svchost.exe verbraucht viel RAM

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 13:26 on 13/02/2015 (Administrator)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-02-2015
Ran by Administrator (administrator) on QUAPSEL on 13-02-2015 13:27:19
Running from C:\Users\Administrator\Desktop
Loaded Profiles: Administrator (Available profiles: Sir Darkflame & Administrator)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(LogMeIn Inc.) D:\Hamachi\hamachi-2.exe
(LogMeIn, Inc.) D:\Hamachi\LMIGuardianSvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(AMD) C:\Windows\System32\atieclxx.exe
() D:\MSI Afterburner\MSIAfterburner.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files (x86)\ATI Technologies\HydraVision\HydraGrd.exe
(LogMeIn Inc.) D:\Hamachi\hamachi-2-ui.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Microsoft Corporation) D:\MC Office\Office15\ONENOTEM.EXE
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\Grid64.exe
(LogMeIn, Inc.) D:\Hamachi\LMIGuardianSvc.exe
() D:\RivaTuner Statistics Server\RTSS.exe
() D:\RivaTuner Statistics Server\EncoderServer.exe
() D:\RivaTuner Statistics Server\RTSSHooksLoader64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Panda Security) D:\Panda USB Vaccine\USBVaccine.exe
(AVAST Software) D:\Avast\AvastSvc.exe
(AVAST Software) D:\Avast\AvastUI.exe
(AVAST Software) D:\Avast\ng\ngservice.exe
(Opera Software) D:\Opera\27.0.1689.69\opera.exe
() D:\Opera\27.0.1689.69\opera_crashreporter.exe
(Opera Software) D:\Opera\27.0.1689.69\opera.exe
(Opera Software) D:\Opera\27.0.1689.69\opera.exe
(Opera Software) D:\Opera\27.0.1689.69\opera.exe
(AVAST Software) D:\Avast\ng\ngtool.exe
(Opera Software) D:\Opera\27.0.1689.69\opera.exe
(Opera Software) D:\Opera\27.0.1689.69\opera.exe
(Opera Software) D:\Opera\27.0.1689.69\opera.exe
(Avast Software) D:\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) D:\Avast\ng\vbox\aswFe.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
() C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672152 2014-05-09] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1332296 2015-01-30] (Microsoft Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AMD AVT] => C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => D:\Hamachi\hamachi-2-ui.exe [3977576 2015-01-20] (LogMeIn Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => D:\Avast\AvastUI.exe [5225064 2015-02-13] (AVAST Software)
HKU\S-1-5-21-4198189618-3789533832-1361530959-500\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x91000000
HKU\S-1-5-21-4198189618-3789533832-1361530959-500\...\MountPoints2: {0a3996e0-959e-11e4-a7af-001d9233d728} - H:\SETUP.EXE
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Allzeit Atomzeit (leise, 3 Min. verzögert).lnk
ShortcutTarget: Allzeit Atomzeit (leise, 3 Min. verzögert).lnk -> C:\Allzeit Atomzeit\Atomzeit.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk
ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe ()
ShellIconOverlayIdentifiers: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => D:\MC Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => D:\MC Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => D:\MC Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => D:\Avast\ashShA64.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-4198189618-3789533832-1361530959-500\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> D:\MC Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> D:\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> D:\MC Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> D:\MC Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: AcroIEHlprObj Class -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> d:\acrobat reader\Reader\ActiveX\AcroIEHelper.ocx ()
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> D:\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - D:\MC Office\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\..\Interfaces\{3B7C1F1E-95AA-495A-881C-D64F94F61C02}: [NameServer] 8.8.8.8,8.8.4.4

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> D:\MCOFFI~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - D:\Avast\WebRep\FF
FF Extension: Avast Online Security - D:\Avast\WebRep\FF [2015-02-13]

Chrome: 
=======
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Docs) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-13]
CHR Extension: (Google-Suche) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-02-13]
CHR Extension: (Google Mail) - C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-02-13]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - D:\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-02-13]

Opera: 
=======
OPR StartupUrls: "about:blank"
OPR Extension: (AdBlock) - C:\Users\Administrator\AppData\Roaming\Opera Software\Opera Stable\Extensions\aobdicepooefnbaeokijohmhjlleamfj [2015-02-13]
OPR Extension: (µBlock) - C:\Users\Administrator\AppData\Roaming\Opera Software\Opera Stable\Extensions\kccohkcpppjjkkjppopfnflnebibpida [2015-02-13]
StartMenuInternet: (HKLM) OperaStable - D:\Opera\Launcher.exe

