKLM\...\{90150000-00A1-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{BFD66A5D-F608-441E-9282-41E13F5E7412}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2881082) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{BFD66A5D-F608-441E-9282-41E13F5E7412}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2881082) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{BFD66A5D-F608-441E-9282-41E13F5E7412}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 64-Bit Edition (HKLM\...\{90140000-001A-0407-1000-0000000FF1CE}_Office14.PROPLUSR_{6164E0E5-C903-488C-93AF-1B7AF7EBC331}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{DDDC32A5-9528-4771-B91A-97A8E1D7957B}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2880470) 64-Bit Edition (HKLM\...\{90150000-001A-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{34A169EC-990A-4DAE-AC65-9F981158B7DB}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2880470) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{34A169EC-990A-4DAE-AC65-9F981158B7DB}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 64-Bit Edition (HKLM\...\{90140000-0018-0407-1000-0000000FF1CE}_Office14.PROPLUSR_{FD360122-6829-4497-97C1-1BF578EF695B}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{A20A650C-F820-4CE4-AEA5-EC140192FAFB}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2881075) 64-Bit Edition (HKLM\...\{90150000-0018-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{C8955821-EDAC-4E65-BEF3-C9C0A049517A}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2881075) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{C8955821-EDAC-4E65-BEF3-C9C0A049517A}) (Version:  - Microsoft)
Update for Microsoft Publisher 2013 (KB2880999) 64-Bit Edition (HKLM\...\{90150000-0019-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{C07147B9-CC0B-4CC1-A107-A705889A54F2}) (Version:  - Microsoft)
Update for Microsoft Publisher 2013 (KB2880999) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{C07147B9-CC0B-4CC1-A107-A705889A54F2}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{77374F16-2DC6-4EEF-AFAD-C59FDA2E010D}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{77374F16-2DC6-4EEF-AFAD-C59FDA2E010D}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2880526) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{F6F342A1-530B-4D48-A468-1E3F70928984}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2837587) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{C950A55F-82E3-4CC8-8FA2-E8A2A0F651F3}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition (HKLM\...\{90150000-006E-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}) (Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2880529) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{89FDC8D9-FB84-4EFE-950D-AF4EECC3B64C}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2878319) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{BC51FE30-3A56-4802-8D9E-E9BC05B56B49}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2881080) 64-Bit Edition (HKLM\...\{90150000-001A-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{F96FE9BB-CD90-472B-852E-156342618C54}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2881080) 64-Bit Edition (HKLM\...\{90150000-001B-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{F96FE9BB-CD90-472B-852E-156342618C54}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2881080) 64-Bit Edition (HKLM\...\{90150000-012B-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{F96FE9BB-CD90-472B-852E-156342618C54}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2881080) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{F96FE9BB-CD90-472B-852E-156342618C54}) (Version:  - Microsoft)
Uplay (HKLM-x32\...\Uplay) (Version: 4.5 - Ubisoft)
URL2JPEG 1.1 (HKLM-x32\...\URL2JPEG_is1) (Version:  - )
Usenet.nl (HKLM-x32\...\Usenet.nl_is1) (Version:  - )
UxStyle Core Beta (HKLM\...\{8E363055-15E5-4D8A-9C69-A0A9DE9A3337}) (Version: 0.2.2.0 - The Within Network, LLC)
Validity WBF DDK (HKLM\...\{1F91C200-8F0F-4009-A75E-DB6CE151BD4E}) (Version: 4.4.234.0 - Validity Sensors, Inc.)
Virtual City Casino (HKLM-x32\...\virtualcity) (Version: 16.9.2.739 - )
Visitor 3 Uninstall (HKLM-x32\...\Visitor 3) (Version:  - )
VLC media player 2.1.2 (HKLM-x32\...\VLC media player) (Version: 2.1.2 - VideoLAN)
VPNAutoconnect (HKLM-x32\...\{8E557F21-99AE-440D-8058-CD8CB3302E13}) (Version: 1.15 - globalip)
Watch_Dogs (HKLM-x32\...\Uplay Install 274) (Version:  - Ubisoft)
Windows Live Communications Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3503.0728 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
WinRAR 5.00 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)
WinSCP 5.5 (HKLM-x32\...\winscp3_is1) (Version: 5.5 - Martin Prikryl)
WinZip Driver Updater (HKLM-x32\...\{9854A5C4-5BE5-46E2-A989-352DD8B37E20}_is1) (Version: 1.0.648.10744 - WinZip Computing, S.L. (WinZip Computing))
Wise Registry Cleaner 7.92 (HKLM-x32\...\Wise Registry Cleaner_is1) (Version: 7.92 - WiseCleaner.com, Inc.)
WorldPainter 1.5.0 (HKLM\...\4144-4862-0472-7103) (Version: 1.5.0 - pepsoft.org)

