monster2109 | 16.12.2013 13:32 | FRST Logfile:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-12-2013 01
Ran by Ersatz (administrator) on ERSATZ-PC on 15-12-2013 15:51:40
Running from C:\Users\Ersatz\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Cybits AG) C:\Program Files\SURF-SITTER PC\cy-Service_2.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Cybits AG) C:\Program Files\SURF-SITTER PC\cy-Service.exe
(Cybits AG) C:\Program Files\SURF-SITTER PC\AutoUpdaterService.exe
() C:\Program Files (x86)\Tor\tor.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
() C:\Program Files (x86)\GreyGray\updateGreyGray.exe
() C:\Program Files (x86)\GreyGray\bin\utilGreyGray.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.1.3\ToolbarUpdater.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
() C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.1.3\loggingserver.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe
(Akamai Technologies, Inc.) C:\Users\Ersatz\AppData\Local\Akamai\netsession_win.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\Vid HD\Vid.exe
(Akamai Technologies, Inc.) C:\Users\Ersatz\AppData\Local\Akamai\netsession_win.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(BitTorrent Inc.) C:\Users\Ersatz\AppData\Roaming\BitTorrent\BitTorrent.exe
(Spotify Ltd) C:\Users\Ersatz\AppData\Roaming\Spotify\spotify.exe
() C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe
(Spotify Ltd) C:\Users\Ersatz\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe
(Zemi Interactive Inc.) C:\Program Files (x86)\Gameforge4D\4Story_DE\PrePatch.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
() C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Aeria Games & Entertainment) C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
() C:\Program Files (x86)\Common Files\logishrd\LQCVFX\COCIManager.exe
() C:\Users\Ersatz\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Ersatz\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Ersatz\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Ersatz\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Logitech, Inc.) C:\Users\Ersatz\AppData\Local\Logitech® Webcam-Software\Logishrd\LU2.0\LULnchr.exe
(Logitech, Inc.) C:\Users\Ersatz\AppData\Local\Logitech® Webcam-Software\Logishrd\LU2.0\LogitechUpdate.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
() C:\Users\Ersatz\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Ersatz\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Ersatz\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Ersatz\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Ersatz\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.195\deploy\LoLLauncher.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.62\deploy\LolClient.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Ersatz\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKCU\...\Run: [Logitech Vid] - C:\Program Files (x86)\Logitech\Vid HD\Vid.exe [6129496 2011-01-13] (Logitech Inc.)
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-02-09] ()
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKCU\...\Run: [KPeerNexonEU] - C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe [438272 2013-07-29] (NEXON Inc.)
HKCU\...\Run: [BitTorrent] - C:\Users\Ersatz\AppData\Roaming\BitTorrent\BitTorrent.exe [895328 2013-12-05] (BitTorrent Inc.)
HKCU\...\Run: [Spotify] - C:\Users\Ersatz\AppData\Roaming\Spotify\spotify.exe [5951488 2013-12-07] (Spotify Ltd)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Ersatz\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-07] (Spotify Ltd)
MountPoints2: {6ee15512-c785-11e2-b2ed-001d92057a67} - F:\Setup.exe
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [LWS] - C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [205336 2011-11-11] (Logitech Inc.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [683576 2013-11-26] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [vProt] - C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe [2334384 2013-11-20] ()
HKLM-x32\...\Run: [4StoryPrePatch] - C:\Program Files (x86)\Gameforge4D\4Story_DE\PrePatch.exe [327680 2013-07-03] (Zemi Interactive Inc.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-08-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [BlueStacks Agent] - C:\Program Files (x86)\BlueStacks\HD-Agent.exe [606024 2013-09-19] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [Aeria Ignite] - C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe [1925656 2013-06-06] (Aeria Games & Entertainment)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3806544 2013-11-29] (LogMeIn Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snap.do/?publisher=VertiTechnologyYB&dpid=VertiTechnologyYB&co=DE&userid=f9d17e73-b86b-4462-a02c-82c1b3dced81&searchtype=ds&q={searchTerms}&installDate=09/03/2013
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com/?ctid=CT3314958&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPC45B3FEC-E3EA-4B87-B688-00885A8B2267
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=WDCXWD3200AAKS-00YGA0_WD-WCASF000768107681&ts=1369939123
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=WDCXWD3200AAKS-00YGA0_WD-WCASF000768107681&ts=1369939123
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.certified-toolbar.com?si=41460&tid=2938&bs=true&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=WDCXWD3200AAKS-00YGA0_WD-WCASF000768107681&ts=1369939123
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=WDCXWD3200AAKS-00YGA0_WD-WCASF000768107681&ts=1369939123
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.certified-toolbar.com?si=41460&tid=2938&bs=true&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Default_Page_URL = hxxp://search.certified-toolbar.com?si=41460&home=true&tid=2938
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Bar = hxxp://search.certified-toolbar.com?si=41460&tid=2938&bs=true&q=
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=WDCXWD3200AAKS-00YGA0_WD-WCASF000768107681&ts=1369939123
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.portaldosites.com/web/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=WDCXWD3200AAKS-00YGA0_WD-WCASF000768107681&ts=0
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.portaldosites.com/web/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=WDCXWD3200AAKS-00YGA0_WD-WCASF000768107681&ts=0
SearchScopes: HKLM - {7F4EFF06-7032-458e-AE16-1C1D8255C28A} URL = hxxp://start.speedbit.com/search.aspx?s=D7Sa&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.portaldosites.com/web/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=WDCXWD3200AAKS-00YGA0_WD-WCASF000768107681&ts=0
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=VertiTechnologyYB&dpid=VertiTechnologyYB&co=DE&userid=f9d17e73-b86b-4462-a02c-82c1b3dced81&searchtype=ds&q={searchTerms}&installDate=09/03/2013
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.certified-toolbar.com?si=41460&bs=true&tid=2938&q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.portaldosites.com/web/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=WDCXWD3200AAKS-00YGA0_WD-WCASF000768107681&ts=0
SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3314958&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SPC45B3FEC-E3EA-4B87-B688-00885A8B2267&q={searchTerms}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=VertiTechnologyYB&dpid=VertiTechnologyYB&co=DE&userid=f9d17e73-b86b-4462-a02c-82c1b3dced81&searchtype=ds&q={searchTerms}&installDate=09/03/2013
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3314958&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SPC45B3FEC-E3EA-4B87-B688-00885A8B2267&q={searchTerms}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&affID=122147&tt=gc_170513_18210&babsrc=SP_ss_gin2g&mntrId=8C71002275B0D7BB
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.delta-homes.com/web/?utm_source=b&utm_medium=newgdp&from=newgdp&uid=WDCXWD3200AAKS-00YGA0_WD-WCASF000768107681&ts=0
SearchScopes: HKCU - {7F4EFF06-7032-458e-AE16-1C1D8255C28A} URL = hxxp://start.speedbit.com/search.aspx?s=D7Sa&q={searchTerms}
