Hallo ich habe seit einigen Tagen das Problem dass mein PC kurz einfriert und dann die Maus und die Tastatur für einpaar Sekunden nicht funktionieren also sie schalten sich kurz ab und wieder ein.

Mein System:
Windows 7 Pro 64bit
i7 920 @2.67GHz
10GB RAM
MSI GTX 970 4G Treiberversion: 347.88 WHQL

Mainboard:
FX58M von Acer

BIOS:
AMI
Version: R01-A3



und das sind die Log Files:
HiJackthis Logfile:

Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 22:17:54, on 28.03.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17689)

FIREFOX: 33.0.1 (x86 de)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\ProgramData\{f0f87754-a2c2-aa64-f0f8-87754a2cdd52}\Kaspersky Trial Resetter 2015.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\OkayFreedom\OkayFreedomClient.exe
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avpui.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Sam\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.mystartsearch.com/web/?type=dspp&ts=1422036833&from=smt&uid=WDCXWD10EZEX-00BN5A0_WD-WMC3F0F71ERE71ERE&q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.mystartsearch.com/web/?type=dspp&ts=1422036833&from=smt&uid=WDCXWD10EZEX-00BN5A0_WD-WMC3F0F71ERE71ERE&q={searchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: ContentBlockerBrowserHelperObject - {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\IEExt\ie_plugin.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll
O2 - BHO: VirtualKeyboardBrowserHelperObject - {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\IEExt\ie_plugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll
O2 - BHO: Safe Money Plugin - {E3D96E85-529D-4269-AC6A-97CF9E2221E3} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\IEExt\ie_plugin.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_FD70E4195A4DE5E83920BD6414A71B17] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
O4 - Startup: Kaspersky Trial Resetter 2015.lnk = C:\ProgramData\{f0f87754-a2c2-aa64-f0f8-87754a2cdd52}\Kaspersky Trial Resetter 2015.exe
O9 - Extra button: Virtuelle Tastatur - {09A10376-994C-4BBF-9121-F50CF7BA237E} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\IEExt\ie_plugin.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Kaspersky Anti-Virus Service 15.0.1 (AVP15.0.1) - Kaspersky Lab ZAO - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avp.exe
O23 - Service: Disc Soft Ultra Bus Service - Disc Soft Ltd - C:\Program Files (x86)\DAEMON Tools Ultra\DiscSoftBusService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Google Update-Dienst (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-Dienst (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: OkayFreedom VPN Starter Service - Steganos Software GmbH - C:\Program Files (x86)\OkayFreedom\OkayFreedomService.exe
O23 - Service: Origin Client Service - Electronic Arts - D:\Origin\OriginClientService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8253 bytes
         

--- --- ---

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 28.03.2015
Suchlauf-Zeit: 22:06:46
Logdatei: Malwarebytes.txt
Administrator: Ja

Version: 2.01.4.1018
Malware Datenbank: v2015.03.28.06
Rootkit Datenbank: v2015.03.26.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Sam

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 343646
Verstrichene Zeit: 8 Min, 35 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente gefunden)

Module: 0
(Keine schädliche Elemente gefunden)

Registrierungsschlüssel: 7
PUP.Optional.Multiplug, HKU\S-1-5-21-314491385-833715928-1570723329-1001_Classes\TYPELIB\{157B1AA6-3E5C-404A-9118-C1D91F537040}, , [09703112ff8bc76f8d44f02af1127888], 
PUP.Optional.Multiplug, HKU\S-1-5-21-314491385-833715928-1570723329-1001_Classes\INTERFACE\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326}, , [09703112ff8bc76f8d44f02af1127888], 
PUP.Optional.IHProtect.A, HKLM\SOFTWARE\WOW6432NODE\IHProtect, , [85f44cf74149e25431ac911f8b785ca4], 
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\mystartsearchSoftware, , [cdac53f01179d4623a76477157ac2dd3], 
PUP.Optional.FastSearchings, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}, , [3d3cd46fb6d4a88e46faa88413f27090], 
PUP.Optional.Booster.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{d65a1a66}, , [5d1c350e78122d097d09993817ec7090], 
PUP.Optional.WindowsMangerProtect.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\WindowsMangerProtect, , [f48593b0ccbe3105d1067645e61d9070], 

Registrierungswerte: 1
PUP.Optional.WebSearchInfo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {BB74DE59-BC4C-4172-9AC4-73315F71CFFE}, , [ec8da49f4e3c9c9a134da985c73ee11f]

Registrierungsdaten: 8
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.mystartsearch.com/?type=sc&ts=1422036747&from=smt&uid=WDCXWD10EZEX-00BN5A0_WD-WMC3F0F71ERE71ERE, Gut: (iexplore.exe), Schlecht: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.mystartsearch.com/?type=sc&ts=1422036747&from=smt&uid=WDCXWD10EZEX-00BN5A0_WD-WMC3F0F71ERE71ERE),,[df9a232056346acc9b065a7b1fe621df]
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://www.mystartsearch.com/web/?type=ds&ts=1422036747&from=smt&uid=WDCXWD10EZEX-00BN5A0_WD-WMC3F0F71ERE71ERE&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.mystartsearch.com/web/?type=ds&ts=1422036747&from=smt&uid=WDCXWD10EZEX-00BN5A0_WD-WMC3F0F71ERE71ERE&q={searchTerms}),,[9cdd91b2eb9f15212be57560778ef709]
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.mystartsearch.com/?type=hppp&ts=1422036833&from=smt&uid=WDCXWD10EZEX-00BN5A0_WD-WMC3F0F71ERE71ERE, Gut: (www.google.com), Schlecht: (hxxp://www.mystartsearch.com/?type=hppp&ts=1422036833&from=smt&uid=WDCXWD10EZEX-00BN5A0_WD-WMC3F0F71ERE71ERE),,[8beec182f694d66016faad28937226da]
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxp://www.mystartsearch.com/?type=hppp&ts=1422036833&from=smt&uid=WDCXWD10EZEX-00BN5A0_WD-WMC3F0F71ERE71ERE, Gut: (www.google.com), Schlecht: (hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxp://www.mystartsearch.com/?type=hppp&ts=1422036833&from=smt&uid=WDCXWD10EZEX-00BN5A0_WD-WMC3F0F71ERE71ERE),,[5227fb480585082ea7699d382adb22de]
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://www.mystartsearch.com/web/?type=ds&ts=1422036747&from=smt&uid=WDCXWD10EZEX-00BN5A0_WD-WMC3F0F71ERE71ERE&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.mystartsearch.com/web/?type=ds&ts=1422036747&from=smt&uid=WDCXWD10EZEX-00BN5A0_WD-WMC3F0F71ERE71ERE&q={searchTerms}),,[eb8e59ea7a10d264f81827ae50b58a76]
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.mystartsearch.com/?type=sc&ts=1422036747&from=smt&uid=WDCXWD10EZEX-00BN5A0_WD-WMC3F0F71ERE71ERE, Gut: (iexplore.exe), Schlecht: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.mystartsearch.com/?type=sc&ts=1422036747&from=smt&uid=WDCXWD10EZEX-00BN5A0_WD-WMC3F0F71ERE71ERE),,[9ddce65dd8b202342f72ad288d780ef2]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-314491385-833715928-1570723329-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://www.mystartsearch.com/web/?type=dspp&ts=1422036833&from=smt&uid=WDCXWD10EZEX-00BN5A0_WD-WMC3F0F71ERE71ERE&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.mystartsearch.com/web/?type=dspp&ts=1422036833&from=smt&uid=WDCXWD10EZEX-00BN5A0_WD-WMC3F0F71ERE71ERE&q={searchTerms}),,[44353f04ec9ee35316fb0ec770956799]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-314491385-833715928-1570723329-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://www.mystartsearch.com/web/?type=dspp&ts=1422036833&from=smt&uid=WDCXWD10EZEX-00BN5A0_WD-WMC3F0F71ERE71ERE&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.mystartsearch.com/web/?type=dspp&ts=1422036833&from=smt&uid=WDCXWD10EZEX-00BN5A0_WD-WMC3F0F71ERE71ERE&q={searchTerms}),,[da9fb48f0a8046f0a56c50859a6b26da]

Ordner: 4
PUP.Optional.Multiplug, C:\Program Files (x86)\youtubeadblocker, , [ff7ac67d3d4d8da96e15e289966d629e], 
PUP.Optional.TheAdBlock.A, C:\ProgramData\TheAdBlock, , [d4a5eb584c3e221413d194fea0638d73], 
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate, , [0079b390b5d553e37db9128ba75c3dc3], 
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate\update, , [0079b390b5d553e37db9128ba75c3dc3], 

Dateien: 26
PUP.Optional.Multiplug, C:\Users\Sam\AppData\Local\Temp\B66eFf\temp\Kaspersky Trial Resetter 2015.exe, , [09703112ff8bc76f8d44f02af1127888], 
Hacktool.CheatEngine, C:\Users\Sam\Desktop\Dragon Ball Xenoverse V1.00 Trainer +9 MrAntiFun.EXE, , [b2c769da0288d95db2dd043644bc6f91], 
Riskware.Injector.DC, C:\Users\Sam\Desktop\Extreme Injector v3.exe, , [b9c0af9457334aec4599b74b51b19d63], 
Hacktool.CheatEngine, C:\Users\Sam\Desktop\Fallout New Vegas Update 7 Trainer +7 [TRAiNERGAMES].exe, , [6d0c5be8f298be78cec1fb3f5ea28977], 
PUP.Optional.Multiplug, C:\Program Files (x86)\youtubeadblocker\R8ByKnBUVAhZPo.x64.dll, , [d9a0fc47484280b6a5d2ca66b54d52ae], 
PUP.Optional.MyStartSearch.A, C:\Users\Sam\AppData\Local\Temp\smt_mystartsearch.exe, , [1a5ff84b8505a3934d02db3fa0664fb1], 
PUP.Optional.Somoto, C:\Users\Sam\AppData\Local\Temp\bitool.dll, , [7ffa66dd90fac373c0f65087ad554cb4], 
PUP.Optional.Wajam.A, C:\Users\Sam\AppData\Local\Temp\WIE_2.12.2.5.exe, , [0f6a57ec2961b284ab8c98b1e31dce32], 
PUP.Optional.MultiPlug.A, C:\Users\Sam\AppData\Local\Temp\B66eFf\temp\hpds_setup.exe, , [83f6ed56c4c682b4e8ec8abcb052f10f], 
PUP.Optional.MultiPlug.A, C:\Users\Sam\AppData\Local\Temp\603cbA3dBd3\temp\hpds_setup.exe, , [3d3cca79c1c92b0b4f8588bec1412ed2], 
PUP.Optional.XTabs.A, C:\Users\Sam\AppData\Local\Temp\~dlE160\~dljyb\tmp\STab_Down_6.0.6.6.exe, , [0d6c2d16acde7cbae60d5dbd6b9ba060], 
PUP.Optional.WindowsProtectManger.A, C:\Users\Sam\AppData\Local\Temp\~dlE160\~dljyb\tmp\wpm_v20.0.0.1714.exe, , [bbbe321192f80a2c80529acc78887888], 
Hacktool.CheatEngine, C:\Users\Sam\Downloads\ALIEN.I.PLUS19TRN.MAXTRE.ZIP, , [26533a09dfabab8bccc3cb6f03fd56aa], 
PUP.Optional.OpenCandy, C:\Users\Sam\Downloads\DAEMONToolsUltra300-0309.exe, , [e594e65de1a9c175b0790afe08fe30d0], 
Backdoor.Bot, C:\Users\Sam\Downloads\dll files fixer v3.xx.rar, , [06734cf76426ad8927d55e2f1ee26a96], 
Hacktool.CheatEngine, C:\Users\Sam\Downloads\Dragon Ball Xenoverse V1.00 Trainer +9 MrAntiFun.zip, , [3f3a4df6375359dd216e4cee49b7a15f], 
PUP.Optional.OpenCandy, C:\Users\Sam\Downloads\DTLite4491-0356.exe, , [e2971b287b0f2e08cc5d050354b2e020], 
Hacktool.CheatEngine, C:\Users\Sam\Downloads\FALLOUT.NV.V1.4.0.525.PLUS10TRN.TRAINERGAMES.ZIP, , [ceab8db6a9e145f194fba09a9070a35d], 
PUP.HackTool.Agent, C:\Users\Sam\Downloads\THE.ELDER.SCROLLS.5.SKYRIM.V1.9.32.0.PLUS31TRN.HOG.ZIP, , [6712ae95e6a41b1b5caad80b70904cb4], 
Riskware.Injector.DC, C:\Users\Sam\Downloads\Extreme Injector v3.3 - by master131_mpgh.net.rar, , [d9a0e261a2e8db5b617d0cf654ae0000], 
PUP.Optional.MyStartSearch.A, C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\mystartsearch.xml, , [5029e75c27631a1c4d61d0e84ab92ed2], 
PUP.Optional.Multiplug, C:\Program Files (x86)\youtubeadblocker\R8ByKnBUVAhZPo.tlb, , [ff7ac67d3d4d8da96e15e289966d629e], 
PUP.Optional.MyStartSearch.A, C:\Users\Sam\AppData\Roaming\Mozilla\Firefox\Profiles\wtx5zb61.default\prefs.js, Gut: (), Schlecht: (user_pref("browser.newtab.url", "hxxp://www.mystartsearch.com/newtab/?type=nt&ts=1422036747&from=smt&uid=WDCXWD10EZEX-00BN5A0_WD-WMC3F0F71ERE71ERE");), ,[c6b31d2681093402f8d7c556a0660000]
PUP.Optional.MyStartSearch.A, C:\Users\Sam\AppData\Roaming\Mozilla\Firefox\Profiles\wtx5zb61.default\prefs.js, Gut: (), Schlecht: (user_pref("browser.startup.homepage", "hxxp://www.mystartsearch.com/?type=hppp&ts=1422036833&from=smt&uid=WDCXWD10EZEX-00BN5A0_WD-WMC3F0F71ERE71ERE");), ,[3a3f0e357f0b42f4933dd645709643bd]
PUP.Optional.TheSearchPage.A, C:\Users\Sam\AppData\Roaming\Mozilla\Firefox\Profiles\wtx5zb61.default\prefs.js, Gut: (), Schlecht: (user_pref("keyword.URL", "hxxp://websearch.thesearchpage.info/?pid=21153&r=2015/02/02&hid=13948972591229653119&lg=EN&cc=DE&unqvl=74&l=1&q=");), ,[3a3f89ba1e6c1d1914f5a973f80e04fc]
PUP.Optional.MyStartSearch.A, C:\Users\Sam\AppData\Roaming\Mozilla\Firefox\Profiles\wtx5zb61.default\search.json, Gut: (), Schlecht: (mystartsearch), ,[fc7de95ae8a27eb889052bf06d99c13f]

Physische Sektoren: 0
(Keine schädliche Elemente gefunden)


(end)
         

Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.


Bitte beachte folgende Hinweise:

• Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
• Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
• Solltest du mir nicht innerhalb von 3 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo. Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
• Während der Bereinigung bitte nichts installieren oder deinstallieren, außer ich bitte dich darum!
• Bitte beachten: Download bei filepony.de: So ladet Ihr unsere Tools richtig!
• Alle zu verwendenen Programme sind auf dem Desktop abzuspeichern und von dort zu starten!

Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke aauf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Danke für deine Mitarbeit!




Zur ersten Analyse bitte FRST ausführen:

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Sam (administrator) on SAM-PC on 30-03-2015 15:25:13
Running from C:\Users\Sam\Downloads
Loaded Profiles: Sam (Available profiles: Sam)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
(Softwareentwicklung Remus - ArchiCrypt) C:\Windows\System32\ACRAMDiskHandlerService64R_D4.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avp.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Steganos Software GmbH) C:\Program Files (x86)\OkayFreedom\OkayFreedomService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\ProgramData\{f0f87754-a2c2-aa64-f0f8-87754a2cdd52}\Kaspersky Trial Resetter 2015.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avpui.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Steganos Software GmbH) C:\Program Files (x86)\OkayFreedom\OkayFreedomClient.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2585744 2015-03-13] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2014-09-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [508800 2014-12-17] (Oracle Corporation)
HKU\S-1-5-21-314491385-833715928-1570723329-1001\...\Run: [GoogleChromeAutoLaunch_FD70E4195A4DE5E83920BD6414A71B17] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [809288 2015-03-14] (Google Inc.)
HKU\S-1-5-21-314491385-833715928-1570723329-1001\...\MountPoints2: {eb19d5b0-a482-11e4-a3d4-00016c6b8f25} - J:\startme.exe
HKU\S-1-5-21-314491385-833715928-1570723329-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [899584 2010-11-21] (Microsoft Corporation)
Startup: C:\Users\Sam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Kaspersky Trial Resetter 2015.lnk
ShortcutTarget: Kaspersky Trial Resetter 2015.lnk -> C:\ProgramData\{f0f87754-a2c2-aa64-f0f8-87754a2cdd52}\Kaspersky Trial Resetter 2015.exe ()
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:55096;https=127.0.0.1:55096
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-314491385-833715928-1570723329-1001\Software\Microsoft\Internet Explorer\Main,Start Page = 
SearchScopes: HKLM -> DefaultScope {D0277F7A-06FF-4FB6-AA6B-080876ED6422} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM -> {D0277F7A-06FF-4FB6-AA6B-080876ED6422} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope value is missing.
SearchScopes: HKU\S-1-5-21-314491385-833715928-1570723329-1001 -> DefaultScope {D0277F7A-06FF-4FB6-AA6B-080876ED6422} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKU\S-1-5-21-314491385-833715928-1570723329-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=WDCXWD10EZEX-00BN5A0_WD-WMC3F0F71ERE71ERE&ts=1422036944&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-314491385-833715928-1570723329-1001 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=WDCXWD10EZEX-00BN5A0_WD-WMC3F0F71ERE71ERE&ts=1422036944&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-314491385-833715928-1570723329-1001 -> {D0277F7A-06FF-4FB6-AA6B-080876ED6422} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKU\S-1-5-21-314491385-833715928-1570723329-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=WDCXWD10EZEX-00BN5A0_WD-WMC3F0F71ERE71ERE&ts=1422036944&type=default&q={searchTerms}
BHO: Content Blocker Plugin -> {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\IEExt\ie_plugin.dll [2015-02-13] (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28] (Oracle Corporation)
BHO: Virtual Keyboard Plugin -> {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\IEExt\ie_plugin.dll [2015-02-13] (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation)
BHO: Safe Money Plugin -> {E3D96E85-529D-4269-AC6A-97CF9E2221E3} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\IEExt\ie_plugin.dll [2015-02-13] (Kaspersky Lab ZAO)
BHO-x32: Content Blocker Plugin -> {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\IEExt\ie_plugin.dll [2015-02-13] (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-16] (Oracle Corporation)
BHO-x32: Virtual Keyboard Plugin -> {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\IEExt\ie_plugin.dll [2015-02-13] (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-16] (Oracle Corporation)
BHO-x32: Safe Money Plugin -> {E3D96E85-529D-4269-AC6A-97CF9E2221E3} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\IEExt\ie_plugin.dll [2015-02-13] (Kaspersky Lab ZAO)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Sam\AppData\Roaming\Mozilla\Firefox\Profiles\wtx5zb61.default
FF DefaultSearchEngine: mystartsearch
FF DefaultSearchEngine,S: WebSearch
FF DefaultSearchUrl: hxxp://websearch.thesearchpage.info/?pid=21153&r=2015/02/02&hid=13948972591229653119&lg=EN&cc=DE&unqvl=74&l=1&q=
FF SearchEngineOrder.1: WebSearch
FF SearchEngineOrder.1,S: WebSearch
FF SelectedSearchEngine: mystartsearch
FF SelectedSearchEngine,S: WebSearch
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2015-01-13] (EA Digital Illusions CE AB)
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-28] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-30] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-01-07] (Adobe Systems)
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2015-01-13] (EA Digital Illusions CE AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-16] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-16] (Oracle Corporation)
FF Plugin-x32: @kaspersky.com/content_blocker_6418E0D362104DADA084DC312DFA8ABC -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\content_blocker@kaspersky.com [2015-02-13] ()
FF Plugin-x32: @kaspersky.com/virtual_keyboard_294FF26A1D5B455495946778FDE7CEDB -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com [2015-02-13] ()
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-03-13] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-03-13] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-03] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-03] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-09-12] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-01-07] (Adobe Systems)
FF user.js: detected! => C:\Users\Sam\AppData\Roaming\Mozilla\Firefox\Profiles\wtx5zb61.default\user.js [2015-01-23]
FF Extension: unisaless - C:\Users\Sam\AppData\Roaming\Mozilla\Firefox\Profiles\wtx5zb61.default\Extensions\0Gi7n8O9zW@m.com [2015-03-12]
FF Extension: youtubeadblocker - C:\Users\Sam\AppData\Roaming\Mozilla\Firefox\Profiles\wtx5zb61.default\Extensions\6ekT@b.com [2015-03-12]
FF Extension: uunisailaes - C:\Users\Sam\AppData\Roaming\Mozilla\Firefox\Profiles\wtx5zb61.default\Extensions\s7NNr@D.com [2015-03-12]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker_6418E0D362104DADA084DC312DFA8ABC@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\content_blocker@kaspersky.com
FF Extension: Модуль блокування небезпечних веб-сайтів - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\content_blocker@kaspersky.com [2015-02-13]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard_294FF26A1D5B455495946778FDE7CEDB@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Віртуальна клавіатура - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com [2015-02-13]
FF HKU\S-1-5-21-314491385-833715928-1570723329-1001\...\Firefox\Extensions: [{ba2c82b0-7fa8-11e4-b4a9-0800200c9a66}] - C:\Users\Sam\AppData\Local\Temp\VLC\search.xpi

Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR HomePage: Default -> 
CHR StartupUrls: Default -> "hxxp://www.google.de/"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Magic Actions for YouTube™) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif [2015-01-12]
CHR Extension: (From Dust) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\anelkojiepicmcldgnmkplocifmegpfj [2015-01-12]
CHR Extension: (Google Drive) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-12]
CHR Extension: (OkayFreedom) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\bckipplcmnfhblnpibpbehenelnkpecd [2015-02-02]
CHR Extension: (YouTube) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-12]
CHR Extension: (Google Search) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-12]
CHR Extension: (Kaspersky Protection) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho [2015-02-15]
CHR Extension: (Video Downloader professional) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2015-01-12]
CHR Extension: (AdBlock) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-02-02]
CHR Extension: (A Journey through Middle-earth) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjgkjeheegjnnmheaflhdocglkiegoni [2015-02-02]
CHR Extension: (Hola Better Internet) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2015-02-02]
CHR Extension: (Linkbucks skip) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjpndobkiolgpnpagkhnknhinnpoajmd [2015-02-02]
CHR Extension: (eBay Extension for Google Chrome™) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\khhckppjhonfmcpegdjdibmngahahhck [2015-02-02]
CHR Extension: (Better Battlelog (BBLog)) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjlfnjepjdmlppapoikepbaabbghofma [2015-02-02]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-22]
CHR Extension: (Turbo for YouTube) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhgnmngkgolhffjjdaipkkjbmbnpefef [2015-02-02]
CHR Extension: (Google Wallet) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-02-02]
CHR Extension: (FoxClocks) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\obcbigljfpgappaaofailjjoabiikckk [2015-02-02]
CHR Extension: (Click&Clean App) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdabfienifkbhoihedcgeogidfmibmhp [2015-01-12]
CHR Extension: (Gmail) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-12]
CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho [Not Found]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-07-23] (SUPERAntiSpyware.com)
R2 ArchiCrypt Ultimate RAM-Disk 4; C:\Windows\system32\ACRAMDiskHandlerService64R_D4.exe [1580816 2013-10-18] (Softwareentwicklung Remus - ArchiCrypt)
R2 AVP15.0.1; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avp.exe [234520 2014-08-30] (Kaspersky Lab ZAO)
S3 Disc Soft Ultra Bus Service; C:\Program Files (x86)\DAEMON Tools Ultra\DiscSoftBusService.exe [1378576 2014-12-09] (Disc Soft Ltd)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148560 2015-03-13] (NVIDIA Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1706128 2015-03-13] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21833360 2015-03-13] (NVIDIA Corporation)
R2 OkayFreedom VPN Starter Service; C:\Program Files (x86)\OkayFreedom\OkayFreedomService.exe [326072 2015-02-18] (Steganos Software GmbH)
S3 Origin Client Service; D:\Origin\OriginClientService.exe [1910128 2015-02-02] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2015-02-03] ()
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 ACMoFlex64RD4; C:\Windows\system32\drivers\ACMoFlex64RD4.sys [24848 2013-10-18] (Softwareentwicklung Remus - ArchiCrypt.de)
R0 cm_km_w; C:\Windows\System32\DRIVERS\cm_km_w.sys [238288 2013-01-14] (Kaspersky Lab UK Ltd)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2015-02-18] (Disc Soft Ltd)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [468576 2014-03-31] (Kaspersky Lab ZAO)
R2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [46144 2014-07-02] (Kaspersky Lab ZAO)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [150536 2015-02-13] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [246456 2014-08-12] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [819896 2015-03-10] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [30304 2014-02-25] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [28768 2014-03-28] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55872 2014-06-05] (Kaspersky Lab ZAO)
R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [77512 2015-02-13] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [179776 2014-07-09] (Kaspersky Lab ZAO)
R3 KovaPlusFltr; C:\Windows\System32\drivers\KovaPlusFltr.sys [15104 2010-01-25] (ROCCAT Development, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-03-17] (Malwarebytes Corporation)
R3 Neo_VPN; C:\Windows\System32\DRIVERS\Neo_0078.sys [28768 2015-01-30] (SoftEther VPN Project at University of Tsukuba, Japan.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-03-13] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13368 2013-03-11] ()
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
U4 klkbdflt2; system32\DRIVERS\klkbdflt2.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-30 15:25 - 2015-03-30 15:25 - 00023039 _____ () C:\Users\Sam\Downloads\FRST.txt
2015-03-30 15:25 - 2015-03-30 15:25 - 00000000 ____D () C:\FRST
2015-03-30 15:24 - 2015-03-30 15:24 - 02095616 _____ (Farbar) C:\Users\Sam\Downloads\FRST64.exe
2015-03-29 20:43 - 2015-03-29 20:43 - 00001168 _____ () C:\Users\Sam\Desktop\ArchiCrypt Ultimate RAM-Disk 4.lnk
2015-03-29 20:43 - 2015-03-29 20:43 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\ArchiCrypt Ultimate RAM-Disk3
2015-03-29 20:43 - 2015-03-29 20:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArchiCrypt
2015-03-29 20:43 - 2015-03-29 20:43 - 00000000 ____D () C:\ProgramData\ArchiCrypt Ultimate RAM-Disk
2015-03-29 20:43 - 2013-10-18 11:10 - 01580816 _____ (Softwareentwicklung Remus - ArchiCrypt) C:\Windows\system32\ACRAMDiskHandlerService64R_D4.exe
2015-03-29 20:43 - 2013-10-18 11:10 - 00024848 _____ (Softwareentwicklung Remus - ArchiCrypt.de) C:\Windows\system32\Drivers\ACMoFlex64RD4.sys
2015-03-29 20:43 - 2013-10-18 11:09 - 00170256 _____ (Softwareentwicklung Remus - ArchiCrypt.de) C:\Windows\system32\ACMFEngine64RD4.dll
2015-03-29 20:42 - 2015-03-29 20:42 - 00000000 ____D () C:\Program Files\ArchiCrypt
2015-03-29 20:41 - 2015-03-29 20:41 - 12643052 _____ () C:\Users\Sam\Downloads\ACUltimateRAMDisk464.zip
2015-03-28 23:33 - 2015-03-28 23:33 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\SUPERAntiSpyware.com
2015-03-28 23:28 - 2015-03-28 23:28 - 00008254 _____ () C:\Users\Sam\Desktop\hijackthis.log
2015-03-28 23:17 - 2015-03-28 23:17 - 00388608 _____ (Trend Micro Inc.) C:\Users\Sam\Downloads\HijackThis.exe
2015-03-28 23:17 - 2015-03-28 23:17 - 00008254 _____ () C:\Users\Sam\Downloads\hijackthis.log
2015-03-28 23:16 - 2015-03-28 23:16 - 00010289 _____ () C:\Users\Sam\Desktop\Malwarebytes.txt
2015-03-28 23:06 - 2015-03-28 23:06 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-03-28 23:06 - 2015-03-28 23:06 - 00001109 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-03-28 23:06 - 2015-03-28 23:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-03-28 23:06 - 2015-03-28 23:06 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-03-28 23:06 - 2015-03-17 07:15 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-03-28 23:06 - 2015-03-17 07:15 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-03-28 23:06 - 2015-03-17 07:15 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-03-28 23:05 - 2015-03-28 23:05 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\Sam\Downloads\mbam-setup-2.1.4.1018.exe
2015-03-28 20:00 - 2015-03-13 17:38 - 00622224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-03-28 19:43 - 2015-03-28 19:58 - 309143408 _____ (NVIDIA Corporation) C:\Users\Sam\Downloads\347.88-desktop-win8-win7-winvista-64bit-international-whql.exe
2015-03-28 19:10 - 2015-03-28 19:10 - 00002580 _____ () C:\Users\Sam\Downloads\turbo10.zip
2015-03-28 17:16 - 2015-03-28 17:17 - 30151898 _____ () C:\Users\Sam\Downloads\ROCCAT_Kova[+]_DRV1.25 (1).zip
2015-03-28 17:10 - 2015-03-28 17:10 - 00199489 _____ () C:\Users\Sam\Downloads\CCEnhancer-4.2-mulitlingual.zip
2015-03-28 17:09 - 2015-03-28 19:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-03-28 14:19 - 2015-03-28 19:35 - 00000000 ____D () C:\Users\Sam\Desktop\BIOS_ACER_R01.A3_Windows_ASM7720
2015-03-28 14:18 - 2015-03-28 14:18 - 00948720 _____ () C:\Users\Sam\Downloads\BIOS_Acer_R01.A3_A_A (2).zip
2015-03-28 13:54 - 2015-03-28 13:54 - 00015201 _____ () C:\Users\Sam\Downloads\MemTest41.zip
2015-03-28 13:17 - 2015-03-28 19:35 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\Wise Registry Cleaner
2015-03-28 13:17 - 2015-03-28 13:17 - 00000000 ____D () C:\Program Files (x86)\Wise
2015-03-28 13:13 - 2015-03-28 13:13 - 00000000 ____D () C:\Users\Sam\AppData\Local\Microsoft Research
2015-03-28 13:12 - 2015-03-28 13:12 - 00000000 ____D () C:\Program Files (x86)\Microsoft Research
2015-03-28 12:33 - 2015-03-28 12:33 - 02357106 _____ () C:\Users\Sam\Downloads\Chipset_Intel_9.1.1.1015_W7x64_A (1).zip
2015-03-28 12:32 - 2015-03-28 12:32 - 01516243 _____ () C:\Users\Sam\Downloads\Modem_liteon_2.2.95_W7x64_A.zip
2015-03-28 12:32 - 2015-03-28 12:32 - 00000000 ____D () C:\Windows\Options
2015-03-28 12:26 - 2015-03-28 12:26 - 03008450 _____ () C:\Users\Sam\Downloads\X58ExpressChipset9.3.0.1019.zip
2015-03-28 12:23 - 2015-03-28 12:23 - 02636255 _____ () C:\Users\Sam\Downloads\875PChipsetIntel865ChipsetFamily848PChi9.2.0.1025.zip
2015-03-28 12:18 - 2015-03-28 14:52 - 00000136 _____ () C:\Users\Sam\Win8UpgradeKit_28.03.2015.LOG
2015-03-27 20:01 - 2015-03-27 20:01 - 00000000 ____D () C:\Program Files\Intel
2015-03-27 18:26 - 2015-03-27 18:26 - 00002844 _____ () C:\Users\Sam\Unigine_Heaven_Benchmark_4.0_20150327_1726.html
2015-03-27 17:04 - 2015-03-28 19:35 - 00000000 ____D () C:\Users\Sam\AppData\Local\GOG.com
2015-03-27 17:03 - 2015-03-27 17:03 - 03701856 _____ (GOG.com ) C:\Users\Sam\Downloads\Setup_Downloader_3.6.0_stable.exe
2015-03-27 15:36 - 2015-03-27 15:36 - 00000000 ____D () C:\Program Files (x86)\Intel
2015-03-27 15:36 - 2015-03-27 15:36 - 00000000 ____D () C:\Intel
2015-03-27 15:35 - 2015-03-27 15:35 - 02357106 _____ () C:\Users\Sam\Downloads\Chipset_Intel_9.1.1.1015_W7x64_A.zip
2015-03-27 15:34 - 2015-03-28 00:40 - 00016689 _____ () C:\Users\Sam\Win8UpgradeKit_27.03.2015.LOG
2015-03-27 15:32 - 2015-03-27 15:33 - 28777589 _____ () C:\Users\Sam\Downloads\Win8UpgAsstTool_1.00.3001.zip
2015-03-27 15:28 - 2015-03-27 15:28 - 00948720 _____ () C:\Users\Sam\Downloads\BIOS_Acer_R01.A3_A_A (1).zip
2015-03-27 15:18 - 2015-03-27 15:19 - 00132014 _____ () C:\Users\Sam\Downloads\Core2MaxPerf-110.zip
2015-03-27 14:07 - 2015-03-28 15:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI
2015-03-27 14:07 - 2015-03-28 15:03 - 00000000 ____D () C:\Program Files (x86)\MSI
2015-03-27 14:07 - 2015-03-27 14:07 - 00000000 ____D () C:\MSI
2015-03-27 14:06 - 2015-03-27 14:07 - 36210245 _____ () C:\Users\Sam\Downloads\MSIAfterburnerSetup.zip
2015-03-27 14:05 - 2015-03-27 14:06 - 10746455 _____ () C:\Users\Sam\Downloads\gamingapp_4.0.0.04.zip
2015-03-27 14:05 - 2015-03-27 14:06 - 10594870 _____ () C:\Users\Sam\Downloads\LiveUpdate.zip
2015-03-26 21:30 - 2015-03-28 19:35 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2015-03-26 21:30 - 2015-03-28 19:35 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2015-03-26 17:58 - 2015-03-28 19:35 - 00000000 ____D () C:\Program Files\Registry System Wizard.NET
2015-03-26 17:58 - 2015-03-26 17:58 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\WinFAQ
2015-03-26 17:52 - 2015-03-26 17:52 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\STEITZ® IT-Solutions
2015-03-26 17:52 - 2015-03-26 17:52 - 00000000 ____D () C:\Users\Sam\AppData\Local\STEITZ®_IT-Solutions
2015-03-26 17:52 - 2015-03-26 17:52 - 00000000 ____D () C:\ProgramData\STEITZ® IT-Solutions
2015-03-26 17:52 - 2015-03-26 17:52 - 00000000 ____D () C:\ProgramData\Caphyon
2015-03-26 17:52 - 2015-03-26 17:52 - 00000000 ____D () C:\Program Files (x86)\STEITZ IT-Solutions
2015-03-26 17:50 - 2015-03-26 17:51 - 20208530 _____ () C:\Users\Sam\Downloads\devmanpro11.zip
2015-03-26 00:29 - 2013-10-02 02:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2015-03-26 00:29 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2015-03-26 00:28 - 2012-08-23 16:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2015-03-23 17:49 - 2015-03-13 21:41 - 32114888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 25460880 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 24775368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 20466376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 17258024 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 13297144 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 13210080 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 10775080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 10715864 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 10262160 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-03-23 17:49 - 2015-03-13 21:41 - 03611792 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 03249352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 01896136 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434788.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 01557648 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434788.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00997856 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00970384 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00944784 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00930448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00909512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00878328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00496272 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00400584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00390288 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00354112 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00346824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00306208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00178512 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00164568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-03-23 16:38 - 2015-03-23 16:38 - 00000000 ____D () C:\Users\Sam\Intel
2015-03-23 16:37 - 2015-03-23 16:38 - 18415338 _____ () C:\Users\Sam\Downloads\intel_rst_12_9_4_1000_whql.zip
2015-03-23 16:34 - 2015-03-23 16:38 - 00000000 ____D () C:\Program Files (x86)\DriverToolkit
2015-03-23 16:34 - 2015-03-23 16:34 - 02448688 _____ (Megaify Software ) C:\Users\Sam\Downloads\DriverToolkitInstaller.exe
2015-03-23 16:34 - 2015-03-23 16:34 - 00000000 ____D () C:\Users\Sam\AppData\Local\DriverToolkit
2015-03-23 16:31 - 2015-03-23 16:31 - 00000000 ____D () C:\Program Files (x86)\eSupport.com
2015-03-23 16:30 - 2015-03-23 16:31 - 01196816 _____ (Copyright © 2013 eSupport.com, Inc • All Rights Reserved ) C:\Users\Sam\Downloads\driveragent-setup-1213.exe
2015-03-23 16:29 - 2015-03-23 16:29 - 00000937 _____ () C:\Users\Public\Desktop\CPUID HWMonitor.lnk
2015-03-23 16:28 - 2015-03-23 16:28 - 01191992 _____ ( ) C:\Users\Sam\Downloads\hwmonitor_1.27.exe
2015-03-22 23:33 - 2015-03-28 19:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2015-03-22 23:33 - 2015-03-28 19:35 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com
2015-03-22 23:33 - 2015-03-28 19:35 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2015-03-22 23:33 - 2015-03-22 23:33 - 00001815 _____ () C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk
2015-03-22 23:32 - 2015-03-22 23:32 - 21459360 _____ (SUPERAntiSpyware) C:\Users\Sam\Downloads\SUPERAntiSpyware.exe
2015-03-22 21:10 - 2015-03-28 19:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ROCCAT
2015-03-22 21:10 - 2015-03-28 19:34 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-03-22 21:10 - 2015-03-22 21:10 - 00000000 ____D () C:\Program Files (x86)\ROCCAT
2015-03-22 21:09 - 2015-03-22 21:10 - 30151898 _____ () C:\Users\Sam\Downloads\ROCCAT_Kova[+]_DRV1.25.zip
2015-03-22 20:04 - 2015-03-23 16:20 - 00108859 _____ () C:\Users\Sam\Downloads\usbdeview_241-x64.zip
2015-03-21 17:59 - 2015-03-21 17:59 - 00000722 _____ () C:\Users\Sam\Desktop\StarCitizen.lnk
2015-03-21 17:59 - 2015-03-21 17:59 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StarCitizen
2015-03-21 17:56 - 2015-03-21 17:57 - 38885078 _____ () C:\Users\Sam\Downloads\StarCitizenInstaller (1).exe
2015-03-20 15:19 - 2015-03-20 15:22 - 00008156 _____ () C:\Users\Sam\Downloads\software_removal_tool.log
2015-03-17 21:24 - 2015-03-17 21:24 - 00007663 _____ () C:\Users\Sam\AppData\Local\Resmon.ResmonCfg
2015-03-17 19:30 - 2015-03-17 19:30 - 00000202 _____ () C:\Users\Sam\Desktop\PAYDAY 2.url
2015-03-16 20:19 - 2015-03-16 20:19 - 00536064 _____ () C:\Users\Sam\Downloads\youtu.be-J7bANMHnPUk.webp
2015-03-13 18:59 - 2015-03-28 19:34 - 00000000 ____D () C:\Games
2015-03-13 18:59 - 2015-03-13 18:59 - 00000802 _____ () C:\Users\Public\Desktop\World of Warships.lnk
2015-03-13 18:59 - 2015-03-13 18:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warships
2015-03-13 18:56 - 2015-03-13 18:56 - 09040664 _____ (Wargaming.net ) C:\Users\Sam\Downloads\WoWS_internet_install_eu.exe
2015-03-13 14:52 - 2015-03-13 14:52 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-03-13 14:50 - 2015-03-13 14:51 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Sam\Downloads\mbam-setup-2.0.4.1028.exe
2015-03-12 21:42 - 2015-03-12 21:42 - 10580340 _____ () C:\Users\Sam\Downloads\tardsplaya_1.0.0.5.7z
2015-03-12 21:42 - 2015-03-12 21:42 - 00000000 ____D () C:\Users\Sam\Desktop\Tardsplaya
2015-03-11 23:03 - 2015-03-11 23:03 - 01174216 _____ (Igor Pavlov) C:\Users\Sam\Desktop\DDU v14.0.0.1.exe
2015-03-11 23:03 - 2015-03-11 23:03 - 00266959 _____ (Igor Pavlov) C:\Users\Sam\Downloads\GiveMePower v2.1.0.0.exe
2015-03-11 23:03 - 2015-03-11 23:03 - 00266959 _____ (Igor Pavlov) C:\Users\Sam\Desktop\GiveMePower v2.1.0.0.exe
2015-03-11 23:01 - 2015-03-11 23:03 - 01174216 _____ (Igor Pavlov) C:\Users\Sam\Downloads\DDU v14.0.0.1.exe
2015-03-11 16:05 - 2015-02-20 06:41 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-03-11 16:05 - 2015-02-20 06:40 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-03-11 16:05 - 2015-02-20 06:40 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-03-11 16:05 - 2015-02-20 06:40 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-03-11 16:05 - 2015-02-20 06:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-03-11 16:05 - 2015-02-20 06:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-03-11 16:05 - 2015-02-20 06:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-03-11 16:05 - 2015-02-20 06:12 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-03-11 16:05 - 2015-02-20 05:29 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-03-11 16:05 - 2015-02-20 05:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-03-11 16:05 - 2015-02-03 05:34 - 05554104 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-03-11 16:05 - 2015-02-03 05:34 - 00693176 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-03-11 16:05 - 2015-02-03 05:34 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-03-11 16:05 - 2015-02-03 05:33 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-03-11 16:05 - 2015-02-03 05:31 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-03-11 16:05 - 2015-02-03 05:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-03-11 16:05 - 2015-02-03 05:30 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-03-11 16:05 - 2015-02-03 05:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 16:05 - 2015-02-03 05:30 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-03-11 16:05 - 2015-02-03 05:30 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-03-11 16:05 - 2015-02-03 05:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-03-11 16:05 - 2015-02-03 05:30 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-03-11 16:05 - 2015-02-03 05:30 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 16:05 - 2015-02-03 05:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2015-03-11 16:05 - 2015-02-03 05:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2015-03-11 16:05 - 2015-02-03 05:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2015-03-11 16:05 - 2015-02-03 05:28 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-03-11 16:05 - 2015-02-03 05:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-03-11 16:05 - 2015-02-03 05:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2015-03-11 16:05 - 2015-02-03 05:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-03-11 16:05 - 2015-02-03 05:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-03-11 16:05 - 2015-02-03 05:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-03-11 16:05 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-03-11 16:05 - 2015-02-03 05:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-03-11 16:05 - 2015-02-03 05:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2015-03-11 16:05 - 2015-02-03 05:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2015-03-11 16:05 - 2015-02-03 05:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2015-03-11 16:05 - 2015-02-03 05:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-03-11 16:05 - 2015-02-03 04:32 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-03-11 16:05 - 2014-11-01 00:24 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-03-11 16:05 - 2014-06-28 02:21 - 00532176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-03-11 16:05 - 2014-06-28 02:21 - 00457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2015-03-11 16:04 - 2015-03-06 07:56 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-03-11 16:04 - 2015-03-06 07:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-03-11 16:04 - 2015-03-06 07:42 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-03-11 16:04 - 2015-03-06 07:41 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-03-11 16:04 - 2015-03-06 07:41 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-03-11 16:04 - 2015-03-06 07:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-03-11 16:04 - 2015-03-06 07:38 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-03-11 16:04 - 2015-03-06 07:36 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-03-11 16:04 - 2015-03-06 07:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-03-11 16:04 - 2015-03-06 07:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-03-11 16:04 - 2015-03-06 07:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-03-11 16:04 - 2015-03-06 07:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-03-11 16:04 - 2015-03-06 07:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-03-11 16:04 - 2015-03-06 07:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-03-11 16:04 - 2015-03-06 07:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-03-11 16:04 - 2015-03-06 07:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-03-11 16:04 - 2015-03-06 07:09 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-03-11 16:04 - 2015-03-06 07:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-03-11 16:04 - 2015-03-06 07:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-03-11 16:04 - 2015-03-06 07:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-03-11 16:04 - 2015-03-06 07:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-03-11 16:04 - 2015-02-26 05:25 - 03204096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-03-11 16:04 - 2015-02-24 05:15 - 00389800 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-03-11 16:04 - 2015-02-24 04:32 - 00342696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-03-11 16:04 - 2015-02-21 03:16 - 25021440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-03-11 16:04 - 2015-02-21 02:41 - 12827648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-03-11 16:04 - 2015-02-21 02:27 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-03-11 16:04 - 2015-02-21 02:27 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-03-11 16:04 - 2015-02-21 02:25 - 19720192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-03-11 16:04 - 2015-02-21 01:58 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-03-11 16:04 - 2015-02-21 01:32 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-03-11 16:04 - 2015-02-20 05:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-03-11 16:04 - 2015-02-20 05:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-03-11 16:04 - 2015-02-20 04:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-03-11 16:04 - 2015-02-20 04:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-03-11 16:04 - 2015-02-20 04:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-03-11 16:04 - 2015-02-20 04:48 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-03-11 16:04 - 2015-02-20 04:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-03-11 16:04 - 2015-02-20 04:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-03-11 16:04 - 2015-02-20 04:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-03-11 16:04 - 2015-02-20 04:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-03-11 16:04 - 2015-02-20 04:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-03-11 16:04 - 2015-02-20 04:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-03-11 16:04 - 2015-02-20 04:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-03-11 16:04 - 2015-02-20 04:32 - 06035456 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-03-11 16:04 - 2015-02-20 04:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-03-11 16:04 - 2015-02-20 04:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-03-11 16:04 - 2015-02-20 04:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-03-11 16:04 - 2015-02-20 04:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-03-11 16:04 - 2015-02-20 04:09 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-03-11 16:04 - 2015-02-20 04:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-03-11 16:04 - 2015-02-20 04:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-03-11 16:04 - 2015-02-20 04:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-03-11 16:04 - 2015-02-20 04:06 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-03-11 16:04 - 2015-02-20 04:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-03-11 16:04 - 2015-02-20 04:03 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-03-11 16:04 - 2015-02-20 04:01 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-03-11 16:04 - 2015-02-20 04:00 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-03-11 16:04 - 2015-02-20 03:58 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-03-11 16:04 - 2015-02-20 03:56 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-03-11 16:04 - 2015-02-20 03:56 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-03-11 16:04 - 2015-02-20 03:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-03-11 16:04 - 2015-02-20 03:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-03-11 16:04 - 2015-02-20 03:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-03-11 16:04 - 2015-02-20 03:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-03-11 16:04 - 2015-02-20 03:43 - 14398976 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-03-11 16:04 - 2015-02-20 03:41 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-03-11 16:04 - 2015-02-20 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-03-11 16:04 - 2015-02-20 03:30 - 04300288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-03-11 16:04 - 2015-02-20 03:28 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-03-11 16:04 - 2015-02-20 03:24 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-03-11 16:04 - 2015-02-20 03:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-03-11 16:04 - 2015-02-20 03:23 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-03-11 16:04 - 2015-02-20 03:16 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-03-11 16:04 - 2015-02-20 03:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-03-11 16:04 - 2015-02-20 03:01 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-03-11 16:04 - 2015-02-20 02:57 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-03-11 16:04 - 2015-02-20 02:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-03-11 16:04 - 2015-02-13 07:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-03-11 16:04 - 2015-02-13 07:22 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-03-11 16:04 - 2015-02-03 05:31 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-03-11 16:04 - 2015-02-03 05:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-03-11 16:04 - 2015-02-03 05:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-03-11 16:04 - 2015-02-03 05:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2015-03-11 16:04 - 2015-01-31 01:56 - 00459336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-03-11 16:04 - 2015-01-17 04:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-03-11 16:04 - 2015-01-17 04:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-03-11 16:03 - 2015-02-04 05:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-03-11 16:03 - 2015-02-04 04:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2015-03-10 19:08 - 2015-03-10 19:08 - 00000000 ____D () C:\Users\Sam\Documents\Colossal Order
2015-03-10 19:08 - 2015-03-10 19:08 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\Colossal Order
2015-03-10 19:08 - 2015-03-10 19:08 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\.mono
2015-03-10 19:08 - 2015-03-10 19:08 - 00000000 ____D () C:\Users\Sam\AppData\Local\Colossal Order
2015-03-10 19:08 - 2015-03-10 19:08 - 00000000 ____D () C:\ProgramData\.mono
2015-03-10 18:04 - 2015-03-10 18:04 - 00000202 _____ () C:\Users\Sam\Desktop\Cities Skylines.url
2015-03-10 01:13 - 2015-03-10 01:13 - 00001329 _____ () C:\Users\Sam\Downloads\event.ics
2015-03-10 00:28 - 2015-03-10 00:22 - 03141283 _____ () C:\Users\Sam\Desktop\Heidelberg terrain.zip
2015-03-10 00:21 - 2015-03-10 00:22 - 03141283 _____ () C:\Users\Sam\Downloads\Heidelberg terrain.zip
2015-03-09 18:02 - 2015-03-09 18:02 - 00002047 _____ () C:\Users\Sam\Downloads\All Shouts-37516-1-2.7z
2015-03-09 17:56 - 2015-03-09 17:56 - 00878274 _____ () C:\Users\Sam\Downloads\Example-35286-1-0.rar
2015-03-09 17:52 - 2015-03-09 17:52 - 00000343 _____ () C:\Users\Sam\Downloads\Shouts-5719-1-0.zip
2015-03-09 01:33 - 2015-03-09 01:33 - 00851456 _____ (Adobe Inc.) C:\Users\Sam\Downloads\img_72958.scr
2015-03-07 12:34 - 2015-03-07 12:34 - 00014171 _____ () C:\Users\Sam\Downloads\ENBoost 5_0-38649-5-0.zip
2015-03-07 12:13 - 2015-03-07 12:13 - 02360176 _____ () C:\Users\Sam\Downloads\enbseries_skyrim_v0266 (1).zip
2015-03-07 12:12 - 2015-03-07 12:12 - 00584910 _____ () C:\Users\Sam\Downloads\enbseries_skyrim_v0096patch9antifreeze.zip
2015-03-06 20:58 - 2015-03-06 20:58 - 00004088 _____ () C:\Users\Sam\Downloads\JWs Skyrim Configuration Files -- INI Files-59292-v-3.rar
2015-03-06 18:56 - 2015-03-06 18:56 - 00019981 _____ () C:\Users\Sam\Downloads\Complete_Crafting_Overhaul_Compatibility_Patch-26230-0-24.7z
2015-03-06 14:33 - 2015-03-06 14:33 - 00049775 _____ () C:\Users\Sam\Downloads\Skip Bethesda intro-100.zip
2015-03-06 14:32 - 2015-03-06 14:32 - 00326483 _____ () C:\Users\Sam\Downloads\ENB Customizer v2_1 FIXED-17400-2-1.rar
2015-03-05 13:23 - 2015-03-05 13:23 - 15698775 _____ () C:\Users\Sam\Downloads\Skyrim_Particle_Patch_for_ENB--All-In-One.zip
2015-03-04 20:49 - 2015-03-04 20:49 - 00007383 _____ () C:\Users\Sam\Downloads\SSME - Skyrim Startup Memory Editor-50305-1-8-0-0.zip
2015-03-04 20:41 - 2015-03-04 20:41 - 00471625 _____ () C:\Users\Sam\Downloads\skse_1_06_16.7z
2015-03-04 20:06 - 2015-03-04 20:06 - 00057500 _____ () C:\Users\Sam\Downloads\Texture Pack Combiner LIGHT v1_95b-20801-1-95b.rar
2015-03-04 20:06 - 2015-03-04 20:06 - 00057445 _____ () C:\Users\Sam\Downloads\Texture Pack Combiner v1_95b-20801-1-95b.rar
2015-03-04 18:31 - 2015-03-04 18:31 - 00013856 _____ () C:\Users\Sam\Downloads\Unlimited Rings Multilingual-10281.rar
2015-03-03 22:33 - 2015-03-03 22:33 - 00160836 _____ () C:\Users\Sam\Downloads\RealLike ENB (PERFORMANCE)-22056-2-6.zip
2015-03-03 22:13 - 2015-01-09 05:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-03-03 22:13 - 2015-01-09 05:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-03-03 22:13 - 2015-01-09 05:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-03-03 22:13 - 2015-01-09 04:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2015-03-03 20:42 - 2015-03-03 20:42 - 00020455 _____ () C:\Users\Sam\Downloads\R.S.Patcher 1.5b4 -TES5EDIT SCRIPTS - Install 3rd-52612-1-5b4.zip
2015-03-03 20:03 - 2015-02-22 01:16 - 00906752 _____ (ENB) C:\Users\Sam\Desktop\d3d9.dll
2015-03-03 20:00 - 2015-03-03 20:00 - 00533167 _____ () C:\Users\Sam\Downloads\Natural Realistic ENB 1 3-10109.rar
2015-03-03 12:07 - 2015-03-03 12:07 - 00000420 _____ () C:\Users\Sam\Downloads\FasterHorses_Sprint_x2-934.zip
2015-03-02 21:21 - 2015-03-02 21:21 - 00089635 _____ () C:\Users\Sam\Downloads\tesv_skyrim_plus_11_trnr_ghl.rar
2015-03-02 21:21 - 2013-11-29 15:42 - 00092160 _____ () C:\Users\Sam\Desktop\tesv_skyrim_plus_11_trnr_ghl.exe
2015-03-02 21:18 - 2015-03-02 21:18 - 00087795 _____ () C:\Users\Sam\Downloads\THE.ELDER.SCROLLS.5.SKYRIM.V1.9.32.0.8.PLUS11TRN.ARXLEX (1).ZIP
2015-03-02 20:46 - 2015-03-02 20:46 - 00002537 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Excel Viewer.lnk
2015-03-02 20:46 - 2015-03-02 20:46 - 00000000 ____D () C:\Program Files (x86)\MSECache
2015-03-02 20:46 - 2015-03-02 20:46 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2015-03-02 20:43 - 2015-03-02 20:45 - 77738888 _____ (Microsoft Corporation) C:\Users\Sam\Downloads\ExcelViewer.exe
2015-03-02 18:30 - 2015-03-02 18:31 - 02360275 _____ () C:\Users\Sam\Downloads\enbseries_skyrim_v0266.zip
2015-03-02 18:28 - 2015-03-02 18:32 - 101524453 _____ () C:\Users\Sam\Downloads\K ENB Pure Light Quality v3.0-58338-0-265-v3-0.7z
2015-03-01 17:53 - 2015-03-01 17:52 - 00001915 _____ () C:\Users\Sam\Desktop\GenerateFNISforUsers.exe - Verknüpfung.lnk
2015-02-28 16:20 - 2015-02-28 16:20 - 00076931 _____ () C:\Users\Sam\Downloads\Project Reality - Climates Of Tamriel - deutsche Uebersetzung-20374-3-1-015.rar
2015-02-28 15:39 - 2015-02-28 15:39 - 00087795 _____ () C:\Users\Sam\Downloads\THE.ELDER.SCROLLS.5.SKYRIM.V1.9.32.0.8.PLUS11TRN.ARXLEX.ZIP
2015-02-28 15:11 - 2015-02-28 15:16 - 12409686 _____ () C:\Users\Sam\Downloads\Skyrim Mod Manager-57044-1-0-2.7z
2015-02-28 14:11 - 2015-02-28 14:13 - 02348352 _____ () C:\Users\Sam\Downloads\TES5Edit_3_0_32_EXPERIMENTAL-25859-3-0-32EXP.7z
2015-02-28 13:33 - 2015-03-06 16:44 - 00000965 _____ () C:\Users\Sam\Desktop\Skyrim (SKSE).lnk
2015-02-28 13:32 - 2015-02-28 13:33 - 00313875 _____ () C:\Users\Sam\Downloads\skse_1_07_01_installer.exe
2015-02-28 13:06 - 2015-02-28 13:06 - 00000201 _____ () C:\Users\Sam\Desktop\The Elder Scrolls V Skyrim.url
2015-02-28 13:05 - 2015-03-09 17:52 - 00000000 ____D () C:\Users\Sam\AppData\Local\Skyrim

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-30 15:22 - 2015-01-12 14:10 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-03-30 15:21 - 2015-02-13 15:19 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2015-03-30 15:18 - 2009-07-14 06:45 - 00021408 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-03-30 15:18 - 2009-07-14 06:45 - 00021408 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-03-30 15:12 - 2010-11-21 08:50 - 00699416 _____ () C:\Windows\system32\perfh007.dat
2015-03-30 15:12 - 2010-11-21 08:50 - 00149556 _____ () C:\Windows\system32\perfc007.dat
2015-03-30 15:12 - 2009-07-14 07:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-03-30 15:10 - 2010-11-21 04:52 - 01949777 _____ () C:\Windows\WindowsUpdate.log
2015-03-30 15:06 - 2015-01-26 00:18 - 00000000 ____D () C:\Users\Sam\AppData\Local\Adobe
2015-03-30 15:06 - 2015-01-12 14:10 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-03-30 15:06 - 2014-12-30 17:37 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-03-30 15:06 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-03-30 15:06 - 2009-07-14 06:51 - 00047214 _____ () C:\Windows\setupact.log
2015-03-30 00:57 - 2015-02-20 15:56 - 00003014 _____ () C:\Windows\System32\Tasks\MSIAfterburner
2015-03-29 20:47 - 2015-02-13 12:30 - 00000020 _____ () C:\Users\Sam\AppData\Roaming\appdataFr3.bin
2015-03-29 18:59 - 2015-02-20 15:53 - 00000000 ____D () C:\Program Files (x86)\MSI Afterburner
2015-03-29 14:04 - 2010-11-21 05:47 - 00175024 _____ () C:\Windows\PFRO.log
2015-03-28 23:17 - 2015-01-12 14:08 - 00000000 ____D () C:\Users\Sam\AppData\Local\VirtualStore
2015-03-28 20:05 - 2015-01-12 15:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-03-28 20:01 - 2015-02-12 18:57 - 00001354 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2015-03-28 20:00 - 2014-12-30 17:37 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2015-03-28 20:00 - 2014-12-30 17:37 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2015-03-28 19:40 - 2015-01-12 14:15 - 00058016 _____ () C:\Users\Sam\AppData\Local\GDIPFONTCACHEV1.DAT
2015-03-28 19:38 - 2015-01-15 16:51 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-03-28 19:38 - 2015-01-12 14:08 - 00000000 ____D () C:\Users\Sam
2015-03-28 19:35 - 2015-02-25 17:28 - 00000000 ____D () C:\BOSS
2015-03-28 19:35 - 2015-02-20 16:56 - 00000000 ____D () C:\Users\Sam\Heaven
2015-03-28 19:35 - 2015-02-18 13:49 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2015-03-28 19:35 - 2015-02-03 15:59 - 00000000 ____D () C:\Users\Sam\Documents\Euro Truck Simulator 2
2015-03-28 19:35 - 2015-01-15 16:51 - 00000000 ____D () C:\Windows\system32\appraiser
2015-03-28 19:35 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-03-28 19:35 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-03-28 19:35 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\security
2015-03-28 19:35 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2015-03-28 19:35 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2015-03-28 19:34 - 2015-01-30 18:24 - 00000000 ____D () C:\ProgramData\Package Cache
2015-03-28 19:34 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-03-27 18:21 - 2015-02-20 16:56 - 01065984 _____ () C:\Users\Sam\AppData\Local\file__0.localstorage
2015-03-26 16:35 - 2015-01-12 14:48 - 00000000 ____D () C:\Users\Sam\AppData\Local\Spotify
2015-03-23 19:03 - 2015-02-08 19:55 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\vlc
2015-03-23 17:50 - 2014-12-30 17:25 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2015-03-23 16:29 - 2015-02-06 22:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2015-03-23 16:29 - 2015-02-06 22:20 - 00000000 ____D () C:\Program Files\CPUID
2015-03-21 17:59 - 2015-01-13 19:31 - 00000000 ____D () C:\Windows\SysWOW64\directx
2015-03-20 23:22 - 2015-01-12 14:12 - 00002182 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-03-13 21:41 - 2015-02-12 18:55 - 02906928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-03-13 21:41 - 2015-01-12 15:00 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2015-03-13 21:41 - 2015-01-12 15:00 - 01514528 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2015-03-13 21:41 - 2015-01-12 15:00 - 01316184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2015-03-13 21:41 - 2015-01-12 15:00 - 01278920 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2015-03-13 21:41 - 2015-01-12 14:56 - 16022016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-03-13 21:41 - 2015-01-12 14:56 - 03303448 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-03-13 21:41 - 2014-12-30 17:37 - 00073872 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-03-13 21:41 - 2014-12-30 17:37 - 00060560 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2015-03-13 21:41 - 2014-12-30 17:27 - 18580512 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-03-13 21:41 - 2014-12-30 17:27 - 14121624 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-03-13 21:41 - 2014-12-30 17:27 - 00027441 _____ () C:\Windows\system32\nvinfo.pb
2015-03-13 18:16 - 2014-12-30 17:37 - 06861968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-03-13 18:16 - 2014-12-30 17:37 - 03526856 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2015-03-13 18:16 - 2014-12-30 17:37 - 02559808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2015-03-13 18:16 - 2014-12-30 17:37 - 00935056 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-03-13 18:16 - 2014-12-30 17:37 - 00386248 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-03-13 18:16 - 2014-12-30 17:37 - 00062608 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-03-12 12:59 - 2009-07-14 06:45 - 00267816 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-03-12 12:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2015-03-12 12:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2015-03-12 02:29 - 2015-01-14 02:28 - 00000000 ____D () C:\Windows\system32\MRT
2015-03-12 02:25 - 2015-01-14 02:28 - 122905848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-03-11 21:29 - 2015-02-13 17:34 - 00000000 ____D () C:\ProgramData\fce63c80000058c4
2015-03-11 15:10 - 2014-12-30 17:37 - 04246327 _____ () C:\Windows\system32\nvcoproc.bin
2015-03-10 18:12 - 2014-08-20 19:04 - 00819896 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2015-03-09 18:04 - 2015-01-13 19:40 - 00143725 _____ () C:\Windows\DirectX.log
2015-03-06 01:29 - 2015-02-21 17:04 - 00000897 _____ () C:\Users\Public\Desktop\Nexus Mod Manager.lnk
2015-03-06 01:29 - 2015-02-21 17:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager
2015-03-06 01:29 - 2015-02-21 17:04 - 00000000 ____D () C:\Program Files\Nexus Mod Manager
2015-03-04 17:18 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\tracing
2015-03-01 17:37 - 2015-02-25 17:20 - 00000000 ____D () C:\Users\Sam\AppData\Local\LOOT
2015-02-28 12:15 - 2015-01-30 18:24 - 00000000 ____D () C:\Users\Sam\Documents\My Games
2015-02-28 12:14 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

==================== Files in the root of some directories =======

2015-02-13 12:30 - 2015-03-29 20:47 - 0000020 _____ () C:\Users\Sam\AppData\Roaming\appdataFr3.bin
2015-02-20 16:56 - 2015-03-27 18:21 - 1065984 _____ () C:\Users\Sam\AppData\Local\file__0.localstorage
2015-03-17 21:24 - 2015-03-17 21:24 - 0007663 _____ () C:\Users\Sam\AppData\Local\Resmon.ResmonCfg

Some content of TEMP:
====================
C:\Users\Sam\AppData\Local\Temp\07fc9beb41a443fab5734439755b93fd.dll
C:\Users\Sam\AppData\Local\Temp\1c31dfcf2a7145efbbde3a9c75ba652a.exe
C:\Users\Sam\AppData\Local\Temp\249c9e31c8624b03aee045bddad10529.dll
C:\Users\Sam\AppData\Local\Temp\342ba19739a8481bb9989a8a7dea70e2.dll
C:\Users\Sam\AppData\Local\Temp\3aa385858c524e6abe4478692cfcd35c.dll
C:\Users\Sam\AppData\Local\Temp\4554b870f6e941c6bd77c137927fca87.dll
C:\Users\Sam\AppData\Local\Temp\49754b49f4284bb792f3217aa2d02116.exe
C:\Users\Sam\AppData\Local\Temp\5abf9b72059f5.exe
C:\Users\Sam\AppData\Local\Temp\7210da1.exe
C:\Users\Sam\AppData\Local\Temp\96ac420a8bbf42e7975d229ca0796dce.dll
C:\Users\Sam\AppData\Local\Temp\Bass.dll
C:\Users\Sam\AppData\Local\Temp\Bass.Net.dll
C:\Users\Sam\AppData\Local\Temp\bassmod.dll
C:\Users\Sam\AppData\Local\Temp\c32f3171a8424c00bc919a5839e15da6.exe
C:\Users\Sam\AppData\Local\Temp\c7a528963db344edaebf5427fcfb37a0.exe
C:\Users\Sam\AppData\Local\Temp\ICReinstall_adobe-photoshop-cs6.exe
C:\Users\Sam\AppData\Local\Temp\Nexus Mod Manager-0.53.4.exe
C:\Users\Sam\AppData\Local\Temp\Nexus Mod Manager-0.53.5.exe
C:\Users\Sam\AppData\Local\Temp\Nexus Mod Manager-0.53.7.exe
C:\Users\Sam\AppData\Local\Temp\Nv3DVisionIePlugin.dll
C:\Users\Sam\AppData\Local\Temp\Nv3DVisionIePlugin64.dll
C:\Users\Sam\AppData\Local\Temp\Nv3DVStreaming.dll
C:\Users\Sam\AppData\Local\Temp\Nv3DVStreaming64.dll
C:\Users\Sam\AppData\Local\Temp\Nv3DVStreamingIePlugin.dll
C:\Users\Sam\AppData\Local\Temp\Nv3DVStreamingIePlugin64.dll
C:\Users\Sam\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Sam\AppData\Local\Temp\nvStInst.exe
C:\Users\Sam\AppData\Local\Temp\OnlineBackup.exe
C:\Users\Sam\AppData\Local\Temp\sqlite3.exe
C:\Users\Sam\AppData\Local\Temp\vcredist_x64.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-03-26 22:41

==================== End Of Log ============================
         

--- --- ---

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015
Ran by Sam at 2015-03-30 15:25:43
Running from C:\Users\Sam\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Kaspersky Anti-Virus (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}
AS: Kaspersky Anti-Virus (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Acer System Information (HKLM-x32\...\{72199E33-4F2A-4B7F-8E25-95DDDD50A678}) (Version: 1.0.0 - Acer)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.9.0.465 - Adobe Systems Incorporated)
Adobe Photoshop CC 2014 (HKLM-x32\...\{D7A4F897-B20A-42D0-862D-CB5F6DB7391D}) (Version: 15.2.2 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
ArchiCrypt Ultimate RAM-Disk 4 Version 4.6.4.4291 (HKLM\...\ArchiCrypt Ultimate RAM-Disk 4_is1) (Version: 4.6.4.4291 - Softwareentwicklung Patric Remus - ArchiCrypt)
Battlefield™ Hardline-Beta (HKLM-x32\...\{F5526D9D-13AD-4270-8707-AC921D168299}) (Version: 1.0.0.1 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.6.2 - EA Digital Illusions CE AB)
BeamNG.drive (HKLM-x32\...\Steam App 284160) (Version:  - BeamNG)
Blacklight: Retribution (HKLM-x32\...\Steam App 209870) (Version:  - Builder Box, LLC)
BOSS (HKLM-x32\...\BOSS) (Version: 2.1.1 - BOSS Development Team)
Car Mechanic Simulator 2014 (HKLM-x32\...\Car Mechanic Simulator 2014_is1) (Version:  - )
Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version:  - Cheat Engine)
Cities: Skylines (HKLM-x32\...\Steam App 255710) (Version:  - Colossal Order)
CPUID CPU-Z 1.71.1 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
CPUID HWMonitor 1.27 (HKLM\...\CPUID HWMonitor_is1) (Version:  - )
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
DAEMON Tools Ultra (HKLM-x32\...\DAEMON Tools Ultra) (Version: 3.0.0.0309 - Disc Soft Ltd)
Dead Island: Epidemic (HKLM-x32\...\Steam App 222900) (Version:  - Stunlock Studios)
DRAGON BALL XENOVERSE (HKLM-x32\...\Steam App 323470) (Version:  - DIMPS)
Euro Truck Simulator 2 (HKLM-x32\...\Steam App 227300) (Version:  - SCS Software)
Evolve (HKLM-x32\...\Steam App 273350) (Version:  - Turtle Rock Studios)
Fallout: New Vegas (HKLM-x32\...\Steam App 22380) (Version:  - Obsidian Entertainment)
FOMM version 0.14 (HKLM-x32\...\{072C2AEF-16B2-46B7-BA7F-D0CAA7B4F89F}_is1) (Version: 0.14 - Prideslayer)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 41.0.2272.101 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Heaven Benchmark version 4.0 (HKLM-x32\...\Unigine Heaven Benchmark (Basic Edition)_is1) (Version: 4.0 - Unigine Corp.)
Insurgency (HKLM-x32\...\Steam App 222880) (Version:  - New World Interactive)
Interstellar Marines (HKLM-x32\...\Steam App 236370) (Version:  - Zero Point Software)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Kaspersky Anti-Virus (HKLM-x32\...\InstallWIX_{8ED07EBD-22AD-415A-B71E-C1AD86862C2E}) (Version: 15.0.1.415 - Kaspersky Lab)
Kaspersky Anti-Virus (x32 Version: 15.0.1.415 - Kaspersky Lab) Hidden
Kerbal Space Program (HKLM-x32\...\Steam App 220200) (Version:  - Squad)
Life Is Strange™ (HKLM-x32\...\Steam App 319630) (Version:  - DONTNOD Entertainment)
LOOT (HKLM-x32\...\LOOT) (Version: 0.6.1 - LOOT Development Team)
Malwarebytes Anti-Malware Version 2.1.4.1018 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.4.1018 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Excel Viewer (HKLM-x32\...\{95120000-003F-0409-0000-0000000FF1CE}) (Version: 12.0.6219.1000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{01db25f3-1b76-4d97-88c8-1c90634d88fb}) (Version: 11.0.60610.1 - Корпорация Майкрософт)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Mozilla Firefox 33.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.0.1 (x86 de)) (Version: 33.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.0.1 - Mozilla)
MSI Afterburner 4.1.0 (HKLM-x32\...\Afterburner) (Version: 4.1.0 - MSI Co., LTD)
MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.6 - F.J. Wechselberger)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.53.7 - Black Tree Gaming)
NVIDIA 3D Vision Controller-Treiber 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 347.09 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 347.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.88 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.2.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.2.2 - NVIDIA Corporation)
NVIDIA Grafiktreiber 347.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.88 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
OkayFreedom (HKLM-x32\...\{3F3FB10C-7175-4D38-9335-3488B89C12AF}) (Version: 1.4.3 - Steganos Software GmbH)
Origin (HKLM-x32\...\Origin) (Version: 9.5.5.2850 - Electronic Arts, Inc.)
PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version:  - OVERKILL - a Starbreeze Studio.)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.994 - Even Balance, Inc.)
RegiStax 6 (HKU\S-1-5-21-314491385-833715928-1570723329-1001\...\RegiStax 6) (Version:  - )
RegiStax 6.1.0.8 update (HKU\S-1-5-21-314491385-833715928-1570723329-1001\...\RegiStax 6.1.0.8 update) (Version:  - )
ROCCAT Kova[+] Mouse Driver (HKLM-x32\...\{A86DDFE3-F661-461C-9BF2-876AC2CA57DE}) (Version: 1.10 - Roccat GmbH)
SHIELD Streaming (Version: 4.0.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 17.12.8 - NVIDIA Corporation) Hidden
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
SpaceEngine Version 0.9.7.2 (HKLM-x32\...\{E65FD500-9218-44EC-9586-D39FAB4DFDAF}_is1) (Version: 0.9.7.2 - SpaceEngine)
Spotify (HKU\S-1-5-21-314491385-833715928-1570723329-1001\...\Spotify) (Version: 0.9.15.27.g87efe634 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 6.0.1170 - SUPERAntiSpyware.com)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
TrackMania² Stadium (HKLM-x32\...\Steam App 232910) (Version:  - Nadeo)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
War Thunder (HKLM-x32\...\Steam App 236390) (Version:  - Gaijin Entertainment)
WinRAR 5.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)
World of Warships (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C814EU}_is1) (Version:  - Wargaming.net)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

29-03-2015 15:31:01 Windows Update
29-03-2015 20:42:57 ArchiCrypt Ultimate RAM-Disk 4 4.6.4.4291 Installation

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {058DEF93-CBE3-4423-A958-D9179CAACD6C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-01-12] (Google Inc.)
Task: {10FA29A9-7B34-4651-BC07-F6FA7B715F88} - \{5E543BA5-DC1E-434E-BEF7-8BABDCCC873D} No Task File <==== ATTENTION
Task: {1EA12BDE-D524-4165-B649-43B2C6642E24} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-01-12] (Google Inc.)
Task: {290BD385-0731-4AED-8C83-64C1EB1C7C4E} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe [2014-12-06] ()
Task: {AF51DFBE-4077-49E0-99A2-828999F6E611} - System32\Tasks\AdobeAAMUpdater-1.0-Sam-PC-Sam => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-09-19] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2014-12-30 17:37 - 2015-03-13 18:16 - 00118472 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-01-31 16:07 - 2015-02-03 16:08 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-12-19 16:57 - 2014-12-19 16:57 - 01039008 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
2014-12-06 09:03 - 2014-12-06 09:03 - 00565760 _____ () C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
2015-02-02 16:48 - 2015-02-02 16:48 - 01178112 _____ () C:\ProgramData\{f0f87754-a2c2-aa64-f0f8-87754a2cdd52}\Kaspersky Trial Resetter 2015.exe
2014-08-30 18:12 - 2014-08-30 18:12 - 01269952 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\kpcengine.2.3.dll
2014-12-06 09:01 - 2014-12-06 09:01 - 00071680 _____ () C:\Program Files (x86)\MSI Afterburner\RTMUI.dll
2014-12-06 09:01 - 2014-12-06 09:01 - 00056832 _____ () C:\Program Files (x86)\MSI Afterburner\RTFC.dll
2014-12-06 09:02 - 2014-12-06 09:02 - 00217600 _____ () C:\Program Files (x86)\MSI Afterburner\RTCore.dll
2014-12-06 09:01 - 2014-12-06 09:01 - 00353792 _____ () C:\Program Files (x86)\MSI Afterburner\RTUI.dll
2014-12-06 09:02 - 2014-12-06 09:02 - 00649216 _____ () C:\Program Files (x86)\MSI Afterburner\RTHAL.dll
2015-03-20 23:22 - 2015-03-14 12:12 - 01174856 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\libglesv2.dll
2015-03-20 23:22 - 2015-03-14 12:12 - 00080200 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\libegl.dll
2015-03-20 23:22 - 2015-03-14 12:12 - 09278792 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\pdf.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-314491385-833715928-1570723329-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Sam\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: GfExperienceService => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: NvNetworkService => 2
MSCONFIG\Services: NvStreamSvc => 2
MSCONFIG\Services: nvsvc => 2
MSCONFIG\Services: Steam Client Service => 3
MSCONFIG\Services: Stereo Service => 2
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Creative Cloud => "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
MSCONFIG\startupreg: AutoVPNConnect => C:\Program Files (x86)\mvhBytes\AutoVPNConnect\AutoVPNConnect.exe
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: DAEMON Tools Ultra Agent => "C:\Program Files (x86)\DAEMON Tools Ultra\DTAgent.exe" -autorun
MSCONFIG\startupreg: GoogleChromeAutoLaunch_FD70E4195A4DE5E83920BD6414A71B17 => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
MSCONFIG\startupreg: NvBackend => "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
MSCONFIG\startupreg: RoccatKova+ => "C:\Program Files (x86)\ROCCAT\Kova[+] Mouse\Kova[+]Monitor.EXE"
MSCONFIG\startupreg: ShadowPlay => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
MSCONFIG\startupreg: Spotify => "C:\Users\Sam\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Sam\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
MSCONFIG\startupreg: Steam => "D:\Steam\steam.exe" -silent
MSCONFIG\startupreg: SUPERAntiSpyware => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

==================== Accounts: =============================

Administrator (S-1-5-21-314491385-833715928-1570723329-500 - Administrator - Disabled)
Gast (S-1-5-21-314491385-833715928-1570723329-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-314491385-833715928-1570723329-1002 - Limited - Enabled)
Sam (S-1-5-21-314491385-833715928-1570723329-1001 - Administrator - Enabled) => C:\Users\Sam

==================== Faulty Device Manager Devices =============

Name: Standardtastatur (PS/2)
Description: Standardtastatur (PS/2)
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardtastaturen)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Unknown Device
Description: Unknown Device
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: (Standard-USB-Hostcontroller)
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (03/30/2015 03:08:22 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/29/2015 08:51:14 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm SpaceEngine.exe, Version 0.9.7.2 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1598

Startzeit: 01d06a5107d175cd

Endzeit: 19

Anwendungspfad: D:\Games\SpaceEngine 0.972\system\SpaceEngine.exe

Berichts-ID: 913976d8-d644-11e4-a9cc-00ac29c21c9c

Error: (03/29/2015 02:21:55 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/29/2015 02:05:58 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/29/2015 00:45:10 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/28/2015 08:06:56 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/28/2015 07:39:52 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/28/2015 05:44:37 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/28/2015 02:52:29 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/28/2015 00:19:13 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (03/30/2015 03:12:54 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "PC-PC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{45562AA3-3573-4783-885F-0B65795EDFBD}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (03/29/2015 06:07:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (03/29/2015 06:07:45 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.