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S4 a2AntiMalware; C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe [4920104 2014-12-31] (Emsisoft GmbH)
R2 avast! Antivirus; D:\Avast\AvastSvc.exe [50344 2015-02-13] (AVAST Software)
R3 AvastVBoxSvc; D:\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2015-02-13] (Avast Software)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2014-02-20] (Microsoft Corporation) [File not signed]
R2 Hamachi2Svc; D:\Hamachi\hamachi-2.exe [2485608 2015-01-20] (LogMeIn Inc.)
R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [22744 2014-10-15] (Microsoft Corporation)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2015-01-30] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [366512 2015-01-30] (Microsoft Corporation)
S4 Origin Client Service; D:\Origin\OriginClientService.exe [1903472 2015-01-13] (Electronic Arts)
S4 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [998640 2015-01-15] (Overwolf LTD)
S2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1363160 2014-11-28] (Secunia)
S4 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5426448 2014-12-15] (TeamViewer GmbH)
S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [89232 2014-07-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 a2acc; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2accx64.sys [71472 2014-05-12] (Emsisoft GmbH)
R1 A2DDA; C:\Program Files (x86)\Emsisoft Anti-Malware\a2ddax64.sys [26176 2013-03-28] (Emsisoft GmbH)
R1 a2injectiondriver; C:\Program Files (x86)\Emsisoft Anti-Malware\a2dix64.sys [45208 2013-09-30] (Emsisoft GmbH)
R1 a2util; C:\Program Files (x86)\Emsisoft Anti-Malware\a2util64.sys [23088 2014-05-12] (Emsisoft GmbH)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2015-02-13] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [87912 2015-02-13] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2015-02-13] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2015-02-13] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2015-02-13] (AVAST Software)
S1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2015-02-13] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2015-02-13] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2015-02-13] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2015-01-04] ()
S3 cleanhlp; C:\Program Files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys [57024 2013-12-04] (Emsisoft GmbH)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2015-01-04] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [274696 2014-11-15] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124560 2014-11-15] (Microsoft Corporation)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2014-11-28] (Secunia)
R3 RTCore64; D:\MSI Afterburner\RTCore64.sys [13368 2013-03-11] ()
S3 ssdevfactory; C:\Windows\System32\DRIVERS\ssdevfactory.sys [25088 2015-02-02] (SteelSeries ApS)
R3 sshid; C:\Windows\System32\DRIVERS\sshid.sys [42056 2015-02-02] (SteelSeries ApS)
R1 UimBus; C:\Windows\System32\DRIVERS\UimBus.sys [102664 2014-05-19] ()
R1 Uim_DEVIM; C:\Windows\System32\DRIVERS\uim_devim.sys [25992 2014-05-19] ()
R1 Uim_IM; C:\Windows\System32\DRIVERS\uim_im.sys [700296 2014-05-19] ()
R2 VBoxAswDrv; D:\Avast\ng\vbox\VBoxAswDrv.sys [271752 2015-02-13] (Avast Software)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-13 13:27 - 2015-02-13 13:27 - 00015444 _____ () C:\Users\Administrator\Desktop\FRST.txt
2015-02-13 13:26 - 2015-02-13 13:27 - 00000000 ____D () C:\FRST
2015-02-13 13:26 - 2015-02-13 13:26 - 00000488 _____ () C:\Users\Administrator\Desktop\defogger_disable.log
2015-02-13 13:26 - 2015-02-13 13:26 - 00000000 ____D () C:\ProgramData\rmbwizard
2015-02-13 13:26 - 2015-02-13 13:26 - 00000000 _____ () C:\Users\Administrator\defogger_reenable
2015-02-13 13:25 - 2015-02-13 13:25 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ssdevfactory_01011.Wdf
2015-02-13 13:25 - 2015-02-13 13:25 - 00000000 ____D () C:\Windows\LastGood
2015-02-13 13:25 - 2015-02-13 13:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SteelSeries
2015-02-13 13:22 - 2015-02-13 13:23 - 02134016 _____ (Farbar) C:\Users\Administrator\Desktop\FRST64.exe
2015-02-13 13:22 - 2015-02-13 13:22 - 00380416 _____ () C:\Users\Administrator\Desktop\Gmer-19357.exe
2015-02-13 13:22 - 2015-02-13 13:22 - 00050477 _____ () C:\Users\Administrator\Desktop\Defogger.exe
2015-02-13 13:20 - 2015-02-13 13:21 - 00003202 _____ () C:\Windows\DPINST.LOG
2015-02-13 13:18 - 2015-02-13 13:18 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Secunia PSI
2015-02-13 13:16 - 2015-02-13 13:16 - 00001075 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk
2015-02-13 13:16 - 2015-02-13 13:16 - 00000000 ____D () C:\Program Files (x86)\Secunia
2015-02-13 13:15 - 2015-02-13 13:16 - 59627992 _____ () C:\Users\Administrator\Downloads\SteelSeriesEngine3.3.3Setup.exe
2015-02-13 13:14 - 2015-02-13 13:14 - 00000187 _____ () C:\Windows\system32\2015-02-13-12-14-19.010-aswFe.exe-6332.log
2015-02-13 13:13 - 2015-02-13 13:13 - 00000137 _____ () C:\Windows\system32\2015-02-13-12-13-46.027-AvastVBoxSVC.exe-7332.log
2015-02-13 12:56 - 2015-02-13 12:56 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-13 12:55 - 2015-02-13 12:55 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-13 12:53 - 2015-02-13 12:58 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-13 12:46 - 2015-02-13 13:04 - 00000000 ____D () C:\Windows\SysWOW64\vbox
2015-02-13 12:46 - 2015-02-13 13:04 - 00000000 ____D () C:\Windows\system32\vbox
2015-02-13 12:44 - 2015-02-13 12:44 - 05490752 _____ (Secunia) C:\Users\Administrator\Downloads\PSISetup10004.exe
2015-02-13 12:38 - 2015-02-13 13:26 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-13 12:38 - 2015-02-13 12:38 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-13 12:24 - 2015-02-13 12:24 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_blockmounter_01_09_00.Wdf
2015-02-13 12:24 - 2015-02-13 12:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paragon Backup and Recovery™ 2014 Free
2015-02-13 12:22 - 2015-02-13 12:22 - 00000000 ____D () C:\Program Files\Paragon Software
2015-02-13 12:19 - 2015-02-13 12:19 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Downloaded Installations
2015-02-13 12:18 - 2015-02-13 12:18 - 00000000 ____D () C:\ProgramData\explauncher
2015-02-13 12:07 - 2015-02-13 12:07 - 00003816 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1423825627
2015-02-13 12:07 - 2015-02-13 12:07 - 00000663 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-02-13 12:07 - 2015-02-13 12:07 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Opera Software
2015-02-13 12:07 - 2015-02-13 12:07 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Opera Software
2015-02-13 12:05 - 2015-02-13 12:08 - 417659040 _____ () C:\Users\Administrator\Downloads\br2014Free101.exe
2015-02-13 12:04 - 2015-02-13 12:04 - 00004124 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-02-13 12:04 - 2015-02-13 12:04 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\AVAST Software
2015-02-13 12:04 - 2015-02-13 12:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-02-13 12:03 - 2015-02-13 12:03 - 32900504 _____ (Opera Software) C:\Users\Administrator\Downloads\Opera_27.0.1689.69_Setup.exe
2015-02-13 12:03 - 2015-02-13 12:03 - 00000000 ____D () C:\ProgramData\Panda Security
2015-02-13 12:03 - 2015-02-13 12:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-02-13 12:02 - 2015-02-13 13:00 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-13 12:02 - 2015-02-13 12:05 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2015-02-13 12:02 - 2015-02-13 12:04 - 01050432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2015-02-13 12:02 - 2015-02-13 12:04 - 00087912 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys
2015-02-13 12:02 - 2015-02-13 12:03 - 00000000 ____D () C:\Program Files (x86)\Google
2015-02-13 12:02 - 2015-02-13 12:02 - 00436624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2015-02-13 12:02 - 2015-02-13 12:02 - 00364512 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2015-02-13 12:02 - 2015-02-13 12:02 - 00267632 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2015-02-13 12:02 - 2015-02-13 12:02 - 00116728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2015-02-13 12:02 - 2015-02-13 12:02 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2015-02-13 12:02 - 2015-02-13 12:02 - 00083280 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys.1423825467515
2015-02-13 12:02 - 2015-02-13 12:02 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2015-02-13 12:02 - 2015-02-13 12:02 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2015-02-13 12:02 - 2015-02-13 12:02 - 00003048 _____ () C:\Windows\System32\Tasks\PandaUSBVaccine
2015-02-13 12:02 - 2015-02-13 12:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Security
2015-02-13 12:02 - 2015-02-13 12:01 - 01050432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys.1423825464968
2015-02-13 12:01 - 2015-02-13 12:01 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2015-02-13 11:58 - 2015-02-13 11:59 - 00848856 _____ (Panda Security ) C:\Users\Administrator\Downloads\USBVaccineSetup.exe
2015-02-13 11:57 - 2015-02-13 11:59 - 00000000 ____D () C:\ProgramData\AVAST Software
2015-02-13 11:56 - 2015-02-13 11:57 - 132469808 _____ (AVAST Software) C:\Users\Administrator\Downloads\avast_free_antivirus_setup_10.2208.712.exe