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://mysearch.avg.com/search?cid={D907D5E9-6D73-4898-884C-F0B8F6D135AA}&mid=5ccab06394eb47d386c4d154d4e19394-06ce4fc639803a2e3563922518183d8e94088cb9&lang=&ds=&pr=&d=&v=15.3.0.10&pid=safeguard&sg=0&sap=dsp&q={searchTerms}
SearchScopes: HKCU - {B79CA797-6130-43CF-853F-6A36E10C3E34} URL = hxxp://searchou.com/?q={searchTerms}&id=8c71d972000000000000002275b0d7bb&r=531
SearchScopes: HKCU - {BD26DBD4-5BF8-4BCF-90F7-303E2B51B658} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10261&src=kw&q={searchTerms}&locale=&apn_ptnrs=^AGS&apn_dtid=^YYYYYY^YY^DE&apn_uid=545e2f1b-7bce-44f9-aa88-54d494e5e0e9&apn_sauid=919056E0-127D-4449-AF18-6F8C2DCC1EE4
SearchScopes: HKCU - ÛŸÆîZ§’2¹Þpv¨IÍá*X(Ž2s(ÛÎÀJºÔÓµ± v˰!×—(ä¼48иpatm6êo^Mp`Ëõ÷_i£w˜¾!„Áû†x¢8€ÙjÀÿþ*´Ñ;áa´[¦†8*º~RÙxœòÜ8'£-)x*ä* URL =
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - No File
BHO-x32: mixidj Helper Object - {4D6A9BBF-402C-4301-B1EF-28D04F71D761} - C:\Program Files (x86)\mixidj\mixidj\1.8.4.1\bh\mixidj.dll (MixiDJ)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\17.1.3.1\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)
BHO-x32: GreyGray - {ae60e6ed-49dd-4099-8b5e-386a4908d5d5} - C:\Program Files (x86)\GreyGray\GreyGrayBHO.dll (GreyGray)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKLM-x32 - MixiDJ Toolbar - {CA9B9C89-4662-4ADC-9C23-A452BECD5D19} - C:\Program Files (x86)\mixidj\mixidj\1.8.4.1\mixidjTlbr.dll (MixiDJ)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
Toolbar: HKLM-x32 - AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\17.1.3.1\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\17.1.3\ViProtocol.dll (AVG Secure Search)
Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll No File
Hosts: Hosts file not detected in the default directory
FireFox:
========
FF ProfilePath: C:\Users\Ersatz\AppData\Roaming\Mozilla\Firefox\Profiles\npomdhuy.default-1375095865366
FF user.js: detected! => C:\Users\Ersatz\AppData\Roaming\Mozilla\Firefox\Profiles\npomdhuy.default-1375095865366\user.js
FF Homepage: https://www.google.com/?gws_rd=cr&ei=96CDUrOgBIKbtQaQ9YH4BQ
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1207148.dll No File
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\17.1.3\\npsitesafety.dll (AVG Technologies)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @eximion.com/KalydoPlayer - C:\Users\Ersatz\AppData\Roaming\Kalydo\KalydoPlayer\bin2\npkalydo.dll (Eximion B.V.)
FF Plugin HKCU: @soe.sony.com/installer,version=1.0.3 - C:\Users\Ersatz\AppData\Roaming\Mozilla\Firefox\Profiles\h3og1hcq.default\extensions\{000F1EA4-5E08-4564-A29B-29076F63A37A}\plugins\npsoe.dll No File
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Ersatz\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: facebook.com/fbDesktopPlugin - C:\Users\Ersatz\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll No File
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Users\Ersatz\AppData\Roaming\Mozilla\Firefox\Profiles\npomdhuy.default-1375095865366\searchplugins\conduit-search.xml
FF SearchPlugin: C:\Users\Ersatz\AppData\Roaming\Mozilla\Firefox\Profiles\npomdhuy.default-1375095865366\searchplugins\proxerme.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\delta-homes.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\portaldosites.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\safeguard-secure-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: firefox - C:\Users\Ersatz\AppData\Roaming\Mozilla\Firefox\Profiles\npomdhuy.default-1375095865366\Extensions\firefox@greygray.biz.xpi
FF Extension: stylish - C:\Users\Ersatz\AppData\Roaming\Mozilla\Firefox\Profiles\npomdhuy.default-1375095865366\Extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi
FF Extension: Adblock Plus - C:\Users\Ersatz\AppData\Roaming\Mozilla\Firefox\Profiles\npomdhuy.default-1375095865366\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: dta - C:\Users\Ersatz\AppData\Roaming\Mozilla\Firefox\Profiles\npomdhuy.default-1375095865366\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF HKLM-x32\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\17.1.3.1
FF Extension: AVG SafeGuard toolbar - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\17.1.3.1
Chrome:
=======
CHR HomePage: http:\/\/search.conduit.com\/?ctid=CT3314958&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPC45B3FEC-E3EA-4B87-B688-00885A8B2267
CHR RestoreOnStartup: "http:\/\/search.conduit.com\/?ctid=CT3314958&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=2&UP=SPC45B3FEC-E3EA-4B87-B688-00885A8B2267"
CHR DefaultSearchKeyword: conduit.search
CHR DefaultSearchProvider: Conduit Search
CHR DefaultSearchURL: http:\/\/search.conduit.com\/Results.aspx?ctid=CT3314958&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SPC45B3FEC-E3EA-4B87-B688-00885A8B2267&q={searchTerms}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.72\pdf.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (AVG SiteSafety plugin) - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\15.2.0\\npsitesafety.dll (AVG Technologies)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U13) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Unity Player) - C:\Users\Ersatz\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
CHR Plugin: (Facebook Desktop) - C:\Users\Ersatz\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll No File
CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\Ersatz\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll No File
CHR Plugin: (Kalydo Player Plugin for Mozilla) - C:\Users\Ersatz\AppData\Roaming\Kalydo\KalydoPlayer\bin2\npkalydo.dll (Eximion B.V.)
CHR Plugin: (SOE Web Installer) - C:\Users\Ersatz\AppData\Roaming\Mozilla\Firefox\Profiles\h3og1hcq.default\extensions\{000F1EA4-5E08-4564-A29B-29076F63A37A}\plugins\npsoe.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.130.20) - C:\Windows\SysWOW64\npDeployJava1.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Extension: (Avira Toolbar) - C:\Users\Ersatz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaabfjnbeinlpljodiajipidiompfl\7.15.24.0_0
CHR Extension: (MixiDJ Toolbar) - C:\Users\Ersatz\AppData\Local\Google\Chrome\User Data\Default\Extensions\boipimhfjpakfgckhbljjengakjhkcbp\1.0_0
CHR Extension: (AVG SafeGuard toolbar) - C:\Users\Ersatz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\15.3.0.11_0
CHR Extension: (GreyGray) - C:\Users\Ersatz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nhogbcndagiknbfomjgdeghehkljalhi\1.0.0_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Ersatz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (GoPhoto.it) - C:\Users\Ersatz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfmopbbadnfoelckkcmjjeaaegjpjjbk\1.5_0
CHR HKLM-x32\...\Chrome\Extension: [aaaaabfjnbeinlpljodiajipidiompfl] - C:\Users\Ersatz\AppData\Local\APN\GoogleCRXs\aaaaabfjnbeinlpljodiajipidiompfl_7.15.24.0.crx
CHR HKLM-x32\...\Chrome\Extension: [boipimhfjpakfgckhbljjengakjhkcbp] - C:\Users\Ersatz\AppData\Roaming\CRMixiDJTB\mixiDJ.crx
CHR HKLM-x32\...\Chrome\Extension: [jbpkiefagocgkmemidfngdkamloieekf] - C:\Program Files (x86)\TornTV.com\torn11.crx
CHR HKLM-x32\...\Chrome\Extension: [kpepfkjapeclaafmhoelccknpfedainn] - C:\Program Files (x86)\mixidj\mixidj\1.8.4.1\mixidj.crx
CHR HKLM-x32\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\ProgramData\AVG SafeGuard toolbar\ChromeExt\17.1.3.1\avg.crx
CHR HKLM-x32\...\Chrome\Extension: [nhogbcndagiknbfomjgdeghehkljalhi] - C:\Program Files (x86)\GreyGray\nhogbcndagiknbfomjgdeghehkljalhi.crx
CHR HKLM-x32\...\Chrome\Extension: [pfmopbbadnfoelckkcmjjeaaegjpjjbk] - C:\Program Files (x86)\Gophoto.it\gophotoit14.crx
==================== Services (Whitelisted) =================
R2 Akamai; c:\program files (x86)\common files\akamai/netsession_win_8fa3539.dll [4569856 2013-07-01] (Akamai Technologies, Inc.)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-08-30] (Advanced Micro Devices, Inc.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-11-26] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-26] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1164360 2013-11-26] (Avira Operations GmbH & Co. KG)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-09-19] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-09-19] (BlueStack Systems, Inc.)