==================== Restore Points  =========================

09-07-2014 11:11:28 Windows Update
12-07-2014 10:54:09 Revo Uninstaller Pro's restore point - Yukon Gold
12-07-2014 10:55:00 Revo Uninstaller's restore point - µTorrent
12-07-2014 10:55:35 Revo Uninstaller Pro's restore point - Yukon Gold
12-07-2014 11:01:55 Revo Uninstaller Pro's restore point - Your Software Deals 1.0.0
12-07-2014 11:06:25 Revo Uninstaller Pro's restore point - Superior Casino
12-07-2014 11:11:54 Revo Uninstaller Pro's restore point - Captain Cooks Casino
12-07-2014 11:17:38 Removed EuroCityCasino
12-07-2014 12:12:16 Revo Uninstaller Pro's restore point - Ad-Aware Antivirus

==================== Hosts content: ==========================

2014-05-25 15:54 - 2014-05-25 15:54 - 00000855 ____N C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1      localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {0FA1A03F-0DF5-49C5-892C-3504BCAED217} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\WSCStub.exe [2014-05-11] (Symantec Corporation)
Task: {12CB99FC-B5A5-4EFA-9D7A-824A5E62A21E} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
Task: {13D6BEC2-4F49-413C-A6B8-0344D2432715} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2013-11-20] (Apple Inc.)
Task: {1C9F59DA-654B-4894-BDA2-6E4EDECEAF12} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-10-22] (Piriform Ltd)
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {23AC52F5-8580-45CB-B1E0-7191BCFBA116} - System32\Tasks\Core Temp Autostart Marcel- => C:\Program Files\Core Temp\Core Temp.exe [2013-03-01] ()
Task: {23D857CA-BF22-4A04-AA4A-DA2240EE4878} - System32\Tasks\AutoKMSCustom => C:\Windows\AutoKMS\AutoKMS.exe
Task: {2640F111-D57D-42F8-8A11-60853CD1387C} - System32\Tasks\KMS Activation => C:\Program Files\KMSpico\RandomFile.exe [2013-02-20] ()
Task: {27C6C059-8CCA-4C8D-960F-9E2734268940} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {32618FFD-E0B0-4B98-9C85-AA0481A1A951} - System32\Tasks\MigrationUpdateTask => C:\Users\Marcel-\AppData\Local\MigsUpdater\mupdater.exe [2013-05-05] ()
Task: {336BAB55-2DA1-4780-AD94-2E086438F6C9} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {3E11A519-2A26-40FA-BA5F-D2E50B305A06} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {4D9D0384-E8FD-4892-87F4-19AA55AB2CAC} - System32\Tasks\Hewlett-Packard\HP CoolSense\HP CoolSense Start at Logon => C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [2013-06-07] (Hewlett-Packard Development Company, L.P.)
Task: {506831CD-00D1-4F67-845E-84E44C1B9507} - System32\Tasks\CLMLSvc_P2G8 => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2012-06-08] (CyberLink)
Task: {50C3F803-BD50-4C53-A15F-090E62B8A9AA} - System32\Tasks\HPCustParticipation HP Deskjet 2050 J510 series => C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\HPCustPartic.exe [2012-10-02] (Hewlett-Packard Co.)
Task: {55092CAC-D12E-4296-AAA0-1685B33362E5} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