Error: (03/29/2015 02:22:35 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "PC-PC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{45562AA3-3573-4783-885F-0B65795EDFBD}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (03/29/2015 02:10:37 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "PC-PC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{45562AA3-3573-4783-885F-0B65795EDFBD}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (03/29/2015 00:49:34 AM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "PC-PC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{45562AA3-3573-4783-885F-0B65795EDFBD}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (03/28/2015 08:13:40 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "PC-PC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{45562AA3-3573-4783-885F-0B65795EDFBD}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (03/28/2015 07:59:34 PM) (Source: volsnap) (EventID: 15) (User: )
Description: Die Schattenkopien von Volume "C:" wurden aufgrund unzureichendem Pageheap abgebrochen.

Error: (03/28/2015 07:49:40 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "PC-PC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{45562AA3-3573-4783-885F-0B65795EDFBD}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (03/28/2015 07:38:53 PM) (Source: volsnap) (EventID: 6) (User: )
Description: Die Schattenkopie von Volume "C:" konnte kein neues Pageheap erstellen. Dem System steht nicht ausreichend virtueller Speicher zur Verfügung.


Microsoft Office Sessions:
=========================
Error: (03/30/2015 03:08:22 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/29/2015 08:51:14 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: SpaceEngine.exe0.9.7.2159801d06a5107d175cd19D:\Games\SpaceEngine 0.972\system\SpaceEngine.exe913976d8-d644-11e4-a9cc-00ac29c21c9c

Error: (03/29/2015 02:21:55 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/29/2015 02:05:58 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/29/2015 00:45:10 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/28/2015 08:06:56 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/28/2015 07:39:52 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/28/2015 05:44:37 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/28/2015 02:52:29 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/28/2015 00:19:13 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity Errors:
===================================
  Date: 2015-03-11 23:55:34.002
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-03-11 23:55:33.996
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-03-11 23:55:15.154
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-03-11 23:55:15.148
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-03-11 23:01:58.603
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-03-11 23:01:58.597
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-03-11 23:00:29.100
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-03-11 23:00:29.089
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-03-11 12:26:34.823
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-03-11 12:26:34.816
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz
Percentage of memory in use: 24%
Total physical RAM: 10231.17 MB
Available physical RAM: 7763.45 MB
Total Pagefile: 20460.53 MB
Available Pagefile: 17632.46 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:465.75 GB) (Free:385.22 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Daten) (Fixed) (Total:465.76 GB) (Free:276.07 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 1B6AB245)
Partition 1: (Active) - (Size=465.8 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Servus,



Zukünftig bitte beachten:

Running from C:\Users\Sam\Downloads

Leider hast du unsere Anleitung nicht richtig befolgt:
Bitte alle Tools direkt auf den Desktop downloaden bzw. dorthin verschieben und vom Desktop starten, da unsere Anleitungen daraufhin ausgelegt sind.
Zudem lassen sich dann am Ende der Bereinigung alle verwendeten Tools sehr einfach entfernen.
Alle Tools bis zum Ende der Bereinigung auf dem Desktop lassen, evtl. benötigen wir manche öfter.





Schritt 1
Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 2
Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 3

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Schritt 4

• Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Scan.
• FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
• Poste mir beide Logdateien mit deiner nächsten Antwort.

Bitte poste mit deiner nächsten Antwort

• die Logdatei von AdwCleaner,
• die Logdatei von MBAM,
• die Logdatei von JRT,
• die beiden neuen Logdateien von FRST.

# AdwCleaner v4.200 - Bericht erstellt 01/04/2015 um 18:03:30
# Aktualisiert 29/03/2015 von Xplode
# Datenbank : 2015-03-29.1 [Server]
# Betriebssystem : Windows 7 Professional Service Pack 1 (x64)
# Benutzername : Sam - SAM-PC
# Gestarted von : C:\Users\Sam\Desktop\AdwCleaner_4.200.exe
# Option : Suchlauf

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Datei Gefunden : C:\Users\Sam\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Startfenster.lnk
Datei Gefunden : C:\Users\Sam\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Startfenster.lnk
Datei Gefunden : C:\Users\Sam\AppData\Roaming\Microsoft\Windows\Start Menu\Startfenster.lnk
Datei Gefunden : C:\Users\Sam\AppData\Roaming\Mozilla\Firefox\Profiles\wtx5zb61.default\user.js
Datei Gefunden : C:\Windows\System32\roboot64.exe
Ordner Gefunden : C:\Program Files (x86)\DriverToolkit
Ordner Gefunden : C:\Program Files (x86)\eSupport.com
Ordner Gefunden : C:\Program Files (x86)\TampaGeneration
Ordner Gefunden : C:\ProgramData\fce63c80000058c4
Ordner Gefunden : C:\ProgramData\FileCure
Ordner Gefunden : C:\Users\Sam\AppData\Local\DriverToolkit
Ordner Gefunden : C:\Users\Sam\AppData\Local\eSupport.com
Ordner Gefunden : C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho
Ordner Gefunden : C:\Users\Sam\AppData\Roaming\Mozilla\Firefox\Profiles\wtx5zb61.default\Extensions\0Gi7n8O9zW@m.com
Ordner Gefunden : C:\Users\Sam\AppData\Roaming\Mozilla\Firefox\Profiles\wtx5zb61.default\Extensions\6ekT@b.com
Ordner Gefunden : C:\Users\Sam\AppData\Roaming\Mozilla\Firefox\Profiles\wtx5zb61.default\Extensions\s7NNr@D.com
Ordner Gefunden : C:\Users\Sam\AppData\Roaming\Solvusoft

***** [ Geplante Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden : HKCU\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
Schlüssel Gefunden : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Schlüssel Gefunden : HKCU\Software\DriverToolkit
Schlüssel Gefunden : HKCU\Software\eSupport.com
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\mystartsearch.com
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.mystartsearch.com
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D0277F7A-06FF-4FB6-AA6B-080876ED6422}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
Schlüssel Gefunden : HKCU\Software\ParetoLogic
Schlüssel Gefunden : [x64] HKCU\Software\DriverToolkit
Schlüssel Gefunden : [x64] HKCU\Software\eSupport.com
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D0277F7A-06FF-4FB6-AA6B-080876ED6422}
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
Schlüssel Gefunden : [x64] HKCU\Software\ParetoLogic
Schlüssel Gefunden : HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81}
Schlüssel Gefunden : HKLM\SOFTWARE\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
Schlüssel Gefunden : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gefunden : HKLM\SOFTWARE\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Schlüssel Gefunden : HKLM\SOFTWARE\213095bd-c2c2-faa3-f79d-97fdf33921d4
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{5D6736D5-0D77-46CE-9906-C4B2C679BF88}
Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho
Schlüssel Gefunden : HKLM\SOFTWARE\ParetoLogic
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D0277F7A-06FF-4FB6-AA6B-080876ED6422}

***** [ Internetbrowser ] *****

-\\ Internet Explorer v11.0.9600.17689


-\\ Mozilla Firefox v33.0.1 (x86 de)

[wtx5zb61.default] - Zeile Gefunden : user_pref("browser.search.defaultenginename", "mystartsearch");
[wtx5zb61.default] - Zeile Gefunden : user_pref("browser.search.defaultenginename,S", "WebSearch");
[wtx5zb61.default] - Zeile Gefunden : user_pref("browser.search.defaulturl", "hxxp://websearch.thesearchpage.info/?pid=21153&r=2015/02/02&hid=13948972591229653119&lg=EN&cc=DE&unqvl=74&l=1&q=");
[wtx5zb61.default] - Zeile Gefunden : user_pref("browser.search.order.1", "WebSearch");
[wtx5zb61.default] - Zeile Gefunden : user_pref("browser.search.order.1,S", "WebSearch");
[wtx5zb61.default] - Zeile Gefunden : user_pref("browser.search.selectedEngine", "mystartsearch");
[wtx5zb61.default] - Zeile Gefunden : user_pref("browser.search.selectedEngine,S", "WebSearch");

-\\ Google Chrome v41.0.2272.101

[C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gefunden [Extension] : dbhjdbfgekjfcfkkfjjmlmojhbllhbho

-\\ Chromium v


*************************

AdwCleaner[R0].txt - [13204 Bytes] - [24/02/2015 13:13:53]
AdwCleaner[R1].txt - [6845 Bytes] - [30/03/2015 23:46:12]
AdwCleaner[R2].txt - [5679 Bytes] - [01/04/2015 18:03:30]

########## EOF - C:\AdwCleaner\AdwCleaner[R2].txt - [5738 Bytes] ##########
         

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.8 (03.30.2015:1)
OS: Windows 7 Professional x64
Ran by Sam on 01.04.2015 at 18:07:26,29
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\DisplayName
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\URL



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}



~~~ Files



~~~ Folders



~~~ FireFox

Successfully deleted: [File] C:\Users\Sam\AppData\Roaming\mozilla\firefox\profiles\wtx5zb61.default\user.js
Successfully deleted the following from C:\Users\Sam\AppData\Roaming\mozilla\firefox\profiles\wtx5zb61.default\prefs.js

user_pref("browser.search.defaultenginename", "mystartsearch");
user_pref("browser.search.defaultenginename,S", "WebSearch");
user_pref("browser.search.defaulturl", "hxxp://websearch.thesearchpage.info/?pid=21153&r=2015/02/02&hid=13948972591229653119&lg=EN&cc=DE&unqvl=74&l=1&q=");
user_pref("browser.search.order.1", "WebSearch");
user_pref("browser.search.order.1,S", "WebSearch");
user_pref("browser.search.selectedEngine", "mystartsearch");
user_pref("browser.search.selectedEngine,S", "WebSearch");



~~~ Chrome

Successfully deleted: [Folder] C:\Users\Sam\appdata\local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 01.04.2015 at 18:13:32,15
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 01.04.2015
Suchlauf-Zeit: 18:10:48
Logdatei: MBAM.txt
Administrator: Ja

Version: 2.01.4.1018
Malware Datenbank: v2015.04.01.07
Rootkit Datenbank: v2015.03.31.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Sam

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 346962
Verstrichene Zeit: 9 Min, 30 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente gefunden)

Module: 0
(Keine schädliche Elemente gefunden)

Registrierungsschlüssel: 0
(Keine schädliche Elemente gefunden)

Registrierungswerte: 0
(Keine schädliche Elemente gefunden)

Registrierungsdaten: 0
(Keine schädliche Elemente gefunden)

Ordner: 2
PUP.Optional.MultiPlug.A, C:\ProgramData\ljfmcbkhhoedaijcblhkgcngmmemeklb, , [df8c5215dab02511d0ef420b36cfac54], 
PUP.Optional.MultiPlug.A, C:\ProgramData\midicjfapdgdpgamncjbjkjlmfmahmdg, , [3437ce998ffba2945e619fae11f4e21e], 

Dateien: 9
PUP.Optional.MyPCBackup.SID.A, C:\Users\Sam\AppData\Local\Temp\603cbA3dBd3\temp\MyPCBackup.exe, , [4a214225bfcb70c678553102986ea15f], 
PUP.Optional.MultiPlug.A, C:\ProgramData\ljfmcbkhhoedaijcblhkgcngmmemeklb\lsdb.js, , [df8c5215dab02511d0ef420b36cfac54], 
PUP.Optional.MultiPlug.A, C:\ProgramData\ljfmcbkhhoedaijcblhkgcngmmemeklb\background.html, , [df8c5215dab02511d0ef420b36cfac54], 
PUP.Optional.MultiPlug.A, C:\ProgramData\ljfmcbkhhoedaijcblhkgcngmmemeklb\content.js, , [df8c5215dab02511d0ef420b36cfac54], 
PUP.Optional.MultiPlug.A, C:\ProgramData\ljfmcbkhhoedaijcblhkgcngmmemeklb\manifest.json, , [df8c5215dab02511d0ef420b36cfac54], 
PUP.Optional.MultiPlug.A, C:\ProgramData\midicjfapdgdpgamncjbjkjlmfmahmdg\lsdb.js, , [3437ce998ffba2945e619fae11f4e21e], 
PUP.Optional.MultiPlug.A, C:\ProgramData\midicjfapdgdpgamncjbjkjlmfmahmdg\background.html, , [3437ce998ffba2945e619fae11f4e21e], 
PUP.Optional.MultiPlug.A, C:\ProgramData\midicjfapdgdpgamncjbjkjlmfmahmdg\content.js, , [3437ce998ffba2945e619fae11f4e21e], 
PUP.Optional.MultiPlug.A, C:\ProgramData\midicjfapdgdpgamncjbjkjlmfmahmdg\manifest.json, , [3437ce998ffba2945e619fae11f4e21e], 

Physische Sektoren: 0
(Keine schädliche Elemente gefunden)


(end)
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015
Ran by Sam at 2015-04-01 18:23:58
Running from C:\Users\Sam\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Kaspersky Anti-Virus (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}
AS: Kaspersky Anti-Virus (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Acer System Information (HKLM-x32\...\{72199E33-4F2A-4B7F-8E25-95DDDD50A678}) (Version: 1.0.0 - Acer)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.9.0.465 - Adobe Systems Incorporated)
Adobe Photoshop CC 2014 (HKLM-x32\...\{D7A4F897-B20A-42D0-862D-CB5F6DB7391D}) (Version: 15.2.2 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
ArchiCrypt Ultimate RAM-Disk 4 Version 4.6.4.4291 (HKLM\...\ArchiCrypt Ultimate RAM-Disk 4_is1) (Version: 4.6.4.4291 - Softwareentwicklung Patric Remus - ArchiCrypt)
Battlefield™ Hardline-Beta (HKLM-x32\...\{F5526D9D-13AD-4270-8707-AC921D168299}) (Version: 1.0.0.1 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.6.2 - EA Digital Illusions CE AB)
BeamNG.drive (HKLM-x32\...\Steam App 284160) (Version:  - BeamNG)
Blacklight: Retribution (HKLM-x32\...\Steam App 209870) (Version:  - Builder Box, LLC)
BOSS (HKLM-x32\...\BOSS) (Version: 2.1.1 - BOSS Development Team)
Car Mechanic Simulator 2014 (HKLM-x32\...\Car Mechanic Simulator 2014_is1) (Version:  - )
Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version:  - Cheat Engine)
Cities: Skylines (HKLM-x32\...\Steam App 255710) (Version:  - Colossal Order)
CPUID CPU-Z 1.71.1 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
CPUID HWMonitor 1.27 (HKLM\...\CPUID HWMonitor_is1) (Version:  - )
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
DAEMON Tools Ultra (HKLM-x32\...\DAEMON Tools Ultra) (Version: 3.0.0.0309 - Disc Soft Ltd)
Dead Island: Epidemic (HKLM-x32\...\Steam App 222900) (Version:  - Stunlock Studios)
DRAGON BALL XENOVERSE (HKLM-x32\...\Steam App 323470) (Version:  - DIMPS)
Euro Truck Simulator 2 (HKLM-x32\...\Steam App 227300) (Version:  - SCS Software)
Evolve (HKLM-x32\...\Steam App 273350) (Version:  - Turtle Rock Studios)
Fallout: New Vegas (HKLM-x32\...\Steam App 22380) (Version:  - Obsidian Entertainment)
FOMM version 0.14 (HKLM-x32\...\{072C2AEF-16B2-46B7-BA7F-D0CAA7B4F89F}_is1) (Version: 0.14 - Prideslayer)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 41.0.2272.101 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Heaven Benchmark version 4.0 (HKLM-x32\...\Unigine Heaven Benchmark (Basic Edition)_is1) (Version: 4.0 - Unigine Corp.)
Insurgency (HKLM-x32\...\Steam App 222880) (Version:  - New World Interactive)
Interstellar Marines (HKLM-x32\...\Steam App 236370) (Version:  - Zero Point Software)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Joulemeter (HKLM-x32\...\{E043568C-1745-4C69-9D52-43F6E79EB03B}) (Version: 1.2.0 - Microsoft Research)
Kaspersky Anti-Virus (HKLM-x32\...\InstallWIX_{8ED07EBD-22AD-415A-B71E-C1AD86862C2E}) (Version: 15.0.1.415 - Kaspersky Lab)
Kaspersky Anti-Virus (x32 Version: 15.0.1.415 - Kaspersky Lab) Hidden
Kerbal Space Program (HKLM-x32\...\Steam App 220200) (Version:  - Squad)
Life Is Strange™ (HKLM-x32\...\Steam App 319630) (Version:  - DONTNOD Entertainment)
LOOT (HKLM-x32\...\LOOT) (Version: 0.6.1 - LOOT Development Team)
Malwarebytes Anti-Malware Version 2.1.4.1018 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.4.1018 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Excel Viewer (HKLM-x32\...\{95120000-003F-0409-0000-0000000FF1CE}) (Version: 12.0.6219.1000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{01db25f3-1b76-4d97-88c8-1c90634d88fb}) (Version: 11.0.60610.1 - Корпорация Майкрософт)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Mozilla Firefox 33.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.0.1 (x86 de)) (Version: 33.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.0.1 - Mozilla)
MSI Afterburner 4.1.0 (HKLM-x32\...\Afterburner) (Version: 4.1.0 - MSI Co., LTD)
MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.6 - F.J. Wechselberger)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.53.7 - Black Tree Gaming)
NVIDIA 3D Vision Controller-Treiber 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 347.09 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 347.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.88 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.4.1.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.1.21 - NVIDIA Corporation)
NVIDIA Grafiktreiber 347.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.88 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
OkayFreedom (HKLM-x32\...\{3F3FB10C-7175-4D38-9335-3488B89C12AF}) (Version: 1.4.3 - Steganos Software GmbH)
Origin (HKLM-x32\...\Origin) (Version: 9.5.5.2850 - Electronic Arts, Inc.)
PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version:  - OVERKILL - a Starbreeze Studio.)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.994 - Even Balance, Inc.)
RegiStax 6 (HKU\S-1-5-21-314491385-833715928-1570723329-1001\...\RegiStax 6) (Version:  - )
RegiStax 6.1.0.8 update (HKU\S-1-5-21-314491385-833715928-1570723329-1001\...\RegiStax 6.1.0.8 update) (Version:  - )
ROCCAT Kova[+] Mouse Driver (HKLM-x32\...\{A86DDFE3-F661-461C-9BF2-876AC2CA57DE}) (Version: 1.10 - Roccat GmbH)
SHIELD Streaming (Version: 4.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.1.21 - NVIDIA Corporation) Hidden
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
SpaceEngine Version 0.9.7.2 (HKLM-x32\...\{E65FD500-9218-44EC-9586-D39FAB4DFDAF}_is1) (Version: 0.9.7.2 - SpaceEngine)
Spotify (HKU\S-1-5-21-314491385-833715928-1570723329-1001\...\Spotify) (Version: 0.9.15.27.g87efe634 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 6.0.1170 - SUPERAntiSpyware.com)
TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version:  - TechPowerUp)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
TrackMania² Stadium (HKLM-x32\...\Steam App 232910) (Version:  - Nadeo)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
War Thunder (HKLM-x32\...\Steam App 236390) (Version:  - Gaijin Entertainment)
WinRAR 5.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)
World of Warships (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C814EU}_is1) (Version:  - Wargaming.net)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

29-03-2015 15:31:01 Windows Update
29-03-2015 20:42:57 ArchiCrypt Ultimate RAM-Disk 4 4.6.4.4291 Installation
30-03-2015 23:52:24 Installed Joulemeter

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0175A951-B7B3-43F1-B15A-419488140FBD} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe [2014-12-06] ()
Task: {058DEF93-CBE3-4423-A958-D9179CAACD6C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-01-12] (Google Inc.)
Task: {10FA29A9-7B34-4651-BC07-F6FA7B715F88} - \{5E543BA5-DC1E-434E-BEF7-8BABDCCC873D} No Task File <==== ATTENTION
Task: {1EA12BDE-D524-4165-B649-43B2C6642E24} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-01-12] (Google Inc.)
Task: {AF51DFBE-4077-49E0-99A2-828999F6E611} - System32\Tasks\AdobeAAMUpdater-1.0-Sam-PC-Sam => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-09-19] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2014-12-30 17:37 - 2015-03-13 18:16 - 00118472 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-12-06 09:03 - 2014-12-06 09:03 - 00565760 _____ () C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
2015-01-31 16:07 - 2015-02-03 16:08 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2015-02-02 16:48 - 2015-02-02 16:48 - 01178112 _____ () C:\ProgramData\{f0f87754-a2c2-aa64-f0f8-87754a2cdd52}\Kaspersky Trial Resetter 2015.exe
2014-12-19 16:57 - 2014-12-19 16:57 - 01039008 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
2014-08-30 18:12 - 2014-08-30 18:12 - 01269952 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\kpcengine.2.3.dll
2014-12-06 09:01 - 2014-12-06 09:01 - 00071680 _____ () C:\Program Files (x86)\MSI Afterburner\RTMUI.dll
2014-12-06 09:01 - 2014-12-06 09:01 - 00056832 _____ () C:\Program Files (x86)\MSI Afterburner\RTFC.dll
2014-12-06 09:02 - 2014-12-06 09:02 - 00217600 _____ () C:\Program Files (x86)\MSI Afterburner\RTCore.dll
2014-12-06 09:01 - 2014-12-06 09:01 - 00353792 _____ () C:\Program Files (x86)\MSI Afterburner\RTUI.dll
2014-12-06 09:02 - 2014-12-06 09:02 - 00649216 _____ () C:\Program Files (x86)\MSI Afterburner\RTHAL.dll
2015-03-30 20:07 - 2015-03-28 05:45 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-01-12 14:58 - 2015-03-10 08:37 - 00775680 _____ () D:\Steam\SDL2.dll
2015-01-20 12:03 - 2014-12-02 02:29 - 05002752 _____ () D:\Steam\v8.dll
2015-01-20 12:03 - 2014-12-02 02:29 - 01612800 _____ () D:\Steam\icui18n.dll
2015-01-20 12:03 - 2014-12-02 02:29 - 01210368 _____ () D:\Steam\icuuc.dll
2015-01-12 14:58 - 2015-03-24 06:22 - 02371776 _____ () D:\Steam\video.dll
2015-01-12 14:58 - 2014-12-01 23:31 - 02396672 _____ () D:\Steam\libavcodec-56.dll
2015-01-12 14:58 - 2014-12-01 23:31 - 00442880 _____ () D:\Steam\libavutil-54.dll
2015-01-12 14:58 - 2014-12-01 23:31 - 00479744 _____ () D:\Steam\libavformat-56.dll
2015-01-12 14:58 - 2014-12-01 23:31 - 00332800 _____ () D:\Steam\libavresample-2.dll
2015-01-12 14:58 - 2014-12-01 23:31 - 00485888 _____ () D:\Steam\libswscale-3.dll
2015-01-12 14:58 - 2015-03-24 06:22 - 00702656 _____ () D:\Steam\bin\chromehtml.DLL
2015-01-12 14:58 - 2015-02-25 03:58 - 34641288 _____ () D:\Steam\bin\libcef.dll
2015-03-20 23:22 - 2015-03-14 12:12 - 01174856 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\libglesv2.dll
2015-03-20 23:22 - 2015-03-14 12:12 - 00080200 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\libegl.dll
2015-03-20 23:22 - 2015-03-14 12:12 - 09278792 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\pdf.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-314491385-833715928-1570723329-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Sam\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: GfExperienceService => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: NvNetworkService => 2
MSCONFIG\Services: NvStreamSvc => 2
MSCONFIG\Services: nvsvc => 2
MSCONFIG\Services: Steam Client Service => 3
MSCONFIG\Services: Stereo Service => 2
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Creative Cloud => "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
MSCONFIG\startupreg: AutoVPNConnect => C:\Program Files (x86)\mvhBytes\AutoVPNConnect\AutoVPNConnect.exe
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: DAEMON Tools Ultra Agent => "C:\Program Files (x86)\DAEMON Tools Ultra\DTAgent.exe" -autorun
MSCONFIG\startupreg: GoogleChromeAutoLaunch_FD70E4195A4DE5E83920BD6414A71B17 => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
MSCONFIG\startupreg: NvBackend => "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
MSCONFIG\startupreg: RoccatKova+ => "C:\Program Files (x86)\ROCCAT\Kova[+] Mouse\Kova[+]Monitor.EXE"
MSCONFIG\startupreg: ShadowPlay => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
MSCONFIG\startupreg: Spotify => "C:\Users\Sam\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Sam\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
MSCONFIG\startupreg: Steam => "D:\Steam\steam.exe" -silent
MSCONFIG\startupreg: SUPERAntiSpyware => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

==================== Accounts: =============================

Administrator (S-1-5-21-314491385-833715928-1570723329-500 - Administrator - Disabled)
Gast (S-1-5-21-314491385-833715928-1570723329-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-314491385-833715928-1570723329-1002 - Limited - Enabled)
Sam (S-1-5-21-314491385-833715928-1570723329-1001 - Administrator - Enabled) => C:\Users\Sam

==================== Faulty Device Manager Devices =============

Name: Standardtastatur (PS/2)
Description: Standardtastatur (PS/2)
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardtastaturen)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Unknown Device
Description: Unknown Device
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: (Standard-USB-Hostcontroller)
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Unknown Device
Description: Unknown Device
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: (Standard-USB-Hostcontroller)
Service: 
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. 

Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============
Error: (04/01/2015 06:17:52 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}


Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz
Percentage of memory in use: 25%
Total physical RAM: 10231.17 MB
Available physical RAM: 7577.64 MB
Total Pagefile: 20460.53 MB
Available Pagefile: 17366.03 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:465.75 GB) (Free:379.38 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Daten) (Fixed) (Total:465.76 GB) (Free:274.22 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 1B6AB245)
Partition 1: (Active) - (Size=465.8 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Sam (administrator) on SAM-PC on 01-04-2015 18:23:32
Running from C:\Users\Sam\Downloads
Loaded Profiles: Sam (Available profiles: Sam)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
(Softwareentwicklung Remus - ArchiCrypt) C:\Windows\System32\ACRAMDiskHandlerService64R_D4.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avp.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
() C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Steganos Software GmbH) C:\Program Files (x86)\OkayFreedom\OkayFreedomService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\ProgramData\{f0f87754-a2c2-aa64-f0f8-87754a2cdd52}\Kaspersky Trial Resetter 2015.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Steganos Software GmbH) C:\Program Files (x86)\OkayFreedom\OkayFreedomClient.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avpui.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Valve Corporation) D:\Steam\Steam.exe
(Valve Corporation) D:\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(techPowerUp (www.techpowerup.com)) C:\Program Files (x86)\GPU-Z\GPU-Z.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2673296 2015-03-28] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2014-09-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [508800 2014-12-17] (Oracle Corporation)
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware  (cleanup)] => C:\ProgramData\Malwarebytes\ Malwarebytes Anti-Malware \mbamdor.exe [54072 2015-03-17] (Malwarebytes Corporation)
HKU\S-1-5-21-314491385-833715928-1570723329-1001\...\Run: [GoogleChromeAutoLaunch_FD70E4195A4DE5E83920BD6414A71B17] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [809288 2015-03-14] (Google Inc.)
HKU\S-1-5-21-314491385-833715928-1570723329-1001\...\MountPoints2: {eb19d5b0-a482-11e4-a3d4-00016c6b8f25} - J:\startme.exe
HKU\S-1-5-21-314491385-833715928-1570723329-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [899584 2010-11-21] (Microsoft Corporation)
Startup: C:\Users\Sam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Kaspersky Trial Resetter 2015.lnk
ShortcutTarget: Kaspersky Trial Resetter 2015.lnk -> C:\ProgramData\{f0f87754-a2c2-aa64-f0f8-87754a2cdd52}\Kaspersky Trial Resetter 2015.exe ()
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:55096;https=127.0.0.1:55096
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-314491385-833715928-1570723329-1001\Software\Microsoft\Internet Explorer\Main,Start Page = 
SearchScopes: HKLM -> DefaultScope {D0277F7A-06FF-4FB6-AA6B-080876ED6422} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM -> {D0277F7A-06FF-4FB6-AA6B-080876ED6422} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope value is missing.
SearchScopes: HKU\S-1-5-21-314491385-833715928-1570723329-1001 -> DefaultScope {D0277F7A-06FF-4FB6-AA6B-080876ED6422} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKU\S-1-5-21-314491385-833715928-1570723329-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search
SearchScopes: HKU\S-1-5-21-314491385-833715928-1570723329-1001 -> {D0277F7A-06FF-4FB6-AA6B-080876ED6422} URL = hxxp://www.sm.de/?q={searchTerms}
BHO: Content Blocker Plugin -> {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\IEExt\ie_plugin.dll [2015-02-13] (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28] (Oracle Corporation)
BHO: Virtual Keyboard Plugin -> {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\IEExt\ie_plugin.dll [2015-02-13] (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation)
BHO: Safe Money Plugin -> {E3D96E85-529D-4269-AC6A-97CF9E2221E3} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\IEExt\ie_plugin.dll [2015-02-13] (Kaspersky Lab ZAO)
BHO-x32: Content Blocker Plugin -> {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\IEExt\ie_plugin.dll [2015-02-13] (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-16] (Oracle Corporation)
BHO-x32: Virtual Keyboard Plugin -> {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\IEExt\ie_plugin.dll [2015-02-13] (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-16] (Oracle Corporation)
BHO-x32: Safe Money Plugin -> {E3D96E85-529D-4269-AC6A-97CF9E2221E3} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\IEExt\ie_plugin.dll [2015-02-13] (Kaspersky Lab ZAO)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Sam\AppData\Roaming\Mozilla\Firefox\Profiles\wtx5zb61.default
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2015-01-13] (EA Digital Illusions CE AB)
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-28] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-30] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-01-07] (Adobe Systems)
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2015-01-13] (EA Digital Illusions CE AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-16] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-16] (Oracle Corporation)
FF Plugin-x32: @kaspersky.com/content_blocker_6418E0D362104DADA084DC312DFA8ABC -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\content_blocker@kaspersky.com [2015-02-13] ()
FF Plugin-x32: @kaspersky.com/virtual_keyboard_294FF26A1D5B455495946778FDE7CEDB -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com [2015-02-13] ()
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-03-13] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-03-13] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-03] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-03] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-09-12] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-01-07] (Adobe Systems)
FF Extension: unisaless - C:\Users\Sam\AppData\Roaming\Mozilla\Firefox\Profiles\wtx5zb61.default\Extensions\0Gi7n8O9zW@m.com [2015-03-12]
FF Extension: youtubeadblocker - C:\Users\Sam\AppData\Roaming\Mozilla\Firefox\Profiles\wtx5zb61.default\Extensions\6ekT@b.com [2015-03-12]
FF Extension: uunisailaes - C:\Users\Sam\AppData\Roaming\Mozilla\Firefox\Profiles\wtx5zb61.default\Extensions\s7NNr@D.com [2015-03-12]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker_6418E0D362104DADA084DC312DFA8ABC@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\content_blocker@kaspersky.com
FF Extension: Модуль блокування небезпечних веб-сайтів - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\content_blocker@kaspersky.com [2015-02-13]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard_294FF26A1D5B455495946778FDE7CEDB@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Віртуальна клавіатура - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com [2015-02-13]
FF HKU\S-1-5-21-314491385-833715928-1570723329-1001\...\Firefox\Extensions: [{ba2c82b0-7fa8-11e4-b4a9-0800200c9a66}] - C:\Users\Sam\AppData\Local\Temp\VLC\search.xpi

Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR HomePage: Default -> 
CHR StartupUrls: Default -> "hxxp://www.google.de/"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Magic Actions for YouTube™) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif [2015-01-12]
CHR Extension: (From Dust) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\anelkojiepicmcldgnmkplocifmegpfj [2015-01-12]
CHR Extension: (Google Drive) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-12]
CHR Extension: (OkayFreedom) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\bckipplcmnfhblnpibpbehenelnkpecd [2015-02-02]
CHR Extension: (YouTube) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-12]
CHR Extension: (Google Search) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-12]
CHR Extension: (Kaspersky Protection) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho [2015-02-15]
CHR Extension: (Video Downloader professional) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2015-01-12]
CHR Extension: (AdBlock) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-02-02]
CHR Extension: (A Journey through Middle-earth) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjgkjeheegjnnmheaflhdocglkiegoni [2015-02-02]
CHR Extension: (Linkbucks skip) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjpndobkiolgpnpagkhnknhinnpoajmd [2015-02-02]
CHR Extension: (eBay Extension for Google Chrome™) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\khhckppjhonfmcpegdjdibmngahahhck [2015-02-02]
CHR Extension: (Better Battlelog (BBLog)) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjlfnjepjdmlppapoikepbaabbghofma [2015-02-02]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-31]
CHR Extension: (Turbo for YouTube) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhgnmngkgolhffjjdaipkkjbmbnpefef [2015-02-02]
CHR Extension: (Google Wallet) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-02-02]
CHR Extension: (FoxClocks) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\obcbigljfpgappaaofailjjoabiikckk [2015-02-02]
CHR Extension: (Click&Clean App) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdabfienifkbhoihedcgeogidfmibmhp [2015-01-12]
CHR Extension: (Gmail) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-12]
CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho [Not Found]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-07-23] (SUPERAntiSpyware.com)
R2 ArchiCrypt Ultimate RAM-Disk 4; C:\Windows\system32\ACRAMDiskHandlerService64R_D4.exe [1580816 2013-10-18] (Softwareentwicklung Remus - ArchiCrypt)
R2 AVP15.0.1; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avp.exe [234520 2014-08-30] (Kaspersky Lab ZAO)
S3 Disc Soft Ultra Bus Service; C:\Program Files (x86)\DAEMON Tools Ultra\DiscSoftBusService.exe [1378576 2014-12-09] (Disc Soft Ltd)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152144 2015-03-28] (NVIDIA Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1878672 2015-03-28] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [22995600 2015-03-28] (NVIDIA Corporation)
R2 OkayFreedom VPN Starter Service; C:\Program Files (x86)\OkayFreedom\OkayFreedomService.exe [326072 2015-02-18] (Steganos Software GmbH)
S3 Origin Client Service; D:\Origin\OriginClientService.exe [1910128 2015-02-02] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2015-02-03] ()
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 ACMoFlex64RD4; C:\Windows\system32\drivers\ACMoFlex64RD4.sys [24848 2013-10-18] (Softwareentwicklung Remus - ArchiCrypt.de)
R0 cm_km_w; C:\Windows\System32\DRIVERS\cm_km_w.sys [238288 2013-01-14] (Kaspersky Lab UK Ltd)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2015-02-18] (Disc Soft Ltd)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [468576 2014-03-31] (Kaspersky Lab ZAO)
R2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [46144 2014-07-02] (Kaspersky Lab ZAO)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [150536 2015-02-13] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [246456 2014-08-12] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [819896 2015-03-10] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [30304 2014-02-25] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [28768 2014-03-28] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55872 2014-06-05] (Kaspersky Lab ZAO)
R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [77512 2015-02-13] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [179776 2014-07-09] (Kaspersky Lab ZAO)
R3 KovaPlusFltr; C:\Windows\System32\drivers\KovaPlusFltr.sys [15104 2010-01-25] (ROCCAT Development, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [136408 2015-04-01] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-03-17] (Malwarebytes Corporation)
R3 Neo_VPN; C:\Windows\System32\DRIVERS\Neo_0078.sys [28768 2015-01-30] (SoftEther VPN Project at University of Tsukuba, Japan.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-03-28] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13368 2013-03-11] ()
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R3 GPU-Z; \??\C:\Users\Sam\AppData\Local\Temp\GPU-Z.sys [X]
U4 klkbdflt2; system32\DRIVERS\klkbdflt2.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-01 18:20 - 2015-04-01 18:20 - 00002516 _____ () C:\Users\Sam\Desktop\MBAM.txt
2015-04-01 18:13 - 2015-04-01 18:13 - 00002396 _____ () C:\Users\Sam\Desktop\JRT.txt
2015-04-01 14:40 - 2015-04-01 14:40 - 00007229 _____ () C:\Users\Sam\Downloads\XFeu6_Hi-engine&Hi-TransMission.scs
2015-03-31 22:05 - 2015-03-31 22:05 - 00000000 ____D () C:\Users\Sam\Desktop\PhysX Demo
2015-03-31 22:04 - 2015-03-31 22:04 - 04840320 _____ () C:\Users\Sam\Downloads\FLEX-0.25.7z
2015-03-31 17:57 - 2015-02-24 19:13 - 15651616 _____ () C:\Users\Sam\Desktop\SuperMario64HD.exe
2015-03-31 17:55 - 2015-03-31 17:56 - 29606756 _____ () C:\Users\Sam\Downloads\SuperMario64HD_Win.zip
2015-03-31 00:23 - 2015-03-31 00:23 - 00000970 _____ () C:\Users\Sam\Desktop\TechPowerUp GPU-Z.lnk
2015-03-31 00:23 - 2015-03-31 00:23 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TechPowerUp GPU-Z
2015-03-31 00:23 - 2015-03-31 00:23 - 00000000 ____D () C:\Program Files (x86)\GPU-Z
2015-03-31 00:22 - 2015-03-31 00:22 - 01713824 _____ (techPowerUp (www.techpowerup.com)) C:\Users\Sam\Downloads\GPU-Z.0.8.2.exe
2015-03-30 23:52 - 2015-03-30 23:52 - 00944128 _____ () C:\Users\Sam\Downloads\JoulemeterSetup.msi
2015-03-30 23:52 - 2015-03-30 23:52 - 00003017 _____ () C:\Users\Sam\Desktop\Joulemeter.lnk
2015-03-30 23:52 - 2015-03-30 23:52 - 00003017 _____ () C:\Users\Sam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Joulemeter.lnk
2015-03-30 23:45 - 2015-03-30 23:44 - 01389097 _____ (Thisisu) C:\Users\Sam\Desktop\JRT.exe
2015-03-30 23:44 - 2015-03-30 23:44 - 01389097 _____ (Thisisu) C:\Users\Sam\Downloads\JRT.exe
2015-03-30 23:42 - 2015-03-30 23:42 - 02208768 _____ () C:\Users\Sam\Desktop\AdwCleaner_4.200.exe
2015-03-30 16:52 - 2015-03-30 16:52 - 605318222 _____ () C:\Users\Sam\Downloads\[ETS2Downloads.com]complicated-roads-map.rar
2015-03-30 16:26 - 2015-03-30 16:27 - 11336875 _____ () C:\Users\Sam\Downloads\_MOD-ETS2__Real_company_logo_v2.1.rar
2015-03-30 16:22 - 2015-03-30 16:22 - 148210391 _____ () C:\Users\Sam\Downloads\[ETS2Downloads.com]mega-tandem.rar
2015-03-30 16:20 - 2015-03-30 16:20 - 10499793 _____ () C:\Users\Sam\Downloads\[ETS2Downloads.com]DastagirSweetFX.rar
2015-03-30 16:18 - 2015-03-30 16:26 - 143660085 _____ () C:\Users\Sam\Downloads\Real Life Graphic + Lights.rar
2015-03-30 16:15 - 2015-03-30 16:15 - 02277893 _____ () C:\Users\Sam\Downloads\[ETS2Downloads.com]turkey-horn-sound-for-all-trucks.scs
2015-03-30 16:13 - 2015-03-30 16:13 - 00021126 _____ () C:\Users\Sam\Downloads\[ETS2Downloads.com]Engine_Balance_Overhaul_v1.zip
2015-03-30 15:25 - 2015-04-01 18:23 - 00022363 _____ () C:\Users\Sam\Downloads\FRST.txt
2015-03-30 15:25 - 2015-04-01 18:23 - 00000000 ____D () C:\FRST
2015-03-30 15:25 - 2015-03-30 15:26 - 00030951 _____ () C:\Users\Sam\Downloads\Addition.txt
2015-03-30 15:24 - 2015-03-30 15:24 - 02095616 _____ (Farbar) C:\Users\Sam\Downloads\FRST64.exe
2015-03-29 20:43 - 2015-03-29 20:43 - 00001168 _____ () C:\Users\Sam\Desktop\ArchiCrypt Ultimate RAM-Disk 4.lnk
2015-03-29 20:43 - 2015-03-29 20:43 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\ArchiCrypt Ultimate RAM-Disk3
2015-03-29 20:43 - 2015-03-29 20:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArchiCrypt
2015-03-29 20:43 - 2015-03-29 20:43 - 00000000 ____D () C:\ProgramData\ArchiCrypt Ultimate RAM-Disk
2015-03-29 20:43 - 2013-10-18 11:10 - 01580816 _____ (Softwareentwicklung Remus - ArchiCrypt) C:\Windows\system32\ACRAMDiskHandlerService64R_D4.exe
2015-03-29 20:43 - 2013-10-18 11:10 - 00024848 _____ (Softwareentwicklung Remus - ArchiCrypt.de) C:\Windows\system32\Drivers\ACMoFlex64RD4.sys
2015-03-29 20:43 - 2013-10-18 11:09 - 00170256 _____ (Softwareentwicklung Remus - ArchiCrypt.de) C:\Windows\system32\ACMFEngine64RD4.dll
2015-03-29 20:42 - 2015-03-29 20:42 - 00000000 ____D () C:\Program Files\ArchiCrypt
2015-03-29 20:41 - 2015-03-29 20:41 - 12643052 _____ () C:\Users\Sam\Downloads\ACUltimateRAMDisk464.zip
2015-03-28 23:33 - 2015-03-28 23:33 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\SUPERAntiSpyware.com
2015-03-28 23:28 - 2015-03-28 23:28 - 00008254 _____ () C:\Users\Sam\Desktop\hijackthis.log
2015-03-28 23:17 - 2015-03-28 23:17 - 00388608 _____ (Trend Micro Inc.) C:\Users\Sam\Downloads\HijackThis.exe
2015-03-28 23:17 - 2015-03-28 23:17 - 00008254 _____ () C:\Users\Sam\Downloads\hijackthis.log
2015-03-28 23:06 - 2015-04-01 18:10 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-03-28 23:06 - 2015-03-28 23:06 - 00001109 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-03-28 23:06 - 2015-03-28 23:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-03-28 23:06 - 2015-03-28 23:06 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-03-28 23:06 - 2015-03-17 07:15 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-03-28 23:06 - 2015-03-17 07:15 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-03-28 23:06 - 2015-03-17 07:15 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-03-28 23:05 - 2015-03-28 23:05 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\Sam\Downloads\mbam-setup-2.1.4.1018.exe
2015-03-28 20:00 - 2015-03-13 17:38 - 00622224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-03-28 19:43 - 2015-03-28 19:58 - 309143408 _____ (NVIDIA Corporation) C:\Users\Sam\Downloads\347.88-desktop-win8-win7-winvista-64bit-international-whql.exe
2015-03-28 19:10 - 2015-03-28 19:10 - 00002580 _____ () C:\Users\Sam\Downloads\turbo10.zip
2015-03-28 17:16 - 2015-03-28 17:17 - 30151898 _____ () C:\Users\Sam\Downloads\ROCCAT_Kova[+]_DRV1.25 (1).zip
2015-03-28 17:10 - 2015-03-28 17:10 - 00199489 _____ () C:\Users\Sam\Downloads\CCEnhancer-4.2-mulitlingual.zip
2015-03-28 17:09 - 2015-03-28 19:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-03-28 14:19 - 2015-03-28 19:35 - 00000000 ____D () C:\Users\Sam\Desktop\BIOS_ACER_R01.A3_Windows_ASM7720
2015-03-28 14:18 - 2015-03-28 14:18 - 00948720 _____ () C:\Users\Sam\Downloads\BIOS_Acer_R01.A3_A_A (2).zip
2015-03-28 13:54 - 2015-03-28 13:54 - 00015201 _____ () C:\Users\Sam\Downloads\MemTest41.zip
2015-03-28 13:17 - 2015-03-28 19:35 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\Wise Registry Cleaner
2015-03-28 13:17 - 2015-03-28 13:17 - 00000000 ____D () C:\Program Files (x86)\Wise
2015-03-28 13:13 - 2015-03-28 13:13 - 00000000 ____D () C:\Users\Sam\AppData\Local\Microsoft Research
2015-03-28 13:12 - 2015-03-28 13:12 - 00000000 ____D () C:\Program Files (x86)\Microsoft Research
2015-03-28 12:33 - 2015-03-28 12:33 - 02357106 _____ () C:\Users\Sam\Downloads\Chipset_Intel_9.1.1.1015_W7x64_A (1).zip
2015-03-28 12:32 - 2015-03-28 12:32 - 01516243 _____ () C:\Users\Sam\Downloads\Modem_liteon_2.2.95_W7x64_A.zip
2015-03-28 12:32 - 2015-03-28 12:32 - 00000000 ____D () C:\Windows\Options
2015-03-28 12:26 - 2015-03-28 12:26 - 03008450 _____ () C:\Users\Sam\Downloads\X58ExpressChipset9.3.0.1019.zip
2015-03-28 12:23 - 2015-03-28 12:23 - 02636255 _____ () C:\Users\Sam\Downloads\875PChipsetIntel865ChipsetFamily848PChi9.2.0.1025.zip
2015-03-28 12:18 - 2015-03-28 14:52 - 00000136 _____ () C:\Users\Sam\Win8UpgradeKit_28.03.2015.LOG
2015-03-27 20:01 - 2015-03-27 20:01 - 00000000 ____D () C:\Program Files\Intel
2015-03-27 18:26 - 2015-03-27 18:26 - 00002844 _____ () C:\Users\Sam\Unigine_Heaven_Benchmark_4.0_20150327_1726.html
2015-03-27 17:04 - 2015-03-28 19:35 - 00000000 ____D () C:\Users\Sam\AppData\Local\GOG.com
2015-03-27 17:03 - 2015-03-27 17:03 - 03701856 _____ (GOG.com ) C:\Users\Sam\Downloads\Setup_Downloader_3.6.0_stable.exe
2015-03-27 15:36 - 2015-03-27 15:36 - 00000000 ____D () C:\Program Files (x86)\Intel
2015-03-27 15:36 - 2015-03-27 15:36 - 00000000 ____D () C:\Intel
2015-03-27 15:35 - 2015-03-27 15:35 - 02357106 _____ () C:\Users\Sam\Downloads\Chipset_Intel_9.1.1.1015_W7x64_A.zip
2015-03-27 15:34 - 2015-03-28 00:40 - 00016689 _____ () C:\Users\Sam\Win8UpgradeKit_27.03.2015.LOG
2015-03-27 15:32 - 2015-03-27 15:33 - 28777589 _____ () C:\Users\Sam\Downloads\Win8UpgAsstTool_1.00.3001.zip
2015-03-27 15:28 - 2015-03-27 15:28 - 00948720 _____ () C:\Users\Sam\Downloads\BIOS_Acer_R01.A3_A_A (1).zip
2015-03-27 15:18 - 2015-03-27 15:19 - 00132014 _____ () C:\Users\Sam\Downloads\Core2MaxPerf-110.zip
2015-03-27 14:07 - 2015-03-28 15:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI
2015-03-27 14:07 - 2015-03-28 15:03 - 00000000 ____D () C:\Program Files (x86)\MSI
2015-03-27 14:07 - 2015-03-27 14:07 - 00000000 ____D () C:\MSI
2015-03-27 14:06 - 2015-03-27 14:07 - 36210245 _____ () C:\Users\Sam\Downloads\MSIAfterburnerSetup.zip
2015-03-27 14:05 - 2015-03-27 14:06 - 10746455 _____ () C:\Users\Sam\Downloads\gamingapp_4.0.0.04.zip
2015-03-27 14:05 - 2015-03-27 14:06 - 10594870 _____ () C:\Users\Sam\Downloads\LiveUpdate.zip
2015-03-26 21:30 - 2015-03-28 19:35 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2015-03-26 21:30 - 2015-03-28 19:35 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2015-03-26 17:58 - 2015-03-28 19:35 - 00000000 ____D () C:\Program Files\Registry System Wizard.NET
2015-03-26 17:58 - 2015-03-26 17:58 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\WinFAQ
2015-03-26 17:52 - 2015-03-26 17:52 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\STEITZ® IT-Solutions
2015-03-26 17:52 - 2015-03-26 17:52 - 00000000 ____D () C:\Users\Sam\AppData\Local\STEITZ®_IT-Solutions
2015-03-26 17:52 - 2015-03-26 17:52 - 00000000 ____D () C:\ProgramData\STEITZ® IT-Solutions
2015-03-26 17:52 - 2015-03-26 17:52 - 00000000 ____D () C:\ProgramData\Caphyon
2015-03-26 17:52 - 2015-03-26 17:52 - 00000000 ____D () C:\Program Files (x86)\STEITZ IT-Solutions
2015-03-26 17:50 - 2015-03-26 17:51 - 20208530 _____ () C:\Users\Sam\Downloads\devmanpro11.zip
2015-03-26 00:29 - 2013-10-02 02:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2015-03-26 00:29 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2015-03-26 00:28 - 2012-08-23 16:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2015-03-23 17:49 - 2015-03-13 21:41 - 32114888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 25460880 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 24775368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 20466376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 17258024 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 13297144 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 13210080 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 10775080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 10715864 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 10262160 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-03-23 17:49 - 2015-03-13 21:41 - 03611792 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 03249352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 01896136 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434788.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 01557648 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434788.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00997856 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00970384 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00944784 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00930448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00909512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00878328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00496272 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00400584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00390288 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00354112 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00346824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00306208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00178512 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00164568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-03-23 16:38 - 2015-03-23 16:38 - 00000000 ____D () C:\Users\Sam\Intel
2015-03-23 16:37 - 2015-03-23 16:38 - 18415338 _____ () C:\Users\Sam\Downloads\intel_rst_12_9_4_1000_whql.zip
2015-03-23 16:34 - 2015-03-23 16:38 - 00000000 ____D () C:\Program Files (x86)\DriverToolkit
2015-03-23 16:34 - 2015-03-23 16:34 - 02448688 _____ (Megaify Software ) C:\Users\Sam\Downloads\DriverToolkitInstaller.exe
2015-03-23 16:34 - 2015-03-23 16:34 - 00000000 ____D () C:\Users\Sam\AppData\Local\DriverToolkit
2015-03-23 16:31 - 2015-03-23 16:31 - 00000000 ____D () C:\Program Files (x86)\eSupport.com
2015-03-23 16:30 - 2015-03-23 16:31 - 01196816 _____ (Copyright © 2013 eSupport.com, Inc • All Rights Reserved ) C:\Users\Sam\Downloads\driveragent-setup-1213.exe
2015-03-23 16:29 - 2015-03-23 16:29 - 00000937 _____ () C:\Users\Public\Desktop\CPUID HWMonitor.lnk
2015-03-23 16:28 - 2015-03-23 16:28 - 01191992 _____ ( ) C:\Users\Sam\Downloads\hwmonitor_1.27.exe
2015-03-22 23:33 - 2015-03-28 19:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2015-03-22 23:33 - 2015-03-28 19:35 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com
2015-03-22 23:33 - 2015-03-28 19:35 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2015-03-22 23:33 - 2015-03-22 23:33 - 00001815 _____ () C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk
2015-03-22 23:32 - 2015-03-22 23:32 - 21459360 _____ (SUPERAntiSpyware) C:\Users\Sam\Downloads\SUPERAntiSpyware.exe
2015-03-22 21:10 - 2015-03-28 19:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ROCCAT
2015-03-22 21:10 - 2015-03-28 19:34 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-03-22 21:10 - 2015-03-22 21:10 - 00000000 ____D () C:\Program Files (x86)\ROCCAT
2015-03-22 21:09 - 2015-03-22 21:10 - 30151898 _____ () C:\Users\Sam\Downloads\ROCCAT_Kova[+]_DRV1.25.zip
2015-03-22 20:04 - 2015-03-23 16:20 - 00108859 _____ () C:\Users\Sam\Downloads\usbdeview_241-x64.zip
2015-03-21 17:59 - 2015-03-21 17:59 - 00000722 _____ () C:\Users\Sam\Desktop\StarCitizen.lnk
2015-03-21 17:59 - 2015-03-21 17:59 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StarCitizen
2015-03-21 17:56 - 2015-03-21 17:57 - 38885078 _____ () C:\Users\Sam\Downloads\StarCitizenInstaller (1).exe
2015-03-20 15:19 - 2015-03-20 15:22 - 00008156 _____ () C:\Users\Sam\Downloads\software_removal_tool.log
2015-03-17 21:24 - 2015-03-17 21:24 - 00007663 _____ () C:\Users\Sam\AppData\Local\Resmon.ResmonCfg
2015-03-17 19:30 - 2015-03-17 19:30 - 00000202 _____ () C:\Users\Sam\Desktop\PAYDAY 2.url
2015-03-16 20:19 - 2015-03-16 20:19 - 00536064 _____ () C:\Users\Sam\Downloads\youtu.be-J7bANMHnPUk.webp
2015-03-13 18:59 - 2015-03-28 19:34 - 00000000 ____D () C:\Games
2015-03-13 18:59 - 2015-03-13 18:59 - 00000802 _____ () C:\Users\Public\Desktop\World of Warships.lnk
2015-03-13 18:59 - 2015-03-13 18:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warships
2015-03-13 18:56 - 2015-03-13 18:56 - 09040664 _____ (Wargaming.net ) C:\Users\Sam\Downloads\WoWS_internet_install_eu.exe
2015-03-13 14:52 - 2015-03-13 14:52 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-03-13 14:50 - 2015-03-13 14:51 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Sam\Downloads\mbam-setup-2.0.4.1028.exe
2015-03-13 00:23 - 2015-03-13 00:23 - 00000000 ____D () C:\Users\Sam\Desktop\SuperMario64HD_Data
2015-03-12 21:42 - 2015-03-12 21:42 - 10580340 _____ () C:\Users\Sam\Downloads\tardsplaya_1.0.0.5.7z
2015-03-12 21:42 - 2015-03-12 21:42 - 00000000 ____D () C:\Users\Sam\Desktop\Tardsplaya
2015-03-11 23:03 - 2015-03-11 23:03 - 01174216 _____ (Igor Pavlov) C:\Users\Sam\Desktop\DDU v14.0.0.1.exe
2015-03-11 23:03 - 2015-03-11 23:03 - 00266959 _____ (Igor Pavlov) C:\Users\Sam\Downloads\GiveMePower v2.1.0.0.exe
2015-03-11 23:03 - 2015-03-11 23:03 - 00266959 _____ (Igor Pavlov) C:\Users\Sam\Desktop\GiveMePower v2.1.0.0.exe
2015-03-11 23:01 - 2015-03-11 23:03 - 01174216 _____ (Igor Pavlov) C:\Users\Sam\Downloads\DDU v14.0.0.1.exe
2015-03-11 16:05 - 2015-02-20 06:41 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-03-11 16:05 - 2015-02-20 06:40 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-03-11 16:05 - 2015-02-20 06:40 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-03-11 16:05 - 2015-02-20 06:40 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-03-11 16:05 - 2015-02-20 06:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-03-11 16:05 - 2015-02-20 06:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-03-11 16:05 - 2015-02-20 06:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-03-11 16:05 - 2015-02-20 06:12 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-03-11 16:05 - 2015-02-20 05:29 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-03-11 16:05 - 2015-02-20 05:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-03-11 16:05 - 2015-02-03 05:34 - 05554104 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-03-11 16:05 - 2015-02-03 05:34 - 00693176 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-03-11 16:05 - 2015-02-03 05:34 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-03-11 16:05 - 2015-02-03 05:33 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-03-11 16:05 - 2015-02-03 05:31 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-03-11 16:05 - 2015-02-03 05:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-03-11 16:05 - 2015-02-03 05:30 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-03-11 16:05 - 2015-02-03 05:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 16:05 - 2015-02-03 05:30 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-03-11 16:05 - 2015-02-03 05:30 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-03-11 16:05 - 2015-02-03 05:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-03-11 16:05 - 2015-02-03 05:30 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-03-11 16:05 - 2015-02-03 05:30 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 16:05 - 2015-02-03 05:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2015-03-11 16:05 - 2015-02-03 05:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2015-03-11 16:05 - 2015-02-03 05:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2015-03-11 16:05 - 2015-02-03 05:28 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-03-11 16:05 - 2015-02-03 05:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-03-11 16:05 - 2015-02-03 05:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2015-03-11 16:05 - 2015-02-03 05:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-03-11 16:05 - 2015-02-03 05:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-03-11 16:05 - 2015-02-03 05:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-03-11 16:05 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-03-11 16:05 - 2015-02-03 05:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-03-11 16:05 - 2015-02-03 05:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2015-03-11 16:05 - 2015-02-03 05:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2015-03-11 16:05 - 2015-02-03 05:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2015-03-11 16:05 - 2015-02-03 05:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-03-11 16:05 - 2015-02-03 04:32 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-03-11 16:05 - 2014-11-01 00:24 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-03-11 16:05 - 2014-06-28 02:21 - 00532176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-03-11 16:05 - 2014-06-28 02:21 - 00457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2015-03-11 16:04 - 2015-03-06 07:56 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-03-11 16:04 - 2015-03-06 07:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-03-11 16:04 - 2015-03-06 07:42 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-03-11 16:04 - 2015-03-06 07:41 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-03-11 16:04 - 2015-03-06 07:41 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-03-11 16:04 - 2015-03-06 07:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-03-11 16:04 - 2015-03-06 07:38 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-03-11 16:04 - 2015-03-06 07:36 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-03-11 16:04 - 2015-03-06 07:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-03-11 16:04 - 2015-03-06 07:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-03-11 16:04 - 2015-03-06 07:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-03-11 16:04 - 2015-03-06 07:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-03-11 16:04 - 2015-03-06 07:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-03-11 16:04 - 2015-03-06 07:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-03-11 16:04 - 2015-03-06 07:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-03-11 16:04 - 2015-03-06 07:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-03-11 16:04 - 2015-03-06 07:09 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-03-11 16:04 - 2015-03-06 07:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-03-11 16:04 - 2015-03-06 07:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-03-11 16:04 - 2015-03-06 07:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-03-11 16:04 - 2015-03-06 07:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-03-11 16:04 - 2015-02-26 05:25 - 03204096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-03-11 16:04 - 2015-02-24 05:15 - 00389800 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-03-11 16:04 - 2015-02-24 04:32 - 00342696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-03-11 16:04 - 2015-02-21 03:16 - 25021440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-03-11 16:04 - 2015-02-21 02:41 - 12827648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-03-11 16:04 - 2015-02-21 02:27 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-03-11 16:04 - 2015-02-21 02:27 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-03-11 16:04 - 2015-02-21 02:25 - 19720192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-03-11 16:04 - 2015-02-21 01:58 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-03-11 16:04 - 2015-02-21 01:32 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-03-11 16:04 - 2015-02-20 05:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-03-11 16:04 - 2015-02-20 05:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-03-11 16:04 - 2015-02-20 04:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-03-11 16:04 - 2015-02-20 04:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-03-11 16:04 - 2015-02-20 04:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-03-11 16:04 - 2015-02-20 04:48 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-03-11 16:04 - 2015-02-20 04:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-03-11 16:04 - 2015-02-20 04:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-03-11 16:04 - 2015-02-20 04:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-03-11 16:04 - 2015-02-20 04:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-03-11 16:04 - 2015-02-20 04:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-03-11 16:04 - 2015-02-20 04:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-03-11 16:04 - 2015-02-20 04:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-03-11 16:04 - 2015-02-20 04:32 - 06035456 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-03-11 16:04 - 2015-02-20 04:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-03-11 16:04 - 2015-02-20 04:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-03-11 16:04 - 2015-02-20 04:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-03-11 16:04 - 2015-02-20 04:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-03-11 16:04 - 2015-02-20 04:09 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-03-11 16:04 - 2015-02-20 04:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-03-11 16:04 - 2015-02-20 04:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-03-11 16:04 - 2015-02-20 04:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-03-11 16:04 - 2015-02-20 04:06 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-03-11 16:04 - 2015-02-20 04:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-03-11 16:04 - 2015-02-20 04:03 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-03-11 16:04 - 2015-02-20 04:01 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-03-11 16:04 - 2015-02-20 04:00 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-03-11 16:04 - 2015-02-20 03:58 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-03-11 16:04 - 2015-02-20 03:56 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-03-11 16:04 - 2015-02-20 03:56 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-03-11 16:04 - 2015-02-20 03:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-03-11 16:04 - 2015-02-20 03:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-03-11 16:04 - 2015-02-20 03:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-03-11 16:04 - 2015-02-20 03:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-03-11 16:04 - 2015-02-20 03:43 - 14398976 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-03-11 16:04 - 2015-02-20 03:41 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-03-11 16:04 - 2015-02-20 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-03-11 16:04 - 2015-02-20 03:30 - 04300288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-03-11 16:04 - 2015-02-20 03:28 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-03-11 16:04 - 2015-02-20 03:24 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-03-11 16:04 - 2015-02-20 03:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-03-11 16:04 - 2015-02-20 03:23 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-03-11 16:04 - 2015-02-20 03:16 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-03-11 16:04 - 2015-02-20 03:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-03-11 16:04 - 2015-02-20 03:01 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-03-11 16:04 - 2015-02-20 02:57 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-03-11 16:04 - 2015-02-20 02:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-03-11 16:04 - 2015-02-13 07:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-03-11 16:04 - 2015-02-13 07:22 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-03-11 16:04 - 2015-02-03 05:31 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-03-11 16:04 - 2015-02-03 05:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-03-11 16:04 - 2015-02-03 05:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-03-11 16:04 - 2015-02-03 05:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2015-03-11 16:04 - 2015-01-31 01:56 - 00459336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-03-11 16:04 - 2015-01-17 04:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-03-11 16:04 - 2015-01-17 04:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-03-11 16:03 - 2015-02-04 05:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-03-11 16:03 - 2015-02-04 04:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2015-03-10 19:08 - 2015-03-10 19:08 - 00000000 ____D () C:\Users\Sam\Documents\Colossal Order
2015-03-10 19:08 - 2015-03-10 19:08 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\Colossal Order
2015-03-10 19:08 - 2015-03-10 19:08 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\.mono
2015-03-10 19:08 - 2015-03-10 19:08 - 00000000 ____D () C:\Users\Sam\AppData\Local\Colossal Order
2015-03-10 19:08 - 2015-03-10 19:08 - 00000000 ____D () C:\ProgramData\.mono
2015-03-10 18:04 - 2015-03-10 18:04 - 00000202 _____ () C:\Users\Sam\Desktop\Cities Skylines.url
2015-03-10 01:13 - 2015-03-10 01:13 - 00001329 _____ () C:\Users\Sam\Downloads\event.ics
2015-03-10 00:28 - 2015-03-10 00:22 - 03141283 _____ () C:\Users\Sam\Desktop\Heidelberg terrain.zip
2015-03-10 00:21 - 2015-03-10 00:22 - 03141283 _____ () C:\Users\Sam\Downloads\Heidelberg terrain.zip
2015-03-09 18:02 - 2015-03-09 18:02 - 00002047 _____ () C:\Users\Sam\Downloads\All Shouts-37516-1-2.7z
2015-03-09 17:56 - 2015-03-09 17:56 - 00878274 _____ () C:\Users\Sam\Downloads\Example-35286-1-0.rar
2015-03-09 17:52 - 2015-03-09 17:52 - 00000343 _____ () C:\Users\Sam\Downloads\Shouts-5719-1-0.zip
2015-03-09 01:33 - 2015-03-09 01:33 - 00851456 _____ (Adobe Inc.) C:\Users\Sam\Downloads\img_72958.scr
2015-03-07 12:34 - 2015-03-07 12:34 - 00014171 _____ () C:\Users\Sam\Downloads\ENBoost 5_0-38649-5-0.zip
2015-03-07 12:13 - 2015-03-07 12:13 - 02360176 _____ () C:\Users\Sam\Downloads\enbseries_skyrim_v0266 (1).zip
2015-03-07 12:12 - 2015-03-07 12:12 - 00584910 _____ () C:\Users\Sam\Downloads\enbseries_skyrim_v0096patch9antifreeze.zip
2015-03-06 20:58 - 2015-03-06 20:58 - 00004088 _____ () C:\Users\Sam\Downloads\JWs Skyrim Configuration Files -- INI Files-59292-v-3.rar
2015-03-06 18:56 - 2015-03-06 18:56 - 00019981 _____ () C:\Users\Sam\Downloads\Complete_Crafting_Overhaul_Compatibility_Patch-26230-0-24.7z
2015-03-06 14:33 - 2015-03-06 14:33 - 00049775 _____ () C:\Users\Sam\Downloads\Skip Bethesda intro-100.zip
2015-03-06 14:32 - 2015-03-06 14:32 - 00326483 _____ () C:\Users\Sam\Downloads\ENB Customizer v2_1 FIXED-17400-2-1.rar
2015-03-05 13:23 - 2015-03-05 13:23 - 15698775 _____ () C:\Users\Sam\Downloads\Skyrim_Particle_Patch_for_ENB--All-In-One.zip
2015-03-04 20:49 - 2015-03-04 20:49 - 00007383 _____ () C:\Users\Sam\Downloads\SSME - Skyrim Startup Memory Editor-50305-1-8-0-0.zip
2015-03-04 20:41 - 2015-03-04 20:41 - 00471625 _____ () C:\Users\Sam\Downloads\skse_1_06_16.7z
2015-03-04 20:06 - 2015-03-04 20:06 - 00057500 _____ () C:\Users\Sam\Downloads\Texture Pack Combiner LIGHT v1_95b-20801-1-95b.rar
2015-03-04 20:06 - 2015-03-04 20:06 - 00057445 _____ () C:\Users\Sam\Downloads\Texture Pack Combiner v1_95b-20801-1-95b.rar
2015-03-04 18:31 - 2015-03-04 18:31 - 00013856 _____ () C:\Users\Sam\Downloads\Unlimited Rings Multilingual-10281.rar
2015-03-03 22:33 - 2015-03-03 22:33 - 00160836 _____ () C:\Users\Sam\Downloads\RealLike ENB (PERFORMANCE)-22056-2-6.zip
2015-03-03 22:13 - 2015-01-09 05:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-03-03 22:13 - 2015-01-09 05:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-03-03 22:13 - 2015-01-09 05:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-03-03 22:13 - 2015-01-09 04:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2015-03-03 20:42 - 2015-03-03 20:42 - 00020455 _____ () C:\Users\Sam\Downloads\R.S.Patcher 1.5b4 -TES5EDIT SCRIPTS - Install 3rd-52612-1-5b4.zip
2015-03-03 20:03 - 2015-02-22 01:16 - 00906752 _____ (ENB) C:\Users\Sam\Desktop\d3d9.dll
2015-03-03 20:00 - 2015-03-03 20:00 - 00533167 _____ () C:\Users\Sam\Downloads\Natural Realistic ENB 1 3-10109.rar
2015-03-03 12:07 - 2015-03-03 12:07 - 00000420 _____ () C:\Users\Sam\Downloads\FasterHorses_Sprint_x2-934.zip
2015-03-02 21:21 - 2015-03-02 21:21 - 00089635 _____ () C:\Users\Sam\Downloads\tesv_skyrim_plus_11_trnr_ghl.rar
2015-03-02 21:21 - 2013-11-29 15:42 - 00092160 _____ () C:\Users\Sam\Desktop\tesv_skyrim_plus_11_trnr_ghl.exe
2015-03-02 21:18 - 2015-03-02 21:18 - 00087795 _____ () C:\Users\Sam\Downloads\THE.ELDER.SCROLLS.5.SKYRIM.V1.9.32.0.8.PLUS11TRN.ARXLEX (1).ZIP
2015-03-02 20:46 - 2015-03-02 20:46 - 00002537 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Excel Viewer.lnk
2015-03-02 20:46 - 2015-03-02 20:46 - 00000000 ____D () C:\Program Files (x86)\MSECache
2015-03-02 20:46 - 2015-03-02 20:46 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2015-03-02 20:43 - 2015-03-02 20:45 - 77738888 _____ (Microsoft Corporation) C:\Users\Sam\Downloads\ExcelViewer.exe
2015-03-02 18:30 - 2015-03-02 18:31 - 02360275 _____ () C:\Users\Sam\Downloads\enbseries_skyrim_v0266.zip
2015-03-02 18:28 - 2015-03-02 18:32 - 101524453 _____ () C:\Users\Sam\Downloads\K ENB Pure Light Quality v3.0-58338-0-265-v3-0.7z