R2 C88EDF03-FB60-44F4-AC70-FFF129414098; C:\Program Files\SURF-SITTER PC\cy-Service_2.exe [79872 2012-10-30] (Cybits AG)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377104 2013-10-11] (LogMeIn, Inc.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
S3 npggsvc; C:\Windows\SysWow64\GameMon.des [3975544 2012-05-09] (INCA Internet Co., Ltd.)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-05-11] ()
R2 surf-sitter; C:\Program Files\SURF-SITTER PC\cy-Service.exe [424448 2012-10-30] (Cybits AG)
R2 surf-sitter-Updater; C:\Program Files\SURF-SITTER PC\AutoUpdaterService.exe [287744 2012-10-30] (Cybits AG)
R2 tor; C:\Program Files (x86)\Tor\tor.exe [3233806 2013-08-25] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2409272 2013-10-11] (TuneUp Software)
R2 Update GreyGray; C:\Program Files (x86)\GreyGray\updateGreyGray.exe [66328 2013-11-07] ()
R2 Util GreyGray; C:\Program Files (x86)\GreyGray\bin\utilGreyGray.exe [66328 2013-12-06] ()
R2 vToolbarUpdater17.1.3; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.1.3\ToolbarUpdater.exe [1643696 2013-11-20] (AVG Secure Search)
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [107416 2013-12-05] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [46368 2013-11-20] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-11-26] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-26] (Avira Operations GmbH & Co. KG)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-09-19] (BlueStack Systems)
R1 cy_System; C:\Windows\System32\drivers\cy-driver.sys [32528 2012-10-30] (Cybits AG)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-11-16] (TuneUp Software)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
S3 X6va010; \??\C:\Windows\SysWOW64\Drivers\X6va010 [x]
S3 X6va011; \??\C:\Windows\SysWOW64\Drivers\X6va011 [x]
S3 X6va012; \??\C:\Windows\SysWOW64\Drivers\X6va012 [x]
S3 X6va013; \??\C:\Windows\SysWOW64\Drivers\X6va013 [x]
S3 X6va014; \??\C:\Windows\SysWOW64\Drivers\X6va014 [x]
S3 X6va015; \??\C:\Windows\SysWOW64\Drivers\X6va015 [x]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-15 15:51 - 2013-12-15 15:54 - 00031630 _____ C:\Users\Ersatz\Desktop\FRST.txt
2013-12-15 15:51 - 2013-12-15 15:51 - 00000000 ____D C:\FRST
2013-12-15 15:50 - 2013-12-15 15:51 - 01927796 _____ (Farbar) C:\Users\Ersatz\Desktop\FRST64.exe
2013-12-15 14:02 - 2013-12-15 14:03 - 20634867 _____ C:\Users\Ersatz\Downloads\DevPro Theme by ALu.rar
2013-12-15 01:44 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-15 01:44 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-15 01:44 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-15 01:44 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-15 01:42 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-15 01:42 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-15 01:42 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-15 01:42 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-15 01:42 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-15 01:42 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-15 01:42 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-15 01:42 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-15 01:42 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-15 01:42 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-15 01:42 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-15 01:42 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-15 01:42 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-15 01:42 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-15 01:42 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-15 01:42 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-15 01:42 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-15 01:42 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-15 01:42 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-15 01:42 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-15 01:42 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-15 01:42 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-15 01:42 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-15 01:42 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-15 01:42 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-15 01:42 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-15 01:42 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-15 01:42 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-15 01:42 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-15 01:42 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-15 01:42 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-14 21:33 - 2013-12-14 21:33 - 00001001 _____ C:\Users\Ersatz\Desktop\YGOPro.lnk
2013-12-14 20:49 - 2013-12-14 20:49 - 00000486 _____ C:\Users\Ersatz\Downloads\SD Yugi.ydk
2013-12-14 20:45 - 2013-12-14 21:06 - 255373753 _____ (YGOPro DevPro Online ) C:\Users\Ersatz\Downloads\SetupDevPro1.9.8r1.exe
2013-12-14 20:35 - 2013-12-14 20:35 - 00000222 _____ C:\Users\Ersatz\Desktop\Dungeonland.url
2013-12-14 19:05 - 2013-12-14 19:08 - 34855384 _____ C:\Users\Ersatz\Downloads\SnK Shimejis V1.1.rar
2013-12-14 13:12 - 2013-12-14 13:12 - 00000000 ____D C:\Users\Ersatz\AppData\Local\Ubisoft
2013-12-14 12:51 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-14 12:51 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-14 12:51 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-14 12:51 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-14 12:51 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-14 12:51 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-14 12:51 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-14 12:51 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-14 12:51 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-14 12:50 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-14 12:50 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-14 12:50 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-14 12:50 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-14 12:50 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-14 12:50 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-14 12:50 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-14 12:50 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-14 12:50 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-14 12:50 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-13 19:07 - 2013-12-14 13:11 - 00000222 _____ C:\Users\Ersatz\Desktop\Might & Magic Duel of Champions.url
2013-12-12 09:04 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2013-12-12 09:04 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2013-12-12 09:04 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2013-12-12 09:04 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2013-12-12 09:04 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2013-12-12 09:04 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2013-12-12 09:03 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2013-12-12 09:03 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2013-12-12 09:03 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2013-12-12 09:03 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2013-12-12 09:03 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2013-12-12 09:03 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2013-12-12 09:03 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2013-12-12 09:03 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2013-12-12 09:03 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2013-12-12 09:03 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2013-12-12 09:03 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2013-12-12 09:03 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2013-12-12 