2015-02-13 11:56 - 2015-02-13 11:56 - 00002123 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2015-02-13 11:56 - 2015-02-13 11:56 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2015-02-13 11:56 - 2015-02-13 11:56 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2015-02-13 11:55 - 2015-02-13 11:55 - 00000000 ____D () C:\Users\Administrator\Downloads\MSEInstall_4.7.0205_de
2015-02-13 11:54 - 2015-02-13 11:54 - 25244015 _____ () C:\Users\Administrator\Downloads\MSEInstall_4.7.0205_de.zip
2015-02-13 11:48 - 2015-02-13 11:48 - 00124552 _____ () C:\Users\Sir Darkflame\AppData\Local\GDIPFONTCACHEV1.DAT
2015-02-13 11:48 - 2015-02-13 11:48 - 00000000 ____D () C:\Users\Sir Darkflame\AppData\Roaming\ATI
2015-02-13 11:48 - 2015-02-13 11:48 - 00000000 ____D () C:\Users\Sir Darkflame\AppData\Local\LogMeIn Hamachi
2015-02-13 11:48 - 2015-02-13 11:48 - 00000000 ____D () C:\Users\Sir Darkflame\AppData\Local\Chromium
2015-02-13 11:48 - 2015-02-13 11:48 - 00000000 ____D () C:\Users\Sir Darkflame\AppData\Local\ATI
2015-02-13 11:47 - 2015-02-13 11:48 - 00000000 ____D () C:\Users\Sir Darkflame\AppData\Local\VirtualStore
2015-02-13 11:47 - 2015-02-13 11:47 - 00001431 _____ () C:\Users\Sir Darkflame\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-02-13 11:47 - 2015-02-13 11:47 - 00000020 ___SH () C:\Users\Sir Darkflame\ntuser.ini
2015-02-13 11:47 - 2015-02-13 11:47 - 00000000 _SHDL () C:\Users\Sir Darkflame\Vorlagen
2015-02-13 11:47 - 2015-02-13 11:47 - 00000000 _SHDL () C:\Users\Sir Darkflame\Startmenü
2015-02-13 11:47 - 2015-02-13 11:47 - 00000000 _SHDL () C:\Users\Sir Darkflame\Netzwerkumgebung
2015-02-13 11:47 - 2015-02-13 11:47 - 00000000 _SHDL () C:\Users\Sir Darkflame\Lokale Einstellungen
2015-02-13 11:47 - 2015-02-13 11:47 - 00000000 _SHDL () C:\Users\Sir Darkflame\Eigene Dateien
2015-02-13 11:47 - 2015-02-13 11:47 - 00000000 _SHDL () C:\Users\Sir Darkflame\Druckumgebung
2015-02-13 11:47 - 2015-02-13 11:47 - 00000000 _SHDL () C:\Users\Sir Darkflame\Documents\Eigene Musik
2015-02-13 11:47 - 2015-02-13 11:47 - 00000000 _SHDL () C:\Users\Sir Darkflame\Documents\Eigene Bilder
2015-02-13 11:47 - 2015-02-13 11:47 - 00000000 _SHDL () C:\Users\Sir Darkflame\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-02-13 11:47 - 2015-02-13 11:47 - 00000000 _SHDL () C:\Users\Sir Darkflame\AppData\Local\Verlauf
2015-02-13 11:47 - 2015-02-13 11:47 - 00000000 _SHDL () C:\Users\Sir Darkflame\AppData\Local\Anwendungsdaten
2015-02-13 11:47 - 2015-02-13 11:47 - 00000000 _SHDL () C:\Users\Sir Darkflame\Anwendungsdaten
2015-02-13 11:47 - 2015-02-13 11:47 - 00000000 ____D () C:\Users\Sir Darkflame\AppData\Roaming\Adobe
2015-02-13 11:47 - 2015-02-13 11:47 - 00000000 ____D () C:\Users\Sir Darkflame
2015-02-13 11:47 - 2015-01-18 22:56 - 00000000 ____D () C:\Users\Sir Darkflame\Documents\Visual Studio 2013
2015-02-13 11:47 - 2015-01-12 16:08 - 00000000 ____D () C:\Users\Sir Darkflame\AppData\Roaming\Macromedia
2015-02-13 11:47 - 2015-01-10 21:37 - 00000000 ____D () C:\Users\Sir Darkflame\AppData\Local\Microsoft Help
2015-02-13 11:47 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\Sir Darkflame\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-02-13 11:47 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\Sir Darkflame\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-02-13 11:38 - 2015-02-13 11:38 - 00651264 _____ () C:\Users\Administrator\Downloads\MicrosoftFixit50096.msi
2015-02-12 23:14 - 2015-02-12 23:14 - 00001416 _____ () C:\Users\Administrator\Downloads\pftpft-Lord_Darkflame-953256-20150212.sgf
2015-02-12 23:13 - 2015-01-09 04:14 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-02-12 23:13 - 2015-01-09 04:14 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-02-12 23:13 - 2015-01-09 04:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-02-12 23:13 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdi.dll
2015-02-12 15:39 - 2015-02-12 15:39 - 00128995 _____ () C:\Users\Administrator\Downloads\7173.svg
2015-02-12 14:06 - 2015-01-23 05:42 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-02-12 14:06 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-02-12 14:06 - 2015-01-23 04:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-02-12 14:06 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-02-11 19:52 - 2015-02-13 11:11 - 00113238 _____ () C:\Users\Administrator\Downloads\Extras.Txt
2015-02-11 19:51 - 2015-02-13 11:11 - 00392540 _____ () C:\Users\Administrator\Downloads\OTL.Txt
2015-02-11 19:43 - 2015-02-11 19:43 - 00000324 _____ () C:\Users\Administrator\Desktop\Links.txt
2015-02-11 19:31 - 2015-02-11 19:31 - 00602112 _____ (OldTimer Tools) C:\Users\Administrator\Downloads\OTL.exe
2015-02-11 19:29 - 2015-01-14 06:47 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-02-11 19:29 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-02-11 19:29 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-02-11 19:29 - 2015-01-12 04:05 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-02-11 19:29 - 2015-01-12 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-02-11 19:29 - 2015-01-12 03:49 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-02-11 19:29 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-02-11 19:29 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-02-11 19:29 - 2015-01-12 03:48 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-02-11 19:29 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-02-11 19:29 - 2015-01-12 03:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-02-11 19:29 - 2015-01-12 03:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-02-11 19:29 - 2015-01-12 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-02-11 19:29 - 2015-01-12 03:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-02-11 19:29 - 2015-01-12 03:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-02-11 19:29 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-02-11 19:29 - 2015-01-12 03:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-11 19:29 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-02-11 19:29 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-02-11 19:29 - 2015-01-12 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-02-11 19:29 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-02-11 19:29 - 2015-01-12 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-02-11 19:29 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-02-11 19:29 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-02-11 19:29 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-02-11 19:29 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-02-11 19:29 - 2015-01-12 03:04 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-02-11 19:29 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-02-11 19:29 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-02-11 19:29 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-02-11 19:29 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-02-11 19:29 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-02-11 19:29 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-02-11 19:29 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-02-11 19:29 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-02-11 19:29 - 2015-01-12 02:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-02-11 19:29 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-02-11 19:29 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-02-11 19:29 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-02-11 19:29 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-02-11 19:29 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-02-11 19:29 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-02-11 19:29 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-02-11 19:29 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-02-11 19:29 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-02-11 19:29 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-02-11 19:29 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-02-11 19:29 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-02-11 19:29 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-02-11 19:29 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-02-11 19:29 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-02-11 19:29 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-02-11 19:29 - 2015-01-10 07:48 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-02-11 19:29 - 2015-01-10 07:48 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-02-11 19:29 - 2015-01-10 07:48 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-02-11 19:29 - 2015-01-10 07:48 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-02-11 19:29 - 2015-01-10 07:48 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-02-11 19:29 - 2015-01-10 07:48 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-02-11 19:29 - 2015-01-10 07:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-02-11 19:29 - 2015-01-10 07:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-02-11 19:29 - 2015-01-10 07:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-02-11 19:29 - 2015-01-10 07:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-02-11 19:29 - 2015-01-10 07:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-02-11 19:29 - 2015-01-10 07:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-02-11 19:29 - 2015-01-10 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-02-11 19:29 - 2015-01-10 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-02-11 19:28 - 2015-01-15 09:14 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-02-11 19:28 - 2015-01-15 09:14 