Task: {553F743B-82E6-4BA0-BAF9-B5BFD58949FB} - \FreeDriverScout No Task File <==== ATTENTION
Task: {58989ABF-57C3-407B-8C81-1BCA9416732E} - \Browser Updater\Browser Updater No Task File <==== ATTENTION
Task: {5D33FF06-1668-492B-9171-2630C1FB1D35} - System32\Tasks\WinZipDriverUpdaterRunAtStartup => C:\Program Files (x86)\WinZip Driver Updater\winzipdu.exe [2011-06-03] (WinZip Computing, S.L. (WinZip Computing))
Task: {5FDF03B1-18D2-47F3-AA61-4F3CA3D73BF5} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-07-09] (Microsoft Corporation)
Task: {62DB234A-C438-4711-9F08-D65079BAAD5E} - \Lyrics Seeker Update No Task File <==== ATTENTION
Task: {64470945-96F4-4918-B67A-39204842F0A3} - System32\Tasks\CLVDLauncher => C:\Program Files (x86)\CyberLink\Power2Go8\CLVDLauncher.exe [2012-07-24] (CyberLink Corp.)
Task: {69455FB1-79D7-4B3C-B9B8-CE09B65512EA} - System32\Tasks\Run RoboForm TaskBar Icon => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2014-02-05] (Siber Systems)
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6C22B245-996E-4330-9B02-9294EC214DC6} - System32\Tasks\Process Lasso Management Console (GUI) => C:\Program Files\Process Lasso\processlasso.exe [2014-03-22] (Bitsum LLC)
Task: {6C4FF4F7-7C6C-4D22-BE63-591EC71E8A9C} - System32\Tasks\Open URL by RoboForm => Rundll32.exe url.dll,FileProtocolHandler "hxxp://www.roboform.com/test-pass.html?aaa=KICMLMLMHMOJPMLMKJGMCNNMKMNMKJCNLMOJLJOJCNGMPMLJGMCNLJPMLMOJHMNJGMJMMMJJLMHMJNJICMIMCNGMCNMMFMOMOMCNPMCNGMJMPMPMFMJMCNMMCNGMJMPMPMCNNMJNPICMLMFMHJOJCJCJGJFMPMJNHICMHJOJCJCJGJJNBJCMCLOJNIMJKJDJCNJNKJCMJNNICMJNDJCMLJKJJNMJCMPMFMOMFMPMJNFICMGJLJKJBJLIGJLIGJKJMIBNKJHIKJ"
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {741886BD-A31B-4091-AF14-70C0DD619152} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {75AB702E-FF88-4FF3-BDBD-89E0DA4B89CD} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {7F99F21B-9CA0-44DA-A60F-0A42F66D3E2E} - System32\Tasks\One-Click Optimizer => C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\WO10.exe [2013-11-19] (Ashampoo Development GmbH & Co. KG)
Task: {80B08F8E-9E69-4435-9AB2-D00F3081010B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {884D20A1-5739-4D17-82C0-B9407FB84AC2} - \Omiga Plus RunAsStdUser No Task File <==== ATTENTION
Task: {89AF243C-674B-49E5-8FEB-7A1547E0ACB9} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2013-03-07] (Intel Corporation)
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {912AB2C4-9240-4E65-892E-3AE1E1D60256} - \YourFile DownloaderUpdate No Task File <==== ATTENTION
Task: {9879667E-2B99-4069-8709-DA19907B3463} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2014-03-21] (Hewlett-Packard)
Task: {9978D875-53BE-4C87-A596-8CDE007A76A4} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-11] (Adobe Systems Incorporated)
Task: {9A9B703E-AD6C-4335-91D0-660F961398FB} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {9B907E53-51D1-4E4F-809D-D2094FC5D372} - \Software Updater No Task File <==== ATTENTION