09:03 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2013-12-12 09:03 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2013-12-12 09:03 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2013-12-12 09:03 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2013-12-12 09:03 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2013-12-12 09:03 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2013-12-12 09:03 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2013-12-12 09:03 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2013-12-12 09:03 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2013-12-12 09:03 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2013-12-12 09:03 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2013-12-12 09:03 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2013-12-12 09:03 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2013-12-12 09:03 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2013-12-12 09:03 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2013-12-12 09:03 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2013-12-12 09:03 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2013-12-12 09:03 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2013-12-12 09:03 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2013-12-12 09:03 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2013-12-12 09:03 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2013-12-12 09:03 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2013-12-12 09:03 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2013-12-12 09:03 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2013-12-12 09:03 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2013-12-12 09:03 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2013-12-12 09:03 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2013-12-12 09:03 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2013-12-12 09:03 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2013-12-12 09:03 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2013-12-12 09:03 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2013-12-12 09:03 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2013-12-12 09:03 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2013-12-12 09:03 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2013-12-12 09:03 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2013-12-12 09:03 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2013-12-12 09:03 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2013-12-12 09:03 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2013-12-12 09:03 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2013-12-12 09:02 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2013-12-12 09:02 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2013-12-12 09:02 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2013-12-12 09:02 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2013-12-12 09:02 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2013-12-12 09:02 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2013-12-12 09:02 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2013-12-12 09:02 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2013-12-12 09:02 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2013-12-12 09:02 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2013-12-12 09:02 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2013-12-12 09:02 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2013-12-12 09:02 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2013-12-12 09:02 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2013-12-12 09:02 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2013-12-12 09:02 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2013-12-12 09:02 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2013-12-12 09:02 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2013-12-12 09:02 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2013-12-12 09:02 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2013-12-12 09:02 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2013-12-12 09:02 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2013-12-12 09:02 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2013-12-12 09:02 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2013-12-12 09:02 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2013-12-12 09:02 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2013-12-12 09:02 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2013-12-12 09:02 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2013-12-12 09:02 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2013-12-12 09:02 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2013-12-12 09:02 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2013-12-12 09:02 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2013-12-12 09:02 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2013-12-12 09:02 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2013-12-12 09:02 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2013-12-12 09:02 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2013-12-12 09:02 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2013-12-12 09:02 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2013-12-12 09:02 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2013-12-12 09:02 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2013-12-12 09:02 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2013-12-12 09:02 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2013-12-12 09:02 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2013-12-12 09:02 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2013-12-12 09:02 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2013-12-12 09:02 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2013-12-12 09:02 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2013-12-12 09:01 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2013-12-12 09:01 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2013-12-12 09:01 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2013-12-12 09:01 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2013-12-12 09:01 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2013-12-12 09:01 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2013-12-12 09:01 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2013-12-12 09:01 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2013-12-12 09:01 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2013-12-12 09:01 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2013-12-12 09:01 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2013-12-12 09:01 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2013-12-12 09:01 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2013-12-12 09:01 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2013-12-12 09:01 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2013-12-12 09:01 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2013-12-12 09:01 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2013-12-12 09:01 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2013-12-12 09:01 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2013-12-12 09:01 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2013-12-12 09:01 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2013-12-12 09:01 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2013-12-12 09:01 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2013-12-12 09:01 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2013-12-12 09:01 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2013-12-12 09:01 