Adware geht nicht mehr weg

kriegnes · 11.05.2015, 20:50

Während meiner Abschlussfahrt hat mein Bruder eine Menge Adware auf den PC geladen.
Diese krieg ich jetzt nicht mehr weg :/
Es ist überall Werbung wo Ads by info steht. Alles hängt und spackt rum. Es öffnen sich andauern neue Tabs und oft ändern sich meine Tabs sogar einfach.
Ich habe bereits alles in Systemsteurung -> Programme deinstalliert. Habe 3 oder 4 anitviren Software gedownloaded (von denen auch welche hier empfohlen wurden) Aber erst nach dem ich den Browser zurückgesetzt und neu installiert habe war die Adware weg. Jetzt kam sie aber einfach wieder zurück. Mein Brwoser ist ein paar mal abgestürzt und dann war sie wieder da.
Weis jemand was ich noch machen kann? Win7 komplett neu zu installieren wäre echt scheiße :/

Bootsektor · 11.05.2015, 20:56

Mein Name ist Sandra und ich werde Dir bei Deinem Problem behilflich sein.

Bitte arbeite alle Schritte der Reihe nach ab.
Lese die Anleitungen sorgfältig durch bevor Du beginnst. Wenn es Probleme gibt oder Du etwas nicht verstehst, dann stoppe mit Deiner Ausführung und beschreibe mir das Problem
Führe bitte nur Scans durch zu denen Du von mir aufgefordert wirst.
Bitte kein Crossposting ( posten in mehreren Foren).
Installiere oder deinstalliere während der Bereinigung keine Software, ausser Du wurdest dazu aufgefordert.
Poste die Logfiles direkt in deinen Thread in Code-Tags.
Bedenke, dass wir hier alle während unserer Freizeit tätig sind, wenn du innerhalb von 2 Tagen nichts von mir hörst, dann schreibe mir bitte eine PM.

Hinweis: Ich kann Dir niemals eine Garantie geben, dass ich auch alles finde. Eine Formatierung ist meist der schnellere und bei einem Befall durch Malware immer der sicherste Weg. Adware lässt sich in den allermeisten Fällen problemlos entfernen.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Dir jemand vom Team sagt, dass Du clean bist.

Posten in Code Tags
Bitte füge die Logs immer in Code-Tags ein. Wenn Du das nicht machst, erschwert es mir sehr das Auswerten. Danke.
Dazu:

Klicke über dem Antwortfenster auf die Raute #, dann steht dort in eckigen Klammern [] CODE /CODE.
Zwischen den beiden code-Bausteinen fügst Du dann deine Logfiles ein. Also CODE Logfile /CODE
Wenn die Logs zu lang sein sollten, dann teile sie bitte auf und poste sie dann hier in Deinem Thread, notfalls in mehreren Antworten.

Schritt 1
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

kriegnes · 11.05.2015, 21:11

FRST.txt

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-05-2015
Ran by Dima (administrator) on DIMAS-PC on 11-05-2015 22:03:08
Running from C:\Users\Dima\Desktop\Downloads
Loaded Profiles: Dima (Available profiles: Dima)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
() C:\Windows\ftb.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Akamai Technologies, Inc.) C:\Users\Dima\AppData\Local\Akamai\netsession_win.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(Akamai Technologies, Inc.) C:\Users\Dima\AppData\Local\Akamai\netsession_win.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
() C:\Windows\mftb.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 2\creator-ws.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe
(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe
(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.OE.Systray.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe
() C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.244\deploy\LoLLauncher.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.28\deploy\LoLPatcher.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.143\deploy\LolClient.exe
(Firaxis Games) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\CivilizationV_DX11.exe
(Valve Corporation) C:\Program Files (x86)\Steam\GameOverlayUI.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_encoder_server-94307.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11785832 2011-03-10] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1332296 2015-01-30] (Microsoft Corporation)
HKLM\...\Run: [3D BubbleSound] => "C:\Program Files\BubbleSound\3D BubbleSound.exe"
HKLM-x32\...\Run: [SuiteTray] => C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [340848 2011-04-02] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisTecPMMUpdate] => C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [408432 2011-03-29] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisUpdate] => C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [202608 2011-03-29] (Egis Technology Inc.)
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [297280 2011-04-24] (NTI Corporation)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55568 2015-03-25] (Raptr, Inc)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-11-17] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-03-30] (LogMeIn Inc.)
HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [933888 2012-08-21] (AVM Berlin)
HKLM-x32\...\Run: [gmsd_de_485] => [X]
HKLM-x32\...\Run: [gmsd_de_497] => [X]
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\Launcher\Avira.OE.Systray.exe [127792 2015-04-21] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-19\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-20\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2888384 2015-05-08] (Valve Corporation)
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3619160 2015-01-28] (Electronic Arts)
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Dima\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-30] (Akamai Technologies, Inc.)
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Dxtory Update Checker 2.0] => C:\Program Files (x86)\ExKode\Dxtory2.0\UpdateChecker.exe [93696 2010-10-17] (Dxtory Software)
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [\\DIMA-PC\EPSON SX210 Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFDE.EXE [223232 2008-11-05] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [GameTracker] => "C:\Program Files (x86)\GameTracker\GTLite.exe"
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [AMDToggler] => C:\Users\Dima\AppData\Local\Temp\Rar$EXa0.826\Saturation Toggler.exe <===== ATTENTION
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [GoogleChromeAutoLaunch_74AB638E1E27FA41128D672CA46F567E] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [812872 2015-04-28] (Google Inc.)
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\MountPoints2: {b38c492d-9357-11e3-9d9f-b52bea23c753} - E:\pushinst.exe
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\MountPoints2: {d0b228e3-004f-11e3-8572-a5256f050d2a} - E:\pushinst.exe
HKU\S-1-5-18\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2014-08-23]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk [2015-05-05]
ShortcutTarget: hqghumeaylnlf.lnk -> C:\ProgramData\{b3779435-d2fb-f000-b377-79435d2f50d7}\hqghumeaylnlf.exe (No File)
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-221738678-620704744-704572411-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:63783;https=127.0.0.1:63783
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll No File
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
BHO-x32: PDF Architect Helper -> {691B33B0-B86E-47F3-81C7-56E4FE3B929C} -> C:\Program Files (x86)\PDF Architect 2\creator-ie-helper.dll [2014-10-10] (pdfforge GmbH)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28] (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation)
Toolbar: HKLM-x32 - PDF Architect Toolbar - {DEEB13D7-CEA9-45FB-B77C-E039BEC85221} - C:\Program Files (x86)\PDF Architect 2\creator-ie-plugin.dll [2014-10-10] (pdfforge GmbH)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll [2014-09-01] (EA Digital Illusions CE AB)
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-28] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2013-09-08] (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-11-12] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll [2014-06-24] (Adobe Systems, Inc.)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2014-11-21] (DivX, LLC)
FF Plugin-x32: @esn/npbattlelog,version=2.3.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll No File
FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll [2014-09-01] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-28] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation)
FF Plugin-x32: @mcafee.com/SAFFPlugin -> C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll No File
FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2013-09-08] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npnxgameEU.dll [2014-11-12] (Nexon)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll [2014-10-10] (pdfforge GmbH)
FF Plugin HKU\S-1-5-21-221738678-620704744-704572411-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Dima\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS)
FF Extension: jid0XZn6pYCdV3ANrfYigxlyyGDrxAMjetpack - C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\Extensions\jid0-XZn6pYCdV3ANrfYigxlyyGDrxAM@jetpack [2015-05-11]
FF Extension: 9b9d2aaaae264447a7a1633a32b19ddd - C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\Extensions\{9b9d2aaa-ae26-4447-a7a1-633a32b19ddd} [2015-05-11]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF HKLM-x32\...\Firefox\Extensions: [pdf_architect_2_conv@pdfarchitect.org] - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension
FF Extension: PDF Architect 2 Creator - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension [2015-02-26]
FF HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\browser\defaults\preferences\prefs.js [2015-05-11]

Chrome: 
=======
CHR Profile: C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-05-08]
CHR Extension: (Google Docs) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-05-08]
CHR Extension: (Google Drive) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-05-08]
CHR Extension: (YouTube) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-05-08]
CHR Extension: (Google Search) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-05-08]
CHR Extension: (Google Sheets) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-05-08]
CHR Extension: (Bookmark Manager) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-08]
CHR Extension: (iilcekgoelpgecpjnnoikhbleipnjdhf) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\iilcekgoelpgecpjnnoikhbleipnjdhf [2015-05-11]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-08]
CHR Extension: (ljppcglljemjablfhgjdhndlpallobpl) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljppcglljemjablfhgjdhndlpallobpl [2015-05-11]
CHR Extension: (Google Wallet) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR Extension: (pioclpoplcdbaefihamjohnefbikjilc) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2015-05-10]
CHR Extension: (Gmail) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-08]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [205616 2015-04-21] (Avira Operations GmbH & Co. KG)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [237864 2015-03-21] (EasyAntiCheat Ltd)
R2 ftb; c:\windows\ftb.exe [417792 2015-05-05] () [File not signed]
R2 GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [29696 2011-05-26] (Acer Incorporated) [File not signed]
S2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2015-02-16] (Hi-Rez Studios) [File not signed]
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-03-30] (LogMeIn, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
R2 mftb; c:\windows\mftb.exe [408576 2015-05-05] () [File not signed]
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2015-01-30] (Microsoft Corporation)
R2 MSMQ; C:\Windows\system32\mqsvc.exe [9216 2009-07-14] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366512 2015-01-30] (Microsoft Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5128944 2013-11-19] (INCA Internet Co., Ltd.) [File not signed]
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256832 2011-04-24] (NTI Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910640 2015-03-02] (Electronic Arts)
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-10-10] (pdfforge GmbH)
R2 PDF Architect 2 Creator; C:\Program Files (x86)\PDF Architect 2\creator-ws.exe [738856 2014-10-10] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-10-10] (pdfforge GmbH)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-10-11] ()
S2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
S3 Survarium-Steam Update Service; C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium_service.exe [76408 2015-04-03] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2012-04-25] (AVM Berlin)
R3 fwlanusb5; C:\Windows\System32\DRIVERS\fwlanusb5.sys [982784 2012-08-21] (AVM GmbH)
S3 GameKB; C:\Windows\System32\drivers\GameKB.sys [27648 2012-05-11] () [File not signed]
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [274696 2014-11-15] (Microsoft Corporation)
R3 MQAC; C:\Windows\System32\drivers\mqac.sys [189440 2009-07-14] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124560 2014-11-15] (Microsoft Corporation)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-05-17] (Anchorfree Inc.)
S3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2014-07-02] (SplitmediaLabs Limited)
S3 BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 hxsyol; \??\C:\AeriaGames\AuraKingdom\avital\hxsy64.sys [X]
S1 qrnfd_1_10_0_13; system32\drivers\qrnfd_1_10_0_13.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-11 22:03 - 2015-05-11 22:03 - 00000000 ____D () C:\FRST
2015-05-11 20:59 - 2015-05-11 20:59 - 00000000 ____D () C:\Users\Dima\AppData\Local\My Games
2015-05-10 19:33 - 2015-05-10 19:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-05-10 19:33 - 2015-05-10 19:33 - 00000000 ____D () C:\ProgramData\Avira
2015-05-10 19:33 - 2015-05-10 19:33 - 00000000 ____D () C:\Program Files (x86)\Avira
2015-05-10 18:44 - 2015-05-10 18:44 - 00000000 ____D () C:\Users\Dima\AppData\Local\Origin
2015-05-10 18:05 - 2015-05-10 18:05 - 00001117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-05-10 18:05 - 2015-05-10 18:05 - 00001105 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-05-10 18:05 - 2015-05-10 18:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-05-10 16:15 - 2015-05-10 16:15 - 00000000 ____D () C:\Users\Dima\AppData\Local\EgisTec IPS
2015-05-10 16:14 - 2015-05-10 16:14 - 00066432 _____ () C:\Users\Dima\AppData\Local\GDIPFONTCACHEV1.DAT
2015-05-10 16:13 - 2015-05-11 21:51 - 00000000 ____D () C:\Users\Dima\AppData\Local\LogMeIn Hamachi
2015-05-10 16:13 - 2015-05-10 16:13 - 00000000 ____D () C:\Users\Dima\AppData\Local\LogMeIn
2015-05-10 16:12 - 2015-05-10 16:12 - 00000000 ____D () C:\Users\Dima\AppData\Local\VirtualStore
2015-05-10 16:07 - 2015-05-10 18:39 - 00000000 ____D () C:\AdwCleaner
2015-05-08 20:43 - 2015-05-08 20:43 - 00000000 ____D () C:\Users\Dima\AppData\Local\openvr
2015-05-08 20:42 - 2015-05-08 20:42 - 00000000 ____D () C:\Users\Dima\AppData\Local\Steam
2015-05-08 20:00 - 2015-05-11 20:00 - 00001008 _____ () C:\Windows\Tasks\vj57Vb6Rn1O3ezZ75nEr.job
2015-05-08 20:00 - 2015-05-11 20:00 - 00000990 _____ () C:\Windows\Tasks\IT7Lg6DU6w1.job
2015-05-08 20:00 - 2015-05-08 20:00 - 00004032 _____ () C:\Windows\System32\Tasks\vj57Vb6Rn1O3ezZ75nEr
2015-05-08 20:00 - 2015-05-08 20:00 - 00004014 _____ () C:\Windows\System32\Tasks\IT7Lg6DU6w1
2015-05-08 19:54 - 2015-05-08 19:54 - 00613255 _____ (CMI Limited) C:\Users\Dima\AppData\Local\nsnE864.tmp
2015-05-08 19:51 - 2015-05-08 19:50 - 00628688 _____ (CMI Limited) C:\Users\Dima\AppData\Local\nsb44A6.tmp
2015-05-08 19:44 - 2015-05-08 19:44 - 00000000 ____D () C:\Users\Dima\AppData\Local\Macromedia
2015-05-08 19:43 - 2015-05-09 22:34 - 00000000 ____D () C:\Users\Dima\AppData\Local\Mozilla
2015-05-08 18:41 - 2015-05-08 18:41 - 00000000 ____D () C:\Users\Dima\AppData\Local\ATI
2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieUserList
2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieSiteList
2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieBrowserModeList
2015-05-08 14:49 - 2015-05-08 14:49 - 00000000 ____D () C:\ProgramData\Kikblaster
2015-05-08 14:38 - 2015-05-11 14:38 - 00000990 _____ () C:\Windows\Tasks\WfqE0YhY0IU.job
2015-05-08 14:38 - 2015-05-11 14:38 - 00000982 _____ () C:\Windows\Tasks\DXbbq3U.job
2015-05-08 14:38 - 2015-05-08 14:38 - 00004014 _____ () C:\Windows\System32\Tasks\WfqE0YhY0IU
2015-05-08 14:38 - 2015-05-08 14:38 - 00004006 _____ () C:\Windows\System32\Tasks\DXbbq3U
2015-05-08 14:33 - 2015-05-08 19:54 - 00000000 ____D () C:\Program Files (x86)\Edu App
2015-05-08 14:20 - 2015-05-08 14:52 - 00000000 ____D () C:\Users\Dima\AppData\Local\00000000-1431094823-0000-0000-D43D7EBF2FB4
2015-05-08 14:16 - 2015-05-08 14:16 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webTinstMKTN84_01009.Wdf
2015-05-05 21:45 - 2015-05-08 14:45 - 00000000 ___HD () C:\ProgramData\ftb
2015-05-05 21:13 - 2015-05-08 21:13 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-05-05 21:12 - 2015-05-05 21:12 - 00631296 _____ () C:\Windows\ftb.dat
2015-05-05 21:12 - 2015-05-05 21:12 - 00417792 _____ () C:\Windows\ftb.exe
2015-05-05 21:12 - 2015-05-05 21:12 - 00408576 _____ () C:\Windows\mftb.exe
2015-05-04 20:34 - 2015-05-04 20:34 - 00059505 _____ () C:\Users\Dima\Documents\ts3_clientui-win64-1407159763-2015-05-04 20_34_27.843240.dmp
2015-04-26 16:02 - 2015-04-26 16:02 - 00000000 ____D () C:\Users\Dima\Documents\DFO
2015-04-25 20:20 - 2015-04-25 20:20 - 00001734 _____ () C:\Users\Public\Desktop\Dungeon Fighter Online.lnk
2015-04-25 20:20 - 2015-04-25 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\neople
2015-04-25 20:20 - 2015-04-25 20:20 - 00000000 ____D () C:\Neople
2015-04-25 15:57 - 2015-04-26 13:15 - 00000000 ____D () C:\Users\Dima\Documents\DragonNest
2015-04-24 12:20 - 2015-05-10 18:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-20 16:05 - 2015-04-20 16:05 - 01579520 _____ () C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1.exe
2015-04-20 16:05 - 2015-04-20 16:05 - 01579520 _____ () C:\Users\Dima\AppData\Roaming\DXbbq3U.exe
2015-04-20 16:05 - 2015-04-20 16:05 - 01246720 _____ () C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe
2015-04-20 16:05 - 2015-04-20 16:05 - 01246720 _____ () C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe
2015-04-20 13:37 - 2015-04-20 13:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FRITZ!WLAN
2015-04-20 13:37 - 2015-04-20 13:37 - 00000000 ____D () C:\Program Files (x86)\avmwlanstick
2015-04-20 13:36 - 2015-04-20 13:36 - 00000000 ____D () C:\Users\Dima\AVM_Driver
2015-04-20 13:36 - 2012-04-25 01:00 - 00014120 _____ (AVM Berlin) C:\Windows\system32\Drivers\avmeject.sys
2015-04-20 00:51 - 2015-04-20 00:51 - 00002956 _____ () C:\Windows\avmacc1.log
2015-04-20 00:51 - 2012-07-12 02:00 - 00480632 _____ (AVM Berlin) C:\Windows\instwcli.dex
2015-04-20 00:45 - 2015-04-20 00:45 - 00003216 _____ () C:\Windows\System32\Tasks\{35EE529B-2794-4708-8B79-567E126A4A7F}
2015-04-20 00:05 - 2015-04-20 13:36 - 00001479 _____ () C:\Windows\avmsetup.log
2015-04-20 00:05 - 2015-04-20 13:36 - 00000490 _____ () C:\Windows\avmadd32.log
2015-04-20 00:05 - 2015-04-20 00:54 - 00197887 _____ () C:\Windows\avmacc.log
2015-04-20 00:05 - 2015-04-20 00:44 - 00000000 ____D () C:\Program Files (x86)\AVM_update
2015-04-19 20:43 - 2015-04-19 20:43 - 00001906 _____ () C:\Users\Dima\Desktop\EliteDekaron.lnk
2015-04-19 20:43 - 2015-04-19 20:43 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Elite Dekaron
2015-04-19 20:40 - 2015-04-19 21:03 - 00000000 ____D () C:\Program Files (x86)\Elite Dekaron
2015-04-19 20:40 - 2015-04-19 20:40 - 00000000 ____D () C:\Windows\Elite Dekaron
2015-04-19 14:20 - 2015-04-19 14:20 - 00005872 _____ () C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1
2015-04-19 14:20 - 2015-04-19 14:20 - 00005872 _____ () C:\Users\Dima\AppData\Roaming\DXbbq3U
2015-04-16 16:36 - 2015-04-16 16:43 - 00000000 ___SD () C:\Windows\system32\GWX
2015-04-16 16:36 - 2015-04-16 16:36 - 00000000 ___SD () C:\Windows\SysWOW64\GWX
2015-04-15 21:14 - 2015-04-15 21:14 - 18178736 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2015-04-14 20:39 - 2015-03-25 05:24 - 03298816 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 02553856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-14 20:39 - 2015-03-25 05:23 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-14 20:39 - 2015-03-25 05:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-14 20:39 - 2015-03-25 05:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-14 20:39 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-04-14 20:39 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-04-14 20:39 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-04-14 20:39 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-04-14 20:39 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-04-14 20:39 - 2015-03-23 05:25 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-14 20:39 - 2015-03-23 05:25 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-14 20:39 - 2015-03-23 05:24 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-14 20:39 - 2015-03-23 05:24 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-14 20:39 - 2015-03-23 05:24 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-14 20:39 - 2015-03-23 05:24 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-04-14 20:39 - 2015-03-23 05:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-14 20:39 - 2015-03-23 05:17 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-14 20:39 - 2015-03-17 07:22 - 05557696 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-14 20:39 - 2015-03-17 07:22 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-04-14 20:39 - 2015-03-17 07:22 - 00095672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-04-14 20:39 - 2015-03-17 07:19 - 01727904 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-14 20:39 - 2015-03-17 07:17 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-04-14 20:39 - 2015-03-17 07:17 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-04-14 20:39 - 2015-03-17 07:16 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-04-14 20:39 - 2015-03-17 07:16 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-04-14 20:39 - 2015-03-17 07:15 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-04-14 20:39 - 2015-03-17 07:15 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-04-14 20:39 - 2015-03-17 07:15 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-04-14 20:39 - 2015-03-17 07:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-04-14 20:39 - 2015-03-17 07:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-04-14 20:39 - 2015-03-17 06:59 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-04-14 20:39 - 2015-03-17 06:56 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-04-14 20:39 - 2015-03-17 06:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-04-14 20:39 - 2015-03-17 06:56 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-04-14 20:39 - 2015-03-10 05:25 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-04-14 20:39 - 2015-03-10 05:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-04-14 20:39 - 2015-03-10 05:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-04-14 20:39 - 2015-03-10 05:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-04-14 20:39 - 2015-03-05 07:12 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-04-14 20:39 - 2015-03-05 06:05 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-04-14 20:38 - 2015-03-17 07:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-04-14 20:38 - 2015-03-17 07:16 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-04-14 20:38 - 2015-03-17 07:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-04-14 20:38 - 2015-03-17 07:13 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-04-14 20:38 - 2015-03-17 07:13 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-04-14 20:38 - 2015-03-17 06:57 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-04-14 20:38 - 2015-03-17 06:56 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-04-14 20:38 - 2015-03-17 06:56 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-04-14 20:38 - 2015-03-17 06:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-04-14 20:38 - 2015-03-17 06:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-04-14 20:38 - 2015-03-17 06:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-04-14 20:38 - 2015-03-17 06:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 05:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-04-14 20:38 - 2015-03-17 05:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-04-14 20:38 - 2015-03-17 05:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 05:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-04-14 20:38 - 2015-03-04 06:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2015-04-14 20:38 - 2015-03-04 06:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-14 20:38 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2015-04-14 20:38 - 2015-02-25 05:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-14 18:28 - 2015-04-14 18:28 - 00004387 _____ () C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU
2015-04-14 18:28 - 2015-04-14 18:28 - 00004387 _____ () C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-11 21:52 - 2013-08-15 21:16 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-11 21:30 - 2013-11-06 17:55 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Raptr
2015-05-11 21:14 - 2013-08-15 14:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-11 21:03 - 2013-08-08 20:19 - 01789936 _____ () C:\Windows\WindowsUpdate.log
2015-05-11 20:59 - 2013-08-08 21:08 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-05-11 19:19 - 2013-09-21 18:06 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\TS3Client
2015-05-11 13:55 - 2009-07-14 06:45 - 00028928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-11 13:55 - 2009-07-14 06:45 - 00028928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-11 13:51 - 2013-08-15 21:16 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-10 19:33 - 2013-10-04 17:11 - 00000000 ____D () C:\ProgramData\Package Cache
2015-05-10 19:15 - 2009-07-14 06:51 - 00120977 _____ () C:\Windows\setupact.log
2015-05-10 18:49 - 2013-08-09 06:11 - 00699416 _____ () C:\Windows\system32\perfh007.dat
2015-05-10 18:49 - 2013-08-09 06:11 - 00149556 _____ () C:\Windows\system32\perfc007.dat
2015-05-10 18:49 - 2009-07-14 07:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-10 18:44 - 2013-08-17 15:43 - 00000000 ____D () C:\ProgramData\Origin
2015-05-10 18:40 - 2010-11-21 05:47 - 00399402 _____ () C:\Windows\PFRO.log
2015-05-10 18:40 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-10 18:19 - 2014-11-14 00:10 - 00000000 ____D () C:\Users\Dima\Desktop\lqobqwkv.default
2015-05-10 17:35 - 2013-08-17 15:43 - 00000481 _____ () C:\Windows\wininit.ini
2015-05-10 16:42 - 2014-10-05 15:02 - 00000000 ____D () C:\Users\Dima\AppData\Local\Adobe
2015-05-10 16:42 - 2014-01-07 19:34 - 01824768 ___SH () C:\Users\Dima\Desktop\Thumbs.db
2015-05-10 16:15 - 2013-12-20 13:37 - 00000000 ____D () C:\Users\Dima\AppData\Local\Akamai
2015-05-10 16:15 - 2013-08-17 15:43 - 00000000 ____D () C:\Program Files (x86)\Origin
2015-05-10 16:12 - 2013-08-08 15:36 - 00001419 _____ () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-05-10 16:10 - 2014-11-26 23:57 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WorldofTanks
2015-05-08 21:41 - 2013-12-30 15:03 - 00000000 ____D () C:\Program Files (x86)\7-Zip
2015-05-08 21:39 - 2013-12-18 15:08 - 00000000 ____D () C:\Program Files (x86)\ACASystems
2015-05-08 18:40 - 2013-11-02 02:16 - 00000000 ____D () C:\Users\Dima\Desktop\Neuer Ordner
2015-05-08 18:40 - 2013-08-15 21:16 - 00000000 ____D () C:\Users\Dima\AppData\Local\Google
2015-05-08 14:52 - 2014-11-30 22:57 - 00000000 ____D () C:\Users\Dima\AppData\Local\gegl-0.2
2015-05-08 14:52 - 2013-12-14 00:39 - 00000000 ____D () C:\Users\Dima\AppData\Local\Battle.net
2015-05-08 14:16 - 2014-02-09 01:27 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2015-05-08 13:16 - 2013-08-15 15:52 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Skype
2015-05-03 15:37 - 2015-04-10 17:41 - 00000000 ____D () C:\Users\Dima\Desktop\eclipse
2015-05-02 22:30 - 2014-11-23 16:19 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\.technic
2015-05-02 22:30 - 2014-08-25 02:48 - 04697768 _____ () C:\Users\Dima\Desktop\TechnicLauncher.exe
2015-05-02 22:28 - 2014-08-09 17:35 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\.minecraft
2015-04-27 16:21 - 2015-02-28 15:34 - 00000000 ____D () C:\Users\Dima\Desktop\Bewerbung
2015-04-20 13:37 - 2014-02-12 19:55 - 00011424 _____ () C:\Windows\avmfwlanci.log
2015-04-20 13:37 - 2014-02-12 19:55 - 00011167 _____ () C:\Windows\AVMInstall.Log
2015-04-20 13:36 - 2014-02-12 19:54 - 00000000 ____D () C:\Windows\AVM_Driver
2015-04-20 13:36 - 2013-08-08 15:34 - 00000000 ____D () C:\Users\Dima
2015-04-20 00:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-04-18 17:38 - 2013-09-13 14:13 - 00000000 ____D () C:\Program Files (x86)\Raptr
2015-04-18 12:26 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat
2015-04-16 16:36 - 2014-12-22 19:12 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-16 16:36 - 2014-05-01 14:38 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-16 16:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-04-16 12:44 - 2014-02-26 15:58 - 00002022 _____ () C:\Users\Dima\monsterhunter.txt
2015-04-15 21:15 - 2013-08-15 14:45 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-04-15 21:15 - 2013-08-15 14:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-04-15 21:15 - 2011-07-25 05:19 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-15 12:54 - 2013-09-09 16:14 - 01593956 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-04-15 12:52 - 2014-10-06 19:31 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-04-15 12:52 - 2011-07-25 05:01 - 00000000 ____D () C:\ProgramData\Skype
2015-04-15 12:51 - 2013-11-11 13:25 - 00000000 ____D () C:\Windows\system32\MRT
2015-04-15 12:45 - 2013-11-11 13:25 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

==================== Files in the root of some directories =======

2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\Dima\AppData\Roaming\DXbbq3U
2015-04-20 16:05 - 2015-04-20 16:05 - 1579520 _____ () C:\Users\Dima\AppData\Roaming\DXbbq3U.exe
2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1
2015-04-20 16:05 - 2015-04-20 16:05 - 1579520 _____ () C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1.exe
2013-11-09 21:45 - 2013-11-09 21:45 - 0000004 _____ () C:\Users\Dima\AppData\Roaming\steam_md4.dat
2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr
2015-04-20 16:05 - 2015-04-20 16:05 - 1246720 _____ () C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe
2014-11-27 23:59 - 2014-11-29 01:59 - 0000068 _____ () C:\Users\Dima\AppData\Roaming\WB.CFG
2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU
2015-04-20 16:05 - 2015-04-20 16:05 - 1246720 _____ () C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe
2015-05-08 19:51 - 2015-05-08 19:50 - 0628688 _____ (CMI Limited) C:\Users\Dima\AppData\Local\nsb44A6.tmp
2015-05-08 19:54 - 2015-05-08 19:54 - 0613255 _____ (CMI Limited) C:\Users\Dima\AppData\Local\nsnE864.tmp
2013-08-08 21:05 - 2013-08-08 21:05 - 0000654 _____ () C:\ProgramData\ArcadeDeluxe5.log

Some content of TEMP:
====================
C:\Users\Dima\AppData\Local\Temp\Quarantine.exe
C:\Users\Dima\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2011-07-25 04:31

==================== End Of Log ============================

--- --- ---

kriegnes · 11.05.2015, 21:12

Additions.txt

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-05-2015
Ran by Dima at 2015-05-11 22:04:31
Running from C:\Users\Dima\Desktop\Downloads
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-221738678-620704744-704572411-500 - Administrator - Disabled)
Dima (S-1-5-21-221738678-620704744-704572411-1000 - Administrator - Enabled) => C:\Users\Dima
Gast (S-1-5-21-221738678-620704744-704572411-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-221738678-620704744-704572411-1002 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Disabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
ACA Screen Recorder 5.30 (HKLM-x32\...\ACAScreenRecorder_EN_is1) (Version: 5.30 - ACA Systems)
Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.99 - NTI Corporation)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3502 - Acer Incorporated)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3502 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0517.2011 - Acer Incorporated)
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Reader X (10.1.13) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.13 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.)
Agarest: Generations of War (HKLM-x32\...\Steam App 237890) (Version:  - Ghostlight)
Age of Empires II: HD Edition (HKLM-x32\...\Steam App 221380) (Version:  - Hidden Path Entertainment, Ensemble Studios)
Akamai NetSession Interface (HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Akamai) (Version:  - Akamai Technologies, Inc)
AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.36 - Atheros Communications Inc.)
Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team)
Avidemux 2.6 - 64bits (HKLM-x32\...\Avidemux 2.6 - 64bits (64-bit)) (Version: 2.6.8.9046 - )
Avira (HKLM-x32\...\{2d044ded-ae1b-40d3-8d18-97cfda75bd69}) (Version: 1.1.37.14600 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.37.14600 - Avira Operations GmbH & Co. KG) Hidden
AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version: 1.2.0.0 - AVM Berlin)
Backup Manager V3 (x32 Version: 3.0.0.99 - NTI Corporation) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.3.2.15221 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.5.1 - EA Digital Illusions CE AB)
Borderlands 2 (HKLM-x32\...\Steam App 49520) (Version:  - Gearbox Software)
Call of Duty 4: Modern Warfare (HKLM-x32\...\Steam App 7940) (Version:  - Infinity Ward)
Call of Duty: Black Ops II - Multiplayer (HKLM-x32\...\Steam App 202990) (Version:  - )
Call of Duty: Black Ops II - Zombies (HKLM-x32\...\Steam App 212910) (Version:  - )
Call of Duty: Black Ops II (HKLM-x32\...\Steam App 202970) (Version:  - Treyarch)
Call of Duty: Ghosts - Multiplayer (HKLM-x32\...\Steam App 209170) (Version:  - )
Call of Duty: Ghosts (HKLM-x32\...\Steam App 209160) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare 3 - Multiplayer (HKLM-x32\...\Steam App 42690) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare 3 (HKLM-x32\...\Steam App 42680) (Version:  - Infinity Ward)
Castle Crashers (HKLM-x32\...\Steam App 204360) (Version:  - The Behemoth)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
clear.fi Client (HKLM-x32\...\{43AAE145-83CF-4C96-9A5E-756CEFCE879F}) (Version: 1.00.3500 - Acer Incorporated)
Combined Community Codec Pack 2013-11-27 (HKLM-x32\...\Combined Community Codec Pack_is1) (Version: 2013.11.27.0 - CCCP Project)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version:  - Valve)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Darksiders II (HKLM-x32\...\Steam App 50650) (Version:  - Vigil Games)
DFO (HKLM-x32\...\{C1E5C0FB-527E-42C6-BCA0-0A37A6124AE4}) (Version: 1.01.0000 - Neople)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.7.0.64 - DivX, LLC)
Dota 2 (HKLM-x32\...\Steam App 570) (Version:  - Valve)
Dragon Nest Europe (HKLM-x32\...\Steam App 258700) (Version:  - Eyedentity Games)
Dungeon Defenders (HKLM-x32\...\Steam App 65800) (Version:  - Trendy Entertainment)
Dxtory version 2.0.128 (HKLM-x32\...\Dxtory2.0_is1) (Version: 2.0.128 - ExKode Co. Ltd.)
Elite Dekaron (HKLM-x32\...\Elite Dekaron1.0) (Version: 1.0 - EliteKingdoms)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - )
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Free YouTube to MP3 Converter version 3.12.20.1230 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.20.1230 - DVDVideoSoft Ltd.)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Gameforge Live 2.0.5 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.5 - Gameforge)
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Facepunch Studios)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Glyph (HKLM-x32\...\Glyph) (Version:  - Trion Worlds, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.135 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Gumboy Tournament (HKLM-x32\...\Steam App 11230) (Version:  - CINEMAX, s.r.o.)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.2.1004 - Intel Corporation)
Java 7 Update 75 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417075FF}) (Version: 7.0.750 - Oracle)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Java SE Development Kit 7 Update 75 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170750}) (Version: 1.7.0.750 - Oracle)
Java SE Development Kit 8 Update 25 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180250}) (Version: 8.0.250.18 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Loadout (HKLM-x32\...\Steam App 208090) (Version:  - Edge of Reality)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.328 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.328 - LogMeIn, Inc.) Hidden
LOLReplay (HKLM-x32\...\LOLReplay) (Version: 0.8.9.11 - www.leaguereplays.com)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.7.205.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Might & Magic: Duel of Champions (HKLM-x32\...\Steam App 256410) (Version:  - Ubisoft Quebec)
MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)
Mozilla Firefox 37.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.2 (x86 de)) (Version: 37.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.2 - Mozilla)
MyWinLocker (Version: 4.0.14.25 - Egis Technology Inc.) Hidden
MyWinLocker 4 (x32 Version: 4.0.14.25 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.15 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 4.0.14.15 - Egis Technology Inc.) Hidden
Neverwinter (HKLM-x32\...\Steam App 109600) (Version:  - Cryptic Studios)
newsXpresso (HKLM-x32\...\InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}) (Version: 1.0.0.40 - esobi Inc.)
newsXpresso (x32 Version: 1.0.0.40 - esobi Inc.) Hidden
Nosgoth (HKLM-x32\...\Steam App 200110) (Version: 150120.100528 - Square Enix Ltd)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)
NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.8942 - NTI Corporation)
NTI Media Maker 9 (x32 Version: 9.0.2.8942 - NTI Corporation) Hidden
NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.3.1.4482 - Electronic Arts, Inc.)
paint.net (HKLM\...\{141BA46D-2D1F-4DA6-9448-B847334585C0}) (Version: 4.0.4 - dotPDN LLC)
PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.51.17865 - pdfforge GmbH)
PDF Architect 2 Create Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden
PDF Architect 2 Edit Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden
PDF Architect 2 View Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.0.2 - pdfforge)
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Pokemon Online 2.4.1 (HKLM-x32\...\{2C08D7E7-9EE1-4A08-AFE0-745F02DCD6A4}_is1) (Version:  - Dreambelievers)
Pokémon Trading Card Game Online (HKLM-x32\...\{B0952280-3DF0-4AA9-9599-092D5E8D36AD}) (Version: 2.24.1 - The Pokémon Company International)
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Ralink RT2860 Wireless LAN Card (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 1.5.6.0 - Ralink)
Raptr (HKLM-x32\...\Raptr) (Version:  - )
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6329 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30123 - Realtek Semiconductor Corp.)
Serious Sam 3: BFE (HKLM-x32\...\Steam App 41070) (Version:  - Croteam)
Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version:  - 2K Games, Inc.)
SIW 2013 Home Edition (HKLM-x32\...\{AB67580-257C-45FF-B8F4-C8C30682091A}_is1) (Version: 2013.05.14 - Topala Software Solutions)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 2.0.2574.0 - Hi-Rez Studios)
Source SDK Base 2006 (HKLM-x32\...\Steam App 215) (Version:  - Valve)
SpellForce (HKLM-x32\...\SpellForce) (Version:  - )
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Survarium (HKLM-x32\...\Steam App 355840) (Version:  - Vostok Games)
Survarium-Steam (HKLM-x32\...\{A3D9343D-77CD-4bf4-A47A-F87B3BE985B4}_is1) (Version: 0.27d - )
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
System Requirements Lab CYRI (HKLM-x32\...\{E362724E-9320-4946-AF34-874E7B6B2927}) (Version: 6.0.7.0 - Husdawg, LLC)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.12 - TeamSpeak Systems GmbH)
TIPP10 Version 2.1.0 (HKLM-x32\...\TIPP10_is1) (Version:  - (c) 2006-2011, Tom Thielicke IT Solutions)
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel)
Unity (HKLM-x32\...\Unity) (Version: 4.6.1f1 - Unity Technologies ApS)
Unity Web Player (HKU\S-1-5-21-221738678-620704744-704572411-1000\...\UnityWebPlayer) (Version: 4.6.1f1 - Unity Technologies ApS)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Vindictus EU (HKLM-x32\...\Vindictus EU) (Version:  - )
VLC media player 2.1.1 (HKLM\...\VLC media player) (Version: 2.1.1 - VideoLAN)
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3503 - Acer Incorporated)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
WinRAR 5.00 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)
YGOPro DevPro Version 1.9.7 r2 (HKLM-x32\...\{3CF2634F-3F38-4DD3-9201-CB2FE6B5FF23}_is1) (Version: 1.9.7 r2 - YGOPro DevPro Online)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

01-05-2015 14:43:01 Windows Update
05-05-2015 16:18:48 Windows Update
08-05-2015 20:00:02 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2014-09-21 15:27 - 00000860 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
::1 localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0A4748C0-2366-4860-8A2A-22C28DD4F8FB} - System32\Tasks\DXbbq3U => C:\Users\Dima\AppData\Roaming\DXbbq3U.exe [2015-04-20] () <==== ATTENTION
Task: {15731A0E-D960-4E94-9E60-DACD297E3193} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {1860A38F-8939-478A-BF5C-F565A480142F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {1D4EC24B-2C6F-4F04-8F3E-6AA90BAED5D2} - System32\Tasks\{A10EA19B-8B09-454D-B360-CA92A1D17DBD} => pcalua.exe -a C:\Users\Dima\Desktop\InstallIW4M(1).exe -d C:\Users\Dima\Desktop
Task: {276BF61D-668E-4313-BA37-702F352555A9} - System32\Tasks\Adobe Reader Speed Launcher => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2014-12-03] (Adobe Systems Incorporated)
Task: {2B46497E-052E-4882-879A-2CED38AE75F5} - System32\Tasks\{6B05723E-8DB6-495D-A0DA-ECA4FC2E26D7} => C:\Program Files (x86)\WeGame\wegame.exe
Task: {2D0DD0EF-6F02-4AE5-81DA-8F7F44E9D915} - System32\Tasks\Games\UpdateCheck_S-1-5-21-221738678-620704744-704572411-1000
Task: {30516B1D-88D3-4A14-AD49-963F8AA1FCEE} - System32\Tasks\vj57Vb6Rn1O3ezZ75nEr => C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe [2015-04-20] () <==== ATTENTION
Task: {36C3C2EA-97D0-4CA5-BAA5-C0D3544BE0C8} - System32\Tasks\WfqE0YhY0IU => C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe [2015-04-20] () <==== ATTENTION
Task: {54E1645E-EDBD-4280-B2FF-13D3BBEC2047} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-07] (Google Inc.)
Task: {5975092F-1EFE-4D6C-A337-025C0E67059F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)
Task: {5B6F25FF-1AB6-4306-AF5F-150B752505F5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-07] (Google Inc.)
Task: {691D2C19-7551-41BB-BDBA-38CC87FF53F4} - System32\Tasks\{3D950745-404D-482F-B2F2-F7290B610680} => pcalua.exe -a C:\Users\Dima\AppData\Roaming\webssearches\UninstallManager.exe -c  -ptid=irs <==== ATTENTION
Task: {ADDA105F-5269-41EB-BE7A-FADC87447563} - System32\Tasks\{153E695E-4162-4A7B-8004-BCBAF85CE618} => pcalua.exe -a C:\Users\Dima\AVM_Driver\FWLAN\setup.exe -d C:\Users\Dima\AVM_Driver\FWLAN
Task: {B0E56CFC-54EA-49E5-AEE6-544EE780094B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15] (Adobe Systems Incorporated)
Task: {C4630A3F-B5F1-4159-9F2B-8EF55530D99B} - System32\Tasks\Adobe ARM => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {C618B53C-0F59-4601-8B52-1D81C275086B} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)
Task: {C7F562CC-8836-44FC-8085-91BD492874BE} - System32\Tasks\{35EE529B-2794-4708-8B79-567E126A4A7F} => pcalua.exe -a C:\Users\Dima\Desktop\Downloads\avm_fritz!wlan_usb_stick_x64_build_100906.exe -d C:\Users\Dima\Desktop\Downloads
Task: {D021483F-10CB-41B4-8816-109CDA214F59} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {D216A597-8DFB-49AE-BB0C-69D9574172C8} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {D390B225-5BC3-4867-B035-FE45B82F2599} - System32\Tasks\IT7Lg6DU6w1 => C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1.exe [2015-04-20] () <==== ATTENTION
Task: {D9E5BB12-DEEF-4673-A22C-7A60AF737292} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {E66F9E32-E05D-43A5-8A61-1251E464ABF9} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DXbbq3U.job => C:\Users\Dima\AppData\Roaming\DXbbq3U.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\IT7Lg6DU6w1.job => C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1.exe <==== ATTENTION
Task: C:\Windows\Tasks\vj57Vb6Rn1O3ezZ75nEr.job => C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe <==== ATTENTION
Task: C:\Windows\Tasks\WfqE0YhY0IU.job => C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) ==============

2009-01-22 01:45 - 2009-01-22 01:45 - 01401856 _____ () C:\Program Files (x86)\EgisTec MyWinLocker\x64\LIBEAY32.dll
2014-05-12 11:49 - 2014-05-12 11:49 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2015-05-05 21:12 - 2015-05-05 21:12 - 00417792 _____ () c:\windows\ftb.exe
2015-05-05 21:12 - 2015-05-05 21:12 - 00408576 _____ () c:\windows\mftb.exe
2014-01-10 07:26 - 2014-01-10 07:26 - 01861968 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
2013-09-02 13:14 - 2014-10-11 21:02 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-05-03 14:34 - 2014-05-03 14:34 - 00173568 _____ () C:\Program Files\TeamSpeak 3 Client\quazip.dll
2014-05-03 14:34 - 2014-05-03 14:34 - 01080832 _____ () C:\Program Files\TeamSpeak 3 Client\platforms\qwindows.dll
2014-05-03 14:34 - 2014-05-03 14:34 - 00833024 _____ () C:\Program Files\TeamSpeak 3 Client\sqldrivers\qsqlite.dll
2013-10-23 14:15 - 2014-10-15 17:45 - 00102344 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win64.dll
2013-10-23 14:15 - 2014-10-15 17:45 - 00108488 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win64.dll
2014-05-03 14:34 - 2014-05-03 14:34 - 00030208 _____ () C:\Program Files\TeamSpeak 3 Client\imageformats\qgif.dll
2014-05-03 14:34 - 2014-05-03 14:34 - 00233984 _____ () C:\Program Files\TeamSpeak 3 Client\imageformats\qjpeg.dll
2013-10-23 14:15 - 2014-10-15 17:45 - 00563656 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
2013-10-23 14:15 - 2014-10-15 17:45 - 00579016 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll
2014-05-03 14:34 - 2014-05-03 14:34 - 00159232 _____ () C:\Program Files\TeamSpeak 3 Client\accessible\qtaccessiblewidgets.dll
2013-06-12 18:11 - 2013-08-15 18:04 - 01294336 _____ () C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
2015-04-29 14:38 - 2015-04-29 14:38 - 02323448 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.244\deploy\LoLLauncher.exe
2015-04-29 14:39 - 2015-04-29 14:39 - 03797496 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.28\deploy\LoLPatcher.exe
2014-05-16 15:31 - 2013-08-15 19:22 - 00074752 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.143\deploy\LolClient.exe
2011-04-24 03:29 - 2011-04-24 03:29 - 00465640 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll
2014-11-09 03:42 - 2014-05-13 13:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2014-11-09 03:42 - 2014-05-13 13:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2014-11-09 03:42 - 2014-05-13 13:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2011-04-24 03:29 - 2011-04-24 03:29 - 01081664 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll
2011-04-24 03:29 - 2011-04-24 03:29 - 00125760 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll
2014-01-10 07:28 - 2014-01-10 07:28 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00087040 _____ () C:\Program Files (x86)\Raptr\_ctypes.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00043008 _____ () C:\Program Files (x86)\Raptr\_socket.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00805376 _____ () C:\Program Files (x86)\Raptr\_ssl.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 05812736 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtGui.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00067584 _____ () C:\Program Files (x86)\Raptr\sip.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 01662464 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtCore.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00494592 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtNetwork.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00096256 _____ () C:\Program Files (x86)\Raptr\win32api.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00110592 _____ () C:\Program Files (x86)\Raptr\pywintypes26.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00010240 _____ () C:\Program Files (x86)\Raptr\select.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00356864 _____ () C:\Program Files (x86)\Raptr\_hashlib.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00036352 _____ () C:\Program Files (x86)\Raptr\win32process.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00111104 _____ () C:\Program Files (x86)\Raptr\win32file.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00044544 _____ () C:\Program Files (x86)\Raptr\_sqlite3.pyd
2011-02-15 20:17 - 2011-02-15 20:17 - 00417501 _____ () C:\Program Files (x86)\Raptr\sqlite3.dll
2010-11-23 00:57 - 2010-11-23 00:57 - 00167936 _____ () C:\Program Files (x86)\Raptr\win32gui.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00313856 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtWebKit.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00127488 _____ () C:\Program Files (x86)\Raptr\pyexpat.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00009216 _____ () C:\Program Files (x86)\Raptr\winsound.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00354304 _____ () C:\Program Files (x86)\Raptr\pythoncom26.dll
2010-11-23 00:57 - 2010-11-23 00:57 - 00016384 _____ () C:\Program Files (x86)\Raptr\win32trace.pyd
2014-08-14 02:37 - 2014-08-14 02:37 - 00113171 _____ () C:\Program Files (x86)\Raptr\libvlc.dll
2014-08-14 02:37 - 2014-08-14 02:37 - 02396691 _____ () C:\Program Files (x86)\Raptr\libvlccore.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00583680 _____ () C:\Program Files (x86)\Raptr\unicodedata.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00263168 _____ () C:\Program Files (x86)\Raptr\win32com.shell.shell.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00324608 _____ () C:\Program Files (x86)\Raptr\PIL._imaging.pyd
2012-02-06 22:28 - 2012-02-06 22:28 - 00010752 _____ () C:\Program Files (x86)\Raptr\Crypto.Random.OSRNG.winrandom.pyd
2012-02-06 22:28 - 2012-02-06 22:28 - 00011264 _____ () C:\Program Files (x86)\Raptr\Crypto.Util._counter.pyd
2012-02-06 22:28 - 2012-02-06 22:28 - 00031744 _____ () C:\Program Files (x86)\Raptr\Crypto.Cipher.AES.pyd
2013-11-21 02:05 - 2013-11-21 02:05 - 00256000 _____ () C:\Program Files (x86)\Raptr\amd_ags.dll
2015-03-25 01:50 - 2015-03-25 01:50 - 02539776 _____ () C:\Program Files (x86)\Raptr\ltc_host_ex.DLL
2014-10-21 22:56 - 2014-10-21 22:56 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\9b1cac8d98bd69d3e56a26ff2f96f266\IsdiInterop.ni.dll
2011-07-25 04:42 - 2011-01-13 02:56 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2010-11-23 00:57 - 2010-11-23 00:57 - 00141312 _____ () C:\Program Files (x86)\Raptr\gobject._gobject.pyd
2014-06-18 02:56 - 2014-06-18 02:56 - 02717595 _____ () C:\Program Files (x86)\Raptr\heliotrope._purple.pyd
2011-02-15 20:17 - 2011-02-15 20:17 - 01213633 _____ () C:\Program Files (x86)\Raptr\libxml2-2.dll
2010-11-23 01:06 - 2010-11-23 01:06 - 00055808 _____ () C:\Program Files (x86)\Raptr\zlib1.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 00495680 _____ () C:\Program Files (x86)\Raptr\plugins\libaim.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 01183699 _____ () C:\Program Files (x86)\Raptr\liboscar.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 00483306 _____ () C:\Program Files (x86)\Raptr\plugins\libicq.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00655356 _____ () C:\Program Files (x86)\Raptr\plugins\libirc.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 01306387 _____ () C:\Program Files (x86)\Raptr\plugins\libmsn.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 00565461 _____ () C:\Program Files (x86)\Raptr\plugins\libxmpp.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 01640221 _____ () C:\Program Files (x86)\Raptr\libjabber.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 00506276 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoo.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 01053730 _____ () C:\Program Files (x86)\Raptr\libymsg.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00497782 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoojp.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00603326 _____ () C:\Program Files (x86)\Raptr\plugins\ssl-nss.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00474199 _____ () C:\Program Files (x86)\Raptr\plugins\ssl.dll
2013-07-01 08:20 - 2015-04-16 19:40 - 00776192 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2015-01-04 19:33 - 2015-04-23 04:16 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll
2015-01-04 19:33 - 2015-04-23 04:16 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2015-01-04 19:33 - 2015-04-23 04:16 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2014-05-21 20:08 - 2015-05-08 00:16 - 02396352 _____ () C:\Program Files (x86)\Steam\video.dll
2014-08-29 16:43 - 2014-12-01 23:31 - 02396672 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2014-08-29 16:43 - 2014-12-01 23:31 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2014-08-29 16:43 - 2014-12-01 23:31 - 00479744 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2014-08-29 16:43 - 2014-12-01 23:31 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2014-08-29 16:43 - 2014-12-01 23:31 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2013-07-26 14:46 - 2015-05-08 00:16 - 00703168 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2013-07-15 14:32 - 2015-05-08 00:16 - 36302216 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2015-04-24 19:11 - 2015-05-08 00:16 - 08958344 _____ () C:\Program Files (x86)\Steam\bin\pdf.dll
2015-04-29 14:39 - 2015-04-29 14:39 - 01672696 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.28\deploy\RiotLauncher.dll
2014-05-16 15:29 - 2013-08-15 19:21 - 04774248 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.143\deploy\Adobe AIR\Versions\1.0\Resources\WebKit.dll
2014-05-16 15:29 - 2013-08-15 19:21 - 16032616 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.143\deploy\Adobe AIR\Versions\1.0\Resources\NPSWF32.dll
2015-03-22 17:24 - 2015-03-22 17:24 - 00059904 _____ () C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\zlib1.dll
2015-03-22 15:48 - 2015-03-22 16:51 - 00822784 _____ () C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\CvLocalizationWin32Final Release.dll
2015-03-22 15:48 - 2015-03-22 16:53 - 00579584 _____ () C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\CvGameDatabaseWin32Final Release.dll
2015-03-22 16:53 - 2015-03-22 16:53 - 00151040 _____ () C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\lua51_Win32.dll
2013-07-15 14:32 - 2015-05-08 00:16 - 00371392 _____ () C:\Program Files (x86)\Steam\steam.dll
2015-03-22 17:05 - 2015-03-22 17:05 - 00047616 _____ () C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\Miles\win32\binkawin.asi
2015-03-22 17:05 - 2015-03-22 17:05 - 00078336 _____ () C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\Miles\win32\mssmp3.asi
2015-03-22 16:58 - 2015-03-22 16:58 - 00041472 _____ () C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\Miles\win32\mssogg.asi
2015-03-22 16:53 - 2015-03-22 16:53 - 00153600 _____ () C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\Miles\win32\mssvoice.asi
2015-03-22 16:58 - 2015-03-22 16:58 - 00013312 _____ () C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\Miles\win32\mssds3d.flt
2015-03-22 16:56 - 2015-03-22 16:56 - 00060416 _____ () C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\Miles\win32\msseax.flt
2015-05-01 14:34 - 2015-04-28 04:07 - 01252680 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\libglesv2.dll
2015-05-01 14:34 - 2015-04-28 04:07 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\libegl.dll
2015-05-01 14:34 - 2015-04-28 04:07 - 14980424 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\PepperFlash\pepflashplayer.dll
2015-04-15 21:14 - 2015-04-15 21:14 - 16863920 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Classes\.exe: exefile =>  <===== ATTENTION!
HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Classes\exefile:  <===== ATTENTION!