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-02-11 19:28 - 2015-01-15 09:09 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-02-11 19:28 - 2015-01-15 09:09 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-02-11 19:28 - 2015-01-15 09:09 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-02-11 19:28 - 2015-01-15 09:09 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-02-11 19:28 - 2015-01-15 09:09 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-02-11 19:28 - 2015-01-15 09:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-02-11 19:28 - 2015-01-15 09:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-02-11 19:28 - 2015-01-15 09:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-02-11 19:28 - 2015-01-15 09:04 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-02-11 19:28 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-02-11 19:28 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-02-11 19:28 - 2015-01-15 08:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-02-11 19:28 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-02-11 19:28 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-02-11 19:28 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-02-11 19:28 - 2015-01-15 05:22 - 00458824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-02-11 19:28 - 2015-01-14 07:09 - 05554112 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-02-11 19:28 - 2015-01-14 07:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-02-11 19:28 - 2015-01-14 07:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-02-11 19:28 - 2015-01-14 07:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-02-11 19:28 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-02-11 19:28 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-02-11 19:28 - 2015-01-14 06:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-02-11 19:28 - 2015-01-13 04:10 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-02-11 19:28 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-02-11 19:28 - 2014-12-12 06:31 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-02-11 19:28 - 2014-12-12 06:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-02-11 19:28 - 2014-12-08 04:09 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-11 19:28 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-02-11 19:28 - 2014-11-26 04:53 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-02-11 19:28 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-02-11 19:28 - 2014-07-07 03:07 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-02-11 19:28 - 2014-07-07 03:06 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-02-11 19:28 - 2014-07-07 02:40 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-02-11 19:28 - 2014-07-07 02:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-02-11 19:27 - 2015-01-09 03:03 - 03201536 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-02-08 16:05 - 2015-02-08 16:05 - 00006433 _____ () C:\Users\Administrator\Documents\ayabot001-LordFlame-2.sgf
2015-02-07 21:54 - 2015-02-07 21:54 - 00000784 _____ () C:\Users\Administrator\Downloads\Skjaldbakka-Lord_Darkflame-959513-20150207.sgf
2015-02-07 21:50 - 2015-02-07 21:51 - 00000971 _____ () C:\Users\Administrator\Downloads\dreDREb13-Lord_Darkflame-959671-20150206 (1).sgf
2015-02-06 22:16 - 2015-02-06 22:17 - 00639400 _____ (Oracle Corporation) C:\Users\Administrator\Downloads\jre-8u31-windows-i586-iftw.exe
2015-02-06 22:16 - 2015-02-06 22:16 - 00639400 _____ (Oracle Corporation) C:\Users\Administrator\Downloads\chromeinstall-8u31.exe
2015-02-06 22:06 - 2015-02-06 22:06 - 00005450 _____ () C:\Users\Administrator\Documents\HiraBot04-LordFlame.sgf
2015-02-06 21:51 - 2015-02-06 21:52 - 00000922 _____ () C:\Users\Administrator\Downloads\dreDREb13-Lord_Darkflame-959671-20150206.sgf
2015-02-06 20:23 - 2015-02-06 20:23 - 00005747 _____ () C:\Users\Administrator\Downloads\mfgo09kyu-LordFlame.sgf
2015-02-06 20:02 - 2015-02-06 20:02 - 00002515 _____ () C:\Users\Administrator\Desktop\CGoban 3-NFA.lnk
2015-02-06 20:02 - 2015-02-06 20:02 - 00001435 _____ () C:\Users\Administrator\Downloads\cgoban-nfa.jnlp
2015-02-06 20:02 - 2015-02-06 20:02 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KGS Online-NFA
2015-02-05 15:56 - 2015-02-05 15:57 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\SpaceEngineers
2015-02-05 14:25 - 2015-02-12 15:22 - 10691867 _____ () C:\Users\Administrator\Desktop\Sicherungskopie von Facharbeit.wbk
2015-02-05 14:25 - 2015-02-05 14:25 - 00000000 ____D () C:\Users\Administrator\Documents\Benutzerdefinierte Office-Vorlagen
2015-02-02 16:12 - 2015-02-02 16:12 - 00042056 _____ (SteelSeries ApS) C:\Windows\system32\Drivers\sshid.sys
2015-02-02 16:12 - 2015-02-02 16:12 - 00025088 _____ (SteelSeries ApS) C:\Windows\system32\Drivers\ssdevfactory.sys
2015-02-02 16:12 - 2015-02-02 16:12 - 00008704 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\hidkmdf.sys
2015-02-02 15:43 - 2015-02-02 15:43 - 00000875 _____ () C:\Users\Administrator\Downloads\Janssensei9x9-Lord_Darkflame-956431-20150202 (1).sgf
2015-02-02 15:20 - 2015-02-02 15:20 - 00000822 _____ () C:\Users\Administrator\Downloads\dice70391-Lord_Darkflame-20150202.sgf
2015-02-02 15:11 - 2015-02-02 15:11 - 00000861 _____ () C:\Users\Administrator\Downloads\Janssensei9x9-Lord_Darkflame-956431-20150202.sgf
2015-02-02 15:10 - 2015-02-02 15:10 - 00000797 _____ () C:\Users\Administrator\Downloads\Lord_Darkflame-Aglasis-961044-20150202.sgf
2015-02-02 15:06 - 2015-02-02 15:06 - 00000792 _____ () C:\Users\Administrator\Downloads\dreDREb13-Lord_Darkflame-959671-20150201.sgf
2015-02-02 04:39 - 2015-02-02 04:39 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2015-02-02 00:46 - 2015-02-02 00:46 - 00001456 _____ () C:\Users\Administrator\Desktop\starbound_opengl - Verknüpfung.lnk
2015-02-01 17:30 - 2015-02-01 17:30 - 00000830 _____ () C:\Users\Administrator\Desktop\lol.launcher.admin - Verknüpfung.lnk
2015-02-01 13:14 - 2015-02-01 13:16 - 49766360 _____ () C:\Users\Administrator\Desktop\Terraria.zip
2015-01-30 19:00 - 2015-01-30 19:00 - 00000000 ____D () C:\Users\Administrator\Desktop\Saves
2015-01-30 18:58 - 2015-01-30 18:58 - 43931065 _____ () C:\Users\Administrator\Desktop\Terraria.7z
2015-01-30 17:40 - 2015-01-30 17:40 - 00000000 ____D () C:\Users\Administrator\Downloads\SkyUI_4_1-3863-4-1
2015-01-30 17:40 - 2013-06-24 19:49 - 01552019 _____ () C:\Users\Administrator\Downloads\SkyUI.bsa
2015-01-30 17:40 - 2013-06-24 18:12 - 00025180 _____ () C:\Users\Administrator\Downloads\Readme - SkyUI.txt
2015-01-30 17:40 - 2013-06-18 01:59 - 00002385 _____ () C:\Users\Administrator\Downloads\SkyUI.esp
2015-01-30 17:40 - 2013-01-06 17:14 - 00000000 ____D () C:\Users\Administrator\Downloads\fomod
2015-01-30 17:39 - 2015-01-30 17:40 - 86482786 _____ () C:\Users\Administrator\Downloads\Cloaks of Skyrim 1-2 -12092-1-2.rar
2015-01-30 17:37 - 2015-01-30 17:37 - 01409134 _____ () C:\Users\Administrator\Downloads\SkyUI_4_1-3863-4-1.7z
2015-01-30 17:33 - 2015-01-30 17:41 - 00000000 ____D () C:\Users\Administrator\Documents\Nexus Mod Manager
2015-01-30 17:33 - 2015-01-30 17:33 - 00313875 _____ () C:\Users\Administrator\Downloads\skse_1_07_01_installer (1).exe
2015-01-30 17:33 - 2015-01-30 17:33 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Black_Tree_Gaming
2015-01-30 17:33 - 2015-01-30 17:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager
2015-01-30 17:32 - 2015-01-30 17:32 - 04288712 _____ (Black Tree Gaming ) C:\Users\Administrator\Downloads\Nexus Mod Manager-0.53.2.exe
2015-01-30 17:32 - 2015-01-30 17:32 - 00313875 _____ () C:\Users\Administrator\Downloads\skse_1_07_01_installer.exe
2015-01-30 17:26 - 2015-01-30 17:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2015-01-30 17:24 - 2015-02-01 13:15 - 00000000 ____D () C:\Users\Administrator\Desktop\Terraria
2015-01-30 17:21 - 2015-01-30 17:22 - 77668635 _____ () C:\Users\Administrator\Downloads\terraria_soundtrack_vol_1_mp3.zip
2015-01-30 17:21 - 2015-01-30 17:22 - 44881429 _____ () C:\Users\Administrator\Downloads\terraria_soundtrack_vol_2_mp3.zip
2015-01-30 17:21 - 2015-01-30 17:22 - 109190808 _____ (GOG.com ) C:\Users\Administrator\Downloads\setup_terraria_2.0.0.1.exe
2015-01-30 12:38 - 2015-01-30 12:38 - 07377091 _____ (Lauri Paatero ) C:\Users\Administrator\Downloads\gowrite2_inst.exe
2015-01-28 19:15 - 2015-01-28 19:16 - 24246566 _____ () C:\Users\Administrator\Downloads\OneDrive-2015-01-28.zip
2015-01-28 19:15 - 2015-01-28 19:15 - 12051238 _____ (ACD Systems Ltd.) C:\Users\Administrator\Downloads\esa_science-2003.scr
2015-01-28 08:10 - 2015-01-28 19:17 - 07476824 _____ (ACD Systems Ltd.) C:\Users\Administrator\Downloads\SCIENCE_PROJECTS.scr
2015-01-28 08:10 - 2015-01-28 19:17 - 06763056 _____ (ACD Systems Ltd.) C:\Users\Administrator\Downloads\smart.scr
2015-01-28 08:10 - 2015-01-28 19:17 - 03679598 _____ (ACD Systems Ltd.) C:\Users\Administrator\Downloads\PROJ_LOGOS.scr
2015-01-28 08:09 - 2015-01-28 19:17 - 03271403 _____ (ACD Systems Ltd.) C:\Users\Administrator\Downloads\MEX_2001_V2.scr
2015-01-28 08:09 - 2015-01-28 19:17 - 03042302 _____ (ACD Systems Ltd.) C:\Users\Administrator\Downloads\esaflags.scr
2015-01-27 19:25 - 2015-01-27 19:26 - 136020676 _____ () C:\Users\Administrator\Downloads\The_Music_of_League_of_Legends_Volume_1.zip
2015-01-24 17:25 - 2015-01-24 17:25 - 00000000 ____D () C:\ProgramData\Emsisoft
2015-01-24 16:48 - 2015-01-24 16:48 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Skyrim
2015-01-24 16:43 - 2015-01-30 12:07 - 00035254 _____ () C:\Windows\DirectX.log