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2013-12-12 09:01 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2013-12-12 09:01 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2013-12-12 09:01 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2013-12-12 09:01 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2013-12-12 09:01 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2013-12-12 09:01 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2013-12-12 09:01 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2013-12-12 09:01 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2013-12-12 09:01 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2013-12-12 09:01 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2013-12-12 09:01 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2013-12-12 09:01 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2013-12-12 09:00 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2013-12-12 09:00 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2013-12-12 09:00 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2013-12-12 09:00 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2013-12-12 09:00 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2013-12-12 09:00 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2013-12-12 09:00 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2013-12-12 09:00 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2013-12-12 09:00 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2013-12-12 09:00 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2013-12-12 09:00 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2013-12-12 09:00 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2013-12-12 09:00 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2013-12-12 09:00 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2013-12-12 09:00 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2013-12-12 09:00 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2013-12-12 09:00 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2013-12-12 09:00 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2013-12-12 09:00 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2013-12-12 09:00 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2013-12-12 09:00 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2013-12-12 09:00 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2013-12-12 09:00 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2013-12-12 08:17 - 2013-12-12 08:17 - 00003252 _____ C:\Windows\System32\Tasks\{3753FE55-CBD6-4919-BFE2-43C822948F81}
2013-12-11 19:46 - 2013-12-11 19:46 - 09272200 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2013-12-10 19:08 - 2013-12-10 19:19 - 00000000 ____D C:\Users\Ersatz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dungeon Defenders
2013-12-10 19:05 - 2013-12-10 19:19 - 00000000 ____D C:\Program Files (x86)\Dungeon Defenders
2013-12-10 18:57 - 2013-12-10 19:01 - 00000000 ____D C:\Users\Ersatz\Downloads\DungeonDefenders_7.50_JimbusEd
2013-12-10 18:57 - 2013-12-10 18:58 - 20013776 _____ (DT Soft Ltd) C:\Users\Ersatz\Downloads\DaemonToolsProStandardAdvancedVersion510333.exe
2013-12-10 16:41 - 2013-12-10 18:55 - 218267648 ____R C:\Users\Ersatz\Downloads\DungeonDefenders_7.50_JimbusEd.iso
2013-12-09 18:37 - 2013-12-09 18:37 - 00000222 _____ C:\Users\Ersatz\Desktop\Panzar.url
2013-12-07 17:55 - 2013-12-14 12:38 - 00000000 ____D C:\Users\Ersatz\AppData\Local\Spotify
2013-12-07 17:55 - 2013-12-07 17:55 - 00001772 _____ C:\Users\Ersatz\Desktop\Spotify.lnk
2013-12-07 17:55 - 2013-12-07 17:55 - 00001758 _____ C:\Users\Ersatz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2013-12-07 17:53 - 2013-12-15 15:30 - 00000000 ____D C:\Users\Ersatz\AppData\Roaming\Spotify
2013-12-07 17:53 - 2013-12-07 17:53 - 00127080 _____ (Spotify Ltd) C:\Users\Ersatz\Downloads\SpotifySetup.exe
2013-12-07 15:10 - 2013-12-07 15:17 - 00000000 ____D C:\Program Files (x86)\UltraStar
2013-12-07 15:10 - 2013-12-07 15:10 - 00000000 ____D C:\Users\Ersatz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UltraStar
2013-12-05 20:15 - 2013-12-05 20:15 - 00000000 ____D C:\Users\Ersatz\AppData\Roaming\Ubisoft
2013-12-05 20:15 - 2013-12-05 20:15 - 00000000 ____D C:\ProgramData\Ubisoft
2013-12-05 20:05 - 2010-03-17 05:27 - 00000000 ____D C:\Users\Ersatz\Desktop\Assassin's Creed 1
2013-12-05 20:04 - 2013-12-05 20:04 - 00001077 _____ C:\Users\Ersatz\Desktop\FreeArc.lnk
2013-12-05 20:04 - 2013-12-05 20:04 - 00000000 ____D C:\Users\Ersatz\AppData\Roaming\FreeArc
2013-12-05 20:03 - 2013-12-05 20:04 - 00000000 ____D C:\Users\Ersatz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FreeArc
2013-12-05 20:03 - 2013-12-05 20:04 - 00000000 ____D C:\Program Files (x86)\FreeArc
2013-12-05 20:01 - 2013-12-05 20:02 - 07938425 _____ C:\Users\Ersatz\Downloads\FreeArc-0.666-win32.exe
2013-12-05 18:44 - 2013-12-14 12:22 - 00000000 ____D C:\Users\Ersatz\Downloads\PC » ASSASSIN´S CREED 1 Full Game directplay by globe@
2013-12-05 18:42 - 2013-12-05 18:42 - 00000814 _____ C:\Users\Ersatz\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk
2013-12-05 18:41 - 2013-12-15 15:57 - 00000000 ____D C:\Users\Ersatz\AppData\Roaming\BitTorrent
2013-12-05 18:41 - 2013-12-05 18:41 - 01137240 _____ (BitTorrent Inc.) C:\Users\Ersatz\Downloads\bittorrent(2).exe
2013-12-05 18:38 - 2013-12-05 18:38 - 00014735 _____ C:\Users\Ersatz\Downloads\[kat.ph]pc.assassin.s.creed.1.full.game.directplay.by.globe.torrent
2013-12-05 18:36 - 2013-12-06 14:44 - 00000000 ____D C:\Program Files (x86)\GreyGray
2013-12-05 18:34 - 2013-12-15 13:35 - 00000360 _____ C:\Windows\Tasks\AmiUpdXp.job
2013-12-05 18:34 - 2013-12-05 18:34 - 00003382 _____ C:\Windows\System32\Tasks\AmiUpdXp
2013-12-05 18:34 - 2013-12-05 18:34 - 00000000 ____D C:\Users\Ersatz\AppData\Local\SwvUpdater
2013-12-05 18:33 - 2013-12-05 18:33 - 00332800 _____ () C:\Users\Ersatz\Downloads\Setup File__3097_il3118901.exe
2013-12-04 14:38 - 2013-12-04 14:38 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-12-03 22:14 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-12-03 22:09 - 2013-12-03 22:09 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-03 22:09 - 2013-12-03 22:09 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-03 22:09 - 2013-12-03 22:09 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-03 22:09 - 2013-12-03 22:09 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-03 22:09 - 2013-12-03 22:09 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-03 22:09 - 2013-12-03 22:09 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-03 22:09 - 2013-12-03 22:09 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-03 22:09 - 2013-12-03 22:09 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-03 22:09 - 2013-12-03 22:09 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-03 22:09 - 2013-12-03 22:09 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-03 22:09 - 2013-12-03 22:09 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-03 22:09 - 2013-12-03 22:09 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-03 22:09 - 2013-12-03 22:09 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-03 22:09 - 2013-12-03 22:09 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-03 22:09 - 2013-12-03 22:09 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-03 22:09 - 2013-12-03 22:09 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-03 22:09 - 2013-12-03 22:09 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-03 22:09 - 2013-12-03 22:09 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-03 22:09 - 2013-12-03 22:09 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-03 22:09 - 2013-12-03 22:09 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-03 22:07 - 2013-12-03 22:14 - 00009768 _____ C:\Windows\IE11_main.log