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-221738678-620704744-704572411-1000\...\aeriagames.com -> hxxps://aeriagames.com
IE trusted site: HKU\S-1-5-21-221738678-620704744-704572411-1000\...\aeriagames.com -> hxxp://aeriagames.com


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-221738678-620704744-704572411-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Ralink Wireless Utility.lnk => C:\Windows\pss\Ralink Wireless Utility.lnk.CommonStartup
MSCONFIG\startupreg: Aeria Ignite => "C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe" silent
MSCONFIG\startupreg: Overwolf => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent
MSCONFIG\startupreg: Raptr => C:\PROGRA~2\Raptr\raptrstub.exe --startup

==================== FirewallRules (whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

FirewallRules: [{78594C1C-0D50-4158-BE4B-630F903AD614}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{6FBF251F-BD39-4F99-9B43-11228600FA75}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
FirewallRules: [{D2661B1C-FB14-4488-85B6-C9F0F671AC26}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
FirewallRules: [{2C171432-29A8-41AE-B4FC-C8A1B17AA814}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{5AB70EC2-290C-47AF-93E6-2FF6583923AE}] => (Allow) LPort=2869
FirewallRules: [{E223E5D1-C91F-43A7-BAF4-034AF2D39963}] => (Allow) LPort=1900
FirewallRules: [{87113CB6-D031-4465-A7DA-1190F21F5789}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{A6A9391B-02D1-49D7-ADC4-9186A84936CB}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{57B9C597-A0EB-408F-856B-FA683C8132A3}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{714CDBAF-5604-42B3-B700-E8038F5DF945}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [TCP Query User{06F842FE-DDFA-4FCC-AE92-5F69EEE0F652}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{3661892A-DE75-4580-91A0-F9FBF1799DF3}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{5765CABA-404A-44EF-8227-7422B4001117}C:\program files (x86)\dragon's prophet\dp_x64.exe] => (Allow) C:\program files (x86)\dragon's prophet\dp_x64.exe
FirewallRules: [UDP Query User{4AB4E404-C83C-479E-AE15-ED70B9717177}C:\program files (x86)\dragon's prophet\dp_x64.exe] => (Allow) C:\program files (x86)\dragon's prophet\dp_x64.exe
FirewallRules: [{D8B75AC5-DB8B-4A3C-A379-08351FDB3A8A}] => (Block) C:\program files (x86)\dragon's prophet\dp_x64.exe
FirewallRules: [{FA2BCC55-2D25-4982-9813-648096C2D014}] => (Block) C:\program files (x86)\dragon's prophet\dp_x64.exe
FirewallRules: [TCP Query User{8BC7D8B9-96BF-48DA-B566-50842124FA04}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe
FirewallRules: [UDP Query User{9C72FA86-27B7-40B5-BCCB-3EE160D8159F}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe
FirewallRules: [TCP Query User{643C5904-C3B1-4EF9-B893-4374ECF6D6DA}C:\program files (x86)\dragon's prophet\launcher.exe] => (Allow) C:\program files (x86)\dragon's prophet\launcher.exe
FirewallRules: [UDP Query User{878B8F84-B88B-4D79-BA68-B0CE420657C1}C:\program files (x86)\dragon's prophet\launcher.exe] => (Allow) C:\program files (x86)\dragon's prophet\launcher.exe
FirewallRules: [{80ED7FA9-4202-4D90-836F-F9F56B4CDAE4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{4399A304-14B2-4EFA-B537-E8EA862FCC80}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{01721DB0-F656-4031-8930-1E8373DC2F7F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3sp.exe
FirewallRules: [{C1942149-4BF2-4840-B25B-0861219DBE3B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3sp.exe
FirewallRules: [{AD3CBC94-9015-4EEC-8010-9730A95F050C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3mp.exe
FirewallRules: [{83C71D22-7773-410B-9C20-2AA7FDCEB96E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3mp.exe
FirewallRules: [{E7F483C4-10DC-4293-ACA0-F3AF08D31698}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x86.exe
FirewallRules: [{27ADCB35-4841-4AF9-B2D7-CC086CF7A903}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\launcher.exe
FirewallRules: [{4933D89C-009A-43A4-A839-09A511BC8DFC}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\launcher.exe
FirewallRules: [{3D9A3A59-0A6C-440B-A6F9-0A90AC0DE8EB}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x64.exe
FirewallRules: [{18241FBC-0EF3-483B-94A6-AC00EEDBF4A7}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x64.exe
FirewallRules: [{C7D1F9D6-5F5C-4788-8D75-AA4662252A42}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x86.exe
FirewallRules: [TCP Query User{4C269EB3-8471-4A9F-8BEC-B534B181151E}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe
FirewallRules: [UDP Query User{721D1BD2-BDD0-4F36-AD02-862EE89713FE}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe
FirewallRules: [TCP Query User{C39306B7-FF57-4794-8B9A-9AA0F84CB38F}C:\users\dima\appdata\local\iw4m\iw4m.dat] => (Block) C:\users\dima\appdata\local\iw4m\iw4m.dat
FirewallRules: [UDP Query User{F8E2B0E8-5340-4B1C-92C0-7DA4FD31E1C2}C:\users\dima\appdata\local\iw4m\iw4m.dat] => (Block) C:\users\dima\appdata\local\iw4m\iw4m.dat
FirewallRules: [TCP Query User{1D2F39A8-48D1-4F21-9CF1-DE335D47F856}C:\users\dima\desktop\iw4m\iw4m.dat] => (Allow) C:\users\dima\desktop\iw4m\iw4m.dat
FirewallRules: [UDP Query User{56A99EDF-B65F-4AFD-AE16-F7D98D17E077}C:\users\dima\desktop\iw4m\iw4m.dat] => (Allow) C:\users\dima\desktop\iw4m\iw4m.dat
FirewallRules: [TCP Query User{2615C76C-73D3-4D32-B632-E52A4C790CC1}C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe
FirewallRules: [UDP Query User{06CB1C71-BEEC-4057-B2DC-C2D7E2D1CA89}C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe
FirewallRules: [{C39F0114-CCFF-4583-BE3C-FCC7B4C918B2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014 Demo\DotP_D14.exe
FirewallRules: [{586F7494-D5E6-431C-B8E6-847AF4C525E9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014 Demo\DotP_D14.exe
FirewallRules: [{76EF348E-4A47-485D-9F6F-4D71F6E38FC1}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{7AE12753-DC2E-4865-9B9B-D3A3E3937C08}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{5951B7B2-DBCA-4C9A-9BF3-C4114D1B65B5}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{65B33429-5091-41E6-A332-E473323DD788}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{1EC8437C-CE05-4587-9FC8-1F694B4C7C17}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe
FirewallRules: [{D0028759-3301-4357-8B2F-C150FE1F51E3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe
FirewallRules: [{FBA36FBF-DB77-4FD8-BC3F-80825FA74D59}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe
FirewallRules: [{5F4313DD-BA94-4F06-A2F0-B409FDAC09F4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe
FirewallRules: [{67D60A7C-0385-470F-9033-87A08C2D2E4F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [{E3735442-0A8C-41A3-9B08-729BC8802589}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [TCP Query User{7090371A-9B4F-4254-84A8-364D16F3A38C}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [UDP Query User{31DB48CF-D0EF-4B0D-AAE6-7AF83D2137D8}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [{A045D731-60D5-4EAD-BF23-1F7796BB34FA}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [{2C6C6FBA-5AFC-4085-8A68-A8C98856386B}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [TCP Query User{3C639DFB-197E-4AFF-A15E-25F14B889032}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat
FirewallRules: [UDP Query User{82EE40F2-E294-4D7B-9D68-1B75AE208E6A}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat
FirewallRules: [{64E878D7-1907-4A7D-A779-834D5D060955}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat
FirewallRules: [{68209FB4-C66B-4D9D-A2F0-2397BE1AB277}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat
FirewallRules: [TCP Query User{00A0BD31-B63A-4C19-93E8-ABCC8DB5C578}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [UDP Query User{8999A7F5-D427-4328-AAB7-ADA1FA9C59BF}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [{8DC4935E-B350-42D1-8FB1-1BB8F7442E36}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [{6CFC61D0-18CC-49EB-B25A-ACAECA62E42B}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [TCP Query User{EBCAC3E3-AA9A-43CF-B83E-98D5FD5EA402}C:\users\dima\desktop\call of duty modern warfare 2\com.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\com.dat
FirewallRules: [UDP Query User{84C7686B-75DF-401A-9FDF-7FC9F6392C7D}C:\users\dima\desktop\call of duty modern warfare 2\com.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\com.dat
FirewallRules: [{049E4550-90D7-4FEF-B6AD-9D74DED0C676}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\com.dat
FirewallRules: [{993FB1C4-D279-479A-90BE-6165BF19AF2E}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\com.dat
FirewallRules: [TCP Query User{9B3FB14A-DDF0-4459-AB11-D96BA0A21D17}C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [UDP Query User{3511F905-74A3-4CF9-9DC4-31D40CA6C995}C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [{4BBE5ECB-54A4-4EF1-BAA9-DBE3F102DC2F}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [{A73E2F4B-AB36-4447-B71B-F28AF0D3F1C5}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [TCP Query User{85EDB327-F94C-42C7-A714-B52DCFABB896}C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [UDP Query User{62DB249D-8E0B-4DE5-866A-A5EC513C7675}C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [{9BA06BB7-A418-404C-A95C-D8E2282C6F57}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [{CED6EBE2-E036-4988-AB13-D5DA803410B6}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [{E546D188-E7DD-44EE-BC95-7E5100A1366C}] => (Allow) C:\Users\Dima\Downloads\HOTO_downloader.exe
FirewallRules: [{60F46196-1CBF-40C0-970C-031D8BAD38B2}] => (Allow) C:\Users\Dima\Downloads\HOTO_downloader.exe
FirewallRules: [{F45FED77-FF04-4879-9444-42D263E00C25}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe
FirewallRules: [{28EC56F2-D3A9-4BCE-A5F5-878749DE6407}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe
FirewallRules: [{A4083F49-4F11-4A32-B91C-2BAF1B4BF058}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe
FirewallRules: [{DF37D091-D2F9-4401-B457-D9030A3919A8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe
FirewallRules: [{1315155E-2220-4EDE-A4A4-755669B75E19}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [{58E7FDFD-4736-4213-9B42-50E885AE99CA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [{31958790-F30C-4BC7-BDAC-03B4DED35B86}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe
FirewallRules: [{CC1F0407-71B4-4EC3-9F37-0E161C8A3322}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe
FirewallRules: [{145C7649-7AA9-42B3-97E8-5B8400173F22}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe
FirewallRules: [{936F4879-D6DB-4A9A-BEB0-D9E0A63B56E1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe
FirewallRules: [{375BA601-C201-4FFF-9426-9DC8362E1D6A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{4EAF1A42-8BB1-49A8-8D54-63BE9EF5E1FC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{E7EEA6A5-9E71-4A90-B195-713ADC4D3DD9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe
FirewallRules: [{C7E9681A-9A64-4D1A-99A8-CFC9168448D5}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe
FirewallRules: [{4352484E-8611-4EF5-92B1-E1134658D51D}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{FAF9A5EF-500F-48F2-9A53-FB0E549E87A7}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{45E32924-61E5-4693-8142-5090A1DACC77}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{B51953D9-7C03-413E-B7EA-B60979F79136}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [TCP Query User{58A3D1CA-EB63-41E1-815B-2C296E72A629}C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe] => (Allow) C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe
FirewallRules: [UDP Query User{42C952D4-1892-4D10-9AB1-1CC3F39A23F3}C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe] => (Allow) C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe
FirewallRules: [{1D455526-6B1D-4BF9-B8BA-00306E25FF9A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [{0DA93301-8BDC-47FD-B914-E2FA1EC7AAFB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [TCP Query User{0729B18F-9796-4FCF-A32F-7A5833FBE815}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\dima\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{A54F5C5A-D8E2-403E-A810-D1615D1E56C6}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\dima\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{9C8EF3A7-3266-4542-B95E-133CF9D2DFA9}C:\programdata\battle.net\agent\agent.beta.2514\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2514\agent.exe
FirewallRules: [UDP Query User{DF8986C4-FB63-4A37-874F-5E4F5AB0B070}C:\programdata\battle.net\agent\agent.beta.2514\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2514\agent.exe
FirewallRules: [TCP Query User{7D2074A4-AA89-4BA7-A7EB-1268C6492AEE}C:\program files (x86)\devpro\devpro.dll] => (Allow) C:\program files (x86)\devpro\devpro.dll
FirewallRules: [UDP Query User{F2B7C119-C5D0-4914-BEBC-71E99254D344}C:\program files (x86)\devpro\devpro.dll] => (Allow) C:\program files (x86)\devpro\devpro.dll
FirewallRules: [{EA7F7B92-3349-4537-9E50-3A0B4D818281}] => (Allow) C:\AeriaGames\AuraKingdom\game.bin
FirewallRules: [{AB6209F8-0BA4-4FC4-803C-1A73FEFDA112}] => (Allow) C:\AeriaGames\AuraKingdom\game.bin
FirewallRules: [TCP Query User{4F600FC8-F54A-49E9-B588-2F547BBA96B1}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe
FirewallRules: [UDP Query User{DF1CE9AE-5217-4393-B737-92F45CBCB4BD}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe
FirewallRules: [{A1A5A428-B18A-4BC9-A553-B1E6989C2A42}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Darksiders 2\Darksiders2.exe
FirewallRules: [{F60EBF1D-B0A7-4638-B48C-AF3F18B494BA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Darksiders 2\Darksiders2.exe
FirewallRules: [{767607AA-81B6-406F-BF1E-B8A81ED847FC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe
FirewallRules: [{35789372-EE60-4ED3-81F9-A81ED3BF2CE4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe
FirewallRules: [{07DE1F4A-0A51-4A63-BF8D-CD9580D92EB6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{5F40E8E8-9EF2-41AA-9414-FBA5770F0A94}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [TCP Query User{744A07AB-09FD-499C-9F04-E01BB0351E8D}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\dima\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{F7498DED-162B-488F-B59F-256A51C6CE71}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\dima\appdata\local\akamai\netsession_win.exe
FirewallRules: [{AEAB3ECF-0BB1-453B-8D1F-476AE01D86A0}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe
FirewallRules: [{8D48AAEF-A0CE-44E7-9024-CA3944E81E7D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe
FirewallRules: [TCP Query User{6CF9A63C-F912-4E3A-8DDA-6D3AC6AF66DF}C:\programdata\battle.net\agent\agent.beta.2638\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2638\agent.exe
FirewallRules: [UDP Query User{5A9CB3D7-8747-407A-97AB-191DBFC43D75}C:\programdata\battle.net\agent\agent.beta.2638\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2638\agent.exe
FirewallRules: [{94644398-7E26-4C3A-BD3D-8AC488A93807}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe
FirewallRules: [{03DDFDE2-264E-4187-85CD-4382D41F4A6C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe
FirewallRules: [{C38A5A06-BB40-4CFC-BA71-87AEC286F6D6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe
FirewallRules: [{CB8BA2E2-B98E-442B-87D9-92EFB85FECAD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe
FirewallRules: [{234100A5-3277-4236-B80F-3BD7A113F330}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe
FirewallRules: [{9472EB6F-9BC9-4FC2-B7B2-45A96212D7C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe
FirewallRules: [{4DDCAB31-D1CA-49D7-83D1-9A7708CA3387}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Loadout\Loadout.exe
FirewallRules: [{50274324-D5E3-4A7D-9551-60285C4D51CE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Loadout\Loadout.exe
FirewallRules: [{505A793E-19FF-4163-85DA-BDD1366147B4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{5D9B037C-78AD-4F93-AFCB-A8BF0480CCCF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{71BA2590-5ED7-4DC0-919C-603D078A17E1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
FirewallRules: [{E3C9045F-0538-43CE-9AC0-B88A7047D12B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
FirewallRules: [{AA27854D-9002-4BB1-AC3B-2B040589990B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{F262DA23-A9A0-45ED-875A-42640AB812FD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{5B584B43-CDC2-482C-A915-51ED708E2BDE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
FirewallRules: [{FBE87CBF-6E5E-443B-BB64-D76E91781977}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
FirewallRules: [TCP Query User{5B78C40B-EF9C-4DE3-B847-DDC0913711FC}C:\program files (x86)\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\tera\tera-launcher.exe
FirewallRules: [UDP Query User{02ADE6C1-8488-448C-9DD6-1D4ABC838F09}C:\program files (x86)\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\tera\tera-launcher.exe
FirewallRules: [{4EC807D8-651B-4EDE-906E-15D8940E045A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{5C43F976-C8BD-461A-8160-E4037DEC5A46}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{91A8DE20-9DBA-43BD-9F4B-DE1B625D0D83}] => (Allow) C:\AeriaGames\EdenEternal-DE\_Launcher.exe
FirewallRules: [{CD8464F5-1D27-4ACC-848F-AD802961AD3D}] => (Allow) C:\AeriaGames\EdenEternal-DE\_Launcher.exe
FirewallRules: [{20FF7205-61B2-44CC-87A6-CCE211D4603C}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{6B725485-B1DC-4646-B9AD-C4E754073AD5}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{EFDADD2B-5B82-4D44-BFF6-7533A33E5D4B}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{EDABDFE1-A779-47FE-A7F2-0BE99128B9D1}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{C864BA6F-6F65-4A53-BACD-5590447E71A3}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{BF9437A3-0AAD-4EF3-9020-8A7EDA18FFFB}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{5EC4813D-F4A5-44A4-99AE-2FEEADC7BD68}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe
FirewallRules: [{5741DE79-8863-4C92-8CA4-43D24ED12E9D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe
FirewallRules: [{7FA5A6CC-69A0-4EF2-9E4E-D36CF4A6FFB1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe
FirewallRules: [{1E27B3D7-EBC5-46D1-A1F4-5150D5FC7ECA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe
FirewallRules: [{7ACB6A7B-1D9F-4159-9E5C-57293DE770B9}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA World\fifaworld.exe
FirewallRules: [{CC579040-BC64-4658-B938-3FC11265DBA0}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA World\fifaworld.exe
FirewallRules: [TCP Query User{466B6D60-FB8E-40F4-9A96-3F6B84C31F10}C:\programdata\battle.net\agent\agent.2787\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.2787\agent.exe
FirewallRules: [UDP Query User{747BD4DC-E6ED-4E9F-889A-E1029B9BD7EC}C:\programdata\battle.net\agent\agent.2787\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.2787\agent.exe
FirewallRules: [{024C2E0F-0F94-4571-AAA1-63A5D32016D2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe
FirewallRules: [{19CDF823-35E4-43AD-8A38-931E02B58B64}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe
FirewallRules: [{EA2378D9-ADC4-4A3E-947C-030BBA9A41B0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Aura Kingdom\game.bin
FirewallRules: [{E3E3914B-6929-4469-A807-4C9FC60B3CA5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Aura Kingdom\game.bin
FirewallRules: [{AB6817F8-474B-413B-B1A1-DB9F05CE61BB}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{8192EF82-EABD-49D0-92CB-1E602FCB2399}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{8E9567B7-FEC3-4B6A-8469-1B65ACAEBCF2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe
FirewallRules: [{9832DDCA-66F8-432C-8B22-60682E5E919E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe
FirewallRules: [TCP Query User{1128027D-DF51-428D-BBF5-261AD7F20EEC}C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe
FirewallRules: [UDP Query User{0D0921EC-8295-44F1-A446-52BAFD8EF6EB}C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe
FirewallRules: [TCP Query User{1FC5CC73-6F52-4B75-8D0B-4753B673D255}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{A5E61E08-5C0A-4EA7-BD2C-D6ACED33386F}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{E290B8F5-DC46-4D43-9E40-A8CFEBD19A8A}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe
FirewallRules: [UDP Query User{4A59CA75-CB6F-46C3-8E3B-D091F44ACDC5}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe
FirewallRules: [{51E7B824-61EF-498A-94AE-826ED3FE5CF2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{B9C59147-9E45-4E11-9B2F-5702A1ACAFA5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{BB70E8F0-DE1E-4EEF-873C-95044B81A8C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [{49C70379-991F-4248-81CB-BA51F9158E4F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [{6BB569B0-D223-4EAB-A4A0-83B776CDA2DD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age2HD\Launcher.exe
FirewallRules: [{D341F20A-E2E0-4320-82A8-3607608AD108}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age2HD\Launcher.exe
FirewallRules: [{757CE32E-DE9A-440C-BAB3-B9F8EF37A2A0}] => (Allow) C:\Users\Dima\Downloads\b9_downloader.exe
FirewallRules: [{ACA68B80-8F45-4E75-B7D3-470AF290871F}] => (Allow) C:\Users\Dima\Downloads\b9_downloader.exe
FirewallRules: [TCP Query User{B5BB55CB-DE77-4080-963B-3A266AC37CE5}C:\programdata\battle.net\agent\agent.3235\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3235\agent.exe
FirewallRules: [UDP Query User{30EBE90E-7ED1-4868-9D3D-50E6D7112675}C:\programdata\battle.net\agent\agent.3235\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3235\agent.exe
FirewallRules: [{1BAA9821-E2DD-48BF-9E27-F6297D2F5116}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [{9C9260ED-7AA0-4AE4-972E-D83A5D097028}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [{EA27D1BB-E05D-4097-97AF-BC7DE8174F52}] => (Allow) C:\Program Files (x86)\Bench\Proxy\proc.exe
FirewallRules: [{953D2DA8-7AEB-4931-BE76-87BDE0ACBC39}] => (Allow) C:\Program Files (x86)\Bench\Proxy\pwdg.exe
FirewallRules: [{91AF5EE1-530D-4D72-A308-BDBA132ABA31}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{AF831DA2-EC4A-4642-915F-DF7CBB2A2CF3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{BBBB3AD6-5EB2-4204-B5AF-9716942ACB1C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
FirewallRules: [{63BB69A1-F607-4FB8-9EDD-1A607AABDA8B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
FirewallRules: [{34F27A20-13E6-46E6-9901-39383CB7F97A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [{DA9D712D-0C9F-441F-A880-FF8D27837E6E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [TCP Query User{A250025F-7CBE-4CAD-93AE-C02E36E841C1}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe
FirewallRules: [UDP Query User{3D207EE9-306F-48FF-8735-CD8CDAFA0490}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe
FirewallRules: [TCP Query User{F7376CA3-FA2C-4F56-9AD8-0A2ADC4927AE}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe
FirewallRules: [UDP Query User{BCBA424F-EDE5-4DFC-8FD5-56BB5666B2F5}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe
FirewallRules: [{7A5EB71C-C724-402F-8557-A92B3BAD628E}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe
FirewallRules: [{AF09CC9B-68D7-404C-B498-D144643C1A54}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe
FirewallRules: [{D56AE5C0-0487-4C87-8284-10DC792A01DE}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe
FirewallRules: [{CB98B3E2-40A1-4A7C-ACCB-56A50C8E3F7B}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe
FirewallRules: [{B3D84AF2-F39E-4E7D-9D7E-FFCD803C1135}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{AB8E5377-F2F7-441D-9A50-434D83F90C0E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{CCA3F085-5CA5-4FEE-9ADD-935183AE6F1C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{9EA1B11A-0179-414A-AFF8-82050C792E6B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{256D7304-2C38-45D1-97DB-71739BA92297}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [{E2070B33-5CCB-46B0-B6CF-4ED92F8AB562}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [{1E69481E-7920-4B4D-9047-B812C456A75A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{A416660E-98DD-4A45-8A5A-C8BBA66A68A3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{72A09F1B-7789-4A3E-B327-FD1D052150FF}] => (Allow) C:\Program Files (x86)\GameforgeLive\gfl_client.exe
FirewallRules: [TCP Query User{2A0CBFD5-23A1-4C20-91ED-B00077755298}C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe
FirewallRules: [UDP Query User{3933DFA8-6EB3-47A1-A4F9-7C3E7BD2ED67}C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe
FirewallRules: [TCP Query User{69CF256B-C011-492C-B7A0-04F509D0D67B}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe
FirewallRules: [UDP Query User{FFEA845F-4BF9-44FF-89AC-628034543D28}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe
FirewallRules: [{7809CF2C-51C3-4520-8BD0-F210B5BBB57B}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [{CE1678FF-6995-415D-ADDC-E165111812E1}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [{2412E622-4FBF-402A-B899-DBC82E5C6B2B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{5817EFF9-3537-4F8B-97F9-2C33716052B4}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{B65003CD-97BF-4394-A2F7-21A3E24DCFB5}] => (Allow) C:\Nexon\Vindictus EU\en-EU\NMService.exe
FirewallRules: [{0CA242B9-DEDD-43C3-9F4C-BADAE74781E9}] => (Allow) C:\Nexon\Vindictus EU\en-EU\NMService.exe
FirewallRules: [TCP Query User{3D2A0F20-56AE-42D0-80DF-E8AC85D00D13}C:\nexon\vindictus eu\en-eu\vindictus.exe] => (Allow) C:\nexon\vindictus eu\en-eu\vindictus.exe
FirewallRules: [UDP Query User{2DFE002E-3069-4DA8-920D-442A029D663E}C:\nexon\vindictus eu\en-eu\vindictus.exe] => (Allow) C:\nexon\vindictus eu\en-eu\vindictus.exe
FirewallRules: [TCP Query User{93A7A5BC-03EA-42A5-AE99-CC30CBDF752F}C:\users\dima\desktop\eclipse\eclipse.exe] => (Allow) C:\users\dima\desktop\eclipse\eclipse.exe
FirewallRules: [UDP Query User{13A19341-79DD-4889-B496-24BB0AA8C4C2}C:\users\dima\desktop\eclipse\eclipse.exe] => (Allow) C:\users\dima\desktop\eclipse\eclipse.exe
FirewallRules: [TCP Query User{95CD7A11-031A-4E37-B3A1-64F53A1F7A75}C:\program files\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{9B60CDE5-BA1E-4E6D-BDF3-C1056F5F8650}C:\program files\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{C4E30886-3358-4A99-BE81-2F5BED09E73D}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [UDP Query User{710835ED-1463-4E58-8DB1-9F37F56C4A0F}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [TCP Query User{C7584B0F-6622-4E1D-8987-9D85C77F36F0}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [UDP Query User{F365D46D-EED4-49F4-93DF-234F94019BB2}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [TCP Query User{63488A2D-8F13-4C4E-8CC0-49944F9372BA}C:\users\dima\desktop\lancraft\lancraft.exe] => (Allow) C:\users\dima\desktop\lancraft\lancraft.exe
FirewallRules: [UDP Query User{EAEC2D64-0B8E-4599-A61B-53F358A64796}C:\users\dima\desktop\lancraft\lancraft.exe] => (Allow) C:\users\dima\desktop\lancraft\lancraft.exe
FirewallRules: [TCP Query User{A91AD53F-87ED-432A-9D7C-0AC95375B702}C:\users\dima\desktop\warcraft\war3.exe] => (Allow) C:\users\dima\desktop\warcraft\war3.exe
FirewallRules: [UDP Query User{CC9DF559-105D-4031-9013-ADF7BC24CFC3}C:\users\dima\desktop\warcraft\war3.exe] => (Allow) C:\users\dima\desktop\warcraft\war3.exe
FirewallRules: [TCP Query User{6E3020FE-2B2A-413D-8EBC-AC0261DDA56B}C:\users\dima\desktop\warcraft\lancraft.exe] => (Allow) C:\users\dima\desktop\warcraft\lancraft.exe
FirewallRules: [UDP Query User{83FC41EC-2250-4389-B57F-7CF1CF138244}C:\users\dima\desktop\warcraft\lancraft.exe] => (Allow) C:\users\dima\desktop\warcraft\lancraft.exe
FirewallRules: [{E762770A-34B1-461E-B15E-FFC052875F0A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\CastleCrashers\castle.exe
FirewallRules: [{32B2CED0-8283-4A5A-8965-FFCB653C38DA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\CastleCrashers\castle.exe
FirewallRules: [TCP Query User{CA917D8D-9E80-4B19-90E8-110407378DDD}C:\program files (x86)\unity\editor\unity.exe] => (Allow) C:\program files (x86)\unity\editor\unity.exe
FirewallRules: [UDP Query User{4A9F69B2-9BB4-4F0E-B34D-4D95E242700A}C:\program files (x86)\unity\editor\unity.exe] => (Allow) C:\program files (x86)\unity\editor\unity.exe
FirewallRules: [{5A44804A-99EB-4C63-8F18-C9310F1C4657}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe
FirewallRules: [{5C90DDB5-DFDC-4BF5-B6D0-B86A95AEE724}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe
FirewallRules: [TCP Query User{DD861486-7A78-460B-9A83-BFA67BC6A454}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [UDP Query User{21543651-AA0C-4F30-B6F4-14C779C5E70B}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [TCP Query User{5C83AE95-A82A-49CA-B905-4EFC8C6961F9}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [UDP Query User{640696E3-D785-4576-883E-596F24E072B3}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [{5880095B-DD8E-4F79-BA8F-727A270A9A7B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dungeon Defenders\Binaries\Win32\DungeonDefenders.exe
FirewallRules: [{A02B8413-228D-4E79-9B24-1B23EEBA9CE2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dungeon Defenders\Binaries\Win32\DungeonDefenders.exe
FirewallRules: [TCP Query User{E5CD1AD8-4898-41F1-880E-C3CCEEF12C49}C:\program files (x86)\secondlifeviewer\slvoice.exe] => (Allow) C:\program files (x86)\secondlifeviewer\slvoice.exe
FirewallRules: [UDP Query User{37F84E6A-EF30-44B7-8E99-DE3F7E7DF7EE}C:\program files (x86)\secondlifeviewer\slvoice.exe] => (Allow) C:\program files (x86)\secondlifeviewer\slvoice.exe
FirewallRules: [TCP Query User{2478D171-94B3-4D1F-8C59-4E8322B8E276}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{28D75031-A654-47AF-802E-4A9A15D5EF3F}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{3A112284-5247-4174-9FB4-B86BFEBD19F9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{B2899169-D59D-4AC1-BBE3-3F3903152981}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{12C4EFF7-DD2B-4A0E-A3A0-98777451B440}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3.exe
FirewallRules: [{4060C2B9-6F65-462B-9221-EEEBCF58BB56}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3.exe
FirewallRules: [{EFA22BC5-7DE3-47F6-8167-289BFDD93178}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3_Unrestricted.exe
FirewallRules: [{C0D1322B-FEBC-4B0A-BD29-158C54B47C3F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3_Unrestricted.exe
FirewallRules: [{13A229AF-4A20-4E5A-B1D5-E4DA450947FA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Gumboy Tournament\gumboytournament.exe
FirewallRules: [{BD506B34-1746-48BC-A17D-29CE55B609BC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Gumboy Tournament\gumboytournament.exe
FirewallRules: [TCP Query User{E9B42C51-F75A-4042-8D09-5FE64A6E0AFD}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe
FirewallRules: [UDP Query User{A47B5394-0D06-4B60-AEAC-F80C6A18EC73}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe
FirewallRules: [{1F0F5A11-9A4F-49CF-8202-86A2DAEB8299}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_launcher.exe
FirewallRules: [{472579C8-4E14-4D30-9C6E-7C1E88FAB3FD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe
FirewallRules: [{09D4FEB7-995B-4579-90DC-1C535713E99A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe
FirewallRules: [{418B6FDA-1046-4E47-AFFC-EC7C31A532E9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe
FirewallRules: [{7199E669-27DE-4BFD-94D5-FDCF6A7C93AA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe
FirewallRules: [{BFF61270-CC5A-432C-A7FB-7D76DC47C782}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium.exe
FirewallRules: [{490B16FF-C2D2-4175-A366-EFDAA08EB979}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium.exe
FirewallRules: [TCP Query User{C9F38270-E9E5-4168-9E99-11073C550934}C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe
FirewallRules: [UDP Query User{6082536E-F697-45B2-969C-5E5CA8E07E06}C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe
FirewallRules: [TCP Query User{5AC0DF45-9E80-410D-A952-1DDA7A565671}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{31F72C84-B935-4C8E-8E1E-6FBDDC891D1C}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe
FirewallRules: [{8EB84DED-EB81-4D74-9575-8282402E2D2E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cryptic Studios\Neverwinter.exe
FirewallRules: [{B5B40F25-2AC6-4642-8BBC-63AE2A925B7B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cryptic Studios\Neverwinter.exe
FirewallRules: [TCP Query User{096444F6-AA1C-44A3-8C5E-A8DFF4A1C6D0}C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe
FirewallRules: [UDP Query User{9E1BE6EE-CCE2-4CFC-8375-7D1F41A71285}C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe
FirewallRules: [{3E6ED98E-B2F8-4E5F-BAED-9D8ACD743A90}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{2F7FD9C7-09FF-4330-AB1D-62122B26142B}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{B6917A43-4FD1-4943-819E-0224DF009AD4}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{580CEC6F-22A8-423D-B6A2-60898E1991C0}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{1D779765-CEC8-476D-8663-FF565F9943D2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dragon Nest Europe\DragonNest\DragonNest.exe
FirewallRules: [{BFD8F340-3BB5-4D13-B4C8-64605B781AE5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dragon Nest Europe\DragonNest\DragonNest.exe
FirewallRules: [TCP Query User{51AE804F-C3F0-4BE7-8861-486111D1A4C3}C:\neople\dfo\dfo.exe] => (Allow) C:\neople\dfo\dfo.exe
FirewallRules: [UDP Query User{813C44E8-970E-4FB2-A994-1B7E6CFAB002}C:\neople\dfo\dfo.exe] => (Allow) C:\neople\dfo\dfo.exe
FirewallRules: [{721B343A-D002-417F-8012-828923F7CF99}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe
FirewallRules: [{51F7C144-FBEC-4072-83BA-D2DB2C1ED47D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe
FirewallRules: [{ECFA20B8-D75A-4C39-89BD-017F84E119BB}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{0FE2304A-0072-4655-BD88-8EAC2F3EE694}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7C5F9697-EA12-4FD9-AA6A-450DA3B7D57A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service

==================== Faulty Device Manager Devices =============

Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: qrnfd_1_10_0_13
Description: qrnfd_1_10_0_13
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: qrnfd_1_10_0_13
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/11/2015 09:18:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 37.0.2.5583, Zeitstempel: 0x552ef76c
Name des fehlerhaften Moduls: mozalloc.dll, Version: 37.0.2.5583, Zeitstempel: 0x552ee9ae
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001aa1
ID des fehlerhaften Prozesses: 0x15f0
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3

Error: (05/10/2015 06:42:28 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/10/2015 04:13:33 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/10/2015 04:12:45 PM) (Source: ESENT) (EventID: 215) (User: )
Description: WinMail (2764) WindowsMail0: Die Sicherung wurde abgebrochen, weil sie vom Client angehalten wurde, oder weil die Verbindung mit dem Client unterbrochen wurde.

Error: (05/10/2015 03:57:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 37.0.2.5583, Zeitstempel: 0x552ef76c
Name des fehlerhaften Moduls: mozalloc.dll, Version: 37.0.2.5583, Zeitstempel: 0x552ee9ae
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001aa1
ID des fehlerhaften Prozesses: 0x1c44
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3

Error: (05/10/2015 03:38:05 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm League of Legends.exe, Version 5.8.0.461 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 3c6c

Startzeit: 01d08b2209e5b9bd

Endzeit: 16

Anwendungspfad: C:\Riot Games\League of Legends\RADS\solutions\lol_game_client_sln\releases\0.0.1.88\deploy\League of Legends.exe

Berichts-ID:

Error: (05/10/2015 03:03:45 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 37.0.2.5583, Zeitstempel: 0x552ef76c
Name des fehlerhaften Moduls: mozalloc.dll, Version: 37.0.2.5583, Zeitstempel: 0x552ee9ae
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001aa1
ID des fehlerhaften Prozesses: 0x23c4
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3

Error: (05/10/2015 02:46:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 37.0.2.5583, Zeitstempel: 0x552ef76c
Name des fehlerhaften Moduls: mozalloc.dll, Version: 37.0.2.5583, Zeitstempel: 0x552ee9ae
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001aa1
ID des fehlerhaften Prozesses: 0x3eb4
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3

Error: (05/08/2015 09:03:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 37.0.2.5583, Zeitstempel: 0x552ef76c
Name des fehlerhaften Moduls: mozalloc.dll, Version: 37.0.2.5583, Zeitstempel: 0x552ee9ae
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001aa1
ID des fehlerhaften Prozesses: 0x1ea8
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3

Error: (05/08/2015 08:20:49 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 37.0.2.5583, Zeitstempel: 0x552ef76c
Name des fehlerhaften Moduls: mozalloc.dll, Version: 37.0.2.5583, Zeitstempel: 0x552ee9ae
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001aa1
ID des fehlerhaften Prozesses: 0x2ef0
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3


System errors:
=============
Error: (05/10/2015 08:53:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (05/10/2015 08:53:07 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.

Error: (05/10/2015 06:52:34 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureCommand" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (05/10/2015 06:51:14 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (05/10/2015 06:43:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (05/10/2015 06:43:03 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht.

Error: (05/10/2015 06:42:33 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
qrnfd_1_10_0_13

Error: (05/10/2015 06:42:20 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (05/10/2015 06:42:20 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht.

Error: (05/10/2015 06:41:30 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2


Microsoft Office Sessions:
=========================
Error: (05/11/2015 09:18:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe37.0.2.5583552ef76cmozalloc.dll37.0.2.5583552ee9ae8000000300001aa115f001d08c1ef99749a9C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll76a6dcfc-f812-11e4-b276-c9b362989730

Error: (05/10/2015 06:42:28 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/10/2015 04:13:33 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/10/2015 04:12:45 PM) (Source: ESENT) (EventID: 215) (User: )
Description: WinMail2764WindowsMail0:

Error: (05/10/2015 03:57:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe37.0.2.5583552ef76cmozalloc.dll37.0.2.5583552ee9ae8000000300001aa11c4401d08b21cd0c0d65C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll790802e2-f71c-11e4-861a-c7721c7623ca

Error: (05/10/2015 03:38:05 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: League of Legends.exe5.8.0.4613c6c01d08b2209e5b9bd16C:\Riot Games\League of Legends\RADS\solutions\lol_game_client_sln\releases\0.0.1.88\deploy\League of Legends.exe

Error: (05/10/2015 03:03:45 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe37.0.2.5583552ef76cmozalloc.dll37.0.2.5583552ee9ae8000000300001aa123c401d08b1f4d078973C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dllfce5a29c-f714-11e4-861a-c7721c7623ca

Error: (05/10/2015 02:46:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe37.0.2.5583552ef76cmozalloc.dll37.0.2.5583552ee9ae8000000300001aa13eb401d08b15b0bfacd9C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll88aa69a8-f712-11e4-861a-c7721c7623ca

Error: (05/08/2015 09:03:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe37.0.2.5583552ef76cmozalloc.dll37.0.2.5583552ee9ae8000000300001aa11ea801d089bbb9ecf4ecC:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dlldd3c82f2-f5b4-11e4-861a-c7721c7623ca

Error: (05/08/2015 08:20:49 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe37.0.2.5583552ef76cmozalloc.dll37.0.2.5583552ee9ae8000000300001aa12ef001d089ba304c78c2C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dllf341f357-f5ae-11e4-861a-c7721c7623ca


CodeIntegrity Errors:
===================================
  Date: 2015-05-08 20:38:53.994
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:37:07.273
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:37:03.798
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:36:19.340
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:34:40.221
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:34:12.814
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:20:56.969
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:20:56.706
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:20:18.534
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:20:17.995
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-4570 CPU @ 3.20GHz
Percentage of memory in use: 52%
Total physical RAM: 8136.6 MB
Available physical RAM: 3828.84 MB
Total Pagefile: 16271.39 MB
Available Pagefile: 11137.13 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:915.41 GB) (Free:454.26 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 277A7941)
Partition 1: (Not Active) - (Size=16 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=915.4 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Bootsektor · 11.05.2015, 21:46

Hallo,

hast du einen ftb-server/client?

Schritt 1
Bitte lasse die Datei aus der Code-Box bei Virustotal überprüfen.

Klicke auf Wählen Sie eine
Kopiere nun folgendes in die Suchleiste
Code:
ATTFilter
```
C:\Windows\ftb.exe
         
```
und klicke auf Öffnen.
Klicke auf Scannen!.
Warte bitte bis die Datei vollständig hochgeladen wurde. Solltest Du folgende Meldung bekommen

Zitat:

Diese Datei wurde bereits von VirusTotal analysiert...

klicke auf Neu analysieren.
Warte bis dir das Analysedatum angezeigt wird und der Scan abgeschlossen ist.
Kopiere den Link aus deiner Adresszeile und poste ihn hier.

Schritt 2
Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 3
Starte noch einmal FRST.

Setze den Haken bei addition.txt und drücke auf Scan.
Wenn der Scan abgeschlossen ist, werden zwei neue Logfiles FRST.txt und addition.txt erstellt und auf dem Desktop (oder in dem Verzeichnis in dem FRST liegt) gespeichert.
Poste den Inhalt dieser Logfiles bitte hier in deinen Thread.

kriegnes · 11.05.2015, 22:39

Vielen Dank für Ihre Antwort.
Der Link zu Schritt 1 https://www.virustotal.com/de/file/de4fcdad76135cb864903a070e232d976f99bd7834d9a2ac48fa246ba35239bd/analysis/1431380127/

Den Rest werde ich jetzt machen und dann hier rein editieren.