2015-01-24 16:31 - 2015-01-24 16:32 - 37987520 _____ (Microsoft Corporation) C:\Users\Administrator\Downloads\Windows-KB890830-x64-V5.20.exe
2015-01-24 16:28 - 2015-01-25 13:13 - 00000000 ____D () C:\Program Files (x86)\Emsisoft Anti-Malware
2015-01-24 16:28 - 2015-01-24 16:35 - 129289976 _____ (Microsoft Corporation) C:\Users\Administrator\Downloads\msert.exe
2015-01-24 16:28 - 2015-01-24 16:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware
2015-01-24 16:23 - 2015-01-24 16:28 - 174844984 _____ (Emsisoft Ltd. ) C:\Users\Administrator\Downloads\EmsisoftAntiMalwareSetup.exe
2015-01-24 16:13 - 2015-01-24 16:13 - 00000000 ____D () C:\TDSSKiller_Quarantine
2015-01-24 16:10 - 2015-01-24 16:10 - 00372800 _____ (Kaspersky Lab.) C:\Users\Administrator\Downloads\Kabasiji.exe
2015-01-24 16:09 - 2015-01-24 16:10 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\Administrator\Downloads\tdsskiller.exe
2015-01-24 15:23 - 2015-01-24 15:24 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Apps\Windows 7 USB DVD Download Tool
2015-01-24 15:23 - 2015-01-24 15:23 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows 7 USB DVD Download Tool
2015-01-24 15:07 - 2015-01-24 15:07 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2015-01-24 15:05 - 2015-01-24 15:05 - 02721168 _____ (Microsoft Corporation) C:\Users\Administrator\Downloads\Windows7-USB-DVD1024-tool.exe
2015-01-24 15:04 - 2015-01-24 15:29 - 4225595392 _____ () C:\Users\Administrator\Downloads\Windows10_TechnicalPreview_x64_DE-DE_9926.iso
2015-01-23 19:40 - 2015-01-23 19:40 - 00000773 _____ () C:\Users\Administrator\Downloads\grokk-Lord_Darkflame-961383-20150122.sgf
2015-01-22 20:59 - 2015-01-22 20:59 - 00001430 _____ () C:\Users\Administrator\Downloads\Giovannie-Lord_Darkflame-20150121.sgf
2015-01-22 18:40 - 2015-01-22 18:40 - 13696416 _____ () C:\Users\Administrator\Downloads\TeamViewerPortable.zip
2015-01-22 18:29 - 2015-01-22 18:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2015-01-22 18:29 - 2015-01-14 11:32 - 00033856 ____H (LogMeIn, Inc.) C:\Windows\system32\hamachi.sys
2015-01-20 19:02 - 2015-01-20 19:02 - 00001195 _____ () C:\Users\Administrator\Downloads\nikbelov2-Lord_Darkflame-953171-20150120.sgf
2015-01-20 18:59 - 2015-01-20 18:59 - 00000647 _____ () C:\Users\Administrator\Downloads\grokk-Lord_Darkflame-961383-20150120.sgf
2015-01-18 22:55 - 2015-01-18 22:56 - 00000000 ____D () C:\Users\Default\Documents\Visual Studio 2013
2015-01-18 22:55 - 2015-01-18 22:56 - 00000000 ____D () C:\Users\Default User\Documents\Visual Studio 2013
2015-01-18 20:16 - 2015-01-18 20:16 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\OpenOffice
2015-01-18 12:19 - 2015-01-18 22:52 - 00001259 _____ () C:\Users\Administrator\Downloads\Sofiam-Lord_Darkflame-956772-20150116.sgf
2015-01-18 11:16 - 2015-01-18 11:20 - 00001908 _____ () C:\Windows\diagwrn.xml
2015-01-18 11:16 - 2015-01-18 11:20 - 00001908 _____ () C:\Windows\diagerr.xml
2015-01-18 11:05 - 2015-02-13 13:25 - 00012645 _____ () C:\Windows\setupact.log
2015-01-18 11:05 - 2015-01-18 11:16 - 00000000 _____ () C:\Windows\setuperr.log
2015-01-16 20:43 - 2015-01-16 20:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2012
2015-01-16 20:43 - 2015-01-16 20:43 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 11.0
2015-01-16 20:41 - 2015-01-16 20:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Phone SDK 8.1
2015-01-16 20:41 - 2015-01-16 20:41 - 00000000 ____D () C:\Program Files (x86)\Windows Phone Silverlight Kits
2015-01-16 20:39 - 2015-01-16 20:40 - 00000000 ____D () C:\Users\Administrator\Documents\Visual Studio 2013
2015-01-16 20:39 - 2015-01-16 20:39 - 00002854 _____ () C:\Windows\System32\Tasks\Auslogics Disk Defrag Screensaver.Administrator
2015-01-16 20:39 - 2015-01-16 20:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Disk Defrag ScreenSaver
2015-01-16 20:39 - 2015-01-16 20:39 - 00000000 ____D () C:\Program Files (x86)\Microsoft XDE
2015-01-16 20:39 - 2015-01-16 20:39 - 00000000 ____D () C:\Program Files (x86)\Auslogics
2015-01-16 20:39 - 2010-02-03 13:04 - 00489072 _____ () C:\Windows\aus_ddss.scr
2015-01-16 20:35 - 2015-01-16 20:35 - 00000000 ____D () C:\Program Files (x86)\AppInsights
2015-01-16 20:31 - 2015-01-16 20:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 5 SDK
2015-01-16 20:30 - 2015-01-16 20:30 - 00000000 ____D () C:\Program Files\Microsoft SQL Server Compact Edition
2015-01-16 20:30 - 2015-01-16 20:30 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-01-16 20:29 - 2015-01-16 20:29 - 00000000 ____D () C:\Program Files\Application Verifier
2015-01-16 20:29 - 2015-01-16 20:29 - 00000000 ____D () C:\Program Files (x86)\Application Verifier
2015-01-16 20:28 - 2015-01-16 20:36 - 00000000 ____D () C:\ProgramData\Windows App Certification Kit
2015-01-16 20:28 - 2015-01-16 20:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Kits
2015-01-16 20:26 - 2015-01-16 20:26 - 00000000 ____D () C:\ProgramData\PreEmptive Solutions
2015-01-16 20:25 - 2015-01-16 20:26 - 00000000 ____D () C:\Program Files (x86)\Microsoft ASP.NET
2015-01-16 20:24 - 2015-01-16 20:24 - 00000000 ____D () C:\Program Files (x86)\Microsoft Web Tools
2015-01-16 20:23 - 2015-01-16 20:35 - 00000000 ____D () C:\Program Files\IIS Express
2015-01-16 20:23 - 2015-01-16 20:35 - 00000000 ____D () C:\Program Files (x86)\IIS Express
2015-01-16 20:23 - 2015-01-16 20:23 - 00000000 ____D () C:\ProgramData\NuGet
2015-01-16 20:23 - 2015-01-16 20:23 - 00000000 ____D () C:\Program Files\IIS
2015-01-16 20:23 - 2015-01-16 20:23 - 00000000 ____D () C:\Program Files (x86)\NuGet
2015-01-16 20:23 - 2015-01-16 20:23 - 00000000 ____D () C:\Program Files (x86)\Microsoft WCF Data Services
2015-01-16 20:23 - 2015-01-16 20:23 - 00000000 ____D () C:\Program Files (x86)\IIS
2015-01-16 20:21 - 2015-01-16 20:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Expression
2015-01-16 20:13 - 2015-01-16 20:16 - 00000000 ____D () C:\Program Files (x86)\Windows Kits
2015-01-16 20:13 - 2015-01-16 20:13 - 00000000 ____D () C:\Program Files (x86)\Windows Phone Kits
2015-01-16 20:13 - 2015-01-16 20:13 - 00000000 ____D () C:\Program Files (x86)\HTML Help Workshop
2015-01-16 20:12 - 2015-01-16 20:12 - 00000017 _____ () C:\Users\Administrator\AppData\Local\resmon.resmoncfg
2015-01-16 20:12 - 2015-01-16 20:12 - 00000000 ____D () C:\Windows\symbols
2015-01-16 20:12 - 2015-01-16 20:12 - 00000000 ____D () C:\Program Files (x86)\Microsoft Help Viewer
2015-01-16 20:11 - 2015-01-16 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2013
2015-01-16 20:11 - 2015-01-16 20:16 - 00000000 ____D () C:\Windows\SysWOW64\1033
2015-01-16 20:03 - 2015-01-16 20:39 - 00000000 ____D () C:\Program Files (x86)\Microsoft SDKs
2015-01-16 20:03 - 2015-01-16 20:12 - 00000000 ____D () C:\Windows\system32\1033
2015-01-16 20:03 - 2015-01-16 20:03 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio 12.0
2015-01-16 19:58 - 2015-02-11 23:23 - 00000000 ____D () C:\ProgramData\Package Cache
2015-01-16 19:58 - 2015-01-16 19:58 - 00002760 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2015-01-16 19:56 - 2015-01-16 19:57 - 05317104 _____ (Piriform Ltd) C:\Users\Administrator\Downloads\ccsetup501.exe
2015-01-16 19:56 - 2015-01-16 19:56 - 01240624 _____ (Microsoft Corporation) C:\Users\Administrator\Downloads\vs_community.exe
2015-01-16 17:56 - 2015-01-16 17:56 - 00000000 ____D () C:\Users\Administrator\Downloads\Gameforge Live
2015-01-16 17:56 - 2015-01-16 17:56 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Gameforge4d
2015-01-16 17:56 - 2015-01-16 17:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2015-01-16 17:56 - 2015-01-16 17:56 - 00000000 ____D () C:\Program Files (x86)\GameforgeLive
2015-01-16 14:28 - 2013-04-10 00:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-01-16 14:28 - 2013-04-02 23:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-01-16 14:25 - 2015-02-13 11:45 - 00002996 _____ () C:\Windows\System32\Tasks\MSIAfterburner
2015-01-16 14:24 - 2015-01-16 14:24 - 36210245 _____ () C:\Users\Administrator\Downloads\MSIAfterburnerSetup410.zip
2015-01-16 14:23 - 2015-01-16 14:24 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Administrator\Downloads\mbam-setup-2.0.4.1028 (1).exe
2015-01-16 14:23 - 2015-01-16 14:23 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Administrator\Downloads\mbam-setup-2.0.4.1028.exe
2015-01-14 20:15 - 2015-01-14 20:15 - 00446240 _____ () C:\Users\Administrator\Downloads\pycrypto-2.6.1.tar.gz
2015-01-14 19:58 - 2015-01-14 19:58 - 00000000 ____D () C:\Users\Administrator\.idlerc
2015-01-14 19:55 - 2015-01-14 19:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Python 2.7
2015-01-14 19:47 - 2015-01-14 19:48 - 18309120 _____ () C:\Users\Administrator\Downloads\python-2.7.9.msi
2015-01-14 19:47 - 2015-01-14 19:47 - 24530944 _____ () C:\Users\Administrator\Downloads\python-3.4.2.msi
2015-01-14 19:47 - 2015-01-14 19:47 - 00779016 _____ () C:\Users\Administrator\Downloads\impacket-0.9.11.tar.gz
2015-01-14 19:43 - 2015-01-14 19:43 - 00003909 _____ () C:\Users\Administrator\Downloads\scs2.2.zip
2015-01-14 19:24 - 2015-01-14 19:24 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\VSRevoGroup
2015-01-14 19:06 - 2015-01-14 18:55 - 27111830 _____ (Insecure.org) C:\Users\Public\Documents\nmap-6.47-setup.exe
2015-01-14 19:03 - 2015-01-14 18:48 - 03044736 _____ (Enigma Software Group USA, LLC.) C:\Users\Public\Documents\SpyHunter-Installer.exe
2015-01-14 18:57 - 2015-01-14 19:06 - 00000000 ____D () C:\Users\Administrator\.zenmap