2013-11-29 19:36 - 2013-11-29 19:36 - 00001637 _____ C:\Users\Ersatz\Desktop\Alliance of Valiant Arms DE.lnk
2013-11-29 19:25 - 2013-11-29 19:25 - 00002028 _____ C:\Users\Public\Desktop\Aeria Ignite.lnk
2013-11-29 19:25 - 2013-11-29 19:25 - 00000000 ____D C:\Program Files (x86)\Aeria Games
2013-11-29 19:14 - 2013-11-29 19:13 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-11-29 19:14 - 2013-11-29 19:13 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-11-29 19:14 - 2013-11-29 19:13 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-11-29 19:14 - 2013-11-29 19:13 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-11-29 19:13 - 2013-11-29 19:13 - 00000000 ____D C:\Program Files (x86)\Java
2013-11-29 19:04 - 2013-11-29 19:04 - 29040552 _____ (Oracle Corporation) C:\Users\Ersatz\Downloads\jre-7u45-windows-i586(1).exe
2013-11-29 18:50 - 2013-11-29 18:50 - 00000000 ____D C:\Users\Ersatz\AppData\Local\Overwolf
2013-11-29 18:43 - 2013-11-29 18:43 - 00486064 _____ (Aeria Games & Entertainment) C:\Users\Ersatz\Downloads\ava_de_downloader.exe
2013-11-28 17:34 - 2013-11-28 17:36 - 49872857 _____ C:\Users\Ersatz\Downloads\Simon Desue - FERNE.zip
2013-11-27 16:27 - 2013-11-27 16:27 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-11-27 16:27 - 2013-11-27 16:27 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-11-27 16:27 - 2013-11-27 16:27 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-11-27 16:27 - 2013-11-27 16:27 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-11-27 16:27 - 2013-11-27 16:27 - 00000000 ____D C:\Program Files\Java
2013-11-27 16:25 - 2013-11-27 16:26 - 30694824 _____ (Oracle Corporation) C:\Users\Ersatz\Downloads\jre-7u45-windows-x64.exe
2013-11-27 16:23 - 2013-11-27 16:23 - 01117295 _____ C:\Users\Ersatz\Downloads\teamspeak_2.rar
2013-11-27 15:38 - 2013-11-27 15:38 - 29040552 _____ (Oracle Corporation) C:\Users\Ersatz\Downloads\jre-7u45-windows-i586.exe
2013-11-23 21:37 - 2013-11-23 21:37 - 00061355 _____ C:\Users\Ersatz\Downloads\1236708991SA-MP-Keybind.zip
2013-11-23 20:01 - 2013-11-23 20:01 - 00000561 _____ C:\Users\Ersatz\Desktop\Super Meat Boy.lnk
2013-11-23 19:55 - 2013-11-23 19:57 - 38344680 _____ C:\Users\Ersatz\Downloads\The Binding of Isaac wrath of the lamb 1.48.rar
2013-11-23 14:32 - 2013-11-23 14:32 - 105835460 _____ C:\Windows\SysWOW64\α勫ᰴQ
2013-11-23 00:56 - 2013-11-23 01:00 - 109047808 _____ C:\Users\Ersatz\Downloads\treasure_adventure_game_1.0.1.zip
2013-11-22 17:23 - 2013-11-22 17:23 - 00695296 _____ (AnjoCaido) C:\Users\Ersatz\Downloads\MinecraftSP.exe(1).exe
2013-11-21 21:16 - 2013-02-03 07:49 - 00412160 _____ C:\Users\Ersatz\Desktop\samp.exe
2013-11-21 19:14 - 2013-11-21 19:16 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2013-11-21 19:14 - 2013-11-21 19:14 - 00000045 _____ C:\Windows\SysWOW64\initdebug.nfo
2013-11-21 19:14 - 2013-11-21 19:14 - 00000000 ____D C:\Users\Ersatz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan
2013-11-21 19:13 - 2013-11-21 19:13 - 00618912 _____ C:\Users\Ersatz\Downloads\SpeedFan - CHIP-Downloader.exe
2013-11-21 18:36 - 2013-11-21 18:36 - 00000000 ____D C:\Users\Ersatz\Desktop\Müll
2013-11-17 00:30 - 2013-11-17 00:30 - 00483401 _____ C:\Users\Ersatz\Downloads\Beat--s.rar
2013-11-16 14:51 - 2013-11-16 16:02 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-15 17:57 - 2013-11-15 17:57 - 00159464 _____ C:\Users\Ersatz\Downloads\Minecraft.rar
==================== One Month Modified Files and Folders =======
2013-12-15 15:57 - 2013-12-05 18:41 - 00000000 ____D C:\Users\Ersatz\AppData\Roaming\BitTorrent
2013-12-15 15:54 - 2013-12-15 15:51 - 00031630 _____ C:\Users\Ersatz\Desktop\FRST.txt
2013-12-15 15:51 - 2013-12-15 15:51 - 00000000 ____D C:\FRST
2013-12-15 15:51 - 2013-12-15 15:50 - 01927796 _____ (Farbar) C:\Users\Ersatz\Desktop\FRST64.exe
2013-12-15 15:50 - 2012-12-18 14:50 - 00000000 ____D C:\Users\Ersatz\AppData\Roaming\Skype
2013-12-15 15:46 - 2013-09-19 13:50 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-15 15:33 - 2013-07-11 16:21 - 00000000 ____D C:\Program Files (x86)\DevPro
2013-12-15 15:33 - 2012-05-20 19:31 - 01943292 _____ C:\Windows\WindowsUpdate.log
2013-12-15 15:30 - 2013-12-07 17:53 - 00000000 ____D C:\Users\Ersatz\AppData\Roaming\Spotify
2013-12-15 15:27 - 2013-02-07 16:40 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-15 15:25 - 2012-11-23 19:03 - 00000932 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3087209928-2819711334-2487393063-1000UA.job
2013-12-15 14:05 - 2013-02-09 12:11 - 00000000 ____D C:\Users\Ersatz\AppData\Local\PMB Files
2013-12-15 14:03 - 2013-12-15 14:02 - 20634867 _____ C:\Users\Ersatz\Downloads\DevPro Theme by ALu.rar
2013-12-15 13:40 - 2009-07-14 18:58 - 00702964 _____ C:\Windows\system32\perfh007.dat
2013-12-15 13:40 - 2009-07-14 18:58 - 00150604 _____ C:\Windows\system32\perfc007.dat
2013-12-15 13:40 - 2009-07-14 06:13 - 01629372 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-15 13:39 - 2009-07-14 05:45 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-15 13:39 - 2009-07-14 05:45 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-15 13:37 - 2013-10-28 19:21 - 00000000 ____D C:\Users\Ersatz\AppData\Local\LogMeIn Hamachi
2013-12-15 13:35 - 2013-12-05 18:34 - 00000360 _____ C:\Windows\Tasks\AmiUpdXp.job
2013-12-15 13:35 - 2013-07-17 16:30 - 00000328 _____ C:\Windows\Tasks\GlaryInitialize.job
2013-12-15 13:35 - 2013-02-07 16:40 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-15 13:35 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-15 13:33 - 2013-07-30 00:05 - 00010174 _____ C:\Windows\setupact.log
2013-12-15 13:33 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-15 13:33 - 2009-07-14 05:45 - 00413624 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-15 01:44 - 2012-05-26 07:29 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-14 22:48 - 2013-02-24 14:58 - 00000000 ____D C:\Users\Ersatz\Desktop\titelbild
2013-12-14 21:33 - 2013-12-14 21:33 - 00001001 _____ C:\Users\Ersatz\Desktop\YGOPro.lnk
2013-12-14 21:25 - 2012-11-23 19:03 - 00000910 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3087209928-2819711334-2487393063-1000Core.job
2013-12-14 21:06 - 2013-12-14 20:45 - 255373753 _____ (YGOPro DevPro Online ) C:\Users\Ersatz\Downloads\SetupDevPro1.9.8r1.exe
2013-12-14 20:49 - 2013-12-14 20:49 - 00000486 _____ C:\Users\Ersatz\Downloads\SD Yugi.ydk
2013-12-14 20:35 - 2013-12-14 20:35 - 00000222 _____ C:\Users\Ersatz\Desktop\Dungeonland.url
2013-12-14 20:34 - 2013-03-01 18:45 - 00000000 ____D C:\Program Files (x86)\Steam
2013-12-14 19:08 - 2013-12-14 19:05 - 34855384 _____ C:\Users\Ersatz\Downloads\SnK Shimejis V1.1.rar
2013-12-14 18:50 - 2013-03-28 12:14 - 00000000 ____D C:\Users\Ersatz\AppData\Roaming\TS3Client
2013-12-14 13:12 - 2013-12-14 13:12 - 00000000 ____D C:\Users\Ersatz\AppData\Local\Ubisoft
2013-12-14 13:11 - 2013-12-13 19:07 - 00000222 _____ C:\Users\Ersatz\Desktop\Might & Magic Duel of Champions.url
2013-12-14 12:38 - 2013-12-07 17:55 - 00000000 ____D C:\Users\Ersatz\AppData\Local\Spotify
2013-12-14 12:22 - 2013-12-05 18:44 - 00000000 ____D C:\Users\Ersatz\Downloads\PC » ASSASSIN´S CREED 1 Full Game directplay by globe@
2013-12-14 12:22 - 2013-07-17 16:30 - 00000000 ____D C:\Program Files (x86)\Glary Utilities
2013-12-14 12:22 - 2013-02-09 12:11 - 00000000 ____D C:\ProgramData\PMB Files
2013-12-14 12:22 - 2012-09-24 15:48 - 00000000 ____D C:\Users\Ersatz\AppData\Local\Akamai
2013-12-14 12:22 - 2012-05-20 19:29 - 00000000 ____D C:\Users\Ersatz
2013-12-14 12:22 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration
2013-12-14 12:20 - 2012-10-12 13:59 - 00000000 ____D C:\ProgramData\Battle.net
2013-12-12 19:17 - 2013-04-26 14:29 - 00000000 ____D C:\Program Files (x86)\osu!