EDIT: AdwCleaner[S2].txt

Code:

ATTFilter

# AdwCleaner v4.203 - Bericht erstellt 11/05/2015 um 23:41:36
# Aktualisiert 30/04/2015 von Xplode
# Datenbank : 2015-05-11.1 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64)
# Benutzername : Dima - DIMAS-PC
# Gestarted von : C:\Users\Dima\Desktop\Downloads\adwcleaner_4.203.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Datei Gelöscht : C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\yn1o6yyd.kriegnes\foxydeal.sqlite
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\browser\defaults\preferences\prefs.js
Datei Gelöscht : C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.selectgo00.selectgo.net_0.localstorage
Datei Gelöscht : C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.selectgo00.selectgo.net_0.localstorage-journal

***** [ Geplante Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Daten Gelöscht : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - hxxp=127.0.0.1:63783;hxxps=127.0.0.1:63783
Daten Gelöscht : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyEnable] - 1
Daten Gelöscht : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <-loopback>
Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local>

***** [ Internetbrowser ] *****

-\\ Internet Explorer v11.0.9600.17689


-\\ Mozilla Firefox v37.0.2 (x86 de)


-\\ Google Chrome v42.0.2311.135


*************************

AdwCleaner[R0].txt - [22123 Bytes] - [10/05/2015 16:07:34]
AdwCleaner[R1].txt - [2082 Bytes] - [10/05/2015 18:39:08]
AdwCleaner[R2].txt - [2295 Bytes] - [11/05/2015 23:40:38]
AdwCleaner[S0].txt - [20918 Bytes] - [10/05/2015 16:09:59]
AdwCleaner[S1].txt - [1911 Bytes] - [10/05/2015 18:39:39]
AdwCleaner[S2].txt - [1985 Bytes] - [11/05/2015 23:41:36]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [2044  Bytes] ##########

FRST.txt

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-05-2015
Ran by Dima (administrator) on DIMAS-PC on 11-05-2015 23:49:08
Running from C:\Users\Dima\Desktop\Downloads
Loaded Profiles: Dima (Available profiles: Dima)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
() C:\Windows\ftb.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Akamai Technologies, Inc.) C:\Users\Dima\AppData\Local\Akamai\netsession_win.exe
(Dxtory Software) C:\Program Files (x86)\ExKode\Dxtory2.0\UpdateChecker.exe
(Akamai Technologies, Inc.) C:\Users\Dima\AppData\Local\Akamai\netsession_win.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
() C:\Windows\mftb.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 2\creator-ws.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe
(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.OE.Systray.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11785832 2011-03-10] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1332296 2015-01-30] (Microsoft Corporation)
HKLM\...\Run: [3D BubbleSound] => "C:\Program Files\BubbleSound\3D BubbleSound.exe"
HKLM-x32\...\Run: [SuiteTray] => C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [340848 2011-04-02] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisTecPMMUpdate] => C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [408432 2011-03-29] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisUpdate] => C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [202608 2011-03-29] (Egis Technology Inc.)
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [297280 2011-04-24] (NTI Corporation)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55568 2015-03-25] (Raptr, Inc)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-11-17] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-03-30] (LogMeIn Inc.)
HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [933888 2012-08-21] (AVM Berlin)
HKLM-x32\...\Run: [gmsd_de_485] => [X]
HKLM-x32\...\Run: [gmsd_de_497] => [X]
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\Launcher\Avira.OE.Systray.exe [127792 2015-04-21] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-19\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-20\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2888384 2015-05-08] (Valve Corporation)
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3619160 2015-01-28] (Electronic Arts)
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Dima\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-30] (Akamai Technologies, Inc.)
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Dxtory Update Checker 2.0] => C:\Program Files (x86)\ExKode\Dxtory2.0\UpdateChecker.exe [93696 2010-10-17] (Dxtory Software)
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [\\DIMA-PC\EPSON SX210 Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFDE.EXE [223232 2008-11-05] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [GameTracker] => "C:\Program Files (x86)\GameTracker\GTLite.exe"
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [AMDToggler] => C:\Users\Dima\AppData\Local\Temp\Rar$EXa0.826\Saturation Toggler.exe <===== ATTENTION
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [GoogleChromeAutoLaunch_74AB638E1E27FA41128D672CA46F567E] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [812872 2015-04-28] (Google Inc.)
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\MountPoints2: {b38c492d-9357-11e3-9d9f-b52bea23c753} - E:\pushinst.exe
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\MountPoints2: {d0b228e3-004f-11e3-8572-a5256f050d2a} - E:\pushinst.exe
HKU\S-1-5-18\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2014-08-23]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk [2015-05-05]
ShortcutTarget: hqghumeaylnlf.lnk -> C:\ProgramData\{b3779435-d2fb-f000-b377-79435d2f50d7}\hqghumeaylnlf.exe (No File)
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-221738678-620704744-704572411-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:63783;https=127.0.0.1:63783
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll No File
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
BHO-x32: PDF Architect Helper -> {691B33B0-B86E-47F3-81C7-56E4FE3B929C} -> C:\Program Files (x86)\PDF Architect 2\creator-ie-helper.dll [2014-10-10] (pdfforge GmbH)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28] (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation)
Toolbar: HKLM-x32 - PDF Architect Toolbar - {DEEB13D7-CEA9-45FB-B77C-E039BEC85221} - C:\Program Files (x86)\PDF Architect 2\creator-ie-plugin.dll [2014-10-10] (pdfforge GmbH)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll [2014-09-01] (EA Digital Illusions CE AB)
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-28] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2013-09-08] (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-11-12] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll [2014-06-24] (Adobe Systems, Inc.)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2014-11-21] (DivX, LLC)
FF Plugin-x32: @esn/npbattlelog,version=2.3.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll No File
FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll [2014-09-01] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-28] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation)
FF Plugin-x32: @mcafee.com/SAFFPlugin -> C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll No File
FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2013-09-08] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npnxgameEU.dll [2014-11-12] (Nexon)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll [2014-10-10] (pdfforge GmbH)
FF Plugin HKU\S-1-5-21-221738678-620704744-704572411-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Dima\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS)
FF Extension: jid0XZn6pYCdV3ANrfYigxlyyGDrxAMjetpack - C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\Extensions\jid0-XZn6pYCdV3ANrfYigxlyyGDrxAM@jetpack [2015-05-11]
FF Extension: 9b9d2aaaae264447a7a1633a32b19ddd - C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\Extensions\{9b9d2aaa-ae26-4447-a7a1-633a32b19ddd} [2015-05-11]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF HKLM-x32\...\Firefox\Extensions: [pdf_architect_2_conv@pdfarchitect.org] - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension
FF Extension: PDF Architect 2 Creator - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension [2015-02-26]
FF HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]

Chrome: 
=======
CHR Profile: C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-05-08]
CHR Extension: (Google Docs) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-05-08]
CHR Extension: (Google Drive) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-05-08]
CHR Extension: (YouTube) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-05-08]
CHR Extension: (Google Search) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-05-08]
CHR Extension: (Google Sheets) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-05-08]
CHR Extension: (Bookmark Manager) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-08]
CHR Extension: (iilcekgoelpgecpjnnoikhbleipnjdhf) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\iilcekgoelpgecpjnnoikhbleipnjdhf [2015-05-11]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-08]
CHR Extension: (ljppcglljemjablfhgjdhndlpallobpl) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljppcglljemjablfhgjdhndlpallobpl [2015-05-11]
CHR Extension: (Google Wallet) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR Extension: (pioclpoplcdbaefihamjohnefbikjilc) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2015-05-10]
CHR Extension: (Gmail) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-08]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [205616 2015-04-21] (Avira Operations GmbH & Co. KG)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [237864 2015-03-21] (EasyAntiCheat Ltd)
R2 ftb; c:\windows\ftb.exe [417792 2015-05-05] () [File not signed]
R2 GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [29696 2011-05-26] (Acer Incorporated) [File not signed]
S2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2015-02-16] (Hi-Rez Studios) [File not signed]
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-03-30] (LogMeIn, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
R2 mftb; c:\windows\mftb.exe [408576 2015-05-05] () [File not signed]
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2015-01-30] (Microsoft Corporation)
R2 MSMQ; C:\Windows\system32\mqsvc.exe [9216 2009-07-14] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366512 2015-01-30] (Microsoft Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5128944 2013-11-19] (INCA Internet Co., Ltd.) [File not signed]
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256832 2011-04-24] (NTI Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910640 2015-03-02] (Electronic Arts)
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-10-10] (pdfforge GmbH)
R2 PDF Architect 2 Creator; C:\Program Files (x86)\PDF Architect 2\creator-ws.exe [738856 2014-10-10] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-10-10] (pdfforge GmbH)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-10-11] ()
S2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
S3 Survarium-Steam Update Service; C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium_service.exe [76408 2015-04-03] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2012-04-25] (AVM Berlin)
R3 fwlanusb5; C:\Windows\System32\DRIVERS\fwlanusb5.sys [982784 2012-08-21] (AVM GmbH)
S3 GameKB; C:\Windows\System32\drivers\GameKB.sys [27648 2012-05-11] () [File not signed]
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [274696 2014-11-15] (Microsoft Corporation)
R3 MQAC; C:\Windows\System32\drivers\mqac.sys [189440 2009-07-14] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124560 2014-11-15] (Microsoft Corporation)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-05-17] (Anchorfree Inc.)
S3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2014-07-02] (SplitmediaLabs Limited)
S3 BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 hxsyol; \??\C:\AeriaGames\AuraKingdom\avital\hxsy64.sys [X]
S1 qrnfd_1_10_0_13; system32\drivers\qrnfd_1_10_0_13.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-11 23:00 - 2015-05-11 23:00 - 00000000 ____D () C:\Users\Dima\AppData\Local\Eclipse
2015-05-11 22:03 - 2015-05-11 23:49 - 00000000 ____D () C:\FRST
2015-05-11 20:59 - 2015-05-11 20:59 - 00000000 ____D () C:\Users\Dima\AppData\Local\My Games
2015-05-10 19:33 - 2015-05-10 19:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-05-10 19:33 - 2015-05-10 19:33 - 00000000 ____D () C:\ProgramData\Avira
2015-05-10 19:33 - 2015-05-10 19:33 - 00000000 ____D () C:\Program Files (x86)\Avira
2015-05-10 18:44 - 2015-05-10 18:44 - 00000000 ____D () C:\Users\Dima\AppData\Local\Origin
2015-05-10 18:05 - 2015-05-10 18:05 - 00001117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-05-10 18:05 - 2015-05-10 18:05 - 00001105 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-05-10 18:05 - 2015-05-10 18:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-05-10 16:15 - 2015-05-10 16:15 - 00000000 ____D () C:\Users\Dima\AppData\Local\EgisTec IPS
2015-05-10 16:14 - 2015-05-10 16:14 - 00066432 _____ () C:\Users\Dima\AppData\Local\GDIPFONTCACHEV1.DAT
2015-05-10 16:13 - 2015-05-11 23:46 - 00000000 ____D () C:\Users\Dima\AppData\Local\LogMeIn Hamachi
2015-05-10 16:13 - 2015-05-10 16:13 - 00000000 ____D () C:\Users\Dima\AppData\Local\LogMeIn
2015-05-10 16:12 - 2015-05-10 16:12 - 00000000 ____D () C:\Users\Dima\AppData\Local\VirtualStore
2015-05-10 16:07 - 2015-05-11 23:41 - 00000000 ____D () C:\AdwCleaner
2015-05-08 20:43 - 2015-05-08 20:43 - 00000000 ____D () C:\Users\Dima\AppData\Local\openvr
2015-05-08 20:42 - 2015-05-08 20:42 - 00000000 ____D () C:\Users\Dima\AppData\Local\Steam
2015-05-08 20:00 - 2015-05-11 23:43 - 00001008 _____ () C:\Windows\Tasks\vj57Vb6Rn1O3ezZ75nEr.job
2015-05-08 20:00 - 2015-05-11 23:43 - 00000990 _____ () C:\Windows\Tasks\IT7Lg6DU6w1.job
2015-05-08 20:00 - 2015-05-08 20:00 - 00004032 _____ () C:\Windows\System32\Tasks\vj57Vb6Rn1O3ezZ75nEr
2015-05-08 20:00 - 2015-05-08 20:00 - 00004014 _____ () C:\Windows\System32\Tasks\IT7Lg6DU6w1
2015-05-08 19:54 - 2015-05-08 19:54 - 00613255 _____ (CMI Limited) C:\Users\Dima\AppData\Local\nsnE864.tmp
2015-05-08 19:51 - 2015-05-08 19:50 - 00628688 _____ (CMI Limited) C:\Users\Dima\AppData\Local\nsb44A6.tmp
2015-05-08 19:44 - 2015-05-08 19:44 - 00000000 ____D () C:\Users\Dima\AppData\Local\Macromedia
2015-05-08 19:43 - 2015-05-09 22:34 - 00000000 ____D () C:\Users\Dima\AppData\Local\Mozilla
2015-05-08 18:41 - 2015-05-08 18:41 - 00000000 ____D () C:\Users\Dima\AppData\Local\ATI
2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieUserList
2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieSiteList
2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieBrowserModeList
2015-05-08 14:49 - 2015-05-08 14:49 - 00000000 ____D () C:\ProgramData\Kikblaster
2015-05-08 14:38 - 2015-05-11 23:43 - 00000990 _____ () C:\Windows\Tasks\WfqE0YhY0IU.job
2015-05-08 14:38 - 2015-05-11 23:43 - 00000982 _____ () C:\Windows\Tasks\DXbbq3U.job
2015-05-08 14:38 - 2015-05-08 14:38 - 00004014 _____ () C:\Windows\System32\Tasks\WfqE0YhY0IU
2015-05-08 14:38 - 2015-05-08 14:38 - 00004006 _____ () C:\Windows\System32\Tasks\DXbbq3U
2015-05-08 14:33 - 2015-05-08 19:54 - 00000000 ____D () C:\Program Files (x86)\Edu App
2015-05-08 14:20 - 2015-05-08 14:52 - 00000000 ____D () C:\Users\Dima\AppData\Local\00000000-1431094823-0000-0000-D43D7EBF2FB4
2015-05-08 14:16 - 2015-05-08 14:16 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webTinstMKTN84_01009.Wdf
2015-05-05 21:45 - 2015-05-08 14:45 - 00000000 ___HD () C:\ProgramData\ftb
2015-05-05 21:13 - 2015-05-08 21:13 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-05-05 21:12 - 2015-05-05 21:12 - 00631296 _____ () C:\Windows\ftb.dat
2015-05-05 21:12 - 2015-05-05 21:12 - 00417792 _____ () C:\Windows\ftb.exe
2015-05-05 21:12 - 2015-05-05 21:12 - 00408576 _____ () C:\Windows\mftb.exe
2015-05-04 20:34 - 2015-05-04 20:34 - 00059505 _____ () C:\Users\Dima\Documents\ts3_clientui-win64-1407159763-2015-05-04 20_34_27.843240.dmp
2015-04-26 16:02 - 2015-04-26 16:02 - 00000000 ____D () C:\Users\Dima\Documents\DFO
2015-04-25 20:20 - 2015-04-25 20:20 - 00001734 _____ () C:\Users\Public\Desktop\Dungeon Fighter Online.lnk
2015-04-25 20:20 - 2015-04-25 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\neople
2015-04-25 20:20 - 2015-04-25 20:20 - 00000000 ____D () C:\Neople
2015-04-25 15:57 - 2015-04-26 13:15 - 00000000 ____D () C:\Users\Dima\Documents\DragonNest
2015-04-24 12:20 - 2015-05-10 18:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-20 16:05 - 2015-04-20 16:05 - 01579520 _____ () C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1.exe
2015-04-20 16:05 - 2015-04-20 16:05 - 01579520 _____ () C:\Users\Dima\AppData\Roaming\DXbbq3U.exe
2015-04-20 16:05 - 2015-04-20 16:05 - 01246720 _____ () C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe
2015-04-20 16:05 - 2015-04-20 16:05 - 01246720 _____ () C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe
2015-04-20 13:37 - 2015-04-20 13:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FRITZ!WLAN
2015-04-20 13:37 - 2015-04-20 13:37 - 00000000 ____D () C:\Program Files (x86)\avmwlanstick
2015-04-20 13:36 - 2015-04-20 13:36 - 00000000 ____D () C:\Users\Dima\AVM_Driver
2015-04-20 13:36 - 2012-04-25 01:00 - 00014120 _____ (AVM Berlin) C:\Windows\system32\Drivers\avmeject.sys
2015-04-20 00:51 - 2015-04-20 00:51 - 00002956 _____ () C:\Windows\avmacc1.log
2015-04-20 00:51 - 2012-07-12 02:00 - 00480632 _____ (AVM Berlin) C:\Windows\instwcli.dex
2015-04-20 00:45 - 2015-04-20 00:45 - 00003216 _____ () C:\Windows\System32\Tasks\{35EE529B-2794-4708-8B79-567E126A4A7F}
2015-04-20 00:05 - 2015-04-20 13:36 - 00001479 _____ () C:\Windows\avmsetup.log
2015-04-20 00:05 - 2015-04-20 13:36 - 00000490 _____ () C:\Windows\avmadd32.log
2015-04-20 00:05 - 2015-04-20 00:54 - 00197887 _____ () C:\Windows\avmacc.log
2015-04-20 00:05 - 2015-04-20 00:44 - 00000000 ____D () C:\Program Files (x86)\AVM_update
2015-04-19 20:43 - 2015-04-19 20:43 - 00001906 _____ () C:\Users\Dima\Desktop\EliteDekaron.lnk
2015-04-19 20:43 - 2015-04-19 20:43 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Elite Dekaron
2015-04-19 20:40 - 2015-04-19 21:03 - 00000000 ____D () C:\Program Files (x86)\Elite Dekaron
2015-04-19 20:40 - 2015-04-19 20:40 - 00000000 ____D () C:\Windows\Elite Dekaron
2015-04-19 14:20 - 2015-04-19 14:20 - 00005872 _____ () C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1
2015-04-19 14:20 - 2015-04-19 14:20 - 00005872 _____ () C:\Users\Dima\AppData\Roaming\DXbbq3U
2015-04-16 16:36 - 2015-04-16 16:43 - 00000000 ___SD () C:\Windows\system32\GWX
2015-04-16 16:36 - 2015-04-16 16:36 - 00000000 ___SD () C:\Windows\SysWOW64\GWX
2015-04-15 21:14 - 2015-04-15 21:14 - 18178736 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2015-04-14 20:39 - 2015-03-25 05:24 - 03298816 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 02553856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-14 20:39 - 2015-03-25 05:23 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-14 20:39 - 2015-03-25 05:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-14 20:39 - 2015-03-25 05:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-14 20:39 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-04-14 20:39 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-04-14 20:39 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-04-14 20:39 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-04-14 20:39 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-04-14 20:39 - 2015-03-23 05:25 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-14 20:39 - 2015-03-23 05:25 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-14 20:39 - 2015-03-23 05:24 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-14 20:39 - 2015-03-23 05:24 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-14 20:39 - 2015-03-23 05:24 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-14 20:39 - 2015-03-23 05:24 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-04-14 20:39 - 2015-03-23 05:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-14 20:39 - 2015-03-23 05:17 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-14 20:39 - 2015-03-17 07:22 - 05557696 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-14 20:39 - 2015-03-17 07:22 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-04-14 20:39 - 2015-03-17 07:22 - 00095672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-04-14 20:39 - 2015-03-17 07:19 - 01727904 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-14 20:39 - 2015-03-17 07:17 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-04-14 20:39 - 2015-03-17 07:17 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-04-14 20:39 - 2015-03-17 07:16 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-04-14 20:39 - 2015-03-17 07:16 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-04-14 20:39 - 2015-03-17 07:15 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-04-14 20:39 - 2015-03-17 07:15 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-04-14 20:39 - 2015-03-17 07:15 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-04-14 20:39 - 2015-03-17 07:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-04-14 20:39 - 2015-03-17 07:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-04-14 20:39 - 2015-03-17 06:59 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-04-14 20:39 - 2015-03-17 06:56 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-04-14 20:39 - 2015-03-17 06:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-04-14 20:39 - 2015-03-17 06:56 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-04-14 20:39 - 2015-03-10 05:25 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-04-14 20:39 - 2015-03-10 05:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-04-14 20:39 - 2015-03-10 05:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-04-14 20:39 - 2015-03-10 05:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-04-14 20:39 - 2015-03-05 07:12 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-04-14 20:39 - 2015-03-05 06:05 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-04-14 20:38 - 2015-03-17 07:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-04-14 20:38 - 2015-03-17 07:16 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-04-14 20:38 - 2015-03-17 07:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-04-14 20:38 - 2015-03-17 07:13 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-04-14 20:38 - 2015-03-17 07:13 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-04-14 20:38 - 2015-03-17 06:57 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-04-14 20:38 - 2015-03-17 06:56 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-04-14 20:38 - 2015-03-17 06:56 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-04-14 20:38 - 2015-03-17 06:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-04-14 20:38 - 2015-03-17 06:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-04-14 20:38 - 2015-03-17 06:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-04-14 20:38 - 2015-03-17 06:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 05:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-04-14 20:38 - 2015-03-17 05:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-04-14 20:38 - 2015-03-17 05:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 05:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-04-14 20:38 - 2015-03-04 06:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2015-04-14 20:38 - 2015-03-04 06:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-14 20:38 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2015-04-14 20:38 - 2015-02-25 05:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-14 18:28 - 2015-04-14 18:28 - 00004387 _____ () C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU
2015-04-14 18:28 - 2015-04-14 18:28 - 00004387 _____ () C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-11 23:49 - 2013-08-08 20:19 - 01802094 _____ () C:\Windows\WindowsUpdate.log
2015-05-11 23:48 - 2013-11-06 17:55 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Raptr
2015-05-11 23:44 - 2013-08-15 21:16 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-11 23:43 - 2013-08-17 15:43 - 00000000 ____D () C:\Program Files (x86)\Origin
2015-05-11 23:42 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-05-11 23:42 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-11 23:42 - 2009-07-14 06:51 - 00121033 _____ () C:\Windows\setupact.log
2015-05-11 23:33 - 2014-01-07 19:34 - 01832960 ___SH () C:\Users\Dima\Desktop\Thumbs.db
2015-05-11 23:14 - 2013-08-15 14:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-11 22:59 - 2015-04-10 17:41 - 00000000 ____D () C:\Users\Dima\Desktop\eclipse
2015-05-11 22:52 - 2013-08-15 21:16 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-11 22:28 - 2013-09-21 18:06 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\TS3Client
2015-05-11 20:59 - 2013-08-08 21:08 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-05-11 13:55 - 2009-07-14 06:45 - 00028928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-11 13:55 - 2009-07-14 06:45 - 00028928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-10 19:33 - 2013-10-04 17:11 - 00000000 ____D () C:\ProgramData\Package Cache
2015-05-10 18:49 - 2013-08-09 06:11 - 00699416 _____ () C:\Windows\system32\perfh007.dat
2015-05-10 18:49 - 2013-08-09 06:11 - 00149556 _____ () C:\Windows\system32\perfc007.dat
2015-05-10 18:49 - 2009-07-14 07:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-10 18:44 - 2013-08-17 15:43 - 00000000 ____D () C:\ProgramData\Origin
2015-05-10 18:40 - 2010-11-21 05:47 - 00399402 _____ () C:\Windows\PFRO.log
2015-05-10 18:19 - 2014-11-14 00:10 - 00000000 ____D () C:\Users\Dima\Desktop\lqobqwkv.default
2015-05-10 17:35 - 2013-08-17 15:43 - 00000481 _____ () C:\Windows\wininit.ini
2015-05-10 16:42 - 2014-10-05 15:02 - 00000000 ____D () C:\Users\Dima\AppData\Local\Adobe
2015-05-10 16:15 - 2013-12-20 13:37 - 00000000 ____D () C:\Users\Dima\AppData\Local\Akamai
2015-05-10 16:12 - 2013-08-08 15:36 - 00001419 _____ () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-05-10 16:10 - 2014-11-26 23:57 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WorldofTanks
2015-05-08 21:41 - 2013-12-30 15:03 - 00000000 ____D () C:\Program Files (x86)\7-Zip
2015-05-08 21:39 - 2013-12-18 15:08 - 00000000 ____D () C:\Program Files (x86)\ACASystems
2015-05-08 18:40 - 2013-11-02 02:16 - 00000000 ____D () C:\Users\Dima\Desktop\Neuer Ordner
2015-05-08 18:40 - 2013-08-15 21:16 - 00000000 ____D () C:\Users\Dima\AppData\Local\Google
2015-05-08 14:52 - 2014-11-30 22:57 - 00000000 ____D () C:\Users\Dima\AppData\Local\gegl-0.2
2015-05-08 14:52 - 2013-12-14 00:39 - 00000000 ____D () C:\Users\Dima\AppData\Local\Battle.net
2015-05-08 14:16 - 2014-02-09 01:27 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2015-05-08 13:16 - 2013-08-15 15:52 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Skype
2015-05-02 22:30 - 2014-11-23 16:19 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\.technic
2015-05-02 22:30 - 2014-08-25 02:48 - 04697768 _____ () C:\Users\Dima\Desktop\TechnicLauncher.exe
2015-05-02 22:28 - 2014-08-09 17:35 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\.minecraft
2015-04-27 16:21 - 2015-02-28 15:34 - 00000000 ____D () C:\Users\Dima\Desktop\Bewerbung
2015-04-20 13:37 - 2014-02-12 19:55 - 00011424 _____ () C:\Windows\avmfwlanci.log
2015-04-20 13:37 - 2014-02-12 19:55 - 00011167 _____ () C:\Windows\AVMInstall.Log
2015-04-20 13:36 - 2014-02-12 19:54 - 00000000 ____D () C:\Windows\AVM_Driver
2015-04-20 13:36 - 2013-08-08 15:34 - 00000000 ____D () C:\Users\Dima
2015-04-20 00:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-04-18 17:38 - 2013-09-13 14:13 - 00000000 ____D () C:\Program Files (x86)\Raptr
2015-04-18 12:26 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat
2015-04-16 16:36 - 2014-12-22 19:12 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-16 16:36 - 2014-05-01 14:38 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-16 16:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-04-16 12:44 - 2014-02-26 15:58 - 00002022 _____ () C:\Users\Dima\monsterhunter.txt
2015-04-15 21:15 - 2013-08-15 14:45 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-04-15 21:15 - 2013-08-15 14:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-04-15 21:15 - 2011-07-25 05:19 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-15 12:54 - 2013-09-09 16:14 - 01593956 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-04-15 12:52 - 2014-10-06 19:31 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-04-15 12:52 - 2011-07-25 05:01 - 00000000 ____D () C:\ProgramData\Skype
2015-04-15 12:51 - 2013-11-11 13:25 - 00000000 ____D () C:\Windows\system32\MRT
2015-04-15 12:45 - 2013-11-11 13:25 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

==================== Files in the root of some directories =======

2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\Dima\AppData\Roaming\DXbbq3U
2015-04-20 16:05 - 2015-04-20 16:05 - 1579520 _____ () C:\Users\Dima\AppData\Roaming\DXbbq3U.exe
2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1
2015-04-20 16:05 - 2015-04-20 16:05 - 1579520 _____ () C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1.exe
2013-11-09 21:45 - 2013-11-09 21:45 - 0000004 _____ () C:\Users\Dima\AppData\Roaming\steam_md4.dat
2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr
2015-04-20 16:05 - 2015-04-20 16:05 - 1246720 _____ () C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe
2014-11-27 23:59 - 2014-11-29 01:59 - 0000068 _____ () C:\Users\Dima\AppData\Roaming\WB.CFG
2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU
2015-04-20 16:05 - 2015-04-20 16:05 - 1246720 _____ () C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe
2015-05-08 19:51 - 2015-05-08 19:50 - 0628688 _____ (CMI Limited) C:\Users\Dima\AppData\Local\nsb44A6.tmp
2015-05-08 19:54 - 2015-05-08 19:54 - 0613255 _____ (CMI Limited) C:\Users\Dima\AppData\Local\nsnE864.tmp
2013-08-08 21:05 - 2013-08-08 21:05 - 0000654 _____ () C:\ProgramData\ArcadeDeluxe5.log

Some content of TEMP:
====================
C:\Users\Dima\AppData\Local\Temp\Quarantine.exe
C:\Users\Dima\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2011-07-25 04:31

==================== End Of Log ============================

--- --- ---

kriegnes · 11.05.2015, 22:53

Additions.txt

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-05-2015
Ran by Dima at 2015-05-11 23:50:42
Running from C:\Users\Dima\Desktop\Downloads
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-221738678-620704744-704572411-500 - Administrator - Disabled)
Dima (S-1-5-21-221738678-620704744-704572411-1000 - Administrator - Enabled) => C:\Users\Dima
Gast (S-1-5-21-221738678-620704744-704572411-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-221738678-620704744-704572411-1002 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Disabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
ACA Screen Recorder 5.30 (HKLM-x32\...\ACAScreenRecorder_EN_is1) (Version: 5.30 - ACA Systems)
Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.99 - NTI Corporation)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3502 - Acer Incorporated)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3502 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0517.2011 - Acer Incorporated)
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Reader X (10.1.13) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.13 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.)
Agarest: Generations of War (HKLM-x32\...\Steam App 237890) (Version:  - Ghostlight)
Age of Empires II: HD Edition (HKLM-x32\...\Steam App 221380) (Version:  - Hidden Path Entertainment, Ensemble Studios)
Akamai NetSession Interface (HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Akamai) (Version:  - Akamai Technologies, Inc)
AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.36 - Atheros Communications Inc.)
Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team)
Avidemux 2.6 - 64bits (HKLM-x32\...\Avidemux 2.6 - 64bits (64-bit)) (Version: 2.6.8.9046 - )
Avira (HKLM-x32\...\{2d044ded-ae1b-40d3-8d18-97cfda75bd69}) (Version: 1.1.37.14600 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.37.14600 - Avira Operations GmbH & Co. KG) Hidden
AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version: 1.2.0.0 - AVM Berlin)
Backup Manager V3 (x32 Version: 3.0.0.99 - NTI Corporation) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.3.2.15221 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.5.1 - EA Digital Illusions CE AB)
Borderlands 2 (HKLM-x32\...\Steam App 49520) (Version:  - Gearbox Software)
Call of Duty 4: Modern Warfare (HKLM-x32\...\Steam App 7940) (Version:  - Infinity Ward)
Call of Duty: Black Ops II - Multiplayer (HKLM-x32\...\Steam App 202990) (Version:  - )
Call of Duty: Black Ops II - Zombies (HKLM-x32\...\Steam App 212910) (Version:  - )
Call of Duty: Black Ops II (HKLM-x32\...\Steam App 202970) (Version:  - Treyarch)
Call of Duty: Ghosts - Multiplayer (HKLM-x32\...\Steam App 209170) (Version:  - )
Call of Duty: Ghosts (HKLM-x32\...\Steam App 209160) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare 3 - Multiplayer (HKLM-x32\...\Steam App 42690) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare 3 (HKLM-x32\...\Steam App 42680) (Version:  - Infinity Ward)
Castle Crashers (HKLM-x32\...\Steam App 204360) (Version:  - The Behemoth)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
clear.fi Client (HKLM-x32\...\{43AAE145-83CF-4C96-9A5E-756CEFCE879F}) (Version: 1.00.3500 - Acer Incorporated)
Combined Community Codec Pack 2013-11-27 (HKLM-x32\...\Combined Community Codec Pack_is1) (Version: 2013.11.27.0 - CCCP Project)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version:  - Valve)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Darksiders II (HKLM-x32\...\Steam App 50650) (Version:  - Vigil Games)
DFO (HKLM-x32\...\{C1E5C0FB-527E-42C6-BCA0-0A37A6124AE4}) (Version: 1.01.0000 - Neople)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.7.0.64 - DivX, LLC)
Dota 2 (HKLM-x32\...\Steam App 570) (Version:  - Valve)
Dragon Nest Europe (HKLM-x32\...\Steam App 258700) (Version:  - Eyedentity Games)
Dungeon Defenders (HKLM-x32\...\Steam App 65800) (Version:  - Trendy Entertainment)
Dxtory version 2.0.128 (HKLM-x32\...\Dxtory2.0_is1) (Version: 2.0.128 - ExKode Co. Ltd.)
Elite Dekaron (HKLM-x32\...\Elite Dekaron1.0) (Version: 1.0 - EliteKingdoms)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - )
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Free YouTube to MP3 Converter version 3.12.20.1230 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.20.1230 - DVDVideoSoft Ltd.)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Gameforge Live 2.0.5 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.5 - Gameforge)
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Facepunch Studios)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Glyph (HKLM-x32\...\Glyph) (Version:  - Trion Worlds, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.135 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Gumboy Tournament (HKLM-x32\...\Steam App 11230) (Version:  - CINEMAX, s.r.o.)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.2.1004 - Intel Corporation)
Java 7 Update 75 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417075FF}) (Version: 7.0.750 - Oracle)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Java SE Development Kit 7 Update 75 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170750}) (Version: 1.7.0.750 - Oracle)
Java SE Development Kit 8 Update 25 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180250}) (Version: 8.0.250.18 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Loadout (HKLM-x32\...\Steam App 208090) (Version:  - Edge of Reality)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.328 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.328 - LogMeIn, Inc.) Hidden
LOLReplay (HKLM-x32\...\LOLReplay) (Version: 0.8.9.11 - www.leaguereplays.com)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.7.205.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Might & Magic: Duel of Champions (HKLM-x32\...\Steam App 256410) (Version:  - Ubisoft Quebec)
MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)
Mozilla Firefox 37.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.2 (x86 de)) (Version: 37.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.2 - Mozilla)
MyWinLocker (Version: 4.0.14.25 - Egis Technology Inc.) Hidden
MyWinLocker 4 (x32 Version: 4.0.14.25 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.15 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 4.0.14.15 - Egis Technology Inc.) Hidden
Neverwinter (HKLM-x32\...\Steam App 109600) (Version:  - Cryptic Studios)
newsXpresso (HKLM-x32\...\InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}) (Version: 1.0.0.40 - esobi Inc.)
newsXpresso (x32 Version: 1.0.0.40 - esobi Inc.) Hidden
Nosgoth (HKLM-x32\...\Steam App 200110) (Version: 150120.100528 - Square Enix Ltd)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)
NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.8942 - NTI Corporation)
NTI Media Maker 9 (x32 Version: 9.0.2.8942 - NTI Corporation) Hidden
NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.3.1.4482 - Electronic Arts, Inc.)
paint.net (HKLM\...\{141BA46D-2D1F-4DA6-9448-B847334585C0}) (Version: 4.0.4 - dotPDN LLC)
PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.51.17865 - pdfforge GmbH)
PDF Architect 2 Create Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden
PDF Architect 2 Edit Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden
PDF Architect 2 View Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.0.2 - pdfforge)
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Pokemon Online 2.4.1 (HKLM-x32\...\{2C08D7E7-9EE1-4A08-AFE0-745F02DCD6A4}_is1) (Version:  - Dreambelievers)
Pokémon Trading Card Game Online (HKLM-x32\...\{B0952280-3DF0-4AA9-9599-092D5E8D36AD}) (Version: 2.24.1 - The Pokémon Company International)
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Ralink RT2860 Wireless LAN Card (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 1.5.6.0 - Ralink)
Raptr (HKLM-x32\...\Raptr) (Version:  - )
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6329 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30123 - Realtek Semiconductor Corp.)
Serious Sam 3: BFE (HKLM-x32\...\Steam App 41070) (Version:  - Croteam)
Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version:  - 2K Games, Inc.)
SIW 2013 Home Edition (HKLM-x32\...\{AB67580-257C-45FF-B8F4-C8C30682091A}_is1) (Version: 2013.05.14 - Topala Software Solutions)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 2.0.2574.0 - Hi-Rez Studios)
Source SDK Base 2006 (HKLM-x32\...\Steam App 215) (Version:  - Valve)
SpellForce (HKLM-x32\...\SpellForce) (Version:  - )
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Survarium (HKLM-x32\...\Steam App 355840) (Version:  - Vostok Games)
Survarium-Steam (HKLM-x32\...\{A3D9343D-77CD-4bf4-A47A-F87B3BE985B4}_is1) (Version: 0.27d - )
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
System Requirements Lab CYRI (HKLM-x32\...\{E362724E-9320-4946-AF34-874E7B6B2927}) (Version: 6.0.7.0 - Husdawg, LLC)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.12 - TeamSpeak Systems GmbH)
TIPP10 Version 2.1.0 (HKLM-x32\...\TIPP10_is1) (Version:  - (c) 2006-2011, Tom Thielicke IT Solutions)
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel)
Unity (HKLM-x32\...\Unity) (Version: 4.6.1f1 - Unity Technologies ApS)
Unity Web Player (HKU\S-1-5-21-221738678-620704744-704572411-1000\...\UnityWebPlayer) (Version: 4.6.1f1 - Unity Technologies ApS)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Vindictus EU (HKLM-x32\...\Vindictus EU) (Version:  - )
VLC media player 2.1.1 (HKLM\...\VLC media player) (Version: 2.1.1 - VideoLAN)
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3503 - Acer Incorporated)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
WinRAR 5.00 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)
YGOPro DevPro Version 1.9.7 r2 (HKLM-x32\...\{3CF2634F-3F38-4DD3-9201-CB2FE6B5FF23}_is1) (Version: 1.9.7 r2 - YGOPro DevPro Online)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

01-05-2015 14:43:01 Windows Update
05-05-2015 16:18:48 Windows Update
08-05-2015 20:00:02 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2014-09-21 15:27 - 00000860 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
::1 localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0A4748C0-2366-4860-8A2A-22C28DD4F8FB} - System32\Tasks\DXbbq3U => C:\Users\Dima\AppData\Roaming\DXbbq3U.exe [2015-04-20] () <==== ATTENTION
Task: {15731A0E-D960-4E94-9E60-DACD297E3193} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {1860A38F-8939-478A-BF5C-F565A480142F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {1D4EC24B-2C6F-4F04-8F3E-6AA90BAED5D2} - System32\Tasks\{A10EA19B-8B09-454D-B360-CA92A1D17DBD} => pcalua.exe -a C:\Users\Dima\Desktop\InstallIW4M(1).exe -d C:\Users\Dima\Desktop
Task: {276BF61D-668E-4313-BA37-702F352555A9} - System32\Tasks\Adobe Reader Speed Launcher => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2014-12-03] (Adobe Systems Incorporated)
Task: {2B46497E-052E-4882-879A-2CED38AE75F5} - System32\Tasks\{6B05723E-8DB6-495D-A0DA-ECA4FC2E26D7} => C:\Program Files (x86)\WeGame\wegame.exe
Task: {2D0DD0EF-6F02-4AE5-81DA-8F7F44E9D915} - System32\Tasks\Games\UpdateCheck_S-1-5-21-221738678-620704744-704572411-1000
Task: {30516B1D-88D3-4A14-AD49-963F8AA1FCEE} - System32\Tasks\vj57Vb6Rn1O3ezZ75nEr => C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe [2015-04-20] () <==== ATTENTION
Task: {36C3C2EA-97D0-4CA5-BAA5-C0D3544BE0C8} - System32\Tasks\WfqE0YhY0IU => C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe [2015-04-20] () <==== ATTENTION
Task: {54E1645E-EDBD-4280-B2FF-13D3BBEC2047} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-07] (Google Inc.)
Task: {5975092F-1EFE-4D6C-A337-025C0E67059F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)
Task: {5B6F25FF-1AB6-4306-AF5F-150B752505F5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-07] (Google Inc.)
Task: {691D2C19-7551-41BB-BDBA-38CC87FF53F4} - System32\Tasks\{3D950745-404D-482F-B2F2-F7290B610680} => pcalua.exe -a C:\Users\Dima\AppData\Roaming\webssearches\UninstallManager.exe -c  -ptid=irs <==== ATTENTION
Task: {ADDA105F-5269-41EB-BE7A-FADC87447563} - System32\Tasks\{153E695E-4162-4A7B-8004-BCBAF85CE618} => pcalua.exe -a C:\Users\Dima\AVM_Driver\FWLAN\setup.exe -d C:\Users\Dima\AVM_Driver\FWLAN
Task: {B0E56CFC-54EA-49E5-AEE6-544EE780094B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15] (Adobe Systems Incorporated)
Task: {C4630A3F-B5F1-4159-9F2B-8EF55530D99B} - System32\Tasks\Adobe ARM => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {C618B53C-0F59-4601-8B52-1D81C275086B} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)
Task: {C7F562CC-8836-44FC-8085-91BD492874BE} - System32\Tasks\{35EE529B-2794-4708-8B79-567E126A4A7F} => pcalua.exe -a C:\Users\Dima\Desktop\Downloads\avm_fritz!wlan_usb_stick_x64_build_100906.exe -d C:\Users\Dima\Desktop\Downloads
Task: {D021483F-10CB-41B4-8816-109CDA214F59} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {D216A597-8DFB-49AE-BB0C-69D9574172C8} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {D390B225-5BC3-4867-B035-FE45B82F2599} - System32\Tasks\IT7Lg6DU6w1 => C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1.exe [2015-04-20] () <==== ATTENTION
Task: {D9E5BB12-DEEF-4673-A22C-7A60AF737292} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {E66F9E32-E05D-43A5-8A61-1251E464ABF9} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DXbbq3U.job => C:\Users\Dima\AppData\Roaming\DXbbq3U.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\IT7Lg6DU6w1.job => C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1.exe <==== ATTENTION
Task: C:\Windows\Tasks\vj57Vb6Rn1O3ezZ75nEr.job => C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe <==== ATTENTION
Task: C:\Windows\Tasks\WfqE0YhY0IU.job => C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) ==============

2015-05-05 21:12 - 2015-05-05 21:12 - 00417792 _____ () c:\windows\ftb.exe
2015-05-05 21:12 - 2015-05-05 21:12 - 00408576 _____ () c:\windows\mftb.exe
2014-01-10 07:26 - 2014-01-10 07:26 - 01861968 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
2013-09-02 13:14 - 2014-10-11 21:02 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2011-04-24 03:29 - 2011-04-24 03:29 - 00465640 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll
2014-11-09 03:42 - 2014-05-13 13:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2014-11-09 03:42 - 2014-05-13 13:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2014-11-09 03:42 - 2014-05-13 13:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2014-01-10 07:28 - 2014-01-10 07:28 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2011-04-24 03:29 - 2011-04-24 03:29 - 01081664 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll
2011-04-24 03:29 - 2011-04-24 03:29 - 00125760 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll
2015-04-15 21:14 - 2015-04-15 21:14 - 16863920 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00087040 _____ () C:\Program Files (x86)\Raptr\_ctypes.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00043008 _____ () C:\Program Files (x86)\Raptr\_socket.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00805376 _____ () C:\Program Files (x86)\Raptr\_ssl.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 05812736 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtGui.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00067584 _____ () C:\Program Files (x86)\Raptr\sip.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 01662464 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtCore.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00494592 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtNetwork.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00096256 _____ () C:\Program Files (x86)\Raptr\win32api.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00110592 _____ () C:\Program Files (x86)\Raptr\pywintypes26.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00010240 _____ () C:\Program Files (x86)\Raptr\select.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00356864 _____ () C:\Program Files (x86)\Raptr\_hashlib.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00036352 _____ () C:\Program Files (x86)\Raptr\win32process.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00111104 _____ () C:\Program Files (x86)\Raptr\win32file.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00044544 _____ () C:\Program Files (x86)\Raptr\_sqlite3.pyd
2011-02-15 20:17 - 2011-02-15 20:17 - 00417501 _____ () C:\Program Files (x86)\Raptr\sqlite3.dll
2010-11-23 00:57 - 2010-11-23 00:57 - 00167936 _____ () C:\Program Files (x86)\Raptr\win32gui.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00313856 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtWebKit.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00127488 _____ () C:\Program Files (x86)\Raptr\pyexpat.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00009216 _____ () C:\Program Files (x86)\Raptr\winsound.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00354304 _____ () C:\Program Files (x86)\Raptr\pythoncom26.dll
2010-11-23 00:57 - 2010-11-23 00:57 - 00016384 _____ () C:\Program Files (x86)\Raptr\win32trace.pyd
2014-08-14 02:37 - 2014-08-14 02:37 - 00113171 _____ () C:\Program Files (x86)\Raptr\libvlc.dll
2014-08-14 02:37 - 2014-08-14 02:37 - 02396691 _____ () C:\Program Files (x86)\Raptr\libvlccore.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00583680 _____ () C:\Program Files (x86)\Raptr\unicodedata.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00263168 _____ () C:\Program Files (x86)\Raptr\win32com.shell.shell.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00324608 _____ () C:\Program Files (x86)\Raptr\PIL._imaging.pyd
2013-11-21 02:05 - 2013-11-21 02:05 - 00256000 _____ () C:\Program Files (x86)\Raptr\amd_ags.dll
2012-02-06 22:28 - 2012-02-06 22:28 - 00010752 _____ () C:\Program Files (x86)\Raptr\Crypto.Random.OSRNG.winrandom.pyd
2012-02-06 22:28 - 2012-02-06 22:28 - 00011264 _____ () C:\Program Files (x86)\Raptr\Crypto.Util._counter.pyd
2012-02-06 22:28 - 2012-02-06 22:28 - 00031744 _____ () C:\Program Files (x86)\Raptr\Crypto.Cipher.AES.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00141312 _____ () C:\Program Files (x86)\Raptr\gobject._gobject.pyd
2014-06-18 02:56 - 2014-06-18 02:56 - 02717595 _____ () C:\Program Files (x86)\Raptr\heliotrope._purple.pyd
2011-02-15 20:17 - 2011-02-15 20:17 - 01213633 _____ () C:\Program Files (x86)\Raptr\libxml2-2.dll
2010-11-23 01:06 - 2010-11-23 01:06 - 00055808 _____ () C:\Program Files (x86)\Raptr\zlib1.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 00495680 _____ () C:\Program Files (x86)\Raptr\plugins\libaim.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 01183699 _____ () C:\Program Files (x86)\Raptr\liboscar.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 00483306 _____ () C:\Program Files (x86)\Raptr\plugins\libicq.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00655356 _____ () C:\Program Files (x86)\Raptr\plugins\libirc.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 01306387 _____ () C:\Program Files (x86)\Raptr\plugins\libmsn.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 00565461 _____ () C:\Program Files (x86)\Raptr\plugins\libxmpp.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 01640221 _____ () C:\Program Files (x86)\Raptr\libjabber.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 00506276 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoo.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 01053730 _____ () C:\Program Files (x86)\Raptr\libymsg.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00497782 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoojp.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00603326 _____ () C:\Program Files (x86)\Raptr\plugins\ssl-nss.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00474199 _____ () C:\Program Files (x86)\Raptr\plugins\ssl.dll
2014-10-21 22:56 - 2014-10-21 22:56 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\9b1cac8d98bd69d3e56a26ff2f96f266\IsdiInterop.ni.dll
2011-07-25 04:42 - 2011-01-13 02:56 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Classes\.exe: exefile =>  <===== ATTENTION!
HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Classes\exefile:  <===== ATTENTION!