2015-01-14 18:55 - 2015-01-14 18:55 - 27111830 _____ (Insecure.org) C:\Users\Administrator\Downloads\nmap-6.47-setup.exe
2015-01-14 18:49 - 2015-01-14 18:49 - 00000000 _____ () C:\autoexec.bat
2015-01-14 18:48 - 2015-01-16 17:50 - 00000000 ____D () C:\Program Files\Enigma Software Group
2015-01-14 18:48 - 2015-01-14 18:48 - 03044736 _____ (Enigma Software Group USA, LLC.) C:\Users\Administrator\Downloads\SpyHunter-Installer.exe
2015-01-14 14:58 - 2015-01-14 14:58 - 00417064 _____ () C:\Users\Administrator\Downloads\DellSystemDetect.exe
2015-01-14 14:28 - 2014-12-19 04:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-01-14 14:28 - 2014-12-19 02:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-14 14:28 - 2014-12-11 18:47 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-01-14 14:28 - 2014-12-06 05:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-01-14 14:28 - 2014-12-06 04:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2015-01-14 14:28 - 2014-12-06 04:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-13 13:26 - 2015-01-04 18:42 - 00000000 ____D () C:\Users\Administrator\AppData\Local\SteelSeries Engine 3 Client
2015-02-13 13:26 - 2015-01-04 13:23 - 00000000 ____D () C:\Users\Administrator
2015-02-13 13:25 - 2015-01-04 13:07 - 01055332 _____ () C:\Windows\WindowsUpdate.log
2015-02-13 13:14 - 2015-01-09 16:02 - 00000000 ____D () C:\Windows\pss
2015-02-13 13:01 - 2015-01-10 17:45 - 00005104 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for Quapsel-Administrator Quapsel
2015-02-13 12:40 - 2015-01-04 16:56 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Adobe
2015-02-13 12:38 - 2015-01-04 16:57 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-13 12:38 - 2015-01-04 16:57 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-13 11:56 - 2015-01-04 19:55 - 00001912 _____ () C:\Windows\epplauncher.mif
2015-02-13 11:54 - 2009-07-14 05:45 - 00026544 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-13 11:54 - 2009-07-14 05:45 - 00026544 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-13 11:51 - 2015-01-04 13:34 - 00000000 ____D () C:\Users\Administrator\AppData\Local\LogMeIn Hamachi
2015-02-13 11:47 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-13 11:45 - 2015-01-04 13:35 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\foobar2000
2015-02-12 23:25 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2015-02-12 23:16 - 2015-01-10 15:57 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-02-12 23:15 - 2015-01-10 16:07 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-02-12 16:39 - 2015-01-09 17:47 - 00000000 ____D () C:\Users\Administrator\AppData\Local\CrashDumps
2015-02-12 16:31 - 2015-01-04 13:32 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Skype
2015-02-12 15:04 - 2014-03-08 23:03 - 00000000 ____D () C:\Users\Administrator\Bilder
2015-02-12 13:50 - 2015-01-04 22:03 - 00710022 _____ () C:\Windows\system32\perfh007.dat
2015-02-12 13:50 - 2015-01-04 22:03 - 00154352 _____ () C:\Windows\system32\perfc007.dat
2015-02-12 13:50 - 2009-07-14 06:13 - 01649790 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-12 10:42 - 2009-07-14 05:45 - 00488656 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-12 10:40 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-02-11 23:18 - 2009-07-14 03:34 - 00000478 _____ () C:\Windows\win.ini
2015-02-11 23:15 - 2015-01-04 17:07 - 00000000 ____D () C:\Windows\system32\MRT
2015-02-11 23:12 - 2015-01-04 17:07 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-02-11 23:04 - 2014-03-08 23:01 - 00000000 ____D () C:\Users\Administrator\Dokumente
2015-02-08 17:42 - 2015-01-04 13:33 - 00000000 ____D () C:\Users\Administrator\Documents\GoWrite2
2015-02-08 16:58 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-02-07 19:12 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\LiveKernelReports
2015-02-06 22:19 - 2015-01-04 17:42 - 01623134 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-02-05 13:02 - 2015-01-04 13:35 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Audacity
2015-02-04 15:18 - 2014-03-08 23:01 - 00000000 ____D () C:\Users\Administrator\Musik
2015-02-02 16:15 - 2015-01-04 17:24 - 00000000 ____D () C:\ProgramData\Oracle
2015-02-02 16:13 - 2015-01-08 18:01 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2015-02-02 16:13 - 2015-01-04 13:30 - 00000000 ____D () C:\Program Files\Java
2015-02-02 16:12 - 2015-01-04 17:25 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-02-02 16:12 - 2015-01-04 13:30 - 00000000 ____D () C:\Program Files (x86)\Java
2015-02-01 17:48 - 2015-01-04 17:42 - 00000000 ____D () C:\Users\Administrator\Desktop\Spiele
2015-02-01 17:48 - 2015-01-04 17:16 - 00000000 ____D () C:\Users\Administrator\Desktop\Programme
2015-01-30 17:27 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-01-30 12:11 - 2015-01-04 13:33 - 00000000 ____D () C:\Users\Administrator\Documents\My Games
2015-01-25 19:15 - 2015-01-04 13:33 - 05730114 _____ () C:\Users\Administrator\Downloads\Primaria.wld
2015-01-25 12:16 - 2014-03-08 15:47 - 00000000 __SHD () C:\Recovery
2015-01-24 16:01 - 2015-01-04 13:31 - 00000000 ____D () C:\Program Files (x86)\TeamViewer
2015-01-24 15:48 - 2015-01-04 13:33 - 05729344 _____ () C:\Users\Administrator\Downloads\Primaria.wld.bak
2015-01-23 14:45 - 2015-01-04 13:34 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\TeamViewer
2015-01-21 18:43 - 2015-01-04 18:42 - 00000000 ____D () C:\Program Files (x86)\Overwolf
2015-01-19 14:52 - 2015-01-04 13:34 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\vlc
2015-01-19 14:14 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2015-01-19 14:08 - 2010-11-21 08:17 - 00000000 ____D () C:\Program Files\Windows Journal
2015-01-19 14:08 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\winrm
2015-01-19 14:08 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\WCN
2015-01-19 14:08 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\sysprep
2015-01-19 14:08 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\slmgr
2015-01-19 14:08 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts
2015-01-19 14:08 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\winrm
2015-01-19 14:08 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\WCN
2015-01-19 14:08 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\slmgr
2015-01-19 14:08 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts
2015-01-19 14:08 - 2009-07-14 06:37 - 00000000 ____D () C:\Windows\DigitalLocker
2015-01-19 14:08 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Sidebar
2015-01-19 14:08 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2015-01-19 14:08 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Defender
2015-01-19 14:08 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\DVD Maker
2015-01-19 14:08 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Sidebar
2015-01-19 14:08 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
2015-01-19 14:08 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2015-01-19 14:08 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Setup
2015-01-19 14:08 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\oobe
2015-01-19 14:08 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\MUI
2015-01-19 14:08 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\migwiz
2015-01-19 14:08 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2015-01-19 14:08 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\com
2015-01-19 14:08 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sysprep
2015-01-19 14:08 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Setup
2015-01-19 14:08 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\oobe
2015-01-19 14:08 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\MUI
2015-01-19 14:08 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\migwiz
2015-01-19 14:08 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism
2015-01-19 14:08 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\com
2015-01-19 14:08 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\servicing
2015-01-19 14:08 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\IME
2015-01-19 14:08 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System
2015-01-18 16:02 - 2015-01-13 16:20 - 00000000 ____D () C:\ProgramData\Origin
2015-01-18 10:55 - 2015-01-04 13:32 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\IrfanView
2015-01-18 10:47 - 2015-01-04 22:04 - 00000000 ____D () C:\Windows\Panther
2015-01-16 20:47 - 2015-01-04 13:43 - 00124552 _____ () C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-16 20:45 - 2015-01-10 16:05 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server
2015-01-16 20:45 - 2015-01-10 16:03 - 00000000 ____D () C:\Program Files\Microsoft SQL Server
2015-01-16 20:39 - 2015-01-08 16:46 - 00000000 ____D () C:\Windows\Auslogics Disk Defrag Screensaver
2015-01-16 20:30 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2015-01-16 20:03 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2015-01-16 19:53 - 2015-01-04 17:16 - 00000000 ____D () C:\Users\Administrator\Desktop\System
2015-01-16 18:22 - 2014-08-14 21:10 - 00000000 ____D () C:\Users\Administrator\Desktop\Bene dsa
2015-01-16 18:09 - 2014-03-14 17:28 - 00000000 ____D () C:\Users\Administrator\Documents\VariantsMTMP3
2015-01-16 17:58 - 2015-01-04 13:47 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-01-16 14:29 - 2015-01-04 14:13 - 00000000 ____D () C:\Windows\SysWOW64\directx
2015-01-14 19:56 - 2015-01-09 16:41 - 00000000 ____D () C:\Users\Administrator\AppData\Local\NPE