2013-12-12 09:05 - 2013-03-30 22:36 - 00000000 ____D C:\Users\Ersatz\AppData\Roaming\Awesomium
2013-12-12 09:02 - 2013-09-20 21:12 - 00052023 _____ C:\Windows\DirectX.log
2013-12-12 08:17 - 2013-12-12 08:17 - 00003252 _____ C:\Windows\System32\Tasks\{3753FE55-CBD6-4919-BFE2-43C822948F81}
2013-12-11 19:47 - 2013-09-19 13:50 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-11 19:47 - 2012-09-21 18:01 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-11 19:47 - 2012-09-21 18:01 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-11 19:46 - 2013-12-11 19:46 - 09272200 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2013-12-10 19:19 - 2013-12-10 19:08 - 00000000 ____D C:\Users\Ersatz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dungeon Defenders
2013-12-10 19:19 - 2013-12-10 19:05 - 00000000 ____D C:\Program Files (x86)\Dungeon Defenders
2013-12-10 19:01 - 2013-12-10 18:57 - 00000000 ____D C:\Users\Ersatz\Downloads\DungeonDefenders_7.50_JimbusEd
2013-12-10 18:58 - 2013-12-10 18:57 - 20013776 _____ (DT Soft Ltd) C:\Users\Ersatz\Downloads\DaemonToolsProStandardAdvancedVersion510333.exe
2013-12-10 18:55 - 2013-12-10 16:41 - 218267648 ____R C:\Users\Ersatz\Downloads\DungeonDefenders_7.50_JimbusEd.iso
2013-12-09 18:37 - 2013-12-09 18:37 - 00000222 _____ C:\Users\Ersatz\Desktop\Panzar.url
2013-12-07 17:55 - 2013-12-07 17:55 - 00001772 _____ C:\Users\Ersatz\Desktop\Spotify.lnk
2013-12-07 17:55 - 2013-12-07 17:55 - 00001758 _____ C:\Users\Ersatz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2013-12-07 17:53 - 2013-12-07 17:53 - 00127080 _____ (Spotify Ltd) C:\Users\Ersatz\Downloads\SpotifySetup.exe
2013-12-07 15:17 - 2013-12-07 15:10 - 00000000 ____D C:\Program Files (x86)\UltraStar
2013-12-07 15:10 - 2013-12-07 15:10 - 00000000 ____D C:\Users\Ersatz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UltraStar
2013-12-06 20:22 - 2013-02-07 16:40 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-06 20:22 - 2013-02-07 16:40 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-06 15:43 - 2012-05-26 20:32 - 00000000 ____D C:\Users\Ersatz\AppData\Roaming\vlc
2013-12-06 14:44 - 2013-12-05 18:36 - 00000000 ____D C:\Program Files (x86)\GreyGray
2013-12-06 14:39 - 2013-07-30 00:05 - 00280446 _____ C:\Windows\PFRO.log
2013-12-05 20:15 - 2013-12-05 20:15 - 00000000 ____D C:\Users\Ersatz\AppData\Roaming\Ubisoft
2013-12-05 20:15 - 2013-12-05 20:15 - 00000000 ____D C:\ProgramData\Ubisoft
2013-12-05 20:04 - 2013-12-05 20:04 - 00001077 _____ C:\Users\Ersatz\Desktop\FreeArc.lnk
2013-12-05 20:04 - 2013-12-05 20:04 - 00000000 ____D C:\Users\Ersatz\AppData\Roaming\FreeArc
2013-12-05 20:04 - 2013-12-05 20:03 - 00000000 ____D C:\Users\Ersatz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FreeArc
2013-12-05 20:04 - 2013-12-05 20:03 - 00000000 ____D C:\Program Files (x86)\FreeArc
2013-12-05 20:02 - 2013-12-05 20:01 - 07938425 _____ C:\Users\Ersatz\Downloads\FreeArc-0.666-win32.exe
2013-12-05 18:42 - 2013-12-05 18:42 - 00000814 _____ C:\Users\Ersatz\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk
2013-12-05 18:41 - 2013-12-05 18:41 - 01137240 _____ (BitTorrent Inc.) C:\Users\Ersatz\Downloads\bittorrent(2).exe
2013-12-05 18:38 - 2013-12-05 18:38 - 00014735 _____ C:\Users\Ersatz\Downloads\[kat.ph]pc.assassin.s.creed.1.full.game.directplay.by.globe.torrent
2013-12-05 18:34 - 2013-12-05 18:34 - 00003382 _____ C:\Windows\System32\Tasks\AmiUpdXp
2013-12-05 18:34 - 2013-12-05 18:34 - 00000000 ____D C:\Users\Ersatz\AppData\Local\SwvUpdater
2013-12-05 18:33 - 2013-12-05 18:33 - 00332800 _____ () C:\Users\Ersatz\Downloads\Setup File__3097_il3118901.exe
2013-12-05 14:30 - 2013-05-11 16:57 - 00107416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-04 14:39 - 2012-05-20 19:29 - 00001693 _____ C:\Users\Ersatz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-04 14:38 - 2013-12-04 14:38 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-12-04 14:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-12-03 22:14 - 2013-12-03 22:07 - 00009768 _____ C:\Windows\IE11_main.log
2013-12-03 22:09 - 2013-12-03 22:09 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-03 22:09 - 2013-12-03 22:09 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-03 22:09 - 2013-12-03 22:09 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-03 22:09 - 2013-12-03 22:09 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-03 22:09 - 2013-12-03 22:09 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-03 22:09 - 2013-12-03 22:09 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-03 22:09 - 2013-12-03 22:09 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-03 22:09 - 2013-12-03 22:09 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-03 22:09 - 2013-12-03 22:09 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-03 22:09 - 2013-12-03 22:09 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-03 22:09 - 2013-12-03 22:09 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-03 22:09 - 2013-12-03 22:09 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-03 22:09 - 2013-12-03 22:09 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-03 22:09 - 2013-12-03 22:09 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-03 22:09 - 2013-12-03 22:09 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-03 22:09 - 2013-12-03 22:09 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-03 22:09 - 2013-12-03 22:09 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-03 22:09 - 2013-12-03 22:09 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-03 22:09 - 2013-12-03 22:09 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-03 22:09 - 2013-12-03 22:09 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-03 22:09 - 2013-12-03 22:09 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-01 14:49 - 2012-12-18 14:50 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-12-01 14:49 - 2012-12-18 14:49 - 00000000 ____D C:\ProgramData\Skype
2013-11-29 19:36 - 2013-11-29 19:36 - 00001637 _____ C:\Users\Ersatz\Desktop\Alliance of Valiant Arms DE.lnk
2013-11-29 19:36 - 2013-02-15 19:03 - 00000000 ____D C:\Users\Ersatz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames
2013-11-29 19:25 - 2013-11-29 19:25 - 00002028 _____ C:\Users\Public\Desktop\Aeria Ignite.lnk
2013-11-29 19:25 - 2013-11-29 19:25 - 00000000 ____D C:\Program Files (x86)\Aeria Games
2013-11-29 19:25 - 2013-02-15 19:00 - 00000000 __SHD C:\Windows\SysWOW64\AI_RecycleBin
2013-11-29 19:25 - 2013-02-15 18:46 - 00000000 ____D C:\AeriaGames
2013-11-29 19:14 - 2013-10-07 19:56 - 00000000 ____D C:\ProgramData\Oracle
2013-11-29 19:13 - 2013-11-29 19:14 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-11-29 19:13 - 2013-11-29 19:14 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-11-29 19:13 - 2013-11-29 19:14 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-11-29 19:13 - 2013-11-29 19:14 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-11-29 19:13 - 2013-11-29 19:13 - 00000000 ____D C:\Program Files (x86)\Java
2013-11-29 19:04 - 2013-11-29 19:04 - 29040552 _____ (Oracle Corporation) C:\Users\Ersatz\Downloads\jre-7u45-windows-i586(1).exe
2013-11-29 18:50 - 2013-11-29 18:50 - 00000000 ____D C:\Users\Ersatz\AppData\Local\Overwolf
