FRST:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-07-2014 02
Ran by Sasha (administrator) on SASHAS-PC on 01-08-2014 10:46:36
Running from C:\Users\Sasha\Downloads
Platform: Windows 8 Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Binary Fortress Software) D:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe
(SafeNet Inc.) C:\Windows\System32\hasplms.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Perforce Software Inc.) D:\Program Files\Perforce\Server\p4s.exe
(Perforce Software Inc.) D:\Program Files\Perforce\Proxy\p4ps.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Razer Inc.) D:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
(A-Volute) C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(O&O Software GmbH) C:\Program Files\OO Software\DiskImage\oodiag.exe
(VMware, Inc.) D:\Program Files (x86)\VMware\VMware player\vmware-authd.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
(Microsoft Corporation) C:\Windows\System32\vdsldr.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(Opera Software) D:\Program Files (x86)\Opera\23.0.1522.60\opera.exe
() D:\Program Files (x86)\Opera\23.0.1522.60\opera_crashreporter.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(Opera Software) D:\Program Files (x86)\Opera\23.0.1522.60\opera.exe
(Binary Fortress Software) D:\Program Files (x86)\DisplayFusion\DisplayFusion.exe
(Opera Software) D:\Program Files (x86)\Opera\23.0.1522.60\opera.exe
(Opera Software) D:\Program Files (x86)\Opera\23.0.1522.60\opera.exe
(Opera Software) D:\Program Files (x86)\Opera\23.0.1522.60\opera.exe
() D:\Program Files (x86)\RocketDock\RocketDock.exe
(Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
() C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
(Binary Fortress Software) D:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6032.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(Binary Fortress Software) D:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6064.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Dropbox, Inc.) C:\Users\Sasha\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Opera Software) D:\Program Files (x86)\Opera\23.0.1522.60\opera.exe
(Opera Software) D:\Program Files (x86)\Opera\23.0.1522.60\opera.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7203032 2013-10-22] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-01-18] (IvoSoft)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation)
HKLM-x32\...\Run: [AVP] => C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\runner_avp.exe [24256 2013-10-16] (Kaspersky Lab ZAO)
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-852994989-324450782-3891972763-1001\...\Run: [DisplayFusion] => D:\Program Files (x86)\DisplayFusion\DisplayFusion.exe [7952224 2013-11-27] (Binary Fortress Software)
HKU\S-1-5-21-852994989-324450782-3891972763-1001\...\Run: [RocketDock] => D:\Program Files (x86)\RocketDock\RocketDock.exe [495616 2007-09-02] ()
HKU\S-1-5-21-852994989-324450782-3891972763-1001\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [466656 2014-05-23] (Sony)
HKU\S-1-5-21-852994989-324450782-3891972763-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
Startup: C:\Users\Sasha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Sasha\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Sasha\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64\SkyDriveShell64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Sasha\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64\SkyDriveShell64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Sasha\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64\SkyDriveShell64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Sasha\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Sasha\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Sasha\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Sasha\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: KAVOverlayIcon -> {dd230880-495a-11d1-b064-008048ec2fc5} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\shellex.dll (Kaspersky Lab ZAO)
ShellIconOverlayIdentifiers: OODIIcon -> {14A94384-BBED-47ed-86C0-6BF63FD892D0} => C:\Program Files\OO Software\DiskImage\oodishi.dll (O&O Software GmbH)
ShellIconOverlayIdentifiers: P4EXPCheckoutOverlay -> {80E008A4-EAE7-4867-AEB0-1A245F070F25} => D:\Program Files\Perforce\p4exp64.dll (Perforce Software Inc.)
ShellIconOverlayIdentifiers: P4EXPSyncdOverlay -> {ADF262C1-E8FE-49BE-AD63-F77CD4A6CCD9} => D:\Program Files\Perforce\p4exp64.dll (Perforce Software Inc.)
ShellIconOverlayIdentifiers: P4EXPUpdateOverlay -> {C550CDA2-37D7-4838-A9D7-65ECB1EB5AB2} => D:\Program Files\Perforce\p4exp64.dll (Perforce Software Inc.)
ShellIconOverlayIdentifiers: ShareOverlay -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
ShellIconOverlayIdentifiers-x32: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Sasha\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\SkyDriveShell.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Sasha\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\SkyDriveShell.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Sasha\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\SkyDriveShell.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: "DropboxExt1" -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Sasha\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: "DropboxExt2" -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Sasha\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: "DropboxExt3" -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Sasha\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: "DropboxExt4" -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Sasha\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: "DropboxExt5" -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Sasha\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: "DropboxExt6" -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Sasha\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: "DropboxExt7" -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Sasha\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: "DropboxExt8" -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Sasha\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: KAVOverlayIcon -> {dd230880-495a-11d1-b064-008048ec2fc5} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\shellex.dll (Kaspersky Lab ZAO)
ShellIconOverlayIdentifiers-x32: P4EXPCheckoutOverlay -> {80E008A4-EAE7-4867-AEB0-1A245F070F25} => D:\Program Files\Perforce\p4exp.dll (Perforce Software Inc.)
ShellIconOverlayIdentifiers-x32: P4EXPSyncdOverlay -> {ADF262C1-E8FE-49BE-AD63-F77CD4A6CCD9} => D:\Program Files\Perforce\p4exp.dll (Perforce Software Inc.)
ShellIconOverlayIdentifiers-x32: P4EXPUpdateOverlay -> {C550CDA2-37D7-4838-A9D7-65ECB1EB5AB2} => D:\Program Files\Perforce\p4exp.dll (Perforce Software Inc.)