==================== Files in the root of some directories =======

2015-01-04 13:34 - 2014-07-20 15:09 - 0000054 _____ () C:\Users\Administrator\AppData\Roaming\Plants vs. Zombies user file editor.dat
2015-01-06 14:36 - 2015-01-06 14:36 - 0000101 _____ () C:\Users\Administrator\AppData\Local\fusioncache.dat
2015-01-16 20:12 - 2015-01-16 20:12 - 0000017 _____ () C:\Users\Administrator\AppData\Local\resmon.resmoncfg
2015-01-04 17:11 - 2015-01-04 17:11 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some content of TEMP:
====================
C:\Users\Administrator\AppData\Local\Temp\jre-8u31-windows-au.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-03 19:56

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-02-2015
Ran by Administrator at 2015-02-13 13:28:23
Running from C:\Users\Administrator\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Emsisoft Anti-Malware (Disabled - Up to date) {8504DEEF-CC04-1F76-2137-F1A5F4A659DA}
AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Emsisoft Anti-Malware (Disabled - Up to date) {3E653F0B-EA3E-10F8-1B87-CAD78F211367}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

 Tools for .Net 3.5 (x32 Version: 3.11.50727 - Microsoft Corporation) Hidden
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Acrobat 5.0 (HKLM-x32\...\Adobe Acrobat 5.0) (Version: 5.0 - Adobe Systems, Inc.)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 15.0.0.356 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Flash Player 16 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Allzeit Atomzeit 2.00 (HKLM-x32\...\Allzeit Atomzeit 2.00) (Version: 2.00 - Philipp Winterberg)
AMD Catalyst Install Manager (HKLM\...\{FAF03106-1653-15E1-3C0C-E7AE4FAE6EBF}) (Version: 8.0.877.0 - Advanced Micro Devices, Inc.)
ANNO 1404 - Königsedition (HKLM-x32\...\{3D9CF3CA-3AB0-4A82-9853-D7C43FD1D775}) (Version: 1.02.0000 - Ubisoft)
ANNO 1503 GOLD (HKLM-x32\...\{DB833EF9-A198-49BE-970A-BD46F30BFBB4}) (Version: 1.05.00 - )
Application Insights Tools for Visual Studio 2013 (x32 Version: 2.4 - Microsoft Corporation) Hidden
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
Auslogics Disk Defrag ScreenSaver (HKLM-x32\...\{A34D17F9-0328-4F71-B4E9-E515EF34AB12}_is1) (Version: version 1.1 - Auslogics Software Pty Ltd)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.0.2208 - AVAST Software)
AzureTools.Notifications (x32 Version: 2.1.10731.1602 - Microsoft Corporation) Hidden
Behaviors SDK (Windows Phone) for Visual Studio 2013 (x32 Version: 12.0.50716.0 - Microsoft Corporation) Hidden
Behaviors SDK (Windows) for Visual Studio 2013 (x32 Version: 12.0.50429.0 - Microsoft Corporation) Hidden
Blend for Visual Studio 2013 (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden
Blend for Visual Studio 2013 ENU resources (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for Silverlight 5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Build Tools - amd64 (Version: 12.0.31101 - Microsoft Corporation) Hidden
Build Tools - x86 (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden
Build Tools Language Resources - amd64 (Version: 12.0.31101 - Microsoft Corporation) Hidden
Build Tools Language Resources - x86 (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.01 - Piriform)
Cube World version 0.0.1 (HKLM-x32\...\{D692A0E0-1BBB-4E9C-826E-4254EE330830}_is1) (Version: 0.0.1 - Picroma)
Die Schlacht um Mittelerde(tm) (HKLM-x32\...\{3F290582-3F4E-4B96-009C-E0BABAA40C42}) (Version:  - )
Die Schlacht um Mittelerde™ II (HKLM-x32\...\{2A9F95AB-65A3-432c-8631-B8BC5BF7477A}) (Version:  - )
Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4954.46574 - PreEmptive Solutions) Hidden
Emsisoft Anti-Malware (HKLM-x32\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 9.0 - Emsisoft Ltd.)
ENTDECKE-CHEMIE (HKLM-x32\...\{BA96D6FA-8547-467A-9C07-61767BC6D06A}) (Version: 1.00.0000 - Loxon Design & Media GmbH, München)
Entity Framework 6.1.1 Tools  for Visual Studio 2013 (HKLM-x32\...\{85253F13-EE42-4850-A3A5-79B90E92D7AC}) (Version: 12.0.30610.0 - Microsoft Corporation)
foobar2000 v1.3.5 (HKLM-x32\...\foobar2000) (Version: 1.3.5 - Peter Pawlowski)
Free Allegiance 1.2 - Application Compatibility Database (HKLM\...\{20b5d199-5e1a-0d41-9d28-4e40b5ba0e7a}.sdb) (Version:  - )
Free Allegiance 1.2 (HKLM-x32\...\Free Allegiance 1.2) (Version: 1.2 - The Free Allegiance Organization)
Free YouTube Download version 3.2.51.1215 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.51.1215 - DVDVideoSoft Ltd.)
Gameforge Live 2.0.5 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.5 - Gameforge)
GameSpy Comrade (HKLM-x32\...\{176B3593-72F1-459C-829C-5E9671E2CB35}) (Version: 1.4.3.154 - GameSpy)
GeoGebra 5 (HKLM-x32\...\GeoGebra 5) (Version: 5.0.37.0 - International GeoGebra Institute)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.111 - Google Inc.)
Google Update Helper (x32 Version: 1.3.21.169 - Google Inc.) Hidden
GOWrite 2 version 2.3.48 (HKLM\...\GOWrite2_is1) (Version: 2.3.48 - Lauri Paatero)
HydraVision (x32 Version: 4.2.234.0 - Advanced Micro Devices, Inc.) Hidden
IIS 8.0 Express (HKLM\...\{7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7}) (Version: 8.0.1557 - Microsoft Corporation)
IIS Express Application Compatibility Database for x64 (HKLM\...\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb) (Version:  - )
IIS Express Application Compatibility Database for x86 (HKLM\...\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb) (Version:  - )
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Kit SDK de vérification de Visual Studio*2012 - fra (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
LocalESPC (x32 Version: 8.59.29989 - Microsoft Corporation) Hidden
LocalESPC Dev12 (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden
LocalESPCui for en-us Dev12 (x32 Version: 8.100.25984 - Microsoft) Hidden
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.303 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.303 - LogMeIn, Inc.) Hidden
Memory Profiler (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{4AE57014-05C4-4864-A13D-86517A7E1BA4}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Age of Empires II (HKLM-x32\...\Age of Empires 2.0) (Version:  - )
Microsoft Age of Empires II: The Conquerors Expansion (HKLM-x32\...\Age of Empires II: The Conquerors Expansion 1.0) (Version:  - )
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Help Viewer 2.1 (HKLM-x32\...\Microsoft Help Viewer 2.1) (Version: 2.1.21005 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.7.205.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Silverlight 5 SDK (HKLM-x32\...\{E1FBB3D4-ADB0-4949-B101-855DA061C735}) (Version: 5.0.61118.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities  (HKLM\...\{58FED865-4F13-408D-A5BF-996019C4B936}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework  (HKLM-x32\...\{1B876496-B3A2-4D22-9B12-B608A3FD4B8B}) (Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework  (x64) (HKLM\...\{A6BA243E-85A3-4635-A269-32949C98AC7F}) (Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB  (HKLM\...\{6C026A91-640F-4A23-8B68-05D589CC6F18}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects  (HKLM-x32\...\{2F7DBBE6-8EBC-495C-9041-46A772F4E311}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects  (x64) (HKLM\...\{43A5C316-9521-49C3-B9B6-FCE5E1005DF0}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client  (HKLM\...\{D411E9C9-CE62-4DBF-9D92-4CB22B750ED5}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom  (HKLM\...\{54C5041B-0E91-4E92-8417-AAA12493C790}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 T-SQL Language Service  (HKLM-x32\...\{04DD7AF4-A6D3-4E30-9BB9-3B3670719234}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2014 Express LocalDB  (HKLM\...\{AB8DE9BA-19E1-446A-BCFA-6B3DA9751E21}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Management Objects  (HKLM-x32\...\{2774595F-BC2A-4B12-A25B-0C37A37049B0}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Management Objects  (x64) (HKLM\...\{1F9EB3B6-AED7-4AA7-B8F1-8E314B74B2A5}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Transact-SQL ScriptDom  (HKLM\...\{020CDFE0-C127-4047-B571-37C82396B662}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 T-SQL Language Service  (HKLM-x32\...\{47D08E7A-92A1-489B-B0BF-415516497BCE}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - enu (12.0.41012.0) (HKLM-x32\...\{AC8E0CF4-42A1-4151-B684-97CF6FD726CF}) (Version: 12.0.41012.0 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - enu (12.0.30919.1) (HKLM-x32\...\{6781FF9B-E87D-4A03-9373-A55A288B83FA}) (Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{A47FD1BF-A815-4A76-BE65-53A15BD5D25D}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (x64) (HKLM\...\{4701DEDE-1888-49E0-BAE5-857875924CA2}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{070C38AC-05CE-43DF-9A20-141332F6AB2B}) (Version: 11.1.3366.16 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{05FF8209-C4F1-4C77-BC28-791653156D20}) (Version: 11.1.3366.16 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2014 (HKLM\...\{8C06D6DB-A391-4686-B050-99CC522A7843}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2014 (HKLM-x32\...\{4AEB505C-95E1-4964-9B64-8D27F3186D30}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio Community 2013 with Update 4 (HKLM-x32\...\{96a8b90c-0a91-4e76-ab34-730c23923d11}) (Version: 12.0.31101 - Microsoft Corporation)
Microsoft Web Deploy 3.5 (HKLM\...\{69A998C5-00A9-42CA-AB4E-C31CFFCD9251}) (Version: 3.1237.1763 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{63227E62-F417-497E-9060-22B3A9A52D7A}) (Version: 1.0.1.0 - Mojang)
MSI Afterburner 4.1.0 (HKLM-x32\...\Afterburner) (Version: 4.1.0 - MSI Co., LTD)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.53.2 - Black Tree Gaming)
NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Opera Stable 27.0.1689.69 (HKLM-x32\...\Opera 27.0.1689.69) (Version: 27.0.1689.69 - Opera Software ASA)
Origin (HKLM-x32\...\Origin) (Version: 9.5.2.2829 - Electronic Arts, Inc.)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.82.106.0 - Overwolf Ltd.)
Panda USB Vaccine 1.0.1.4 (HKLM-x32\...\{55A41219-9B22-4098-BAE7-AE289B3C569A}_is1) (Version:  - Panda Security)
Paragon Backup and Recovery™ 2014 Free (HKLM\...\{C268B5E1-A5DA-11DF-A289-005056C00008}) (Version: 90.00.0003 - Paragon Software)
PowreShellIntegration.Notifications (x32 Version: 2.5.21003.1603 - Microsoft Corporation) Hidden
PreEmptive Analytics Visual Studio Components (x32 Version: 1.2.3197.1 - PreEmptive Solutions) Hidden
Prerequisites for SSDT  (HKLM-x32\...\{21373064-AD95-48DB-A32E-0D9E08EF7355}) (Version: 12.0.2000.8 - Microsoft Corporation)
Prerequisites for SSDT  (HKLM-x32\...\{35C1D9D6-87C0-46A3-B1B4-EDBCC063221C}) (Version: 11.1.3000.0 - Microsoft Corporation)
Python 2.7.9 (HKLM-x32\...\{79F081BF-7454-43DB-BD8F-9EE596813232}) (Version: 2.7.9150 - Python Software Foundation)
Python Tools Redirection Template (x32 Version: 1.3 - Microsoft Corporation) Hidden
QuickTime (HKLM-x32\...\QuickTime) (Version:  - )
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7246 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
RivaTuner Statistics Server 6.3.0 (HKLM-x32\...\RTSS) (Version: 6.3.0 - Unwinder)
Rock of Ages (HKLM-x32\...\Steam App 22230) (Version:  - ACE Team)
SDK de comprobación de Visual Studio 2012 - esn (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden
Secunia PSI (3.0.0.10004) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.10004 - Secunia)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version:  - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (Version:  - Microsoft) Hidden
Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version:  - Firaxis Games)
Sins of a Solar Empire (HKLM-x32\...\Sins of a Solar Empire) (Version:  - Stardock Entertainment)
Sins of a Solar Empire (x32 Version: 1.05 - Kalypso) Hidden
Space Engineers (HKLM-x32\...\Steam App 244850) (Version:  - Keen Software House)
SpaceEngine Version 0.9.7.2 (HKLM-x32\...\{E65FD500-9218-44EC-9586-D39FAB4DFDAF}_is1) (Version: 0.9.7.2 - SpaceEngine)
SRWare Iron Version SRWare Iron 38.2050.0 (HKLM-x32\...\{C59CF2CE-B302-4833-AA35-E0E07D8EBC52}_is1) (Version: SRWare Iron 38.2050.0 - SRWare)
Starbound (HKLM-x32\...\Steam App 211820) (Version:  - )
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SteelSeries Engine 3.3.3 (HKLM\...\SteelSeries Engine 3) (Version: 3.3.3 - SteelSeries ApS)
Stronghold 2 (HKLM-x32\...\{16D2C649-CBA8-44EE-B730-12584667D487}) (Version: 1.40.1000 - Firefly Studios)
SumatraPDF (HKLM-x32\...\SumatraPDF) (Version: 3.0 - Krzysztof Kowalczyk)
Team Explorer for Microsoft Visual Studio 2013 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.36897 - TeamViewer)
Terraria (HKLM-x32\...\1207665503_is1) (Version: 2.0.0.1 - GOG.com)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
Torchlight (HKLM-x32\...\Runic Games Torchlight) (Version: 1.0.69.23 - )
Torchlight 2 (HKLM-x32\...\{049FF5E4-EB02-4c42-8DB0-226E2F7A9E53}) (Version: 1.1.1.1 - )
TypeScript Power Tool (x32 Version: 1.0.5.0 - Microsoft Corporation) Hidden
TypeScript Tools for Microsoft Visual Studio 2013 (x32 Version: 1.0.5.0 - Microsoft Corporation) Hidden
Update for  (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.4.7.0 - Elaborate Bytes)
Visual Studio 2013 Update 4 (KB2829760) (HKLM-x32\...\{53d408db-eb91-43fb-9d8f-167681c19763}) (Version: 12.0.31101 - Microsoft Corporation)
VS Update core components (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden
WCF Data Services 5.6.0 Runtime (x32 Version: 5.6.61587.0 - Microsoft Corporation) Hidden
WCF Data Services Tools for Microsoft Visual Studio 2013 (x32 Version: 5.6.61587.0 - Microsoft Corporation) Hidden
WCF RIA Services V1.0 SP2 (HKLM-x32\...\{5D8DD6A8-C4D7-4554-93F9-F1CC28C72600}) (Version: 4.1.62812.0 - Microsoft Corporation)
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
WinRAR 5.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)
Пакет Visual Studio 2012 Verification SDK - rus (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