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-221738678-620704744-704572411-1000\...\aeriagames.com -> hxxps://aeriagames.com
IE trusted site: HKU\S-1-5-21-221738678-620704744-704572411-1000\...\aeriagames.com -> hxxp://aeriagames.com


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-221738678-620704744-704572411-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Ralink Wireless Utility.lnk => C:\Windows\pss\Ralink Wireless Utility.lnk.CommonStartup
MSCONFIG\startupreg: Aeria Ignite => "C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe" silent
MSCONFIG\startupreg: Overwolf => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent
MSCONFIG\startupreg: Raptr => C:\PROGRA~2\Raptr\raptrstub.exe --startup

==================== FirewallRules (whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

FirewallRules: [{78594C1C-0D50-4158-BE4B-630F903AD614}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{6FBF251F-BD39-4F99-9B43-11228600FA75}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
FirewallRules: [{D2661B1C-FB14-4488-85B6-C9F0F671AC26}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
FirewallRules: [{2C171432-29A8-41AE-B4FC-C8A1B17AA814}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{5AB70EC2-290C-47AF-93E6-2FF6583923AE}] => (Allow) LPort=2869
FirewallRules: [{E223E5D1-C91F-43A7-BAF4-034AF2D39963}] => (Allow) LPort=1900
FirewallRules: [{87113CB6-D031-4465-A7DA-1190F21F5789}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{A6A9391B-02D1-49D7-ADC4-9186A84936CB}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{57B9C597-A0EB-408F-856B-FA683C8132A3}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{714CDBAF-5604-42B3-B700-E8038F5DF945}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [TCP Query User{06F842FE-DDFA-4FCC-AE92-5F69EEE0F652}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{3661892A-DE75-4580-91A0-F9FBF1799DF3}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{5765CABA-404A-44EF-8227-7422B4001117}C:\program files (x86)\dragon's prophet\dp_x64.exe] => (Allow) C:\program files (x86)\dragon's prophet\dp_x64.exe
FirewallRules: [UDP Query User{4AB4E404-C83C-479E-AE15-ED70B9717177}C:\program files (x86)\dragon's prophet\dp_x64.exe] => (Allow) C:\program files (x86)\dragon's prophet\dp_x64.exe
FirewallRules: [{D8B75AC5-DB8B-4A3C-A379-08351FDB3A8A}] => (Block) C:\program files (x86)\dragon's prophet\dp_x64.exe
FirewallRules: [{FA2BCC55-2D25-4982-9813-648096C2D014}] => (Block) C:\program files (x86)\dragon's prophet\dp_x64.exe
FirewallRules: [TCP Query User{8BC7D8B9-96BF-48DA-B566-50842124FA04}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe
FirewallRules: [UDP Query User{9C72FA86-27B7-40B5-BCCB-3EE160D8159F}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe
FirewallRules: [TCP Query User{643C5904-C3B1-4EF9-B893-4374ECF6D6DA}C:\program files (x86)\dragon's prophet\launcher.exe] => (Allow) C:\program files (x86)\dragon's prophet\launcher.exe
FirewallRules: [UDP Query User{878B8F84-B88B-4D79-BA68-B0CE420657C1}C:\program files (x86)\dragon's prophet\launcher.exe] => (Allow) C:\program files (x86)\dragon's prophet\launcher.exe
FirewallRules: [{80ED7FA9-4202-4D90-836F-F9F56B4CDAE4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{4399A304-14B2-4EFA-B537-E8EA862FCC80}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{01721DB0-F656-4031-8930-1E8373DC2F7F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3sp.exe
FirewallRules: [{C1942149-4BF2-4840-B25B-0861219DBE3B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3sp.exe
FirewallRules: [{AD3CBC94-9015-4EEC-8010-9730A95F050C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3mp.exe
FirewallRules: [{83C71D22-7773-410B-9C20-2AA7FDCEB96E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3mp.exe
FirewallRules: [{E7F483C4-10DC-4293-ACA0-F3AF08D31698}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x86.exe
FirewallRules: [{27ADCB35-4841-4AF9-B2D7-CC086CF7A903}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\launcher.exe
FirewallRules: [{4933D89C-009A-43A4-A839-09A511BC8DFC}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\launcher.exe
FirewallRules: [{3D9A3A59-0A6C-440B-A6F9-0A90AC0DE8EB}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x64.exe
FirewallRules: [{18241FBC-0EF3-483B-94A6-AC00EEDBF4A7}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x64.exe
FirewallRules: [{C7D1F9D6-5F5C-4788-8D75-AA4662252A42}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x86.exe
FirewallRules: [TCP Query User{4C269EB3-8471-4A9F-8BEC-B534B181151E}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe
FirewallRules: [UDP Query User{721D1BD2-BDD0-4F36-AD02-862EE89713FE}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe
FirewallRules: [TCP Query User{C39306B7-FF57-4794-8B9A-9AA0F84CB38F}C:\users\dima\appdata\local\iw4m\iw4m.dat] => (Block) C:\users\dima\appdata\local\iw4m\iw4m.dat
FirewallRules: [UDP Query User{F8E2B0E8-5340-4B1C-92C0-7DA4FD31E1C2}C:\users\dima\appdata\local\iw4m\iw4m.dat] => (Block) C:\users\dima\appdata\local\iw4m\iw4m.dat
FirewallRules: [TCP Query User{1D2F39A8-48D1-4F21-9CF1-DE335D47F856}C:\users\dima\desktop\iw4m\iw4m.dat] => (Allow) C:\users\dima\desktop\iw4m\iw4m.dat
FirewallRules: [UDP Query User{56A99EDF-B65F-4AFD-AE16-F7D98D17E077}C:\users\dima\desktop\iw4m\iw4m.dat] => (Allow) C:\users\dima\desktop\iw4m\iw4m.dat
FirewallRules: [TCP Query User{2615C76C-73D3-4D32-B632-E52A4C790CC1}C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe
FirewallRules: [UDP Query User{06CB1C71-BEEC-4057-B2DC-C2D7E2D1CA89}C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe
FirewallRules: [{C39F0114-CCFF-4583-BE3C-FCC7B4C918B2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014 Demo\DotP_D14.exe
FirewallRules: [{586F7494-D5E6-431C-B8E6-847AF4C525E9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014 Demo\DotP_D14.exe
FirewallRules: [{76EF348E-4A47-485D-9F6F-4D71F6E38FC1}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{7AE12753-DC2E-4865-9B9B-D3A3E3937C08}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{5951B7B2-DBCA-4C9A-9BF3-C4114D1B65B5}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{65B33429-5091-41E6-A332-E473323DD788}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{1EC8437C-CE05-4587-9FC8-1F694B4C7C17}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe
FirewallRules: [{D0028759-3301-4357-8B2F-C150FE1F51E3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe
FirewallRules: [{FBA36FBF-DB77-4FD8-BC3F-80825FA74D59}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe
FirewallRules: [{5F4313DD-BA94-4F06-A2F0-B409FDAC09F4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe
FirewallRules: [{67D60A7C-0385-470F-9033-87A08C2D2E4F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [{E3735442-0A8C-41A3-9B08-729BC8802589}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [TCP Query User{7090371A-9B4F-4254-84A8-364D16F3A38C}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [UDP Query User{31DB48CF-D0EF-4B0D-AAE6-7AF83D2137D8}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [{A045D731-60D5-4EAD-BF23-1F7796BB34FA}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [{2C6C6FBA-5AFC-4085-8A68-A8C98856386B}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [TCP Query User{3C639DFB-197E-4AFF-A15E-25F14B889032}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat
FirewallRules: [UDP Query User{82EE40F2-E294-4D7B-9D68-1B75AE208E6A}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat
FirewallRules: [{64E878D7-1907-4A7D-A779-834D5D060955}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat
FirewallRules: [{68209FB4-C66B-4D9D-A2F0-2397BE1AB277}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat
FirewallRules: [TCP Query User{00A0BD31-B63A-4C19-93E8-ABCC8DB5C578}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [UDP Query User{8999A7F5-D427-4328-AAB7-ADA1FA9C59BF}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [{8DC4935E-B350-42D1-8FB1-1BB8F7442E36}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [{6CFC61D0-18CC-49EB-B25A-ACAECA62E42B}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [TCP Query User{EBCAC3E3-AA9A-43CF-B83E-98D5FD5EA402}C:\users\dima\desktop\call of duty modern warfare 2\com.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\com.dat
FirewallRules: [UDP Query User{84C7686B-75DF-401A-9FDF-7FC9F6392C7D}C:\users\dima\desktop\call of duty modern warfare 2\com.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\com.dat
FirewallRules: [{049E4550-90D7-4FEF-B6AD-9D74DED0C676}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\com.dat
FirewallRules: [{993FB1C4-D279-479A-90BE-6165BF19AF2E}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\com.dat
FirewallRules: [TCP Query User{9B3FB14A-DDF0-4459-AB11-D96BA0A21D17}C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [UDP Query User{3511F905-74A3-4CF9-9DC4-31D40CA6C995}C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [{4BBE5ECB-54A4-4EF1-BAA9-DBE3F102DC2F}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [{A73E2F4B-AB36-4447-B71B-F28AF0D3F1C5}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [TCP Query User{85EDB327-F94C-42C7-A714-B52DCFABB896}C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [UDP Query User{62DB249D-8E0B-4DE5-866A-A5EC513C7675}C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [{9BA06BB7-A418-404C-A95C-D8E2282C6F57}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [{CED6EBE2-E036-4988-AB13-D5DA803410B6}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [{E546D188-E7DD-44EE-BC95-7E5100A1366C}] => (Allow) C:\Users\Dima\Downloads\HOTO_downloader.exe
FirewallRules: [{60F46196-1CBF-40C0-970C-031D8BAD38B2}] => (Allow) C:\Users\Dima\Downloads\HOTO_downloader.exe
FirewallRules: [{F45FED77-FF04-4879-9444-42D263E00C25}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe
FirewallRules: [{28EC56F2-D3A9-4BCE-A5F5-878749DE6407}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe
FirewallRules: [{A4083F49-4F11-4A32-B91C-2BAF1B4BF058}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe
FirewallRules: [{DF37D091-D2F9-4401-B457-D9030A3919A8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe
FirewallRules: [{1315155E-2220-4EDE-A4A4-755669B75E19}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [{58E7FDFD-4736-4213-9B42-50E885AE99CA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [{31958790-F30C-4BC7-BDAC-03B4DED35B86}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe
FirewallRules: [{CC1F0407-71B4-4EC3-9F37-0E161C8A3322}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe
FirewallRules: [{145C7649-7AA9-42B3-97E8-5B8400173F22}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe
FirewallRules: [{936F4879-D6DB-4A9A-BEB0-D9E0A63B56E1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe
FirewallRules: [{375BA601-C201-4FFF-9426-9DC8362E1D6A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{4EAF1A42-8BB1-49A8-8D54-63BE9EF5E1FC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{E7EEA6A5-9E71-4A90-B195-713ADC4D3DD9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe
FirewallRules: [{C7E9681A-9A64-4D1A-99A8-CFC9168448D5}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe
FirewallRules: [{4352484E-8611-4EF5-92B1-E1134658D51D}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{FAF9A5EF-500F-48F2-9A53-FB0E549E87A7}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{45E32924-61E5-4693-8142-5090A1DACC77}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{B51953D9-7C03-413E-B7EA-B60979F79136}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [TCP Query User{58A3D1CA-EB63-41E1-815B-2C296E72A629}C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe] => (Allow) C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe
FirewallRules: [UDP Query User{42C952D4-1892-4D10-9AB1-1CC3F39A23F3}C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe] => (Allow) C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe
FirewallRules: [{1D455526-6B1D-4BF9-B8BA-00306E25FF9A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [{0DA93301-8BDC-47FD-B914-E2FA1EC7AAFB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [TCP Query User{0729B18F-9796-4FCF-A32F-7A5833FBE815}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\dima\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{A54F5C5A-D8E2-403E-A810-D1615D1E56C6}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\dima\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{9C8EF3A7-3266-4542-B95E-133CF9D2DFA9}C:\programdata\battle.net\agent\agent.beta.2514\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2514\agent.exe
FirewallRules: [UDP Query User{DF8986C4-FB63-4A37-874F-5E4F5AB0B070}C:\programdata\battle.net\agent\agent.beta.2514\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2514\agent.exe
FirewallRules: [TCP Query User{7D2074A4-AA89-4BA7-A7EB-1268C6492AEE}C:\program files (x86)\devpro\devpro.dll] => (Allow) C:\program files (x86)\devpro\devpro.dll
FirewallRules: [UDP Query User{F2B7C119-C5D0-4914-BEBC-71E99254D344}C:\program files (x86)\devpro\devpro.dll] => (Allow) C:\program files (x86)\devpro\devpro.dll
FirewallRules: [{EA7F7B92-3349-4537-9E50-3A0B4D818281}] => (Allow) C:\AeriaGames\AuraKingdom\game.bin
FirewallRules: [{AB6209F8-0BA4-4FC4-803C-1A73FEFDA112}] => (Allow) C:\AeriaGames\AuraKingdom\game.bin
FirewallRules: [TCP Query User{4F600FC8-F54A-49E9-B588-2F547BBA96B1}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe
FirewallRules: [UDP Query User{DF1CE9AE-5217-4393-B737-92F45CBCB4BD}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe
FirewallRules: [{A1A5A428-B18A-4BC9-A553-B1E6989C2A42}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Darksiders 2\Darksiders2.exe
FirewallRules: [{F60EBF1D-B0A7-4638-B48C-AF3F18B494BA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Darksiders 2\Darksiders2.exe
FirewallRules: [{767607AA-81B6-406F-BF1E-B8A81ED847FC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe
FirewallRules: [{35789372-EE60-4ED3-81F9-A81ED3BF2CE4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe
FirewallRules: [{07DE1F4A-0A51-4A63-BF8D-CD9580D92EB6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{5F40E8E8-9EF2-41AA-9414-FBA5770F0A94}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [TCP Query User{744A07AB-09FD-499C-9F04-E01BB0351E8D}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\dima\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{F7498DED-162B-488F-B59F-256A51C6CE71}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\dima\appdata\local\akamai\netsession_win.exe
FirewallRules: [{AEAB3ECF-0BB1-453B-8D1F-476AE01D86A0}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe
FirewallRules: [{8D48AAEF-A0CE-44E7-9024-CA3944E81E7D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe
FirewallRules: [TCP Query User{6CF9A63C-F912-4E3A-8DDA-6D3AC6AF66DF}C:\programdata\battle.net\agent\agent.beta.2638\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2638\agent.exe
FirewallRules: [UDP Query User{5A9CB3D7-8747-407A-97AB-191DBFC43D75}C:\programdata\battle.net\agent\agent.beta.2638\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2638\agent.exe
FirewallRules: [{94644398-7E26-4C3A-BD3D-8AC488A93807}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe
FirewallRules: [{03DDFDE2-264E-4187-85CD-4382D41F4A6C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe
FirewallRules: [{C38A5A06-BB40-4CFC-BA71-87AEC286F6D6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe
FirewallRules: [{CB8BA2E2-B98E-442B-87D9-92EFB85FECAD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe
FirewallRules: [{234100A5-3277-4236-B80F-3BD7A113F330}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe
FirewallRules: [{9472EB6F-9BC9-4FC2-B7B2-45A96212D7C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe
FirewallRules: [{4DDCAB31-D1CA-49D7-83D1-9A7708CA3387}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Loadout\Loadout.exe
FirewallRules: [{50274324-D5E3-4A7D-9551-60285C4D51CE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Loadout\Loadout.exe
FirewallRules: [{505A793E-19FF-4163-85DA-BDD1366147B4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{5D9B037C-78AD-4F93-AFCB-A8BF0480CCCF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{71BA2590-5ED7-4DC0-919C-603D078A17E1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
FirewallRules: [{E3C9045F-0538-43CE-9AC0-B88A7047D12B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
FirewallRules: [{AA27854D-9002-4BB1-AC3B-2B040589990B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{F262DA23-A9A0-45ED-875A-42640AB812FD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{5B584B43-CDC2-482C-A915-51ED708E2BDE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
FirewallRules: [{FBE87CBF-6E5E-443B-BB64-D76E91781977}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
FirewallRules: [TCP Query User{5B78C40B-EF9C-4DE3-B847-DDC0913711FC}C:\program files (x86)\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\tera\tera-launcher.exe
FirewallRules: [UDP Query User{02ADE6C1-8488-448C-9DD6-1D4ABC838F09}C:\program files (x86)\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\tera\tera-launcher.exe
FirewallRules: [{4EC807D8-651B-4EDE-906E-15D8940E045A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{5C43F976-C8BD-461A-8160-E4037DEC5A46}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{91A8DE20-9DBA-43BD-9F4B-DE1B625D0D83}] => (Allow) C:\AeriaGames\EdenEternal-DE\_Launcher.exe
FirewallRules: [{CD8464F5-1D27-4ACC-848F-AD802961AD3D}] => (Allow) C:\AeriaGames\EdenEternal-DE\_Launcher.exe
FirewallRules: [{20FF7205-61B2-44CC-87A6-CCE211D4603C}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{6B725485-B1DC-4646-B9AD-C4E754073AD5}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{EFDADD2B-5B82-4D44-BFF6-7533A33E5D4B}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{EDABDFE1-A779-47FE-A7F2-0BE99128B9D1}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{C864BA6F-6F65-4A53-BACD-5590447E71A3}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{BF9437A3-0AAD-4EF3-9020-8A7EDA18FFFB}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{5EC4813D-F4A5-44A4-99AE-2FEEADC7BD68}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe
FirewallRules: [{5741DE79-8863-4C92-8CA4-43D24ED12E9D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe
FirewallRules: [{7FA5A6CC-69A0-4EF2-9E4E-D36CF4A6FFB1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe
FirewallRules: [{1E27B3D7-EBC5-46D1-A1F4-5150D5FC7ECA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe
FirewallRules: [{7ACB6A7B-1D9F-4159-9E5C-57293DE770B9}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA World\fifaworld.exe
FirewallRules: [{CC579040-BC64-4658-B938-3FC11265DBA0}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA World\fifaworld.exe
FirewallRules: [TCP Query User{466B6D60-FB8E-40F4-9A96-3F6B84C31F10}C:\programdata\battle.net\agent\agent.2787\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.2787\agent.exe
FirewallRules: [UDP Query User{747BD4DC-E6ED-4E9F-889A-E1029B9BD7EC}C:\programdata\battle.net\agent\agent.2787\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.2787\agent.exe
FirewallRules: [{024C2E0F-0F94-4571-AAA1-63A5D32016D2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe
FirewallRules: [{19CDF823-35E4-43AD-8A38-931E02B58B64}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe
FirewallRules: [{EA2378D9-ADC4-4A3E-947C-030BBA9A41B0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Aura Kingdom\game.bin
FirewallRules: [{E3E3914B-6929-4469-A807-4C9FC60B3CA5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Aura Kingdom\game.bin
FirewallRules: [{AB6817F8-474B-413B-B1A1-DB9F05CE61BB}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{8192EF82-EABD-49D0-92CB-1E602FCB2399}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{8E9567B7-FEC3-4B6A-8469-1B65ACAEBCF2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe
FirewallRules: [{9832DDCA-66F8-432C-8B22-60682E5E919E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe
FirewallRules: [TCP Query User{1128027D-DF51-428D-BBF5-261AD7F20EEC}C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe
FirewallRules: [UDP Query User{0D0921EC-8295-44F1-A446-52BAFD8EF6EB}C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe
FirewallRules: [TCP Query User{1FC5CC73-6F52-4B75-8D0B-4753B673D255}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{A5E61E08-5C0A-4EA7-BD2C-D6ACED33386F}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{E290B8F5-DC46-4D43-9E40-A8CFEBD19A8A}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe
FirewallRules: [UDP Query User{4A59CA75-CB6F-46C3-8E3B-D091F44ACDC5}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe
FirewallRules: [{51E7B824-61EF-498A-94AE-826ED3FE5CF2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{B9C59147-9E45-4E11-9B2F-5702A1ACAFA5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{BB70E8F0-DE1E-4EEF-873C-95044B81A8C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [{49C70379-991F-4248-81CB-BA51F9158E4F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [{6BB569B0-D223-4EAB-A4A0-83B776CDA2DD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age2HD\Launcher.exe
FirewallRules: [{D341F20A-E2E0-4320-82A8-3607608AD108}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age2HD\Launcher.exe
FirewallRules: [{757CE32E-DE9A-440C-BAB3-B9F8EF37A2A0}] => (Allow) C:\Users\Dima\Downloads\b9_downloader.exe
FirewallRules: [{ACA68B80-8F45-4E75-B7D3-470AF290871F}] => (Allow) C:\Users\Dima\Downloads\b9_downloader.exe
FirewallRules: [TCP Query User{B5BB55CB-DE77-4080-963B-3A266AC37CE5}C:\programdata\battle.net\agent\agent.3235\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3235\agent.exe
FirewallRules: [UDP Query User{30EBE90E-7ED1-4868-9D3D-50E6D7112675}C:\programdata\battle.net\agent\agent.3235\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3235\agent.exe
FirewallRules: [{1BAA9821-E2DD-48BF-9E27-F6297D2F5116}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [{9C9260ED-7AA0-4AE4-972E-D83A5D097028}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [{EA27D1BB-E05D-4097-97AF-BC7DE8174F52}] => (Allow) C:\Program Files (x86)\Bench\Proxy\proc.exe
FirewallRules: [{953D2DA8-7AEB-4931-BE76-87BDE0ACBC39}] => (Allow) C:\Program Files (x86)\Bench\Proxy\pwdg.exe
FirewallRules: [{91AF5EE1-530D-4D72-A308-BDBA132ABA31}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{AF831DA2-EC4A-4642-915F-DF7CBB2A2CF3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{BBBB3AD6-5EB2-4204-B5AF-9716942ACB1C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
FirewallRules: [{63BB69A1-F607-4FB8-9EDD-1A607AABDA8B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
FirewallRules: [{34F27A20-13E6-46E6-9901-39383CB7F97A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [{DA9D712D-0C9F-441F-A880-FF8D27837E6E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [TCP Query User{A250025F-7CBE-4CAD-93AE-C02E36E841C1}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe
FirewallRules: [UDP Query User{3D207EE9-306F-48FF-8735-CD8CDAFA0490}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe
FirewallRules: [TCP Query User{F7376CA3-FA2C-4F56-9AD8-0A2ADC4927AE}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe
FirewallRules: [UDP Query User{BCBA424F-EDE5-4DFC-8FD5-56BB5666B2F5}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe
FirewallRules: [{7A5EB71C-C724-402F-8557-A92B3BAD628E}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe
FirewallRules: [{AF09CC9B-68D7-404C-B498-D144643C1A54}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe
FirewallRules: [{D56AE5C0-0487-4C87-8284-10DC792A01DE}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe
FirewallRules: [{CB98B3E2-40A1-4A7C-ACCB-56A50C8E3F7B}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe
FirewallRules: [{B3D84AF2-F39E-4E7D-9D7E-FFCD803C1135}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{AB8E5377-F2F7-441D-9A50-434D83F90C0E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{CCA3F085-5CA5-4FEE-9ADD-935183AE6F1C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{9EA1B11A-0179-414A-AFF8-82050C792E6B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{256D7304-2C38-45D1-97DB-71739BA92297}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [{E2070B33-5CCB-46B0-B6CF-4ED92F8AB562}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [{1E69481E-7920-4B4D-9047-B812C456A75A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{A416660E-98DD-4A45-8A5A-C8BBA66A68A3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{72A09F1B-7789-4A3E-B327-FD1D052150FF}] => (Allow) C:\Program Files (x86)\GameforgeLive\gfl_client.exe
FirewallRules: [TCP Query User{2A0CBFD5-23A1-4C20-91ED-B00077755298}C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe
FirewallRules: [UDP Query User{3933DFA8-6EB3-47A1-A4F9-7C3E7BD2ED67}C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe
FirewallRules: [TCP Query User{69CF256B-C011-492C-B7A0-04F509D0D67B}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe
FirewallRules: [UDP Query User{FFEA845F-4BF9-44FF-89AC-628034543D28}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe
FirewallRules: [{7809CF2C-51C3-4520-8BD0-F210B5BBB57B}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [{CE1678FF-6995-415D-ADDC-E165111812E1}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [{2412E622-4FBF-402A-B899-DBC82E5C6B2B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{5817EFF9-3537-4F8B-97F9-2C33716052B4}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{B65003CD-97BF-4394-A2F7-21A3E24DCFB5}] => (Allow) C:\Nexon\Vindictus EU\en-EU\NMService.exe
FirewallRules: [{0CA242B9-DEDD-43C3-9F4C-BADAE74781E9}] => (Allow) C:\Nexon\Vindictus EU\en-EU\NMService.exe
FirewallRules: [TCP Query User{3D2A0F20-56AE-42D0-80DF-E8AC85D00D13}C:\nexon\vindictus eu\en-eu\vindictus.exe] => (Allow) C:\nexon\vindictus eu\en-eu\vindictus.exe
FirewallRules: [UDP Query User{2DFE002E-3069-4DA8-920D-442A029D663E}C:\nexon\vindictus eu\en-eu\vindictus.exe] => (Allow) C:\nexon\vindictus eu\en-eu\vindictus.exe
FirewallRules: [TCP Query User{93A7A5BC-03EA-42A5-AE99-CC30CBDF752F}C:\users\dima\desktop\eclipse\eclipse.exe] => (Allow) C:\users\dima\desktop\eclipse\eclipse.exe
FirewallRules: [UDP Query User{13A19341-79DD-4889-B496-24BB0AA8C4C2}C:\users\dima\desktop\eclipse\eclipse.exe] => (Allow) C:\users\dima\desktop\eclipse\eclipse.exe
FirewallRules: [TCP Query User{95CD7A11-031A-4E37-B3A1-64F53A1F7A75}C:\program files\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{9B60CDE5-BA1E-4E6D-BDF3-C1056F5F8650}C:\program files\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{C4E30886-3358-4A99-BE81-2F5BED09E73D}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [UDP Query User{710835ED-1463-4E58-8DB1-9F37F56C4A0F}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [TCP Query User{C7584B0F-6622-4E1D-8987-9D85C77F36F0}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [UDP Query User{F365D46D-EED4-49F4-93DF-234F94019BB2}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [TCP Query User{63488A2D-8F13-4C4E-8CC0-49944F9372BA}C:\users\dima\desktop\lancraft\lancraft.exe] => (Allow) C:\users\dima\desktop\lancraft\lancraft.exe
FirewallRules: [UDP Query User{EAEC2D64-0B8E-4599-A61B-53F358A64796}C:\users\dima\desktop\lancraft\lancraft.exe] => (Allow) C:\users\dima\desktop\lancraft\lancraft.exe
FirewallRules: [TCP Query User{A91AD53F-87ED-432A-9D7C-0AC95375B702}C:\users\dima\desktop\warcraft\war3.exe] => (Allow) C:\users\dima\desktop\warcraft\war3.exe
FirewallRules: [UDP Query User{CC9DF559-105D-4031-9013-ADF7BC24CFC3}C:\users\dima\desktop\warcraft\war3.exe] => (Allow) C:\users\dima\desktop\warcraft\war3.exe
FirewallRules: [TCP Query User{6E3020FE-2B2A-413D-8EBC-AC0261DDA56B}C:\users\dima\desktop\warcraft\lancraft.exe] => (Allow) C:\users\dima\desktop\warcraft\lancraft.exe
FirewallRules: [UDP Query User{83FC41EC-2250-4389-B57F-7CF1CF138244}C:\users\dima\desktop\warcraft\lancraft.exe] => (Allow) C:\users\dima\desktop\warcraft\lancraft.exe
FirewallRules: [{E762770A-34B1-461E-B15E-FFC052875F0A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\CastleCrashers\castle.exe
FirewallRules: [{32B2CED0-8283-4A5A-8965-FFCB653C38DA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\CastleCrashers\castle.exe
FirewallRules: [TCP Query User{CA917D8D-9E80-4B19-90E8-110407378DDD}C:\program files (x86)\unity\editor\unity.exe] => (Allow) C:\program files (x86)\unity\editor\unity.exe
FirewallRules: [UDP Query User{4A9F69B2-9BB4-4F0E-B34D-4D95E242700A}C:\program files (x86)\unity\editor\unity.exe] => (Allow) C:\program files (x86)\unity\editor\unity.exe
FirewallRules: [{5A44804A-99EB-4C63-8F18-C9310F1C4657}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe
FirewallRules: [{5C90DDB5-DFDC-4BF5-B6D0-B86A95AEE724}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe
FirewallRules: [TCP Query User{DD861486-7A78-460B-9A83-BFA67BC6A454}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [UDP Query User{21543651-AA0C-4F30-B6F4-14C779C5E70B}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [TCP Query User{5C83AE95-A82A-49CA-B905-4EFC8C6961F9}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [UDP Query User{640696E3-D785-4576-883E-596F24E072B3}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [{5880095B-DD8E-4F79-BA8F-727A270A9A7B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dungeon Defenders\Binaries\Win32\DungeonDefenders.exe
FirewallRules: [{A02B8413-228D-4E79-9B24-1B23EEBA9CE2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dungeon Defenders\Binaries\Win32\DungeonDefenders.exe
FirewallRules: [TCP Query User{E5CD1AD8-4898-41F1-880E-C3CCEEF12C49}C:\program files (x86)\secondlifeviewer\slvoice.exe] => (Allow) C:\program files (x86)\secondlifeviewer\slvoice.exe
FirewallRules: [UDP Query User{37F84E6A-EF30-44B7-8E99-DE3F7E7DF7EE}C:\program files (x86)\secondlifeviewer\slvoice.exe] => (Allow) C:\program files (x86)\secondlifeviewer\slvoice.exe
FirewallRules: [TCP Query User{2478D171-94B3-4D1F-8C59-4E8322B8E276}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{28D75031-A654-47AF-802E-4A9A15D5EF3F}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{3A112284-5247-4174-9FB4-B86BFEBD19F9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{B2899169-D59D-4AC1-BBE3-3F3903152981}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{12C4EFF7-DD2B-4A0E-A3A0-98777451B440}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3.exe
FirewallRules: [{4060C2B9-6F65-462B-9221-EEEBCF58BB56}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3.exe
FirewallRules: [{EFA22BC5-7DE3-47F6-8167-289BFDD93178}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3_Unrestricted.exe
FirewallRules: [{C0D1322B-FEBC-4B0A-BD29-158C54B47C3F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3_Unrestricted.exe
FirewallRules: [{13A229AF-4A20-4E5A-B1D5-E4DA450947FA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Gumboy Tournament\gumboytournament.exe
FirewallRules: [{BD506B34-1746-48BC-A17D-29CE55B609BC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Gumboy Tournament\gumboytournament.exe
FirewallRules: [TCP Query User{E9B42C51-F75A-4042-8D09-5FE64A6E0AFD}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe
FirewallRules: [UDP Query User{A47B5394-0D06-4B60-AEAC-F80C6A18EC73}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe
FirewallRules: [{1F0F5A11-9A4F-49CF-8202-86A2DAEB8299}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_launcher.exe
FirewallRules: [{472579C8-4E14-4D30-9C6E-7C1E88FAB3FD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe
FirewallRules: [{09D4FEB7-995B-4579-90DC-1C535713E99A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe
FirewallRules: [{418B6FDA-1046-4E47-AFFC-EC7C31A532E9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe
FirewallRules: [{7199E669-27DE-4BFD-94D5-FDCF6A7C93AA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe
FirewallRules: [{BFF61270-CC5A-432C-A7FB-7D76DC47C782}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium.exe
FirewallRules: [{490B16FF-C2D2-4175-A366-EFDAA08EB979}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium.exe
FirewallRules: [TCP Query User{C9F38270-E9E5-4168-9E99-11073C550934}C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe
FirewallRules: [UDP Query User{6082536E-F697-45B2-969C-5E5CA8E07E06}C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe
FirewallRules: [TCP Query User{5AC0DF45-9E80-410D-A952-1DDA7A565671}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{31F72C84-B935-4C8E-8E1E-6FBDDC891D1C}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe
FirewallRules: [{8EB84DED-EB81-4D74-9575-8282402E2D2E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cryptic Studios\Neverwinter.exe
FirewallRules: [{B5B40F25-2AC6-4642-8BBC-63AE2A925B7B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cryptic Studios\Neverwinter.exe
FirewallRules: [TCP Query User{096444F6-AA1C-44A3-8C5E-A8DFF4A1C6D0}C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe
FirewallRules: [UDP Query User{9E1BE6EE-CCE2-4CFC-8375-7D1F41A71285}C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe
FirewallRules: [{3E6ED98E-B2F8-4E5F-BAED-9D8ACD743A90}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{2F7FD9C7-09FF-4330-AB1D-62122B26142B}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{B6917A43-4FD1-4943-819E-0224DF009AD4}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{580CEC6F-22A8-423D-B6A2-60898E1991C0}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{1D779765-CEC8-476D-8663-FF565F9943D2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dragon Nest Europe\DragonNest\DragonNest.exe
FirewallRules: [{BFD8F340-3BB5-4D13-B4C8-64605B781AE5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dragon Nest Europe\DragonNest\DragonNest.exe
FirewallRules: [TCP Query User{51AE804F-C3F0-4BE7-8861-486111D1A4C3}C:\neople\dfo\dfo.exe] => (Allow) C:\neople\dfo\dfo.exe
FirewallRules: [UDP Query User{813C44E8-970E-4FB2-A994-1B7E6CFAB002}C:\neople\dfo\dfo.exe] => (Allow) C:\neople\dfo\dfo.exe
FirewallRules: [{721B343A-D002-417F-8012-828923F7CF99}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe
FirewallRules: [{51F7C144-FBEC-4072-83BA-D2DB2C1ED47D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe
FirewallRules: [{ECFA20B8-D75A-4C39-89BD-017F84E119BB}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{0FE2304A-0072-4655-BD88-8EAC2F3EE694}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7C5F9697-EA12-4FD9-AA6A-450DA3B7D57A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service

==================== Faulty Device Manager Devices =============

Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: qrnfd_1_10_0_13
Description: qrnfd_1_10_0_13
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: qrnfd_1_10_0_13
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/11/2015 11:44:49 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/11/2015 11:40:27 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm firefox.exe, Version 37.0.2.5583 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1e98

Startzeit: 01d08c31eb0e7ef1

Endzeit: 28

Anwendungspfad: C:\Program Files (x86)\Mozilla Firefox\firefox.exe

Berichts-ID:

Error: (05/11/2015 11:40:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 37.0.2.5583, Zeitstempel: 0x552ef76c
Name des fehlerhaften Moduls: mozalloc.dll, Version: 37.0.2.5583, Zeitstempel: 0x552ee9ae
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001aa1
ID des fehlerhaften Prozesses: 0x1ca4
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3

Error: (05/11/2015 11:33:17 PM) (Source: ftb) (EventID: 1) (User: )
Description: ftbStartServiceCtrlDispatcher failed with 1063

Error: (05/11/2015 11:33:00 PM) (Source: ftb) (EventID: 1) (User: )
Description: ftbStartServiceCtrlDispatcher failed with 1063

Error: (05/11/2015 11:32:00 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm firefox.exe, Version 37.0.2.5583 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 2130

Startzeit: 01d08c24cf8d69f1

Endzeit: 32

Anwendungspfad: C:\Program Files (x86)\Mozilla Firefox\firefox.exe

Berichts-ID:

Error: (05/11/2015 11:32:00 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 37.0.2.5583, Zeitstempel: 0x552ef76c
Name des fehlerhaften Moduls: mozalloc.dll, Version: 37.0.2.5583, Zeitstempel: 0x552ee9ae
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001aa1
ID des fehlerhaften Prozesses: 0x3cc
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3

Error: (05/11/2015 09:18:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 37.0.2.5583, Zeitstempel: 0x552ef76c
Name des fehlerhaften Moduls: mozalloc.dll, Version: 37.0.2.5583, Zeitstempel: 0x552ee9ae
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001aa1
ID des fehlerhaften Prozesses: 0x15f0
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3

Error: (05/10/2015 06:42:28 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/10/2015 04:13:33 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (05/11/2015 11:45:34 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (05/11/2015 11:45:32 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht.

Error: (05/11/2015 11:45:01 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
qrnfd_1_10_0_13

Error: (05/11/2015 11:44:41 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (05/11/2015 11:44:41 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht.

Error: (05/11/2015 11:43:37 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (05/11/2015 11:43:35 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Hi-Rez Studios Authenticate and Update Service erreicht.

Error: (05/11/2015 11:41:39 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "mftb" wurde unerwartet beendet. Dies ist bereits 2 Mal passiert.

Error: (05/11/2015 11:41:39 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "ftb" wurde unerwartet beendet. Dies ist bereits 2 Mal passiert.

Error: (05/11/2015 11:41:38 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.


Microsoft Office Sessions:
=========================
Error: (05/11/2015 11:44:49 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/11/2015 11:40:27 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: firefox.exe37.0.2.55831e9801d08c31eb0e7ef128C:\Program Files (x86)\Mozilla Firefox\firefox.exe

Error: (05/11/2015 11:40:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe37.0.2.5583552ef76cmozalloc.dll37.0.2.5583552ee9ae8000000300001aa11ca401d08c31edc36601C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll5613711c-f826-11e4-b276-c9b362989730

Error: (05/11/2015 11:33:17 PM) (Source: ftb) (EventID: 1) (User: )
Description: ftbStartServiceCtrlDispatcher failed with 1063

Error: (05/11/2015 11:33:00 PM) (Source: ftb) (EventID: 1) (User: )
Description: ftbStartServiceCtrlDispatcher failed with 1063

Error: (05/11/2015 11:32:00 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: firefox.exe37.0.2.5583213001d08c24cf8d69f132C:\Program Files (x86)\Mozilla Firefox\firefox.exe

Error: (05/11/2015 11:32:00 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe37.0.2.5583552ef76cmozalloc.dll37.0.2.5583552ee9ae8000000300001aa13cc01d08c31e2b05b1fC:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll2805ac04-f825-11e4-b276-c9b362989730

Error: (05/11/2015 09:18:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe37.0.2.5583552ef76cmozalloc.dll37.0.2.5583552ee9ae8000000300001aa115f001d08c1ef99749a9C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll76a6dcfc-f812-11e4-b276-c9b362989730

Error: (05/10/2015 06:42:28 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/10/2015 04:13:33 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity Errors:
===================================
  Date: 2015-05-08 20:38:53.994
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:37:07.273
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:37:03.798
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:36:19.340
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:34:40.221
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:34:12.814
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:20:56.969
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:20:56.706
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:20:18.534
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:20:17.995
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-4570 CPU @ 3.20GHz
Percentage of memory in use: 39%
Total physical RAM: 8136.6 MB
Available physical RAM: 4958.17 MB
Total Pagefile: 16271.39 MB
Available Pagefile: 13187.23 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:915.41 GB) (Free:454.25 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 277A7941)
Partition 1: (Not Active) - (Size=16 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=915.4 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Bootsektor · 12.05.2015, 09:10

Hallo,

dann machen wir so weiter:

Schritt 1
Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Schritt 2
Starte noch einmal FRST.

Ändere keine der Voreinstellungen und drücke auf Scan.
Wenn der Scan abgeschlossen ist, wird ein neues Logfile FRST.txt erstellt und auf dem Desktop gespeichert.
Poste den Inhalt dieses Logfiles bitte hier in deinen Thread.

kriegnes · 12.05.2015, 12:04

Code:

ATTFilter

ComboFix 15-05-09.01 - Dima 12.05.2015  12:48:59.1.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.8137.5392 [GMT 2:00]
ausgeführt von:: c:\users\Dima\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Enabled/Updated* {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
SP: Microsoft Security Essentials *Enabled/Updated* {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
SP: Spybot - Search and Destroy *Disabled/Outdated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\install.exe
c:\programdata\ntuser.pol
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdonfjaemnemdnnpebbcelibeocdmkai
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdonfjaemnemdnnpebbcelibeocdmkai\156\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdonfjaemnemdnnpebbcelibeocdmkai\156\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdonfjaemnemdnnpebbcelibeocdmkai\156\IftGT.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdonfjaemnemdnnpebbcelibeocdmkai\156\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdonfjaemnemdnnpebbcelibeocdmkai\156\manifest.json
c:\users\Dima\AppData\Local\nsb44A6.tmp
c:\users\Dima\AppData\Local\nsnE864.tmp
c:\users\Dima\AppData\Roaming\DXbbq3U.exe
c:\users\Dima\AppData\Roaming\IT7Lg6DU6w1.exe
c:\users\Dima\AppData\Roaming\Microsoft\Windows\Recent\Naruto Sages59.url
c:\users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe
c:\users\Dima\AppData\Roaming\WfqE0YhY0IU.exe
c:\windows\msdownld.tmp
c:\windows\wininit.ini
.
.
(((((((((((((((((((((((   Dateien erstellt von 2015-04-12 bis 2015-05-12  ))))))))))))))))))))))))))))))
.
.
2015-05-12 10:57 . 2015-05-12 10:57	--------	d-----w-	c:\users\Default\AppData\Local\temp
2015-05-11 21:00 . 2015-05-11 21:00	--------	d-----w-	c:\users\Dima\AppData\Local\Eclipse
2015-05-11 20:03 . 2015-05-11 21:51	--------	d-----w-	C:\FRST
2015-05-11 18:59 . 2015-05-11 18:59	--------	d-----w-	c:\users\Dima\AppData\Local\My Games
2015-05-11 11:51 . 2015-04-04 06:25	12032440	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{86645A6A-4DE0-4A71-A6B6-500C986EC6AB}\mpengine.dll
2015-05-10 16:44 . 2015-05-10 16:44	--------	d-----w-	c:\users\Dima\AppData\Local\Origin
2015-05-10 16:05 . 2015-05-10 16:05	--------	d-----w-	c:\program files (x86)\Mozilla Maintenance Service
2015-05-10 14:15 . 2015-05-10 14:15	--------	d-----w-	c:\users\Dima\AppData\Local\EgisTec IPS
2015-05-10 14:13 . 2015-05-11 21:46	--------	d-----w-	c:\users\Dima\AppData\Local\LogMeIn Hamachi
2015-05-10 14:13 . 2015-05-10 14:13	--------	d-----w-	c:\users\Dima\AppData\Local\LogMeIn
2015-05-10 14:12 . 2015-05-10 14:12	--------	d-----w-	c:\users\Dima\AppData\Local\VirtualStore
2015-05-10 14:07 . 2015-05-11 21:41	--------	d-----w-	C:\AdwCleaner
2015-05-09 20:42 . 2015-04-04 06:25	12032440	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2015-05-08 18:43 . 2015-05-08 18:43	--------	d-----w-	c:\users\Dima\AppData\Local\openvr
2015-05-08 18:42 . 2015-05-08 18:42	--------	d-----w-	c:\users\Dima\AppData\Local\Steam
2015-05-08 17:44 . 2015-05-08 17:44	--------	d-----w-	c:\users\Dima\AppData\Local\Programs
2015-05-08 17:44 . 2015-05-08 17:44	--------	d-----w-	c:\users\Dima\AppData\Local\Macromedia
2015-05-08 17:43 . 2015-05-09 20:34	--------	d-----w-	c:\users\Dima\AppData\Local\Mozilla
2015-05-08 16:41 . 2015-05-08 16:41	--------	d-----w-	c:\users\Dima\AppData\Local\ATI
2015-05-08 12:55 . 2015-05-08 12:55	--------	d-sh--w-	c:\users\Dima\AppData\Local\EmieUserList
2015-05-08 12:55 . 2015-05-08 12:55	--------	d-sh--w-	c:\users\Dima\AppData\Local\EmieSiteList
2015-05-08 12:55 . 2015-05-08 12:55	--------	d-sh--w-	c:\users\Dima\AppData\Local\EmieBrowserModeList
2015-05-08 12:49 . 2015-05-08 12:49	--------	d-----w-	c:\programdata\Kikblaster
2015-05-08 12:33 . 2015-05-08 17:54	--------	d-----w-	c:\program files (x86)\Edu App
2015-05-08 12:20 . 2015-05-08 12:52	--------	d-----w-	c:\users\Dima\AppData\Local\00000000-1431094823-0000-0000-D43D7EBF2FB4
2015-05-05 19:45 . 2015-05-08 12:45	--------	d--h--w-	c:\programdata\ftb
2015-05-05 19:12 . 2015-05-05 19:12	408576	----a-w-	c:\windows\mftb.exe
2015-05-05 19:12 . 2015-05-05 19:12	417792	----a-w-	c:\windows\ftb.exe
2015-04-25 18:20 . 2015-04-25 18:20	--------	d-----w-	C:\Neople
2015-04-20 11:37 . 2015-04-20 11:37	--------	d-----w-	c:\program files (x86)\avmwlanstick
2015-04-20 11:36 . 2012-04-24 23:00	14120	----a-w-	c:\windows\system32\drivers\avmeject.sys
2015-04-20 11:36 . 2015-04-20 11:36	--------	d-----w-	c:\users\Dima\AVM_Driver
2015-04-19 22:51 . 2012-07-12 00:00	480632	----a-w-	c:\windows\instwcli.dex
2015-04-19 22:05 . 2015-04-19 22:44	--------	d-----w-	c:\program files (x86)\AVM_update
2015-04-19 18:40 . 2015-04-19 19:03	--------	d-----w-	c:\program files (x86)\Elite Dekaron
2015-04-19 18:40 . 2015-04-19 18:40	--------	d-----w-	c:\windows\Elite Dekaron
2015-04-16 14:36 . 2015-04-16 14:43	--------	d-s---w-	c:\windows\system32\GWX
2015-04-16 14:36 . 2015-04-16 14:36	--------	d-s---w-	c:\windows\SysWow64\GWX
2015-04-15 19:14 . 2015-04-15 19:14	18178736	----a-w-	c:\windows\SysWow64\FlashPlayerInstaller.exe
2015-04-14 18:38 . 2015-03-17 05:17	13312	----a-w-	c:\windows\system32\wow64cpu.dll
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-05-11 21:44 . 2014-12-10 21:58	4194304	----a-w-	c:\windows\ServiceProfiles\NetworkService\msmqlog.bin
2015-04-15 19:15 . 2013-08-15 12:45	778416	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2015-04-15 19:15 . 2011-07-25 03:19	142512	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-04-15 10:45 . 2013-11-11 11:25	128913832	----a-w-	c:\windows\system32\MRT.exe
2015-03-30 13:25 . 2013-09-23 10:48	33856	---ha-w-	c:\windows\system32\hamachi.sys
2015-03-26 11:54 . 2015-04-01 13:01	1187344	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{5FE7D19D-7B1C-44AA-A706-B84AA345680D}\gapaengine.dll
2015-03-26 11:54 . 2013-12-06 19:17	1187344	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2015-03-20 22:39 . 2015-03-20 22:41	237864	----a-w-	c:\windows\SysWow64\EasyAntiCheat.exe
2015-03-17 04:56 . 2015-04-14 18:39	44032	----a-w-	c:\windows\apppatch\acwow64.dll
2015-03-03 13:17 . 2010-11-21 03:27	295552	------w-	c:\windows\system32\MpSigStub.exe
2015-02-26 18:04 . 2015-02-26 18:03	114872	----a-w-	c:\windows\system32\pdfcmon.dll
2015-02-26 03:25 . 2015-03-11 12:01	3204096	----a-w-	c:\windows\system32\win32k.sys
2015-02-24 03:15 . 2015-03-11 12:01	389800	----a-w-	c:\windows\system32\iedkcs32.dll
2015-02-21 01:16 . 2015-03-11 12:01	25021440	----a-w-	c:\windows\system32\mshtml.dll
2015-02-20 23:58 . 2015-03-11 12:01	92160	----a-w-	c:\windows\system32\mshtmled.dll
2015-02-20 04:41 . 2015-03-11 12:02	41984	----a-w-	c:\windows\system32\lpk.dll
2015-02-20 04:40 . 2015-03-11 12:02	100864	----a-w-	c:\windows\system32\fontsub.dll
2015-02-20 04:40 . 2015-03-11 12:02	14336	----a-w-	c:\windows\system32\dciman32.dll
2015-02-20 04:40 . 2015-03-11 12:02	46080	----a-w-	c:\windows\system32\atmlib.dll
2015-02-20 04:13 . 2015-03-11 12:02	70656	----a-w-	c:\windows\SysWow64\fontsub.dll
2015-02-20 04:13 . 2015-03-11 12:02	10240	----a-w-	c:\windows\SysWow64\dciman32.dll
2015-02-20 04:13 . 2015-03-11 12:02	34304	----a-w-	c:\windows\SysWow64\atmlib.dll
2015-02-20 04:12 . 2015-03-11 12:02	25600	----a-w-	c:\windows\SysWow64\lpk.dll
2015-02-20 03:29 . 2015-03-11 12:02	372224	----a-w-	c:\windows\system32\atmfd.dll
2015-02-20 03:09 . 2015-03-11 12:02	299008	----a-w-	c:\windows\SysWow64\atmfd.dll
2015-02-20 03:06 . 2015-03-11 12:01	2724864	----a-w-	c:\windows\system32\mshtml.tlb
2015-02-20 03:05 . 2015-03-11 12:01	4096	----a-w-	c:\windows\system32\ieetwcollectorres.dll
2015-02-20 02:50 . 2015-03-11 12:01	66560	----a-w-	c:\windows\system32\iesetup.dll
2015-02-20 02:49 . 2015-03-11 12:01	48640	----a-w-	c:\windows\system32\ieetwproxystub.dll
2015-02-20 02:49 . 2015-03-11 12:01	584192	----a-w-	c:\windows\system32\vbscript.dll
2015-02-20 02:48 . 2015-03-11 12:01	2886144	----a-w-	c:\windows\system32\iertutil.dll
2015-02-20 02:47 . 2015-03-11 12:01	88064	----a-w-	c:\windows\system32\MshtmlDac.dll
2015-02-20 02:41 . 2015-03-11 12:01	54784	----a-w-	c:\windows\system32\jsproxy.dll
2015-02-20 02:40 . 2015-03-11 12:01	34304	----a-w-	c:\windows\system32\iernonce.dll
2015-02-20 02:36 . 2015-03-11 12:01	633856	----a-w-	c:\windows\system32\ieui.dll
2015-02-20 02:35 . 2015-03-11 12:01	144384	----a-w-	c:\windows\system32\ieUnatt.exe
2015-02-20 02:35 . 2015-03-11 12:01	114688	----a-w-	c:\windows\system32\ieetwcollector.exe
2015-02-20 02:34 . 2015-03-11 12:01	814080	----a-w-	c:\windows\system32\jscript9diag.dll
2015-02-20 02:32 . 2015-03-11 12:01	6035456	----a-w-	c:\windows\system32\jscript9.dll
2015-02-20 02:26 . 2015-03-11 12:01	968704	----a-w-	c:\windows\system32\MsSpellCheckingFacility.exe
2015-02-20 02:22 . 2015-03-11 12:01	2724864	----a-w-	c:\windows\SysWow64\mshtml.tlb
2015-02-20 02:22 . 2015-03-11 12:01	490496	----a-w-	c:\windows\system32\dxtmsft.dll
2015-02-20 02:13 . 2015-03-11 12:01	77824	----a-w-	c:\windows\system32\JavaScriptCollectionAgent.dll
2015-02-20 02:09 . 2015-03-11 12:01	503296	----a-w-	c:\windows\SysWow64\vbscript.dll
2015-02-20 02:08 . 2015-03-11 12:01	62464	----a-w-	c:\windows\SysWow64\iesetup.dll
2015-02-20 02:08 . 2015-03-11 12:01	199680	----a-w-	c:\windows\system32\msrating.dll
2015-02-20 02:08 . 2015-03-11 12:01	47616	----a-w-	c:\windows\SysWow64\ieetwproxystub.dll
2015-02-20 02:06 . 2015-03-11 12:01	64000	----a-w-	c:\windows\SysWow64\MshtmlDac.dll
2015-02-20 02:05 . 2015-03-11 12:01	316928	----a-w-	c:\windows\system32\dxtrans.dll
2015-02-20 01:56 . 2015-03-11 12:01	115712	----a-w-	c:\windows\SysWow64\ieUnatt.exe
2015-02-20 01:56 . 2015-03-11 12:01	620032	----a-w-	c:\windows\SysWow64\jscript9diag.dll
2015-02-20 01:49 . 2015-03-11 12:01	718848	----a-w-	c:\windows\system32\ie4uinit.exe
2015-02-20 01:49 . 2015-03-11 12:01	801280	----a-w-	c:\windows\system32\msfeeds.dll
2015-02-20 01:47 . 2015-03-11 12:01	1359360	----a-w-	c:\windows\system32\mshtmlmedia.dll
2015-02-20 01:46 . 2015-03-11 12:01	2125824	----a-w-	c:\windows\system32\inetcpl.cpl
2015-02-20 01:43 . 2015-03-11 12:01	14398976	----a-w-	c:\windows\system32\ieframe.dll
2015-02-20 01:41 . 2015-03-11 12:01	60416	----a-w-	c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2015-02-20 01:30 . 2015-03-11 12:01	4300288	----a-w-	c:\windows\SysWow64\jscript9.dll
2015-02-20 01:28 . 2015-03-11 12:01	2358784	----a-w-	c:\windows\system32\wininet.dll
2015-02-20 01:24 . 2015-03-11 12:01	2052608	----a-w-	c:\windows\SysWow64\inetcpl.cpl
2015-02-20 01:23 . 2015-03-11 12:01	1155072	----a-w-	c:\windows\SysWow64\mshtmlmedia.dll
2015-02-20 01:16 . 2015-03-11 12:01	1548288	----a-w-	c:\windows\system32\urlmon.dll
2015-02-20 01:03 . 2015-03-11 12:01	800768	----a-w-	c:\windows\system32\ieapfltr.dll
2015-02-20 01:01 . 2015-03-11 12:01	1888256	----a-w-	c:\windows\SysWow64\wininet.dll
2015-02-13 05:22 . 2015-03-11 12:01	14177280	----a-w-	c:\windows\system32\shell32.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files (x86)\Steam\steam.exe" [2015-05-11 2888384]
"EADM"="c:\program files (x86)\Origin\Origin.exe" [2015-01-28 3619160]
"Akamai NetSession Interface"="c:\users\Dima\AppData\Local\Akamai\netsession_win.exe" [2014-10-29 4673432]
"Dxtory Update Checker 2.0"="c:\program files (x86)\ExKode\Dxtory2.0\UpdateChecker.exe" [2010-10-17 93696]
"\\DIMA-PC\EPSON SX210 Series"="c:\windows\system32\spool\DRIVERS\x64\3\E_IATIFDE.EXE" [2008-11-05 223232]
"GoogleChromeAutoLaunch_74AB638E1E27FA41128D672CA46F567E"="c:\program files (x86)\Google\Chrome\Application\chrome.exe" [2015-04-28 812872]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SuiteTray"="c:\program files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [2011-04-02 340848]
"EgisTecPMMUpdate"="c:\program files (x86)\EgisTec IPS\PmmUpdate.exe" [2011-03-29 408432]
"EgisUpdate"="c:\program files (x86)\EgisTec IPS\EgisUpdate.exe" [2011-03-29 202608]
"BackupManagerTray"="c:\program files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" [2011-04-24 297280]
"SDTray"="c:\program files (x86)\Spybot - Search & Destroy 2\SDTray.exe" [2014-06-24 4101576]
"Raptr"="c:\program files (x86)\Raptr\raptrstub.exe" [2015-03-25 55568]
"StartCCC"="c:\program files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2014-11-20 767176]
"DivXMediaServer"="c:\program files (x86)\DivX\DivX Media Server\DivXMediaServer.exe" [2014-11-17 448856]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2014-01-10 1861968]
"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2015-03-30 3978600]
"AVMWlanClient"="c:\program files (x86)\avmwlanstick\FRITZWLANMini.exe" [2012-08-21 933888]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"IsMyWinLockerReboot"="msiexec.exe" [2010-11-21 73216]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\3.8.150\SSScheduler.exe [2014-4-9 332016]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute	REG_MULTI_SZ   	autocheck autochk *\0\0sdnclean64.exe
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R1 qrnfd_1_10_0_13;qrnfd_1_10_0_13;c:\windows\system32\drivers\qrnfd_1_10_0_13.sys;c:\windows\SYSNATIVE\drivers\qrnfd_1_10_0_13.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 ftb;ftb;c:\windows\ftb.exe;c:\windows\ftb.exe [x]
R2 HiPatchService;Hi-Rez Studios Authenticate and Update Service;c:\program files (x86)\Hi-Rez Studios\HiPatchService.exe;c:\program files (x86)\Hi-Rez Studios\HiPatchService.exe [x]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\progra~2\mcafee\SITEAD~1\mcsacore.exe;c:\progra~2\mcafee\SITEAD~1\mcsacore.exe [x]
R2 mftb;mftb;c:\windows\mftb.exe;c:\windows\mftb.exe [x]
R2 SDScannerService;Spybot-S&D 2 Scanner Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 avmeject;AVM Eject;c:\windows\system32\drivers\avmeject.sys;c:\windows\SYSNATIVE\drivers\avmeject.sys [x]
R3 BRDriver64_1_3_3_E02B25FC;BRDriver64_1_3_3_E02B25FC;c:\programdata\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys;c:\programdata\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [x]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNATIVE\drivers\EagleX64.sys [x]
R3 EasyAntiCheat;EasyAntiCheat;c:\windows\system32\EasyAntiCheat.exe;c:\windows\SYSNATIVE\EasyAntiCheat.exe [x]
R3 EgisTec Ticket Service;EgisTec Ticket Service;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [x]
R3 GameKB;SHARKOON Skiller;c:\windows\system32\drivers\GameKB.sys;c:\windows\SYSNATIVE\drivers\GameKB.sys [x]
R3 hxsyol;hxsyol;c:\aeriagames\AuraKingdom\avital\hxsy64.sys;c:\aeriagames\AuraKingdom\avital\hxsy64.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\3.8.150\McCHSvc.exe;c:\program files\McAfee Security Scan\3.8.150\McCHSvc.exe [x]
R3 MotioninJoyXFilter;MotioninJoy Virtual Xinput device Filter Driver;c:\windows\system32\DRIVERS\MijXfilt.sys;c:\windows\SYSNATIVE\DRIVERS\MijXfilt.sys [x]
R3 netr28x;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28x.sys;c:\windows\SYSNATIVE\DRIVERS\netr28x.sys [x]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des;c:\windows\SYSNATIVE\GameMon.des [x]
R3 Origin Client Service;Origin Client Service;c:\program files (x86)\Origin\OriginClientService.exe;c:\program files (x86)\Origin\OriginClientService.exe [x]
R3 PDF Architect 2;PDF Architect 2;c:\program files (x86)\PDF Architect 2\ws.exe;c:\program files (x86)\PDF Architect 2\ws.exe [x]
R3 pdfforge CrashHandler;pdfforge CrashHandler;c:\program files (x86)\PDF Architect 2\crash-handler-ws.exe;c:\program files (x86)\PDF Architect 2\crash-handler-ws.exe [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\System32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
R3 Survarium-Steam Update Service;Survarium-Steam Update Service;c:\program files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium_service.exe Survarium-Steam;c:\program files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium_service.exe Survarium-Steam [x]
R3 taphss6;Anchorfree HSS VPN Adapter;c:\windows\system32\DRIVERS\taphss6.sys;c:\windows\SYSNATIVE\DRIVERS\taphss6.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe;c:\program files\Intel\TurboBoost\TurboBoost.exe [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 xhunter1;xhunter1;c:\windows\xhunter1.sys;c:\windows\xhunter1.sys [x]
R3 XSplit_Dummy;XSplit  Stream  Audio  Renderer;c:\windows\system32\drivers\xspltspk.sys;c:\windows\SYSNATIVE\drivers\xspltspk.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDFilter.sys [x]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDNServ.sys [x]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDVDisk.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe;c:\program files (x86)\Acer\Registration\GREGsvc.exe [x]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Live Updater Service;Live Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe;c:\program files\Acer\Acer Updater\UpdaterService.exe [x]
S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [x]
S2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe;c:\program files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [x]
S2 PDF Architect 2 Creator;PDF Architect 2 Creator;c:\program files (x86)\PDF Architect 2\creator-ws.exe;c:\program files (x86)\PDF Architect 2\creator-ws.exe [x]
S2 RalinkRegistryWriter64;Ralink Registry Writer 64;c:\program files (x86)\Ralink\Common\RaRegistry64.exe;c:\program files (x86)\Ralink\Common\RaRegistry64.exe [x]
S2 SDUpdateService;Spybot-S&D 2 Updating Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [x]
S2 SDWSCService;Spybot-S&D 2 Security Center Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [x]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys;c:\windows\SYSNATIVE\DRIVERS\TurboB.sys [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 fwlanusb5;FRITZ!WLAN N v2;c:\windows\system32\DRIVERS\fwlanusb5.sys;c:\windows\SYSNATIVE\DRIVERS\fwlanusb5.sys [x]
S3 NisSrv;Microsoft-Netzwerkinspektion;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2015-05-12 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-15 19:15]
.
2015-05-11 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-10-07 14:30]
.
2015-05-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-10-07 14:30]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IntelTBRunOnce"="wscript.exe" [2013-10-12 168960]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-03-10 11785832]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2015-01-30 1332296]
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = about:blank
uLocal Page = c:\windows\system32\blank.htm
uDefault_Search_URL = hxxp://www.google.com
mDefault_Search_URL = www.google.com
mDefault_Page_URL = about:blank
mStart Page = about:blank
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = www.google.com
uInternet Settings,ProxyOverride = <local>
uSearchAssistant = www.google.com
mCustomizeSearch = hxxp://www.bing.com/search?q={searchTerms}
mSearchAssistant = hxxp://www.bing.com/search?q={searchTerms}
Trusted Zone: aeriagames.com
FF - ProfilePath - c:\users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKCU-Run-GameTracker - c:\program files (x86)\GameTracker\GTLite.exe
Wow6432Node-HKLM-Run-gmsd_de_485 - (no file)
Wow6432Node-HKLM-Run-gmsd_de_497 - (no file)
c:\users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk - c:\programdata\{b3779435-d2fb-f000-b377-79435d2f50d7}\hqghumeaylnlf.exe /startup
Notify-SDWinLogon - SDWinLogon.dll
BHO-{10921475-03CE-4E04-90CE-E2E7EF20C814} - c:\program files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll
Toolbar-Locked - (no file)
HKLM-Run-3D BubbleSound - c:\program files\BubbleSound\3D BubbleSound.exe
AddRemove-Battlelog Web Plugins - c:\program files (x86)\Battlelog Web Plugins\uninstall.exe
AddRemove-SpellForce - c:\progra~2\JoWooD\SPELLF~1\UNWISE.EXE
AddRemove-Akamai - c:\users\Dima\AppData\Local\Akamai\uninstall.exe
AddRemove-UnityWebPlayer - c:\users\Dima\AppData\Local\Unity\WebPlayer\Uninstall.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_17_0_0_169_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_17_0_0_169_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_17_0_0_169_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_17_0_0_169_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_169.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.17"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_169.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_169.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_169.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2015-05-12  13:00:31
ComboFix-quarantined-files.txt  2015-05-12 11:00
.
Vor Suchlauf: 20 Verzeichnis(se), 488.874.655.744 Bytes frei
Nach Suchlauf: 26 Verzeichnis(se), 488.137.469.952 Bytes frei
.
- - End Of File - - 9A16E55ACA390805FD338BFF70BE0050
A36C5E4F47E84449FF07ED3517B43A31