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-01 18:21 - 2015-01-12 14:10 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-01 18:04 - 2015-02-24 13:13 - 00000000 ____D () C:\AdwCleaner
2015-04-01 17:58 - 2015-02-13 15:19 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2015-04-01 17:19 - 2015-02-20 15:53 - 00000000 ____D () C:\Program Files (x86)\MSI Afterburner
2015-04-01 15:57 - 2015-02-03 15:59 - 00000000 ____D () C:\Users\Sam\Documents\Euro Truck Simulator 2
2015-04-01 14:14 - 2009-07-14 06:45 - 00021408 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-04-01 14:14 - 2009-07-14 06:45 - 00021408 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-04-01 14:13 - 2015-01-26 00:18 - 00000000 ____D () C:\Users\Sam\AppData\Local\Adobe
2015-04-01 14:09 - 2010-11-21 08:50 - 00699416 _____ () C:\Windows\system32\perfh007.dat
2015-04-01 14:09 - 2010-11-21 08:50 - 00149556 _____ () C:\Windows\system32\perfc007.dat
2015-04-01 14:09 - 2009-07-14 07:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-01 14:06 - 2010-11-21 04:52 - 02009898 _____ () C:\Windows\WindowsUpdate.log
2015-04-01 14:03 - 2015-01-12 14:10 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-01 14:03 - 2014-12-30 17:37 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-04-01 14:03 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-01 14:03 - 2009-07-14 06:51 - 00047933 _____ () C:\Windows\setupact.log
2015-03-31 23:58 - 2015-02-20 15:56 - 00003014 _____ () C:\Windows\System32\Tasks\MSIAfterburner
2015-03-31 22:37 - 2015-02-13 12:30 - 00000020 _____ () C:\Users\Sam\AppData\Roaming\appdataFr3.bin
2015-03-30 20:07 - 2015-02-12 18:57 - 00001384 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2015-03-30 18:06 - 2015-02-21 17:30 - 00000000 ____D () C:\Users\Sam\Documents\Nexus Mod Manager
2015-03-30 18:00 - 2015-02-28 13:05 - 00000000 ____D () C:\Users\Sam\AppData\Local\Skyrim
2015-03-29 14:04 - 2010-11-21 05:47 - 00175024 _____ () C:\Windows\PFRO.log
2015-03-28 23:17 - 2015-01-12 14:08 - 00000000 ____D () C:\Users\Sam\AppData\Local\VirtualStore
2015-03-28 20:05 - 2015-01-12 15:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-03-28 20:00 - 2014-12-30 17:37 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2015-03-28 20:00 - 2014-12-30 17:37 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2015-03-28 19:40 - 2015-01-12 14:15 - 00058016 _____ () C:\Users\Sam\AppData\Local\GDIPFONTCACHEV1.DAT
2015-03-28 19:38 - 2015-01-15 16:51 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-03-28 19:38 - 2015-01-12 14:08 - 00000000 ____D () C:\Users\Sam
2015-03-28 19:35 - 2015-02-25 17:28 - 00000000 ____D () C:\BOSS
2015-03-28 19:35 - 2015-02-20 16:56 - 00000000 ____D () C:\Users\Sam\Heaven
2015-03-28 19:35 - 2015-02-18 13:49 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2015-03-28 19:35 - 2015-01-15 16:51 - 00000000 ____D () C:\Windows\system32\appraiser
2015-03-28 19:35 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-03-28 19:35 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-03-28 19:35 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\security
2015-03-28 19:35 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2015-03-28 19:35 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2015-03-28 19:34 - 2015-01-30 18:24 - 00000000 ____D () C:\ProgramData\Package Cache
2015-03-28 19:34 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-03-28 05:44 - 2015-01-12 15:00 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2015-03-28 05:44 - 2015-01-12 15:00 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2015-03-28 05:43 - 2015-01-12 15:00 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2015-03-28 05:43 - 2015-01-12 15:00 - 01570672 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2015-03-27 18:21 - 2015-02-20 16:56 - 01065984 _____ () C:\Users\Sam\AppData\Local\file__0.localstorage
2015-03-26 16:35 - 2015-01-12 14:48 - 00000000 ____D () C:\Users\Sam\AppData\Local\Spotify
2015-03-23 19:03 - 2015-02-08 19:55 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\vlc
2015-03-23 17:50 - 2014-12-30 17:25 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2015-03-23 16:29 - 2015-02-06 22:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2015-03-23 16:29 - 2015-02-06 22:20 - 00000000 ____D () C:\Program Files\CPUID
2015-03-21 17:59 - 2015-01-13 19:31 - 00000000 ____D () C:\Windows\SysWOW64\directx
2015-03-20 23:22 - 2015-01-12 14:12 - 00002182 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-03-13 21:41 - 2015-02-12 18:55 - 02906928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-03-13 21:41 - 2015-01-12 14:56 - 16022016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-03-13 21:41 - 2015-01-12 14:56 - 03303448 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-03-13 21:41 - 2014-12-30 17:37 - 00073872 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-03-13 21:41 - 2014-12-30 17:37 - 00060560 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2015-03-13 21:41 - 2014-12-30 17:27 - 18580512 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-03-13 21:41 - 2014-12-30 17:27 - 14121624 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-03-13 21:41 - 2014-12-30 17:27 - 00027441 _____ () C:\Windows\system32\nvinfo.pb
2015-03-13 18:16 - 2014-12-30 17:37 - 06861968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-03-13 18:16 - 2014-12-30 17:37 - 03526856 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2015-03-13 18:16 - 2014-12-30 17:37 - 02559808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2015-03-13 18:16 - 2014-12-30 17:37 - 00935056 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-03-13 18:16 - 2014-12-30 17:37 - 00386248 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-03-13 18:16 - 2014-12-30 17:37 - 00062608 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-03-12 12:59 - 2009-07-14 06:45 - 00267816 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-03-12 12:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2015-03-12 12:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2015-03-12 02:29 - 2015-01-14 02:28 - 00000000 ____D () C:\Windows\system32\MRT
2015-03-12 02:25 - 2015-01-14 02:28 - 122905848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-03-11 21:29 - 2015-02-13 17:34 - 00000000 ____D () C:\ProgramData\fce63c80000058c4
2015-03-11 15:10 - 2014-12-30 17:37 - 04246327 _____ () C:\Windows\system32\nvcoproc.bin
2015-03-10 18:12 - 2014-08-20 19:04 - 00819896 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2015-03-09 18:04 - 2015-01-13 19:40 - 00143725 _____ () C:\Windows\DirectX.log
2015-03-06 16:44 - 2015-02-28 13:33 - 00000965 _____ () C:\Users\Sam\Desktop\Skyrim (SKSE).lnk
2015-03-06 01:29 - 2015-02-21 17:04 - 00000897 _____ () C:\Users\Public\Desktop\Nexus Mod Manager.lnk
2015-03-06 01:29 - 2015-02-21 17:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager
2015-03-06 01:29 - 2015-02-21 17:04 - 00000000 ____D () C:\Program Files\Nexus Mod Manager
2015-03-04 17:18 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\tracing

==================== Files in the root of some directories =======

2015-02-13 12:30 - 2015-03-31 22:37 - 0000020 _____ () C:\Users\Sam\AppData\Roaming\appdataFr3.bin
2015-02-20 16:56 - 2015-03-27 18:21 - 1065984 _____ () C:\Users\Sam\AppData\Local\file__0.localstorage
2015-03-17 21:24 - 2015-03-17 21:24 - 0007663 _____ () C:\Users\Sam\AppData\Local\Resmon.ResmonCfg

Some content of TEMP:
====================
C:\Users\Sam\AppData\Local\Temp\07fc9beb41a443fab5734439755b93fd.dll
C:\Users\Sam\AppData\Local\Temp\1c31dfcf2a7145efbbde3a9c75ba652a.exe
C:\Users\Sam\AppData\Local\Temp\249c9e31c8624b03aee045bddad10529.dll
C:\Users\Sam\AppData\Local\Temp\342ba19739a8481bb9989a8a7dea70e2.dll
C:\Users\Sam\AppData\Local\Temp\3aa385858c524e6abe4478692cfcd35c.dll
C:\Users\Sam\AppData\Local\Temp\4554b870f6e941c6bd77c137927fca87.dll
C:\Users\Sam\AppData\Local\Temp\49754b49f4284bb792f3217aa2d02116.exe
C:\Users\Sam\AppData\Local\Temp\5abf9b72059f5.exe
C:\Users\Sam\AppData\Local\Temp\7210da1.exe
C:\Users\Sam\AppData\Local\Temp\96ac420a8bbf42e7975d229ca0796dce.dll
C:\Users\Sam\AppData\Local\Temp\Bass.dll
C:\Users\Sam\AppData\Local\Temp\Bass.Net.dll
C:\Users\Sam\AppData\Local\Temp\bassmod.dll
C:\Users\Sam\AppData\Local\Temp\c32f3171a8424c00bc919a5839e15da6.exe
C:\Users\Sam\AppData\Local\Temp\c7a528963db344edaebf5427fcfb37a0.exe
C:\Users\Sam\AppData\Local\Temp\ICReinstall_adobe-photoshop-cs6.exe
C:\Users\Sam\AppData\Local\Temp\Nexus Mod Manager-0.53.4.exe
C:\Users\Sam\AppData\Local\Temp\Nexus Mod Manager-0.53.5.exe
C:\Users\Sam\AppData\Local\Temp\Nexus Mod Manager-0.53.7.exe
C:\Users\Sam\AppData\Local\Temp\Nv3DVisionIePlugin.dll
C:\Users\Sam\AppData\Local\Temp\Nv3DVisionIePlugin64.dll
C:\Users\Sam\AppData\Local\Temp\Nv3DVStreaming.dll
C:\Users\Sam\AppData\Local\Temp\Nv3DVStreaming64.dll
C:\Users\Sam\AppData\Local\Temp\Nv3DVStreamingIePlugin.dll
C:\Users\Sam\AppData\Local\Temp\Nv3DVStreamingIePlugin64.dll
C:\Users\Sam\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Sam\AppData\Local\Temp\nvStInst.exe
C:\Users\Sam\AppData\Local\Temp\OnlineBackup.exe
C:\Users\Sam\AppData\Local\Temp\sqlite3.exe
C:\Users\Sam\AppData\Local\Temp\vcredist_x64.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-03-26 22:41

==================== End Of Log ============================
         

--- --- ---

Servus,

# Option : Suchlauf

Hast du die Funde mit AdwCleaner auch entfernen lassen... ??

Wenn ja, warum postest du dann die falsche Logdatei?

Wenn nicht, bitte AdwCleaner nochmal laufen lassen, alle Funde entfernen und FRST neu wie im letzten Post beschrieben ausführen.

Stimmt ups mein Fehler ^^

# AdwCleaner v4.200 - Bericht erstellt 01/04/2015 um 23:46:42
# Aktualisiert 29/03/2015 von Xplode
# Datenbank : 2015-03-29.1 [Server]
# Betriebssystem : Windows 7 Professional Service Pack 1 (x64)
# Benutzername : Sam - SAM-PC
# Gestarted von : C:\Users\Sam\Desktop\AdwCleaner_4.200.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\FileCure
Ordner Gelöscht : C:\ProgramData\fce63c80000058c4
Ordner Gelöscht : C:\Program Files (x86)\eSupport.com
Ordner Gelöscht : C:\Program Files (x86)\TampaGeneration
Ordner Gelöscht : C:\Program Files (x86)\DriverToolkit
Ordner Gelöscht : C:\Users\Sam\AppData\Local\eSupport.com
Ordner Gelöscht : C:\Users\Sam\AppData\Local\DriverToolkit
Ordner Gelöscht : C:\Users\Sam\AppData\Roaming\Solvusoft
Ordner Gelöscht : C:\Users\Sam\AppData\Roaming\Mozilla\Firefox\Profiles\wtx5zb61.default\Extensions\0Gi7n8O9zW@m.com
Ordner Gelöscht : C:\Users\Sam\AppData\Roaming\Mozilla\Firefox\Profiles\wtx5zb61.default\Extensions\6ekT@b.com
Ordner Gelöscht : C:\Users\Sam\AppData\Roaming\Mozilla\Firefox\Profiles\wtx5zb61.default\Extensions\s7NNr@D.com
Ordner Gelöscht : C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho
Datei Gelöscht : C:\Windows\System32\roboot64.exe
Datei Gelöscht : C:\Users\Sam\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Startfenster.lnk
Datei Gelöscht : C:\Users\Sam\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Startfenster.lnk
Datei Gelöscht : C:\Users\Sam\AppData\Roaming\Microsoft\Windows\Start Menu\Startfenster.lnk

***** [ Geplante Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho
Schlüssel Gelöscht : HKLM\SOFTWARE\213095bd-c2c2-faa3-f79d-97fdf33921d4
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{5D6736D5-0D77-46CE-9906-C4B2C679BF88}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D0277F7A-06FF-4FB6-AA6B-080876ED6422}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D0277F7A-06FF-4FB6-AA6B-080876ED6422}
Schlüssel Gelöscht : HKCU\Software\eSupport.com
Schlüssel Gelöscht : HKCU\Software\ParetoLogic
Schlüssel Gelöscht : HKCU\Software\DriverToolkit
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gelöscht : HKLM\SOFTWARE\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Schlüssel Gelöscht : HKLM\SOFTWARE\ParetoLogic
Schlüssel Gelöscht : HKLM\SOFTWARE\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\mystartsearch.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.mystartsearch.com

***** [ Internetbrowser ] *****

-\\ Internet Explorer v11.0.9600.17689


-\\ Mozilla Firefox v33.0.1 (x86 de)


-\\ Google Chrome v41.0.2272.101

[C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Gelöscht [Extension] : dbhjdbfgekjfcfkkfjjmlmojhbllhbho

-\\ Chromium v


*************************

AdwCleaner[R0].txt - [13204 Bytes] - [24/02/2015 13:13:53]
AdwCleaner[R1].txt - [6845 Bytes] - [30/03/2015 23:46:12]
AdwCleaner[R2].txt - [5857 Bytes] - [01/04/2015 18:03:30]
AdwCleaner[R3].txt - [4206 Bytes] - [01/04/2015 23:42:52]
AdwCleaner[R4].txt - [4265 Bytes] - [01/04/2015 23:45:41]
AdwCleaner[S0].txt - [3890 Bytes] - [01/04/2015 23:46:42]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3949  Bytes] ##########
         

Servus,


ok, dann bitte jetzt FRST nochmal:

• Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Scan.
• FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
• Poste mir beide Logdateien mit deiner nächsten Antwort.

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015
Ran by Sam at 2015-04-02 16:58:04
Running from C:\Users\Sam\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Kaspersky Anti-Virus (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}
AS: Kaspersky Anti-Virus (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Acer System Information (HKLM-x32\...\{72199E33-4F2A-4B7F-8E25-95DDDD50A678}) (Version: 1.0.0 - Acer)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.9.0.465 - Adobe Systems Incorporated)
Adobe Photoshop CC 2014 (HKLM-x32\...\{D7A4F897-B20A-42D0-862D-CB5F6DB7391D}) (Version: 15.2.2 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
ArchiCrypt Ultimate RAM-Disk 4 Version 4.6.4.4291 (HKLM\...\ArchiCrypt Ultimate RAM-Disk 4_is1) (Version: 4.6.4.4291 - Softwareentwicklung Patric Remus - ArchiCrypt)
Battlefield™ Hardline-Beta (HKLM-x32\...\{F5526D9D-13AD-4270-8707-AC921D168299}) (Version: 1.0.0.1 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.6.2 - EA Digital Illusions CE AB)
BeamNG.drive (HKLM-x32\...\Steam App 284160) (Version:  - BeamNG)
Blacklight: Retribution (HKLM-x32\...\Steam App 209870) (Version:  - Builder Box, LLC)
BOSS (HKLM-x32\...\BOSS) (Version: 2.1.1 - BOSS Development Team)
Car Mechanic Simulator 2014 (HKLM-x32\...\Car Mechanic Simulator 2014_is1) (Version:  - )
Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version:  - Cheat Engine)
Cities: Skylines (HKLM-x32\...\Steam App 255710) (Version:  - Colossal Order)
CPUID CPU-Z 1.71.1 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
CPUID HWMonitor 1.27 (HKLM\...\CPUID HWMonitor_is1) (Version:  - )
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
DAEMON Tools Ultra (HKLM-x32\...\DAEMON Tools Ultra) (Version: 3.0.0.0309 - Disc Soft Ltd)
Dead Island: Epidemic (HKLM-x32\...\Steam App 222900) (Version:  - Stunlock Studios)
DRAGON BALL XENOVERSE (HKLM-x32\...\Steam App 323470) (Version:  - DIMPS)
Euro Truck Simulator 2 (HKLM-x32\...\Steam App 227300) (Version:  - SCS Software)
Evolve (HKLM-x32\...\Steam App 273350) (Version:  - Turtle Rock Studios)
Fallout: New Vegas (HKLM-x32\...\Steam App 22380) (Version:  - Obsidian Entertainment)
FOMM version 0.14 (HKLM-x32\...\{072C2AEF-16B2-46B7-BA7F-D0CAA7B4F89F}_is1) (Version: 0.14 - Prideslayer)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 41.0.2272.101 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Heaven Benchmark version 4.0 (HKLM-x32\...\Unigine Heaven Benchmark (Basic Edition)_is1) (Version: 4.0 - Unigine Corp.)
Insurgency (HKLM-x32\...\Steam App 222880) (Version:  - New World Interactive)
Interstellar Marines (HKLM-x32\...\Steam App 236370) (Version:  - Zero Point Software)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Joulemeter (HKLM-x32\...\{E043568C-1745-4C69-9D52-43F6E79EB03B}) (Version: 1.2.0 - Microsoft Research)
Kaspersky Anti-Virus (HKLM-x32\...\InstallWIX_{8ED07EBD-22AD-415A-B71E-C1AD86862C2E}) (Version: 15.0.1.415 - Kaspersky Lab)
Kaspersky Anti-Virus (x32 Version: 15.0.1.415 - Kaspersky Lab) Hidden
Kerbal Space Program (HKLM-x32\...\Steam App 220200) (Version:  - Squad)
Life Is Strange™ (HKLM-x32\...\Steam App 319630) (Version:  - DONTNOD Entertainment)
LOOT (HKLM-x32\...\LOOT) (Version: 0.6.1 - LOOT Development Team)
Malwarebytes Anti-Malware Version 2.1.4.1018 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.4.1018 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Excel Viewer (HKLM-x32\...\{95120000-003F-0409-0000-0000000FF1CE}) (Version: 12.0.6219.1000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{01db25f3-1b76-4d97-88c8-1c90634d88fb}) (Version: 11.0.60610.1 - Корпорация Майкрософт)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Mozilla Firefox 33.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.0.1 (x86 de)) (Version: 33.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.0.1 - Mozilla)
MSI Afterburner 4.1.0 (HKLM-x32\...\Afterburner) (Version: 4.1.0 - MSI Co., LTD)
MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.6 - F.J. Wechselberger)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.53.7 - Black Tree Gaming)
NVIDIA 3D Vision Controller-Treiber 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 347.09 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 347.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.88 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.4.1.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.1.21 - NVIDIA Corporation)
NVIDIA Grafiktreiber 347.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.88 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
OkayFreedom (HKLM-x32\...\{3F3FB10C-7175-4D38-9335-3488B89C12AF}) (Version: 1.4.3 - Steganos Software GmbH)
Origin (HKLM-x32\...\Origin) (Version: 9.5.5.2850 - Electronic Arts, Inc.)
PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version:  - OVERKILL - a Starbreeze Studio.)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.994 - Even Balance, Inc.)
RegiStax 6 (HKU\S-1-5-21-314491385-833715928-1570723329-1001\...\RegiStax 6) (Version:  - )
RegiStax 6.1.0.8 update (HKU\S-1-5-21-314491385-833715928-1570723329-1001\...\RegiStax 6.1.0.8 update) (Version:  - )
ROCCAT Kova[+] Mouse Driver (HKLM-x32\...\{A86DDFE3-F661-461C-9BF2-876AC2CA57DE}) (Version: 1.10 - Roccat GmbH)
SHIELD Streaming (Version: 4.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.1.21 - NVIDIA Corporation) Hidden
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
SpaceEngine Version 0.9.7.2 (HKLM-x32\...\{E65FD500-9218-44EC-9586-D39FAB4DFDAF}_is1) (Version: 0.9.7.2 - SpaceEngine)
Spotify (HKU\S-1-5-21-314491385-833715928-1570723329-1001\...\Spotify) (Version: 0.9.15.27.g87efe634 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 6.0.1170 - SUPERAntiSpyware.com)
TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version:  - TechPowerUp)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
TrackMania² Stadium (HKLM-x32\...\Steam App 232910) (Version:  - Nadeo)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
War Thunder (HKLM-x32\...\Steam App 236390) (Version:  - Gaijin Entertainment)
WinRAR 5.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)
World of Warships (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C814EU}_is1) (Version:  - Wargaming.net)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

29-03-2015 15:31:01 Windows Update
29-03-2015 20:42:57 ArchiCrypt Ultimate RAM-Disk 4 4.6.4.4291 Installation
30-03-2015 23:52:24 Installed Joulemeter

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {058DEF93-CBE3-4423-A958-D9179CAACD6C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-01-12] (Google Inc.)
Task: {10FA29A9-7B34-4651-BC07-F6FA7B715F88} - \{5E543BA5-DC1E-434E-BEF7-8BABDCCC873D} No Task File <==== ATTENTION
Task: {1EA12BDE-D524-4165-B649-43B2C6642E24} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-01-12] (Google Inc.)
Task: {90BEAE3C-41DF-4474-B99C-7A23C4A5E6A5} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe [2014-12-06] ()
Task: {AF51DFBE-4077-49E0-99A2-828999F6E611} - System32\Tasks\AdobeAAMUpdater-1.0-Sam-PC-Sam => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-09-19] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2014-12-30 17:37 - 2015-03-13 18:16 - 00118472 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-12-19 16:57 - 2014-12-19 16:57 - 01039008 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
2014-12-06 09:03 - 2014-12-06 09:03 - 00565760 _____ () C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
2015-01-31 16:07 - 2015-02-03 16:08 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2015-02-02 16:48 - 2015-02-02 16:48 - 01178112 _____ () C:\ProgramData\{f0f87754-a2c2-aa64-f0f8-87754a2cdd52}\Kaspersky Trial Resetter 2015.exe
2014-08-30 18:12 - 2014-08-30 18:12 - 01269952 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\kpcengine.2.3.dll
2014-12-06 09:01 - 2014-12-06 09:01 - 00071680 _____ () C:\Program Files (x86)\MSI Afterburner\RTMUI.dll
2014-12-06 09:01 - 2014-12-06 09:01 - 00056832 _____ () C:\Program Files (x86)\MSI Afterburner\RTFC.dll
2014-12-06 09:02 - 2014-12-06 09:02 - 00217600 _____ () C:\Program Files (x86)\MSI Afterburner\RTCore.dll
2014-12-06 09:01 - 2014-12-06 09:01 - 00353792 _____ () C:\Program Files (x86)\MSI Afterburner\RTUI.dll
2014-12-06 09:02 - 2014-12-06 09:02 - 00649216 _____ () C:\Program Files (x86)\MSI Afterburner\RTHAL.dll
2015-03-30 20:07 - 2015-03-28 05:45 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-03-20 23:22 - 2015-03-14 12:12 - 01174856 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\libglesv2.dll
2015-03-20 23:22 - 2015-03-14 12:12 - 00080200 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\libegl.dll
2015-03-20 23:22 - 2015-03-14 12:12 - 09278792 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.101\pdf.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-314491385-833715928-1570723329-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Sam\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: GfExperienceService => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: NvNetworkService => 2
MSCONFIG\Services: NvStreamSvc => 2
MSCONFIG\Services: nvsvc => 2
MSCONFIG\Services: Steam Client Service => 3
MSCONFIG\Services: Stereo Service => 2
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Creative Cloud => "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
MSCONFIG\startupreg: AutoVPNConnect => C:\Program Files (x86)\mvhBytes\AutoVPNConnect\AutoVPNConnect.exe
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: DAEMON Tools Ultra Agent => "C:\Program Files (x86)\DAEMON Tools Ultra\DTAgent.exe" -autorun
MSCONFIG\startupreg: GoogleChromeAutoLaunch_FD70E4195A4DE5E83920BD6414A71B17 => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
MSCONFIG\startupreg: NvBackend => "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
MSCONFIG\startupreg: RoccatKova+ => "C:\Program Files (x86)\ROCCAT\Kova[+] Mouse\Kova[+]Monitor.EXE"
MSCONFIG\startupreg: ShadowPlay => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
MSCONFIG\startupreg: Spotify => "C:\Users\Sam\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Sam\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
MSCONFIG\startupreg: Steam => "D:\Steam\steam.exe" -silent
MSCONFIG\startupreg: SUPERAntiSpyware => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

==================== Accounts: =============================

Administrator (S-1-5-21-314491385-833715928-1570723329-500 - Administrator - Disabled)
Gast (S-1-5-21-314491385-833715928-1570723329-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-314491385-833715928-1570723329-1002 - Limited - Enabled)
Sam (S-1-5-21-314491385-833715928-1570723329-1001 - Administrator - Enabled) => C:\Users\Sam

==================== Faulty Device Manager Devices =============

Name: Standardtastatur (PS/2)
Description: Standardtastatur (PS/2)
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardtastaturen)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Unknown Device
Description: Unknown Device
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: (Standard-USB-Hostcontroller)
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (04/02/2015 04:57:06 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/01/2015 11:51:06 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/01/2015 08:49:18 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (04/02/2015 04:57:14 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "PC-PC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{45562AA3-3573-4783-885F-0B65795EDFBD}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (04/01/2015 11:58:50 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "PC-PC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{45562AA3-3573-4783-885F-0B65795EDFBD}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (04/01/2015 11:47:13 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (04/01/2015 11:47:11 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (04/01/2015 11:47:11 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "WMPNetworkSvc" konnte sich nicht als "NT AUTHORITY\NetworkService" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%50

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (04/01/2015 11:47:11 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (04/01/2015 11:47:11 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "WSearch" konnte sich nicht als "NT AUTHORITY\SYSTEM" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%50

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (04/01/2015 11:46:42 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "SAS Core Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 1000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/01/2015 11:46:42 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/01/2015 11:46:42 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "OkayFreedom VPN Starter Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.


Microsoft Office Sessions:
=========================
Error: (04/02/2015 04:57:06 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/01/2015 11:51:06 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/01/2015 08:49:18 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz
Percentage of memory in use: 20%
Total physical RAM: 10231.17 MB
Available physical RAM: 8172.91 MB
Total Pagefile: 20460.53 MB
Available Pagefile: 18006.95 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:465.75 GB) (Free:377.83 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Daten) (Fixed) (Total:465.76 GB) (Free:274.22 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 1B6AB245)
Partition 1: (Active) - (Size=465.8 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Sam (administrator) on SAM-PC on 02-04-2015 16:57:18
Running from C:\Users\Sam\Desktop
Loaded Profiles: Sam (Available profiles: Sam)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
(Softwareentwicklung Remus - ArchiCrypt) C:\Windows\System32\ACRAMDiskHandlerService64R_D4.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avp.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
() C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Steganos Software GmbH) C:\Program Files (x86)\OkayFreedom\OkayFreedomService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
() C:\ProgramData\{f0f87754-a2c2-aa64-f0f8-87754a2cdd52}\Kaspersky Trial Resetter 2015.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Steganos Software GmbH) C:\Program Files (x86)\OkayFreedom\OkayFreedomClient.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avpui.exe
(NVIDIA Corporation) C:\Users\Sam\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\wmi64.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2673296 2015-03-28] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2014-09-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [508800 2014-12-17] (Oracle Corporation)
HKU\S-1-5-21-314491385-833715928-1570723329-1001\...\Run: [GoogleChromeAutoLaunch_FD70E4195A4DE5E83920BD6414A71B17] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [809288 2015-03-14] (Google Inc.)
HKU\S-1-5-21-314491385-833715928-1570723329-1001\...\MountPoints2: {eb19d5b0-a482-11e4-a3d4-00016c6b8f25} - J:\startme.exe
HKU\S-1-5-21-314491385-833715928-1570723329-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [899584 2010-11-21] (Microsoft Corporation)
Startup: C:\Users\Sam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Kaspersky Trial Resetter 2015.lnk
ShortcutTarget: Kaspersky Trial Resetter 2015.lnk -> C:\ProgramData\{f0f87754-a2c2-aa64-f0f8-87754a2cdd52}\Kaspersky Trial Resetter 2015.exe ()
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:55096;https=127.0.0.1:55096
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-314491385-833715928-1570723329-1001\Software\Microsoft\Internet Explorer\Main,Start Page = 
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Content Blocker Plugin -> {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\IEExt\ie_plugin.dll [2015-02-13] (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28] (Oracle Corporation)
BHO: Virtual Keyboard Plugin -> {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\IEExt\ie_plugin.dll [2015-02-13] (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation)
BHO: Safe Money Plugin -> {E3D96E85-529D-4269-AC6A-97CF9E2221E3} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\IEExt\ie_plugin.dll [2015-02-13] (Kaspersky Lab ZAO)
BHO-x32: Content Blocker Plugin -> {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\IEExt\ie_plugin.dll [2015-02-13] (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-16] (Oracle Corporation)
BHO-x32: Virtual Keyboard Plugin -> {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\IEExt\ie_plugin.dll [2015-02-13] (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-16] (Oracle Corporation)
BHO-x32: Safe Money Plugin -> {E3D96E85-529D-4269-AC6A-97CF9E2221E3} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\IEExt\ie_plugin.dll [2015-02-13] (Kaspersky Lab ZAO)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Sam\AppData\Roaming\Mozilla\Firefox\Profiles\wtx5zb61.default
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2015-01-13] (EA Digital Illusions CE AB)
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-28] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-30] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-01-07] (Adobe Systems)
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2015-01-13] (EA Digital Illusions CE AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-16] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-16] (Oracle Corporation)
FF Plugin-x32: @kaspersky.com/content_blocker_6418E0D362104DADA084DC312DFA8ABC -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\content_blocker@kaspersky.com [2015-02-13] ()
FF Plugin-x32: @kaspersky.com/virtual_keyboard_294FF26A1D5B455495946778FDE7CEDB -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com [2015-02-13] ()
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-03-13] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-03-13] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-03] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-03] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-09-12] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-01-07] (Adobe Systems)
FF HKLM-x32\...\Firefox\Extensions: [content_blocker_6418E0D362104DADA084DC312DFA8ABC@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\content_blocker@kaspersky.com
FF Extension: Модуль блокування небезпечних веб-сайтів - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\content_blocker@kaspersky.com [2015-02-13]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard_294FF26A1D5B455495946778FDE7CEDB@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Віртуальна клавіатура - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com [2015-02-13]
FF HKU\S-1-5-21-314491385-833715928-1570723329-1001\...\Firefox\Extensions: [{ba2c82b0-7fa8-11e4-b4a9-0800200c9a66}] - C:\Users\Sam\AppData\Local\Temp\VLC\search.xpi

Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR HomePage: Default -> 
CHR StartupUrls: Default -> "hxxp://www.google.de/"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Magic Actions for YouTube™) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif [2015-01-12]
CHR Extension: (From Dust) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\anelkojiepicmcldgnmkplocifmegpfj [2015-01-12]
CHR Extension: (Google Drive) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-12]
CHR Extension: (OkayFreedom) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\bckipplcmnfhblnpibpbehenelnkpecd [2015-02-02]
CHR Extension: (YouTube) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-12]
CHR Extension: (Google Search) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-12]
CHR Extension: (Video Downloader professional) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2015-01-12]
CHR Extension: (AdBlock) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-02-02]
CHR Extension: (A Journey through Middle-earth) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjgkjeheegjnnmheaflhdocglkiegoni [2015-02-02]
CHR Extension: (Hola Better Internet) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2015-04-02]
CHR Extension: (Linkbucks skip) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjpndobkiolgpnpagkhnknhinnpoajmd [2015-02-02]
CHR Extension: (eBay Extension for Google Chrome™) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\khhckppjhonfmcpegdjdibmngahahhck [2015-02-02]
CHR Extension: (Better Battlelog (BBLog)) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjlfnjepjdmlppapoikepbaabbghofma [2015-02-02]
CHR Extension: (Turbo for YouTube) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhgnmngkgolhffjjdaipkkjbmbnpefef [2015-02-02]
CHR Extension: (Google Wallet) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-02-02]
CHR Extension: (FoxClocks) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\obcbigljfpgappaaofailjjoabiikckk [2015-02-02]
CHR Extension: (Click&Clean App) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdabfienifkbhoihedcgeogidfmibmhp [2015-01-12]
CHR Extension: (Gmail) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-12]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-07-23] (SUPERAntiSpyware.com)
R2 ArchiCrypt Ultimate RAM-Disk 4; C:\Windows\system32\ACRAMDiskHandlerService64R_D4.exe [1580816 2013-10-18] (Softwareentwicklung Remus - ArchiCrypt)
R2 AVP15.0.1; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avp.exe [234520 2014-08-30] (Kaspersky Lab ZAO)
S3 Disc Soft Ultra Bus Service; C:\Program Files (x86)\DAEMON Tools Ultra\DiscSoftBusService.exe [1378576 2014-12-09] (Disc Soft Ltd)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152144 2015-03-28] (NVIDIA Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1878672 2015-03-28] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [22995600 2015-03-28] (NVIDIA Corporation)
R2 OkayFreedom VPN Starter Service; C:\Program Files (x86)\OkayFreedom\OkayFreedomService.exe [326072 2015-02-18] (Steganos Software GmbH)
S3 Origin Client Service; D:\Origin\OriginClientService.exe [1910128 2015-02-02] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2015-02-03] ()
U2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 ACMoFlex64RD4; C:\Windows\system32\drivers\ACMoFlex64RD4.sys [24848 2013-10-18] (Softwareentwicklung Remus - ArchiCrypt.de)
R0 cm_km_w; C:\Windows\System32\DRIVERS\cm_km_w.sys [238288 2013-01-14] (Kaspersky Lab UK Ltd)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2015-02-18] (Disc Soft Ltd)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [468576 2014-03-31] (Kaspersky Lab ZAO)
R2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [46144 2014-07-02] (Kaspersky Lab ZAO)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [150536 2015-02-13] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [246456 2014-08-12] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [819896 2015-03-10] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [30304 2014-02-25] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [28768 2014-03-28] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55872 2014-06-05] (Kaspersky Lab ZAO)
R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [77512 2015-02-13] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [179776 2014-07-09] (Kaspersky Lab ZAO)
S3 KovaPlusFltr; C:\Windows\System32\drivers\KovaPlusFltr.sys [15104 2010-01-25] (ROCCAT Development, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-03-17] (Malwarebytes Corporation)
R3 Neo_VPN; C:\Windows\System32\DRIVERS\Neo_0078.sys [28768 2015-01-30] (SoftEther VPN Project at University of Tsukuba, Japan.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-03-28] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13368 2013-03-11] ()
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
S3 GPU-Z; \??\C:\Users\Sam\AppData\Local\Temp\GPU-Z.sys [X]
U4 klkbdflt2; system32\DRIVERS\klkbdflt2.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-02 16:57 - 2015-04-02 16:57 - 00020525 _____ () C:\Users\Sam\Desktop\FRST.txt
2015-04-01 18:20 - 2015-04-01 18:20 - 00002516 _____ () C:\Users\Sam\Desktop\MBAM.txt
2015-04-01 18:13 - 2015-04-01 18:13 - 00002396 _____ () C:\Users\Sam\Desktop\JRT.txt
2015-04-01 14:40 - 2015-04-01 14:40 - 00007229 _____ () C:\Users\Sam\Downloads\XFeu6_Hi-engine&Hi-TransMission.scs
2015-03-31 22:05 - 2015-03-31 22:05 - 00000000 ____D () C:\Users\Sam\Desktop\PhysX Demo
2015-03-31 22:04 - 2015-03-31 22:04 - 04840320 _____ () C:\Users\Sam\Downloads\FLEX-0.25.7z
2015-03-31 17:57 - 2015-02-24 19:13 - 15651616 _____ () C:\Users\Sam\Desktop\SuperMario64HD.exe
2015-03-31 17:55 - 2015-03-31 17:56 - 29606756 _____ () C:\Users\Sam\Downloads\SuperMario64HD_Win.zip
2015-03-31 00:23 - 2015-03-31 00:23 - 00000970 _____ () C:\Users\Sam\Desktop\TechPowerUp GPU-Z.lnk
2015-03-31 00:23 - 2015-03-31 00:23 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TechPowerUp GPU-Z
2015-03-31 00:23 - 2015-03-31 00:23 - 00000000 ____D () C:\Program Files (x86)\GPU-Z
2015-03-31 00:22 - 2015-03-31 00:22 - 01713824 _____ (techPowerUp (www.techpowerup.com)) C:\Users\Sam\Downloads\GPU-Z.0.8.2.exe
2015-03-30 23:52 - 2015-03-30 23:52 - 00944128 _____ () C:\Users\Sam\Downloads\JoulemeterSetup.msi
2015-03-30 23:52 - 2015-03-30 23:52 - 00003017 _____ () C:\Users\Sam\Desktop\Joulemeter.lnk
2015-03-30 23:52 - 2015-03-30 23:52 - 00003017 _____ () C:\Users\Sam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Joulemeter.lnk
2015-03-30 23:45 - 2015-03-30 23:44 - 01389097 _____ (Thisisu) C:\Users\Sam\Desktop\JRT.exe
2015-03-30 23:44 - 2015-03-30 23:44 - 01389097 _____ (Thisisu) C:\Users\Sam\Downloads\JRT.exe
2015-03-30 23:42 - 2015-03-30 23:42 - 02208768 _____ () C:\Users\Sam\Desktop\AdwCleaner_4.200.exe
2015-03-30 16:52 - 2015-03-30 16:52 - 605318222 _____ () C:\Users\Sam\Downloads\[ETS2Downloads.com]complicated-roads-map.rar
2015-03-30 16:26 - 2015-03-30 16:27 - 11336875 _____ () C:\Users\Sam\Downloads\_MOD-ETS2__Real_company_logo_v2.1.rar
2015-03-30 16:22 - 2015-03-30 16:22 - 148210391 _____ () C:\Users\Sam\Downloads\[ETS2Downloads.com]mega-tandem.rar
2015-03-30 16:20 - 2015-03-30 16:20 - 10499793 _____ () C:\Users\Sam\Downloads\[ETS2Downloads.com]DastagirSweetFX.rar
2015-03-30 16:18 - 2015-03-30 16:26 - 143660085 _____ () C:\Users\Sam\Downloads\Real Life Graphic + Lights.rar
2015-03-30 16:15 - 2015-03-30 16:15 - 02277893 _____ () C:\Users\Sam\Downloads\[ETS2Downloads.com]turkey-horn-sound-for-all-trucks.scs
2015-03-30 16:13 - 2015-03-30 16:13 - 00021126 _____ () C:\Users\Sam\Downloads\[ETS2Downloads.com]Engine_Balance_Overhaul_v1.zip
2015-03-30 15:25 - 2015-04-02 16:57 - 00000000 ____D () C:\FRST
2015-03-30 15:25 - 2015-04-01 18:24 - 00078509 _____ () C:\Users\Sam\Downloads\FRST.txt
2015-03-30 15:25 - 2015-04-01 18:24 - 00021816 _____ () C:\Users\Sam\Downloads\Addition.txt
2015-03-30 15:24 - 2015-03-30 15:24 - 02095616 _____ (Farbar) C:\Users\Sam\Desktop\FRST64.exe
2015-03-29 20:43 - 2015-03-29 20:43 - 00001168 _____ () C:\Users\Sam\Desktop\ArchiCrypt Ultimate RAM-Disk 4.lnk
2015-03-29 20:43 - 2015-03-29 20:43 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\ArchiCrypt Ultimate RAM-Disk3
2015-03-29 20:43 - 2015-03-29 20:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArchiCrypt
2015-03-29 20:43 - 2015-03-29 20:43 - 00000000 ____D () C:\ProgramData\ArchiCrypt Ultimate RAM-Disk
2015-03-29 20:43 - 2013-10-18 11:10 - 01580816 _____ (Softwareentwicklung Remus - ArchiCrypt) C:\Windows\system32\ACRAMDiskHandlerService64R_D4.exe
2015-03-29 20:43 - 2013-10-18 11:10 - 00024848 _____ (Softwareentwicklung Remus - ArchiCrypt.de) C:\Windows\system32\Drivers\ACMoFlex64RD4.sys
2015-03-29 20:43 - 2013-10-18 11:09 - 00170256 _____ (Softwareentwicklung Remus - ArchiCrypt.de) C:\Windows\system32\ACMFEngine64RD4.dll
2015-03-29 20:42 - 2015-03-29 20:42 - 00000000 ____D () C:\Program Files\ArchiCrypt
2015-03-29 20:41 - 2015-03-29 20:41 - 12643052 _____ () C:\Users\Sam\Downloads\ACUltimateRAMDisk464.zip
2015-03-28 23:33 - 2015-03-28 23:33 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\SUPERAntiSpyware.com
2015-03-28 23:28 - 2015-03-28 23:28 - 00008254 _____ () C:\Users\Sam\Desktop\hijackthis.log
2015-03-28 23:17 - 2015-03-28 23:17 - 00388608 _____ (Trend Micro Inc.) C:\Users\Sam\Downloads\HijackThis.exe
2015-03-28 23:17 - 2015-03-28 23:17 - 00008254 _____ () C:\Users\Sam\Downloads\hijackthis.log
2015-03-28 23:06 - 2015-04-01 18:10 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-03-28 23:06 - 2015-03-28 23:06 - 00001109 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-03-28 23:06 - 2015-03-28 23:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-03-28 23:06 - 2015-03-28 23:06 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-03-28 23:06 - 2015-03-17 07:15 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-03-28 23:06 - 2015-03-17 07:15 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-03-28 23:06 - 2015-03-17 07:15 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-03-28 23:05 - 2015-03-28 23:05 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\Sam\Downloads\mbam-setup-2.1.4.1018.exe
2015-03-28 20:00 - 2015-03-13 17:38 - 00622224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-03-28 19:43 - 2015-03-28 19:58 - 309143408 _____ (NVIDIA Corporation) C:\Users\Sam\Downloads\347.88-desktop-win8-win7-winvista-64bit-international-whql.exe
2015-03-28 19:10 - 2015-03-28 19:10 - 00002580 _____ () C:\Users\Sam\Downloads\turbo10.zip
2015-03-28 17:16 - 2015-03-28 17:17 - 30151898 _____ () C:\Users\Sam\Downloads\ROCCAT_Kova[+]_DRV1.25 (1).zip
2015-03-28 17:10 - 2015-03-28 17:10 - 00199489 _____ () C:\Users\Sam\Downloads\CCEnhancer-4.2-mulitlingual.zip
2015-03-28 17:09 - 2015-03-28 19:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-03-28 14:19 - 2015-03-28 19:35 - 00000000 ____D () C:\Users\Sam\Desktop\BIOS_ACER_R01.A3_Windows_ASM7720
2015-03-28 14:18 - 2015-03-28 14:18 - 00948720 _____ () C:\Users\Sam\Downloads\BIOS_Acer_R01.A3_A_A (2).zip
2015-03-28 13:54 - 2015-03-28 13:54 - 00015201 _____ () C:\Users\Sam\Downloads\MemTest41.zip
2015-03-28 13:17 - 2015-03-28 19:35 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\Wise Registry Cleaner
2015-03-28 13:17 - 2015-03-28 13:17 - 00000000 ____D () C:\Program Files (x86)\Wise
2015-03-28 13:13 - 2015-03-28 13:13 - 00000000 ____D () C:\Users\Sam\AppData\Local\Microsoft Research
2015-03-28 13:12 - 2015-03-28 13:12 - 00000000 ____D () C:\Program Files (x86)\Microsoft Research
2015-03-28 12:33 - 2015-03-28 12:33 - 02357106 _____ () C:\Users\Sam\Downloads\Chipset_Intel_9.1.1.1015_W7x64_A (1).zip
2015-03-28 12:32 - 2015-03-28 12:32 - 01516243 _____ () C:\Users\Sam\Downloads\Modem_liteon_2.2.95_W7x64_A.zip
2015-03-28 12:32 - 2015-03-28 12:32 - 00000000 ____D () C:\Windows\Options
2015-03-28 12:26 - 2015-03-28 12:26 - 03008450 _____ () C:\Users\Sam\Downloads\X58ExpressChipset9.3.0.1019.zip
2015-03-28 12:23 - 2015-03-28 12:23 - 02636255 _____ () C:\Users\Sam\Downloads\875PChipsetIntel865ChipsetFamily848PChi9.2.0.1025.zip
2015-03-28 12:18 - 2015-03-28 14:52 - 00000136 _____ () C:\Users\Sam\Win8UpgradeKit_28.03.2015.LOG
2015-03-27 20:01 - 2015-03-27 20:01 - 00000000 ____D () C:\Program Files\Intel
2015-03-27 18:26 - 2015-03-27 18:26 - 00002844 _____ () C:\Users\Sam\Unigine_Heaven_Benchmark_4.0_20150327_1726.html
2015-03-27 17:04 - 2015-03-28 19:35 - 00000000 ____D () C:\Users\Sam\AppData\Local\GOG.com
2015-03-27 17:03 - 2015-03-27 17:03 - 03701856 _____ (GOG.com ) C:\Users\Sam\Downloads\Setup_Downloader_3.6.0_stable.exe
2015-03-27 15:36 - 2015-03-27 15:36 - 00000000 ____D () C:\Program Files (x86)\Intel
2015-03-27 15:36 - 2015-03-27 15:36 - 00000000 ____D () C:\Intel
2015-03-27 15:35 - 2015-03-27 15:35 - 02357106 _____ () C:\Users\Sam\Downloads\Chipset_Intel_9.1.1.1015_W7x64_A.zip
2015-03-27 15:34 - 2015-03-28 00:40 - 00016689 _____ () C:\Users\Sam\Win8UpgradeKit_27.03.2015.LOG
2015-03-27 15:32 - 2015-03-27 15:33 - 28777589 _____ () C:\Users\Sam\Downloads\Win8UpgAsstTool_1.00.3001.zip
2015-03-27 15:28 - 2015-03-27 15:28 - 00948720 _____ () C:\Users\Sam\Downloads\BIOS_Acer_R01.A3_A_A (1).zip
2015-03-27 15:18 - 2015-03-27 15:19 - 00132014 _____ () C:\Users\Sam\Downloads\Core2MaxPerf-110.zip
2015-03-27 14:07 - 2015-03-28 15:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI
2015-03-27 14:07 - 2015-03-28 15:03 - 00000000 ____D () C:\Program Files (x86)\MSI
2015-03-27 14:07 - 2015-03-27 14:07 - 00000000 ____D () C:\MSI
2015-03-27 14:06 - 2015-03-27 14:07 - 36210245 _____ () C:\Users\Sam\Downloads\MSIAfterburnerSetup.zip
2015-03-27 14:05 - 2015-03-27 14:06 - 10746455 _____ () C:\Users\Sam\Downloads\gamingapp_4.0.0.04.zip
2015-03-27 14:05 - 2015-03-27 14:06 - 10594870 _____ () C:\Users\Sam\Downloads\LiveUpdate.zip
2015-03-26 21:30 - 2015-03-28 19:35 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2015-03-26 21:30 - 2015-03-28 19:35 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2015-03-26 17:58 - 2015-03-28 19:35 - 00000000 ____D () C:\Program Files\Registry System Wizard.NET
2015-03-26 17:58 - 2015-03-26 17:58 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\WinFAQ
2015-03-26 17:52 - 2015-03-26 17:52 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\STEITZ® IT-Solutions
2015-03-26 17:52 - 2015-03-26 17:52 - 00000000 ____D () C:\Users\Sam\AppData\Local\STEITZ®_IT-Solutions
2015-03-26 17:52 - 2015-03-26 17:52 - 00000000 ____D () C:\ProgramData\STEITZ® IT-Solutions
2015-03-26 17:52 - 2015-03-26 17:52 - 00000000 ____D () C:\ProgramData\Caphyon
2015-03-26 17:52 - 2015-03-26 17:52 - 00000000 ____D () C:\Program Files (x86)\STEITZ IT-Solutions
2015-03-26 17:50 - 2015-03-26 17:51 - 20208530 _____ () C:\Users\Sam\Downloads\devmanpro11.zip
2015-03-26 00:29 - 2013-10-02 02:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2015-03-26 00:29 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2015-03-26 00:28 - 2012-08-23 16:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2015-03-23 17:49 - 2015-03-13 21:41 - 32114888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 25460880 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 24775368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 20466376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 17258024 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 13297144 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 13210080 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 10775080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 10715864 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 10262160 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-03-23 17:49 - 2015-03-13 21:41 - 03611792 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 03249352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 01896136 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434788.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 01557648 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434788.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00997856 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00970384 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00944784 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00930448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00909512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00878328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00496272 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00400584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00390288 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00354112 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00346824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00306208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00178512 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00164568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-03-23 16:38 - 2015-03-23 16:38 - 00000000 ____D () C:\Users\Sam\Intel
2015-03-23 16:37 - 2015-03-23 16:38 - 18415338 _____ () C:\Users\Sam\Downloads\intel_rst_12_9_4_1000_whql.zip
2015-03-23 16:34 - 2015-03-23 16:34 - 02448688 _____ (Megaify Software ) C:\Users\Sam\Downloads\DriverToolkitInstaller.exe
2015-03-23 16:30 - 2015-03-23 16:31 - 01196816 _____ (Copyright © 2013 eSupport.com, Inc • All Rights Reserved ) C:\Users\Sam\Downloads\driveragent-setup-1213.exe
2015-03-23 16:29 - 2015-03-23 16:29 - 00000937 _____ () C:\Users\Public\Desktop\CPUID HWMonitor.lnk
2015-03-23 16:28 - 2015-03-23 16:28 - 01191992 _____ ( ) C:\Users\Sam\Downloads\hwmonitor_1.27.exe
2015-03-22 23:33 - 2015-03-28 19:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2015-03-22 23:33 - 2015-03-28 19:35 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com
2015-03-22 23:33 - 2015-03-28 19:35 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2015-03-22 23:33 - 2015-03-22 23:33 - 00001815 _____ () C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk
2015-03-22 23:32 - 2015-03-22 23:32 - 21459360 _____ (SUPERAntiSpyware) C:\Users\Sam\Downloads\SUPERAntiSpyware.exe
2015-03-22 21:10 - 2015-03-28 19:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ROCCAT
2015-03-22 21:10 - 2015-03-28 19:34 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-03-22 21:10 - 2015-03-22 21:10 - 00000000 ____D () C:\Program Files (x86)\ROCCAT
2015-03-22 21:09 - 2015-03-22 21:10 - 30151898 _____ () C:\Users\Sam\Downloads\ROCCAT_Kova[+]_DRV1.25.zip
2015-03-22 20:04 - 2015-03-23 16:20 - 00108859 _____ () C:\Users\Sam\Downloads\usbdeview_241-x64.zip
2015-03-21 17:59 - 2015-03-21 17:59 - 00000722 _____ () C:\Users\Sam\Desktop\StarCitizen.lnk
2015-03-21 17:59 - 2015-03-21 17:59 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StarCitizen
2015-03-21 17:56 - 2015-03-21 17:57 - 38885078 _____ () C:\Users\Sam\Downloads\StarCitizenInstaller (1).exe
2015-03-20 15:19 - 2015-03-20 15:22 - 00008156 _____ () C:\Users\Sam\Downloads\software_removal_tool.log
2015-03-17 21:24 - 2015-03-17 21:24 - 00007663 _____ () C:\Users\Sam\AppData\Local\Resmon.ResmonCfg
2015-03-17 19:30 - 2015-03-17 19:30 - 00000202 _____ () C:\Users\Sam\Desktop\PAYDAY 2.url
2015-03-16 20:19 - 2015-03-16 20:19 - 00536064 _____ () C:\Users\Sam\Downloads\youtu.be-J7bANMHnPUk.webp
2015-03-13 18:59 - 2015-03-28 19:34 - 00000000 ____D () C:\Games
2015-03-13 18:59 - 2015-03-13 18:59 - 00000802 _____ () C:\Users\Public\Desktop\World of Warships.lnk
2015-03-13 18:59 - 2015-03-13 18:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warships
2015-03-13 18:56 - 2015-03-13 18:56 - 09040664 _____ (Wargaming.net ) C:\Users\Sam\Downloads\WoWS_internet_install_eu.exe
2015-03-13 14:52 - 2015-03-13 14:52 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-03-13 14:50 - 2015-03-13 14:51 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Sam\Downloads\mbam-setup-2.0.4.1028.exe
2015-03-13 00:23 - 2015-03-13 00:23 - 00000000 ____D () C:\Users\Sam\Desktop\SuperMario64HD_Data
2015-03-12 21:42 - 2015-03-12 21:42 - 10580340 _____ () C:\Users\Sam\Downloads\tardsplaya_1.0.0.5.7z
2015-03-12 21:42 - 2015-03-12 21:42 - 00000000 ____D () C:\Users\Sam\Desktop\Tardsplaya
2015-03-11 23:03 - 2015-03-11 23:03 - 01174216 _____ (Igor Pavlov) C:\Users\Sam\Desktop\DDU v14.0.0.1.exe
2015-03-11 23:03 - 2015-03-11 23:03 - 00266959 _____ (Igor Pavlov) C:\Users\Sam\Downloads\GiveMePower v2.1.0.0.exe
2015-03-11 23:03 - 2015-03-11 23:03 - 00266959 _____ (Igor Pavlov) C:\Users\Sam\Desktop\GiveMePower v2.1.0.0.exe
2015-03-11 23:01 - 2015-03-11 23:03 - 01174216 _____ (Igor Pavlov) C:\Users\Sam\Downloads\DDU v14.0.0.1.exe
2015-03-11 16:05 - 2015-02-20 06:41 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-03-11 16:05 - 2015-02-20 06:40 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-03-11 16:05 - 2015-02-20 06:40 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-03-11 16:05 - 2015-02-20 06:40 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-03-11 16:05 - 2015-02-20 06:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-03-11 16:05 - 2015-02-20 06:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-03-11 16:05 - 2015-02-20 06:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-03-11 16:05 - 2015-02-20 06:12 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-03-11 16:05 - 2015-02-20 05:29 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-03-11 16:05 - 2015-02-20 05:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-03-11 16:05 - 2015-02-03 05:34 - 05554104 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-03-11 16:05 - 2015-02-03 05:34 - 00693176 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-03-11 16:05 - 2015-02-03 05:34 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-03-11 16:05 - 2015-02-03 05:33 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-03-11 16:05 - 2015-02-03 05:31 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-03-11 16:05 - 2015-02-03 05:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-03-11 16:05 - 2015-02-03 05:30 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-03-11 16:05 - 2015-02-03 05:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 16:05 - 2015-02-03 05:30 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-03-11 16:05 - 2015-02-03 05:30 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-03-11 16:05 - 2015-02-03 05:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-03-11 16:05 - 2015-02-03 05:30 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-03-11 16:05 - 2015-02-03 05:30 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 16:05 - 2015-02-03 05:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2015-03-11 16:05 - 2015-02-03 05:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2015-03-11 16:05 - 2015-02-03 05:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2015-03-11 16:05 - 2015-02-03 05:28 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-03-11 16:05 - 2015-02-03 05:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-03-11 16:05 - 2015-02-03 05:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2015-03-11 16:05 - 2015-02-03 05:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-03-11 16:05 - 2015-02-03 05:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-03-11 16:05 - 2015-02-03 05:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-03-11 16:05 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-03-11 16:05 - 2015-02-03 05:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-03-11 16:05 - 2015-02-03 05:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2015-03-11 16:05 - 2015-02-03 05:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2015-03-11 16:05 - 2015-02-03 05:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2015-03-11 16:05 - 2015-02-03 05:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-03-11 16:05 - 2015-02-03 04:32 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-03-11 16:05 - 2014-11-01 00:24 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-03-11 16:05 - 2014-06-28 02:21 - 00532176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-03-11 16:05 - 2014-06-28 02:21 - 00457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2015-03-11 16:04 - 2015-03-06 07:56 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-03-11 16:04 - 2015-03-06 07:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-03-11 16:04 - 2015-03-06 07:42 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-03-11 16:04 - 2015-03-06 07:41 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-03-11 16:04 - 2015-03-06 07:41 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-03-11 16:04 - 2015-03-06 07:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-03-11 16:04 - 2015-03-06 07:38 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-03-11 16:04 - 2015-03-06 07:36 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-03-11 16:04 - 2015-03-06 07:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-03-11 16:04 - 2015-03-06 07:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-03-11 16:04 - 2015-03-06 07:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-03-11 16:04 - 2015-03-06 07:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-03-11 16:04 - 2015-03-06 07:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-03-11 16:04 - 2015-03-06 07:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-03-11 16:04 - 2015-03-06 07:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-03-11 16:04 - 2015-03-06 07:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-03-11 16:04 - 2015-03-06 07:09 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-03-11 16:04 - 2015-03-06 07:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-03-11 16:04 - 2015-03-06 07:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-03-11 16:04 - 2015-03-06 07:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-03-11 16:04 - 2015-03-06 07:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-03-11 16:04 - 2015-02-26 05:25 - 03204096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-03-11 16:04 - 2015-02-24 05:15 - 00389800 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-03-11 16:04 - 2015-02-24 04:32 - 00342696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-03-11 16:04 - 2015-02-21 03:16 - 25021440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-03-11 16:04 - 2015-02-21 02:41 - 12827648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-03-11 16:04 - 2015-02-21 02:27 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-03-11 16:04 - 2015-02-21 02:27 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-03-11 16:04 - 2015-02-21 02:25 - 19720192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-03-11 16:04 - 2015-02-21 01:58 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-03-11 16:04 - 2015-02-21 01:32 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-03-11 16:04 - 2015-02-20 05:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-03-11 16:04 - 2015-02-20 05:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-03-11 16:04 - 2015-02-20 04:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-03-11 16:04 - 2015-02-20 04:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-03-11 16:04 - 2015-02-20 04:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-03-11 16:04 - 2015-02-20 04:48 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-03-11 16:04 - 2015-02-20 04:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-03-11 16:04 - 2015-02-20 04:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-03-11 16:04 - 2015-02-20 04:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-03-11 16:04 - 2015-02-20 04:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-03-11 16:04 - 2015-02-20 04:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-03-11 16:04 - 2015-02-20 04:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-03-11 16:04 - 2015-02-20 04:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-03-11 16:04 - 2015-02-20 04:32 - 06035456 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-03-11 16:04 - 2015-02-20 04:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-03-11 16:04 - 2015-02-20 04:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-03-11 16:04 - 2015-02-20 04:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-03-11 16:04 - 2015-02-20 04:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-03-11 16:04 - 2015-02-20 04:09 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-03-11 16:04 - 2015-02-20 04:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-03-11 16:04 - 2015-02-20 04:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-03-11 16:04 - 2015-02-20 04:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-03-11 16:04 - 2015-02-20 04:06 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-03-11 16:04 - 2015-02-20 04:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-03-11 16:04 - 2015-02-20 04:03 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-03-11 16:04 - 2015-02-20 04:01 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-03-11 16:04 - 2015-02-20 04:00 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-03-11 16:04 - 2015-02-20 03:58 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-03-11 16:04 - 2015-02-20 03:56 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-03-11 16:04 - 2015-02-20 03:56 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-03-11 16:04 - 2015-02-20 03:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-03-11 16:04 - 2015-02-20 03:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-03-11 16:04 - 2015-02-20 03:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-03-11 16:04 - 2015-02-20 03:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-03-11 16:04 - 2015-02-20 03:43 - 14398976 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-03-11 16:04 - 2015-02-20 03:41 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-03-11 16:04 - 2015-02-20 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-03-11 16:04 - 2015-02-20 03:30 - 04300288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-03-11 16:04 - 2015-02-20 03:28 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-03-11 16:04 - 2015-02-20 03:24 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-03-11 16:04 - 2015-02-20 03:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-03-11 16:04 - 2015-02-20 03:23 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-03-11 16:04 - 2015-02-20 03:16 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-03-11 16:04 - 2015-02-20 03:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-03-11 16:04 - 2015-02-20 03:01 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-03-11 16:04 - 2015-02-20 02:57 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-03-11 16:04 - 2015-02-20 02:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-03-11 16:04 - 2015-02-13 07:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-03-11 16:04 - 2015-02-13 07:22 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-03-11 16:04 - 2015-02-03 05:31 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-03-11 16:04 - 2015-02-03 05:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-03-11 16:04 - 2015-02-03 05:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-03-11 16:04 - 2015-02-03 05:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2015-03-11 16:04 - 2015-01-31 01:56 - 00459336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-03-11 16:04 - 2015-01-17 04:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-03-11 16:04 - 2015-01-17 04:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-03-11 16:03 - 2015-02-04 05:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-03-11 16:03 - 2015-02-04 04:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2015-03-10 19:08 - 2015-03-10 19:08 - 00000000 ____D () C:\Users\Sam\Documents\Colossal Order
2015-03-10 19:08 - 2015-03-10 19:08 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\Colossal Order
2015-03-10 19:08 - 2015-03-10 19:08 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\.mono
2015-03-10 19:08 - 2015-03-10 19:08 - 00000000 ____D () C:\Users\Sam\AppData\Local\Colossal Order
2015-03-10 19:08 - 2015-03-10 19:08 - 00000000 ____D () C:\ProgramData\.mono
2015-03-10 18:04 - 2015-03-10 18:04 - 00000202 _____ () C:\Users\Sam\Desktop\Cities Skylines.url
2015-03-10 01:13 - 2015-03-10 01:13 - 00001329 _____ () C:\Users\Sam\Downloads\event.ics
2015-03-10 00:28 - 2015-03-10 00:22 - 03141283 _____ () C:\Users\Sam\Desktop\Heidelberg terrain.zip
2015-03-10 00:21 - 2015-03-10 00:22 - 03141283 _____ () C:\Users\Sam\Downloads\Heidelberg terrain.zip
2015-03-09 18:02 - 2015-03-09 18:02 - 00002047 _____ () C:\Users\Sam\Downloads\All Shouts-37516-1-2.7z
2015-03-09 17:56 - 2015-03-09 17:56 - 00878274 _____ () C:\Users\Sam\Downloads\Example-35286-1-0.rar
2015-03-09 17:52 - 2015-03-09 17:52 - 00000343 _____ () C:\Users\Sam\Downloads\Shouts-5719-1-0.zip
2015-03-09 01:33 - 2015-03-09 01:33 - 00851456 _____ (Adobe Inc.) C:\Users\Sam\Downloads\img_72958.scr
2015-03-07 12:34 - 2015-03-07 12:34 - 00014171 _____ () C:\Users\Sam\Downloads\ENBoost 5_0-38649-5-0.zip
2015-03-07 12:13 - 2015-03-07 12:13 - 02360176 _____ () C:\Users\Sam\Downloads\enbseries_skyrim_v0266 (1).zip
2015-03-07 12:12 - 2015-03-07 12:12 - 00584910 _____ () C:\Users\Sam\Downloads\enbseries_skyrim_v0096patch9antifreeze.zip
2015-03-06 20:58 - 2015-03-06 20:58 - 00004088 _____ () C:\Users\Sam\Downloads\JWs Skyrim Configuration Files -- INI Files-59292-v-3.rar
2015-03-06 18:56 - 2015-03-06 18:56 - 00019981 _____ () C:\Users\Sam\Downloads\Complete_Crafting_Overhaul_Compatibility_Patch-26230-0-24.7z
2015-03-06 14:33 - 2015-03-06 14:33 - 00049775 _____ () C:\Users\Sam\Downloads\Skip Bethesda intro-100.zip
2015-03-06 14:32 - 2015-03-06 14:32 - 00326483 _____ () C:\Users\Sam\Downloads\ENB Customizer v2_1 FIXED-17400-2-1.rar
2015-03-05 13:23 - 2015-03-05 13:23 - 15698775 _____ () C:\Users\Sam\Downloads\Skyrim_Particle_Patch_for_ENB--All-In-One.zip
2015-03-04 20:49 - 2015-03-04 20:49 - 00007383 _____ () C:\Users\Sam\Downloads\SSME - Skyrim Startup Memory Editor-50305-1-8-0-0.zip
2015-03-04 20:41 - 2015-03-04 20:41 - 00471625 _____ () C:\Users\Sam\Downloads\skse_1_06_16.7z
2015-03-04 20:06 - 2015-03-04 20:06 - 00057500 _____ () C:\Users\Sam\Downloads\Texture Pack Combiner LIGHT v1_95b-20801-1-95b.rar
2015-03-04 20:06 - 2015-03-04 20:06 - 00057445 _____ () C:\Users\Sam\Downloads\Texture Pack Combiner v1_95b-20801-1-95b.rar
2015-03-04 18:31 - 2015-03-04 18:31 - 00013856 _____ () C:\Users\Sam\Downloads\Unlimited Rings Multilingual-10281.rar
2015-03-03 22:33 - 2015-03-03 22:33 - 00160836 _____ () C:\Users\Sam\Downloads\RealLike ENB (PERFORMANCE)-22056-2-6.zip
2015-03-03 22:13 - 2015-01-09 05:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-03-03 22:13 - 2015-01-09 05:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-03-03 22:13 - 2015-01-09 05:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-03-03 22:13 - 2015-01-09 04:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2015-03-03 20:42 - 2015-03-03 20:42 - 00020455 _____ () C:\Users\Sam\Downloads\R.S.Patcher 1.5b4 -TES5EDIT SCRIPTS - Install 3rd-52612-1-5b4.zip
2015-03-03 20:03 - 2015-02-22 01:16 - 00906752 _____ (ENB) C:\Users\Sam\Desktop\d3d9.dll
2015-03-03 20:00 - 2015-03-03 20:00 - 00533167 _____ () C:\Users\Sam\Downloads\Natural Realistic ENB 1 3-10109.rar
2015-03-03 12:07 - 2015-03-03 12:07 - 00000420 _____ () C:\Users\Sam\Downloads\FasterHorses_Sprint_x2-934.zip

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-02 16:55 - 2015-02-13 15:19 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2015-04-02 16:55 - 2015-01-26 00:18 - 00000000 ____D () C:\Users\Sam\AppData\Local\Adobe
2015-04-02 16:55 - 2015-01-12 14:10 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-02 16:55 - 2014-12-30 17:37 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-04-02 16:55 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-02 16:55 - 2009-07-14 06:51 - 00048437 _____ () C:\Windows\setupact.log
2015-04-02 00:31 - 2015-02-20 15:56 - 00003014 _____ () C:\Windows\System32\Tasks\MSIAfterburner
2015-04-02 00:31 - 2010-11-21 04:52 - 02028004 _____ () C:\Windows\WindowsUpdate.log
2015-04-02 00:21 - 2015-01-12 14:10 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-01 23:56 - 2009-07-14 06:45 - 00021408 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-04-01 23:56 - 2009-07-14 06:45 - 00021408 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-04-01 23:55 - 2010-11-21 08:50 - 00699416 _____ () C:\Windows\system32\perfh007.dat
2015-04-01 23:55 - 2010-11-21 08:50 - 00149556 _____ () C:\Windows\system32\perfc007.dat
2015-04-01 23:55 - 2009-07-14 07:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-01 23:49 - 2010-11-21 05:47 - 00178280 _____ () C:\Windows\PFRO.log
2015-04-01 23:46 - 2015-02-24 13:13 - 00000000 ____D () C:\AdwCleaner
2015-04-01 17:19 - 2015-02-20 15:53 - 00000000 ____D () C:\Program Files (x86)\MSI Afterburner
2015-04-01 15:57 - 2015-02-03 15:59 - 00000000 ____D () C:\Users\Sam\Documents\Euro Truck Simulator 2
2015-03-31 22:37 - 2015-02-13 12:30 - 00000020 _____ () C:\Users\Sam\AppData\Roaming\appdataFr3.bin
2015-03-30 20:07 - 2015-02-12 18:57 - 00001384 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2015-03-30 18:06 - 2015-02-21 17:30 - 00000000 ____D () C:\Users\Sam\Documents\Nexus Mod Manager
2015-03-30 18:00 - 2015-02-28 13:05 - 00000000 ____D () C:\Users\Sam\AppData\Local\Skyrim
2015-03-28 23:17 - 2015-01-12 14:08 - 00000000 ____D () C:\Users\Sam\AppData\Local\VirtualStore
2015-03-28 20:05 - 2015-01-12 15:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-03-28 20:00 - 2014-12-30 17:37 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2015-03-28 20:00 - 2014-12-30 17:37 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2015-03-28 19:40 - 2015-01-12 14:15 - 00058016 _____ () C:\Users\Sam\AppData\Local\GDIPFONTCACHEV1.DAT
2015-03-28 19:38 - 2015-01-15 16:51 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-03-28 19:38 - 2015-01-12 14:08 - 00000000 ____D () C:\Users\Sam
2015-03-28 19:35 - 2015-02-25 17:28 - 00000000 ____D () C:\BOSS
2015-03-28 19:35 - 2015-02-20 16:56 - 00000000 ____D () C:\Users\Sam\Heaven
2015-03-28 19:35 - 2015-02-18 13:49 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2015-03-28 19:35 - 2015-01-15 16:51 - 00000000 ____D () C:\Windows\system32\appraiser
2015-03-28 19:35 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-03-28 19:35 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-03-28 19:35 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\security
2015-03-28 19:35 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2015-03-28 19:35 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2015-03-28 19:34 - 2015-01-30 18:24 - 00000000 ____D () C:\ProgramData\Package Cache
2015-03-28 19:34 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-03-28 05:44 - 2015-01-12 15:00 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2015-03-28 05:44 - 2015-01-12 15:00 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2015-03-28 05:43 - 2015-01-12 15:00 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2015-03-28 05:43 - 2015-01-12 15:00 - 01570672 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2015-03-27 18:21 - 2015-02-20 16:56 - 01065984 _____ () C:\Users\Sam\AppData\Local\file__0.localstorage
2015-03-26 16:35 - 2015-01-12 14:48 - 00000000 ____D () C:\Users\Sam\AppData\Local\Spotify
2015-03-23 19:03 - 2015-02-08 19:55 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\vlc
2015-03-23 17:50 - 2014-12-30 17:25 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2015-03-23 16:29 - 2015-02-06 22:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2015-03-23 16:29 - 2015-02-06 22:20 - 00000000 ____D () C:\Program Files\CPUID
2015-03-21 17:59 - 2015-01-13 19:31 - 00000000 ____D () C:\Windows\SysWOW64\directx
2015-03-20 23:22 - 2015-01-12 14:12 - 00002182 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-03-13 21:41 - 2015-02-12 18:55 - 02906928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-03-13 21:41 - 2015-01-12 14:56 - 16022016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-03-13 21:41 - 2015-01-12 14:56 - 03303448 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-03-13 21:41 - 2014-12-30 17:37 - 00073872 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-03-13 21:41 - 2014-12-30 17:37 - 00060560 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2015-03-13 21:41 - 2014-12-30 17:27 - 18580512 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-03-13 21:41 - 2014-12-30 17:27 - 14121624 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-03-13 21:41 - 2014-12-30 17:27 - 00027441 _____ () C:\Windows\system32\nvinfo.pb
2015-03-13 18:16 - 2014-12-30 17:37 - 06861968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-03-13 18:16 - 2014-12-30 17:37 - 03526856 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2015-03-13 18:16 - 2014-12-30 17:37 - 02559808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2015-03-13 18:16 - 2014-12-30 17:37 - 00935056 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-03-13 18:16 - 2014-12-30 17:37 - 00386248 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-03-13 18:16 - 2014-12-30 17:37 - 00062608 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-03-12 12:59 - 2009-07-14 06:45 - 00267816 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-03-12 12:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2015-03-12 12:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2015-03-12 02:29 - 2015-01-14 02:28 - 00000000 ____D () C:\Windows\system32\MRT
2015-03-12 02:25 - 2015-01-14 02:28 - 122905848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-03-11 15:10 - 2014-12-30 17:37 - 04246327 _____ () C:\Windows\system32\nvcoproc.bin
2015-03-10 18:12 - 2014-08-20 19:04 - 00819896 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2015-03-09 18:04 - 2015-01-13 19:40 - 00143725 _____ () C:\Windows\DirectX.log
2015-03-06 16:44 - 2015-02-28 13:33 - 00000965 _____ () C:\Users\Sam\Desktop\Skyrim (SKSE).lnk
2015-03-06 01:29 - 2015-02-21 17:04 - 00000897 _____ () C:\Users\Public\Desktop\Nexus Mod Manager.lnk
2015-03-06 01:29 - 2015-02-21 17:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager
2015-03-06 01:29 - 2015-02-21 17:04 - 00000000 ____D () C:\Program Files\Nexus Mod Manager
2015-03-04 17:18 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\tracing

==================== Files in the root of some directories =======

2015-02-13 12:30 - 2015-03-31 22:37 - 0000020 _____ () C:\Users\Sam\AppData\Roaming\appdataFr3.bin
2015-02-20 16:56 - 2015-03-27 18:21 - 1065984 _____ () C:\Users\Sam\AppData\Local\file__0.localstorage
2015-03-17 21:24 - 2015-03-17 21:24 - 0007663 _____ () C:\Users\Sam\AppData\Local\Resmon.ResmonCfg

Some content of TEMP:
====================
C:\Users\Sam\AppData\Local\Temp\07fc9beb41a443fab5734439755b93fd.dll
C:\Users\Sam\AppData\Local\Temp\1c31dfcf2a7145efbbde3a9c75ba652a.exe
C:\Users\Sam\AppData\Local\Temp\249c9e31c8624b03aee045bddad10529.dll
C:\Users\Sam\AppData\Local\Temp\342ba19739a8481bb9989a8a7dea70e2.dll
C:\Users\Sam\AppData\Local\Temp\3aa385858c524e6abe4478692cfcd35c.dll
C:\Users\Sam\AppData\Local\Temp\4554b870f6e941c6bd77c137927fca87.dll
C:\Users\Sam\AppData\Local\Temp\49754b49f4284bb792f3217aa2d02116.exe
C:\Users\Sam\AppData\Local\Temp\5abf9b72059f5.exe
C:\Users\Sam\AppData\Local\Temp\7210da1.exe
C:\Users\Sam\AppData\Local\Temp\96ac420a8bbf42e7975d229ca0796dce.dll
C:\Users\Sam\AppData\Local\Temp\Bass.dll
C:\Users\Sam\AppData\Local\Temp\Bass.Net.dll
C:\Users\Sam\AppData\Local\Temp\bassmod.dll
C:\Users\Sam\AppData\Local\Temp\c32f3171a8424c00bc919a5839e15da6.exe
C:\Users\Sam\AppData\Local\Temp\c7a528963db344edaebf5427fcfb37a0.exe
C:\Users\Sam\AppData\Local\Temp\ICReinstall_adobe-photoshop-cs6.exe
C:\Users\Sam\AppData\Local\Temp\Nexus Mod Manager-0.53.4.exe
C:\Users\Sam\AppData\Local\Temp\Nexus Mod Manager-0.53.5.exe
C:\Users\Sam\AppData\Local\Temp\Nexus Mod Manager-0.53.7.exe
C:\Users\Sam\AppData\Local\Temp\Nv3DVisionIePlugin.dll
C:\Users\Sam\AppData\Local\Temp\Nv3DVisionIePlugin64.dll
C:\Users\Sam\AppData\Local\Temp\Nv3DVStreaming.dll
C:\Users\Sam\AppData\Local\Temp\Nv3DVStreaming64.dll
C:\Users\Sam\AppData\Local\Temp\Nv3DVStreamingIePlugin.dll
C:\Users\Sam\AppData\Local\Temp\Nv3DVStreamingIePlugin64.dll
C:\Users\Sam\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Sam\AppData\Local\Temp\nvStInst.exe
C:\Users\Sam\AppData\Local\Temp\OnlineBackup.exe
C:\Users\Sam\AppData\Local\Temp\Quarantine.exe
C:\Users\Sam\AppData\Local\Temp\sqlite3.dll
C:\Users\Sam\AppData\Local\Temp\sqlite3.exe
C:\Users\Sam\AppData\Local\Temp\vcredist_x64.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-03-26 22:41

==================== End Of Log ============================
         

--- --- ---

Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

start
CloseProcesses:
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
Task: {10FA29A9-7B34-4651-BC07-F6FA7B715F88} - \{5E543BA5-DC1E-434E-BEF7-8BABDCCC873D} No Task File <==== ATTENTION
RemoveProxy:
EmptyTemp:
end
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Schritt 2
Lade dir die passende Version von SystemLook vom folgenden Spiegel herunter und speichere das Tool auf dem Desktop:
SystemLook (32 bit) | SystemLook (64 bit)

• Doppelklicke auf die SystemLook.exe, um das Tool zu starten.
• Kopiere den Inhalt der folgenden Codebox in das Textfeld des Tools:
  
  
  

  :regfind
  FileCure
  TampaGeneration
  eSupport.com
           

• Klicke nun auf den Button Look, um den Scan zu starten.
• Der Suchlauf kann einige Zeit dauern.
• Wenn der Suchlauf beendet ist, wird sich dein Editor mit den Ergebnissen öffnen, poste diese in deinen Thread.
• Die Ergebnisse werden auch auf dem Desktop als SystemLook.txt gespeichert.