ShellIconOverlayIdentifiers-x32: ShareOverlay -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> D:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> D:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {4871A87A-BFDD-4106-8153-FFDE2BAC2967} hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.6.2.cab
DPF: HKLM-x32 {A672558F-A878-4D5A-A921-627C091CEB6A} hxxp://download.flatcast.net/objects/NpFp530.dll
DPF: HKLM-x32 {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} https://battlefield.play4free.com/static/updater/BP4FUpdater_1.0.96.0.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1
Tcpip\..\Interfaces\{EF50FB12-8FE7-49B4-8BBC-E2045BA799CC}: [NameServer]192.168.137.1
FireFox:
========
FF ProfilePath: C:\Users\Sasha\AppData\Roaming\Mozilla\Firefox\Profiles\zntnjtxn.default
FF NewTab: chrome://quick_start/content/index.html
FF NetworkProxy: "gopher", ""
FF NetworkProxy: "gopher_port", 0
FF NetworkProxy: "http", "www-proxy.t-online.de"
FF NetworkProxy: "http_port", 80
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks_version", 4
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @java.com/DTPlugin,version=10.65.2 - D:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.65.2 - D:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll No File
FF Plugin: @videolan.org/vlc,version=2.1.0 - D:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.1 - D:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.4 - D:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @esn/esnlaunch,version=2.1.3 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll No File
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 - C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon)
FF Plugin-x32: @nielsen/FirefoxTracker - C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter2\FirefoxAddOns\npfirefoxtracker.dll No File
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @TrendMicro.com/FFExtension - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension\components\npToolbarChrome.dll No File
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - D:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin HKCU: @kaspersky.com/Kaspersky PURE - C:\PROGRA~2\KASPER~1\KASPER~1.0\KASPER~2\npkpmAutofill.dll (Kaspersky Lab)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Sasha\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Sasha\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Sasha\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Sasha\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Sasha\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Sasha\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: facebook.com/fbDesktopPlugin - C:\Users\Sasha\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: sony.com/MediaGoDetector - D:\Program Files (x86)\Sony\Media Go\npMediaGoDetector.dll (Sony Network Entertainment International LLC)
FF Plugin HKCU: ubisoft.com/uplaypc - D:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NpFp530.dll (1 mal 1 Software GmbH)
FF Plugin ProgramFiles/Appdata: C:\Users\Sasha\AppData\Roaming\mozilla\plugins\NpFp530.dll (1 mal 1 Software GmbH)
FF Plugin ProgramFiles/Appdata: C:\Users\Sasha\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Sasha\AppData\Roaming\mozilla\plugins\npgtpo3dautoplugin.dll ()
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\omiga-plus.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Firefox Old Version Update Hotfix - C:\Users\Sasha\AppData\Roaming\Mozilla\Firefox\Profiles\zntnjtxn.default\Extensions\firefox-hotfix@mozilla.org.xpi [2014-07-27]
FF Extension: MySpass Adblocker - C:\Users\Sasha\AppData\Roaming\Mozilla\Firefox\Profiles\zntnjtxn.default\Extensions\jid1-g6ZyfXJSgAF3Iw@jetpack.xpi [2014-06-30]
FF Extension: Adblock Plus - C:\Users\Sasha\AppData\Roaming\Mozilla\Firefox\Profiles\zntnjtxn.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-06-30]
FF HKLM-x32\...\Firefox\Extensions: - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com [2013-06-11]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com [2013-06-11]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com
FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com [2013-06-11]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com [2013-06-11]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com [2013-06-11]
FF HKLM-x32\...\Firefox\Extensions: [netsight@nielsen.com] - C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter2\FirefoxAddOns\netsight@nielsen.xpi
FF HKCU\...\Firefox\Extensions: [{72CA2996-F580-47DF-98FF-0B853D09CEC8}] - C:\Users\Sasha\AppData\Roaming\Kaspersky Lab\Password Manager\kpmAutofill
FF Extension: Password Manager plugin - C:\Users\Sasha\AppData\Roaming\Kaspersky Lab\Password Manager\kpmAutofill [2013-06-11]
FF HKCU\...\Thunderbird\Extensions: [{72CA2996-F580-47DF-98FF-0B853D09CEC8}] - C:\Users\Sasha\AppData\Roaming\Kaspersky Lab\Password Manager\kpmAutofill
Chrome:
=======
CHR HomePage:
CHR Extension: (Google Docs) - C:\Users\Sasha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-30]
CHR Extension: (Google Drive) - C:\Users\Sasha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-30]
CHR Extension: (YouTube) - C:\Users\Sasha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-30]
CHR Extension: (Google-Suche) - C:\Users\Sasha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-30]
CHR Extension: (Modul zur Link-Untersuchung) - C:\Users\Sasha\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2014-07-30]
CHR Extension: (Sicherer Zahlungsverkehr) - C:\Users\Sasha\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh [2014-07-30]
CHR Extension: (Content Blocker) - C:\Users\Sasha\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2014-07-30]
CHR Extension: (Virtual Keyboard) - C:\Users\Sasha\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2014-07-30]
CHR Extension: (Google Wallet) - C:\Users\Sasha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-01]
CHR Extension: (Google Mail) - C:\Users\Sasha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-30]
CHR Extension: (Anti-Banner) - C:\Users\Sasha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2014-07-30]
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\urladvisor.crx [2013-01-11]
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\online_banking_chrome.crx [2013-01-11]
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\content_blocker_chrome.crx [2013-01-11]
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\virtkbd.crx [2013-01-11]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\ab.crx [2013-01-11]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2012-06-01] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [951936 2012-06-01] (ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2012-08-16] (ASUSTeK Computer Inc.)
R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356128 2013-10-16] (Kaspersky Lab ZAO)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-05-27] () [File not signed]
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [398096 2013-11-18] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2013-11-18] (BlueStack Systems, Inc.)
R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [819040 2012-12-21] (Infowatch)
S3 DfSdkS; D:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\DfsdkS64.exe [544768 2009-08-24] (mst software GmbH, Germany) [File not signed]
R2 DisplayFusionService; D:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe [1375600 2013-11-27] (Binary Fortress Software)
R2 hasplms; C:\Windows\system32\hasplms.exe [4412872 2012-08-23] (SafeNet Inc.)
R2 IAStorDataMgrSvc; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [7168 2012-08-16] (Intel Corporation) [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-07-14] (LogMeIn, Inc.)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5110192 2012-10-24] (INCA Internet Co., Ltd.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18956064 2014-07-25] (NVIDIA Corporation)
R2 OO DiskImage; C:\Program Files\OO Software\DiskImage\oodiag.exe [6258480 2013-09-09] (O&O Software GmbH)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [976672 2014-06-10] (Overwolf LTD)
R2 Perforce; D:\Program Files\Perforce\Server\p4s.exe [3455104 2012-11-09] (Perforce Software Inc.)
R2 Perforce Proxy; D:\Program Files\Perforce\Proxy\p4ps.exe [1801344 2012-11-09] (Perforce Software Inc.)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-07-31] ()
R2 RzKLService; D:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [105448 2014-02-25] (Razer Inc.)
R2 RzMaelstromVADStreamingService; C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [4249088 2014-03-06] (A-Volute) [File not signed]
R2 VMAuthdService; D:\Program Files (x86)\VMware\VMware player\vmware-authd.exe [86744 2014-04-14] (VMware, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16056 2014-03-29] (Microsoft Corporation)
S3 WO_LiveService; D:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\LiveTunerService.exe [885096 2013-10-08] ()
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2012-04-19] (ASUSTek Computer Inc.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [29696 2012-09-20] (Microsoft Corporation)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-08-22] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()
S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [310984 2013-04-11] ()
S3 AU8168; C:\Windows\system32\DRIVERS\au630x64.sys [792648 2013-09-23] (Realtek )
R3 BEHRINGER_2902; C:\Windows\System32\Drivers\BUSB2902.sys [460864 2009-10-30] (BEHRINGER)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [77584 2013-11-18] (BlueStack Systems)
R3 bthav; C:\Windows\system32\drivers\bthav.sys [40448 2008-07-10] (CSR, plc)
S3 BtHidBus; C:\Windows\System32\Drivers\BtHidBus.sys [24032 2013-10-08] (IVT Corporation.)