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {A2774BCD-5537-46DA-98BB-BF76F2A18DE5} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {A346AA6B-B7C6-4E1D-B7E3-02F66B64E5D2} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe
Task: {A447104A-8E57-4418-9C8B-3853E8C89E0E} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
Task: {A5153CAB-0552-427D-A033-D4FB35AD5BEF} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {A5FFB92D-D594-4D26-B41D-C65468A63103} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv
Task: {A667E848-CDDC-45C1-91E7-3EE8ABE28ABD} - System32\Tasks\Razer_Game_Booster_AutoUpdate => C:\Program Files (x86)\Razer\Razer Game Booster\AutoUpdate.exe
Task: {AB99FD7F-9DA6-43A0-94D3-964EEAAC5758} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload
Task: {AED82269-BCBE-4230-ABEC-7D94F4B95C01} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {B04E2456-58BD-4751-9645-1D5608E10979} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {B63F6A1A-4549-4E57-9632-A39E9D6EC4DB} - \GoforFilesUpdate No Task File <==== ATTENTION
Task: {BBFC3058-BE71-456C-B94E-AF8A23DF32C9} - \BitGuard No Task File <==== ATTENTION
Task: {C3B1819F-758B-4347-A8A8-FD74D9E6F68C} - \SomotoUpdateCheckerAutoStart No Task File <==== ATTENTION
Task: {C781B977-6657-422A-A232-B58EF18964F3} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis Install => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {C80AF85D-0DE5-4AE3-899B-B8916253ACB9} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-02-22] (Microsoft Corporation)
Task: {CA8BA137-AF1E-40C5-AC3A-C112C0F486D1} - System32\Tasks\AdobeAAMUpdater-1.0-Marcel-Marcel- => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-12-15] (Adobe Systems Incorporated)
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {DCF83D36-1162-4AFA-9ED0-AA3BA1001799} - \bettermarkit_wd No Task File <==== ATTENTION
Task: {DFC64FB6-105F-4B5E-A251-F03421F42FD8} - System32\Tasks\Process Lasso Core Engine Only => C:\Program Files\Process Lasso\processgovernor.exe [2014-03-22] (Bitsum LLC)
Task: {E38542F9-3B46-480C-A33C-E5CC9166002A} - \Desk 365 RunAsStdUser No Task File <==== ATTENTION
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {E85048F2-499A-4739-B946-CAFCBF74F9A5} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\21.3.0.12\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {E87BAC48-E898-445E-A579-7BF2C0FBCDF7} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2013-03-07] (Intel Corporation)
Task: {EA4A368E-47ED-4F4A-8E6E-B53BE571D24D} - \preispilotSWU No Task File <==== ATTENTION
Task: {F05A359A-94F3-487A-9D2F-E2396354886A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {FCBD29E0-A339-4238-8176-42BBE985A43F} - \Software Updater Ui No Task File <==== ATTENTION
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\AutoKMSCustom.job => C:\Windows\AutoKMS\AutoKMS.exe
Task: C:\WINDOWS\Tasks\bettermarkit_wd.job => C:\Program Files (x86)\bettermarkit\BetterMarkIt_wd.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