FRST

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-05-2015
Ran by Dima (administrator) on DIMAS-PC on 12-05-2015 13:03:29
Running from C:\Users\Dima\Desktop\Downloads
Loaded Profiles: Dima (Available profiles: Dima)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 2\creator-ws.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe
(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11785832 2011-03-10] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1332296 2015-01-30] (Microsoft Corporation)
HKLM\...\Run: [3D BubbleSound] => "C:\Program Files\BubbleSound\3D BubbleSound.exe"
HKLM-x32\...\Run: [SuiteTray] => C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [340848 2011-04-02] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisTecPMMUpdate] => C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [408432 2011-03-29] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisUpdate] => C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [202608 2011-03-29] (Egis Technology Inc.)
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [297280 2011-04-24] (NTI Corporation)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55568 2015-03-25] (Raptr, Inc)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-11-17] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-03-30] (LogMeIn Inc.)
HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [933888 2012-08-21] (AVM Berlin)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2888384 2015-05-12] (Valve Corporation)
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3619160 2015-01-28] (Electronic Arts)
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Dima\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-30] (Akamai Technologies, Inc.)
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Dxtory Update Checker 2.0] => C:\Program Files (x86)\ExKode\Dxtory2.0\UpdateChecker.exe [93696 2010-10-17] (Dxtory Software)
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [\\DIMA-PC\EPSON SX210 Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFDE.EXE [223232 2008-11-05] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [GoogleChromeAutoLaunch_74AB638E1E27FA41128D672CA46F567E] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [812872 2015-04-28] (Google Inc.)
HKU\S-1-5-18\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2014-08-23]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-221738678-620704744-704572411-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:63783;https=127.0.0.1:63783
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll No File
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
BHO-x32: PDF Architect Helper -> {691B33B0-B86E-47F3-81C7-56E4FE3B929C} -> C:\Program Files (x86)\PDF Architect 2\creator-ie-helper.dll [2014-10-10] (pdfforge GmbH)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28] (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation)
Toolbar: HKLM-x32 - PDF Architect Toolbar - {DEEB13D7-CEA9-45FB-B77C-E039BEC85221} - C:\Program Files (x86)\PDF Architect 2\creator-ie-plugin.dll [2014-10-10] (pdfforge GmbH)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll [2014-09-01] (EA Digital Illusions CE AB)
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-28] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2013-09-08] (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-11-12] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll [2014-06-24] (Adobe Systems, Inc.)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2014-11-21] (DivX, LLC)
FF Plugin-x32: @esn/npbattlelog,version=2.3.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll No File
FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll [2014-09-01] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-28] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation)
FF Plugin-x32: @mcafee.com/SAFFPlugin -> C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll No File
FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2013-09-08] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npnxgameEU.dll [2014-11-12] (Nexon)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll [2014-10-10] (pdfforge GmbH)
FF Plugin HKU\S-1-5-21-221738678-620704744-704572411-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Dima\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS)
FF Extension: jid0XZn6pYCdV3ANrfYigxlyyGDrxAMjetpack - C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\Extensions\jid0-XZn6pYCdV3ANrfYigxlyyGDrxAM@jetpack [2015-05-11]
FF Extension: 9b9d2aaaae264447a7a1633a32b19ddd - C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\Extensions\{9b9d2aaa-ae26-4447-a7a1-633a32b19ddd} [2015-05-11]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF HKLM-x32\...\Firefox\Extensions: [pdf_architect_2_conv@pdfarchitect.org] - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension
FF Extension: PDF Architect 2 Creator - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension [2015-02-26]
FF HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]

Chrome: 
=======
CHR Profile: C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-05-08]
CHR Extension: (Google Docs) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-05-08]
CHR Extension: (Google Drive) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-05-08]
CHR Extension: (YouTube) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-05-08]
CHR Extension: (Google Search) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-05-08]
CHR Extension: (Google Sheets) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-05-08]
CHR Extension: (Bookmark Manager) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-08]
CHR Extension: (iilcekgoelpgecpjnnoikhbleipnjdhf) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\iilcekgoelpgecpjnnoikhbleipnjdhf [2015-05-11]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-08]
CHR Extension: (ljppcglljemjablfhgjdhndlpallobpl) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljppcglljemjablfhgjdhndlpallobpl [2015-05-11]
CHR Extension: (Google Wallet) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR Extension: (pioclpoplcdbaefihamjohnefbikjilc) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2015-05-10]
CHR Extension: (Gmail) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-08]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [237864 2015-03-21] (EasyAntiCheat Ltd)
S2 ftb; c:\windows\ftb.exe [417792 2015-05-05] () [File not signed]
R2 GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [29696 2011-05-26] (Acer Incorporated) [File not signed]
S2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2015-02-16] (Hi-Rez Studios) [File not signed]
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-03-30] (LogMeIn, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
S2 mftb; c:\windows\mftb.exe [408576 2015-05-05] () [File not signed]
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2015-01-30] (Microsoft Corporation)
R2 MSMQ; C:\Windows\system32\mqsvc.exe [9216 2009-07-14] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366512 2015-01-30] (Microsoft Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5128944 2013-11-19] (INCA Internet Co., Ltd.) [File not signed]
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256832 2011-04-24] (NTI Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910640 2015-03-02] (Electronic Arts)
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-10-10] (pdfforge GmbH)
R2 PDF Architect 2 Creator; C:\Program Files (x86)\PDF Architect 2\creator-ws.exe [738856 2014-10-10] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-10-10] (pdfforge GmbH)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-10-11] ()
S2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
S3 Survarium-Steam Update Service; C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium_service.exe [76408 2015-04-03] ()
S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2012-04-25] (AVM Berlin)
R3 fwlanusb5; C:\Windows\System32\DRIVERS\fwlanusb5.sys [982784 2012-08-21] (AVM GmbH)
S3 GameKB; C:\Windows\System32\drivers\GameKB.sys [27648 2012-05-11] () [File not signed]
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [274696 2014-11-15] (Microsoft Corporation)
R3 MQAC; C:\Windows\System32\drivers\mqac.sys [189440 2009-07-14] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124560 2014-11-15] (Microsoft Corporation)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-05-17] (Anchorfree Inc.)
S3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2014-07-02] (SplitmediaLabs Limited)
S3 BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [X]
U3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 hxsyol; \??\C:\AeriaGames\AuraKingdom\avital\hxsy64.sys [X]
S1 qrnfd_1_10_0_13; system32\drivers\qrnfd_1_10_0_13.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-12 13:00 - 2015-05-12 13:00 - 00030620 _____ () C:\ComboFix.txt
2015-05-12 12:46 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2015-05-12 12:46 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2015-05-12 12:46 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-05-12 12:46 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-05-12 12:46 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-05-12 12:46 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2015-05-12 12:46 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2015-05-12 12:46 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2015-05-12 12:41 - 2015-05-12 13:00 - 00000000 ____D () C:\Qoobox
2015-05-12 12:40 - 2015-05-12 12:59 - 00000000 ____D () C:\Windows\erdnt
2015-05-12 12:38 - 2015-05-12 12:39 - 05623215 ____R (Swearware) C:\Users\Dima\Desktop\ComboFix.exe
2015-05-11 23:00 - 2015-05-11 23:00 - 00000000 ____D () C:\Users\Dima\AppData\Local\Eclipse
2015-05-11 22:03 - 2015-05-12 13:03 - 00000000 ____D () C:\FRST
2015-05-11 20:59 - 2015-05-11 20:59 - 00000000 ____D () C:\Users\Dima\AppData\Local\My Games
2015-05-10 18:44 - 2015-05-10 18:44 - 00000000 ____D () C:\Users\Dima\AppData\Local\Origin
2015-05-10 18:05 - 2015-05-10 18:05 - 00001117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-05-10 18:05 - 2015-05-10 18:05 - 00001105 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-05-10 18:05 - 2015-05-10 18:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-05-10 16:15 - 2015-05-10 16:15 - 00000000 ____D () C:\Users\Dima\AppData\Local\EgisTec IPS
2015-05-10 16:14 - 2015-05-10 16:14 - 00066432 _____ () C:\Users\Dima\AppData\Local\GDIPFONTCACHEV1.DAT
2015-05-10 16:13 - 2015-05-11 23:46 - 00000000 ____D () C:\Users\Dima\AppData\Local\LogMeIn Hamachi
2015-05-10 16:13 - 2015-05-10 16:13 - 00000000 ____D () C:\Users\Dima\AppData\Local\LogMeIn
2015-05-10 16:12 - 2015-05-10 16:12 - 00000000 ____D () C:\Users\Dima\AppData\Local\VirtualStore
2015-05-10 16:07 - 2015-05-11 23:41 - 00000000 ____D () C:\AdwCleaner
2015-05-08 20:43 - 2015-05-08 20:43 - 00000000 ____D () C:\Users\Dima\AppData\Local\openvr
2015-05-08 20:42 - 2015-05-08 20:42 - 00000000 ____D () C:\Users\Dima\AppData\Local\Steam
2015-05-08 19:44 - 2015-05-08 19:44 - 00000000 ____D () C:\Users\Dima\AppData\Local\Macromedia
2015-05-08 19:43 - 2015-05-09 22:34 - 00000000 ____D () C:\Users\Dima\AppData\Local\Mozilla
2015-05-08 18:41 - 2015-05-08 18:41 - 00000000 ____D () C:\Users\Dima\AppData\Local\ATI
2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieUserList
2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieSiteList
2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieBrowserModeList
2015-05-08 14:49 - 2015-05-08 14:49 - 00000000 ____D () C:\ProgramData\Kikblaster
2015-05-08 14:33 - 2015-05-08 19:54 - 00000000 ____D () C:\Program Files (x86)\Edu App
2015-05-08 14:20 - 2015-05-08 14:52 - 00000000 ____D () C:\Users\Dima\AppData\Local\00000000-1431094823-0000-0000-D43D7EBF2FB4
2015-05-08 14:16 - 2015-05-08 14:16 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webTinstMKTN84_01009.Wdf
2015-05-05 21:45 - 2015-05-08 14:45 - 00000000 ___HD () C:\ProgramData\ftb
2015-05-05 21:13 - 2015-05-08 21:13 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-05-05 21:12 - 2015-05-05 21:12 - 00631296 _____ () C:\Windows\ftb.dat
2015-05-05 21:12 - 2015-05-05 21:12 - 00417792 _____ () C:\Windows\ftb.exe
2015-05-05 21:12 - 2015-05-05 21:12 - 00408576 _____ () C:\Windows\mftb.exe
2015-05-04 20:34 - 2015-05-04 20:34 - 00059505 _____ () C:\Users\Dima\Documents\ts3_clientui-win64-1407159763-2015-05-04 20_34_27.843240.dmp
2015-04-26 16:02 - 2015-04-26 16:02 - 00000000 ____D () C:\Users\Dima\Documents\DFO
2015-04-25 20:20 - 2015-04-25 20:20 - 00001734 _____ () C:\Users\Public\Desktop\Dungeon Fighter Online.lnk
2015-04-25 20:20 - 2015-04-25 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\neople
2015-04-25 20:20 - 2015-04-25 20:20 - 00000000 ____D () C:\Neople
2015-04-25 15:57 - 2015-04-26 13:15 - 00000000 ____D () C:\Users\Dima\Documents\DragonNest
2015-04-24 12:20 - 2015-05-10 18:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-20 13:37 - 2015-04-20 13:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FRITZ!WLAN
2015-04-20 13:37 - 2015-04-20 13:37 - 00000000 ____D () C:\Program Files (x86)\avmwlanstick
2015-04-20 13:36 - 2015-04-20 13:36 - 00000000 ____D () C:\Users\Dima\AVM_Driver
2015-04-20 13:36 - 2012-04-25 01:00 - 00014120 _____ (AVM Berlin) C:\Windows\system32\Drivers\avmeject.sys
2015-04-20 00:51 - 2015-04-20 00:51 - 00002956 _____ () C:\Windows\avmacc1.log
2015-04-20 00:51 - 2012-07-12 02:00 - 00480632 _____ (AVM Berlin) C:\Windows\instwcli.dex
2015-04-20 00:45 - 2015-04-20 00:45 - 00003216 _____ () C:\Windows\System32\Tasks\{35EE529B-2794-4708-8B79-567E126A4A7F}
2015-04-20 00:05 - 2015-04-20 13:36 - 00001479 _____ () C:\Windows\avmsetup.log
2015-04-20 00:05 - 2015-04-20 13:36 - 00000490 _____ () C:\Windows\avmadd32.log
2015-04-20 00:05 - 2015-04-20 00:54 - 00197887 _____ () C:\Windows\avmacc.log
2015-04-20 00:05 - 2015-04-20 00:44 - 00000000 ____D () C:\Program Files (x86)\AVM_update
2015-04-19 20:43 - 2015-04-19 20:43 - 00001906 _____ () C:\Users\Dima\Desktop\EliteDekaron.lnk
2015-04-19 20:43 - 2015-04-19 20:43 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Elite Dekaron
2015-04-19 20:40 - 2015-04-19 21:03 - 00000000 ____D () C:\Program Files (x86)\Elite Dekaron
2015-04-19 20:40 - 2015-04-19 20:40 - 00000000 ____D () C:\Windows\Elite Dekaron
2015-04-19 14:20 - 2015-04-19 14:20 - 00005872 _____ () C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1
2015-04-19 14:20 - 2015-04-19 14:20 - 00005872 _____ () C:\Users\Dima\AppData\Roaming\DXbbq3U
2015-04-16 16:36 - 2015-04-16 16:43 - 00000000 ___SD () C:\Windows\system32\GWX
2015-04-16 16:36 - 2015-04-16 16:36 - 00000000 ___SD () C:\Windows\SysWOW64\GWX
2015-04-15 21:14 - 2015-04-15 21:14 - 18178736 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2015-04-14 20:39 - 2015-03-25 05:24 - 03298816 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 02553856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-14 20:39 - 2015-03-25 05:23 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-14 20:39 - 2015-03-25 05:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-14 20:39 - 2015-03-25 05:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-14 20:39 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-04-14 20:39 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-04-14 20:39 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-04-14 20:39 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-04-14 20:39 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-04-14 20:39 - 2015-03-23 05:25 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-14 20:39 - 2015-03-23 05:25 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-14 20:39 - 2015-03-23 05:24 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-14 20:39 - 2015-03-23 05:24 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-14 20:39 - 2015-03-23 05:24 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-14 20:39 - 2015-03-23 05:24 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-04-14 20:39 - 2015-03-23 05:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-14 20:39 - 2015-03-23 05:17 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-14 20:39 - 2015-03-17 07:22 - 05557696 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-14 20:39 - 2015-03-17 07:22 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-04-14 20:39 - 2015-03-17 07:22 - 00095672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-04-14 20:39 - 2015-03-17 07:19 - 01727904 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-14 20:39 - 2015-03-17 07:17 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-04-14 20:39 - 2015-03-17 07:17 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-04-14 20:39 - 2015-03-17 07:16 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-04-14 20:39 - 2015-03-17 07:16 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-04-14 20:39 - 2015-03-17 07:15 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-04-14 20:39 - 2015-03-17 07:15 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-04-14 20:39 - 2015-03-17 07:15 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-04-14 20:39 - 2015-03-17 07:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-04-14 20:39 - 2015-03-17 07:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-04-14 20:39 - 2015-03-17 06:59 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-04-14 20:39 - 2015-03-17 06:56 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-04-14 20:39 - 2015-03-17 06:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-04-14 20:39 - 2015-03-17 06:56 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-04-14 20:39 - 2015-03-10 05:25 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-04-14 20:39 - 2015-03-10 05:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-04-14 20:39 - 2015-03-10 05:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-04-14 20:39 - 2015-03-10 05:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-04-14 20:39 - 2015-03-05 07:12 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-04-14 20:39 - 2015-03-05 06:05 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-04-14 20:38 - 2015-03-17 07:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-04-14 20:38 - 2015-03-17 07:16 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-04-14 20:38 - 2015-03-17 07:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-04-14 20:38 - 2015-03-17 07:13 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-04-14 20:38 - 2015-03-17 07:13 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-04-14 20:38 - 2015-03-17 06:57 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-04-14 20:38 - 2015-03-17 06:56 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-04-14 20:38 - 2015-03-17 06:56 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-04-14 20:38 - 2015-03-17 06:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-04-14 20:38 - 2015-03-17 06:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-04-14 20:38 - 2015-03-17 06:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-04-14 20:38 - 2015-03-17 06:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 05:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-04-14 20:38 - 2015-03-17 05:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-04-14 20:38 - 2015-03-17 05:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 05:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-04-14 20:38 - 2015-03-04 06:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2015-04-14 20:38 - 2015-03-04 06:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-14 20:38 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2015-04-14 20:38 - 2015-02-25 05:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-14 18:28 - 2015-04-14 18:28 - 00004387 _____ () C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU
2015-04-14 18:28 - 2015-04-14 18:28 - 00004387 _____ () C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-12 13:00 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2015-05-12 12:57 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2015-05-12 12:52 - 2013-08-15 21:16 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-12 12:41 - 2009-07-14 06:45 - 00028928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-12 12:41 - 2009-07-14 06:45 - 00028928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-12 12:40 - 2013-10-04 17:11 - 00000000 ____D () C:\ProgramData\Package Cache
2015-05-12 12:40 - 2013-08-08 20:19 - 01841210 _____ () C:\Windows\WindowsUpdate.log
2015-05-12 12:23 - 2013-11-06 17:55 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Raptr
2015-05-12 12:22 - 2013-08-15 14:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-11 23:56 - 2013-08-08 21:08 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-05-11 23:50 - 2013-08-09 06:11 - 00699416 _____ () C:\Windows\system32\perfh007.dat
2015-05-11 23:50 - 2013-08-09 06:11 - 00149556 _____ () C:\Windows\system32\perfc007.dat
2015-05-11 23:50 - 2009-07-14 07:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-11 23:44 - 2013-08-15 21:16 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-11 23:43 - 2013-08-17 15:43 - 00000000 ____D () C:\Program Files (x86)\Origin
2015-05-11 23:42 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-05-11 23:42 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-11 23:42 - 2009-07-14 06:51 - 00121033 _____ () C:\Windows\setupact.log
2015-05-11 23:33 - 2014-01-07 19:34 - 01832960 ___SH () C:\Users\Dima\Desktop\Thumbs.db
2015-05-11 22:59 - 2015-04-10 17:41 - 00000000 ____D () C:\Users\Dima\Desktop\eclipse
2015-05-11 22:28 - 2013-09-21 18:06 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\TS3Client
2015-05-10 18:44 - 2013-08-17 15:43 - 00000000 ____D () C:\ProgramData\Origin
2015-05-10 18:40 - 2010-11-21 05:47 - 00399402 _____ () C:\Windows\PFRO.log
2015-05-10 18:19 - 2014-11-14 00:10 - 00000000 ____D () C:\Users\Dima\Desktop\lqobqwkv.default
2015-05-10 16:42 - 2014-10-05 15:02 - 00000000 ____D () C:\Users\Dima\AppData\Local\Adobe
2015-05-10 16:15 - 2013-12-20 13:37 - 00000000 ____D () C:\Users\Dima\AppData\Local\Akamai
2015-05-10 16:12 - 2013-08-08 15:36 - 00001419 _____ () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-05-10 16:10 - 2014-11-26 23:57 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WorldofTanks
2015-05-08 21:41 - 2013-12-30 15:03 - 00000000 ____D () C:\Program Files (x86)\7-Zip
2015-05-08 21:39 - 2013-12-18 15:08 - 00000000 ____D () C:\Program Files (x86)\ACASystems
2015-05-08 18:40 - 2013-11-02 02:16 - 00000000 ____D () C:\Users\Dima\Desktop\Neuer Ordner
2015-05-08 18:40 - 2013-08-15 21:16 - 00000000 ____D () C:\Users\Dima\AppData\Local\Google
2015-05-08 14:52 - 2014-11-30 22:57 - 00000000 ____D () C:\Users\Dima\AppData\Local\gegl-0.2
2015-05-08 14:52 - 2013-12-14 00:39 - 00000000 ____D () C:\Users\Dima\AppData\Local\Battle.net
2015-05-08 13:16 - 2013-08-15 15:52 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Skype
2015-05-02 22:30 - 2014-11-23 16:19 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\.technic
2015-05-02 22:30 - 2014-08-25 02:48 - 04697768 _____ () C:\Users\Dima\Desktop\TechnicLauncher.exe
2015-05-02 22:28 - 2014-08-09 17:35 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\.minecraft
2015-04-27 16:21 - 2015-02-28 15:34 - 00000000 ____D () C:\Users\Dima\Desktop\Bewerbung
2015-04-20 13:37 - 2014-02-12 19:55 - 00011424 _____ () C:\Windows\avmfwlanci.log
2015-04-20 13:37 - 2014-02-12 19:55 - 00011167 _____ () C:\Windows\AVMInstall.Log
2015-04-20 13:36 - 2014-02-12 19:54 - 00000000 ____D () C:\Windows\AVM_Driver
2015-04-20 13:36 - 2013-08-08 15:34 - 00000000 ____D () C:\Users\Dima
2015-04-20 00:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-04-18 17:38 - 2013-09-13 14:13 - 00000000 ____D () C:\Program Files (x86)\Raptr
2015-04-18 12:26 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat
2015-04-16 16:36 - 2014-12-22 19:12 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-16 16:36 - 2014-05-01 14:38 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-16 16:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-04-16 12:44 - 2014-02-26 15:58 - 00002022 _____ () C:\Users\Dima\monsterhunter.txt
2015-04-15 21:15 - 2013-08-15 14:45 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-04-15 21:15 - 2013-08-15 14:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-04-15 21:15 - 2011-07-25 05:19 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-15 12:54 - 2013-09-09 16:14 - 01593956 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-04-15 12:52 - 2014-10-06 19:31 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-04-15 12:52 - 2011-07-25 05:01 - 00000000 ____D () C:\ProgramData\Skype
2015-04-15 12:51 - 2013-11-11 13:25 - 00000000 ____D () C:\Windows\system32\MRT
2015-04-15 12:45 - 2013-11-11 13:25 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

==================== Files in the root of some directories =======

2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\Dima\AppData\Roaming\DXbbq3U
2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1
2013-11-09 21:45 - 2013-11-09 21:45 - 0000004 _____ () C:\Users\Dima\AppData\Roaming\steam_md4.dat
2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr
2014-11-27 23:59 - 2014-11-29 01:59 - 0000068 _____ () C:\Users\Dima\AppData\Roaming\WB.CFG
2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU
2013-08-08 21:05 - 2013-08-08 21:05 - 0000654 _____ () C:\ProgramData\ArcadeDeluxe5.log

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2011-07-25 04:31

==================== End Of Log ============================

--- --- ---

Bootsektor · 12.05.2015, 21:04

Hallo,

du hast dir da etwas sehr interessantes eingefangen. Ich brauche nachher unbedingt die Quarantäne von Combofix und auch von FRST. Wir machen so weiter:

Wie sieht es mit der Adware nach dieser Aktion aus?

Schritt 1

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

S2 mftb; c:\windows\mftb.exe [408576 2015-05-05] () [File not signed]
S2 ftb; c:\windows\ftb.exe [417792 2015-05-05] () [File not signed]
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
FF Extension: 9b9d2aaaae264447a7a1633a32b19ddd - C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\Extensions\{9b9d2aaa-ae26-4447-a7a1-633a32b19ddd} [2015-05-11]
CHR Extension: (iilcekgoelpgecpjnnoikhbleipnjdhf) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\iilcekgoelpgecpjnnoikhbleipnjdhf [2015-05-11]
CHR Extension: (ljppcglljemjablfhgjdhndlpallobpl) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljppcglljemjablfhgjdhndlpallobpl [2015-05-11]
CHR Extension: (pioclpoplcdbaefihamjohnefbikjilc) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2015-05-10]
Task: {0A4748C0-2366-4860-8A2A-22C28DD4F8FB} - System32\Tasks\DXbbq3U => C:\Users\Dima\AppData\Roaming\DXbbq3U.exe [2015-04-20] () <==== ATTENTION
Task: {2D0DD0EF-6F02-4AE5-81DA-8F7F44E9D915} - System32\Tasks\Games\UpdateCheck_S-1-5-21-221738678-620704744-704572411-1000
Task: {30516B1D-88D3-4A14-AD49-963F8AA1FCEE} - System32\Tasks\vj57Vb6Rn1O3ezZ75nEr => C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe [2015-04-20] () <==== ATTENTION
Task: {36C3C2EA-97D0-4CA5-BAA5-C0D3544BE0C8} - System32\Tasks\WfqE0YhY0IU => C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe [2015-04-20] () <==== ATTENTION
Task: {691D2C19-7551-41BB-BDBA-38CC87FF53F4} - System32\Tasks\{3D950745-404D-482F-B2F2-F7290B610680} => pcalua.exe -a C:\Users\Dima\AppData\Roaming\webssearches\UninstallManager.exe -c  -ptid=irs <==== ATTENTION
Task: {D390B225-5BC3-4867-B035-FE45B82F2599} - System32\Tasks\IT7Lg6DU6w1 => C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1.exe [2015-04-20] () <==== ATTENTION
Task: C:\Windows\Tasks\DXbbq3U.job => C:\Users\Dima\AppData\Roaming\DXbbq3U.exe <==== ATTENTION
Task: C:\Windows\Tasks\IT7Lg6DU6w1.job => C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1.exe <==== ATTENTION
Task: C:\Windows\Tasks\vj57Vb6Rn1O3ezZ75nEr.job => C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe <==== ATTENTION
Task: C:\Windows\Tasks\WfqE0YhY0IU.job => C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe <==== ATTENTION
c:\windows\ftb.exe
c:\windows\mftb.exe
C:\ProgramData\ftb
C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
C:\Windows\ftb.dat
C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1
C:\Users\Dima\AppData\Roaming\DXbbq3U
C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU
C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr
C:\Users\Dima\AppData\Roaming\WB.CFG
C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU
C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe 
C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe
C:\Users\Dima\AppData\Roaming\webssearches
C:\Users\Dima\AppData\Roaming\DXbbq3U.exe
RemoveProxy:
Emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Schritt 2
Starte noch einmal FRST.

Setze den Haken bei addition.txt und drücke auf Scan.
Wenn der Scan abgeschlossen ist, werden zwei neue Logfiles FRST.txt und addition.txt erstellt und auf dem Desktop (oder in dem Verzeichnis in dem FRST liegt) gespeichert.
Poste den Inhalt dieser Logfiles bitte hier in deinen Thread.

kriegnes · 12.05.2015, 21:51

Die Adware ist immernoch da.Abe der Bildschirm wird nicht mehr so extrem wie davor vollgespammt. Vielleicht ist das aber auch nur grade Zufall.
Fixlog.txt

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 09-05-2015
Ran by Dima at 2015-05-12 22:38:28 Run:1
Running from C:\Users\Dima\Desktop\Downloads
Loaded Profiles: Dima (Available profiles: Dima)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
S2 mftb; c:\windows\mftb.exe [408576 2015-05-05] () [File not signed]
S2 ftb; c:\windows\ftb.exe [417792 2015-05-05] () [File not signed]
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
FF Extension: 9b9d2aaaae264447a7a1633a32b19ddd - C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\Extensions\{9b9d2aaa-ae26-4447-a7a1-633a32b19ddd} [2015-05-11]
CHR Extension: (iilcekgoelpgecpjnnoikhbleipnjdhf) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\iilcekgoelpgecpjnnoikhbleipnjdhf [2015-05-11]
CHR Extension: (ljppcglljemjablfhgjdhndlpallobpl) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljppcglljemjablfhgjdhndlpallobpl [2015-05-11]
CHR Extension: (pioclpoplcdbaefihamjohnefbikjilc) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2015-05-10]
Task: {0A4748C0-2366-4860-8A2A-22C28DD4F8FB} - System32\Tasks\DXbbq3U => C:\Users\Dima\AppData\Roaming\DXbbq3U.exe [2015-04-20] () <==== ATTENTION
Task: {2D0DD0EF-6F02-4AE5-81DA-8F7F44E9D915} - System32\Tasks\Games\UpdateCheck_S-1-5-21-221738678-620704744-704572411-1000
Task: {30516B1D-88D3-4A14-AD49-963F8AA1FCEE} - System32\Tasks\vj57Vb6Rn1O3ezZ75nEr => C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe [2015-04-20] () <==== ATTENTION
Task: {36C3C2EA-97D0-4CA5-BAA5-C0D3544BE0C8} - System32\Tasks\WfqE0YhY0IU => C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe [2015-04-20] () <==== ATTENTION
Task: {691D2C19-7551-41BB-BDBA-38CC87FF53F4} - System32\Tasks\{3D950745-404D-482F-B2F2-F7290B610680} => pcalua.exe -a C:\Users\Dima\AppData\Roaming\webssearches\UninstallManager.exe -c  -ptid=irs <==== ATTENTION
Task: {D390B225-5BC3-4867-B035-FE45B82F2599} - System32\Tasks\IT7Lg6DU6w1 => C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1.exe [2015-04-20] () <==== ATTENTION
Task: C:\Windows\Tasks\DXbbq3U.job => C:\Users\Dima\AppData\Roaming\DXbbq3U.exe <==== ATTENTION
Task: C:\Windows\Tasks\IT7Lg6DU6w1.job => C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1.exe <==== ATTENTION
Task: C:\Windows\Tasks\vj57Vb6Rn1O3ezZ75nEr.job => C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe <==== ATTENTION
Task: C:\Windows\Tasks\WfqE0YhY0IU.job => C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe <==== ATTENTION
c:\windows\ftb.exe
c:\windows\mftb.exe
C:\ProgramData\ftb
C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
C:\Windows\ftb.dat
C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1
C:\Users\Dima\AppData\Roaming\DXbbq3U
C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU
C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr
C:\Users\Dima\AppData\Roaming\WB.CFG
C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU
C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe 
C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe
C:\Users\Dima\AppData\Roaming\webssearches
C:\Users\Dima\AppData\Roaming\DXbbq3U.exe
RemoveProxy:
Emptytemp:
         
*****************

mftb => Service deleted successfully.
ftb => Service deleted successfully.
C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
C:\Windows\SysWOW64\GroupPolicy\GPT.ini => Moved successfully.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\Extensions\{9b9d2aaa-ae26-4447-a7a1-633a32b19ddd} => Moved successfully.
C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\iilcekgoelpgecpjnnoikhbleipnjdhf => Moved successfully.
C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljppcglljemjablfhgjdhndlpallobpl => Moved successfully.
C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0A4748C0-2366-4860-8A2A-22C28DD4F8FB} => Key not found. 
C:\Windows\System32\Tasks\DXbbq3U not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DXbbq3U => Key not found. 
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{2D0DD0EF-6F02-4AE5-81DA-8F7F44E9D915}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2D0DD0EF-6F02-4AE5-81DA-8F7F44E9D915}" => Key deleted successfully.
C:\Windows\System32\Tasks\Games\UpdateCheck_S-1-5-21-221738678-620704744-704572411-1000 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Games\UpdateCheck_S-1-5-21-221738678-620704744-704572411-1000" => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{30516B1D-88D3-4A14-AD49-963F8AA1FCEE} => Key not found. 
C:\Windows\System32\Tasks\vj57Vb6Rn1O3ezZ75nEr not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\vj57Vb6Rn1O3ezZ75nEr => Key not found. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{36C3C2EA-97D0-4CA5-BAA5-C0D3544BE0C8} => Key not found. 
C:\Windows\System32\Tasks\WfqE0YhY0IU not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WfqE0YhY0IU => Key not found. 
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{691D2C19-7551-41BB-BDBA-38CC87FF53F4}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{691D2C19-7551-41BB-BDBA-38CC87FF53F4}" => Key deleted successfully.
C:\Windows\System32\Tasks\{3D950745-404D-482F-B2F2-F7290B610680} => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{3D950745-404D-482F-B2F2-F7290B610680}" => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D390B225-5BC3-4867-B035-FE45B82F2599} => Key not found. 
C:\Windows\System32\Tasks\IT7Lg6DU6w1 not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\IT7Lg6DU6w1 => Key not found. 
C:\Windows\Tasks\DXbbq3U.job not found.
C:\Windows\Tasks\IT7Lg6DU6w1.job not found.
C:\Windows\Tasks\vj57Vb6Rn1O3ezZ75nEr.job not found.
C:\Windows\Tasks\WfqE0YhY0IU.job not found.
c:\windows\ftb.exe => Moved successfully.
c:\windows\mftb.exe => Moved successfully.
C:\ProgramData\ftb => Moved successfully.
C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7 => Moved successfully.
C:\Windows\ftb.dat => Moved successfully.
C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1 => Moved successfully.
C:\Users\Dima\AppData\Roaming\DXbbq3U => Moved successfully.
C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU => Moved successfully.
C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr => Moved successfully.
C:\Users\Dima\AppData\Roaming\WB.CFG => Moved successfully.
"C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU" => File/Directory not found.
"C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe" => File/Directory not found.
"C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe" => File/Directory not found.
"C:\Users\Dima\AppData\Roaming\webssearches" => File/Directory not found.
"C:\Users\Dima\AppData\Roaming\DXbbq3U.exe" => File/Directory not found.

========= RemoveProxy: =========

"HKU\S-1-5-21-221738678-620704744-704572411-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => value deleted successfully.
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value deleted successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value deleted successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value deleted successfully.
HKU\S-1-5-21-221738678-620704744-704572411-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value deleted successfully.
HKU\S-1-5-21-221738678-620704744-704572411-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value deleted successfully.


========= End of RemoveProxy: =========

EmptyTemp: => Removed 1.4 GB temporary data.


The system needed a reboot. 

==== End of Fixlog 22:42:21 ====

FRST.txt

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-05-2015
Ran by Dima (administrator) on DIMAS-PC on 12-05-2015 22:51:42
Running from C:\Users\Dima\Desktop\Downloads
Loaded Profiles: Dima (Available profiles: Dima)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 2\creator-ws.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Akamai Technologies, Inc.) C:\Users\Dima\AppData\Local\Akamai\netsession_win.exe
(Dxtory Software) C:\Program Files (x86)\ExKode\Dxtory2.0\UpdateChecker.exe
(Akamai Technologies, Inc.) C:\Users\Dima\AppData\Local\Akamai\netsession_win.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Don HO don.h@free.fr) C:\Program Files (x86)\Notepad++\notepad++.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe
(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11785832 2011-03-10] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1332296 2015-01-30] (Microsoft Corporation)
HKLM\...\Run: [3D BubbleSound] => "C:\Program Files\BubbleSound\3D BubbleSound.exe"
HKLM-x32\...\Run: [SuiteTray] => C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [340848 2011-04-02] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisTecPMMUpdate] => C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [408432 2011-03-29] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisUpdate] => C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [202608 2011-03-29] (Egis Technology Inc.)
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [297280 2011-04-24] (NTI Corporation)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55568 2015-03-25] (Raptr, Inc)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-11-17] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-03-30] (LogMeIn Inc.)
HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [933888 2012-08-21] (AVM Berlin)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2888384 2015-05-12] (Valve Corporation)
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3619160 2015-01-28] (Electronic Arts)
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Dima\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-30] (Akamai Technologies, Inc.)
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Dxtory Update Checker 2.0] => C:\Program Files (x86)\ExKode\Dxtory2.0\UpdateChecker.exe [93696 2010-10-17] (Dxtory Software)
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [\\DIMA-PC\EPSON SX210 Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFDE.EXE [223232 2008-11-05] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [GoogleChromeAutoLaunch_74AB638E1E27FA41128D672CA46F567E] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [812872 2015-04-28] (Google Inc.)
HKU\S-1-5-18\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2014-08-23]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll No File
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
BHO-x32: PDF Architect Helper -> {691B33B0-B86E-47F3-81C7-56E4FE3B929C} -> C:\Program Files (x86)\PDF Architect 2\creator-ie-helper.dll [2014-10-10] (pdfforge GmbH)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28] (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation)
Toolbar: HKLM-x32 - PDF Architect Toolbar - {DEEB13D7-CEA9-45FB-B77C-E039BEC85221} - C:\Program Files (x86)\PDF Architect 2\creator-ie-plugin.dll [2014-10-10] (pdfforge GmbH)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll [2014-09-01] (EA Digital Illusions CE AB)
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-28] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2013-09-08] (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-11-12] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll [2014-06-24] (Adobe Systems, Inc.)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2014-11-21] (DivX, LLC)
FF Plugin-x32: @esn/npbattlelog,version=2.3.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll No File
FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll [2014-09-01] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-28] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation)
FF Plugin-x32: @mcafee.com/SAFFPlugin -> C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll No File
FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2013-09-08] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npnxgameEU.dll [2014-11-12] (Nexon)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll [2014-10-10] (pdfforge GmbH)
FF Plugin HKU\S-1-5-21-221738678-620704744-704572411-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Dima\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS)
FF Extension: jid0XZn6pYCdV3ANrfYigxlyyGDrxAMjetpack - C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\Extensions\jid0-XZn6pYCdV3ANrfYigxlyyGDrxAM@jetpack [2015-05-11]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF HKLM-x32\...\Firefox\Extensions: [pdf_architect_2_conv@pdfarchitect.org] - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension
FF Extension: PDF Architect 2 Creator - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension [2015-02-26]
FF HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]