R3 BUSB_AUDIO_WDM; C:\Windows\system32\drivers\busbwdm.sys [49728 2009-10-30] (BEHRINGER)
R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [98064 2012-12-10] (Infowatch)
R1 CSVirtualDiskDrv; C:\Windows\system32\DRIVERS\CSVirtualDiskDrv.sys [67344 2012-12-10] (Infowatch)
R3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
R3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R3 hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [46136 2014-07-15] (LogMeIn Inc.)
R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [323584 2012-10-06] (SafeNet Inc.)
S3 IvtAudioBusSrv; C:\Windows\System32\Drivers\IvtBtBus.sys [27256 2012-12-24] (IVT Corporation.)
S3 IvtPanBusSrv; C:\Windows\System32\Drivers\btnetBus.sys [31480 2012-12-24] (IVT Corporation.)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-04-02] (Kaspersky Lab ZAO)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29792 2013-11-13] (Kaspersky Lab)
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [90208 2013-10-16] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625760 2013-10-16] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [30304 2014-04-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [29280 2013-10-16] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [29280 2013-10-16] (Kaspersky Lab ZAO)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [50448 2013-07-15] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [178448 2013-07-15] (Kaspersky Lab ZAO)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [42696 2012-12-31] ()
R2 LiveTunerPM; D:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\LiveTunerProcessMonitor64.sys [12824 2011-03-08] ()
S3 ManyCam; C:\Windows\system32\DRIVERS\mcvidrv_x64.sys [44544 2013-01-15] (ManyCam LLC)
S3 mcaudrv_simple; C:\Windows\system32\drivers\mcaudrv_x64.sys [28160 2013-01-31] (ManyCam LLC)
S3 NdisImPlatformMp; C:\Windows\system32\DRIVERS\NdisImPlatform.sys [126464 2012-07-26] (Microsoft Corporation)
S3 Netaapl; C:\Windows\system32\DRIVERS\netaapl64.sys [23040 2013-07-25] (Apple Inc.) [File not signed]
S3 NPPTNT2; C:\Windows\SysWOW64\npptNT2.sys [4682 2005-01-02] (INCA Internet Co., Ltd.) [File not signed]
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-07-25] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
R0 oodisr; C:\Windows\System32\DRIVERS\oodisr.sys [116936 2013-09-09] (O&O Software GmbH)
R0 oodisrh; C:\Windows\System32\DRIVERS\oodisrh.sys [41160 2013-09-09] (O&O Software GmbH)
R0 oodivd; C:\Windows\System32\DRIVERS\oodivd.sys [255688 2013-09-09] (O&O Software GmbH)
R0 oodivdh; C:\Windows\System32\DRIVERS\oodivdh.sys [44744 2013-09-09] (O&O Software GmbH)
S3 PGUSBWDM_AQVOX; C:\Windows\System32\Drivers\aqvoxusb.sys [466496 2010-10-09] (Ploytec GmbH)
R3 RZMAELSTROMVADService; C:\Windows\system32\drivers\RzMaelstromVAD.sys [40696 2014-03-06] (Windows (R) Win 7 DDK provider)
S3 SNPSTD3; C:\Windows\system32\DRIVERS\snpstd3.sys [10550272 2007-03-27] (Sonix Co. Ltd.)
S3 taphss6; C:\Windows\system32\DRIVERS\taphss6.sys [42184 2013-02-12] (Anchorfree Inc.)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2012-12-13] (Apple, Inc.) [File not signed]
R3 vmkbd2; C:\Windows\system32\drivers\VMkbd.sys [33496 2014-04-14] (VMware, Inc.)
R0 vsock; C:\Windows\System32\drivers\vsock.sys [73296 2013-10-08] (VMware, Inc.)
S3 xb1usb; C:\Windows\System32\drivers\xb1usb.sys [34016 2014-05-27] (Microsoft Corporation)
R3 xusb22; C:\Windows\System32\drivers\xusb22.sys [89088 2012-07-26] (Microsoft Corporation)
S3 AppObserver; \??\C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter2\appobserver64.sys [X]
S3 BT; \SystemRoot\system32\DRIVERS\btnetdrv.sys [X]
S3 BTCOM; \SystemRoot\system32\DRIVERS\btcomport.sys [X]
S3 Btcsrusb; \SystemRoot\System32\Drivers\btcusb.sys [X]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]
S3 dump_wmimmc; \??\D:\AeriaGames\Wolfteam-DE\GameGuard\dump_wmimmc.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 GPUZ; \??\C:\Windows\TEMP\GPUZ.sys [X]
S3 IvtComBusSrv; \SystemRoot\System32\Drivers\btcombus.sys [X]
S3 VBoxNetFlt; \SystemRoot\system32\DRIVERS\VBoxNetFlt.sys [X]
S3 X6va011; \??\C:\Windows\SysWOW64\Drivers\X6va011 [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-08-01 10:46 - 2014-08-01 10:46 - 00415232 _____ (Farbar) C:\Users\Sasha\Downloads\FSS.exe
2014-08-01 10:46 - 2014-08-01 10:46 - 00034854 _____ () C:\Users\Sasha\Downloads\FRST.txt
2014-08-01 10:46 - 2014-08-01 10:46 - 00000000 ____D () C:\FRST
2014-08-01 10:45 - 2014-08-01 10:46 - 02094080 _____ (Farbar) C:\Users\Sasha\Downloads\FRST64.exe
2014-08-01 06:51 - 2014-08-01 10:10 - 00055976 _____ () C:\Windows\WindowsUpdate.log
2014-08-01 06:51 - 2014-08-01 06:51 - 00000972 _____ () C:\Windows\PFRO.log
2014-08-01 06:50 - 2014-08-01 06:50 - 00000000 ____D () C:\AdwCleaner
2014-08-01 06:35 - 2014-08-01 06:35 - 00041768 _____ () C:\ComboFix.txt
2014-08-01 06:29 - 2014-08-01 06:35 - 00000000 ____D () C:\Qoobox
2014-08-01 06:29 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-08-01 06:29 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-08-01 06:29 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-08-01 06:29 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-08-01 06:29 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-08-01 06:29 - 2000-08-31 01:00 - 00212480 _____ (SteelWerX) C:\Windows\SWXCACLS.exe
2014-08-01 06:29 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-08-01 06:29 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-08-01 06:29 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-08-01 06:21 - 2014-08-01 06:21 - 00000739 _____ () C:\DelFix.txt
2014-08-01 01:50 - 2014-08-01 01:50 - 00000000 ____D () C:\ProgramData\LogMeIn
2014-07-31 20:45 - 2014-07-31 23:25 - 00295720 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-07-31 20:45 - 2014-07-31 20:54 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-07-31 20:33 - 2014-07-31 20:33 - 00000000 ____D () C:\Users\Sasha\Documents\Battlefield 4
2014-07-31 17:15 - 2014-07-31 17:15 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-07-31 15:33 - 2014-07-31 19:20 - 00000000 ____D () C:\Users\Sasha\Documents\FIFA World
2014-07-31 15:32 - 2014-07-31 15:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA Sports FIFA World
2014-07-30 20:58 - 2014-07-30 20:58 - 00001406 _____ () C:\Users\Sasha\AppData\Roaming\BreakingPoint_Options.ini
2014-07-30 20:43 - 2014-07-30 20:44 - 00000000 ____D () C:\Users\Sasha\Documents\Arma 3
2014-07-30 20:43 - 2014-07-30 20:43 - 00000000 ____D () C:\ProgramData\Bohemia Interactive
2014-07-30 14:00 - 2014-07-30 14:00 - 00000000 ____D () C:\ProgramData\RzMaelstromVAD_1.1.52.1675