==================== Loaded Modules (whitelisted) =============

2013-11-24 16:52 - 2014-06-13 04:11 - 00118728 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2013-11-17 14:18 - 2013-12-29 15:50 - 00076888 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe
2013-01-10 14:38 - 2013-01-10 14:38 - 00124728 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPItunesModule.dll
2013-01-10 14:38 - 2013-01-10 14:38 - 00051512 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPItunesProxy.dll
2013-01-10 14:38 - 2013-01-10 14:38 - 00018432 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\PowerDVD.dll
2013-12-01 22:35 - 2013-12-01 22:35 - 01102336 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\System.Data.SQLite.dll
2013-01-10 14:37 - 2013-01-10 14:37 - 00180224 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\zxing.dll
2013-09-05 01:17 - 2013-09-05 01:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2012-06-28 20:21 - 2012-06-28 20:21 - 00019456 _____ () C:\Program Files\PBO Manager v.1.4 beta\PboShellExt.dll
2013-06-07 05:16 - 2013-06-07 05:16 - 04073768 _____ () C:\Program Files (x86)\HP SimplePass\IEWebSiteLogon.exe
2013-10-04 00:42 - 2013-10-04 00:42 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-05-06 12:16 - 2014-05-06 12:16 - 00124728 _____ () C:\Users\Administrator\AppData\Local\assembly\dl3\MJZDWRBC.9QP\LM6HZG0W.COB\4f8ed896\00041553_2fefcd01\HPItunesModule.DLL
2014-05-06 12:16 - 2014-05-06 12:16 - 00018432 _____ () C:\Users\Administrator\AppData\Local\assembly\dl3\MJZDWRBC.9QP\LM6HZG0W.COB\cd4e248e\00041553_2fefcd01\PowerDVD.DLL
2011-02-24 20:07 - 2011-02-24 20:07 - 00470120 _____ () C:\Program Files (x86)\Acronis\DriveMonitor\adm_tray.exe
2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2009-08-23 19:58 - 2009-08-23 19:58 - 00094208 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2014-01-10 23:50 - 2013-12-23 20:59 - 00376608 _____ () C:\Program Files (x86)\Connectify\NativeLibrary.dll
2014-01-10 23:50 - 2013-12-23 20:59 - 03170080 _____ () C:\Program Files (x86)\Connectify\ConnectifyNAT.dll
2014-01-10 23:50 - 2013-12-23 20:59 - 00714016 _____ () C:\Program Files (x86)\Connectify\log4cplus.dll
2014-01-10 23:50 - 2013-12-23 20:59 - 00354080 _____ () C:\Program Files (x86)\Connectify\LibDispatch.dll
2013-08-16 18:40 - 2013-05-09 04:23 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2013-06-07 05:16 - 2013-06-07 05:16 - 00019240 _____ () C:\Program Files (x86)\HP SimplePass\DownloadManager.dll
2013-07-30 20:45 - 2012-06-08 05:34 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2012-06-08 11:34 - 2012-06-08 11:34 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
2014-06-11 14:51 - 2014-06-05 15:58 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\libglesv2.dll
2014-06-11 14:51 - 2014-06-05 15:58 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\libegl.dll
2014-06-11 14:51 - 2014-06-05 15:58 - 04217672 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\pdf.dll
2014-06-11 14:51 - 2014-06-05 15:58 - 00414536 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll
2014-06-11 14:51 - 2014-06-05 15:58 - 01732424 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ffmpegsumo.dll
2011-02-24 19:39 - 2011-02-24 19:39 - 00012128 _____ () C:\Program Files (x86)\Common Files\Acronis\DriveMonitor\Common\icudt38.dll
2013-12-26 13:06 - 2013-07-29 15:19 - 00369000 _____ () C:\Program Files (x86)\CyberLink\SoftDMA\Kernel\DMR\CLNetMediaDMA.dll
2014-07-11 15:18 - 2014-07-08 08:18 - 14663856 _____ () C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\PepperFlash\14.0.0.145\pepflashplayer.dll
2014-07-13 12:07 - 2014-07-12 02:53 - 01116672 _____ () C:\Program Files (x86)\Steam\libavcodec-55.dll
2014-07-13 12:07 - 2014-07-12 02:53 - 00399360 _____ () C:\Program Files (x86)\Steam\libavformat-55.dll
2014-07-13 12:07 - 2014-07-12 02:53 - 00331264 _____ () C:\Program Files (x86)\Steam\libavresample-1.dll
2014-07-13 12:07 - 2014-07-12 02:53 - 00438784 _____ () C:\Program Files (x86)\Steam\libavutil-53.dll
2014-07-13 12:07 - 2014-06-27 00:40 - 00764416 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2014-07-13 12:07 - 2014-07-12 02:53 - 02139328 _____ () C:\Program Files (x86)\Steam\video.dll
2014-07-13 12:07 - 2014-04-29 02:37 - 00519168 _____ () C:\Program Files (x86)\Steam\libswscale-2.dll
2014-07-13 12:07 - 2014-07-12 02:53 - 01116864 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2014-07-13 12:07 - 2014-05-02 01:35 - 20628160 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"