Chrome: 
=======
CHR Profile: C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-05-08]
CHR Extension: (Google Docs) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-05-08]
CHR Extension: (Google Drive) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-05-08]
CHR Extension: (YouTube) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-05-08]
CHR Extension: (Google Search) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-05-08]
CHR Extension: (Google Sheets) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-05-08]
CHR Extension: (Bookmark Manager) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-08]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-08]
CHR Extension: (Google Wallet) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR Extension: (Gmail) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-08]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [237864 2015-03-21] (EasyAntiCheat Ltd)
R2 GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [29696 2011-05-26] (Acer Incorporated) [File not signed]
U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2015-02-16] (Hi-Rez Studios) [File not signed]
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-03-30] (LogMeIn, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2015-01-30] (Microsoft Corporation)
R2 MSMQ; C:\Windows\system32\mqsvc.exe [9216 2009-07-14] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366512 2015-01-30] (Microsoft Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5128944 2013-11-19] (INCA Internet Co., Ltd.) [File not signed]
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256832 2011-04-24] (NTI Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910640 2015-03-02] (Electronic Arts)
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-10-10] (pdfforge GmbH)
R2 PDF Architect 2 Creator; C:\Program Files (x86)\PDF Architect 2\creator-ws.exe [738856 2014-10-10] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-10-10] (pdfforge GmbH)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-10-11] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
S3 Survarium-Steam Update Service; C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium_service.exe [76408 2015-04-03] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2012-04-25] (AVM Berlin)
R3 fwlanusb5; C:\Windows\System32\DRIVERS\fwlanusb5.sys [982784 2012-08-21] (AVM GmbH)
S3 GameKB; C:\Windows\System32\drivers\GameKB.sys [27648 2012-05-11] () [File not signed]
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [274696 2014-11-15] (Microsoft Corporation)
R3 MQAC; C:\Windows\System32\drivers\mqac.sys [189440 2009-07-14] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124560 2014-11-15] (Microsoft Corporation)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-05-17] (Anchorfree Inc.)
S3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2014-07-02] (SplitmediaLabs Limited)
S3 BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [X]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 hxsyol; \??\C:\AeriaGames\AuraKingdom\avital\hxsy64.sys [X]
S1 qrnfd_1_10_0_13; system32\drivers\qrnfd_1_10_0_13.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-12 22:45 - 2015-05-12 22:45 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2015-05-12 19:49 - 2015-05-12 19:49 - 00021496 _____ () C:\Users\Dima\Desktop\Tobi ist sexy.odt
2015-05-12 13:00 - 2015-05-12 13:00 - 00030620 _____ () C:\ComboFix.txt
2015-05-12 12:46 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2015-05-12 12:46 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2015-05-12 12:46 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-05-12 12:46 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-05-12 12:46 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-05-12 12:46 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2015-05-12 12:46 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2015-05-12 12:46 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2015-05-12 12:41 - 2015-05-12 13:00 - 00000000 ____D () C:\Qoobox
2015-05-12 12:40 - 2015-05-12 12:59 - 00000000 ____D () C:\Windows\erdnt
2015-05-12 12:38 - 2015-05-12 12:39 - 05623215 ____R (Swearware) C:\Users\Dima\Desktop\ComboFix.exe
2015-05-11 23:00 - 2015-05-12 16:13 - 00000000 ____D () C:\Users\Dima\AppData\Local\Eclipse
2015-05-11 22:03 - 2015-05-12 22:51 - 00000000 ____D () C:\FRST
2015-05-11 20:59 - 2015-05-11 20:59 - 00000000 ____D () C:\Users\Dima\AppData\Local\My Games
2015-05-10 18:44 - 2015-05-10 18:44 - 00000000 ____D () C:\Users\Dima\AppData\Local\Origin
2015-05-10 18:05 - 2015-05-10 18:05 - 00001117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-05-10 18:05 - 2015-05-10 18:05 - 00001105 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-05-10 18:05 - 2015-05-10 18:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-05-10 16:15 - 2015-05-10 16:15 - 00000000 ____D () C:\Users\Dima\AppData\Local\EgisTec IPS
2015-05-10 16:14 - 2015-05-10 16:14 - 00066432 _____ () C:\Users\Dima\AppData\Local\GDIPFONTCACHEV1.DAT
2015-05-10 16:13 - 2015-05-12 22:47 - 00000000 ____D () C:\Users\Dima\AppData\Local\LogMeIn Hamachi
2015-05-10 16:13 - 2015-05-10 16:13 - 00000000 ____D () C:\Users\Dima\AppData\Local\LogMeIn
2015-05-10 16:12 - 2015-05-10 16:12 - 00000000 ____D () C:\Users\Dima\AppData\Local\VirtualStore
2015-05-10 16:07 - 2015-05-11 23:41 - 00000000 ____D () C:\AdwCleaner
2015-05-08 20:43 - 2015-05-08 20:43 - 00000000 ____D () C:\Users\Dima\AppData\Local\openvr
2015-05-08 20:42 - 2015-05-08 20:42 - 00000000 ____D () C:\Users\Dima\AppData\Local\Steam
2015-05-08 19:44 - 2015-05-08 19:44 - 00000000 ____D () C:\Users\Dima\AppData\Local\Macromedia
2015-05-08 19:43 - 2015-05-09 22:34 - 00000000 ____D () C:\Users\Dima\AppData\Local\Mozilla
2015-05-08 18:41 - 2015-05-08 18:41 - 00000000 ____D () C:\Users\Dima\AppData\Local\ATI
2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieUserList
2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieSiteList
2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieBrowserModeList
2015-05-08 14:49 - 2015-05-08 14:49 - 00000000 ____D () C:\ProgramData\Kikblaster
2015-05-08 14:33 - 2015-05-08 19:54 - 00000000 ____D () C:\Program Files (x86)\Edu App
2015-05-08 14:20 - 2015-05-08 14:52 - 00000000 ____D () C:\Users\Dima\AppData\Local\00000000-1431094823-0000-0000-D43D7EBF2FB4
2015-05-08 14:16 - 2015-05-08 14:16 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webTinstMKTN84_01009.Wdf
2015-05-04 20:34 - 2015-05-04 20:34 - 00059505 _____ () C:\Users\Dima\Documents\ts3_clientui-win64-1407159763-2015-05-04 20_34_27.843240.dmp
2015-04-26 16:02 - 2015-04-26 16:02 - 00000000 ____D () C:\Users\Dima\Documents\DFO
2015-04-25 20:20 - 2015-04-25 20:20 - 00001734 _____ () C:\Users\Public\Desktop\Dungeon Fighter Online.lnk
2015-04-25 20:20 - 2015-04-25 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\neople
2015-04-25 20:20 - 2015-04-25 20:20 - 00000000 ____D () C:\Neople
2015-04-25 15:57 - 2015-04-26 13:15 - 00000000 ____D () C:\Users\Dima\Documents\DragonNest
2015-04-24 12:20 - 2015-05-10 18:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-20 13:37 - 2015-04-20 13:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FRITZ!WLAN
2015-04-20 13:37 - 2015-04-20 13:37 - 00000000 ____D () C:\Program Files (x86)\avmwlanstick
2015-04-20 13:36 - 2015-04-20 13:36 - 00000000 ____D () C:\Users\Dima\AVM_Driver
2015-04-20 13:36 - 2012-04-25 01:00 - 00014120 _____ (AVM Berlin) C:\Windows\system32\Drivers\avmeject.sys
2015-04-20 00:51 - 2015-04-20 00:51 - 00002956 _____ () C:\Windows\avmacc1.log
2015-04-20 00:51 - 2012-07-12 02:00 - 00480632 _____ (AVM Berlin) C:\Windows\instwcli.dex
2015-04-20 00:45 - 2015-04-20 00:45 - 00003216 _____ () C:\Windows\System32\Tasks\{35EE529B-2794-4708-8B79-567E126A4A7F}
2015-04-20 00:05 - 2015-04-20 13:36 - 00001479 _____ () C:\Windows\avmsetup.log
2015-04-20 00:05 - 2015-04-20 13:36 - 00000490 _____ () C:\Windows\avmadd32.log
2015-04-20 00:05 - 2015-04-20 00:54 - 00197887 _____ () C:\Windows\avmacc.log
2015-04-20 00:05 - 2015-04-20 00:44 - 00000000 ____D () C:\Program Files (x86)\AVM_update
2015-04-19 20:43 - 2015-04-19 20:43 - 00001906 _____ () C:\Users\Dima\Desktop\EliteDekaron.lnk
2015-04-19 20:43 - 2015-04-19 20:43 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Elite Dekaron
2015-04-19 20:40 - 2015-04-19 21:03 - 00000000 ____D () C:\Program Files (x86)\Elite Dekaron
2015-04-19 20:40 - 2015-04-19 20:40 - 00000000 ____D () C:\Windows\Elite Dekaron
2015-04-16 16:36 - 2015-04-16 16:43 - 00000000 ___SD () C:\Windows\system32\GWX
2015-04-16 16:36 - 2015-04-16 16:36 - 00000000 ___SD () C:\Windows\SysWOW64\GWX
2015-04-15 21:14 - 2015-04-15 21:14 - 18178736 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2015-04-14 20:39 - 2015-03-25 05:24 - 03298816 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 02553856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-14 20:39 - 2015-03-25 05:23 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-14 20:39 - 2015-03-25 05:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-14 20:39 - 2015-03-25 05:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-14 20:39 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-04-14 20:39 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-04-14 20:39 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-04-14 20:39 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-04-14 20:39 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-04-14 20:39 - 2015-03-23 05:25 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-14 20:39 - 2015-03-23 05:25 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-14 20:39 - 2015-03-23 05:24 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-14 20:39 - 2015-03-23 05:24 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-14 20:39 - 2015-03-23 05:24 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-14 20:39 - 2015-03-23 05:24 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-04-14 20:39 - 2015-03-23 05:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-14 20:39 - 2015-03-23 05:17 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-14 20:39 - 2015-03-17 07:22 - 05557696 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-14 20:39 - 2015-03-17 07:22 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-04-14 20:39 - 2015-03-17 07:22 - 00095672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-04-14 20:39 - 2015-03-17 07:19 - 01727904 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-14 20:39 - 2015-03-17 07:17 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-04-14 20:39 - 2015-03-17 07:17 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-04-14 20:39 - 2015-03-17 07:16 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-04-14 20:39 - 2015-03-17 07:16 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-04-14 20:39 - 2015-03-17 07:15 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-04-14 20:39 - 2015-03-17 07:15 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-04-14 20:39 - 2015-03-17 07:15 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-04-14 20:39 - 2015-03-17 07:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-04-14 20:39 - 2015-03-17 07:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-04-14 20:39 - 2015-03-17 06:59 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-04-14 20:39 - 2015-03-17 06:56 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-04-14 20:39 - 2015-03-17 06:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-04-14 20:39 - 2015-03-17 06:56 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-04-14 20:39 - 2015-03-10 05:25 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-04-14 20:39 - 2015-03-10 05:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-04-14 20:39 - 2015-03-10 05:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-04-14 20:39 - 2015-03-10 05:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-04-14 20:39 - 2015-03-05 07:12 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-04-14 20:39 - 2015-03-05 06:05 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-04-14 20:38 - 2015-03-17 07:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-04-14 20:38 - 2015-03-17 07:16 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-04-14 20:38 - 2015-03-17 07:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-04-14 20:38 - 2015-03-17 07:13 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-04-14 20:38 - 2015-03-17 07:13 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-04-14 20:38 - 2015-03-17 06:57 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-04-14 20:38 - 2015-03-17 06:56 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-04-14 20:38 - 2015-03-17 06:56 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-04-14 20:38 - 2015-03-17 06:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-04-14 20:38 - 2015-03-17 06:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-04-14 20:38 - 2015-03-17 06:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-04-14 20:38 - 2015-03-17 06:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 05:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-04-14 20:38 - 2015-03-17 05:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-04-14 20:38 - 2015-03-17 05:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 05:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-04-14 20:38 - 2015-03-04 06:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2015-04-14 20:38 - 2015-03-04 06:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-14 20:38 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2015-04-14 20:38 - 2015-02-25 05:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-12 22:52 - 2013-08-15 21:16 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-12 22:51 - 2013-08-09 06:11 - 00699416 _____ () C:\Windows\system32\perfh007.dat
2015-05-12 22:51 - 2013-08-09 06:11 - 00149556 _____ () C:\Windows\system32\perfc007.dat
2015-05-12 22:51 - 2013-08-08 20:19 - 01872695 _____ () C:\Windows\WindowsUpdate.log
2015-05-12 22:51 - 2009-07-14 07:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-12 22:47 - 2014-01-07 19:34 - 01850368 ___SH () C:\Users\Dima\Desktop\Thumbs.db
2015-05-12 22:47 - 2013-11-06 17:55 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Raptr
2015-05-12 22:47 - 2013-08-17 15:43 - 00000000 ____D () C:\Program Files (x86)\Origin
2015-05-12 22:45 - 2013-08-15 21:16 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-12 22:44 - 2010-11-21 05:47 - 00400638 _____ () C:\Windows\PFRO.log
2015-05-12 22:44 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-12 22:44 - 2009-07-14 06:51 - 00121089 _____ () C:\Windows\setupact.log
2015-05-12 22:38 - 2014-08-24 20:42 - 00000000 ____D () C:\Windows\System32\Tasks\Games
2015-05-12 22:38 - 2013-09-21 18:06 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\TS3Client
2015-05-12 22:38 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2015-05-12 22:38 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2015-05-12 22:14 - 2013-08-15 14:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-12 21:00 - 2013-08-08 21:08 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-05-12 20:59 - 2014-08-09 17:35 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\.minecraft
2015-05-12 16:12 - 2015-04-10 17:41 - 00000000 ____D () C:\Users\Dima\Desktop\eclipse
2015-05-12 13:00 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2015-05-12 12:57 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2015-05-12 12:41 - 2009-07-14 06:45 - 00028928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-12 12:41 - 2009-07-14 06:45 - 00028928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-12 12:40 - 2013-10-04 17:11 - 00000000 ____D () C:\ProgramData\Package Cache
2015-05-11 23:42 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-05-10 18:44 - 2013-08-17 15:43 - 00000000 ____D () C:\ProgramData\Origin
2015-05-10 18:19 - 2014-11-14 00:10 - 00000000 ____D () C:\Users\Dima\Desktop\lqobqwkv.default
2015-05-10 16:42 - 2014-10-05 15:02 - 00000000 ____D () C:\Users\Dima\AppData\Local\Adobe
2015-05-10 16:15 - 2013-12-20 13:37 - 00000000 ____D () C:\Users\Dima\AppData\Local\Akamai
2015-05-10 16:12 - 2013-08-08 15:36 - 00001419 _____ () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-05-10 16:10 - 2014-11-26 23:57 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WorldofTanks
2015-05-08 21:41 - 2013-12-30 15:03 - 00000000 ____D () C:\Program Files (x86)\7-Zip
2015-05-08 21:39 - 2013-12-18 15:08 - 00000000 ____D () C:\Program Files (x86)\ACASystems
2015-05-08 18:40 - 2013-11-02 02:16 - 00000000 ____D () C:\Users\Dima\Desktop\Neuer Ordner
2015-05-08 18:40 - 2013-08-15 21:16 - 00000000 ____D () C:\Users\Dima\AppData\Local\Google
2015-05-08 14:52 - 2014-11-30 22:57 - 00000000 ____D () C:\Users\Dima\AppData\Local\gegl-0.2
2015-05-08 14:52 - 2013-12-14 00:39 - 00000000 ____D () C:\Users\Dima\AppData\Local\Battle.net
2015-05-08 13:16 - 2013-08-15 15:52 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Skype
2015-05-02 22:30 - 2014-11-23 16:19 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\.technic
2015-05-02 22:30 - 2014-08-25 02:48 - 04697768 _____ () C:\Users\Dima\Desktop\TechnicLauncher.exe
2015-04-27 16:21 - 2015-02-28 15:34 - 00000000 ____D () C:\Users\Dima\Desktop\Bewerbung
2015-04-20 13:37 - 2014-02-12 19:55 - 00011424 _____ () C:\Windows\avmfwlanci.log
2015-04-20 13:37 - 2014-02-12 19:55 - 00011167 _____ () C:\Windows\AVMInstall.Log
2015-04-20 13:36 - 2014-02-12 19:54 - 00000000 ____D () C:\Windows\AVM_Driver
2015-04-20 13:36 - 2013-08-08 15:34 - 00000000 ____D () C:\Users\Dima
2015-04-20 00:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-04-18 17:38 - 2013-09-13 14:13 - 00000000 ____D () C:\Program Files (x86)\Raptr
2015-04-18 12:26 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat
2015-04-16 16:36 - 2014-12-22 19:12 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-16 16:36 - 2014-05-01 14:38 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-16 16:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-04-16 12:44 - 2014-02-26 15:58 - 00002022 _____ () C:\Users\Dima\monsterhunter.txt
2015-04-15 21:15 - 2013-08-15 14:45 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-04-15 21:15 - 2013-08-15 14:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-04-15 21:15 - 2011-07-25 05:19 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-15 12:54 - 2013-09-09 16:14 - 01593956 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-04-15 12:52 - 2014-10-06 19:31 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-04-15 12:52 - 2011-07-25 05:01 - 00000000 ____D () C:\ProgramData\Skype
2015-04-15 12:51 - 2013-11-11 13:25 - 00000000 ____D () C:\Windows\system32\MRT
2015-04-15 12:45 - 2013-11-11 13:25 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

==================== Files in the root of some directories =======

2013-11-09 21:45 - 2013-11-09 21:45 - 0000004 _____ () C:\Users\Dima\AppData\Roaming\steam_md4.dat
2013-08-08 21:05 - 2013-08-08 21:05 - 0000654 _____ () C:\ProgramData\ArcadeDeluxe5.log

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2011-07-25 04:31

==================== End Of Log ============================

--- --- ---

kriegnes · 12.05.2015, 21:54

Additions.txt

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-05-2015
Ran by Dima at 2015-05-12 22:52:27
Running from C:\Users\Dima\Desktop\Downloads
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-221738678-620704744-704572411-500 - Administrator - Disabled)
Dima (S-1-5-21-221738678-620704744-704572411-1000 - Administrator - Enabled) => C:\Users\Dima
Gast (S-1-5-21-221738678-620704744-704572411-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-221738678-620704744-704572411-1002 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
ACA Screen Recorder 5.30 (HKLM-x32\...\ACAScreenRecorder_EN_is1) (Version: 5.30 - ACA Systems)
Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.99 - NTI Corporation)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3502 - Acer Incorporated)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3502 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0517.2011 - Acer Incorporated)
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Reader X (10.1.13) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.13 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.)
Agarest: Generations of War (HKLM-x32\...\Steam App 237890) (Version:  - Ghostlight)
Age of Empires II: HD Edition (HKLM-x32\...\Steam App 221380) (Version:  - Hidden Path Entertainment, Ensemble Studios)
AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.36 - Atheros Communications Inc.)
Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team)
Avidemux 2.6 - 64bits (HKLM-x32\...\Avidemux 2.6 - 64bits (64-bit)) (Version: 2.6.8.9046 - )
AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version: 1.2.0.0 - AVM Berlin)
Backup Manager V3 (x32 Version: 3.0.0.99 - NTI Corporation) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.3.2.15221 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.5.1 - EA Digital Illusions CE AB)
Borderlands 2 (HKLM-x32\...\Steam App 49520) (Version:  - Gearbox Software)
Call of Duty 4: Modern Warfare (HKLM-x32\...\Steam App 7940) (Version:  - Infinity Ward)
Call of Duty: Black Ops II - Multiplayer (HKLM-x32\...\Steam App 202990) (Version:  - )
Call of Duty: Black Ops II - Zombies (HKLM-x32\...\Steam App 212910) (Version:  - )
Call of Duty: Black Ops II (HKLM-x32\...\Steam App 202970) (Version:  - Treyarch)
Call of Duty: Ghosts - Multiplayer (HKLM-x32\...\Steam App 209170) (Version:  - )
Call of Duty: Ghosts (HKLM-x32\...\Steam App 209160) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare 3 - Multiplayer (HKLM-x32\...\Steam App 42690) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare 3 (HKLM-x32\...\Steam App 42680) (Version:  - Infinity Ward)
Castle Crashers (HKLM-x32\...\Steam App 204360) (Version:  - The Behemoth)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
clear.fi Client (HKLM-x32\...\{43AAE145-83CF-4C96-9A5E-756CEFCE879F}) (Version: 1.00.3500 - Acer Incorporated)
Combined Community Codec Pack 2013-11-27 (HKLM-x32\...\Combined Community Codec Pack_is1) (Version: 2013.11.27.0 - CCCP Project)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version:  - Valve)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Darksiders II (HKLM-x32\...\Steam App 50650) (Version:  - Vigil Games)
DFO (HKLM-x32\...\{C1E5C0FB-527E-42C6-BCA0-0A37A6124AE4}) (Version: 1.01.0000 - Neople)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.7.0.64 - DivX, LLC)
Dota 2 (HKLM-x32\...\Steam App 570) (Version:  - Valve)
Dragon Nest Europe (HKLM-x32\...\Steam App 258700) (Version:  - Eyedentity Games)
Dungeon Defenders (HKLM-x32\...\Steam App 65800) (Version:  - Trendy Entertainment)
Dxtory version 2.0.128 (HKLM-x32\...\Dxtory2.0_is1) (Version: 2.0.128 - ExKode Co. Ltd.)
Elite Dekaron (HKLM-x32\...\Elite Dekaron1.0) (Version: 1.0 - EliteKingdoms)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - )
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Free YouTube to MP3 Converter version 3.12.20.1230 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.20.1230 - DVDVideoSoft Ltd.)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Gameforge Live 2.0.5 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.5 - Gameforge)
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Facepunch Studios)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Glyph (HKLM-x32\...\Glyph) (Version:  - Trion Worlds, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.135 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Gumboy Tournament (HKLM-x32\...\Steam App 11230) (Version:  - CINEMAX, s.r.o.)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.2.1004 - Intel Corporation)
Java 7 Update 75 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417075FF}) (Version: 7.0.750 - Oracle)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Java SE Development Kit 7 Update 75 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170750}) (Version: 1.7.0.750 - Oracle)
Java SE Development Kit 8 Update 25 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180250}) (Version: 8.0.250.18 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Loadout (HKLM-x32\...\Steam App 208090) (Version:  - Edge of Reality)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.328 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.328 - LogMeIn, Inc.) Hidden
LOLReplay (HKLM-x32\...\LOLReplay) (Version: 0.8.9.11 - www.leaguereplays.com)
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.7.205.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Might & Magic: Duel of Champions (HKLM-x32\...\Steam App 256410) (Version:  - Ubisoft Quebec)
MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)
Mozilla Firefox 37.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.2 (x86 de)) (Version: 37.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.2 - Mozilla)
MyWinLocker (Version: 4.0.14.25 - Egis Technology Inc.) Hidden
MyWinLocker 4 (x32 Version: 4.0.14.25 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.15 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 4.0.14.15 - Egis Technology Inc.) Hidden
Neverwinter (HKLM-x32\...\Steam App 109600) (Version:  - Cryptic Studios)
newsXpresso (HKLM-x32\...\InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}) (Version: 1.0.0.40 - esobi Inc.)
newsXpresso (x32 Version: 1.0.0.40 - esobi Inc.) Hidden
Nosgoth (HKLM-x32\...\Steam App 200110) (Version: 150120.100528 - Square Enix Ltd)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)
NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.8942 - NTI Corporation)
NTI Media Maker 9 (x32 Version: 9.0.2.8942 - NTI Corporation) Hidden
NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.3.1.4482 - Electronic Arts, Inc.)
paint.net (HKLM\...\{141BA46D-2D1F-4DA6-9448-B847334585C0}) (Version: 4.0.4 - dotPDN LLC)
PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.51.17865 - pdfforge GmbH)
PDF Architect 2 Create Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden
PDF Architect 2 Edit Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden
PDF Architect 2 View Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.0.2 - pdfforge)
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Pokemon Online 2.4.1 (HKLM-x32\...\{2C08D7E7-9EE1-4A08-AFE0-745F02DCD6A4}_is1) (Version:  - Dreambelievers)
Pokémon Trading Card Game Online (HKLM-x32\...\{B0952280-3DF0-4AA9-9599-092D5E8D36AD}) (Version: 2.24.1 - The Pokémon Company International)
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Ralink RT2860 Wireless LAN Card (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 1.5.6.0 - Ralink)
Raptr (HKLM-x32\...\Raptr) (Version:  - )
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6329 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30123 - Realtek Semiconductor Corp.)
Serious Sam 3: BFE (HKLM-x32\...\Steam App 41070) (Version:  - Croteam)
Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version:  - 2K Games, Inc.)
SIW 2013 Home Edition (HKLM-x32\...\{AB67580-257C-45FF-B8F4-C8C30682091A}_is1) (Version: 2013.05.14 - Topala Software Solutions)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 2.0.2574.0 - Hi-Rez Studios)
Source SDK Base 2006 (HKLM-x32\...\Steam App 215) (Version:  - Valve)
SpellForce (HKLM-x32\...\SpellForce) (Version:  - )
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Survarium (HKLM-x32\...\Steam App 355840) (Version:  - Vostok Games)
Survarium-Steam (HKLM-x32\...\{A3D9343D-77CD-4bf4-A47A-F87B3BE985B4}_is1) (Version: 0.27d - )
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
System Requirements Lab CYRI (HKLM-x32\...\{E362724E-9320-4946-AF34-874E7B6B2927}) (Version: 6.0.7.0 - Husdawg, LLC)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.12 - TeamSpeak Systems GmbH)
TIPP10 Version 2.1.0 (HKLM-x32\...\TIPP10_is1) (Version:  - (c) 2006-2011, Tom Thielicke IT Solutions)
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel)
Unity (HKLM-x32\...\Unity) (Version: 4.6.1f1 - Unity Technologies ApS)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Vindictus EU (HKLM-x32\...\Vindictus EU) (Version:  - )
VLC media player 2.1.1 (HKLM\...\VLC media player) (Version: 2.1.1 - VideoLAN)
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3503 - Acer Incorporated)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
WinRAR 5.00 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)
YGOPro DevPro Version 1.9.7 r2 (HKLM-x32\...\{3CF2634F-3F38-4DD3-9201-CB2FE6B5FF23}_is1) (Version: 1.9.7 r2 - YGOPro DevPro Online)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

01-05-2015 14:43:01 Windows Update
05-05-2015 16:18:48 Windows Update
08-05-2015 20:00:02 Windows Update
12-05-2015 12:46:24 ComboFix created restore point

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2014-09-21 15:27 - 00000860 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
::1 localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {15731A0E-D960-4E94-9E60-DACD297E3193} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {1860A38F-8939-478A-BF5C-F565A480142F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {1D4EC24B-2C6F-4F04-8F3E-6AA90BAED5D2} - System32\Tasks\{A10EA19B-8B09-454D-B360-CA92A1D17DBD} => pcalua.exe -a C:\Users\Dima\Desktop\InstallIW4M(1).exe -d C:\Users\Dima\Desktop
Task: {276BF61D-668E-4313-BA37-702F352555A9} - System32\Tasks\Adobe Reader Speed Launcher => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2014-12-03] (Adobe Systems Incorporated)
Task: {2B46497E-052E-4882-879A-2CED38AE75F5} - System32\Tasks\{6B05723E-8DB6-495D-A0DA-ECA4FC2E26D7} => C:\Program Files (x86)\WeGame\wegame.exe
Task: {54E1645E-EDBD-4280-B2FF-13D3BBEC2047} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-07] (Google Inc.)
Task: {5975092F-1EFE-4D6C-A337-025C0E67059F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)
Task: {5B6F25FF-1AB6-4306-AF5F-150B752505F5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-07] (Google Inc.)
Task: {ADDA105F-5269-41EB-BE7A-FADC87447563} - System32\Tasks\{153E695E-4162-4A7B-8004-BCBAF85CE618} => pcalua.exe -a C:\Users\Dima\AVM_Driver\FWLAN\setup.exe -d C:\Users\Dima\AVM_Driver\FWLAN
Task: {B0E56CFC-54EA-49E5-AEE6-544EE780094B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15] (Adobe Systems Incorporated)
Task: {C4630A3F-B5F1-4159-9F2B-8EF55530D99B} - System32\Tasks\Adobe ARM => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {C618B53C-0F59-4601-8B52-1D81C275086B} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)
Task: {C7F562CC-8836-44FC-8085-91BD492874BE} - System32\Tasks\{35EE529B-2794-4708-8B79-567E126A4A7F} => pcalua.exe -a C:\Users\Dima\Desktop\Downloads\avm_fritz!wlan_usb_stick_x64_build_100906.exe -d C:\Users\Dima\Desktop\Downloads
Task: {D021483F-10CB-41B4-8816-109CDA214F59} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {D216A597-8DFB-49AE-BB0C-69D9574172C8} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {D9E5BB12-DEEF-4673-A22C-7A60AF737292} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {E66F9E32-E05D-43A5-8A61-1251E464ABF9} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2013-09-02 13:14 - 2014-10-11 21:02 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-01-10 07:26 - 2014-01-10 07:26 - 01861968 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
2011-04-24 03:29 - 2011-04-24 03:29 - 00465640 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll
2011-04-24 03:29 - 2011-04-24 03:29 - 01081664 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll
2011-04-24 03:29 - 2011-04-24 03:29 - 00125760 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll
2014-11-09 03:42 - 2014-05-13 13:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2014-11-09 03:42 - 2014-05-13 13:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2014-11-09 03:42 - 2014-05-13 13:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2014-11-09 03:42 - 2012-08-23 11:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2014-11-09 03:42 - 2012-04-03 18:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2014-01-10 07:28 - 2014-01-10 07:28 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2014-10-21 22:56 - 2014-10-21 22:56 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\9b1cac8d98bd69d3e56a26ff2f96f266\IsdiInterop.ni.dll
2011-07-25 04:42 - 2011-01-13 02:56 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2011-07-18 23:07 - 2011-07-18 23:07 - 00014336 _____ () C:\Program Files (x86)\Notepad++\plugins\NppExport.dll
2014-01-07 01:42 - 2014-01-07 01:42 - 01611264 _____ () C:\Program Files (x86)\Notepad++\plugins\NppFTP.dll
2015-04-15 21:14 - 2015-04-15 21:14 - 16863920 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00087040 _____ () C:\Program Files (x86)\Raptr\_ctypes.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00043008 _____ () C:\Program Files (x86)\Raptr\_socket.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00805376 _____ () C:\Program Files (x86)\Raptr\_ssl.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 05812736 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtGui.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00067584 _____ () C:\Program Files (x86)\Raptr\sip.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 01662464 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtCore.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00494592 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtNetwork.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00096256 _____ () C:\Program Files (x86)\Raptr\win32api.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00110592 _____ () C:\Program Files (x86)\Raptr\pywintypes26.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00010240 _____ () C:\Program Files (x86)\Raptr\select.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00356864 _____ () C:\Program Files (x86)\Raptr\_hashlib.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00036352 _____ () C:\Program Files (x86)\Raptr\win32process.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00111104 _____ () C:\Program Files (x86)\Raptr\win32file.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00044544 _____ () C:\Program Files (x86)\Raptr\_sqlite3.pyd
2011-02-15 20:17 - 2011-02-15 20:17 - 00417501 _____ () C:\Program Files (x86)\Raptr\sqlite3.dll
2010-11-23 00:57 - 2010-11-23 00:57 - 00167936 _____ () C:\Program Files (x86)\Raptr\win32gui.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00313856 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtWebKit.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00127488 _____ () C:\Program Files (x86)\Raptr\pyexpat.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00009216 _____ () C:\Program Files (x86)\Raptr\winsound.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00354304 _____ () C:\Program Files (x86)\Raptr\pythoncom26.dll
2010-11-23 00:57 - 2010-11-23 00:57 - 00016384 _____ () C:\Program Files (x86)\Raptr\win32trace.pyd
2014-08-14 02:37 - 2014-08-14 02:37 - 00113171 _____ () C:\Program Files (x86)\Raptr\libvlc.dll
2014-08-14 02:37 - 2014-08-14 02:37 - 02396691 _____ () C:\Program Files (x86)\Raptr\libvlccore.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00583680 _____ () C:\Program Files (x86)\Raptr\unicodedata.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00141312 _____ () C:\Program Files (x86)\Raptr\gobject._gobject.pyd
2014-06-18 02:56 - 2014-06-18 02:56 - 02717595 _____ () C:\Program Files (x86)\Raptr\heliotrope._purple.pyd
2011-02-15 20:17 - 2011-02-15 20:17 - 01213633 _____ () C:\Program Files (x86)\Raptr\libxml2-2.dll
2010-11-23 01:06 - 2010-11-23 01:06 - 00055808 _____ () C:\Program Files (x86)\Raptr\zlib1.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 00495680 _____ () C:\Program Files (x86)\Raptr\plugins\libaim.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 01183699 _____ () C:\Program Files (x86)\Raptr\liboscar.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 00483306 _____ () C:\Program Files (x86)\Raptr\plugins\libicq.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00655356 _____ () C:\Program Files (x86)\Raptr\plugins\libirc.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 01306387 _____ () C:\Program Files (x86)\Raptr\plugins\libmsn.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 00565461 _____ () C:\Program Files (x86)\Raptr\plugins\libxmpp.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 01640221 _____ () C:\Program Files (x86)\Raptr\libjabber.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 00506276 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoo.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 01053730 _____ () C:\Program Files (x86)\Raptr\libymsg.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00497782 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoojp.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00603326 _____ () C:\Program Files (x86)\Raptr\plugins\ssl-nss.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00474199 _____ () C:\Program Files (x86)\Raptr\plugins\ssl.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Classes\exefile:  <===== ATTENTION!

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-221738678-620704744-704572411-1000\...\aeriagames.com -> hxxps://aeriagames.com
IE trusted site: HKU\S-1-5-21-221738678-620704744-704572411-1000\...\aeriagames.com -> hxxp://aeriagames.com


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-221738678-620704744-704572411-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Ralink Wireless Utility.lnk => C:\Windows\pss\Ralink Wireless Utility.lnk.CommonStartup
MSCONFIG\startupreg: Aeria Ignite => "C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe" silent
MSCONFIG\startupreg: Overwolf => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent
MSCONFIG\startupreg: Raptr => C:\PROGRA~2\Raptr\raptrstub.exe --startup

==================== FirewallRules (whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

FirewallRules: [{78594C1C-0D50-4158-BE4B-630F903AD614}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{6FBF251F-BD39-4F99-9B43-11228600FA75}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
FirewallRules: [{D2661B1C-FB14-4488-85B6-C9F0F671AC26}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
FirewallRules: [{2C171432-29A8-41AE-B4FC-C8A1B17AA814}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{5AB70EC2-290C-47AF-93E6-2FF6583923AE}] => (Allow) LPort=2869
FirewallRules: [{E223E5D1-C91F-43A7-BAF4-034AF2D39963}] => (Allow) LPort=1900
FirewallRules: [{87113CB6-D031-4465-A7DA-1190F21F5789}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{A6A9391B-02D1-49D7-ADC4-9186A84936CB}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{57B9C597-A0EB-408F-856B-FA683C8132A3}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{714CDBAF-5604-42B3-B700-E8038F5DF945}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [TCP Query User{06F842FE-DDFA-4FCC-AE92-5F69EEE0F652}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{3661892A-DE75-4580-91A0-F9FBF1799DF3}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{5765CABA-404A-44EF-8227-7422B4001117}C:\program files (x86)\dragon's prophet\dp_x64.exe] => (Allow) C:\program files (x86)\dragon's prophet\dp_x64.exe
FirewallRules: [UDP Query User{4AB4E404-C83C-479E-AE15-ED70B9717177}C:\program files (x86)\dragon's prophet\dp_x64.exe] => (Allow) C:\program files (x86)\dragon's prophet\dp_x64.exe
FirewallRules: [{D8B75AC5-DB8B-4A3C-A379-08351FDB3A8A}] => (Block) C:\program files (x86)\dragon's prophet\dp_x64.exe
FirewallRules: [{FA2BCC55-2D25-4982-9813-648096C2D014}] => (Block) C:\program files (x86)\dragon's prophet\dp_x64.exe
FirewallRules: [TCP Query User{8BC7D8B9-96BF-48DA-B566-50842124FA04}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe
FirewallRules: [UDP Query User{9C72FA86-27B7-40B5-BCCB-3EE160D8159F}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe
FirewallRules: [TCP Query User{643C5904-C3B1-4EF9-B893-4374ECF6D6DA}C:\program files (x86)\dragon's prophet\launcher.exe] => (Allow) C:\program files (x86)\dragon's prophet\launcher.exe
FirewallRules: [UDP Query User{878B8F84-B88B-4D79-BA68-B0CE420657C1}C:\program files (x86)\dragon's prophet\launcher.exe] => (Allow) C:\program files (x86)\dragon's prophet\launcher.exe
FirewallRules: [{80ED7FA9-4202-4D90-836F-F9F56B4CDAE4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{4399A304-14B2-4EFA-B537-E8EA862FCC80}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{01721DB0-F656-4031-8930-1E8373DC2F7F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3sp.exe
FirewallRules: [{C1942149-4BF2-4840-B25B-0861219DBE3B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3sp.exe
FirewallRules: [{AD3CBC94-9015-4EEC-8010-9730A95F050C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3mp.exe
FirewallRules: [{83C71D22-7773-410B-9C20-2AA7FDCEB96E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3mp.exe
FirewallRules: [{E7F483C4-10DC-4293-ACA0-F3AF08D31698}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x86.exe
FirewallRules: [{27ADCB35-4841-4AF9-B2D7-CC086CF7A903}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\launcher.exe
FirewallRules: [{4933D89C-009A-43A4-A839-09A511BC8DFC}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\launcher.exe
FirewallRules: [{3D9A3A59-0A6C-440B-A6F9-0A90AC0DE8EB}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x64.exe
FirewallRules: [{18241FBC-0EF3-483B-94A6-AC00EEDBF4A7}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x64.exe
FirewallRules: [{C7D1F9D6-5F5C-4788-8D75-AA4662252A42}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x86.exe
FirewallRules: [TCP Query User{4C269EB3-8471-4A9F-8BEC-B534B181151E}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe
FirewallRules: [UDP Query User{721D1BD2-BDD0-4F36-AD02-862EE89713FE}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe
FirewallRules: [TCP Query User{C39306B7-FF57-4794-8B9A-9AA0F84CB38F}C:\users\dima\appdata\local\iw4m\iw4m.dat] => (Block) C:\users\dima\appdata\local\iw4m\iw4m.dat
FirewallRules: [UDP Query User{F8E2B0E8-5340-4B1C-92C0-7DA4FD31E1C2}C:\users\dima\appdata\local\iw4m\iw4m.dat] => (Block) C:\users\dima\appdata\local\iw4m\iw4m.dat
FirewallRules: [TCP Query User{1D2F39A8-48D1-4F21-9CF1-DE335D47F856}C:\users\dima\desktop\iw4m\iw4m.dat] => (Allow) C:\users\dima\desktop\iw4m\iw4m.dat
FirewallRules: [UDP Query User{56A99EDF-B65F-4AFD-AE16-F7D98D17E077}C:\users\dima\desktop\iw4m\iw4m.dat] => (Allow) C:\users\dima\desktop\iw4m\iw4m.dat
FirewallRules: [TCP Query User{2615C76C-73D3-4D32-B632-E52A4C790CC1}C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe
FirewallRules: [UDP Query User{06CB1C71-BEEC-4057-B2DC-C2D7E2D1CA89}C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe
FirewallRules: [{C39F0114-CCFF-4583-BE3C-FCC7B4C918B2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014 Demo\DotP_D14.exe
FirewallRules: [{586F7494-D5E6-431C-B8E6-847AF4C525E9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014 Demo\DotP_D14.exe
FirewallRules: [{76EF348E-4A47-485D-9F6F-4D71F6E38FC1}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{7AE12753-DC2E-4865-9B9B-D3A3E3937C08}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{5951B7B2-DBCA-4C9A-9BF3-C4114D1B65B5}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{65B33429-5091-41E6-A332-E473323DD788}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{1EC8437C-CE05-4587-9FC8-1F694B4C7C17}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe
FirewallRules: [{D0028759-3301-4357-8B2F-C150FE1F51E3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe
FirewallRules: [{FBA36FBF-DB77-4FD8-BC3F-80825FA74D59}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe
FirewallRules: [{5F4313DD-BA94-4F06-A2F0-B409FDAC09F4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe
FirewallRules: [{67D60A7C-0385-470F-9033-87A08C2D2E4F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [{E3735442-0A8C-41A3-9B08-729BC8802589}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [TCP Query User{7090371A-9B4F-4254-84A8-364D16F3A38C}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [UDP Query User{31DB48CF-D0EF-4B0D-AAE6-7AF83D2137D8}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [{A045D731-60D5-4EAD-BF23-1F7796BB34FA}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [{2C6C6FBA-5AFC-4085-8A68-A8C98856386B}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [TCP Query User{3C639DFB-197E-4AFF-A15E-25F14B889032}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat
FirewallRules: [UDP Query User{82EE40F2-E294-4D7B-9D68-1B75AE208E6A}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat
FirewallRules: [{64E878D7-1907-4A7D-A779-834D5D060955}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat
FirewallRules: [{68209FB4-C66B-4D9D-A2F0-2397BE1AB277}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat
FirewallRules: [TCP Query User{00A0BD31-B63A-4C19-93E8-ABCC8DB5C578}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [UDP Query User{8999A7F5-D427-4328-AAB7-ADA1FA9C59BF}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [{8DC4935E-B350-42D1-8FB1-1BB8F7442E36}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [{6CFC61D0-18CC-49EB-B25A-ACAECA62E42B}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [TCP Query User{EBCAC3E3-AA9A-43CF-B83E-98D5FD5EA402}C:\users\dima\desktop\call of duty modern warfare 2\com.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\com.dat
FirewallRules: [UDP Query User{84C7686B-75DF-401A-9FDF-7FC9F6392C7D}C:\users\dima\desktop\call of duty modern warfare 2\com.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\com.dat
FirewallRules: [{049E4550-90D7-4FEF-B6AD-9D74DED0C676}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\com.dat
FirewallRules: [{993FB1C4-D279-479A-90BE-6165BF19AF2E}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\com.dat
FirewallRules: [TCP Query User{9B3FB14A-DDF0-4459-AB11-D96BA0A21D17}C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [UDP Query User{3511F905-74A3-4CF9-9DC4-31D40CA6C995}C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [{4BBE5ECB-54A4-4EF1-BAA9-DBE3F102DC2F}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [{A73E2F4B-AB36-4447-B71B-F28AF0D3F1C5}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [TCP Query User{85EDB327-F94C-42C7-A714-B52DCFABB896}C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [UDP Query User{62DB249D-8E0B-4DE5-866A-A5EC513C7675}C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [{9BA06BB7-A418-404C-A95C-D8E2282C6F57}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [{CED6EBE2-E036-4988-AB13-D5DA803410B6}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [{E546D188-E7DD-44EE-BC95-7E5100A1366C}] => (Allow) C:\Users\Dima\Downloads\HOTO_downloader.exe
FirewallRules: [{60F46196-1CBF-40C0-970C-031D8BAD38B2}] => (Allow) C:\Users\Dima\Downloads\HOTO_downloader.exe
FirewallRules: [{F45FED77-FF04-4879-9444-42D263E00C25}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe
FirewallRules: [{28EC56F2-D3A9-4BCE-A5F5-878749DE6407}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe
FirewallRules: [{A4083F49-4F11-4A32-B91C-2BAF1B4BF058}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe
FirewallRules: [{DF37D091-D2F9-4401-B457-D9030A3919A8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe
FirewallRules: [{1315155E-2220-4EDE-A4A4-755669B75E19}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [{58E7FDFD-4736-4213-9B42-50E885AE99CA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [{31958790-F30C-4BC7-BDAC-03B4DED35B86}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe
FirewallRules: [{CC1F0407-71B4-4EC3-9F37-0E161C8A3322}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe
FirewallRules: [{145C7649-7AA9-42B3-97E8-5B8400173F22}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe
FirewallRules: [{936F4879-D6DB-4A9A-BEB0-D9E0A63B56E1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe
FirewallRules: [{375BA601-C201-4FFF-9426-9DC8362E1D6A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{4EAF1A42-8BB1-49A8-8D54-63BE9EF5E1FC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{E7EEA6A5-9E71-4A90-B195-713ADC4D3DD9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe
FirewallRules: [{C7E9681A-9A64-4D1A-99A8-CFC9168448D5}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe
FirewallRules: [{4352484E-8611-4EF5-92B1-E1134658D51D}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{FAF9A5EF-500F-48F2-9A53-FB0E549E87A7}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{45E32924-61E5-4693-8142-5090A1DACC77}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{B51953D9-7C03-413E-B7EA-B60979F79136}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [TCP Query User{58A3D1CA-EB63-41E1-815B-2C296E72A629}C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe] => (Allow) C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe
FirewallRules: [UDP Query User{42C952D4-1892-4D10-9AB1-1CC3F39A23F3}C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe] => (Allow) C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe
FirewallRules: [{1D455526-6B1D-4BF9-B8BA-00306E25FF9A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [{0DA93301-8BDC-47FD-B914-E2FA1EC7AAFB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [TCP Query User{0729B18F-9796-4FCF-A32F-7A5833FBE815}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\dima\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{A54F5C5A-D8E2-403E-A810-D1615D1E56C6}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\dima\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{9C8EF3A7-3266-4542-B95E-133CF9D2DFA9}C:\programdata\battle.net\agent\agent.beta.2514\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2514\agent.exe
FirewallRules: [UDP Query User{DF8986C4-FB63-4A37-874F-5E4F5AB0B070}C:\programdata\battle.net\agent\agent.beta.2514\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2514\agent.exe
FirewallRules: [TCP Query User{7D2074A4-AA89-4BA7-A7EB-1268C6492AEE}C:\program files (x86)\devpro\devpro.dll] => (Allow) C:\program files (x86)\devpro\devpro.dll
FirewallRules: [UDP Query User{F2B7C119-C5D0-4914-BEBC-71E99254D344}C:\program files (x86)\devpro\devpro.dll] => (Allow) C:\program files (x86)\devpro\devpro.dll
FirewallRules: [{EA7F7B92-3349-4537-9E50-3A0B4D818281}] => (Allow) C:\AeriaGames\AuraKingdom\game.bin
FirewallRules: [{AB6209F8-0BA4-4FC4-803C-1A73FEFDA112}] => (Allow) C:\AeriaGames\AuraKingdom\game.bin
FirewallRules: [TCP Query User{4F600FC8-F54A-49E9-B588-2F547BBA96B1}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe
FirewallRules: [UDP Query User{DF1CE9AE-5217-4393-B737-92F45CBCB4BD}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe
FirewallRules: [{A1A5A428-B18A-4BC9-A553-B1E6989C2A42}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Darksiders 2\Darksiders2.exe
FirewallRules: [{F60EBF1D-B0A7-4638-B48C-AF3F18B494BA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Darksiders 2\Darksiders2.exe
FirewallRules: [{767607AA-81B6-406F-BF1E-B8A81ED847FC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe
FirewallRules: [{35789372-EE60-4ED3-81F9-A81ED3BF2CE4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe
FirewallRules: [{07DE1F4A-0A51-4A63-BF8D-CD9580D92EB6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{5F40E8E8-9EF2-41AA-9414-FBA5770F0A94}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [TCP Query User{744A07AB-09FD-499C-9F04-E01BB0351E8D}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\dima\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{F7498DED-162B-488F-B59F-256A51C6CE71}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\dima\appdata\local\akamai\netsession_win.exe
FirewallRules: [{AEAB3ECF-0BB1-453B-8D1F-476AE01D86A0}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe
FirewallRules: [{8D48AAEF-A0CE-44E7-9024-CA3944E81E7D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe
FirewallRules: [TCP Query User{6CF9A63C-F912-4E3A-8DDA-6D3AC6AF66DF}C:\programdata\battle.net\agent\agent.beta.2638\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2638\agent.exe
FirewallRules: [UDP Query User{5A9CB3D7-8747-407A-97AB-191DBFC43D75}C:\programdata\battle.net\agent\agent.beta.2638\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2638\agent.exe
FirewallRules: [{94644398-7E26-4C3A-BD3D-8AC488A93807}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe
FirewallRules: [{03DDFDE2-264E-4187-85CD-4382D41F4A6C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe
FirewallRules: [{C38A5A06-BB40-4CFC-BA71-87AEC286F6D6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe
FirewallRules: [{CB8BA2E2-B98E-442B-87D9-92EFB85FECAD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe
FirewallRules: [{234100A5-3277-4236-B80F-3BD7A113F330}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe
FirewallRules: [{9472EB6F-9BC9-4FC2-B7B2-45A96212D7C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe
FirewallRules: [{4DDCAB31-D1CA-49D7-83D1-9A7708CA3387}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Loadout\Loadout.exe
FirewallRules: [{50274324-D5E3-4A7D-9551-60285C4D51CE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Loadout\Loadout.exe
FirewallRules: [{505A793E-19FF-4163-85DA-BDD1366147B4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{5D9B037C-78AD-4F93-AFCB-A8BF0480CCCF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{71BA2590-5ED7-4DC0-919C-603D078A17E1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
FirewallRules: [{E3C9045F-0538-43CE-9AC0-B88A7047D12B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
FirewallRules: [{AA27854D-9002-4BB1-AC3B-2B040589990B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{F262DA23-A9A0-45ED-875A-42640AB812FD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{5B584B43-CDC2-482C-A915-51ED708E2BDE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
FirewallRules: [{FBE87CBF-6E5E-443B-BB64-D76E91781977}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
FirewallRules: [TCP Query User{5B78C40B-EF9C-4DE3-B847-DDC0913711FC}C:\program files (x86)\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\tera\tera-launcher.exe
FirewallRules: [UDP Query User{02ADE6C1-8488-448C-9DD6-1D4ABC838F09}C:\program files (x86)\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\tera\tera-launcher.exe
FirewallRules: [{4EC807D8-651B-4EDE-906E-15D8940E045A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{5C43F976-C8BD-461A-8160-E4037DEC5A46}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{91A8DE20-9DBA-43BD-9F4B-DE1B625D0D83}] => (Allow) C:\AeriaGames\EdenEternal-DE\_Launcher.exe
FirewallRules: [{CD8464F5-1D27-4ACC-848F-AD802961AD3D}] => (Allow) C:\AeriaGames\EdenEternal-DE\_Launcher.exe
FirewallRules: [{20FF7205-61B2-44CC-87A6-CCE211D4603C}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{6B725485-B1DC-4646-B9AD-C4E754073AD5}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{EFDADD2B-5B82-4D44-BFF6-7533A33E5D4B}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{EDABDFE1-A779-47FE-A7F2-0BE99128B9D1}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{C864BA6F-6F65-4A53-BACD-5590447E71A3}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{BF9437A3-0AAD-4EF3-9020-8A7EDA18FFFB}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{5EC4813D-F4A5-44A4-99AE-2FEEADC7BD68}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe
FirewallRules: [{5741DE79-8863-4C92-8CA4-43D24ED12E9D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe
FirewallRules: [{7FA5A6CC-69A0-4EF2-9E4E-D36CF4A6FFB1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe
FirewallRules: [{1E27B3D7-EBC5-46D1-A1F4-5150D5FC7ECA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe
FirewallRules: [{7ACB6A7B-1D9F-4159-9E5C-57293DE770B9}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA World\fifaworld.exe
FirewallRules: [{CC579040-BC64-4658-B938-3FC11265DBA0}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA World\fifaworld.exe
FirewallRules: [TCP Query User{466B6D60-FB8E-40F4-9A96-3F6B84C31F10}C:\programdata\battle.net\agent\agent.2787\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.2787\agent.exe
FirewallRules: [UDP Query User{747BD4DC-E6ED-4E9F-889A-E1029B9BD7EC}C:\programdata\battle.net\agent\agent.2787\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.2787\agent.exe
FirewallRules: [{024C2E0F-0F94-4571-AAA1-63A5D32016D2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe
FirewallRules: [{19CDF823-35E4-43AD-8A38-931E02B58B64}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe
FirewallRules: [{EA2378D9-ADC4-4A3E-947C-030BBA9A41B0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Aura Kingdom\game.bin
FirewallRules: [{E3E3914B-6929-4469-A807-4C9FC60B3CA5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Aura Kingdom\game.bin
FirewallRules: [{AB6817F8-474B-413B-B1A1-DB9F05CE61BB}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{8192EF82-EABD-49D0-92CB-1E602FCB2399}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{8E9567B7-FEC3-4B6A-8469-1B65ACAEBCF2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe
FirewallRules: [{9832DDCA-66F8-432C-8B22-60682E5E919E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe
FirewallRules: [TCP Query User{1128027D-DF51-428D-BBF5-261AD7F20EEC}C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe
FirewallRules: [UDP Query User{0D0921EC-8295-44F1-A446-52BAFD8EF6EB}C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe
FirewallRules: [TCP Query User{1FC5CC73-6F52-4B75-8D0B-4753B673D255}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{A5E61E08-5C0A-4EA7-BD2C-D6ACED33386F}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{E290B8F5-DC46-4D43-9E40-A8CFEBD19A8A}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe
FirewallRules: [UDP Query User{4A59CA75-CB6F-46C3-8E3B-D091F44ACDC5}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe
FirewallRules: [{51E7B824-61EF-498A-94AE-826ED3FE5CF2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{B9C59147-9E45-4E11-9B2F-5702A1ACAFA5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{BB70E8F0-DE1E-4EEF-873C-95044B81A8C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [{49C70379-991F-4248-81CB-BA51F9158E4F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [{6BB569B0-D223-4EAB-A4A0-83B776CDA2DD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age2HD\Launcher.exe
FirewallRules: [{D341F20A-E2E0-4320-82A8-3607608AD108}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age2HD\Launcher.exe
FirewallRules: [{757CE32E-DE9A-440C-BAB3-B9F8EF37A2A0}] => (Allow) C:\Users\Dima\Downloads\b9_downloader.exe
FirewallRules: [{ACA68B80-8F45-4E75-B7D3-470AF290871F}] => (Allow) C:\Users\Dima\Downloads\b9_downloader.exe
FirewallRules: [TCP Query User{B5BB55CB-DE77-4080-963B-3A266AC37CE5}C:\programdata\battle.net\agent\agent.3235\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3235\agent.exe
FirewallRules: [UDP Query User{30EBE90E-7ED1-4868-9D3D-50E6D7112675}C:\programdata\battle.net\agent\agent.3235\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3235\agent.exe
FirewallRules: [{1BAA9821-E2DD-48BF-9E27-F6297D2F5116}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [{9C9260ED-7AA0-4AE4-972E-D83A5D097028}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [{EA27D1BB-E05D-4097-97AF-BC7DE8174F52}] => (Allow) C:\Program Files (x86)\Bench\Proxy\proc.exe
FirewallRules: [{953D2DA8-7AEB-4931-BE76-87BDE0ACBC39}] => (Allow) C:\Program Files (x86)\Bench\Proxy\pwdg.exe
FirewallRules: [{91AF5EE1-530D-4D72-A308-BDBA132ABA31}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{AF831DA2-EC4A-4642-915F-DF7CBB2A2CF3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{BBBB3AD6-5EB2-4204-B5AF-9716942ACB1C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
FirewallRules: [{63BB69A1-F607-4FB8-9EDD-1A607AABDA8B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
FirewallRules: [{34F27A20-13E6-46E6-9901-39383CB7F97A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [{DA9D712D-0C9F-441F-A880-FF8D27837E6E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [TCP Query User{A250025F-7CBE-4CAD-93AE-C02E36E841C1}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe
FirewallRules: [UDP Query User{3D207EE9-306F-48FF-8735-CD8CDAFA0490}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe
FirewallRules: [TCP Query User{F7376CA3-FA2C-4F56-9AD8-0A2ADC4927AE}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe
FirewallRules: [UDP Query User{BCBA424F-EDE5-4DFC-8FD5-56BB5666B2F5}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe
FirewallRules: [{7A5EB71C-C724-402F-8557-A92B3BAD628E}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe
FirewallRules: [{AF09CC9B-68D7-404C-B498-D144643C1A54}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe
FirewallRules: [{D56AE5C0-0487-4C87-8284-10DC792A01DE}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe
FirewallRules: [{CB98B3E2-40A1-4A7C-ACCB-56A50C8E3F7B}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe
FirewallRules: [{B3D84AF2-F39E-4E7D-9D7E-FFCD803C1135}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{AB8E5377-F2F7-441D-9A50-434D83F90C0E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{CCA3F085-5CA5-4FEE-9ADD-935183AE6F1C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{9EA1B11A-0179-414A-AFF8-82050C792E6B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{256D7304-2C38-45D1-97DB-71739BA92297}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [{E2070B33-5CCB-46B0-B6CF-4ED92F8AB562}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [{1E69481E-7920-4B4D-9047-B812C456A75A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{A416660E-98DD-4A45-8A5A-C8BBA66A68A3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{72A09F1B-7789-4A3E-B327-FD1D052150FF}] => (Allow) C:\Program Files (x86)\GameforgeLive\gfl_client.exe
FirewallRules: [TCP Query User{2A0CBFD5-23A1-4C20-91ED-B00077755298}C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe
FirewallRules: [UDP Query User{3933DFA8-6EB3-47A1-A4F9-7C3E7BD2ED67}C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe
FirewallRules: [TCP Query User{69CF256B-C011-492C-B7A0-04F509D0D67B}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe
FirewallRules: [UDP Query User{FFEA845F-4BF9-44FF-89AC-628034543D28}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe
FirewallRules: [{7809CF2C-51C3-4520-8BD0-F210B5BBB57B}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [{CE1678FF-6995-415D-ADDC-E165111812E1}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [{2412E622-4FBF-402A-B899-DBC82E5C6B2B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{5817EFF9-3537-4F8B-97F9-2C33716052B4}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{B65003CD-97BF-4394-A2F7-21A3E24DCFB5}] => (Allow) C:\Nexon\Vindictus EU\en-EU\NMService.exe
FirewallRules: [{0CA242B9-DEDD-43C3-9F4C-BADAE74781E9}] => (Allow) C:\Nexon\Vindictus EU\en-EU\NMService.exe
FirewallRules: [TCP Query User{3D2A0F20-56AE-42D0-80DF-E8AC85D00D13}C:\nexon\vindictus eu\en-eu\vindictus.exe] => (Allow) C:\nexon\vindictus eu\en-eu\vindictus.exe
FirewallRules: [UDP Query User{2DFE002E-3069-4DA8-920D-442A029D663E}C:\nexon\vindictus eu\en-eu\vindictus.exe] => (Allow) C:\nexon\vindictus eu\en-eu\vindictus.exe
FirewallRules: [TCP Query User{93A7A5BC-03EA-42A5-AE99-CC30CBDF752F}C:\users\dima\desktop\eclipse\eclipse.exe] => (Allow) C:\users\dima\desktop\eclipse\eclipse.exe
FirewallRules: [UDP Query User{13A19341-79DD-4889-B496-24BB0AA8C4C2}C:\users\dima\desktop\eclipse\eclipse.exe] => (Allow) C:\users\dima\desktop\eclipse\eclipse.exe
FirewallRules: [TCP Query User{95CD7A11-031A-4E37-B3A1-64F53A1F7A75}C:\program files\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{9B60CDE5-BA1E-4E6D-BDF3-C1056F5F8650}C:\program files\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{C4E30886-3358-4A99-BE81-2F5BED09E73D}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [UDP Query User{710835ED-1463-4E58-8DB1-9F37F56C4A0F}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [TCP Query User{C7584B0F-6622-4E1D-8987-9D85C77F36F0}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [UDP Query User{F365D46D-EED4-49F4-93DF-234F94019BB2}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [TCP Query User{63488A2D-8F13-4C4E-8CC0-49944F9372BA}C:\users\dima\desktop\lancraft\lancraft.exe] => (Allow) C:\users\dima\desktop\lancraft\lancraft.exe
FirewallRules: [UDP Query User{EAEC2D64-0B8E-4599-A61B-53F358A64796}C:\users\dima\desktop\lancraft\lancraft.exe] => (Allow) C:\users\dima\desktop\lancraft\lancraft.exe
FirewallRules: [TCP Query User{A91AD53F-87ED-432A-9D7C-0AC95375B702}C:\users\dima\desktop\warcraft\war3.exe] => (Allow) C:\users\dima\desktop\warcraft\war3.exe
FirewallRules: [UDP Query User{CC9DF559-105D-4031-9013-ADF7BC24CFC3}C:\users\dima\desktop\warcraft\war3.exe] => (Allow) C:\users\dima\desktop\warcraft\war3.exe
FirewallRules: [TCP Query User{6E3020FE-2B2A-413D-8EBC-AC0261DDA56B}C:\users\dima\desktop\warcraft\lancraft.exe] => (Allow) C:\users\dima\desktop\warcraft\lancraft.exe
FirewallRules: [UDP Query User{83FC41EC-2250-4389-B57F-7CF1CF138244}C:\users\dima\desktop\warcraft\lancraft.exe] => (Allow) C:\users\dima\desktop\warcraft\lancraft.exe
FirewallRules: [{E762770A-34B1-461E-B15E-FFC052875F0A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\CastleCrashers\castle.exe
FirewallRules: [{32B2CED0-8283-4A5A-8965-FFCB653C38DA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\CastleCrashers\castle.exe
FirewallRules: [TCP Query User{CA917D8D-9E80-4B19-90E8-110407378DDD}C:\program files (x86)\unity\editor\unity.exe] => (Allow) C:\program files (x86)\unity\editor\unity.exe
FirewallRules: [UDP Query User{4A9F69B2-9BB4-4F0E-B34D-4D95E242700A}C:\program files (x86)\unity\editor\unity.exe] => (Allow) C:\program files (x86)\unity\editor\unity.exe
FirewallRules: [{5A44804A-99EB-4C63-8F18-C9310F1C4657}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe
FirewallRules: [{5C90DDB5-DFDC-4BF5-B6D0-B86A95AEE724}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe
FirewallRules: [TCP Query User{DD861486-7A78-460B-9A83-BFA67BC6A454}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [UDP Query User{21543651-AA0C-4F30-B6F4-14C779C5E70B}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [TCP Query User{5C83AE95-A82A-49CA-B905-4EFC8C6961F9}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [UDP Query User{640696E3-D785-4576-883E-596F24E072B3}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [{5880095B-DD8E-4F79-BA8F-727A270A9A7B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dungeon Defenders\Binaries\Win32\DungeonDefenders.exe
FirewallRules: [{A02B8413-228D-4E79-9B24-1B23EEBA9CE2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dungeon Defenders\Binaries\Win32\DungeonDefenders.exe
FirewallRules: [TCP Query User{E5CD1AD8-4898-41F1-880E-C3CCEEF12C49}C:\program files (x86)\secondlifeviewer\slvoice.exe] => (Allow) C:\program files (x86)\secondlifeviewer\slvoice.exe
FirewallRules: [UDP Query User{37F84E6A-EF30-44B7-8E99-DE3F7E7DF7EE}C:\program files (x86)\secondlifeviewer\slvoice.exe] => (Allow) C:\program files (x86)\secondlifeviewer\slvoice.exe
FirewallRules: [TCP Query User{2478D171-94B3-4D1F-8C59-4E8322B8E276}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{28D75031-A654-47AF-802E-4A9A15D5EF3F}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{3A112284-5247-4174-9FB4-B86BFEBD19F9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{B2899169-D59D-4AC1-BBE3-3F3903152981}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{12C4EFF7-DD2B-4A0E-A3A0-98777451B440}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3.exe
FirewallRules: [{4060C2B9-6F65-462B-9221-EEEBCF58BB56}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3.exe
FirewallRules: [{EFA22BC5-7DE3-47F6-8167-289BFDD93178}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3_Unrestricted.exe
FirewallRules: [{C0D1322B-FEBC-4B0A-BD29-158C54B47C3F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3_Unrestricted.exe
FirewallRules: [{13A229AF-4A20-4E5A-B1D5-E4DA450947FA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Gumboy Tournament\gumboytournament.exe
FirewallRules: [{BD506B34-1746-48BC-A17D-29CE55B609BC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Gumboy Tournament\gumboytournament.exe
FirewallRules: [TCP Query User{E9B42C51-F75A-4042-8D09-5FE64A6E0AFD}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe
FirewallRules: [UDP Query User{A47B5394-0D06-4B60-AEAC-F80C6A18EC73}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe
FirewallRules: [{1F0F5A11-9A4F-49CF-8202-86A2DAEB8299}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_launcher.exe
FirewallRules: [{472579C8-4E14-4D30-9C6E-7C1E88FAB3FD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe
FirewallRules: [{09D4FEB7-995B-4579-90DC-1C535713E99A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe
FirewallRules: [{418B6FDA-1046-4E47-AFFC-EC7C31A532E9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe
FirewallRules: [{7199E669-27DE-4BFD-94D5-FDCF6A7C93AA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe
FirewallRules: [{BFF61270-CC5A-432C-A7FB-7D76DC47C782}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium.exe
FirewallRules: [{490B16FF-C2D2-4175-A366-EFDAA08EB979}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium.exe
FirewallRules: [TCP Query User{C9F38270-E9E5-4168-9E99-11073C550934}C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe
FirewallRules: [UDP Query User{6082536E-F697-45B2-969C-5E5CA8E07E06}C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe
FirewallRules: [TCP Query User{5AC0DF45-9E80-410D-A952-1DDA7A565671}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{31F72C84-B935-4C8E-8E1E-6FBDDC891D1C}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe
FirewallRules: [{8EB84DED-EB81-4D74-9575-8282402E2D2E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cryptic Studios\Neverwinter.exe
FirewallRules: [{B5B40F25-2AC6-4642-8BBC-63AE2A925B7B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cryptic Studios\Neverwinter.exe
FirewallRules: [TCP Query User{096444F6-AA1C-44A3-8C5E-A8DFF4A1C6D0}C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe
FirewallRules: [UDP Query User{9E1BE6EE-CCE2-4CFC-8375-7D1F41A71285}C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe
FirewallRules: [{3E6ED98E-B2F8-4E5F-BAED-9D8ACD743A90}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{2F7FD9C7-09FF-4330-AB1D-62122B26142B}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{B6917A43-4FD1-4943-819E-0224DF009AD4}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{580CEC6F-22A8-423D-B6A2-60898E1991C0}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{1D779765-CEC8-476D-8663-FF565F9943D2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dragon Nest Europe\DragonNest\DragonNest.exe
FirewallRules: [{BFD8F340-3BB5-4D13-B4C8-64605B781AE5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dragon Nest Europe\DragonNest\DragonNest.exe
FirewallRules: [TCP Query User{51AE804F-C3F0-4BE7-8861-486111D1A4C3}C:\neople\dfo\dfo.exe] => (Allow) C:\neople\dfo\dfo.exe
FirewallRules: [UDP Query User{813C44E8-970E-4FB2-A994-1B7E6CFAB002}C:\neople\dfo\dfo.exe] => (Allow) C:\neople\dfo\dfo.exe
FirewallRules: [{721B343A-D002-417F-8012-828923F7CF99}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe
FirewallRules: [{51F7C144-FBEC-4072-83BA-D2DB2C1ED47D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe
FirewallRules: [{ECFA20B8-D75A-4C39-89BD-017F84E119BB}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{0FE2304A-0072-4655-BD88-8EAC2F3EE694}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7C5F9697-EA12-4FD9-AA6A-450DA3B7D57A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service