2014-07-30 13:44 - 2014-07-30 13:44 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-07-30 10:45 - 2014-07-30 10:45 - 00319912 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-07-30 10:45 - 2014-07-30 10:45 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-07-30 10:45 - 2014-07-30 10:45 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-07-30 10:45 - 2014-07-30 10:45 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-07-30 10:45 - 2014-07-30 10:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-30 10:23 - 2014-07-30 10:23 - 00000000 ____D () C:\Users\Sasha\AppData\Local\cFos
2014-07-29 23:49 - 2014-08-01 06:54 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-29 23:49 - 2014-07-29 23:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-07-29 23:49 - 2014-07-29 23:49 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-29 23:49 - 2014-07-29 23:49 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-07-29 23:49 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-07-29 23:49 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-07-29 23:49 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-07-29 23:16 - 2014-07-29 23:16 - 00000000 ____D () C:\Windows\ERUNT
2014-07-29 22:42 - 2014-07-29 22:42 - 05120240 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-29 22:35 - 2014-07-29 22:45 - 00000000 ____D () C:\Windows\erdnt
2014-07-29 16:42 - 2014-07-25 14:50 - 01715224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2014-07-29 16:42 - 2014-07-25 14:50 - 01291280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2014-07-29 11:30 - 2014-07-29 16:56 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\Synthesia
2014-07-29 11:24 - 2014-07-29 11:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Synthesia
2014-07-29 10:57 - 2014-07-29 10:57 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\Spiritsoft
2014-07-28 15:47 - 2014-07-28 15:47 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\BitTorrent Sync
2014-07-25 14:05 - 2014-07-25 14:05 - 00000000 ____D () C:\Windows\rescache
2014-07-24 12:30 - 2014-07-30 20:42 - 00000297 _____ () C:\Users\Sasha\AppData\Roaming\BreakingPoint_Login.ini
2014-07-24 11:53 - 2014-07-24 11:53 - 00000000 ____D () C:\Users\Sasha\AppData\Local\Bohemia_Interactive
2014-07-24 11:53 - 2014-07-24 11:53 - 00000000 ____D () C:\Users\Sasha\AppData\Local\Arma 3 Launcher
2014-07-23 04:07 - 2014-04-29 23:32 - 01301504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-07-23 04:07 - 2014-04-29 23:22 - 01023488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-07-23 04:05 - 2014-05-03 06:47 - 03246592 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-07-23 04:05 - 2014-05-03 04:34 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-07-23 04:04 - 2014-06-18 00:27 - 01440256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-07-23 04:04 - 2014-06-18 00:24 - 01557504 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-23 04:04 - 2014-06-11 05:18 - 04038144 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-23 04:04 - 2014-06-02 23:33 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2014-07-23 04:04 - 2014-05-30 00:31 - 00452608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2014-07-23 04:04 - 2014-05-30 00:03 - 00588288 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2014-07-23 04:04 - 2014-05-30 00:02 - 01281536 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-23 04:04 - 2014-05-30 00:02 - 00439808 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll
2014-07-23 04:04 - 2014-04-03 12:19 - 00328024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2014-07-23 04:04 - 2014-04-03 04:44 - 00619008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-07-23 04:04 - 2014-03-31 23:08 - 00387268 _____ () C:\Windows\system32\ApnDatabase.xml
2014-07-23 04:04 - 2014-03-28 09:23 - 19759104 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-07-23 04:04 - 2014-03-28 07:18 - 17562112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-07-23 04:04 - 2014-03-25 00:42 - 00305152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wusa.exe
2014-07-23 04:04 - 2014-03-24 23:56 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe
2014-07-23 04:03 - 2014-06-19 03:12 - 01366528 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-23 04:03 - 2014-06-19 03:12 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2014-07-23 04:03 - 2014-06-19 03:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2014-07-23 04:03 - 2014-06-19 03:12 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-23 04:03 - 2014-06-19 03:11 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-23 04:03 - 2014-06-19 03:10 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-23 04:03 - 2014-06-19 03:10 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-07-23 04:03 - 2014-06-19 03:10 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-23 04:03 - 2014-06-19 03:10 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-23 04:03 - 2014-06-19 01:53 - 01766400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-23 04:03 - 2014-06-19 01:53 - 01141760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-23 04:03 - 2014-06-19 01:53 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-23 04:03 - 2014-06-19 01:53 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-07-23 04:03 - 2014-06-19 01:53 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2014-07-23 04:03 - 2014-06-19 01:52 - 13732352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-23 04:03 - 2014-06-19 01:52 - 01440768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-23 04:03 - 2014-06-19 01:52 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-23 04:03 - 2014-06-19 01:52 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-07-23 04:03 - 2014-06-19 01:52 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-07-23 04:03 - 2014-06-19 01:52 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-07-23 04:03 - 2014-06-19 01:52 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-07-23 04:03 - 2014-06-18 23:05 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2014-07-23 04:03 - 2014-04-12 10:27 - 00172888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-07-23 04:03 - 2014-04-12 10:10 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-07-23 04:03 - 2014-04-12 10:09 - 01043968 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
2014-07-23 04:03 - 2014-04-12 10:09 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-07-23 04:03 - 2014-04-12 10:09 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-07-23 04:03 - 2014-04-12 10:08 - 00827904 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-07-23 04:03 - 2014-04-12 10:08 - 00318464 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-07-23 04:03 - 2014-04-12 10:07 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-07-23 04:03 - 2014-04-12 08:23 - 00961536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll
2014-07-23 04:03 - 2014-04-12 08:23 - 00273920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-07-23 04:03 - 2014-04-12 08:23 - 00178688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-07-23 04:03 - 2014-04-12 08:23 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-07-23 04:03 - 2014-04-12 08:22 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-07-23 04:03 - 2014-04-12 08:22 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-07-23 04:03 - 2014-04-12 07:58 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\workerdd.dll
2014-07-23 04:03 - 2014-03-28 20:19 - 00035856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2014-07-23 04:03 - 2014-03-23 23:11 - 00269592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2014-07-23 04:03 - 2014-03-11 04:32 - 06987096 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-07-23 04:03 - 2014-03-11 04:25 - 00100184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-07-23 04:03 - 2014-03-11 01:41 - 00559104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-07-23 04:03 - 2014-03-11 01:41 - 00323072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-07-23 04:03 - 2014-03-11 01:41 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-07-23 04:03 - 2014-03-11 01:39 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-07-23 04:03 - 2014-03-11 01:38 - 00982016 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-07-23 04:03 - 2014-03-11 01:38 - 00684032 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-07-23 04:03 - 2014-03-11 01:38 - 00419328 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-07-23 04:03 - 2014-03-11 01:38 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2014-07-23 04:03 - 2014-03-11 01:38 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-07-23 04:03 - 2014-03-11 01:38 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-07-23 04:03 - 2014-03-11 01:38 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-07-23 04:03 - 2014-03-10 04:05 - 00668160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-07-23 04:03 - 2014-03-10 02:27 - 00099840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-07-23 04:03 - 2014-03-04 00:07 - 00570216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-07-23 04:02 - 2014-06-19 03:12 - 02239488 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-23 04:02 - 2014-06-19 03:11 - 19277312 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-23 04:02 - 2014-06-19 03:11 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-23 04:02 - 2014-06-19 03:10 - 15369728 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-23 04:02 - 2014-06-19 03:10 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-23 04:02 - 2014-06-19 03:10 - 02650624 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-23 04:02 - 2014-06-19 03:10 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-07-23 04:02 - 2014-06-19 03:10 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-23 04:02 - 2014-06-19 03:10 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-23 04:02 - 2014-06-19 03:10 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-23 04:02 - 2014-06-19 03:10 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-23 04:02 - 2014-06-19 03:09 - 01508864 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-23 04:02 - 2014-06-19 01:53 - 14368768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-23 04:02 - 2014-06-19 01:53 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-23 04:02 - 2014-06-19 01:52 - 02863616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-23 04:02 - 2014-06-19 01:52 - 02051072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-23 04:02 - 2014-06-19 01:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-07-23 04:02 - 2014-06-19 01:52 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-23 04:02 - 2014-06-19 01:52 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-23 04:02 - 2014-06-19 01:33 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-23 04:02 - 2014-06-19 01:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-07-23 04:01 - 2014-06-06 15:06 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-23 04:01 - 2014-06-06 11:17 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-07-23 04:01 - 2014-05-29 23:24 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-23 04:01 - 2014-04-03 12:22 - 02233176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-07-23 04:01 - 2014-03-07 01:47 - 01419264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-07-23 04:01 - 2014-03-07 01:08 - 01845760 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-07-23 04:01 - 2014-03-01 10:47 - 01258496 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-07-23 04:01 - 2014-03-01 10:47 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\gpedit.dll
2014-07-23 04:01 - 2014-03-01 09:07 - 01075200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpedit.dll
2014-07-23 04:01 - 2014-03-01 07:59 - 00974848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-07-23 04:01 - 2014-02-27 00:18 - 00370688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-07-23 04:01 - 2014-02-27 00:18 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-07-23 04:01 - 2014-02-27 00:18 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-07-23 04:01 - 2014-02-15 05:15 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys
2014-07-22 16:38 - 2014-07-31 20:06 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\.minecraft
2014-07-22 08:49 - 2014-07-22 08:50 - 00000000 ____D () C:\Users\Sasha\Desktop\Sicherheit
2014-07-21 00:49 - 2014-07-21 00:49 - 00000000 ____D () C:\Users\Sasha\AVM_Driver
2014-07-20 20:54 - 2014-07-20 20:54 - 00004096 _____ () C:\Windows\d3dx.dat
2014-07-20 20:46 - 2014-07-20 20:46 - 00001081 _____ () C:\Users\Gast\Desktop\Gothic II spielen.lnk
2014-07-20 20:46 - 2014-07-20 20:46 - 00001081 _____ () C:\Users\Administrator\Desktop\Gothic II spielen.lnk
2014-07-20 20:46 - 2014-07-20 20:46 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JoWooD
2014-07-20 20:04 - 2014-07-20 20:04 - 00000000 ____D () C:\Users\Sasha\.SquashOccurrences
2014-07-18 12:48 - 2014-07-18 12:48 - 00000000 ____D () C:\Program Files\Microsoft Xbox One Controller for Windows
2014-07-17 20:25 - 2014-07-17 20:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-07-17 20:25 - 2014-07-17 20:25 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-07-16 17:29 - 2014-07-30 10:09 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\DarkWave Studio
2014-07-16 17:25 - 2014-07-30 10:09 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DarkWave Studio
2014-07-16 14:36 - 2014-07-25 15:20 - 00000000 ____D () C:\Users\Sasha\Desktop\asdf_data
2014-07-15 11:09 - 2014-07-15 11:09 - 00046136 ____H (LogMeIn Inc.) C:\Windows\system32\Drivers\Hamdrv.sys
2014-07-14 06:58 - 2014-07-14 06:58 - 00009769 _____ () C:\Users\Sasha\AppData\Local\recently-used.xbel