2013-11-29 18:43 - 2013-11-29 18:43 - 00486064 _____ (Aeria Games & Entertainment) C:\Users\Ersatz\Downloads\ava_de_downloader.exe
2013-11-28 17:36 - 2013-11-28 17:34 - 49872857 _____ C:\Users\Ersatz\Downloads\Simon Desue - FERNE.zip
2013-11-27 16:27 - 2013-11-27 16:27 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-11-27 16:27 - 2013-11-27 16:27 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-11-27 16:27 - 2013-11-27 16:27 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-11-27 16:27 - 2013-11-27 16:27 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2013-11-27 16:27 - 2013-11-27 16:27 - 00000000 ____D C:\Program Files\Java
2013-11-27 16:26 - 2013-11-27 16:25 - 30694824 _____ (Oracle Corporation) C:\Users\Ersatz\Downloads\jre-7u45-windows-x64.exe
2013-11-27 16:23 - 2013-11-27 16:23 - 01117295 _____ C:\Users\Ersatz\Downloads\teamspeak_2.rar
2013-11-27 15:38 - 2013-11-27 15:38 - 29040552 _____ (Oracle Corporation) C:\Users\Ersatz\Downloads\jre-7u45-windows-i586.exe
2013-11-26 17:36 - 2013-11-09 14:54 - 00001267 _____ C:\Users\Ersatz\Desktop\Keybinder-Fischen.ahk
2013-11-26 16:41 - 2013-05-11 23:04 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-11-26 16:41 - 2013-05-11 16:57 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-11-26 16:41 - 2013-05-11 16:57 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-11-26 12:54 - 2013-12-15 01:42 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-26 11:19 - 2013-12-15 01:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-26 11:18 - 2013-12-15 01:42 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-26 11:11 - 2013-12-15 01:42 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-26 10:48 - 2013-12-15 01:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-26 10:46 - 2013-12-15 01:42 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-26 10:41 - 2013-12-15 01:42 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-26 10:29 - 2013-12-15 01:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-26 10:27 - 2013-12-15 01:42 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-26 10:23 - 2013-12-15 01:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-26 10:21 - 2013-12-15 01:42 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-26 10:18 - 2013-12-15 01:42 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-26 10:18 - 2013-12-15 01:42 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-26 10:16 - 2013-12-15 01:42 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-26 09:57 - 2013-12-15 01:42 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-26 09:38 - 2013-12-15 01:42 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-26 09:38 - 2013-12-15 01:42 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-26 09:35 - 2013-12-15 01:42 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-26 09:32 - 2013-12-15 01:42 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-26 09:28 - 2013-12-15 01:42 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-26 09:16 - 2013-12-15 01:42 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-26 09:02 - 2013-12-15 01:42 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-26 08:48 - 2013-12-15 01:42 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-26 08:32 - 2013-12-15 01:42 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-26 08:26 - 2013-12-15 01:42 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-26 08:07 - 2013-12-15 01:42 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-26 07:40 - 2013-12-15 01:42 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-26 07:34 - 2013-12-15 01:42 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-26 07:34 - 2013-12-15 01:42 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-26 07:33 - 2013-12-15 01:42 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-26 07:27 - 2013-12-15 01:42 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-23 21:37 - 2013-11-23 21:37 - 00061355 _____ C:\Users\Ersatz\Downloads\1236708991SA-MP-Keybind.zip
2013-11-23 20:01 - 2013-11-23 20:01 - 00000561 _____ C:\Users\Ersatz\Desktop\Super Meat Boy.lnk
2013-11-23 19:57 - 2013-11-23 19:55 - 38344680 _____ C:\Users\Ersatz\Downloads\The Binding of Isaac wrath of the lamb 1.48.rar
2013-11-23 19:26 - 2013-12-14 12:51 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-11-23 18:47 - 2013-12-14 12:51 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-11-23 14:32 - 2013-11-23 14:32 - 105835460 _____ C:\Windows\SysWOW64\α勫ᰴQ
2013-11-23 01:00 - 2013-11-23 00:56 - 109047808 _____ C:\Users\Ersatz\Downloads\treasure_adventure_game_1.0.1.zip
2013-11-22 17:23 - 2013-11-22 17:23 - 00695296 _____ (AnjoCaido) C:\Users\Ersatz\Downloads\MinecraftSP.exe(1).exe
2013-11-21 19:16 - 2013-11-21 19:14 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2013-11-21 19:14 - 2013-11-21 19:14 - 00000045 _____ C:\Windows\SysWOW64\initdebug.nfo
2013-11-21 19:14 - 2013-11-21 19:14 - 00000000 ____D C:\Users\Ersatz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan
2013-11-21 19:13 - 2013-11-21 19:13 - 00618912 _____ C:\Users\Ersatz\Downloads\SpeedFan - CHIP-Downloader.exe
2013-11-21 18:36 - 2013-11-21 18:36 - 00000000 ____D C:\Users\Ersatz\Desktop\Müll
2013-11-21 17:41 - 2012-05-26 20:35 - 00000000 ____D C:\Users\Ersatz\AppData\Local\Adobe
2013-11-20 19:54 - 2013-05-24 16:08 - 00003697 _____ C:\Program Files (x86)\Mozilla Firefoxsafeguard-secure-search.xml
2013-11-20 19:53 - 2013-05-24 16:09 - 00046368 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
2013-11-20 19:53 - 2013-05-24 16:09 - 00000000 ____D C:\Program Files (x86)\AVG SafeGuard toolbar
2013-11-19 22:01 - 2012-05-25 18:16 - 00001912 _____ C:\Windows\epplauncher.mif
2013-11-19 22:00 - 2012-05-25 18:16 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-11-19 22:00 - 2012-05-25 18:16 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2013-11-19 11:21 - 2009-10-14 06:13 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-11-17 13:05 - 2012-05-22 19:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-17 00:30 - 2013-11-17 00:30 - 00483401 _____ C:\Users\Ersatz\Downloads\Beat--s.rar
2013-11-16 16:02 - 2013-11-16 14:51 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-15 17:57 - 2013-11-15 17:57 - 00159464 _____ C:\Users\Ersatz\Downloads\Minecraft.rar
2013-11-15 15:51 - 2013-08-21 00:16 - 00000000 ____D C:\Windows\system32\MRT
Files to move or delete:
====================
C:\Users\Ersatz\hash.dat
Some content of TEMP:
====================
C:\Users\Ersatz\AppData\Local\Temp\767150b35a89c42cdbe4786d416edbb1.dll
C:\Users\Ersatz\AppData\Local\Temp\avgnt.exe
C:\Users\Ersatz\AppData\Local\Temp\htmlayout.dll
C:\Users\Ersatz\AppData\Local\Temp\MoviesToolbarSetup_Somoto_9_10_2013.exe
C:\Users\Ersatz\AppData\Local\Temp\nso4E54.exe
C:\Users\Ersatz\AppData\Local\Temp\OnlineWeatherSetup.exe
C:\Users\Ersatz\AppData\Local\Temp\OptimizerPro.exe
C:\Users\Ersatz\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Ersatz\AppData\Local\Temp\sfextra.dll
C:\Users\Ersatz\AppData\Local\Temp\SPSetup.exe
C:\Users\Ersatz\AppData\Local\Temp\UpdateCheckerSetup.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-11-11 17:58
==================== End Of Log ============================ --- --- ---
--- --- --- |