==================== Faulty Device Manager Devices =============

Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: qrnfd_1_10_0_13
Description: qrnfd_1_10_0_13
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: qrnfd_1_10_0_13
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/12/2015 10:45:55 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/12/2015 10:38:32 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 37.0.2.5583, Zeitstempel: 0x552ef76c
Name des fehlerhaften Moduls: mozalloc.dll, Version: 37.0.2.5583, Zeitstempel: 0x552ee9ae
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001aa1
ID des fehlerhaften Prozesses: 0x614
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3

Error: (05/12/2015 09:00:17 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm csgo.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: d98

Startzeit: 01d08ce59fe19b13

Endzeit: 22

Anwendungspfad: C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe

Berichts-ID:

Error: (05/11/2015 11:44:49 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/11/2015 11:40:27 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm firefox.exe, Version 37.0.2.5583 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1e98

Startzeit: 01d08c31eb0e7ef1

Endzeit: 28

Anwendungspfad: C:\Program Files (x86)\Mozilla Firefox\firefox.exe

Berichts-ID:

Error: (05/11/2015 11:40:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 37.0.2.5583, Zeitstempel: 0x552ef76c
Name des fehlerhaften Moduls: mozalloc.dll, Version: 37.0.2.5583, Zeitstempel: 0x552ee9ae
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001aa1
ID des fehlerhaften Prozesses: 0x1ca4
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3

Error: (05/11/2015 11:33:17 PM) (Source: ftb) (EventID: 1) (User: )
Description: ftbStartServiceCtrlDispatcher failed with 1063

Error: (05/11/2015 11:33:00 PM) (Source: ftb) (EventID: 1) (User: )
Description: ftbStartServiceCtrlDispatcher failed with 1063

Error: (05/11/2015 11:32:00 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm firefox.exe, Version 37.0.2.5583 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 2130

Startzeit: 01d08c24cf8d69f1

Endzeit: 32

Anwendungspfad: C:\Program Files (x86)\Mozilla Firefox\firefox.exe

Berichts-ID:

Error: (05/11/2015 11:32:00 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 37.0.2.5583, Zeitstempel: 0x552ef76c
Name des fehlerhaften Moduls: mozalloc.dll, Version: 37.0.2.5583, Zeitstempel: 0x552ee9ae
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001aa1
ID des fehlerhaften Prozesses: 0x3cc
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3


System errors:
=============
Error: (05/12/2015 10:46:01 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
qrnfd_1_10_0_13

Error: (05/12/2015 10:45:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (05/12/2015 01:02:22 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "PAPA-NB",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{E0D7CF45-4DC0-4905-AF73-9C813310A65F}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (05/12/2015 00:57:15 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (05/12/2015 00:56:52 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\ComboFix\catchme.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (05/12/2015 00:53:57 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (05/12/2015 00:48:58 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "mftb" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/12/2015 00:48:57 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "ftb" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/11/2015 11:54:16 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureCommand" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5

Error: (05/11/2015 11:53:23 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen: 
%%5


Microsoft Office Sessions:
=========================
Error: (05/12/2015 10:45:55 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/12/2015 10:38:32 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe37.0.2.5583552ef76cmozalloc.dll37.0.2.5583552ee9ae8000000300001aa161401d08cd4b2317e5cC:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dllda56909c-f8e6-11e4-b156-d25776320b33

Error: (05/12/2015 09:00:17 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: csgo.exe0.0.0.0d9801d08ce59fe19b1322C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe

Error: (05/11/2015 11:44:49 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/11/2015 11:40:27 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: firefox.exe37.0.2.55831e9801d08c31eb0e7ef128C:\Program Files (x86)\Mozilla Firefox\firefox.exe

Error: (05/11/2015 11:40:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe37.0.2.5583552ef76cmozalloc.dll37.0.2.5583552ee9ae8000000300001aa11ca401d08c31edc36601C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll5613711c-f826-11e4-b276-c9b362989730

Error: (05/11/2015 11:33:17 PM) (Source: ftb) (EventID: 1) (User: )
Description: ftbStartServiceCtrlDispatcher failed with 1063

Error: (05/11/2015 11:33:00 PM) (Source: ftb) (EventID: 1) (User: )
Description: ftbStartServiceCtrlDispatcher failed with 1063

Error: (05/11/2015 11:32:00 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: firefox.exe37.0.2.5583213001d08c24cf8d69f132C:\Program Files (x86)\Mozilla Firefox\firefox.exe

Error: (05/11/2015 11:32:00 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe37.0.2.5583552ef76cmozalloc.dll37.0.2.5583552ee9ae8000000300001aa13cc01d08c31e2b05b1fC:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll2805ac04-f825-11e4-b276-c9b362989730


CodeIntegrity Errors:
===================================
  Date: 2015-05-12 12:56:52.122
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-05-12 12:56:52.091
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-05-08 20:38:53.994
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:37:07.273
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:37:03.798
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:36:19.340
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:34:40.221
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:34:12.814
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:20:56.969
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:20:56.706
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-4570 CPU @ 3.20GHz
Percentage of memory in use: 38%
Total physical RAM: 8136.6 MB
Available physical RAM: 5016.1 MB
Total Pagefile: 16271.39 MB
Available Pagefile: 13250.66 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:915.41 GB) (Free:454.82 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 277A7941)
Partition 1: (Not Active) - (Size=16 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=915.4 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Bootsektor · 12.05.2015, 22:27

Hallo,

in welchem Browser denn?

Schritt 1

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

FF Extension: jid0XZn6pYCdV3ANrfYigxlyyGDrxAMjetpack - C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\Extensions\jid0-XZn6pYCdV3ANrfYigxlyyGDrxAM@jetpack [2015-05-11]
C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\Extensions\jid0-XZn6pYCdV3ANrfYigxlyyGDrxAM@jetpack

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Schritt 2
Downloade Dir bitte Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad.
Starte Malwarebytes' Anti-Malware (MBAM).
Sollte die Benutzeroberfläche noch in Englisch sein, klicke auf Settings und wähle bei Language Deutsch aus.
Klicke im Anschluss auf Suchlauf, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf jetzt starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Aktionen anwenden.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Suchlauf-Protokoll aus und klicke auf Ansicht. Wähle Exportieren auf Textdatei (.txt) und speichere die Datei als mbam.txt auf dem Desktop ab.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 3
Starte noch einmal FRST.

Setze den Haken bei addition.txt und drücke auf Scan.
Wenn der Scan abgeschlossen ist, werden zwei neue Logfiles FRST.txt und addition.txt erstellt und auf dem Desktop (oder in dem Verzeichnis in dem FRST liegt) gespeichert.
Poste den Inhalt dieser Logfiles bitte hier in deinen Thread.

kriegnes · 13.05.2015, 13:21

Ich nutze hauptsächlich Firefox. Manchmal aber auch Google Chrome.
Fixlog.txt

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 09-05-2015
Ran by Dima at 2015-05-13 14:19:54 Run:2
Running from C:\Users\Dima\Desktop\Downloads
Loaded Profiles: Dima (Available profiles: Dima)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
FF Extension: jid0XZn6pYCdV3ANrfYigxlyyGDrxAMjetpack - C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\Extensions\jid0-XZn6pYCdV3ANrfYigxlyyGDrxAM@jetpack [2015-05-11]
C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\Extensions\jid0-XZn6pYCdV3ANrfYigxlyyGDrxAM@jetpack
       
*****************

C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\Extensions\jid0-XZn6pYCdV3ANrfYigxlyyGDrxAM@jetpack => Moved successfully.
"C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\Extensions\jid0-XZn6pYCdV3ANrfYigxlyyGDrxAM@jetpack" => File/Directory not found.

==== End of Fixlog 14:19:54 ====

Die Adware scheint weg zu sein. Ich weis aber nicht ob sie vielleicht wieder kommt.... Hatte ich schonmal. Trotzdem vielen Dank für Ihre Hilfe

mbam.txt

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 13.05.2015
Suchlauf-Zeit: 14:22:52
Logdatei: mbam.txt
Administrator: Ja

Version: 2.01.6.1022
Malware Datenbank: v2015.05.13.03
Rootkit Datenbank: v2015.04.21.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Dima

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 435364
Verstrichene Zeit: 10 Min, 54 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente gefunden)

Module: 0
(Keine schädliche Elemente gefunden)

Registrierungsschlüssel: 10
PUP.Optional.CinemaPlus.A, HKLM\SOFTWARE\WOW6432NODE\CinemaPlus-3.2cV07.05, In Quarantäne, [c0b9e65da4e61224e4efa611e02319e7], 
PUP.Optional.CinemaPlus.A, HKLM\SOFTWARE\WOW6432NODE\CinemaPlus-3.2cV07.05-nv, In Quarantäne, [fd7cd66daddd3105518202b5dd2645bb], 
PUP.Optional.CinemaPlus.A, HKLM\SOFTWARE\WOW6432NODE\CinemaPlus-3.2cV07.05-nv-ie, In Quarantäne, [aacf5fe4d2b8db5b08cb595e887be31d], 
PUP.Optional.QuickRef.A, HKLM\SOFTWARE\WOW6432NODE\QuickRef_1.10.0.13, In Quarantäne, [6f0a1b2818726dc9b0ed75389b6851af], 
PUP.Optional.Booster.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{1146AC44-2F03-4431-B4FD-889BC837521F}{cae99edb}, In Quarantäne, [d4a58bb888025bdbf78f6968e81bd32d], 
PUP.Optional.Booster.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{1146AC44-2F03-4431-B4FD-889BC837521F}{da05e809}, In Quarantäne, [80f9f64d3c4e261088fe9c35be451fe1], 
PUP.Optional.QuickRef.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\qrnfd_1_10_0_13, In Quarantäne, [86f31e251d6d91a54b55a607739019e7], 
PUP.Optional.CinemaPlus.A, HKU\S-1-5-21-221738678-620704744-704572411-1000\SOFTWARE\CinemaPlus-3.2cV07.05-nv, In Quarantäne, [5821ba89f5953ef8a82cb9fe8d7624dc], 
PUP.Optional.CinemaPlus.A, HKU\S-1-5-21-221738678-620704744-704572411-1000\SOFTWARE\CinemaPlus-3.2cV07.05-nv-ie, In Quarantäne, [da9f6ed5abdf9d994094734417ecea16], 
PUP.Optional.ICinema.A, HKU\S-1-5-21-221738678-620704744-704572411-1000\SOFTWARE\I-Cinema, In Quarantäne, [48312221d5b57bbbfd05dfe8c142649c], 

Registrierungswerte: 0
(Keine schädliche Elemente gefunden)

Registrierungsdaten: 0
(Keine schädliche Elemente gefunden)

Ordner: 0
(Keine schädliche Elemente gefunden)

Dateien: 2
PUP.Optional.WebTInst.A, C:\Windows\System32\drivers\Msft_Kernel_webTinstMKTN84_01009.Wdf, In Quarantäne, [94e592b1365443f3ff1d03a5da297789], 
PUP.Optional.WebInstr.A, C:\Windows\System32\drivers\Msft_Kernel_webinstr_01009.Wdf, In Quarantäne, [8fea70d385058ea865cfc2eea45f4fb1], 

Physische Sektoren: 0
(Keine schädliche Elemente gefunden)


(end)

FRST.txt

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-05-2015
Ran by Dima (administrator) on DIMAS-PC on 13-05-2015 14:48:23
Running from C:\Users\Dima\Desktop\Downloads
Loaded Profiles: Dima (Available profiles: Dima)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 2\creator-ws.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Akamai Technologies, Inc.) C:\Users\Dima\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\Dima\AppData\Local\Akamai\netsession_win.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe
(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11785832 2011-03-10] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1332296 2015-01-30] (Microsoft Corporation)
HKLM\...\Run: [3D BubbleSound] => "C:\Program Files\BubbleSound\3D BubbleSound.exe"
HKLM-x32\...\Run: [SuiteTray] => C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [340848 2011-04-02] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisTecPMMUpdate] => C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [408432 2011-03-29] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisUpdate] => C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [202608 2011-03-29] (Egis Technology Inc.)
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [297280 2011-04-24] (NTI Corporation)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55568 2015-03-25] (Raptr, Inc)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-11-17] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-03-30] (LogMeIn Inc.)
HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [933888 2012-08-21] (AVM Berlin)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2888384 2015-05-12] (Valve Corporation)
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3619160 2015-01-28] (Electronic Arts)
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Dima\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-30] (Akamai Technologies, Inc.)
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Dxtory Update Checker 2.0] => C:\Program Files (x86)\ExKode\Dxtory2.0\UpdateChecker.exe [93696 2010-10-17] (Dxtory Software)
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [\\DIMA-PC\EPSON SX210 Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFDE.EXE [223232 2008-11-05] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [GoogleChromeAutoLaunch_74AB638E1E27FA41128D672CA46F567E] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [812872 2015-05-05] (Google Inc.)
HKU\S-1-5-18\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2014-08-23]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll No File
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
BHO-x32: PDF Architect Helper -> {691B33B0-B86E-47F3-81C7-56E4FE3B929C} -> C:\Program Files (x86)\PDF Architect 2\creator-ie-helper.dll [2014-10-10] (pdfforge GmbH)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28] (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation)
Toolbar: HKLM-x32 - PDF Architect Toolbar - {DEEB13D7-CEA9-45FB-B77C-E039BEC85221} - C:\Program Files (x86)\PDF Architect 2\creator-ie-plugin.dll [2014-10-10] (pdfforge GmbH)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll [2014-09-01] (EA Digital Illusions CE AB)
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-28] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2013-09-08] (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-11-12] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll [2014-06-24] (Adobe Systems, Inc.)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2014-11-21] (DivX, LLC)
FF Plugin-x32: @esn/npbattlelog,version=2.3.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll No File
FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll [2014-09-01] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-28] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation)
FF Plugin-x32: @mcafee.com/SAFFPlugin -> C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll No File
FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2013-09-08] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npnxgameEU.dll [2014-11-12] (Nexon)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll [2014-10-10] (pdfforge GmbH)
FF Plugin HKU\S-1-5-21-221738678-620704744-704572411-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Dima\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS)
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF HKLM-x32\...\Firefox\Extensions: [pdf_architect_2_conv@pdfarchitect.org] - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension
FF Extension: PDF Architect 2 Creator - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension [2015-02-26]
FF HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]

Chrome: 
=======
CHR Profile: C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-05-08]
CHR Extension: (Google Docs) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-05-08]
CHR Extension: (Google Drive) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-05-08]
CHR Extension: (YouTube) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-05-08]
CHR Extension: (Google Search) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-05-08]
CHR Extension: (Google Sheets) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-05-08]
CHR Extension: (Bookmark Manager) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-08]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-08]
CHR Extension: (Google Wallet) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR Extension: (Gmail) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-08]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [237864 2015-03-21] (EasyAntiCheat Ltd)
R2 GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [29696 2011-05-26] (Acer Incorporated) [File not signed]
U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2015-02-16] (Hi-Rez Studios) [File not signed]
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-03-30] (LogMeIn, Inc.)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2015-01-30] (Microsoft Corporation)
R2 MSMQ; C:\Windows\system32\mqsvc.exe [9216 2009-07-14] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366512 2015-01-30] (Microsoft Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5128944 2013-11-19] (INCA Internet Co., Ltd.) [File not signed]
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256832 2011-04-24] (NTI Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910640 2015-03-02] (Electronic Arts)
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-10-10] (pdfforge GmbH)
R2 PDF Architect 2 Creator; C:\Program Files (x86)\PDF Architect 2\creator-ws.exe [738856 2014-10-10] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-10-10] (pdfforge GmbH)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-10-11] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
S3 Survarium-Steam Update Service; C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium_service.exe [76408 2015-04-03] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2012-04-25] (AVM Berlin)
R3 fwlanusb5; C:\Windows\System32\DRIVERS\fwlanusb5.sys [982784 2012-08-21] (AVM GmbH)
S3 GameKB; C:\Windows\System32\drivers\GameKB.sys [27648 2012-05-11] () [File not signed]
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [274696 2014-11-15] (Microsoft Corporation)
R3 MQAC; C:\Windows\System32\drivers\mqac.sys [189440 2009-07-14] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124560 2014-11-15] (Microsoft Corporation)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-05-17] (Anchorfree Inc.)
S3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2014-07-02] (SplitmediaLabs Limited)
S3 BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [X]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 hxsyol; \??\C:\AeriaGames\AuraKingdom\avital\hxsy64.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-13 14:46 - 2015-05-13 14:46 - 00002936 _____ () C:\Users\Dima\Desktop\mbam.txt
2015-05-12 22:45 - 2015-05-12 22:45 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2015-05-12 19:49 - 2015-05-12 19:49 - 00021496 _____ () C:\Users\Dima\Desktop\Tobi ist sexy.odt
2015-05-12 13:00 - 2015-05-12 13:00 - 00030620 _____ () C:\ComboFix.txt
2015-05-12 12:46 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2015-05-12 12:46 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2015-05-12 12:46 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-05-12 12:46 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-05-12 12:46 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-05-12 12:46 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2015-05-12 12:46 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2015-05-12 12:46 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2015-05-12 12:41 - 2015-05-12 13:00 - 00000000 ____D () C:\Qoobox
2015-05-12 12:40 - 2015-05-12 12:59 - 00000000 ____D () C:\Windows\erdnt
2015-05-12 12:38 - 2015-05-12 12:39 - 05623215 ____R (Swearware) C:\Users\Dima\Desktop\ComboFix.exe
2015-05-11 23:00 - 2015-05-12 16:13 - 00000000 ____D () C:\Users\Dima\AppData\Local\Eclipse
2015-05-11 22:03 - 2015-05-13 14:48 - 00000000 ____D () C:\FRST
2015-05-11 20:59 - 2015-05-11 20:59 - 00000000 ____D () C:\Users\Dima\AppData\Local\My Games
2015-05-10 18:44 - 2015-05-10 18:44 - 00000000 ____D () C:\Users\Dima\AppData\Local\Origin
2015-05-10 18:05 - 2015-05-10 18:05 - 00001117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-05-10 18:05 - 2015-05-10 18:05 - 00001105 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-05-10 18:05 - 2015-05-10 18:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-05-10 16:15 - 2015-05-10 16:15 - 00000000 ____D () C:\Users\Dima\AppData\Local\EgisTec IPS
2015-05-10 16:14 - 2015-05-10 16:14 - 00066432 _____ () C:\Users\Dima\AppData\Local\GDIPFONTCACHEV1.DAT
2015-05-10 16:13 - 2015-05-13 14:41 - 00000000 ____D () C:\Users\Dima\AppData\Local\LogMeIn Hamachi
2015-05-10 16:13 - 2015-05-10 16:13 - 00000000 ____D () C:\Users\Dima\AppData\Local\LogMeIn
2015-05-10 16:12 - 2015-05-10 16:12 - 00000000 ____D () C:\Users\Dima\AppData\Local\VirtualStore
2015-05-10 16:07 - 2015-05-11 23:41 - 00000000 ____D () C:\AdwCleaner
2015-05-08 20:43 - 2015-05-08 20:43 - 00000000 ____D () C:\Users\Dima\AppData\Local\openvr
2015-05-08 20:42 - 2015-05-08 20:42 - 00000000 ____D () C:\Users\Dima\AppData\Local\Steam
2015-05-08 19:44 - 2015-05-08 19:44 - 00000000 ____D () C:\Users\Dima\AppData\Local\Macromedia
2015-05-08 19:43 - 2015-05-09 22:34 - 00000000 ____D () C:\Users\Dima\AppData\Local\Mozilla
2015-05-08 18:41 - 2015-05-08 18:41 - 00000000 ____D () C:\Users\Dima\AppData\Local\ATI
2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieUserList
2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieSiteList
2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieBrowserModeList
2015-05-08 14:49 - 2015-05-08 14:49 - 00000000 ____D () C:\ProgramData\Kikblaster
2015-05-08 14:33 - 2015-05-08 19:54 - 00000000 ____D () C:\Program Files (x86)\Edu App
2015-05-08 14:20 - 2015-05-08 14:52 - 00000000 ____D () C:\Users\Dima\AppData\Local\00000000-1431094823-0000-0000-D43D7EBF2FB4
2015-05-04 20:34 - 2015-05-04 20:34 - 00059505 _____ () C:\Users\Dima\Documents\ts3_clientui-win64-1407159763-2015-05-04 20_34_27.843240.dmp
2015-04-26 16:02 - 2015-04-26 16:02 - 00000000 ____D () C:\Users\Dima\Documents\DFO
2015-04-25 20:20 - 2015-04-25 20:20 - 00001734 _____ () C:\Users\Public\Desktop\Dungeon Fighter Online.lnk
2015-04-25 20:20 - 2015-04-25 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\neople
2015-04-25 20:20 - 2015-04-25 20:20 - 00000000 ____D () C:\Neople
2015-04-25 15:57 - 2015-04-26 13:15 - 00000000 ____D () C:\Users\Dima\Documents\DragonNest
2015-04-24 12:20 - 2015-05-10 18:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-20 13:37 - 2015-04-20 13:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FRITZ!WLAN
2015-04-20 13:37 - 2015-04-20 13:37 - 00000000 ____D () C:\Program Files (x86)\avmwlanstick
2015-04-20 13:36 - 2015-04-20 13:36 - 00000000 ____D () C:\Users\Dima\AVM_Driver
2015-04-20 13:36 - 2012-04-25 01:00 - 00014120 _____ (AVM Berlin) C:\Windows\system32\Drivers\avmeject.sys
2015-04-20 00:51 - 2015-04-20 00:51 - 00002956 _____ () C:\Windows\avmacc1.log
2015-04-20 00:51 - 2012-07-12 02:00 - 00480632 _____ (AVM Berlin) C:\Windows\instwcli.dex
2015-04-20 00:45 - 2015-04-20 00:45 - 00003216 _____ () C:\Windows\System32\Tasks\{35EE529B-2794-4708-8B79-567E126A4A7F}
2015-04-20 00:05 - 2015-04-20 13:36 - 00001479 _____ () C:\Windows\avmsetup.log
2015-04-20 00:05 - 2015-04-20 13:36 - 00000490 _____ () C:\Windows\avmadd32.log
2015-04-20 00:05 - 2015-04-20 00:54 - 00197887 _____ () C:\Windows\avmacc.log
2015-04-20 00:05 - 2015-04-20 00:44 - 00000000 ____D () C:\Program Files (x86)\AVM_update
2015-04-19 20:43 - 2015-04-19 20:43 - 00001906 _____ () C:\Users\Dima\Desktop\EliteDekaron.lnk
2015-04-19 20:43 - 2015-04-19 20:43 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Elite Dekaron
2015-04-19 20:40 - 2015-04-19 21:03 - 00000000 ____D () C:\Program Files (x86)\Elite Dekaron
2015-04-19 20:40 - 2015-04-19 20:40 - 00000000 ____D () C:\Windows\Elite Dekaron
2015-04-16 16:36 - 2015-04-16 16:43 - 00000000 ___SD () C:\Windows\system32\GWX
2015-04-16 16:36 - 2015-04-16 16:36 - 00000000 ___SD () C:\Windows\SysWOW64\GWX
2015-04-15 21:14 - 2015-04-15 21:14 - 18178736 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2015-04-14 20:39 - 2015-03-25 05:24 - 03298816 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 02553856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-14 20:39 - 2015-03-25 05:24 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-14 20:39 - 2015-03-25 05:23 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-14 20:39 - 2015-03-25 05:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-14 20:39 - 2015-03-25 05:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-14 20:39 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-04-14 20:39 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-04-14 20:39 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-04-14 20:39 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-04-14 20:39 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-04-14 20:39 - 2015-03-23 05:25 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-14 20:39 - 2015-03-23 05:25 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-14 20:39 - 2015-03-23 05:24 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-14 20:39 - 2015-03-23 05:24 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-14 20:39 - 2015-03-23 05:24 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-14 20:39 - 2015-03-23 05:24 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-04-14 20:39 - 2015-03-23 05:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-14 20:39 - 2015-03-23 05:17 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-14 20:39 - 2015-03-17 07:22 - 05557696 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-14 20:39 - 2015-03-17 07:22 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-04-14 20:39 - 2015-03-17 07:22 - 00095672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-04-14 20:39 - 2015-03-17 07:19 - 01727904 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-14 20:39 - 2015-03-17 07:17 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-04-14 20:39 - 2015-03-17 07:17 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-04-14 20:39 - 2015-03-17 07:16 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-04-14 20:39 - 2015-03-17 07:16 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-04-14 20:39 - 2015-03-17 07:16 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-04-14 20:39 - 2015-03-17 07:15 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-04-14 20:39 - 2015-03-17 07:15 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-04-14 20:39 - 2015-03-17 07:15 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-04-14 20:39 - 2015-03-17 07:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-04-14 20:39 - 2015-03-17 07:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-04-14 20:39 - 2015-03-17 06:59 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-04-14 20:39 - 2015-03-17 06:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-04-14 20:39 - 2015-03-17 06:56 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-04-14 20:39 - 2015-03-17 06:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-04-14 20:39 - 2015-03-17 06:56 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-04-14 20:39 - 2015-03-10 05:25 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-04-14 20:39 - 2015-03-10 05:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-04-14 20:39 - 2015-03-10 05:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-04-14 20:39 - 2015-03-10 05:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-04-14 20:39 - 2015-03-05 07:12 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-04-14 20:39 - 2015-03-05 06:05 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-04-14 20:38 - 2015-03-17 07:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-04-14 20:38 - 2015-03-17 07:16 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-04-14 20:38 - 2015-03-17 07:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-04-14 20:38 - 2015-03-17 07:13 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-04-14 20:38 - 2015-03-17 07:13 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-04-14 20:38 - 2015-03-17 06:57 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-04-14 20:38 - 2015-03-17 06:56 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-04-14 20:38 - 2015-03-17 06:56 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-04-14 20:38 - 2015-03-17 06:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-04-14 20:38 - 2015-03-17 06:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-04-14 20:38 - 2015-03-17 06:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-04-14 20:38 - 2015-03-17 06:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 05:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-04-14 20:38 - 2015-03-17 05:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-04-14 20:38 - 2015-03-17 05:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 05:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-04-14 20:38 - 2015-03-17 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-04-14 20:38 - 2015-03-04 06:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2015-04-14 20:38 - 2015-03-04 06:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-14 20:38 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2015-04-14 20:38 - 2015-02-25 05:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-13 14:50 - 2009-07-14 06:45 - 00028928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-13 14:50 - 2009-07-14 06:45 - 00028928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-13 14:47 - 2013-08-08 20:19 - 01111539 _____ () C:\Windows\WindowsUpdate.log
2015-05-13 14:44 - 2014-11-22 13:30 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-05-13 14:43 - 2013-11-06 17:55 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Raptr
2015-05-13 14:43 - 2013-08-09 06:11 - 00699416 _____ () C:\Windows\system32\perfh007.dat
2015-05-13 14:43 - 2013-08-09 06:11 - 00149556 _____ () C:\Windows\system32\perfc007.dat
2015-05-13 14:43 - 2009-07-14 07:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-13 14:39 - 2013-08-17 15:43 - 00000000 ____D () C:\Program Files (x86)\Origin
2015-05-13 14:37 - 2013-08-15 21:16 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-13 14:36 - 2010-11-21 05:47 - 00401272 _____ () C:\Windows\PFRO.log
2015-05-13 14:36 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-13 14:36 - 2009-07-14 06:51 - 00121145 _____ () C:\Windows\setupact.log
2015-05-13 14:22 - 2014-11-22 13:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-05-13 14:22 - 2014-11-22 13:30 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-05-13 14:14 - 2013-08-15 14:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-13 14:12 - 2013-08-08 21:08 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-05-13 13:52 - 2013-08-15 21:16 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-12 22:47 - 2014-01-07 19:34 - 01850368 ___SH () C:\Users\Dima\Desktop\Thumbs.db
2015-05-12 22:38 - 2014-08-24 20:42 - 00000000 ____D () C:\Windows\System32\Tasks\Games
2015-05-12 22:38 - 2013-09-21 18:06 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\TS3Client
2015-05-12 22:38 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2015-05-12 22:38 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2015-05-12 20:59 - 2014-08-09 17:35 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\.minecraft
2015-05-12 16:12 - 2015-04-10 17:41 - 00000000 ____D () C:\Users\Dima\Desktop\eclipse
2015-05-12 13:00 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2015-05-12 12:57 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2015-05-12 12:40 - 2013-10-04 17:11 - 00000000 ____D () C:\ProgramData\Package Cache
2015-05-11 23:42 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-05-10 18:44 - 2013-08-17 15:43 - 00000000 ____D () C:\ProgramData\Origin
2015-05-10 18:19 - 2014-11-14 00:10 - 00000000 ____D () C:\Users\Dima\Desktop\lqobqwkv.default
2015-05-10 16:42 - 2014-10-05 15:02 - 00000000 ____D () C:\Users\Dima\AppData\Local\Adobe
2015-05-10 16:15 - 2013-12-20 13:37 - 00000000 ____D () C:\Users\Dima\AppData\Local\Akamai
2015-05-10 16:12 - 2013-08-08 15:36 - 00001419 _____ () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-05-10 16:10 - 2014-11-26 23:57 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WorldofTanks
2015-05-08 21:41 - 2013-12-30 15:03 - 00000000 ____D () C:\Program Files (x86)\7-Zip
2015-05-08 21:39 - 2013-12-18 15:08 - 00000000 ____D () C:\Program Files (x86)\ACASystems
2015-05-08 18:40 - 2013-11-02 02:16 - 00000000 ____D () C:\Users\Dima\Desktop\Neuer Ordner
2015-05-08 18:40 - 2013-08-15 21:16 - 00000000 ____D () C:\Users\Dima\AppData\Local\Google
2015-05-08 14:52 - 2014-11-30 22:57 - 00000000 ____D () C:\Users\Dima\AppData\Local\gegl-0.2
2015-05-08 14:52 - 2013-12-14 00:39 - 00000000 ____D () C:\Users\Dima\AppData\Local\Battle.net
2015-05-08 13:16 - 2013-08-15 15:52 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Skype
2015-05-02 22:30 - 2014-11-23 16:19 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\.technic
2015-05-02 22:30 - 2014-08-25 02:48 - 04697768 _____ () C:\Users\Dima\Desktop\TechnicLauncher.exe
2015-04-27 16:21 - 2015-02-28 15:34 - 00000000 ____D () C:\Users\Dima\Desktop\Bewerbung
2015-04-20 13:37 - 2014-02-12 19:55 - 00011424 _____ () C:\Windows\avmfwlanci.log
2015-04-20 13:37 - 2014-02-12 19:55 - 00011167 _____ () C:\Windows\AVMInstall.Log
2015-04-20 13:36 - 2014-02-12 19:54 - 00000000 ____D () C:\Windows\AVM_Driver
2015-04-20 13:36 - 2013-08-08 15:34 - 00000000 ____D () C:\Users\Dima
2015-04-20 00:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-04-18 17:38 - 2013-09-13 14:13 - 00000000 ____D () C:\Program Files (x86)\Raptr
2015-04-18 12:26 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat
2015-04-16 16:36 - 2014-12-22 19:12 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-16 16:36 - 2014-05-01 14:38 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-16 16:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-04-16 12:44 - 2014-02-26 15:58 - 00002022 _____ () C:\Users\Dima\monsterhunter.txt
2015-04-15 21:15 - 2013-08-15 14:45 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-04-15 21:15 - 2013-08-15 14:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-04-15 21:15 - 2011-07-25 05:19 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-15 12:54 - 2013-09-09 16:14 - 01593956 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-04-15 12:52 - 2014-10-06 19:31 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-04-15 12:52 - 2011-07-25 05:01 - 00000000 ____D () C:\ProgramData\Skype
2015-04-15 12:51 - 2013-11-11 13:25 - 00000000 ____D () C:\Windows\system32\MRT
2015-04-15 12:45 - 2013-11-11 13:25 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-04-14 09:37 - 2014-11-22 13:30 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-04-14 09:37 - 2014-11-22 13:30 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-04-14 09:37 - 2014-11-22 13:30 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

==================== Files in the root of some directories =======

2013-11-09 21:45 - 2013-11-09 21:45 - 0000004 _____ () C:\Users\Dima\AppData\Roaming\steam_md4.dat
2013-08-08 21:05 - 2013-08-08 21:05 - 0000654 _____ () C:\ProgramData\ArcadeDeluxe5.log

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2011-07-25 04:31

==================== End Of Log ============================

--- --- ---

kriegnes · 13.05.2015, 13:57

Addition.txt

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-05-2015
Ran by Dima at 2015-05-13 14:50:44
Running from C:\Users\Dima\Desktop\Downloads
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-221738678-620704744-704572411-500 - Administrator - Disabled)
Dima (S-1-5-21-221738678-620704744-704572411-1000 - Administrator - Enabled) => C:\Users\Dima
Gast (S-1-5-21-221738678-620704744-704572411-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-221738678-620704744-704572411-1002 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
ACA Screen Recorder 5.30 (HKLM-x32\...\ACAScreenRecorder_EN_is1) (Version: 5.30 - ACA Systems)
Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.99 - NTI Corporation)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3502 - Acer Incorporated)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3502 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0517.2011 - Acer Incorporated)
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Reader X (10.1.13) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.13 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.)
Agarest: Generations of War (HKLM-x32\...\Steam App 237890) (Version:  - Ghostlight)
Age of Empires II: HD Edition (HKLM-x32\...\Steam App 221380) (Version:  - Hidden Path Entertainment, Ensemble Studios)
AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.36 - Atheros Communications Inc.)
Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team)
Avidemux 2.6 - 64bits (HKLM-x32\...\Avidemux 2.6 - 64bits (64-bit)) (Version: 2.6.8.9046 - )
AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version: 1.2.0.0 - AVM Berlin)
Backup Manager V3 (x32 Version: 3.0.0.99 - NTI Corporation) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.3.2.15221 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.5.1 - EA Digital Illusions CE AB)
Borderlands 2 (HKLM-x32\...\Steam App 49520) (Version:  - Gearbox Software)
Call of Duty 4: Modern Warfare (HKLM-x32\...\Steam App 7940) (Version:  - Infinity Ward)
Call of Duty: Black Ops II - Multiplayer (HKLM-x32\...\Steam App 202990) (Version:  - )
Call of Duty: Black Ops II - Zombies (HKLM-x32\...\Steam App 212910) (Version:  - )
Call of Duty: Black Ops II (HKLM-x32\...\Steam App 202970) (Version:  - Treyarch)
Call of Duty: Ghosts - Multiplayer (HKLM-x32\...\Steam App 209170) (Version:  - )
Call of Duty: Ghosts (HKLM-x32\...\Steam App 209160) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare 3 - Multiplayer (HKLM-x32\...\Steam App 42690) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare 3 (HKLM-x32\...\Steam App 42680) (Version:  - Infinity Ward)
Castle Crashers (HKLM-x32\...\Steam App 204360) (Version:  - The Behemoth)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
clear.fi Client (HKLM-x32\...\{43AAE145-83CF-4C96-9A5E-756CEFCE879F}) (Version: 1.00.3500 - Acer Incorporated)
Combined Community Codec Pack 2013-11-27 (HKLM-x32\...\Combined Community Codec Pack_is1) (Version: 2013.11.27.0 - CCCP Project)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version:  - Valve)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Darksiders II (HKLM-x32\...\Steam App 50650) (Version:  - Vigil Games)
DFO (HKLM-x32\...\{C1E5C0FB-527E-42C6-BCA0-0A37A6124AE4}) (Version: 1.01.0000 - Neople)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.7.0.64 - DivX, LLC)
Dota 2 (HKLM-x32\...\Steam App 570) (Version:  - Valve)
Dragon Nest Europe (HKLM-x32\...\Steam App 258700) (Version:  - Eyedentity Games)
Dungeon Defenders (HKLM-x32\...\Steam App 65800) (Version:  - Trendy Entertainment)
Dxtory version 2.0.128 (HKLM-x32\...\Dxtory2.0_is1) (Version: 2.0.128 - ExKode Co. Ltd.)
Elite Dekaron (HKLM-x32\...\Elite Dekaron1.0) (Version: 1.0 - EliteKingdoms)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - )
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Free YouTube to MP3 Converter version 3.12.20.1230 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.20.1230 - DVDVideoSoft Ltd.)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Gameforge Live 2.0.5 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.5 - Gameforge)
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Facepunch Studios)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Glyph (HKLM-x32\...\Glyph) (Version:  - Trion Worlds, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.152 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Gumboy Tournament (HKLM-x32\...\Steam App 11230) (Version:  - CINEMAX, s.r.o.)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.2.1004 - Intel Corporation)
Java 7 Update 75 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417075FF}) (Version: 7.0.750 - Oracle)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Java SE Development Kit 7 Update 75 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170750}) (Version: 1.7.0.750 - Oracle)
Java SE Development Kit 8 Update 25 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180250}) (Version: 8.0.250.18 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Loadout (HKLM-x32\...\Steam App 208090) (Version:  - Edge of Reality)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.328 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.328 - LogMeIn, Inc.) Hidden
LOLReplay (HKLM-x32\...\LOLReplay) (Version: 0.8.9.11 - www.leaguereplays.com)
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.7.205.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Might & Magic: Duel of Champions (HKLM-x32\...\Steam App 256410) (Version:  - Ubisoft Quebec)
MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)
Mozilla Firefox 37.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.2 (x86 de)) (Version: 37.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.2 - Mozilla)
MyWinLocker (Version: 4.0.14.25 - Egis Technology Inc.) Hidden
MyWinLocker 4 (x32 Version: 4.0.14.25 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.15 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 4.0.14.15 - Egis Technology Inc.) Hidden
Neverwinter (HKLM-x32\...\Steam App 109600) (Version:  - Cryptic Studios)
newsXpresso (HKLM-x32\...\InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}) (Version: 1.0.0.40 - esobi Inc.)
newsXpresso (x32 Version: 1.0.0.40 - esobi Inc.) Hidden
Nosgoth (HKLM-x32\...\Steam App 200110) (Version: 150120.100528 - Square Enix Ltd)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)
NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.8942 - NTI Corporation)
NTI Media Maker 9 (x32 Version: 9.0.2.8942 - NTI Corporation) Hidden
NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.3.1.4482 - Electronic Arts, Inc.)
paint.net (HKLM\...\{141BA46D-2D1F-4DA6-9448-B847334585C0}) (Version: 4.0.4 - dotPDN LLC)
PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.51.17865 - pdfforge GmbH)
PDF Architect 2 Create Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden
PDF Architect 2 Edit Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden
PDF Architect 2 View Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.0.2 - pdfforge)
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Pokemon Online 2.4.1 (HKLM-x32\...\{2C08D7E7-9EE1-4A08-AFE0-745F02DCD6A4}_is1) (Version:  - Dreambelievers)
Pokémon Trading Card Game Online (HKLM-x32\...\{B0952280-3DF0-4AA9-9599-092D5E8D36AD}) (Version: 2.24.1 - The Pokémon Company International)
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Ralink RT2860 Wireless LAN Card (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 1.5.6.0 - Ralink)
Raptr (HKLM-x32\...\Raptr) (Version:  - )
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6329 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30123 - Realtek Semiconductor Corp.)
Serious Sam 3: BFE (HKLM-x32\...\Steam App 41070) (Version:  - Croteam)
Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version:  - 2K Games, Inc.)
SIW 2013 Home Edition (HKLM-x32\...\{AB67580-257C-45FF-B8F4-C8C30682091A}_is1) (Version: 2013.05.14 - Topala Software Solutions)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 2.0.2574.0 - Hi-Rez Studios)
Source SDK Base 2006 (HKLM-x32\...\Steam App 215) (Version:  - Valve)
SpellForce (HKLM-x32\...\SpellForce) (Version:  - )
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Survarium (HKLM-x32\...\Steam App 355840) (Version:  - Vostok Games)
Survarium-Steam (HKLM-x32\...\{A3D9343D-77CD-4bf4-A47A-F87B3BE985B4}_is1) (Version: 0.27d - )
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
System Requirements Lab CYRI (HKLM-x32\...\{E362724E-9320-4946-AF34-874E7B6B2927}) (Version: 6.0.7.0 - Husdawg, LLC)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.12 - TeamSpeak Systems GmbH)
TIPP10 Version 2.1.0 (HKLM-x32\...\TIPP10_is1) (Version:  - (c) 2006-2011, Tom Thielicke IT Solutions)
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel)
Unity (HKLM-x32\...\Unity) (Version: 4.6.1f1 - Unity Technologies ApS)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Vindictus EU (HKLM-x32\...\Vindictus EU) (Version:  - )
VLC media player 2.1.1 (HKLM\...\VLC media player) (Version: 2.1.1 - VideoLAN)
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3503 - Acer Incorporated)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
WinRAR 5.00 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)
YGOPro DevPro Version 1.9.7 r2 (HKLM-x32\...\{3CF2634F-3F38-4DD3-9201-CB2FE6B5FF23}_is1) (Version: 1.9.7 r2 - YGOPro DevPro Online)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