2014-07-13 03:03 - 2014-07-15 08:27 - 00000000 ____D () C:\Users\Sasha\Desktop\Neuer Ordner (2)
2014-07-12 23:24 - 2014-07-12 23:24 - 00000000 ____D () C:\Users\Sasha\AppData\Local\Arktos Entertainment
2014-07-11 22:30 - 2014-07-11 22:30 - 00000000 ____D () C:\Users\Sasha\.MCTranscodingSDK
2014-07-11 18:59 - 2014-07-12 19:37 - 00000000 ____D () C:\Users\Public\Documents\Lightworks
2014-07-11 18:59 - 2014-07-11 18:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightworks
2014-07-09 17:32 - 2014-07-26 22:27 - 00009972 _____ () C:\Users\Sasha\Desktop\Schulden.ods
2014-07-09 15:24 - 2014-07-26 22:26 - 00000000 ____D () C:\Users\Sasha\Desktop\Die Stämme
2014-07-02 16:21 - 2014-07-02 16:21 - 00000000 ____D () C:\Program Files (x86)\Sony Media Go Install
2014-07-02 16:20 - 2014-07-02 16:20 - 00000000 ____D () C:\Users\Sasha\Podcasts
2014-07-02 16:18 - 2014-07-02 16:18 - 00000000 ____D () C:\ProgramData\Sony Corporation
2014-07-02 16:07 - 2014-07-02 16:07 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\IsolatedStorage
2014-07-02 16:07 - 2014-07-02 16:07 - 00000000 ____D () C:\Users\Sasha\AppData\Local\FileViewPro
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-08-01 10:46 - 2014-08-01 10:46 - 00415232 _____ (Farbar) C:\Users\Sasha\Downloads\FSS.exe
2014-08-01 10:46 - 2014-08-01 10:46 - 00034854 _____ () C:\Users\Sasha\Downloads\FRST.txt
2014-08-01 10:46 - 2014-08-01 10:46 - 00000000 ____D () C:\FRST
2014-08-01 10:46 - 2014-08-01 10:45 - 02094080 _____ (Farbar) C:\Users\Sasha\Downloads\FRST64.exe
2014-08-01 10:45 - 2013-10-30 23:52 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\ClassicShell
2014-08-01 10:29 - 2013-07-03 10:46 - 00001138 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-01 10:10 - 2014-08-01 06:51 - 00055976 _____ () C:\Windows\WindowsUpdate.log
2014-08-01 10:00 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\system32\sru
2014-08-01 09:57 - 2013-06-23 17:38 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-01 09:52 - 2014-02-16 10:19 - 00000000 ___RD () C:\Users\Sasha\Dropbox
2014-08-01 09:52 - 2014-02-16 10:18 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-08-01 09:52 - 2014-02-16 10:18 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\Dropbox
2014-08-01 09:51 - 2013-09-21 19:02 - 00617984 ___SH () C:\Users\Sasha\Documents\Thumbs.db
2014-08-01 08:45 - 2013-10-31 00:13 - 00000948 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-852994989-324450782-3891972763-1001UA.job
2014-08-01 06:57 - 2012-11-27 20:52 - 00765620 _____ () C:\Windows\system32\perfh007.dat
2014-08-01 06:57 - 2012-11-27 20:52 - 00161774 _____ () C:\Windows\system32\perfc007.dat
2014-08-01 06:57 - 2012-07-26 08:28 - 01784194 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-01 06:54 - 2014-07-29 23:49 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-01 06:52 - 2013-06-11 18:09 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-08-01 06:51 - 2014-08-01 06:51 - 00000972 _____ () C:\Windows\PFRO.log
2014-08-01 06:51 - 2014-04-05 22:58 - 00000000 ____D () C:\Users\Sasha\AppData\Local\LogMeIn Hamachi
2014-08-01 06:51 - 2013-10-02 03:24 - 04028416 ___SH () C:\Users\Sasha\Desktop\Thumbs.db
2014-08-01 06:51 - 2013-07-03 10:46 - 00001134 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-01 06:51 - 2013-01-31 16:55 - 00000000 ____D () C:\ProgramData\VMware
2014-08-01 06:51 - 2012-12-04 23:11 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-08-01 06:51 - 2012-07-26 08:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-01 06:51 - 2012-07-26 06:26 - 00524288 ___SH () C:\Windows\system32\config\BBI
2014-08-01 06:50 - 2014-08-01 06:50 - 00000000 ____D () C:\AdwCleaner
2014-08-01 06:35 - 2014-08-01 06:35 - 00041768 _____ () C:\ComboFix.txt
2014-08-01 06:35 - 2014-08-01 06:29 - 00000000 ____D () C:\Qoobox
2014-08-01 06:33 - 2012-07-26 06:26 - 00000215 _____ () C:\Windows\system.ini
2014-08-01 06:26 - 2013-12-26 16:12 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-08-01 06:21 - 2014-08-01 06:21 - 00000739 _____ () C:\DelFix.txt
2014-08-01 06:20 - 2013-05-19 12:18 - 00000000 ____D () C:\Users\Sasha\Desktop\Programme
2014-08-01 01:50 - 2014-08-01 01:50 - 00000000 ____D () C:\ProgramData\LogMeIn
2014-08-01 01:45 - 2012-12-29 23:25 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\Skype
2014-08-01 00:51 - 2013-05-19 12:18 - 00000000 ____D () C:\Users\Sasha\Desktop\Games
2014-07-31 23:25 - 2014-07-31 20:45 - 00295720 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-07-31 23:25 - 2012-12-30 04:55 - 00295720 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-07-31 23:21 - 2012-12-30 04:48 - 00295720 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-07-31 21:05 - 2013-06-10 23:57 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-852994989-324450782-3891972763-1001
2014-07-31 20:54 - 2014-07-31 20:45 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-07-31 20:33 - 2014-07-31 20:33 - 00000000 ____D () C:\Users\Sasha\Documents\Battlefield 4
2014-07-31 20:06 - 2014-07-22 16:38 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\.minecraft
2014-07-31 19:20 - 2014-07-31 15:33 - 00000000 ____D () C:\Users\Sasha\Documents\FIFA World
2014-07-31 18:47 - 2014-03-05 17:30 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\vlc
2014-07-31 18:39 - 2013-01-23 20:02 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\Audacity
2014-07-31 17:56 - 2014-03-26 22:28 - 00000000 ____D () C:\Users\Sasha\Documents\FIFA 14
2014-07-31 17:15 - 2014-07-31 17:15 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-07-31 15:32 - 2014-07-31 15:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA Sports FIFA World
2014-07-31 14:45 - 2013-10-31 00:13 - 00000926 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-852994989-324450782-3891972763-1001Core.job
2014-07-31 06:59 - 2014-06-06 18:39 - 00000523 _____ () C:\Users\Sasha\Desktop\Minecraft Nutzernamen.txt
2014-07-30 21:50 - 2013-01-29 22:12 - 00000000 ____D () C:\ProgramData\Origin
2014-07-30 20:58 - 2014-07-30 20:58 - 00001406 _____ () C:\Users\Sasha\AppData\Roaming\BreakingPoint_Options.ini
2014-07-30 20:45 - 2014-03-26 21:15 - 00000000 ____D () C:\Users\Sasha\AppData\Local\Arma 3
2014-07-30 20:44 - 2014-07-30 20:43 - 00000000 ____D () C:\Users\Sasha\Documents\Arma 3
2014-07-30 20:43 - 2014-07-30 20:43 - 00000000 ____D () C:\ProgramData\Bohemia Interactive
2014-07-30 20:42 - 2014-07-24 12:30 - 00000297 _____ () C:\Users\Sasha\AppData\Roaming\BreakingPoint_Login.ini
2014-07-30 19:47 - 2013-09-15 15:23 - 00000000 ____D () C:\Users\Sasha\AppData\Local\VMware
2014-07-30 19:47 - 2013-01-31 16:55 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\VMware
2014-07-30 19:09 - 2013-09-25 05:26 - 00513536 ___SH () C:\Users\Sasha\Downloads\Thumbs.db
2014-07-30 14:00 - 2014-07-30 14:00 - 00000000 ____D () C:\ProgramData\RzMaelstromVAD_1.1.52.1675