Schritt 3

• Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Scan.
• FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
• Poste mir beide Logdateien mit deiner nächsten Antwort.

Bitte poste mit deiner nächsten Antwort

• die Logdatei des FRST-Fix,
• die Logdatei von SystemLook,
• die beiden neuen Logdateien von FRST.

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Sam (administrator) on SAM-PC on 03-04-2015 13:54:18
Running from C:\Users\Sam\Desktop
Loaded Profiles: Sam (Available profiles: Sam)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
(Softwareentwicklung Remus - ArchiCrypt) C:\Windows\System32\ACRAMDiskHandlerService64R_D4.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avp.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
() C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Steganos Software GmbH) C:\Program Files (x86)\OkayFreedom\OkayFreedomService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avpui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\ProgramData\{f0f87754-a2c2-aa64-f0f8-87754a2cdd52}\Kaspersky Trial Resetter 2015.exe
(NVIDIA Corporation) C:\Users\Sam\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
(Steganos Software GmbH) C:\Program Files (x86)\OkayFreedom\OkayFreedomClient.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2673296 2015-03-28] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2014-09-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [508800 2014-12-17] (Oracle Corporation)
HKU\S-1-5-21-314491385-833715928-1570723329-1001\...\Run: [GoogleChromeAutoLaunch_FD70E4195A4DE5E83920BD6414A71B17] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [809288 2015-03-30] (Google Inc.)
HKU\S-1-5-21-314491385-833715928-1570723329-1001\...\MountPoints2: {eb19d5b0-a482-11e4-a3d4-00016c6b8f25} - J:\startme.exe
HKU\S-1-5-21-314491385-833715928-1570723329-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [899584 2010-11-21] (Microsoft Corporation)
Startup: C:\Users\Sam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Kaspersky Trial Resetter 2015.lnk
ShortcutTarget: Kaspersky Trial Resetter 2015.lnk -> C:\ProgramData\{f0f87754-a2c2-aa64-f0f8-87754a2cdd52}\Kaspersky Trial Resetter 2015.exe ()
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-314491385-833715928-1570723329-1001\Software\Microsoft\Internet Explorer\Main,Start Page = 
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Content Blocker Plugin -> {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\IEExt\ie_plugin.dll [2015-02-13] (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28] (Oracle Corporation)
BHO: Virtual Keyboard Plugin -> {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\IEExt\ie_plugin.dll [2015-02-13] (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation)
BHO: Safe Money Plugin -> {E3D96E85-529D-4269-AC6A-97CF9E2221E3} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\IEExt\ie_plugin.dll [2015-02-13] (Kaspersky Lab ZAO)
BHO-x32: Content Blocker Plugin -> {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\IEExt\ie_plugin.dll [2015-02-13] (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-16] (Oracle Corporation)
BHO-x32: Virtual Keyboard Plugin -> {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\IEExt\ie_plugin.dll [2015-02-13] (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-16] (Oracle Corporation)
BHO-x32: Safe Money Plugin -> {E3D96E85-529D-4269-AC6A-97CF9E2221E3} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\IEExt\ie_plugin.dll [2015-02-13] (Kaspersky Lab ZAO)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Sam\AppData\Roaming\Mozilla\Firefox\Profiles\wtx5zb61.default
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2015-01-13] (EA Digital Illusions CE AB)
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-28] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-30] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-01-07] (Adobe Systems)
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2015-01-13] (EA Digital Illusions CE AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-16] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-16] (Oracle Corporation)
FF Plugin-x32: @kaspersky.com/content_blocker_6418E0D362104DADA084DC312DFA8ABC -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\content_blocker@kaspersky.com [2015-02-13] ()
FF Plugin-x32: @kaspersky.com/virtual_keyboard_294FF26A1D5B455495946778FDE7CEDB -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com [2015-02-13] ()
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-03-13] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-03-13] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-03] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-03] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-09-12] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-01-07] (Adobe Systems)
FF HKLM-x32\...\Firefox\Extensions: [content_blocker_6418E0D362104DADA084DC312DFA8ABC@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\content_blocker@kaspersky.com
FF Extension: Модуль блокування небезпечних веб-сайтів - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\content_blocker@kaspersky.com [2015-02-13]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard_294FF26A1D5B455495946778FDE7CEDB@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Віртуальна клавіатура - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com [2015-02-13]
FF HKU\S-1-5-21-314491385-833715928-1570723329-1001\...\Firefox\Extensions: [{ba2c82b0-7fa8-11e4-b4a9-0800200c9a66}] - C:\Users\Sam\AppData\Local\Temp\VLC\search.xpi

Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR HomePage: Default -> 
CHR StartupUrls: Default -> "hxxp://www.google.de/"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Magic Actions for YouTube™) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif [2015-01-12]
CHR Extension: (From Dust) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\anelkojiepicmcldgnmkplocifmegpfj [2015-01-12]
CHR Extension: (Google Drive) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-12]
CHR Extension: (OkayFreedom) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\bckipplcmnfhblnpibpbehenelnkpecd [2015-02-02]
CHR Extension: (YouTube) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-12]
CHR Extension: (Google Search) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-12]
CHR Extension: (Video Downloader professional) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2015-01-12]
CHR Extension: (AdBlock) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-02-02]
CHR Extension: (A Journey through Middle-earth) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjgkjeheegjnnmheaflhdocglkiegoni [2015-02-02]
CHR Extension: (Hola Better Internet) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2015-04-02]
CHR Extension: (Linkbucks skip) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjpndobkiolgpnpagkhnknhinnpoajmd [2015-02-02]
CHR Extension: (eBay Extension for Google Chrome™) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\khhckppjhonfmcpegdjdibmngahahhck [2015-02-02]
CHR Extension: (Better Battlelog (BBLog)) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjlfnjepjdmlppapoikepbaabbghofma [2015-02-02]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-02]
CHR Extension: (Turbo for YouTube) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhgnmngkgolhffjjdaipkkjbmbnpefef [2015-02-02]
CHR Extension: (Google Wallet) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-02-02]
CHR Extension: (FoxClocks) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\obcbigljfpgappaaofailjjoabiikckk [2015-02-02]
CHR Extension: (Click&Clean App) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdabfienifkbhoihedcgeogidfmibmhp [2015-01-12]
CHR Extension: (Gmail) - C:\Users\Sam\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-12]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-07-23] (SUPERAntiSpyware.com)
R2 ArchiCrypt Ultimate RAM-Disk 4; C:\Windows\system32\ACRAMDiskHandlerService64R_D4.exe [1580816 2013-10-18] (Softwareentwicklung Remus - ArchiCrypt)
R2 AVP15.0.1; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avp.exe [234520 2014-08-30] (Kaspersky Lab ZAO)
S3 Disc Soft Ultra Bus Service; C:\Program Files (x86)\DAEMON Tools Ultra\DiscSoftBusService.exe [1378576 2014-12-09] (Disc Soft Ltd)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152144 2015-03-28] (NVIDIA Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1878672 2015-03-28] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [22995600 2015-03-28] (NVIDIA Corporation)
R2 OkayFreedom VPN Starter Service; C:\Program Files (x86)\OkayFreedom\OkayFreedomService.exe [326072 2015-02-18] (Steganos Software GmbH)
S3 Origin Client Service; D:\Origin\OriginClientService.exe [1910128 2015-02-02] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2015-02-03] ()
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 ACMoFlex64RD4; C:\Windows\system32\drivers\ACMoFlex64RD4.sys [24848 2013-10-18] (Softwareentwicklung Remus - ArchiCrypt.de)
R0 cm_km_w; C:\Windows\System32\DRIVERS\cm_km_w.sys [238288 2013-01-14] (Kaspersky Lab UK Ltd)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2015-02-18] (Disc Soft Ltd)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [468576 2014-03-31] (Kaspersky Lab ZAO)
R2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [46144 2014-07-02] (Kaspersky Lab ZAO)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [150536 2015-02-13] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [246456 2014-08-12] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [819896 2015-03-10] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [30304 2014-02-25] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [28768 2014-03-28] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55872 2014-06-05] (Kaspersky Lab ZAO)
R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [77512 2015-02-13] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [179776 2014-07-09] (Kaspersky Lab ZAO)
S3 KovaPlusFltr; C:\Windows\System32\drivers\KovaPlusFltr.sys [15104 2010-01-25] (ROCCAT Development, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-03-17] (Malwarebytes Corporation)
R3 Neo_VPN; C:\Windows\System32\DRIVERS\Neo_0078.sys [28768 2015-01-30] (SoftEther VPN Project at University of Tsukuba, Japan.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-03-28] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13368 2013-03-11] ()
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
S3 GPU-Z; \??\C:\Users\Sam\AppData\Local\Temp\GPU-Z.sys [X]
U4 klkbdflt2; system32\DRIVERS\klkbdflt2.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-03 13:52 - 2015-04-03 13:53 - 00022368 _____ () C:\Users\Sam\Desktop\SystemLook.txt
2015-04-03 13:52 - 2015-04-03 13:52 - 00165376 _____ () C:\Users\Sam\Downloads\SystemLook_x64.exe
2015-04-03 13:52 - 2015-04-03 13:52 - 00165376 _____ () C:\Users\Sam\Desktop\SystemLook_x64.exe
2015-04-02 16:58 - 2015-04-02 16:58 - 00024743 _____ () C:\Users\Sam\Desktop\Addition.txt
2015-04-02 16:57 - 2015-04-03 13:54 - 00020194 _____ () C:\Users\Sam\Desktop\FRST.txt
2015-04-01 18:20 - 2015-04-01 18:20 - 00002516 _____ () C:\Users\Sam\Desktop\MBAM.txt
2015-04-01 18:13 - 2015-04-01 18:13 - 00002396 _____ () C:\Users\Sam\Desktop\JRT.txt
2015-04-01 14:40 - 2015-04-01 14:40 - 00007229 _____ () C:\Users\Sam\Downloads\XFeu6_Hi-engine&Hi-TransMission.scs
2015-03-31 22:05 - 2015-03-31 22:05 - 00000000 ____D () C:\Users\Sam\Desktop\PhysX Demo
2015-03-31 22:04 - 2015-03-31 22:04 - 04840320 _____ () C:\Users\Sam\Downloads\FLEX-0.25.7z
2015-03-31 17:57 - 2015-02-24 19:13 - 15651616 _____ () C:\Users\Sam\Desktop\SuperMario64HD.exe
2015-03-31 17:55 - 2015-03-31 17:56 - 29606756 _____ () C:\Users\Sam\Downloads\SuperMario64HD_Win.zip
2015-03-31 00:23 - 2015-03-31 00:23 - 00000970 _____ () C:\Users\Sam\Desktop\TechPowerUp GPU-Z.lnk
2015-03-31 00:23 - 2015-03-31 00:23 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TechPowerUp GPU-Z
2015-03-31 00:23 - 2015-03-31 00:23 - 00000000 ____D () C:\Program Files (x86)\GPU-Z
2015-03-31 00:22 - 2015-03-31 00:22 - 01713824 _____ (techPowerUp (www.techpowerup.com)) C:\Users\Sam\Downloads\GPU-Z.0.8.2.exe
2015-03-30 23:52 - 2015-03-30 23:52 - 00944128 _____ () C:\Users\Sam\Downloads\JoulemeterSetup.msi
2015-03-30 23:52 - 2015-03-30 23:52 - 00003017 _____ () C:\Users\Sam\Desktop\Joulemeter.lnk
2015-03-30 23:52 - 2015-03-30 23:52 - 00003017 _____ () C:\Users\Sam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Joulemeter.lnk
2015-03-30 23:45 - 2015-03-30 23:44 - 01389097 _____ (Thisisu) C:\Users\Sam\Desktop\JRT.exe
2015-03-30 23:44 - 2015-03-30 23:44 - 01389097 _____ (Thisisu) C:\Users\Sam\Downloads\JRT.exe
2015-03-30 23:42 - 2015-03-30 23:42 - 02208768 _____ () C:\Users\Sam\Desktop\AdwCleaner_4.200.exe
2015-03-30 16:52 - 2015-03-30 16:52 - 605318222 _____ () C:\Users\Sam\Downloads\[ETS2Downloads.com]complicated-roads-map.rar
2015-03-30 16:26 - 2015-03-30 16:27 - 11336875 _____ () C:\Users\Sam\Downloads\_MOD-ETS2__Real_company_logo_v2.1.rar
2015-03-30 16:22 - 2015-03-30 16:22 - 148210391 _____ () C:\Users\Sam\Downloads\[ETS2Downloads.com]mega-tandem.rar
2015-03-30 16:20 - 2015-03-30 16:20 - 10499793 _____ () C:\Users\Sam\Downloads\[ETS2Downloads.com]DastagirSweetFX.rar
2015-03-30 16:18 - 2015-03-30 16:26 - 143660085 _____ () C:\Users\Sam\Downloads\Real Life Graphic + Lights.rar
2015-03-30 16:15 - 2015-03-30 16:15 - 02277893 _____ () C:\Users\Sam\Downloads\[ETS2Downloads.com]turkey-horn-sound-for-all-trucks.scs
2015-03-30 16:13 - 2015-03-30 16:13 - 00021126 _____ () C:\Users\Sam\Downloads\[ETS2Downloads.com]Engine_Balance_Overhaul_v1.zip
2015-03-30 15:25 - 2015-04-03 13:54 - 00000000 ____D () C:\FRST
2015-03-30 15:25 - 2015-04-01 18:24 - 00078509 _____ () C:\Users\Sam\Downloads\FRST.txt
2015-03-30 15:25 - 2015-04-01 18:24 - 00021816 _____ () C:\Users\Sam\Downloads\Addition.txt
2015-03-30 15:24 - 2015-03-30 15:24 - 02095616 _____ (Farbar) C:\Users\Sam\Desktop\FRST64.exe
2015-03-29 20:43 - 2015-03-29 20:43 - 00001168 _____ () C:\Users\Sam\Desktop\ArchiCrypt Ultimate RAM-Disk 4.lnk
2015-03-29 20:43 - 2015-03-29 20:43 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\ArchiCrypt Ultimate RAM-Disk3
2015-03-29 20:43 - 2015-03-29 20:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArchiCrypt
2015-03-29 20:43 - 2015-03-29 20:43 - 00000000 ____D () C:\ProgramData\ArchiCrypt Ultimate RAM-Disk
2015-03-29 20:43 - 2013-10-18 11:10 - 01580816 _____ (Softwareentwicklung Remus - ArchiCrypt) C:\Windows\system32\ACRAMDiskHandlerService64R_D4.exe
2015-03-29 20:43 - 2013-10-18 11:10 - 00024848 _____ (Softwareentwicklung Remus - ArchiCrypt.de) C:\Windows\system32\Drivers\ACMoFlex64RD4.sys
2015-03-29 20:43 - 2013-10-18 11:09 - 00170256 _____ (Softwareentwicklung Remus - ArchiCrypt.de) C:\Windows\system32\ACMFEngine64RD4.dll
2015-03-29 20:42 - 2015-03-29 20:42 - 00000000 ____D () C:\Program Files\ArchiCrypt
2015-03-29 20:41 - 2015-03-29 20:41 - 12643052 _____ () C:\Users\Sam\Downloads\ACUltimateRAMDisk464.zip
2015-03-28 23:33 - 2015-03-28 23:33 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\SUPERAntiSpyware.com
2015-03-28 23:28 - 2015-03-28 23:28 - 00008254 _____ () C:\Users\Sam\Desktop\hijackthis.log
2015-03-28 23:17 - 2015-03-28 23:17 - 00388608 _____ (Trend Micro Inc.) C:\Users\Sam\Downloads\HijackThis.exe
2015-03-28 23:17 - 2015-03-28 23:17 - 00008254 _____ () C:\Users\Sam\Downloads\hijackthis.log
2015-03-28 23:06 - 2015-04-01 18:10 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-03-28 23:06 - 2015-03-28 23:06 - 00001109 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-03-28 23:06 - 2015-03-28 23:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-03-28 23:06 - 2015-03-28 23:06 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-03-28 23:06 - 2015-03-17 07:15 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-03-28 23:06 - 2015-03-17 07:15 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-03-28 23:06 - 2015-03-17 07:15 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-03-28 23:05 - 2015-03-28 23:05 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\Sam\Downloads\mbam-setup-2.1.4.1018.exe
2015-03-28 20:00 - 2015-03-13 17:38 - 00622224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-03-28 19:43 - 2015-03-28 19:58 - 309143408 _____ (NVIDIA Corporation) C:\Users\Sam\Downloads\347.88-desktop-win8-win7-winvista-64bit-international-whql.exe
2015-03-28 19:10 - 2015-03-28 19:10 - 00002580 _____ () C:\Users\Sam\Downloads\turbo10.zip
2015-03-28 17:16 - 2015-03-28 17:17 - 30151898 _____ () C:\Users\Sam\Downloads\ROCCAT_Kova[+]_DRV1.25 (1).zip
2015-03-28 17:10 - 2015-03-28 17:10 - 00199489 _____ () C:\Users\Sam\Downloads\CCEnhancer-4.2-mulitlingual.zip
2015-03-28 17:09 - 2015-03-28 19:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-03-28 14:19 - 2015-03-28 19:35 - 00000000 ____D () C:\Users\Sam\Desktop\BIOS_ACER_R01.A3_Windows_ASM7720
2015-03-28 14:18 - 2015-03-28 14:18 - 00948720 _____ () C:\Users\Sam\Downloads\BIOS_Acer_R01.A3_A_A (2).zip
2015-03-28 13:54 - 2015-03-28 13:54 - 00015201 _____ () C:\Users\Sam\Downloads\MemTest41.zip
2015-03-28 13:17 - 2015-03-28 19:35 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\Wise Registry Cleaner
2015-03-28 13:17 - 2015-03-28 13:17 - 00000000 ____D () C:\Program Files (x86)\Wise
2015-03-28 13:13 - 2015-03-28 13:13 - 00000000 ____D () C:\Users\Sam\AppData\Local\Microsoft Research
2015-03-28 13:12 - 2015-03-28 13:12 - 00000000 ____D () C:\Program Files (x86)\Microsoft Research
2015-03-28 12:33 - 2015-03-28 12:33 - 02357106 _____ () C:\Users\Sam\Downloads\Chipset_Intel_9.1.1.1015_W7x64_A (1).zip
2015-03-28 12:32 - 2015-03-28 12:32 - 01516243 _____ () C:\Users\Sam\Downloads\Modem_liteon_2.2.95_W7x64_A.zip
2015-03-28 12:32 - 2015-03-28 12:32 - 00000000 ____D () C:\Windows\Options
2015-03-28 12:26 - 2015-03-28 12:26 - 03008450 _____ () C:\Users\Sam\Downloads\X58ExpressChipset9.3.0.1019.zip
2015-03-28 12:23 - 2015-03-28 12:23 - 02636255 _____ () C:\Users\Sam\Downloads\875PChipsetIntel865ChipsetFamily848PChi9.2.0.1025.zip
2015-03-28 12:18 - 2015-03-28 14:52 - 00000136 _____ () C:\Users\Sam\Win8UpgradeKit_28.03.2015.LOG
2015-03-27 20:01 - 2015-03-27 20:01 - 00000000 ____D () C:\Program Files\Intel
2015-03-27 18:26 - 2015-03-27 18:26 - 00002844 _____ () C:\Users\Sam\Unigine_Heaven_Benchmark_4.0_20150327_1726.html
2015-03-27 17:04 - 2015-03-28 19:35 - 00000000 ____D () C:\Users\Sam\AppData\Local\GOG.com
2015-03-27 17:03 - 2015-03-27 17:03 - 03701856 _____ (GOG.com ) C:\Users\Sam\Downloads\Setup_Downloader_3.6.0_stable.exe
2015-03-27 15:36 - 2015-03-27 15:36 - 00000000 ____D () C:\Program Files (x86)\Intel
2015-03-27 15:36 - 2015-03-27 15:36 - 00000000 ____D () C:\Intel
2015-03-27 15:35 - 2015-03-27 15:35 - 02357106 _____ () C:\Users\Sam\Downloads\Chipset_Intel_9.1.1.1015_W7x64_A.zip
2015-03-27 15:34 - 2015-03-28 00:40 - 00016689 _____ () C:\Users\Sam\Win8UpgradeKit_27.03.2015.LOG
2015-03-27 15:32 - 2015-03-27 15:33 - 28777589 _____ () C:\Users\Sam\Downloads\Win8UpgAsstTool_1.00.3001.zip
2015-03-27 15:28 - 2015-03-27 15:28 - 00948720 _____ () C:\Users\Sam\Downloads\BIOS_Acer_R01.A3_A_A (1).zip
2015-03-27 15:18 - 2015-03-27 15:19 - 00132014 _____ () C:\Users\Sam\Downloads\Core2MaxPerf-110.zip
2015-03-27 14:07 - 2015-03-28 15:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI
2015-03-27 14:07 - 2015-03-28 15:03 - 00000000 ____D () C:\Program Files (x86)\MSI
2015-03-27 14:07 - 2015-03-27 14:07 - 00000000 ____D () C:\MSI
2015-03-27 14:06 - 2015-03-27 14:07 - 36210245 _____ () C:\Users\Sam\Downloads\MSIAfterburnerSetup.zip
2015-03-27 14:05 - 2015-03-27 14:06 - 10746455 _____ () C:\Users\Sam\Downloads\gamingapp_4.0.0.04.zip
2015-03-27 14:05 - 2015-03-27 14:06 - 10594870 _____ () C:\Users\Sam\Downloads\LiveUpdate.zip
2015-03-26 21:30 - 2015-03-28 19:35 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2015-03-26 21:30 - 2015-03-28 19:35 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2015-03-26 17:58 - 2015-03-28 19:35 - 00000000 ____D () C:\Program Files\Registry System Wizard.NET
2015-03-26 17:58 - 2015-03-26 17:58 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\WinFAQ
2015-03-26 17:52 - 2015-03-26 17:52 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\STEITZ® IT-Solutions
2015-03-26 17:52 - 2015-03-26 17:52 - 00000000 ____D () C:\Users\Sam\AppData\Local\STEITZ®_IT-Solutions
2015-03-26 17:52 - 2015-03-26 17:52 - 00000000 ____D () C:\ProgramData\STEITZ® IT-Solutions
2015-03-26 17:52 - 2015-03-26 17:52 - 00000000 ____D () C:\ProgramData\Caphyon
2015-03-26 17:52 - 2015-03-26 17:52 - 00000000 ____D () C:\Program Files (x86)\STEITZ IT-Solutions
2015-03-26 17:50 - 2015-03-26 17:51 - 20208530 _____ () C:\Users\Sam\Downloads\devmanpro11.zip
2015-03-26 00:29 - 2013-10-02 02:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2015-03-26 00:29 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2015-03-26 00:28 - 2012-08-23 16:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2015-03-23 17:49 - 2015-03-13 21:41 - 32114888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 25460880 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 24775368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 20466376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 17258024 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 13297144 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 13210080 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 10775080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 10715864 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 10262160 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-03-23 17:49 - 2015-03-13 21:41 - 03611792 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 03249352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 01896136 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434788.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 01557648 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434788.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00997856 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00970384 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00944784 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00930448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00909512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00878328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00496272 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00400584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00390288 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00354112 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00346824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00306208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00178512 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-03-23 17:49 - 2015-03-13 21:41 - 00164568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-03-23 16:38 - 2015-03-23 16:38 - 00000000 ____D () C:\Users\Sam\Intel
2015-03-23 16:37 - 2015-03-23 16:38 - 18415338 _____ () C:\Users\Sam\Downloads\intel_rst_12_9_4_1000_whql.zip
2015-03-23 16:34 - 2015-03-23 16:34 - 02448688 _____ (Megaify Software ) C:\Users\Sam\Downloads\DriverToolkitInstaller.exe
2015-03-23 16:30 - 2015-03-23 16:31 - 01196816 _____ (Copyright © 2013 eSupport.com, Inc • All Rights Reserved ) C:\Users\Sam\Downloads\driveragent-setup-1213.exe
2015-03-23 16:29 - 2015-03-23 16:29 - 00000937 _____ () C:\Users\Public\Desktop\CPUID HWMonitor.lnk
2015-03-23 16:28 - 2015-03-23 16:28 - 01191992 _____ ( ) C:\Users\Sam\Downloads\hwmonitor_1.27.exe
2015-03-22 23:33 - 2015-03-28 19:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2015-03-22 23:33 - 2015-03-28 19:35 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com
2015-03-22 23:33 - 2015-03-28 19:35 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2015-03-22 23:33 - 2015-03-22 23:33 - 00001815 _____ () C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk
2015-03-22 23:32 - 2015-03-22 23:32 - 21459360 _____ (SUPERAntiSpyware) C:\Users\Sam\Downloads\SUPERAntiSpyware.exe
2015-03-22 21:10 - 2015-03-28 19:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ROCCAT
2015-03-22 21:10 - 2015-03-28 19:34 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-03-22 21:10 - 2015-03-22 21:10 - 00000000 ____D () C:\Program Files (x86)\ROCCAT
2015-03-22 21:09 - 2015-03-22 21:10 - 30151898 _____ () C:\Users\Sam\Downloads\ROCCAT_Kova[+]_DRV1.25.zip
2015-03-22 20:04 - 2015-03-23 16:20 - 00108859 _____ () C:\Users\Sam\Downloads\usbdeview_241-x64.zip
2015-03-21 17:59 - 2015-03-21 17:59 - 00000722 _____ () C:\Users\Sam\Desktop\StarCitizen.lnk
2015-03-21 17:59 - 2015-03-21 17:59 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StarCitizen
2015-03-21 17:56 - 2015-03-21 17:57 - 38885078 _____ () C:\Users\Sam\Downloads\StarCitizenInstaller (1).exe
2015-03-20 15:19 - 2015-03-20 15:22 - 00008156 _____ () C:\Users\Sam\Downloads\software_removal_tool.log
2015-03-17 21:24 - 2015-03-17 21:24 - 00007663 _____ () C:\Users\Sam\AppData\Local\Resmon.ResmonCfg
2015-03-17 19:30 - 2015-03-17 19:30 - 00000202 _____ () C:\Users\Sam\Desktop\PAYDAY 2.url
2015-03-16 20:19 - 2015-03-16 20:19 - 00536064 _____ () C:\Users\Sam\Downloads\youtu.be-J7bANMHnPUk.webp
2015-03-13 18:59 - 2015-03-28 19:34 - 00000000 ____D () C:\Games
2015-03-13 18:59 - 2015-03-13 18:59 - 00000802 _____ () C:\Users\Public\Desktop\World of Warships.lnk
2015-03-13 18:59 - 2015-03-13 18:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warships
2015-03-13 18:56 - 2015-03-13 18:56 - 09040664 _____ (Wargaming.net ) C:\Users\Sam\Downloads\WoWS_internet_install_eu.exe
2015-03-13 14:52 - 2015-03-13 14:52 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-03-13 14:50 - 2015-03-13 14:51 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Sam\Downloads\mbam-setup-2.0.4.1028.exe
2015-03-13 00:23 - 2015-03-13 00:23 - 00000000 ____D () C:\Users\Sam\Desktop\SuperMario64HD_Data
2015-03-12 21:42 - 2015-03-12 21:42 - 10580340 _____ () C:\Users\Sam\Downloads\tardsplaya_1.0.0.5.7z
2015-03-12 21:42 - 2015-03-12 21:42 - 00000000 ____D () C:\Users\Sam\Desktop\Tardsplaya
2015-03-11 23:03 - 2015-03-11 23:03 - 01174216 _____ (Igor Pavlov) C:\Users\Sam\Desktop\DDU v14.0.0.1.exe
2015-03-11 23:03 - 2015-03-11 23:03 - 00266959 _____ (Igor Pavlov) C:\Users\Sam\Downloads\GiveMePower v2.1.0.0.exe
2015-03-11 23:03 - 2015-03-11 23:03 - 00266959 _____ (Igor Pavlov) C:\Users\Sam\Desktop\GiveMePower v2.1.0.0.exe
2015-03-11 23:01 - 2015-03-11 23:03 - 01174216 _____ (Igor Pavlov) C:\Users\Sam\Downloads\DDU v14.0.0.1.exe
2015-03-11 16:05 - 2015-02-20 06:41 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-03-11 16:05 - 2015-02-20 06:40 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-03-11 16:05 - 2015-02-20 06:40 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-03-11 16:05 - 2015-02-20 06:40 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-03-11 16:05 - 2015-02-20 06:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-03-11 16:05 - 2015-02-20 06:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-03-11 16:05 - 2015-02-20 06:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-03-11 16:05 - 2015-02-20 06:12 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-03-11 16:05 - 2015-02-20 05:29 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-03-11 16:05 - 2015-02-20 05:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-03-11 16:05 - 2015-02-03 05:34 - 05554104 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-03-11 16:05 - 2015-02-03 05:34 - 00693176 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-03-11 16:05 - 2015-02-03 05:34 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-03-11 16:05 - 2015-02-03 05:33 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-03-11 16:05 - 2015-02-03 05:31 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-03-11 16:05 - 2015-02-03 05:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-03-11 16:05 - 2015-02-03 05:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-03-11 16:05 - 2015-02-03 05:30 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-03-11 16:05 - 2015-02-03 05:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 16:05 - 2015-02-03 05:30 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-03-11 16:05 - 2015-02-03 05:30 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-03-11 16:05 - 2015-02-03 05:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-03-11 16:05 - 2015-02-03 05:30 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-03-11 16:05 - 2015-02-03 05:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-03-11 16:05 - 2015-02-03 05:30 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 16:05 - 2015-02-03 05:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2015-03-11 16:05 - 2015-02-03 05:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2015-03-11 16:05 - 2015-02-03 05:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2015-03-11 16:05 - 2015-02-03 05:28 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-03-11 16:05 - 2015-02-03 05:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-03-11 16:05 - 2015-02-03 05:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2015-03-11 16:05 - 2015-02-03 05:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-03-11 16:05 - 2015-02-03 05:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-03-11 16:05 - 2015-02-03 05:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-03-11 16:05 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-03-11 16:05 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-03-11 16:05 - 2015-02-03 05:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-03-11 16:05 - 2015-02-03 05:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2015-03-11 16:05 - 2015-02-03 05:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2015-03-11 16:05 - 2015-02-03 05:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2015-03-11 16:05 - 2015-02-03 05:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-03-11 16:05 - 2015-02-03 04:32 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-03-11 16:05 - 2014-11-01 00:24 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-03-11 16:05 - 2014-06-28 02:21 - 00532176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-03-11 16:05 - 2014-06-28 02:21 - 00457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2015-03-11 16:04 - 2015-03-06 07:56 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-03-11 16:04 - 2015-03-06 07:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-03-11 16:04 - 2015-03-06 07:42 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-03-11 16:04 - 2015-03-06 07:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-03-11 16:04 - 2015-03-06 07:41 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-03-11 16:04 - 2015-03-06 07:41 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-03-11 16:04 - 2015-03-06 07:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-03-11 16:04 - 2015-03-06 07:38 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-03-11 16:04 - 2015-03-06 07:36 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-03-11 16:04 - 2015-03-06 07:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-03-11 16:04 - 2015-03-06 07:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-03-11 16:04 - 2015-03-06 07:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-03-11 16:04 - 2015-03-06 07:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-03-11 16:04 - 2015-03-06 07:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-03-11 16:04 - 2015-03-06 07:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-03-11 16:04 - 2015-03-06 07:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-03-11 16:04 - 2015-03-06 07:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-03-11 16:04 - 2015-03-06 07:09 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-03-11 16:04 - 2015-03-06 07:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-03-11 16:04 - 2015-03-06 07:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-03-11 16:04 - 2015-03-06 07:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-03-11 16:04 - 2015-03-06 07:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-03-11 16:04 - 2015-02-26 05:25 - 03204096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-03-11 16:04 - 2015-02-24 05:15 - 00389800 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-03-11 16:04 - 2015-02-24 04:32 - 00342696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-03-11 16:04 - 2015-02-21 03:16 - 25021440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-03-11 16:04 - 2015-02-21 02:41 - 12827648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-03-11 16:04 - 2015-02-21 02:27 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-03-11 16:04 - 2015-02-21 02:27 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-03-11 16:04 - 2015-02-21 02:25 - 19720192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-03-11 16:04 - 2015-02-21 01:58 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-03-11 16:04 - 2015-02-21 01:32 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-03-11 16:04 - 2015-02-20 05:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-03-11 16:04 - 2015-02-20 05:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-03-11 16:04 - 2015-02-20 04:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-03-11 16:04 - 2015-02-20 04:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-03-11 16:04 - 2015-02-20 04:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-03-11 16:04 - 2015-02-20 04:48 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-03-11 16:04 - 2015-02-20 04:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-03-11 16:04 - 2015-02-20 04:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-03-11 16:04 - 2015-02-20 04:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-03-11 16:04 - 2015-02-20 04:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-03-11 16:04 - 2015-02-20 04:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-03-11 16:04 - 2015-02-20 04:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-03-11 16:04 - 2015-02-20 04:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-03-11 16:04 - 2015-02-20 04:32 - 06035456 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-03-11 16:04 - 2015-02-20 04:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-03-11 16:04 - 2015-02-20 04:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-03-11 16:04 - 2015-02-20 04:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-03-11 16:04 - 2015-02-20 04:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-03-11 16:04 - 2015-02-20 04:09 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-03-11 16:04 - 2015-02-20 04:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-03-11 16:04 - 2015-02-20 04:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-03-11 16:04 - 2015-02-20 04:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-03-11 16:04 - 2015-02-20 04:06 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-03-11 16:04 - 2015-02-20 04:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-03-11 16:04 - 2015-02-20 04:03 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-03-11 16:04 - 2015-02-20 04:01 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-03-11 16:04 - 2015-02-20 04:00 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-03-11 16:04 - 2015-02-20 03:58 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-03-11 16:04 - 2015-02-20 03:56 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-03-11 16:04 - 2015-02-20 03:56 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-03-11 16:04 - 2015-02-20 03:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-03-11 16:04 - 2015-02-20 03:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-03-11 16:04 - 2015-02-20 03:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-03-11 16:04 - 2015-02-20 03:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-03-11 16:04 - 2015-02-20 03:43 - 14398976 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-03-11 16:04 - 2015-02-20 03:41 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-03-11 16:04 - 2015-02-20 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-03-11 16:04 - 2015-02-20 03:30 - 04300288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-03-11 16:04 - 2015-02-20 03:28 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-03-11 16:04 - 2015-02-20 03:24 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-03-11 16:04 - 2015-02-20 03:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-03-11 16:04 - 2015-02-20 03:23 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-03-11 16:04 - 2015-02-20 03:16 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-03-11 16:04 - 2015-02-20 03:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-03-11 16:04 - 2015-02-20 03:01 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-03-11 16:04 - 2015-02-20 02:57 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-03-11 16:04 - 2015-02-20 02:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-03-11 16:04 - 2015-02-13 07:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-03-11 16:04 - 2015-02-13 07:22 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-03-11 16:04 - 2015-02-03 05:31 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-03-11 16:04 - 2015-02-03 05:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-03-11 16:04 - 2015-02-03 05:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-03-11 16:04 - 2015-02-03 05:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2015-03-11 16:04 - 2015-01-31 01:56 - 00459336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-03-11 16:04 - 2015-01-17 04:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-03-11 16:04 - 2015-01-17 04:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-03-11 16:03 - 2015-02-04 05:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-03-11 16:03 - 2015-02-04 04:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2015-03-10 19:08 - 2015-03-10 19:08 - 00000000 ____D () C:\Users\Sam\Documents\Colossal Order
2015-03-10 19:08 - 2015-03-10 19:08 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\Colossal Order
2015-03-10 19:08 - 2015-03-10 19:08 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\.mono
2015-03-10 19:08 - 2015-03-10 19:08 - 00000000 ____D () C:\Users\Sam\AppData\Local\Colossal Order
2015-03-10 19:08 - 2015-03-10 19:08 - 00000000 ____D () C:\ProgramData\.mono
2015-03-10 18:04 - 2015-03-10 18:04 - 00000202 _____ () C:\Users\Sam\Desktop\Cities Skylines.url
2015-03-10 01:13 - 2015-03-10 01:13 - 00001329 _____ () C:\Users\Sam\Downloads\event.ics
2015-03-10 00:28 - 2015-03-10 00:22 - 03141283 _____ () C:\Users\Sam\Desktop\Heidelberg terrain.zip
2015-03-10 00:21 - 2015-03-10 00:22 - 03141283 _____ () C:\Users\Sam\Downloads\Heidelberg terrain.zip
2015-03-09 18:02 - 2015-03-09 18:02 - 00002047 _____ () C:\Users\Sam\Downloads\All Shouts-37516-1-2.7z
2015-03-09 17:56 - 2015-03-09 17:56 - 00878274 _____ () C:\Users\Sam\Downloads\Example-35286-1-0.rar
2015-03-09 17:52 - 2015-03-09 17:52 - 00000343 _____ () C:\Users\Sam\Downloads\Shouts-5719-1-0.zip
2015-03-09 01:33 - 2015-03-09 01:33 - 00851456 _____ (Adobe Inc.) C:\Users\Sam\Downloads\img_72958.scr
2015-03-07 12:34 - 2015-03-07 12:34 - 00014171 _____ () C:\Users\Sam\Downloads\ENBoost 5_0-38649-5-0.zip
2015-03-07 12:13 - 2015-03-07 12:13 - 02360176 _____ () C:\Users\Sam\Downloads\enbseries_skyrim_v0266 (1).zip
2015-03-07 12:12 - 2015-03-07 12:12 - 00584910 _____ () C:\Users\Sam\Downloads\enbseries_skyrim_v0096patch9antifreeze.zip
2015-03-06 20:58 - 2015-03-06 20:58 - 00004088 _____ () C:\Users\Sam\Downloads\JWs Skyrim Configuration Files -- INI Files-59292-v-3.rar
2015-03-06 18:56 - 2015-03-06 18:56 - 00019981 _____ () C:\Users\Sam\Downloads\Complete_Crafting_Overhaul_Compatibility_Patch-26230-0-24.7z
2015-03-06 14:33 - 2015-03-06 14:33 - 00049775 _____ () C:\Users\Sam\Downloads\Skip Bethesda intro-100.zip
2015-03-06 14:32 - 2015-03-06 14:32 - 00326483 _____ () C:\Users\Sam\Downloads\ENB Customizer v2_1 FIXED-17400-2-1.rar
2015-03-05 13:23 - 2015-03-05 13:23 - 15698775 _____ () C:\Users\Sam\Downloads\Skyrim_Particle_Patch_for_ENB--All-In-One.zip
2015-03-04 20:49 - 2015-03-04 20:49 - 00007383 _____ () C:\Users\Sam\Downloads\SSME - Skyrim Startup Memory Editor-50305-1-8-0-0.zip
2015-03-04 20:41 - 2015-03-04 20:41 - 00471625 _____ () C:\Users\Sam\Downloads\skse_1_06_16.7z
2015-03-04 20:06 - 2015-03-04 20:06 - 00057500 _____ () C:\Users\Sam\Downloads\Texture Pack Combiner LIGHT v1_95b-20801-1-95b.rar
2015-03-04 20:06 - 2015-03-04 20:06 - 00057445 _____ () C:\Users\Sam\Downloads\Texture Pack Combiner v1_95b-20801-1-95b.rar
2015-03-04 18:31 - 2015-03-04 18:31 - 00013856 _____ () C:\Users\Sam\Downloads\Unlimited Rings Multilingual-10281.rar