05-05-2015 16:18:48 Windows Update
08-05-2015 20:00:02 Windows Update
12-05-2015 12:46:24 ComboFix created restore point

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2014-09-21 15:27 - 00000860 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
::1 localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {15731A0E-D960-4E94-9E60-DACD297E3193} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {1860A38F-8939-478A-BF5C-F565A480142F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {1D4EC24B-2C6F-4F04-8F3E-6AA90BAED5D2} - System32\Tasks\{A10EA19B-8B09-454D-B360-CA92A1D17DBD} => pcalua.exe -a C:\Users\Dima\Desktop\InstallIW4M(1).exe -d C:\Users\Dima\Desktop
Task: {276BF61D-668E-4313-BA37-702F352555A9} - System32\Tasks\Adobe Reader Speed Launcher => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2014-12-03] (Adobe Systems Incorporated)
Task: {2B46497E-052E-4882-879A-2CED38AE75F5} - System32\Tasks\{6B05723E-8DB6-495D-A0DA-ECA4FC2E26D7} => C:\Program Files (x86)\WeGame\wegame.exe
Task: {54E1645E-EDBD-4280-B2FF-13D3BBEC2047} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-07] (Google Inc.)
Task: {5975092F-1EFE-4D6C-A337-025C0E67059F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)
Task: {5B6F25FF-1AB6-4306-AF5F-150B752505F5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-07] (Google Inc.)
Task: {ADDA105F-5269-41EB-BE7A-FADC87447563} - System32\Tasks\{153E695E-4162-4A7B-8004-BCBAF85CE618} => pcalua.exe -a C:\Users\Dima\AVM_Driver\FWLAN\setup.exe -d C:\Users\Dima\AVM_Driver\FWLAN
Task: {B0E56CFC-54EA-49E5-AEE6-544EE780094B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15] (Adobe Systems Incorporated)
Task: {C4630A3F-B5F1-4159-9F2B-8EF55530D99B} - System32\Tasks\Adobe ARM => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {C618B53C-0F59-4601-8B52-1D81C275086B} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)
Task: {C7F562CC-8836-44FC-8085-91BD492874BE} - System32\Tasks\{35EE529B-2794-4708-8B79-567E126A4A7F} => pcalua.exe -a C:\Users\Dima\Desktop\Downloads\avm_fritz!wlan_usb_stick_x64_build_100906.exe -d C:\Users\Dima\Desktop\Downloads
Task: {D021483F-10CB-41B4-8816-109CDA214F59} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {D216A597-8DFB-49AE-BB0C-69D9574172C8} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {D9E5BB12-DEEF-4673-A22C-7A60AF737292} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {E66F9E32-E05D-43A5-8A61-1251E464ABF9} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2013-09-02 13:14 - 2014-10-11 21:02 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-01-10 07:26 - 2014-01-10 07:26 - 01861968 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
2011-04-24 03:29 - 2011-04-24 03:29 - 00465640 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll
2011-04-24 03:29 - 2011-04-24 03:29 - 01081664 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll
2011-04-24 03:29 - 2011-04-24 03:29 - 00125760 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll
2014-11-09 03:42 - 2014-05-13 13:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2014-11-09 03:42 - 2014-05-13 13:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2014-11-09 03:42 - 2014-05-13 13:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2014-11-09 03:42 - 2012-08-23 11:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2014-11-09 03:42 - 2012-04-03 18:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2014-01-10 07:28 - 2014-01-10 07:28 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2014-10-21 22:56 - 2014-10-21 22:56 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\9b1cac8d98bd69d3e56a26ff2f96f266\IsdiInterop.ni.dll
2011-07-25 04:42 - 2011-01-13 02:56 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00087040 _____ () C:\Program Files (x86)\Raptr\_ctypes.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00043008 _____ () C:\Program Files (x86)\Raptr\_socket.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00805376 _____ () C:\Program Files (x86)\Raptr\_ssl.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 05812736 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtGui.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00067584 _____ () C:\Program Files (x86)\Raptr\sip.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 01662464 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtCore.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00494592 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtNetwork.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00096256 _____ () C:\Program Files (x86)\Raptr\win32api.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00110592 _____ () C:\Program Files (x86)\Raptr\pywintypes26.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00010240 _____ () C:\Program Files (x86)\Raptr\select.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00356864 _____ () C:\Program Files (x86)\Raptr\_hashlib.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00036352 _____ () C:\Program Files (x86)\Raptr\win32process.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00111104 _____ () C:\Program Files (x86)\Raptr\win32file.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00044544 _____ () C:\Program Files (x86)\Raptr\_sqlite3.pyd
2011-02-15 20:17 - 2011-02-15 20:17 - 00417501 _____ () C:\Program Files (x86)\Raptr\sqlite3.dll
2010-11-23 00:57 - 2010-11-23 00:57 - 00167936 _____ () C:\Program Files (x86)\Raptr\win32gui.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00313856 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtWebKit.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00127488 _____ () C:\Program Files (x86)\Raptr\pyexpat.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00009216 _____ () C:\Program Files (x86)\Raptr\winsound.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00354304 _____ () C:\Program Files (x86)\Raptr\pythoncom26.dll
2010-11-23 00:57 - 2010-11-23 00:57 - 00016384 _____ () C:\Program Files (x86)\Raptr\win32trace.pyd
2014-08-14 02:37 - 2014-08-14 02:37 - 00113171 _____ () C:\Program Files (x86)\Raptr\libvlc.dll
2014-08-14 02:37 - 2014-08-14 02:37 - 02396691 _____ () C:\Program Files (x86)\Raptr\libvlccore.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00583680 _____ () C:\Program Files (x86)\Raptr\unicodedata.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00263168 _____ () C:\Program Files (x86)\Raptr\win32com.shell.shell.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00324608 _____ () C:\Program Files (x86)\Raptr\PIL._imaging.pyd
2013-11-21 02:05 - 2013-11-21 02:05 - 00256000 _____ () C:\Program Files (x86)\Raptr\amd_ags.dll
2012-02-06 22:28 - 2012-02-06 22:28 - 00010752 _____ () C:\Program Files (x86)\Raptr\Crypto.Random.OSRNG.winrandom.pyd
2012-02-06 22:28 - 2012-02-06 22:28 - 00011264 _____ () C:\Program Files (x86)\Raptr\Crypto.Util._counter.pyd
2012-02-06 22:28 - 2012-02-06 22:28 - 00031744 _____ () C:\Program Files (x86)\Raptr\Crypto.Cipher.AES.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00141312 _____ () C:\Program Files (x86)\Raptr\gobject._gobject.pyd
2014-06-18 02:56 - 2014-06-18 02:56 - 02717595 _____ () C:\Program Files (x86)\Raptr\heliotrope._purple.pyd
2011-02-15 20:17 - 2011-02-15 20:17 - 01213633 _____ () C:\Program Files (x86)\Raptr\libxml2-2.dll
2010-11-23 01:06 - 2010-11-23 01:06 - 00055808 _____ () C:\Program Files (x86)\Raptr\zlib1.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 00495680 _____ () C:\Program Files (x86)\Raptr\plugins\libaim.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 01183699 _____ () C:\Program Files (x86)\Raptr\liboscar.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 00483306 _____ () C:\Program Files (x86)\Raptr\plugins\libicq.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00655356 _____ () C:\Program Files (x86)\Raptr\plugins\libirc.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 01306387 _____ () C:\Program Files (x86)\Raptr\plugins\libmsn.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 00565461 _____ () C:\Program Files (x86)\Raptr\plugins\libxmpp.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 01640221 _____ () C:\Program Files (x86)\Raptr\libjabber.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 00506276 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoo.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 01053730 _____ () C:\Program Files (x86)\Raptr\libymsg.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00497782 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoojp.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00603326 _____ () C:\Program Files (x86)\Raptr\plugins\ssl-nss.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00474199 _____ () C:\Program Files (x86)\Raptr\plugins\ssl.dll
2015-04-15 21:14 - 2015-04-15 21:14 - 16863920 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Classes\exefile:  <===== ATTENTION!

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-221738678-620704744-704572411-1000\...\aeriagames.com -> hxxps://aeriagames.com
IE trusted site: HKU\S-1-5-21-221738678-620704744-704572411-1000\...\aeriagames.com -> hxxp://aeriagames.com


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-221738678-620704744-704572411-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Ralink Wireless Utility.lnk => C:\Windows\pss\Ralink Wireless Utility.lnk.CommonStartup
MSCONFIG\startupreg: Aeria Ignite => "C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe" silent
MSCONFIG\startupreg: Overwolf => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent
MSCONFIG\startupreg: Raptr => C:\PROGRA~2\Raptr\raptrstub.exe --startup

==================== FirewallRules (whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

FirewallRules: [{78594C1C-0D50-4158-BE4B-630F903AD614}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{6FBF251F-BD39-4F99-9B43-11228600FA75}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
FirewallRules: [{D2661B1C-FB14-4488-85B6-C9F0F671AC26}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
FirewallRules: [{2C171432-29A8-41AE-B4FC-C8A1B17AA814}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{5AB70EC2-290C-47AF-93E6-2FF6583923AE}] => (Allow) LPort=2869
FirewallRules: [{E223E5D1-C91F-43A7-BAF4-034AF2D39963}] => (Allow) LPort=1900
FirewallRules: [{87113CB6-D031-4465-A7DA-1190F21F5789}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{A6A9391B-02D1-49D7-ADC4-9186A84936CB}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{57B9C597-A0EB-408F-856B-FA683C8132A3}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{714CDBAF-5604-42B3-B700-E8038F5DF945}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [TCP Query User{06F842FE-DDFA-4FCC-AE92-5F69EEE0F652}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{3661892A-DE75-4580-91A0-F9FBF1799DF3}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{5765CABA-404A-44EF-8227-7422B4001117}C:\program files (x86)\dragon's prophet\dp_x64.exe] => (Allow) C:\program files (x86)\dragon's prophet\dp_x64.exe
FirewallRules: [UDP Query User{4AB4E404-C83C-479E-AE15-ED70B9717177}C:\program files (x86)\dragon's prophet\dp_x64.exe] => (Allow) C:\program files (x86)\dragon's prophet\dp_x64.exe
FirewallRules: [{D8B75AC5-DB8B-4A3C-A379-08351FDB3A8A}] => (Block) C:\program files (x86)\dragon's prophet\dp_x64.exe
FirewallRules: [{FA2BCC55-2D25-4982-9813-648096C2D014}] => (Block) C:\program files (x86)\dragon's prophet\dp_x64.exe
FirewallRules: [TCP Query User{8BC7D8B9-96BF-48DA-B566-50842124FA04}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe
FirewallRules: [UDP Query User{9C72FA86-27B7-40B5-BCCB-3EE160D8159F}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe
FirewallRules: [TCP Query User{643C5904-C3B1-4EF9-B893-4374ECF6D6DA}C:\program files (x86)\dragon's prophet\launcher.exe] => (Allow) C:\program files (x86)\dragon's prophet\launcher.exe
FirewallRules: [UDP Query User{878B8F84-B88B-4D79-BA68-B0CE420657C1}C:\program files (x86)\dragon's prophet\launcher.exe] => (Allow) C:\program files (x86)\dragon's prophet\launcher.exe
FirewallRules: [{80ED7FA9-4202-4D90-836F-F9F56B4CDAE4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{4399A304-14B2-4EFA-B537-E8EA862FCC80}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{01721DB0-F656-4031-8930-1E8373DC2F7F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3sp.exe
FirewallRules: [{C1942149-4BF2-4840-B25B-0861219DBE3B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3sp.exe
FirewallRules: [{AD3CBC94-9015-4EEC-8010-9730A95F050C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3mp.exe
FirewallRules: [{83C71D22-7773-410B-9C20-2AA7FDCEB96E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3mp.exe
FirewallRules: [{E7F483C4-10DC-4293-ACA0-F3AF08D31698}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x86.exe
FirewallRules: [{27ADCB35-4841-4AF9-B2D7-CC086CF7A903}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\launcher.exe
FirewallRules: [{4933D89C-009A-43A4-A839-09A511BC8DFC}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\launcher.exe
FirewallRules: [{3D9A3A59-0A6C-440B-A6F9-0A90AC0DE8EB}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x64.exe
FirewallRules: [{18241FBC-0EF3-483B-94A6-AC00EEDBF4A7}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x64.exe
FirewallRules: [{C7D1F9D6-5F5C-4788-8D75-AA4662252A42}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x86.exe
FirewallRules: [TCP Query User{4C269EB3-8471-4A9F-8BEC-B534B181151E}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe
FirewallRules: [UDP Query User{721D1BD2-BDD0-4F36-AD02-862EE89713FE}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe
FirewallRules: [TCP Query User{C39306B7-FF57-4794-8B9A-9AA0F84CB38F}C:\users\dima\appdata\local\iw4m\iw4m.dat] => (Block) C:\users\dima\appdata\local\iw4m\iw4m.dat
FirewallRules: [UDP Query User{F8E2B0E8-5340-4B1C-92C0-7DA4FD31E1C2}C:\users\dima\appdata\local\iw4m\iw4m.dat] => (Block) C:\users\dima\appdata\local\iw4m\iw4m.dat
FirewallRules: [TCP Query User{1D2F39A8-48D1-4F21-9CF1-DE335D47F856}C:\users\dima\desktop\iw4m\iw4m.dat] => (Allow) C:\users\dima\desktop\iw4m\iw4m.dat
FirewallRules: [UDP Query User{56A99EDF-B65F-4AFD-AE16-F7D98D17E077}C:\users\dima\desktop\iw4m\iw4m.dat] => (Allow) C:\users\dima\desktop\iw4m\iw4m.dat
FirewallRules: [TCP Query User{2615C76C-73D3-4D32-B632-E52A4C790CC1}C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe
FirewallRules: [UDP Query User{06CB1C71-BEEC-4057-B2DC-C2D7E2D1CA89}C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe
FirewallRules: [{C39F0114-CCFF-4583-BE3C-FCC7B4C918B2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014 Demo\DotP_D14.exe
FirewallRules: [{586F7494-D5E6-431C-B8E6-847AF4C525E9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014 Demo\DotP_D14.exe
FirewallRules: [{76EF348E-4A47-485D-9F6F-4D71F6E38FC1}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{7AE12753-DC2E-4865-9B9B-D3A3E3937C08}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{5951B7B2-DBCA-4C9A-9BF3-C4114D1B65B5}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{65B33429-5091-41E6-A332-E473323DD788}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{1EC8437C-CE05-4587-9FC8-1F694B4C7C17}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe
FirewallRules: [{D0028759-3301-4357-8B2F-C150FE1F51E3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe
FirewallRules: [{FBA36FBF-DB77-4FD8-BC3F-80825FA74D59}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe
FirewallRules: [{5F4313DD-BA94-4F06-A2F0-B409FDAC09F4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe
FirewallRules: [{67D60A7C-0385-470F-9033-87A08C2D2E4F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [{E3735442-0A8C-41A3-9B08-729BC8802589}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [TCP Query User{7090371A-9B4F-4254-84A8-364D16F3A38C}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [UDP Query User{31DB48CF-D0EF-4B0D-AAE6-7AF83D2137D8}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [{A045D731-60D5-4EAD-BF23-1F7796BB34FA}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [{2C6C6FBA-5AFC-4085-8A68-A8C98856386B}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [TCP Query User{3C639DFB-197E-4AFF-A15E-25F14B889032}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat
FirewallRules: [UDP Query User{82EE40F2-E294-4D7B-9D68-1B75AE208E6A}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat
FirewallRules: [{64E878D7-1907-4A7D-A779-834D5D060955}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat
FirewallRules: [{68209FB4-C66B-4D9D-A2F0-2397BE1AB277}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat
FirewallRules: [TCP Query User{00A0BD31-B63A-4C19-93E8-ABCC8DB5C578}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [UDP Query User{8999A7F5-D427-4328-AAB7-ADA1FA9C59BF}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [{8DC4935E-B350-42D1-8FB1-1BB8F7442E36}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [{6CFC61D0-18CC-49EB-B25A-ACAECA62E42B}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [TCP Query User{EBCAC3E3-AA9A-43CF-B83E-98D5FD5EA402}C:\users\dima\desktop\call of duty modern warfare 2\com.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\com.dat
FirewallRules: [UDP Query User{84C7686B-75DF-401A-9FDF-7FC9F6392C7D}C:\users\dima\desktop\call of duty modern warfare 2\com.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\com.dat
FirewallRules: [{049E4550-90D7-4FEF-B6AD-9D74DED0C676}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\com.dat
FirewallRules: [{993FB1C4-D279-479A-90BE-6165BF19AF2E}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\com.dat
FirewallRules: [TCP Query User{9B3FB14A-DDF0-4459-AB11-D96BA0A21D17}C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [UDP Query User{3511F905-74A3-4CF9-9DC4-31D40CA6C995}C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [{4BBE5ECB-54A4-4EF1-BAA9-DBE3F102DC2F}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [{A73E2F4B-AB36-4447-B71B-F28AF0D3F1C5}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [TCP Query User{85EDB327-F94C-42C7-A714-B52DCFABB896}C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [UDP Query User{62DB249D-8E0B-4DE5-866A-A5EC513C7675}C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [{9BA06BB7-A418-404C-A95C-D8E2282C6F57}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [{CED6EBE2-E036-4988-AB13-D5DA803410B6}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [{E546D188-E7DD-44EE-BC95-7E5100A1366C}] => (Allow) C:\Users\Dima\Downloads\HOTO_downloader.exe
FirewallRules: [{60F46196-1CBF-40C0-970C-031D8BAD38B2}] => (Allow) C:\Users\Dima\Downloads\HOTO_downloader.exe
FirewallRules: [{F45FED77-FF04-4879-9444-42D263E00C25}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe
FirewallRules: [{28EC56F2-D3A9-4BCE-A5F5-878749DE6407}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe
FirewallRules: [{A4083F49-4F11-4A32-B91C-2BAF1B4BF058}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe
FirewallRules: [{DF37D091-D2F9-4401-B457-D9030A3919A8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe
FirewallRules: [{1315155E-2220-4EDE-A4A4-755669B75E19}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [{58E7FDFD-4736-4213-9B42-50E885AE99CA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [{31958790-F30C-4BC7-BDAC-03B4DED35B86}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe
FirewallRules: [{CC1F0407-71B4-4EC3-9F37-0E161C8A3322}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe
FirewallRules: [{145C7649-7AA9-42B3-97E8-5B8400173F22}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe
FirewallRules: [{936F4879-D6DB-4A9A-BEB0-D9E0A63B56E1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe
FirewallRules: [{375BA601-C201-4FFF-9426-9DC8362E1D6A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{4EAF1A42-8BB1-49A8-8D54-63BE9EF5E1FC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{E7EEA6A5-9E71-4A90-B195-713ADC4D3DD9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe
FirewallRules: [{C7E9681A-9A64-4D1A-99A8-CFC9168448D5}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe
FirewallRules: [{4352484E-8611-4EF5-92B1-E1134658D51D}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{FAF9A5EF-500F-48F2-9A53-FB0E549E87A7}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{45E32924-61E5-4693-8142-5090A1DACC77}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{B51953D9-7C03-413E-B7EA-B60979F79136}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [TCP Query User{58A3D1CA-EB63-41E1-815B-2C296E72A629}C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe] => (Allow) C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe
FirewallRules: [UDP Query User{42C952D4-1892-4D10-9AB1-1CC3F39A23F3}C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe] => (Allow) C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe
FirewallRules: [{1D455526-6B1D-4BF9-B8BA-00306E25FF9A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [{0DA93301-8BDC-47FD-B914-E2FA1EC7AAFB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [TCP Query User{0729B18F-9796-4FCF-A32F-7A5833FBE815}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\dima\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{A54F5C5A-D8E2-403E-A810-D1615D1E56C6}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\dima\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{9C8EF3A7-3266-4542-B95E-133CF9D2DFA9}C:\programdata\battle.net\agent\agent.beta.2514\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2514\agent.exe
FirewallRules: [UDP Query User{DF8986C4-FB63-4A37-874F-5E4F5AB0B070}C:\programdata\battle.net\agent\agent.beta.2514\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2514\agent.exe
FirewallRules: [TCP Query User{7D2074A4-AA89-4BA7-A7EB-1268C6492AEE}C:\program files (x86)\devpro\devpro.dll] => (Allow) C:\program files (x86)\devpro\devpro.dll
FirewallRules: [UDP Query User{F2B7C119-C5D0-4914-BEBC-71E99254D344}C:\program files (x86)\devpro\devpro.dll] => (Allow) C:\program files (x86)\devpro\devpro.dll
FirewallRules: [{EA7F7B92-3349-4537-9E50-3A0B4D818281}] => (Allow) C:\AeriaGames\AuraKingdom\game.bin
FirewallRules: [{AB6209F8-0BA4-4FC4-803C-1A73FEFDA112}] => (Allow) C:\AeriaGames\AuraKingdom\game.bin
FirewallRules: [TCP Query User{4F600FC8-F54A-49E9-B588-2F547BBA96B1}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe
FirewallRules: [UDP Query User{DF1CE9AE-5217-4393-B737-92F45CBCB4BD}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe
FirewallRules: [{A1A5A428-B18A-4BC9-A553-B1E6989C2A42}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Darksiders 2\Darksiders2.exe
FirewallRules: [{F60EBF1D-B0A7-4638-B48C-AF3F18B494BA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Darksiders 2\Darksiders2.exe
FirewallRules: [{767607AA-81B6-406F-BF1E-B8A81ED847FC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe
FirewallRules: [{35789372-EE60-4ED3-81F9-A81ED3BF2CE4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe
FirewallRules: [{07DE1F4A-0A51-4A63-BF8D-CD9580D92EB6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{5F40E8E8-9EF2-41AA-9414-FBA5770F0A94}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [TCP Query User{744A07AB-09FD-499C-9F04-E01BB0351E8D}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\dima\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{F7498DED-162B-488F-B59F-256A51C6CE71}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\dima\appdata\local\akamai\netsession_win.exe
FirewallRules: [{AEAB3ECF-0BB1-453B-8D1F-476AE01D86A0}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe
FirewallRules: [{8D48AAEF-A0CE-44E7-9024-CA3944E81E7D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe
FirewallRules: [TCP Query User{6CF9A63C-F912-4E3A-8DDA-6D3AC6AF66DF}C:\programdata\battle.net\agent\agent.beta.2638\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2638\agent.exe
FirewallRules: [UDP Query User{5A9CB3D7-8747-407A-97AB-191DBFC43D75}C:\programdata\battle.net\agent\agent.beta.2638\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2638\agent.exe
FirewallRules: [{94644398-7E26-4C3A-BD3D-8AC488A93807}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe
FirewallRules: [{03DDFDE2-264E-4187-85CD-4382D41F4A6C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe
FirewallRules: [{C38A5A06-BB40-4CFC-BA71-87AEC286F6D6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe
FirewallRules: [{CB8BA2E2-B98E-442B-87D9-92EFB85FECAD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe
FirewallRules: [{234100A5-3277-4236-B80F-3BD7A113F330}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe
FirewallRules: [{9472EB6F-9BC9-4FC2-B7B2-45A96212D7C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe
FirewallRules: [{4DDCAB31-D1CA-49D7-83D1-9A7708CA3387}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Loadout\Loadout.exe
FirewallRules: [{50274324-D5E3-4A7D-9551-60285C4D51CE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Loadout\Loadout.exe
FirewallRules: [{505A793E-19FF-4163-85DA-BDD1366147B4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{5D9B037C-78AD-4F93-AFCB-A8BF0480CCCF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{71BA2590-5ED7-4DC0-919C-603D078A17E1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
FirewallRules: [{E3C9045F-0538-43CE-9AC0-B88A7047D12B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
FirewallRules: [{AA27854D-9002-4BB1-AC3B-2B040589990B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{F262DA23-A9A0-45ED-875A-42640AB812FD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{5B584B43-CDC2-482C-A915-51ED708E2BDE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
FirewallRules: [{FBE87CBF-6E5E-443B-BB64-D76E91781977}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
FirewallRules: [TCP Query User{5B78C40B-EF9C-4DE3-B847-DDC0913711FC}C:\program files (x86)\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\tera\tera-launcher.exe
FirewallRules: [UDP Query User{02ADE6C1-8488-448C-9DD6-1D4ABC838F09}C:\program files (x86)\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\tera\tera-launcher.exe
FirewallRules: [{4EC807D8-651B-4EDE-906E-15D8940E045A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{5C43F976-C8BD-461A-8160-E4037DEC5A46}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{91A8DE20-9DBA-43BD-9F4B-DE1B625D0D83}] => (Allow) C:\AeriaGames\EdenEternal-DE\_Launcher.exe
FirewallRules: [{CD8464F5-1D27-4ACC-848F-AD802961AD3D}] => (Allow) C:\AeriaGames\EdenEternal-DE\_Launcher.exe
FirewallRules: [{20FF7205-61B2-44CC-87A6-CCE211D4603C}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{6B725485-B1DC-4646-B9AD-C4E754073AD5}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{EFDADD2B-5B82-4D44-BFF6-7533A33E5D4B}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{EDABDFE1-A779-47FE-A7F2-0BE99128B9D1}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{C864BA6F-6F65-4A53-BACD-5590447E71A3}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{BF9437A3-0AAD-4EF3-9020-8A7EDA18FFFB}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{5EC4813D-F4A5-44A4-99AE-2FEEADC7BD68}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe
FirewallRules: [{5741DE79-8863-4C92-8CA4-43D24ED12E9D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe
FirewallRules: [{7FA5A6CC-69A0-4EF2-9E4E-D36CF4A6FFB1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe
FirewallRules: [{1E27B3D7-EBC5-46D1-A1F4-5150D5FC7ECA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe
FirewallRules: [{7ACB6A7B-1D9F-4159-9E5C-57293DE770B9}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA World\fifaworld.exe
FirewallRules: [{CC579040-BC64-4658-B938-3FC11265DBA0}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA World\fifaworld.exe
FirewallRules: [TCP Query User{466B6D60-FB8E-40F4-9A96-3F6B84C31F10}C:\programdata\battle.net\agent\agent.2787\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.2787\agent.exe
FirewallRules: [UDP Query User{747BD4DC-E6ED-4E9F-889A-E1029B9BD7EC}C:\programdata\battle.net\agent\agent.2787\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.2787\agent.exe
FirewallRules: [{024C2E0F-0F94-4571-AAA1-63A5D32016D2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe
FirewallRules: [{19CDF823-35E4-43AD-8A38-931E02B58B64}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe
FirewallRules: [{EA2378D9-ADC4-4A3E-947C-030BBA9A41B0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Aura Kingdom\game.bin
FirewallRules: [{E3E3914B-6929-4469-A807-4C9FC60B3CA5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Aura Kingdom\game.bin
FirewallRules: [{AB6817F8-474B-413B-B1A1-DB9F05CE61BB}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{8192EF82-EABD-49D0-92CB-1E602FCB2399}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{8E9567B7-FEC3-4B6A-8469-1B65ACAEBCF2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe
FirewallRules: [{9832DDCA-66F8-432C-8B22-60682E5E919E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe
FirewallRules: [TCP Query User{1128027D-DF51-428D-BBF5-261AD7F20EEC}C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe
FirewallRules: [UDP Query User{0D0921EC-8295-44F1-A446-52BAFD8EF6EB}C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe
FirewallRules: [TCP Query User{1FC5CC73-6F52-4B75-8D0B-4753B673D255}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{A5E61E08-5C0A-4EA7-BD2C-D6ACED33386F}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{E290B8F5-DC46-4D43-9E40-A8CFEBD19A8A}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe
FirewallRules: [UDP Query User{4A59CA75-CB6F-46C3-8E3B-D091F44ACDC5}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe
FirewallRules: [{51E7B824-61EF-498A-94AE-826ED3FE5CF2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{B9C59147-9E45-4E11-9B2F-5702A1ACAFA5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{BB70E8F0-DE1E-4EEF-873C-95044B81A8C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [{49C70379-991F-4248-81CB-BA51F9158E4F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [{6BB569B0-D223-4EAB-A4A0-83B776CDA2DD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age2HD\Launcher.exe
FirewallRules: [{D341F20A-E2E0-4320-82A8-3607608AD108}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age2HD\Launcher.exe
FirewallRules: [{757CE32E-DE9A-440C-BAB3-B9F8EF37A2A0}] => (Allow) C:\Users\Dima\Downloads\b9_downloader.exe
FirewallRules: [{ACA68B80-8F45-4E75-B7D3-470AF290871F}] => (Allow) C:\Users\Dima\Downloads\b9_downloader.exe
FirewallRules: [TCP Query User{B5BB55CB-DE77-4080-963B-3A266AC37CE5}C:\programdata\battle.net\agent\agent.3235\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3235\agent.exe
FirewallRules: [UDP Query User{30EBE90E-7ED1-4868-9D3D-50E6D7112675}C:\programdata\battle.net\agent\agent.3235\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3235\agent.exe
FirewallRules: [{1BAA9821-E2DD-48BF-9E27-F6297D2F5116}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [{9C9260ED-7AA0-4AE4-972E-D83A5D097028}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [{EA27D1BB-E05D-4097-97AF-BC7DE8174F52}] => (Allow) C:\Program Files (x86)\Bench\Proxy\proc.exe
FirewallRules: [{953D2DA8-7AEB-4931-BE76-87BDE0ACBC39}] => (Allow) C:\Program Files (x86)\Bench\Proxy\pwdg.exe
FirewallRules: [{91AF5EE1-530D-4D72-A308-BDBA132ABA31}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{AF831DA2-EC4A-4642-915F-DF7CBB2A2CF3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{BBBB3AD6-5EB2-4204-B5AF-9716942ACB1C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
FirewallRules: [{63BB69A1-F607-4FB8-9EDD-1A607AABDA8B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
FirewallRules: [{34F27A20-13E6-46E6-9901-39383CB7F97A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [{DA9D712D-0C9F-441F-A880-FF8D27837E6E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [TCP Query User{A250025F-7CBE-4CAD-93AE-C02E36E841C1}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe
FirewallRules: [UDP Query User{3D207EE9-306F-48FF-8735-CD8CDAFA0490}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe
FirewallRules: [TCP Query User{F7376CA3-FA2C-4F56-9AD8-0A2ADC4927AE}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe
FirewallRules: [UDP Query User{BCBA424F-EDE5-4DFC-8FD5-56BB5666B2F5}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe
FirewallRules: [{7A5EB71C-C724-402F-8557-A92B3BAD628E}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe
FirewallRules: [{AF09CC9B-68D7-404C-B498-D144643C1A54}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe
FirewallRules: [{D56AE5C0-0487-4C87-8284-10DC792A01DE}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe
FirewallRules: [{CB98B3E2-40A1-4A7C-ACCB-56A50C8E3F7B}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe
FirewallRules: [{B3D84AF2-F39E-4E7D-9D7E-FFCD803C1135}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{AB8E5377-F2F7-441D-9A50-434D83F90C0E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{CCA3F085-5CA5-4FEE-9ADD-935183AE6F1C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{9EA1B11A-0179-414A-AFF8-82050C792E6B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{256D7304-2C38-45D1-97DB-71739BA92297}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [{E2070B33-5CCB-46B0-B6CF-4ED92F8AB562}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [{1E69481E-7920-4B4D-9047-B812C456A75A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{A416660E-98DD-4A45-8A5A-C8BBA66A68A3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{72A09F1B-7789-4A3E-B327-FD1D052150FF}] => (Allow) C:\Program Files (x86)\GameforgeLive\gfl_client.exe
FirewallRules: [TCP Query User{2A0CBFD5-23A1-4C20-91ED-B00077755298}C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe
FirewallRules: [UDP Query User{3933DFA8-6EB3-47A1-A4F9-7C3E7BD2ED67}C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe
FirewallRules: [TCP Query User{69CF256B-C011-492C-B7A0-04F509D0D67B}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe
FirewallRules: [UDP Query User{FFEA845F-4BF9-44FF-89AC-628034543D28}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe
FirewallRules: [{7809CF2C-51C3-4520-8BD0-F210B5BBB57B}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [{CE1678FF-6995-415D-ADDC-E165111812E1}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [{2412E622-4FBF-402A-B899-DBC82E5C6B2B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{5817EFF9-3537-4F8B-97F9-2C33716052B4}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{B65003CD-97BF-4394-A2F7-21A3E24DCFB5}] => (Allow) C:\Nexon\Vindictus EU\en-EU\NMService.exe
FirewallRules: [{0CA242B9-DEDD-43C3-9F4C-BADAE74781E9}] => (Allow) C:\Nexon\Vindictus EU\en-EU\NMService.exe
FirewallRules: [TCP Query User{3D2A0F20-56AE-42D0-80DF-E8AC85D00D13}C:\nexon\vindictus eu\en-eu\vindictus.exe] => (Allow) C:\nexon\vindictus eu\en-eu\vindictus.exe
FirewallRules: [UDP Query User{2DFE002E-3069-4DA8-920D-442A029D663E}C:\nexon\vindictus eu\en-eu\vindictus.exe] => (Allow) C:\nexon\vindictus eu\en-eu\vindictus.exe
FirewallRules: [TCP Query User{93A7A5BC-03EA-42A5-AE99-CC30CBDF752F}C:\users\dima\desktop\eclipse\eclipse.exe] => (Allow) C:\users\dima\desktop\eclipse\eclipse.exe
FirewallRules: [UDP Query User{13A19341-79DD-4889-B496-24BB0AA8C4C2}C:\users\dima\desktop\eclipse\eclipse.exe] => (Allow) C:\users\dima\desktop\eclipse\eclipse.exe
FirewallRules: [TCP Query User{95CD7A11-031A-4E37-B3A1-64F53A1F7A75}C:\program files\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{9B60CDE5-BA1E-4E6D-BDF3-C1056F5F8650}C:\program files\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{C4E30886-3358-4A99-BE81-2F5BED09E73D}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [UDP Query User{710835ED-1463-4E58-8DB1-9F37F56C4A0F}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [TCP Query User{C7584B0F-6622-4E1D-8987-9D85C77F36F0}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [UDP Query User{F365D46D-EED4-49F4-93DF-234F94019BB2}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [TCP Query User{63488A2D-8F13-4C4E-8CC0-49944F9372BA}C:\users\dima\desktop\lancraft\lancraft.exe] => (Allow) C:\users\dima\desktop\lancraft\lancraft.exe
FirewallRules: [UDP Query User{EAEC2D64-0B8E-4599-A61B-53F358A64796}C:\users\dima\desktop\lancraft\lancraft.exe] => (Allow) C:\users\dima\desktop\lancraft\lancraft.exe
FirewallRules: [TCP Query User{A91AD53F-87ED-432A-9D7C-0AC95375B702}C:\users\dima\desktop\warcraft\war3.exe] => (Allow) C:\users\dima\desktop\warcraft\war3.exe
FirewallRules: [UDP Query User{CC9DF559-105D-4031-9013-ADF7BC24CFC3}C:\users\dima\desktop\warcraft\war3.exe] => (Allow) C:\users\dima\desktop\warcraft\war3.exe
FirewallRules: [TCP Query User{6E3020FE-2B2A-413D-8EBC-AC0261DDA56B}C:\users\dima\desktop\warcraft\lancraft.exe] => (Allow) C:\users\dima\desktop\warcraft\lancraft.exe
FirewallRules: [UDP Query User{83FC41EC-2250-4389-B57F-7CF1CF138244}C:\users\dima\desktop\warcraft\lancraft.exe] => (Allow) C:\users\dima\desktop\warcraft\lancraft.exe
FirewallRules: [{E762770A-34B1-461E-B15E-FFC052875F0A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\CastleCrashers\castle.exe
FirewallRules: [{32B2CED0-8283-4A5A-8965-FFCB653C38DA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\CastleCrashers\castle.exe
FirewallRules: [TCP Query User{CA917D8D-9E80-4B19-90E8-110407378DDD}C:\program files (x86)\unity\editor\unity.exe] => (Allow) C:\program files (x86)\unity\editor\unity.exe
FirewallRules: [UDP Query User{4A9F69B2-9BB4-4F0E-B34D-4D95E242700A}C:\program files (x86)\unity\editor\unity.exe] => (Allow) C:\program files (x86)\unity\editor\unity.exe
FirewallRules: [{5A44804A-99EB-4C63-8F18-C9310F1C4657}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe
FirewallRules: [{5C90DDB5-DFDC-4BF5-B6D0-B86A95AEE724}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe
FirewallRules: [TCP Query User{DD861486-7A78-460B-9A83-BFA67BC6A454}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [UDP Query User{21543651-AA0C-4F30-B6F4-14C779C5E70B}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [TCP Query User{5C83AE95-A82A-49CA-B905-4EFC8C6961F9}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [UDP Query User{640696E3-D785-4576-883E-596F24E072B3}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [{5880095B-DD8E-4F79-BA8F-727A270A9A7B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dungeon Defenders\Binaries\Win32\DungeonDefenders.exe
FirewallRules: [{A02B8413-228D-4E79-9B24-1B23EEBA9CE2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dungeon Defenders\Binaries\Win32\DungeonDefenders.exe
FirewallRules: [TCP Query User{E5CD1AD8-4898-41F1-880E-C3CCEEF12C49}C:\program files (x86)\secondlifeviewer\slvoice.exe] => (Allow) C:\program files (x86)\secondlifeviewer\slvoice.exe
FirewallRules: [UDP Query User{37F84E6A-EF30-44B7-8E99-DE3F7E7DF7EE}C:\program files (x86)\secondlifeviewer\slvoice.exe] => (Allow) C:\program files (x86)\secondlifeviewer\slvoice.exe
FirewallRules: [TCP Query User{2478D171-94B3-4D1F-8C59-4E8322B8E276}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{28D75031-A654-47AF-802E-4A9A15D5EF3F}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{3A112284-5247-4174-9FB4-B86BFEBD19F9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{B2899169-D59D-4AC1-BBE3-3F3903152981}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{12C4EFF7-DD2B-4A0E-A3A0-98777451B440}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3.exe
FirewallRules: [{4060C2B9-6F65-462B-9221-EEEBCF58BB56}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3.exe
FirewallRules: [{EFA22BC5-7DE3-47F6-8167-289BFDD93178}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3_Unrestricted.exe
FirewallRules: [{C0D1322B-FEBC-4B0A-BD29-158C54B47C3F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3_Unrestricted.exe
FirewallRules: [{13A229AF-4A20-4E5A-B1D5-E4DA450947FA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Gumboy Tournament\gumboytournament.exe
FirewallRules: [{BD506B34-1746-48BC-A17D-29CE55B609BC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Gumboy Tournament\gumboytournament.exe
FirewallRules: [TCP Query User{E9B42C51-F75A-4042-8D09-5FE64A6E0AFD}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe
FirewallRules: [UDP Query User{A47B5394-0D06-4B60-AEAC-F80C6A18EC73}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe
FirewallRules: [{1F0F5A11-9A4F-49CF-8202-86A2DAEB8299}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_launcher.exe
FirewallRules: [{472579C8-4E14-4D30-9C6E-7C1E88FAB3FD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe
FirewallRules: [{09D4FEB7-995B-4579-90DC-1C535713E99A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe
FirewallRules: [{418B6FDA-1046-4E47-AFFC-EC7C31A532E9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe
FirewallRules: [{7199E669-27DE-4BFD-94D5-FDCF6A7C93AA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe
FirewallRules: [{BFF61270-CC5A-432C-A7FB-7D76DC47C782}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium.exe
FirewallRules: [{490B16FF-C2D2-4175-A366-EFDAA08EB979}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium.exe
FirewallRules: [TCP Query User{C9F38270-E9E5-4168-9E99-11073C550934}C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe
FirewallRules: [UDP Query User{6082536E-F697-45B2-969C-5E5CA8E07E06}C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe
FirewallRules: [TCP Query User{5AC0DF45-9E80-410D-A952-1DDA7A565671}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{31F72C84-B935-4C8E-8E1E-6FBDDC891D1C}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe
FirewallRules: [{8EB84DED-EB81-4D74-9575-8282402E2D2E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cryptic Studios\Neverwinter.exe
FirewallRules: [{B5B40F25-2AC6-4642-8BBC-63AE2A925B7B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cryptic Studios\Neverwinter.exe
FirewallRules: [TCP Query User{096444F6-AA1C-44A3-8C5E-A8DFF4A1C6D0}C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe
FirewallRules: [UDP Query User{9E1BE6EE-CCE2-4CFC-8375-7D1F41A71285}C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe
FirewallRules: [{3E6ED98E-B2F8-4E5F-BAED-9D8ACD743A90}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{2F7FD9C7-09FF-4330-AB1D-62122B26142B}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{B6917A43-4FD1-4943-819E-0224DF009AD4}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{580CEC6F-22A8-423D-B6A2-60898E1991C0}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{1D779765-CEC8-476D-8663-FF565F9943D2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dragon Nest Europe\DragonNest\DragonNest.exe
FirewallRules: [{BFD8F340-3BB5-4D13-B4C8-64605B781AE5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dragon Nest Europe\DragonNest\DragonNest.exe
FirewallRules: [TCP Query User{51AE804F-C3F0-4BE7-8861-486111D1A4C3}C:\neople\dfo\dfo.exe] => (Allow) C:\neople\dfo\dfo.exe
FirewallRules: [UDP Query User{813C44E8-970E-4FB2-A994-1B7E6CFAB002}C:\neople\dfo\dfo.exe] => (Allow) C:\neople\dfo\dfo.exe
FirewallRules: [{721B343A-D002-417F-8012-828923F7CF99}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe
FirewallRules: [{51F7C144-FBEC-4072-83BA-D2DB2C1ED47D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe
FirewallRules: [{0FE2304A-0072-4655-BD88-8EAC2F3EE694}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7C5F9697-EA12-4FD9-AA6A-450DA3B7D57A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{C5FE8083-9835-43F3-84CC-1CE403C9CBA7}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service

==================== Faulty Device Manager Devices =============

Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/13/2015 02:43:54 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 37.0.2.5583, Zeitstempel: 0x552ef76c
Name des fehlerhaften Moduls: mozalloc.dll, Version: 37.0.2.5583, Zeitstempel: 0x552ee9ae
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001aa1
ID des fehlerhaften Prozesses: 0x1704
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3

Error: (05/13/2015 02:43:41 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: CCC.exe, Version: 4.5.0.0, Zeitstempel: 0x53ad0dcc
Name des fehlerhaften Moduls: ltc_game64-94307.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x5511f6fc
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000007fedd0633f0
ID des fehlerhaften Prozesses: 0x9a0
Startzeit der fehlerhaften Anwendung: 0xCCC.exe0
Pfad der fehlerhaften Anwendung: CCC.exe1
Pfad des fehlerhaften Moduls: CCC.exe2
Berichtskennung: CCC.exe3

Error: (05/13/2015 02:43:41 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: CCC.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.
Ausnahmeinformationen: Ausnahmecode c0000005, Ausnahmeadresse 000007FEDD0633F0

Error: (05/13/2015 02:37:53 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/13/2015 02:19:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 37.0.2.5583, Zeitstempel: 0x552ef76c
Name des fehlerhaften Moduls: mozalloc.dll, Version: 37.0.2.5583, Zeitstempel: 0x552ee9ae
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001aa1
ID des fehlerhaften Prozesses: 0x1b4
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3

Error: (05/13/2015 00:50:38 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Fehler = 0x81000101).

Error: (05/12/2015 10:45:55 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/12/2015 10:38:32 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 37.0.2.5583, Zeitstempel: 0x552ef76c
Name des fehlerhaften Moduls: mozalloc.dll, Version: 37.0.2.5583, Zeitstempel: 0x552ee9ae
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001aa1
ID des fehlerhaften Prozesses: 0x614
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3

Error: (05/12/2015 09:00:17 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm csgo.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: d98

Startzeit: 01d08ce59fe19b13

Endzeit: 22

Anwendungspfad: C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe

Berichts-ID:

Error: (05/11/2015 11:44:49 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (05/13/2015 02:43:23 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.

Error: (05/13/2015 02:37:14 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (05/13/2015 02:35:23 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (05/12/2015 10:46:01 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
qrnfd_1_10_0_13

Error: (05/12/2015 10:45:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (05/12/2015 01:02:22 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "PAPA-NB",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{E0D7CF45-4DC0-4905-AF73-9C813310A65F}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (05/12/2015 00:57:15 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (05/12/2015 00:56:52 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\ComboFix\catchme.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (05/12/2015 00:53:57 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (05/12/2015 00:48:58 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "mftb" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


Microsoft Office Sessions:
=========================
Error: (05/13/2015 02:43:54 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe37.0.2.5583552ef76cmozalloc.dll37.0.2.5583552ee9ae8000000300001aa1170401d08d7a1457bd61C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dllb652ad04-f96d-11e4-b11e-f079b1923b2f

Error: (05/13/2015 02:43:41 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: CCC.exe4.5.0.053ad0dccltc_game64-94307.dll_unloaded0.0.0.05511f6fcc0000005000007fedd0633f09a001d08d79dc0dccf5C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exeltc_game64-94307.dllaedb926d-f96d-11e4-b11e-f079b1923b2f

Error: (05/13/2015 02:43:41 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: CCC.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.
Ausnahmeinformationen: Ausnahmecode c0000005, Ausnahmeadresse 000007FEDD0633F0

Error: (05/13/2015 02:37:53 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/13/2015 02:19:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe37.0.2.5583552ef76cmozalloc.dll37.0.2.5583552ee9ae8000000300001aa11b401d08d7699c0b091C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll5d5642e2-f96a-11e4-863a-bd361c78cd2c

Error: (05/13/2015 00:50:38 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: C:\Windows\system32\svchost.exe -k netsvcsWindows Update0x81000101

Error: (05/12/2015 10:45:55 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/12/2015 10:38:32 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe37.0.2.5583552ef76cmozalloc.dll37.0.2.5583552ee9ae8000000300001aa161401d08cd4b2317e5cC:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dllda56909c-f8e6-11e4-b156-d25776320b33

Error: (05/12/2015 09:00:17 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: csgo.exe0.0.0.0d9801d08ce59fe19b1322C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe

Error: (05/11/2015 11:44:49 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity Errors:
===================================
  Date: 2015-05-12 12:56:52.122
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-05-12 12:56:52.091
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-05-08 20:38:53.994
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:37:07.273
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:37:03.798
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:36:19.340
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:34:40.221
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:34:12.814
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:20:56.969
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:20:56.706
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-4570 CPU @ 3.20GHz
Percentage of memory in use: 39%
Total physical RAM: 8136.6 MB
Available physical RAM: 4895.6 MB
Total Pagefile: 16271.39 MB
Available Pagefile: 13217.2 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:915.41 GB) (Free:455.23 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 277A7941)
Partition 1: (Not Active) - (Size=16 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=915.4 GB) - (Type=07 NTFS)

==================== End Of Log ============================