==================== EXE Association (whitelisted) =============


==================== MSCONFIG/TASK MANAGER disabled items =========

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: BEService => 3
MSCONFIG\Services: EBOOSTRSVC => 2
MSCONFIG\Services: lansweeperservice => 2
MSCONFIG\Services: LavasoftAdAwareService11 => 2
MSCONFIG\Services: SBUpd => 2
MSCONFIG\Services: SolutoLauncherService => 2
MSCONFIG\Services: SolutoRemoteService => 3
MSCONFIG\Services: SolutoService => 2
MSCONFIG\Services: valWBFPolicyService => 2
MSCONFIG\Services: VideoAcceleratorService => 2
MSCONFIG\startupreg: DAEMON Tools Lite => "c:\program files (x86)\daemon tools lite\dtlite.exe" -autorun
MSCONFIG\startupreg: iTunesHelper => "c:\program files (x86)\itunes\ituneshelper.exe"
MSCONFIG\startupreg: LogMeIn Hamachi Ui =>
MSCONFIG\startupreg: Steam => "c:\program files (x86)\steam\steam.exe" -silent
HKLM\...\StartupApproved\StartupFolder: => "GrFinger Desktop Identity.lnk"
HKLM\...\StartupApproved\StartupFolder: => "Secunia PSI Tray.lnk"
HKLM\...\StartupApproved\Run: => "BCSSync"
HKLM\...\StartupApproved\Run: => "Launch LCore"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "AdAwareTray"
HKLM\...\StartupApproved\Run32: => "RemoteControl10"
HKLM\...\StartupApproved\Run32: => "BlueStacks Agent"
HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui"
HKLM\...\StartupApproved\Run32: => "AdobeCS6ServiceManager"
HKLM\...\StartupApproved\Run32: => "SwitchBoard"
HKLM\...\StartupApproved\Run32: => "IObit Malware Fighter"
HKLM\...\StartupApproved\Run32: => "WsmUpdater"
HKCU\...\StartupApproved\Run: => "C:\Program Files (x86)\NetMeter\NetMeter.exe"

==================== Faulty Device Manager Devices =============

Name: HP Truevision HD
Description: USB-Videogerät
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: Microsoft
Service: usbvideo
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Fake Webcam
Description: Fake Webcam
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Web Solution Mart
Service: fwdrv
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (07/13/2014 00:00:09 PM) (Source: XTUService) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
  bei IronCity.Core.Server.CoreServer.Start()
  bei XtuService.XtuService1.OnStart(String[] args)
  bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (07/13/2014 00:00:00 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: IAStorDataMgrSvc.exe, Version: 11.5.9.1002, Zeitstempel: 0x5065e128
Name des fehlerhaften Moduls: IAStorUtil.ni.dll, Version: 11.5.9.1002, Zeitstempel: 0x5065e124
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002f3fd
ID des fehlerhaften Prozesses: 0x10a4
Startzeit der fehlerhaften Anwendung: 0xIAStorDataMgrSvc.exe0
Pfad der fehlerhaften Anwendung: IAStorDataMgrSvc.exe1
Pfad des fehlerhaften Moduls: IAStorDataMgrSvc.exe2
Berichtskennung: IAStorDataMgrSvc.exe3
Vollständiger Name des fehlerhaften Pakets: IAStorDataMgrSvc.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: IAStorDataMgrSvc.exe5

Error: (07/13/2014 11:59:58 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: IAStorDataMgrSvc.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.NullReferenceException
Stapel:
  bei IAStorUtil.SystemDataModelListener.ProcessSystemDataModelChanges()
  bei IAStorUtil.SystemDataModelListener.LoadSavedSystemState()
  bei IAStorDataMgr.EventRelay.<Start>b__0(System.Object)
  bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
  bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
  bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
  bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
  bei System.Threading.ThreadPoolWorkQueue.Dispatch()
  bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (07/13/2014 03:37:25 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2281