2014-07-30 13:44 - 2014-07-30 13:44 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-07-30 11:13 - 2013-12-24 18:03 - 00000000 ____D () C:\Users\Sasha\Documents\My Games
2014-07-30 11:12 - 2012-12-30 06:13 - 00000000 ____D () C:\Users\Sasha
2014-07-30 11:04 - 2013-05-04 00:41 - 00000000 ____D () C:\ProgramData\Unity
2014-07-30 11:04 - 2012-12-31 21:29 - 00000000 ____D () C:\ProgramData\TechSmith
2014-07-30 10:45 - 2014-07-30 10:45 - 00319912 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-07-30 10:45 - 2014-07-30 10:45 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-07-30 10:45 - 2014-07-30 10:45 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-07-30 10:45 - 2014-07-30 10:45 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-07-30 10:45 - 2014-07-30 10:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-30 10:45 - 2012-11-27 21:46 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-07-30 10:40 - 2012-12-30 01:27 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\eFusion
2014-07-30 10:34 - 2013-08-01 12:42 - 00000000 ____D () C:\Users\Sasha\AppData\Local\CrashDumps
2014-07-30 10:27 - 2013-01-10 20:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefly Studios
2014-07-30 10:23 - 2014-07-30 10:23 - 00000000 ____D () C:\Users\Sasha\AppData\Local\cFos
2014-07-30 10:23 - 2014-02-01 02:12 - 00000000 ____D () C:\Users\Sasha\AppData\Local\My Games
2014-07-30 10:23 - 2012-11-27 21:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2014-07-30 10:23 - 2012-11-27 21:51 - 00000000 ____D () C:\Program Files\ASUS
2014-07-30 10:22 - 2014-05-11 08:19 - 00000000 ____D () C:\Users\Sasha\Documents\RCT3
2014-07-30 10:22 - 2013-04-27 14:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Atari
2014-07-30 10:16 - 2014-02-04 18:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JoWood
2014-07-30 10:13 - 2013-12-24 16:14 - 00000000 ____D () C:\Users\Sasha\Documents\onlineTV 8
2014-07-30 10:13 - 2013-07-03 00:07 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\concept design
2014-07-30 10:10 - 2013-09-15 14:58 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-07-30 10:09 - 2014-07-16 17:29 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\DarkWave Studio
2014-07-30 10:09 - 2014-07-16 17:25 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DarkWave Studio
2014-07-30 10:07 - 2014-02-02 04:37 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\Clone2Go Video Converter Free Version
2014-07-30 10:07 - 2013-03-24 14:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Counter-Strike 1.6
2014-07-30 10:06 - 2013-04-14 12:09 - 00000000 ____D () C:\ProgramData\Package Cache
2014-07-30 09:56 - 2013-06-10 22:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Allegorithmic
2014-07-30 09:56 - 2012-11-27 21:52 - 00000000 ____D () C:\ProgramData\Adobe
2014-07-30 09:56 - 2012-11-27 21:52 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-07-30 09:55 - 2013-03-14 21:34 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\uTorrent
2014-07-30 00:24 - 2013-01-17 14:08 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\FileZilla
2014-07-29 23:59 - 2013-12-03 16:36 - 00013312 _____ () C:\Users\Sasha\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-07-29 23:57 - 2013-10-02 18:00 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\miner
2014-07-29 23:49 - 2014-07-29 23:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-07-29 23:49 - 2014-07-29 23:49 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-29 23:49 - 2014-07-29 23:49 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-07-29 23:16 - 2014-07-29 23:16 - 00000000 ____D () C:\Windows\ERUNT
2014-07-29 22:48 - 2012-07-26 06:37 - 00000000 __RHD () C:\Users\Default
2014-07-29 22:45 - 2014-07-29 22:35 - 00000000 ____D () C:\Windows\erdnt
2014-07-29 22:42 - 2014-07-29 22:42 - 05120240 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-29 22:42 - 2012-07-26 06:26 - 93585408 _____ () C:\Windows\system32\config\SOFTWARE.bak
2014-07-29 22:42 - 2012-07-26 06:26 - 21233664 _____ () C:\Windows\system32\config\SYSTEM.bak
2014-07-29 22:42 - 2012-07-26 06:26 - 01835008 _____ () C:\Windows\system32\config\DEFAULT.bak
2014-07-29 22:42 - 2012-07-26 06:26 - 00262144 _____ () C:\Windows\system32\config\SECURITY.bak
2014-07-29 22:42 - 2012-07-26 06:26 - 00262144 _____ () C:\Windows\system32\config\SAM.bak
2014-07-29 22:14 - 2013-01-26 13:28 - 00000000 ____D () C:\Users\Sasha\.gimp-2.8
2014-07-29 22:11 - 2012-12-30 06:13 - 00000000 ___RD () C:\Users\Sasha\Eigene Bilder
2014-07-29 16:56 - 2014-07-29 11:30 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\Synthesia
2014-07-29 16:43 - 2013-12-17 23:00 - 00000000 ____D () C:\Users\Sasha\AppData\Local\NVIDIA Corporation
2014-07-29 16:42 - 2012-12-04 23:07 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-07-29 16:23 - 2014-06-02 21:55 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\ImgBurn
2014-07-29 11:24 - 2014-07-29 11:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Synthesia
2014-07-29 10:57 - 2014-07-29 10:57 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\Spiritsoft
2014-07-28 19:48 - 2014-04-11 07:58 - 00000000 ____D () C:\Users\Sasha\Documents\Visual Studio 2010
2014-07-28 17:37 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\AUInstallAgent
2014-07-28 15:47 - 2014-07-28 15:47 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\BitTorrent Sync
2014-07-26 22:27 - 2014-07-09 17:32 - 00009972 _____ () C:\Users\Sasha\Desktop\Schulden.ods
2014-07-26 22:26 - 2014-07-09 15:24 - 00000000 ____D () C:\Users\Sasha\Desktop\Die Stämme
2014-07-25 21:19 - 2013-01-30 12:01 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\TS3Client
2014-07-25 18:27 - 2014-04-19 01:35 - 00000000 ____D () C:\Users\Sasha\AppData\Local\Ubisoft
2014-07-25 15:20 - 2014-07-16 14:36 - 00000000 ____D () C:\Users\Sasha\Desktop\asdf_data
2014-07-25 14:50 - 2014-07-29 16:42 - 01715224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2014-07-25 14:50 - 2014-07-29 16:42 - 01291280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2014-07-25 14:50 - 2013-11-14 21:34 - 01283136 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-07-25 14:50 - 2013-11-14 21:34 - 01126480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-07-25 14:05 - 2014-07-25 14:05 - 00000000 ____D () C:\Windows\rescache
2014-07-25 08:03 - 2012-07-26 09:12 - 00000000 ___RD () C:\Windows\ToastData
2014-07-25 08:03 - 2012-07-26 09:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-25 08:03 - 2012-07-26 09:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-25 08:03 - 2012-07-26 09:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-25 08:03 - 2012-07-26 09:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-25 08:03 - 2012-07-26 09:12 - 00000000 ____D () C:\Program Files\Windows Defender