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-03 13:53 - 2010-11-21 04:52 - 02059891 _____ () C:\Windows\WindowsUpdate.log
2015-04-03 13:50 - 2015-02-13 15:19 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2015-04-03 13:50 - 2015-01-12 14:10 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-03 13:50 - 2014-12-30 17:37 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-04-03 13:50 - 2010-11-21 05:47 - 00180550 _____ () C:\Windows\PFRO.log
2015-04-03 13:50 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-03 13:50 - 2009-07-14 06:51 - 00048773 _____ () C:\Windows\setupact.log
2015-04-03 13:48 - 2009-07-14 06:45 - 00021408 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-04-03 13:48 - 2009-07-14 06:45 - 00021408 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-04-03 00:17 - 2015-02-20 15:56 - 00003014 _____ () C:\Windows\System32\Tasks\MSIAfterburner
2015-04-02 23:50 - 2015-02-13 12:30 - 00000020 _____ () C:\Users\Sam\AppData\Roaming\appdataFr3.bin
2015-04-02 23:21 - 2015-01-12 14:10 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-02 17:01 - 2015-01-12 14:12 - 00002254 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-04-02 17:01 - 2010-11-21 08:50 - 00699416 _____ () C:\Windows\system32\perfh007.dat
2015-04-02 17:01 - 2010-11-21 08:50 - 00149556 _____ () C:\Windows\system32\perfc007.dat
2015-04-02 17:01 - 2009-07-14 07:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-02 16:55 - 2015-01-26 00:18 - 00000000 ____D () C:\Users\Sam\AppData\Local\Adobe
2015-04-01 23:46 - 2015-02-24 13:13 - 00000000 ____D () C:\AdwCleaner
2015-04-01 17:19 - 2015-02-20 15:53 - 00000000 ____D () C:\Program Files (x86)\MSI Afterburner
2015-04-01 15:57 - 2015-02-03 15:59 - 00000000 ____D () C:\Users\Sam\Documents\Euro Truck Simulator 2
2015-03-30 20:07 - 2015-02-12 18:57 - 00001384 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2015-03-30 18:06 - 2015-02-21 17:30 - 00000000 ____D () C:\Users\Sam\Documents\Nexus Mod Manager
2015-03-30 18:00 - 2015-02-28 13:05 - 00000000 ____D () C:\Users\Sam\AppData\Local\Skyrim
2015-03-28 23:17 - 2015-01-12 14:08 - 00000000 ____D () C:\Users\Sam\AppData\Local\VirtualStore
2015-03-28 20:05 - 2015-01-12 15:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-03-28 20:00 - 2014-12-30 17:37 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2015-03-28 20:00 - 2014-12-30 17:37 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2015-03-28 19:40 - 2015-01-12 14:15 - 00058016 _____ () C:\Users\Sam\AppData\Local\GDIPFONTCACHEV1.DAT
2015-03-28 19:38 - 2015-01-15 16:51 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-03-28 19:38 - 2015-01-12 14:08 - 00000000 ____D () C:\Users\Sam
2015-03-28 19:35 - 2015-02-25 17:28 - 00000000 ____D () C:\BOSS
2015-03-28 19:35 - 2015-02-20 16:56 - 00000000 ____D () C:\Users\Sam\Heaven
2015-03-28 19:35 - 2015-02-18 13:49 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2015-03-28 19:35 - 2015-01-15 16:51 - 00000000 ____D () C:\Windows\system32\appraiser
2015-03-28 19:35 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-03-28 19:35 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-03-28 19:35 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\security
2015-03-28 19:35 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2015-03-28 19:35 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2015-03-28 19:34 - 2015-01-30 18:24 - 00000000 ____D () C:\ProgramData\Package Cache
2015-03-28 19:34 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-03-28 05:44 - 2015-01-12 15:00 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2015-03-28 05:44 - 2015-01-12 15:00 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2015-03-28 05:43 - 2015-01-12 15:00 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2015-03-28 05:43 - 2015-01-12 15:00 - 01570672 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2015-03-27 18:21 - 2015-02-20 16:56 - 01065984 _____ () C:\Users\Sam\AppData\Local\file__0.localstorage
2015-03-26 16:35 - 2015-01-12 14:48 - 00000000 ____D () C:\Users\Sam\AppData\Local\Spotify
2015-03-23 19:03 - 2015-02-08 19:55 - 00000000 ____D () C:\Users\Sam\AppData\Roaming\vlc
2015-03-23 17:50 - 2014-12-30 17:25 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2015-03-23 16:29 - 2015-02-06 22:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2015-03-23 16:29 - 2015-02-06 22:20 - 00000000 ____D () C:\Program Files\CPUID
2015-03-21 17:59 - 2015-01-13 19:31 - 00000000 ____D () C:\Windows\SysWOW64\directx
2015-03-13 21:41 - 2015-02-12 18:55 - 02906928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-03-13 21:41 - 2015-01-12 14:56 - 16022016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-03-13 21:41 - 2015-01-12 14:56 - 03303448 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-03-13 21:41 - 2014-12-30 17:37 - 00073872 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-03-13 21:41 - 2014-12-30 17:37 - 00060560 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2015-03-13 21:41 - 2014-12-30 17:27 - 18580512 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-03-13 21:41 - 2014-12-30 17:27 - 14121624 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-03-13 21:41 - 2014-12-30 17:27 - 00027441 _____ () C:\Windows\system32\nvinfo.pb
2015-03-13 18:16 - 2014-12-30 17:37 - 06861968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-03-13 18:16 - 2014-12-30 17:37 - 03526856 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2015-03-13 18:16 - 2014-12-30 17:37 - 02559808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2015-03-13 18:16 - 2014-12-30 17:37 - 00935056 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-03-13 18:16 - 2014-12-30 17:37 - 00386248 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-03-13 18:16 - 2014-12-30 17:37 - 00062608 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-03-12 12:59 - 2009-07-14 06:45 - 00267816 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-03-12 12:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2015-03-12 12:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2015-03-12 02:29 - 2015-01-14 02:28 - 00000000 ____D () C:\Windows\system32\MRT
2015-03-12 02:25 - 2015-01-14 02:28 - 122905848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-03-11 15:10 - 2014-12-30 17:37 - 04246327 _____ () C:\Windows\system32\nvcoproc.bin
2015-03-10 18:12 - 2014-08-20 19:04 - 00819896 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2015-03-09 18:04 - 2015-01-13 19:40 - 00143725 _____ () C:\Windows\DirectX.log
2015-03-06 16:44 - 2015-02-28 13:33 - 00000965 _____ () C:\Users\Sam\Desktop\Skyrim (SKSE).lnk
2015-03-06 01:29 - 2015-02-21 17:04 - 00000897 _____ () C:\Users\Public\Desktop\Nexus Mod Manager.lnk
2015-03-06 01:29 - 2015-02-21 17:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager
2015-03-06 01:29 - 2015-02-21 17:04 - 00000000 ____D () C:\Program Files\Nexus Mod Manager
2015-03-04 17:18 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\tracing

==================== Files in the root of some directories =======

2015-02-13 12:30 - 2015-04-02 23:50 - 0000020 _____ () C:\Users\Sam\AppData\Roaming\appdataFr3.bin
2015-02-20 16:56 - 2015-03-27 18:21 - 1065984 _____ () C:\Users\Sam\AppData\Local\file__0.localstorage
2015-03-17 21:24 - 2015-03-17 21:24 - 0007663 _____ () C:\Users\Sam\AppData\Local\Resmon.ResmonCfg

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-03-26 22:41

==================== End Of Log ============================
         

--- --- ---

SystemLook 30.07.11 by jpshortstuff
Log created at 13:52 on 03/04/2015 by Sam
Administrator - Elevation successful

========== regfind ==========

Searching for "FileCure"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\shell\openas\command]
"FileCure.old"="%SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\shell\opendlg\command]
@="C:\Program Files (x86)\ParetoLogic\FileCure\FileCure_noapp.exe %1"

Searching for "TampaGeneration"
No data found.

Searching for "eSupport.com"
No data found.

Searching for "         "
[HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0]
"ProcessorNameString"="Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz"
[HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1]
"ProcessorNameString"="Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz"
[HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2]
"ProcessorNameString"="Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz"
[HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\3]
"ProcessorNameString"="Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz"
[HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\4]
"ProcessorNameString"="Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz"
[HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\5]
"ProcessorNameString"="Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz"
[HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\6]
"ProcessorNameString"="Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz"
[HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\7]
"ProcessorNameString"="Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\GameUX\Games\{F937DE76-E586-4220-8334-3E7F3B9EC648}]
"RatingsInfo"="<Ratings xmlns="urn:schemas-microsoft-com:GameDescription.v1">
            <Rating ratingSystemID="{768BD93D-63BE-46A9-8994-0B53C4B5248F}" ratingID="{78D8CC82-372F-44e4-B70C-8944DB7BCC24}">
                <Descriptor descriptorID="{ABE23B46-7F9F-495b-B4A9-87F41743727F}"/>
                <Descriptor descriptorID="{4BDB9E0D-53CF-4a28-865F-B315818E7627}"/>
                <Descriptor descriptorID="{27202CE3-EB93-49bc-A570-23AEBCC2A742}"/>
                <Descriptor descriptorID="{D49A8F0C-B183-4a34-8D86-33F2DC0E2D6C}"/>
                <Descriptor descriptorID="{E8930D9B-3E94-407c-B890-FDB5025DBCA3}"/>
            </Rating>
            <Rating ratingSystemID="{36798944-B235-48ac-BF21-E25671F597EE}" ratingID="{E2681CD6-318A-4935-8275-AF657045C333}">
                <Descriptor descriptorID="{F110F831-9412-40c9-860A-B489407ED374}"/>
                <Descriptor descriptorID
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell]
"ConfigXML"="             <PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="1" XmlRenderingType="text" >                 <InitializationParameters>                     <Param Name="PSVersion" Value="2.0"/>                 </InitializationParameters>                 <Resources>                     <Resource ResourceUri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell" SupportsOptions="true" ExactMatch="true">                         <Security xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Uri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell" ExactMatch="true" Sddl="O:NSG:BAD:P(A;;GA;;;BA)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)"/>                         <Capability Type="Shell"/>                     </Resource>                 </Res
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell32]
"ConfigXML"="<PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell32" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="1" XmlRenderingType="text" Architecture="32" >                         <InitializationParameters>                             <Param Name="PSVersion" Value="2.0"/>                         </InitializationParameters>                         <Resources>                             <Resource ResourceUri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell32" SupportsOptions="true" ExactMatch="true">                                 <Security xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Uri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell32" ExactMatch="true" Sddl="O:NSG:BAD:P(A;;GA;;;BA)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)"/>                                
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ACPI\GenuineIntel_-_Intel64_Family_6_Model_26_-_Intel(R)_Core(TM)_i7_CPU_________920__@_2.67GHz\_1]
"FriendlyName"="Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ACPI\GenuineIntel_-_Intel64_Family_6_Model_26_-_Intel(R)_Core(TM)_i7_CPU_________920__@_2.67GHz\_2]
"FriendlyName"="Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ACPI\GenuineIntel_-_Intel64_Family_6_Model_26_-_Intel(R)_Core(TM)_i7_CPU_________920__@_2.67GHz\_3]
"FriendlyName"="Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ACPI\GenuineIntel_-_Intel64_Family_6_Model_26_-_Intel(R)_Core(TM)_i7_CPU_________920__@_2.67GHz\_4]
"FriendlyName"="Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ACPI\GenuineIntel_-_Intel64_Family_6_Model_26_-_Intel(R)_Core(TM)_i7_CPU_________920__@_2.67GHz\_5]
"FriendlyName"="Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ACPI\GenuineIntel_-_Intel64_Family_6_Model_26_-_Intel(R)_Core(TM)_i7_CPU_________920__@_2.67GHz\_6]
"FriendlyName"="Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ACPI\GenuineIntel_-_Intel64_Family_6_Model_26_-_Intel(R)_Core(TM)_i7_CPU_________920__@_2.67GHz\_7]
"FriendlyName"="Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ACPI\GenuineIntel_-_Intel64_Family_6_Model_26_-_Intel(R)_Core(TM)_i7_CPU_________920__@_2.67GHz\_8]
"FriendlyName"="Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_&PROD_&REV_4096#AAB91418CFAE2I3G&0#]
"DeviceDesc"="                "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_GENERIC-&PROD_SD#MMC&REV_1.00#7&15BE85E8&0&20060413092100000&2#]
"DeviceDesc"="SD/MMC          "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\ACPI\GenuineIntel_-_Intel64_Family_6_Model_26_-_Intel(R)_Core(TM)_i7_CPU_________920__@_2.67GHz\_1]
"FriendlyName"="Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\ACPI\GenuineIntel_-_Intel64_Family_6_Model_26_-_Intel(R)_Core(TM)_i7_CPU_________920__@_2.67GHz\_2]
"FriendlyName"="Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\ACPI\GenuineIntel_-_Intel64_Family_6_Model_26_-_Intel(R)_Core(TM)_i7_CPU_________920__@_2.67GHz\_3]
"FriendlyName"="Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\ACPI\GenuineIntel_-_Intel64_Family_6_Model_26_-_Intel(R)_Core(TM)_i7_CPU_________920__@_2.67GHz\_4]
"FriendlyName"="Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\ACPI\GenuineIntel_-_Intel64_Family_6_Model_26_-_Intel(R)_Core(TM)_i7_CPU_________920__@_2.67GHz\_5]
"FriendlyName"="Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\ACPI\GenuineIntel_-_Intel64_Family_6_Model_26_-_Intel(R)_Core(TM)_i7_CPU_________920__@_2.67GHz\_6]
"FriendlyName"="Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\ACPI\GenuineIntel_-_Intel64_Family_6_Model_26_-_Intel(R)_Core(TM)_i7_CPU_________920__@_2.67GHz\_7]
"FriendlyName"="Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\ACPI\GenuineIntel_-_Intel64_Family_6_Model_26_-_Intel(R)_Core(TM)_i7_CPU_________920__@_2.67GHz\_8]
"FriendlyName"="Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_&PROD_&REV_4096#AAB91418CFAE2I3G&0#]
"DeviceDesc"="                "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_GENERIC-&PROD_SD#MMC&REV_1.00#7&15BE85E8&0&20060413092100000&2#]
"DeviceDesc"="SD/MMC          "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\ACPI\GenuineIntel_-_Intel64_Family_6_Model_26_-_Intel(R)_Core(TM)_i7_CPU_________920__@_2.67GHz\_1]
"FriendlyName"="Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\ACPI\GenuineIntel_-_Intel64_Family_6_Model_26_-_Intel(R)_Core(TM)_i7_CPU_________920__@_2.67GHz\_2]
"FriendlyName"="Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\ACPI\GenuineIntel_-_Intel64_Family_6_Model_26_-_Intel(R)_Core(TM)_i7_CPU_________920__@_2.67GHz\_3]
"FriendlyName"="Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\ACPI\GenuineIntel_-_Intel64_Family_6_Model_26_-_Intel(R)_Core(TM)_i7_CPU_________920__@_2.67GHz\_4]
"FriendlyName"="Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\ACPI\GenuineIntel_-_Intel64_Family_6_Model_26_-_Intel(R)_Core(TM)_i7_CPU_________920__@_2.67GHz\_5]
"FriendlyName"="Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\ACPI\GenuineIntel_-_Intel64_Family_6_Model_26_-_Intel(R)_Core(TM)_i7_CPU_________920__@_2.67GHz\_6]
"FriendlyName"="Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\ACPI\GenuineIntel_-_Intel64_Family_6_Model_26_-_Intel(R)_Core(TM)_i7_CPU_________920__@_2.67GHz\_7]
"FriendlyName"="Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\ACPI\GenuineIntel_-_Intel64_Family_6_Model_26_-_Intel(R)_Core(TM)_i7_CPU_________920__@_2.67GHz\_8]
"FriendlyName"="Intel(R) Core(TM) i7 CPU         920  @ 2.67GHz"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_&PROD_&REV_4096#AAB91418CFAE2I3G&0#]
"DeviceDesc"="                "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_GENERIC-&PROD_SD#MMC&REV_1.00#7&15BE85E8&0&20060413092100000&2#]
"DeviceDesc"="SD/MMC          "

-= EOF =-
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015
Ran by Sam at 2015-04-03 13:55:01
Running from C:\Users\Sam\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Kaspersky Anti-Virus (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}
AS: Kaspersky Anti-Virus (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Acer System Information (HKLM-x32\...\{72199E33-4F2A-4B7F-8E25-95DDDD50A678}) (Version: 1.0.0 - Acer)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.9.0.465 - Adobe Systems Incorporated)
Adobe Photoshop CC 2014 (HKLM-x32\...\{D7A4F897-B20A-42D0-862D-CB5F6DB7391D}) (Version: 15.2.2 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
ArchiCrypt Ultimate RAM-Disk 4 Version 4.6.4.4291 (HKLM\...\ArchiCrypt Ultimate RAM-Disk 4_is1) (Version: 4.6.4.4291 - Softwareentwicklung Patric Remus - ArchiCrypt)
Battlefield™ Hardline-Beta (HKLM-x32\...\{F5526D9D-13AD-4270-8707-AC921D168299}) (Version: 1.0.0.1 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.6.2 - EA Digital Illusions CE AB)
BeamNG.drive (HKLM-x32\...\Steam App 284160) (Version:  - BeamNG)
Blacklight: Retribution (HKLM-x32\...\Steam App 209870) (Version:  - Builder Box, LLC)
BOSS (HKLM-x32\...\BOSS) (Version: 2.1.1 - BOSS Development Team)
Car Mechanic Simulator 2014 (HKLM-x32\...\Car Mechanic Simulator 2014_is1) (Version:  - )
Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version:  - Cheat Engine)
Cities: Skylines (HKLM-x32\...\Steam App 255710) (Version:  - Colossal Order)
CPUID CPU-Z 1.71.1 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
CPUID HWMonitor 1.27 (HKLM\...\CPUID HWMonitor_is1) (Version:  - )
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
DAEMON Tools Ultra (HKLM-x32\...\DAEMON Tools Ultra) (Version: 3.0.0.0309 - Disc Soft Ltd)
Dead Island: Epidemic (HKLM-x32\...\Steam App 222900) (Version:  - Stunlock Studios)
DRAGON BALL XENOVERSE (HKLM-x32\...\Steam App 323470) (Version:  - DIMPS)
Euro Truck Simulator 2 (HKLM-x32\...\Steam App 227300) (Version:  - SCS Software)
Evolve (HKLM-x32\...\Steam App 273350) (Version:  - Turtle Rock Studios)
Fallout: New Vegas (HKLM-x32\...\Steam App 22380) (Version:  - Obsidian Entertainment)
FOMM version 0.14 (HKLM-x32\...\{072C2AEF-16B2-46B7-BA7F-D0CAA7B4F89F}_is1) (Version: 0.14 - Prideslayer)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 41.0.2272.118 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Heaven Benchmark version 4.0 (HKLM-x32\...\Unigine Heaven Benchmark (Basic Edition)_is1) (Version: 4.0 - Unigine Corp.)
Insurgency (HKLM-x32\...\Steam App 222880) (Version:  - New World Interactive)
Interstellar Marines (HKLM-x32\...\Steam App 236370) (Version:  - Zero Point Software)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Joulemeter (HKLM-x32\...\{E043568C-1745-4C69-9D52-43F6E79EB03B}) (Version: 1.2.0 - Microsoft Research)
Kaspersky Anti-Virus (HKLM-x32\...\InstallWIX_{8ED07EBD-22AD-415A-B71E-C1AD86862C2E}) (Version: 15.0.1.415 - Kaspersky Lab)
Kaspersky Anti-Virus (x32 Version: 15.0.1.415 - Kaspersky Lab) Hidden
Kerbal Space Program (HKLM-x32\...\Steam App 220200) (Version:  - Squad)
Life Is Strange™ (HKLM-x32\...\Steam App 319630) (Version:  - DONTNOD Entertainment)
LOOT (HKLM-x32\...\LOOT) (Version: 0.6.1 - LOOT Development Team)
Malwarebytes Anti-Malware Version 2.1.4.1018 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.4.1018 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Excel Viewer (HKLM-x32\...\{95120000-003F-0409-0000-0000000FF1CE}) (Version: 12.0.6219.1000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{01db25f3-1b76-4d97-88c8-1c90634d88fb}) (Version: 11.0.60610.1 - Корпорация Майкрософт)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Mozilla Firefox 33.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.0.1 (x86 de)) (Version: 33.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.0.1 - Mozilla)
MSI Afterburner 4.1.0 (HKLM-x32\...\Afterburner) (Version: 4.1.0 - MSI Co., LTD)
MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.6 - F.J. Wechselberger)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.53.7 - Black Tree Gaming)
NVIDIA 3D Vision Controller-Treiber 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 347.09 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 347.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.88 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.4.1.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.1.21 - NVIDIA Corporation)
NVIDIA Grafiktreiber 347.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.88 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
OkayFreedom (HKLM-x32\...\{3F3FB10C-7175-4D38-9335-3488B89C12AF}) (Version: 1.4.3 - Steganos Software GmbH)
Origin (HKLM-x32\...\Origin) (Version: 9.5.5.2850 - Electronic Arts, Inc.)
PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version:  - OVERKILL - a Starbreeze Studio.)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.994 - Even Balance, Inc.)
RegiStax 6 (HKU\S-1-5-21-314491385-833715928-1570723329-1001\...\RegiStax 6) (Version:  - )
RegiStax 6.1.0.8 update (HKU\S-1-5-21-314491385-833715928-1570723329-1001\...\RegiStax 6.1.0.8 update) (Version:  - )
ROCCAT Kova[+] Mouse Driver (HKLM-x32\...\{A86DDFE3-F661-461C-9BF2-876AC2CA57DE}) (Version: 1.10 - Roccat GmbH)
SHIELD Streaming (Version: 4.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.1.21 - NVIDIA Corporation) Hidden
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
SpaceEngine Version 0.9.7.2 (HKLM-x32\...\{E65FD500-9218-44EC-9586-D39FAB4DFDAF}_is1) (Version: 0.9.7.2 - SpaceEngine)
Spotify (HKU\S-1-5-21-314491385-833715928-1570723329-1001\...\Spotify) (Version: 0.9.15.27.g87efe634 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 6.0.1170 - SUPERAntiSpyware.com)
TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version:  - TechPowerUp)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
TrackMania² Stadium (HKLM-x32\...\Steam App 232910) (Version:  - Nadeo)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
War Thunder (HKLM-x32\...\Steam App 236390) (Version:  - Gaijin Entertainment)
WinRAR 5.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)
World of Warships (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C814EU}_is1) (Version:  - Wargaming.net)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

29-03-2015 15:31:01 Windows Update
29-03-2015 20:42:57 ArchiCrypt Ultimate RAM-Disk 4 4.6.4.4291 Installation
30-03-2015 23:52:24 Installed Joulemeter

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {058DEF93-CBE3-4423-A958-D9179CAACD6C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-01-12] (Google Inc.)
Task: {1EA12BDE-D524-4165-B649-43B2C6642E24} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-01-12] (Google Inc.)
Task: {AF51DFBE-4077-49E0-99A2-828999F6E611} - System32\Tasks\AdobeAAMUpdater-1.0-Sam-PC-Sam => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-09-19] (Adobe Systems Incorporated)
Task: {E6D88600-3242-45C6-BEF6-D76D57C57DF5} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe [2014-12-06] ()
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2014-12-30 17:37 - 2015-03-13 18:16 - 00118472 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-12-19 16:57 - 2014-12-19 16:57 - 01039008 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
2014-12-06 09:03 - 2014-12-06 09:03 - 00565760 _____ () C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
2015-01-31 16:07 - 2015-02-03 16:08 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2015-02-02 16:48 - 2015-02-02 16:48 - 01178112 _____ () C:\ProgramData\{f0f87754-a2c2-aa64-f0f8-87754a2cdd52}\Kaspersky Trial Resetter 2015.exe
2014-08-30 18:12 - 2014-08-30 18:12 - 01269952 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\kpcengine.2.3.dll
2014-12-06 09:01 - 2014-12-06 09:01 - 00071680 _____ () C:\Program Files (x86)\MSI Afterburner\RTMUI.dll
2014-12-06 09:01 - 2014-12-06 09:01 - 00056832 _____ () C:\Program Files (x86)\MSI Afterburner\RTFC.dll
2014-12-06 09:02 - 2014-12-06 09:02 - 00217600 _____ () C:\Program Files (x86)\MSI Afterburner\RTCore.dll
2014-12-06 09:01 - 2014-12-06 09:01 - 00353792 _____ () C:\Program Files (x86)\MSI Afterburner\RTUI.dll
2014-12-06 09:02 - 2014-12-06 09:02 - 00649216 _____ () C:\Program Files (x86)\MSI Afterburner\RTHAL.dll
2015-03-30 20:07 - 2015-03-28 05:45 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-04-02 17:01 - 2015-03-30 23:07 - 01174856 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.118\libglesv2.dll
2015-04-02 17:01 - 2015-03-30 23:07 - 00080200 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.118\libegl.dll
2015-04-02 17:01 - 2015-03-30 23:07 - 09279304 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.118\pdf.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-314491385-833715928-1570723329-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Sam\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: GfExperienceService => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: NvNetworkService => 2
MSCONFIG\Services: NvStreamSvc => 2
MSCONFIG\Services: nvsvc => 2
MSCONFIG\Services: Steam Client Service => 3
MSCONFIG\Services: Stereo Service => 2
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Creative Cloud => "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
MSCONFIG\startupreg: AutoVPNConnect => C:\Program Files (x86)\mvhBytes\AutoVPNConnect\AutoVPNConnect.exe
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: DAEMON Tools Ultra Agent => "C:\Program Files (x86)\DAEMON Tools Ultra\DTAgent.exe" -autorun
MSCONFIG\startupreg: GoogleChromeAutoLaunch_FD70E4195A4DE5E83920BD6414A71B17 => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
MSCONFIG\startupreg: NvBackend => "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
MSCONFIG\startupreg: RoccatKova+ => "C:\Program Files (x86)\ROCCAT\Kova[+] Mouse\Kova[+]Monitor.EXE"
MSCONFIG\startupreg: ShadowPlay => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
MSCONFIG\startupreg: Spotify => "C:\Users\Sam\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Sam\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
MSCONFIG\startupreg: Steam => "D:\Steam\steam.exe" -silent
MSCONFIG\startupreg: SUPERAntiSpyware => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

==================== Accounts: =============================

Administrator (S-1-5-21-314491385-833715928-1570723329-500 - Administrator - Disabled)
Gast (S-1-5-21-314491385-833715928-1570723329-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-314491385-833715928-1570723329-1002 - Limited - Enabled)
Sam (S-1-5-21-314491385-833715928-1570723329-1001 - Administrator - Enabled) => C:\Users\Sam

==================== Faulty Device Manager Devices =============

Name: Standardtastatur (PS/2)
Description: Standardtastatur (PS/2)
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardtastaturen)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Unknown Device
Description: Unknown Device
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: (Standard-USB-Hostcontroller)
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (04/03/2015 01:52:13 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/03/2015 01:50:30 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]

Error: (04/03/2015 01:50:30 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]

Error: (04/03/2015 01:50:30 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcNvVAD endpoint registration failed [0]

Error: (04/03/2015 01:46:13 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/03/2015 01:44:33 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]

Error: (04/03/2015 01:44:33 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]

Error: (04/03/2015 01:44:33 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcNvVAD endpoint registration failed [0]

Error: (04/02/2015 04:57:06 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/01/2015 11:51:06 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (04/03/2015 01:49:25 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 
%%1056

Error: (04/03/2015 01:49:25 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (04/03/2015 01:49:25 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "WMPNetworkSvc" konnte sich nicht als "NT AUTHORITY\NetworkService" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%50

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (04/03/2015 01:48:55 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Software Protection" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/03/2015 01:48:55 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/03/2015 01:48:55 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/03/2015 01:48:55 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "PnkBstrA" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (04/03/2015 01:48:55 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "OkayFreedom VPN Starter Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/03/2015 01:48:55 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Streamer Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (04/03/2015 01:48:55 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Network Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


Microsoft Office Sessions:
=========================
Error: (04/03/2015 01:52:13 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/03/2015 01:50:30 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]

Error: (04/03/2015 01:50:30 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]

Error: (04/03/2015 01:50:30 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcNvVAD endpoint registration failed [0]

Error: (04/03/2015 01:46:13 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/03/2015 01:44:33 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]

Error: (04/03/2015 01:44:33 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]

Error: (04/03/2015 01:44:33 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcNvVAD endpoint registration failed [0]

Error: (04/02/2015 04:57:06 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (04/01/2015 11:51:06 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz
Percentage of memory in use: 27%
Total physical RAM: 10231.17 MB
Available physical RAM: 7454.37 MB
Total Pagefile: 20460.53 MB
Available Pagefile: 17579.61 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:465.75 GB) (Free:379.03 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Daten) (Fixed) (Total:465.76 GB) (Free:274.22 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 1B6AB245)
Partition 1: (Active) - (Size=465.8 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2015
Ran by Sam at 2015-04-03 13:48:54 Run:1
Running from C:\Users\Sam\Desktop
Loaded Profiles: Sam (Available profiles: Sam)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
start
CloseProcesses:
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
Task: {10FA29A9-7B34-4651-BC07-F6FA7B715F88} - \{5E543BA5-DC1E-434E-BEF7-8BABDCCC873D} No Task File <==== ATTENTION
RemoveProxy:
EmptyTemp:
end
         
*****************

Processes closed successfully.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{10FA29A9-7B34-4651-BC07-F6FA7B715F88}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10FA29A9-7B34-4651-BC07-F6FA7B715F88}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{5E543BA5-DC1E-434E-BEF7-8BABDCCC873D}" => Key deleted successfully.

========= RemoveProxy: =========

HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => value deleted successfully.
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value deleted successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value deleted successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value deleted successfully.
HKU\S-1-5-21-314491385-833715928-1570723329-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value deleted successfully.
HKU\S-1-5-21-314491385-833715928-1570723329-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value deleted successfully.


========= End of RemoveProxy: =========

EmptyTemp: => Removed 1.4 GB temporary data.


The system needed a reboot. 

==== End of Fixlog 13:49:18 ====
         

Wir entfernen die letzten Reste und kontrollieren nochmal alles. ESET kann länger (> 2 h) dauern.
Im Anschluss entfernen wir alle verwendeten Tools und ich gebe dir noch ein paar Tipps mit auf den Weg.




Schritt 1
Google Chrome deinstallieren, keine Daten behalten, anschließend neu installieren.




Schritt 2
Downloade dir die passende Version von HitmanPro auf deinen Desktop: HitmanPro - 32 Bit | HitmanPro - 64 Bit.

• Starte die HitmanPro.exe
• Klicke auf
  
• Entferne den Haken bei
  
• Klicke auf
  und
• Akzeptiere die Lizenzbedingungen und klicke auf
• Klicke auf
  
  und auf
• Wenn der Scan beendet wurde, nichts löschen lassen etc. sondern wähle unten links auf der Button-Leiste
  und speichere die Logdatei auf Deinem Desktop.
• Schließe HitmanPro und poste mir das Log.

 

Schritt 3

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Schritt 4
Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.






Bitte poste mit deiner nächsten Antwort

• die Logdatei von HitmanPro,
• die Logdatei von ESET,
• die Logdatei von SecurityCheck.

Fehlende Rückmeldung
Dieses Thema wurde aus den Abos gelöscht. Somit bekomme ich keine Benachrichtigung über neue Antworten.
PM an mich falls Du denoch weiter machen willst.

Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass Dein Rechner schon sauber ist.

Jeder andere bitte hier klicken und einen eigenen Thread erstellen!