Error: (07/13/2014 03:37:25 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2281

Error: (07/13/2014 03:37:25 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/13/2014 03:37:24 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1171

Error: (07/13/2014 03:37:24 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1171

Error: (07/13/2014 03:37:24 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/13/2014 01:12:44 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418154


System errors:
=============
Error: (07/13/2014 00:00:19 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Rapid Storage-Technologie" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (07/13/2014 11:57:36 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "BlueStacks Android Service" ist vom Dienst "BlueStacks Hypervisor" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%2

Error: (07/13/2014 11:57:10 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "BlueStacks Hypervisor" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (07/13/2014 11:57:04 AM) (Source: NETLOGON) (EventID: 3095) (User: )
Description: Dieser Computer ist als Mitglied einer Arbeitsgruppe konfiguriert, nicht als
Mitglied einer Domäne. Der Anmeldedienst braucht bei dieser
Konfiguration nicht gestartet zu sein.

Error: (07/13/2014 11:56:23 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "UAC-Dateivirtualisierung" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275

Error: (07/13/2014 11:55:00 AM) (Source: sfdrv01a) (EventID: 12) (User: )
Description:

Error: (07/13/2014 11:53:29 AM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Der Dienst Steganos Volatile Disk konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.

Error: (07/12/2014 05:05:18 PM) (Source: DCOM) (EventID: 10010) (User: Marcel)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}


Microsoft Office Sessions:
=========================
Error: (07/13/2014 00:00:09 PM) (Source: XTUService) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
  bei IronCity.Core.Server.CoreServer.Start()
  bei XtuService.XtuService1.OnStart(String[] args)
  bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (07/13/2014 00:00:00 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: IAStorDataMgrSvc.exe11.5.9.10025065e128IAStorUtil.ni.dll11.5.9.10025065e124c00000050002f3fd10a401cf9e812d2fb945C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exeC:\WINDOWS\assembly\NativeImages_v4.0.30319_32\IAStorUtil\d1bcba4535bd6be21398119cbec8d64e\IAStorUtil.ni.dll7370510f-0a74-11e4-bf69-f4b7e256f89e

Error: (07/13/2014 11:59:58 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: IAStorDataMgrSvc.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.NullReferenceException
Stapel:
  bei IAStorUtil.SystemDataModelListener.ProcessSystemDataModelChanges()
  bei IAStorUtil.SystemDataModelListener.LoadSavedSystemState()
  bei IAStorDataMgr.EventRelay.<Start>b__0(System.Object)
  bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
  bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
  bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
  bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
  bei System.Threading.ThreadPoolWorkQueue.Dispatch()
  bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (07/13/2014 03:37:25 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2281

Error: (07/13/2014 03:37:25 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2281

Error: (07/13/2014 03:37:25 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/13/2014 03:37:24 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1171

Error: (07/13/2014 03:37:24 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1171

Error: (07/13/2014 03:37:24 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (07/13/2014 01:12:44 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418154


CodeIntegrity Errors:
===================================
  Date: 2013-12-26 22:30:21.833
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:30:16.427
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:30:14.982
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:30:06.419
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:17:07.949
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:17:05.109
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:17:05.094
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:17:05.094
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:17:05.078
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2013-12-26 22:17:04.578
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Memory info ===========================

Percentage of memory in use: 26%
Total physical RAM: 16273.27 MB
Available physical RAM: 11981.66 MB
Total Pagefile: 65425.27 MB
Available Pagefile: 60411.56 MB
Total Virtual: 131072 MB
Available Virtual: 131071.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:912.59 GB) (Free:297.56 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (RECOVERY) (Fixed) (Total:17.8 GB) (Free:16.84 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (DLAN-500AV-WRLP) (CDROM) (Total:0.11 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: A50E1C7D)

Partition: GPT Partition Type.

==================== End Of Log ============================

schrauber 14.07.2014 09:24

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)


Alle Zeitangaben in WEZ +1. Es ist jetzt 10:40 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27