2014-07-25 08:03 - 2012-07-26 09:12 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-07-24 11:54 - 2012-07-26 08:59 - 00000000 ____D () C:\Windows\CbsTemp
2014-07-24 11:53 - 2014-07-24 11:53 - 00000000 ____D () C:\Users\Sasha\AppData\Local\Bohemia_Interactive
2014-07-24 11:53 - 2014-07-24 11:53 - 00000000 ____D () C:\Users\Sasha\AppData\Local\Arma 3 Launcher
2014-07-24 11:53 - 2013-08-23 00:07 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-24 11:51 - 2012-07-26 06:26 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-07-24 11:50 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\system32\SecureBootUpdates
2014-07-24 11:50 - 2012-07-26 08:52 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-24 06:06 - 2013-03-14 14:35 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-24 06:06 - 2013-03-14 14:35 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-24 01:06 - 2013-03-14 14:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-23 20:49 - 2013-11-21 23:21 - 00000000 ____D () C:\Users\Sasha\Desktop\Berwerbungen
2014-07-23 06:08 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\system32\NDF
2014-07-22 10:06 - 2014-06-03 16:55 - 00004034 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1382540714
2014-07-22 08:50 - 2014-07-22 08:49 - 00000000 ____D () C:\Users\Sasha\Desktop\Sicherheit
2014-07-22 08:29 - 2013-05-03 20:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unreal Development Kit
2014-07-22 08:29 - 2012-12-30 00:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexon
2014-07-22 08:28 - 2013-12-07 15:39 - 00000000 ____D () C:\Program Files (x86)\Samsung
2014-07-22 08:28 - 2013-09-01 16:57 - 00000000 ____D () C:\Users\Sasha\AppData\Local\Samsung
2014-07-22 08:28 - 2013-06-21 13:57 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\Samsung
2014-07-22 08:27 - 2012-11-27 21:51 - 00000000 ____D () C:\Windows\System32\Tasks\ASUS
2014-07-22 08:24 - 2012-11-27 22:00 - 00000000 ____D () C:\ProgramData\Nero
2014-07-22 08:23 - 2013-02-03 15:30 - 00000000 ____D () C:\ProgramData\MTA San Andreas All
2014-07-22 08:22 - 2013-12-08 00:06 - 00000000 ____D () C:\Program Files (x86)\MAGIX
2014-07-22 08:22 - 2012-12-04 23:08 - 00000000 ____D () C:\ProgramData\MAGIX
2014-07-22 08:21 - 2013-05-28 09:00 - 00000000 ____D () C:\Windows\SysWOW64\MAGIX
2014-07-22 08:21 - 2013-05-28 09:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX
2014-07-22 08:20 - 2013-12-03 16:29 - 00000000 ____D () C:\Users\Public\Documents\Reallusion
2014-07-22 08:20 - 2013-12-02 00:45 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\JAM Software
2014-07-22 08:18 - 2014-03-06 15:27 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\GameRanger
2014-07-22 08:17 - 2014-05-11 08:39 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\DAEMON Tools Lite
2014-07-22 06:26 - 2013-09-28 22:53 - 00000000 ____D () C:\Users\Sasha\AppData\Local\Overwolf
2014-07-21 17:48 - 2012-12-31 16:11 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\Spotify
2014-07-21 17:44 - 2013-08-01 13:29 - 00000000 ____D () C:\Users\Sasha\AppData\Local\Spotify
2014-07-21 00:49 - 2014-07-21 00:49 - 00000000 ____D () C:\Users\Sasha\AVM_Driver
2014-07-20 20:54 - 2014-07-20 20:54 - 00004096 _____ () C:\Windows\d3dx.dat
2014-07-20 20:46 - 2014-07-20 20:46 - 00001081 _____ () C:\Users\Gast\Desktop\Gothic II spielen.lnk
2014-07-20 20:46 - 2014-07-20 20:46 - 00001081 _____ () C:\Users\Administrator\Desktop\Gothic II spielen.lnk
2014-07-20 20:46 - 2014-07-20 20:46 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JoWooD
2014-07-20 20:04 - 2014-07-20 20:04 - 00000000 ____D () C:\Users\Sasha\.SquashOccurrences
2014-07-20 17:29 - 2013-10-08 17:13 - 00000000 ____D () C:\Users\Sasha\AppData\Local\SKIDROW
2014-07-20 15:05 - 2013-05-10 00:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-20 15:05 - 2012-12-30 06:13 - 00001002 _____ () C:\Users\Sasha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-18 12:48 - 2014-07-18 12:48 - 00000000 ____D () C:\Program Files\Microsoft Xbox One Controller for Windows
2014-07-17 20:25 - 2014-07-17 20:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-07-17 20:25 - 2014-07-17 20:25 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-07-15 11:09 - 2014-07-15 11:09 - 00046136 ____H (LogMeIn Inc.) C:\Windows\system32\Drivers\Hamdrv.sys
2014-07-15 08:27 - 2014-07-13 03:03 - 00000000 ____D () C:\Users\Sasha\Desktop\Neuer Ordner (2)
2014-07-15 08:00 - 2013-10-23 18:51 - 00000000 ____D () C:\Users\Sasha\AppData\Local\Deployment
2014-07-14 06:58 - 2014-07-14 06:58 - 00009769 _____ () C:\Users\Sasha\AppData\Local\recently-used.xbel
2014-07-14 06:57 - 2013-12-05 22:51 - 00000000 ____D () C:\Users\Sasha\AppData\Local\Paint.NET
2014-07-13 10:40 - 2013-10-06 21:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Infestation Survivor Stories
2014-07-12 23:24 - 2014-07-12 23:24 - 00000000 ____D () C:\Users\Sasha\AppData\Local\Arktos Entertainment
2014-07-12 21:06 - 2013-01-01 19:40 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-07-12 19:37 - 2014-07-11 18:59 - 00000000 ____D () C:\Users\Public\Documents\Lightworks
2014-07-11 22:30 - 2014-07-11 22:30 - 00000000 ____D () C:\Users\Sasha\.MCTranscodingSDK
2014-07-11 18:59 - 2014-07-11 18:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightworks
2014-07-08 19:57 - 2013-06-23 17:38 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-05 13:13 - 2013-11-21 23:20 - 00000000 ____D () C:\Users\Sasha\Desktop\Mama
2014-07-03 22:09 - 2013-10-01 20:03 - 00000000 ____D () C:\Users\Sasha\AppData\Local\DayZ
2014-07-02 16:22 - 2013-05-12 23:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2014-07-02 16:22 - 2013-05-12 23:43 - 00000000 ____D () C:\Program Files (x86)\Sony
2014-07-02 16:21 - 2014-07-02 16:21 - 00000000 ____D () C:\Program Files (x86)\Sony Media Go Install
2014-07-02 16:20 - 2014-07-02 16:20 - 00000000 ____D () C:\Users\Sasha\Podcasts
2014-07-02 16:20 - 2013-08-02 01:10 - 00000000 ____D () C:\Users\Sasha\AppData\Local\Sony
2014-07-02 16:20 - 2013-01-02 22:33 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\Sony
2014-07-02 16:18 - 2014-07-02 16:18 - 00000000 ____D () C:\ProgramData\Sony Corporation
2014-07-02 16:17 - 2013-09-02 08:51 - 00000000 ____D () C:\Users\Sasha\AppData\Local\Downloaded Installations
2014-07-02 16:07 - 2014-07-02 16:07 - 00000000 ____D () C:\Users\Sasha\AppData\Roaming\IsolatedStorage
2014-07-02 16:07 - 2014-07-02 16:07 - 00000000 ____D () C:\Users\Sasha\AppData\Local\FileViewPro
Some content of TEMP:
====================
C:\Users\Sasha\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpuebxcb.dll
C:\Users\Sasha\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-07-27 05:51
==================== End Of Log ============================ --- --- --- |