11-02-2015 19:34:18 OTL Restore Point - 11.02.2015 19:34:18
11-02-2015 23:11:04 Windows Update
12-02-2015 17:59:40 Windows Update
12-02-2015 23:13:39 Windows Update
13-02-2015 11:38:49 Installed Microsoft Fix it 50096
13-02-2015 11:54:36 Revo Uninstaller's restore point - Malwarebytes Anti-Malware Version 2.0.4.1028
13-02-2015 11:58:39 avast! antivirus system restore point
13-02-2015 12:20:29 Installiert Paragon Backup and Recovery™ 2014 Free.
13-02-2015 13:21:44 DirectX wurde installiert

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2015-01-10 17:53 - 00000822 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {077624BE-2A3E-4D6C-ABBB-A04FA2859FAC} - System32\Tasks\Microsoft Office 15 Sync Maintenance for Quapsel-Administrator Quapsel => D:\MC Office\Office15\MsoSync.exe [2015-01-21] (Microsoft Corporation)
Task: {098B99B0-D6AD-4C39-9068-F4DF544E4EE5} - System32\Tasks\CCleanerSkipUAC => D:\CCleaner\CCleaner.exe [2014-12-12] (Piriform Ltd)
Task: {18323C95-B3CC-44D8-8353-6AB5645340F9} - System32\Tasks\Opera scheduled Autoupdate 1423825627 => D:\Opera\launcher.exe [2015-02-10] (Opera Software)
Task: {1F16C105-5568-48A4-805A-B9E6AD074774} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {3D288158-934A-4275-A221-059324B0293F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-13] (Adobe Systems Incorporated)
Task: {466868F2-F5AE-482E-9D1B-FF099A4AC32A} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe
Task: {5DD40036-68D8-4CEC-BB9D-9A9C9CF3BE2F} - System32\Tasks\{0D9BDF5F-865A-426F-99E2-D205924DDF88} => pcalua.exe -a C:\Users\Administrator\Downloads\irfanview_plugins_438_setup.exe -d C:\Users\Administrator\Downloads
Task: {62664841-52C7-48EB-8DB4-6DAE0C0CADD2} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe
Task: {6778B5BB-05F5-4A8B-98FF-222A6F8823E4} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {8B105585-8659-46E3-8745-E1F1752516DB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-13] (Google Inc.)
Task: {9239EA1B-47BB-44BF-98C2-30C130B5622F} - System32\Tasks\MSIAfterburner => D:\MSI Afterburner\MSIAfterburner.exe [2014-12-06] ()
Task: {A7CCCE74-B1DD-4823-9331-916E949D0B25} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-13] (Google Inc.)
Task: {C5C0A098-EA45-4161-9156-CF8F5D20239F} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2015-01-15] (Overwolf LTD)
Task: {E86C5D81-CD06-453C-B8DF-D64D127006B5} - System32\Tasks\avast! Emergency Update => D:\Avast\AvastEmUpdate.exe [2015-02-13] (AVAST Software)
Task: {EEB60E72-1D5D-4612-A171-8B53F8FD7370} - System32\Tasks\{785AE3E9-BD14-49FB-9BBE-0CFB41ACCAEC} => Chrome.exe hxxp://ui.skype.com/ui/0/6.22.81.105/de/go/help.faq.installer?source=lightinstaller&LastError=1618
Task: {EED6F505-121C-42B1-9EA2-25AACD599CA7} - System32\Tasks\PandaUSBVaccine => D:\Panda USB Vaccine\RunInteractiveWin.exe [2009-09-23] ()
Task: {F6EB25DC-394C-45CB-9B47-B79EC18FAC0C} - System32\Tasks\{E999CCEA-6CC0-4CF7-AC4A-89E8657C4B20} => C:\Riot Games\League of Legends\lol.launcher.admin.exe [2013-06-12] ()
Task: {FFC2E617-0125-48F3-B8C4-B67D3036A7C8} - System32\Tasks\Auslogics Disk Defrag Screensaver.Administrator => C:\Windows\Auslogics Disk Defrag Screensaver\ddssx.exe [2010-02-03] ()
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2015-01-06 14:01 - 2014-12-15 11:45 - 00020240 _____ () C:\Windows\system32\spool\PRTPROCS\x64\TeamViewer_PrintProcessor.dll
2015-01-18 14:28 - 2014-11-09 12:37 - 00402432 _____ () D:\RivaTuner Statistics Server\RTSSHooks64.dll
2015-01-18 14:50 - 2014-12-06 08:03 - 00565760 _____ () D:\MSI Afterburner\MSIAfterburner.exe
2012-11-16 15:00 - 2012-11-16 15:00 - 00405504 _____ () C:\Program Files (x86)\ATI Technologies\HydraVision\HydraGrd.exe
2015-01-18 14:28 - 2014-11-09 12:37 - 00197632 _____ () D:\RivaTuner Statistics Server\RTSS.exe
2015-01-18 14:28 - 2014-11-09 12:37 - 00026112 _____ () D:\RivaTuner Statistics Server\EncoderServer.exe
2015-01-18 14:28 - 2014-11-09 12:37 - 00088576 _____ () D:\RivaTuner Statistics Server\RTSSHooksLoader64.exe
2015-02-13 12:07 - 2015-02-10 08:58 - 00552056 _____ () D:\Opera\27.0.1689.69\opera_crashreporter.exe
2015-02-13 12:00 - 2015-02-13 12:00 - 05851328 _____ () D:\Avast\ng\vbox\VBoxRT.dll
2015-02-13 12:00 - 2015-02-13 12:00 - 00388208 _____ () D:\Avast\ng\vbox\VBoxDDU.dll
2015-02-13 12:00 - 2015-02-13 12:00 - 02535240 _____ () D:\Avast\ng\vbox\VBoxVMM.DLL
2015-02-13 12:00 - 2015-02-13 12:00 - 00677656 _____ () D:\Avast\ng\vbox\VBoxREM.dll
2015-02-13 12:00 - 2015-02-13 12:00 - 00031296 _____ () D:\Avast\ng\vbox\VBoxSharedClipboard.DLL
2015-02-13 12:00 - 2015-02-13 12:00 - 00048296 _____ () D:\Avast\ng\vbox\VBoxDragAndDropSvc.DLL
2015-02-13 12:00 - 2015-02-13 12:00 - 00047784 _____ () D:\Avast\ng\vbox\VBoxGuestControlSvc.DLL
2015-02-13 12:00 - 2015-02-13 12:00 - 01533568 _____ () D:\Avast\ng\vbox\VBoxDD.DLL
2015-02-13 12:00 - 2015-02-13 12:00 - 00203832 _____ () D:\Avast\ng\vbox\VBoxDD2.dll
2015-02-13 12:00 - 2015-02-13 12:00 - 00042128 _____ () D:\Avast\ng\vbox\VBoxSharedFolders.DLL
2013-06-18 15:49 - 2013-06-18 15:49 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2013-04-29 23:08 - 2013-04-29 23:08 - 00369152 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2015-02-02 17:48 - 2015-02-02 17:48 - 17833984 _____ () C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe
2015-01-03 18:28 - 2015-01-03 18:28 - 00047616 _____ () C:\Program Files\SteelSeries\SteelSeries Engine 3\x2api.dll
2015-01-18 14:50 - 2014-12-06 08:01 - 00071680 _____ () D:\MSI Afterburner\RTMUI.dll
2015-01-18 14:50 - 2014-12-06 08:01 - 00056832 _____ () D:\MSI Afterburner\RTFC.dll
2015-01-18 14:50 - 2014-12-06 08:02 - 00217600 _____ () D:\MSI Afterburner\RTCore.dll
2015-01-18 14:50 - 2014-12-06 08:01 - 00353792 _____ () D:\MSI Afterburner\RTUI.dll
2015-01-18 14:50 - 2014-12-06 08:02 - 00649216 _____ () D:\MSI Afterburner\RTHAL.dll
2015-01-18 14:28 - 2014-11-09 12:37 - 00356864 _____ () D:\RivaTuner Statistics Server\RTSSHooks.dll
2015-01-18 14:28 - 2014-11-09 12:37 - 00056832 _____ () D:\RivaTuner Statistics Server\RTFC.dll
2015-01-18 14:28 - 2014-11-09 12:37 - 00353792 _____ () D:\RivaTuner Statistics Server\RTUI.dll
2015-01-18 14:28 - 2014-11-09 12:37 - 00071680 _____ () D:\RivaTuner Statistics Server\RTMUI.dll
2015-02-13 12:02 - 2015-02-13 12:02 - 02900480 _____ () D:\Avast\defs\14110700\algo.dll
2015-02-13 12:06 - 2015-02-13 12:06 - 02912256 _____ () D:\Avast\defs\15021300\algo.dll
2015-02-13 12:01 - 2015-02-13 12:01 - 04495336 _____ () D:\Avast\ng\vbox\x86\VBoxRT-x86.dll
2015-02-13 12:01 - 2015-02-13 12:01 - 38562088 _____ () D:\Avast\libcef.dll
2015-02-13 12:07 - 2015-02-10 08:58 - 01408632 _____ () D:\Opera\27.0.1689.69\libglesv2.dll
2015-02-13 12:07 - 2015-02-10 08:58 - 00219256 _____ () D:\Opera\27.0.1689.69\libegl.dll
2015-02-13 12:07 - 2015-02-10 08:58 - 09510520 _____ () D:\Opera\27.0.1689.69\pdf.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData:gs5sys
AlternateDataStreams: C:\Users\Administrator:gs5sys
AlternateDataStreams: C:\Users\All Users:gs5sys
AlternateDataStreams: C:\Users\Administrator\Anwendungsdaten:gs5sys
AlternateDataStreams: C:\Users\Administrator\Cookies:gs5sys
AlternateDataStreams: C:\Users\Administrator\Lokale Einstellungen:gs5sys
AlternateDataStreams: C:\Users\Administrator\Vorlagen:gs5sys
AlternateDataStreams: C:\Users\Administrator\Desktop\desktop.ini:gs5sys
AlternateDataStreams: C:\Users\Administrator\AppData\Local:gs5sys
AlternateDataStreams: C:\Users\Administrator\AppData\Roaming:gs5sys
AlternateDataStreams: C:\Users\Administrator\AppData\Local\Anwendungsdaten:gs5sys
AlternateDataStreams: C:\Users\Administrator\AppData\Local\Verlauf:gs5sys
AlternateDataStreams: C:\Users\Administrator\Documents\desktop.ini:gs5sys
AlternateDataStreams: C:\ProgramData\Anwendungsdaten:gs5sys
AlternateDataStreams: C:\ProgramData\Application Data:gs5sys
AlternateDataStreams: C:\ProgramData\Templates:gs5sys
AlternateDataStreams: C:\ProgramData\Vorlagen:gs5sys
AlternateDataStreams: C:\Users\Public\Documents\desktop.ini:gs5sys

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\45442217.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\45442217.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-4198189618-3789533832-1361530959-500\Control Panel\Desktop\\Wallpaper -> C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 8.8.8.8 - 8.8.4.4

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: a2AntiMalware => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: Origin Client Service => 3
MSCONFIG\Services: OverwolfUpdater => 3
MSCONFIG\Services: Steam Client Service => 3
MSCONFIG\Services: TeamViewer => 2
MSCONFIG\startupfolder: C:^Users^Administrator^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^An OneNote senden.lnk => C:\Windows\pss\An OneNote senden.lnk.Startup
MSCONFIG\startupreg: Grid => "C:\Program Files (x86)\ATI Technologies\HydraVision\HydraGrd.exe"

==================== Accounts: =============================

Administrator (S-1-5-21-4198189618-3789533832-1361530959-500 - Administrator - Enabled) => C:\Users\Administrator
ASPNET (S-1-5-21-4198189618-3789533832-1361530959-1002 - Limited - Enabled)
Gast (S-1-5-21-4198189618-3789533832-1361530959-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-4198189618-3789533832-1361530959-1004 - Limited - Enabled)
Sir Darkflame (S-1-5-21-4198189618-3789533832-1361530959-1005 - Limited - Enabled) => C:\Users\Sir Darkflame

==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (02/13/2015 01:22:30 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary rfuwdybo.

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (02/13/2015 01:05:27 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary rfuwdybo.

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (02/13/2015 01:04:58 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary rfuwdybo.

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (02/13/2015 00:20:44 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary rfuwdybo.

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (02/13/2015 11:58:43 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary rfuwdybo.

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (02/13/2015 11:48:45 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/13/2015 10:54:09 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/12/2015 08:50:17 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/12/2015 04:38:59 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: starbound_opengl.exe, Version: 0.9.0.0, Zeitstempel: 0x00000000
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521eaf24
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000003179e
ID des fehlerhaften Prozesses: 0x15d8
Startzeit der fehlerhaften Anwendung: 0xstarbound_opengl.exe0
Pfad der fehlerhaften Anwendung: starbound_opengl.exe1
Pfad des fehlerhaften Moduls: starbound_opengl.exe2
Berichtskennung: starbound_opengl.exe3

Error: (02/12/2015 10:43:48 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (02/13/2015 01:24:38 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Secunia PSI Agent" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (02/11/2015 11:25:12 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070641 fehlgeschlagen: Update für Microsoft PowerPoint 2013 (KB2920732) 64-Bit-Edition

Error: (02/11/2015 11:25:12 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Installer" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (02/11/2015 11:25:12 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "msiserver" konnte sich nicht als "NT AUTHORITY\SYSTEM" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1352

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (02/11/2015 11:25:12 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "WerSvc" konnte sich nicht als "NT AUTHORITY\SYSTEM" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1352

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (02/11/2015 11:25:12 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1069MSIServer{000C101C-0000-0000-C000-000000000046}

Error: (02/11/2015 11:25:04 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Der Dienst Windows Update konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.

Error: (02/06/2015 07:00:46 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}

Error: (02/05/2015 06:55:38 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {1A1F4206-0688-4E7F-BE03-D82EC69DF9A5}

Error: (02/05/2015 06:55:12 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}


Microsoft Office Sessions:
=========================
Error: (02/13/2015 01:22:30 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: 
Details:
AddLegacyDriverFiles: Unable to back up image of binary rfuwdybo.

System Error:
Das System kann die angegebene Datei nicht finden.

Error: (02/13/2015 01:05:27 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: 
Details:
AddLegacyDriverFiles: Unable to back up image of binary rfuwdybo.

System Error:
Das System kann die angegebene Datei nicht finden.

Error: (02/13/2015 01:04:58 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: 
Details:
AddLegacyDriverFiles: Unable to back up image of binary rfuwdybo.

System Error:
Das System kann die angegebene Datei nicht finden.

Error: (02/13/2015 00:20:44 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: 
Details:
AddLegacyDriverFiles: Unable to back up image of binary rfuwdybo.

System Error:
Das System kann die angegebene Datei nicht finden.

Error: (02/13/2015 11:58:43 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: 
Details:
AddLegacyDriverFiles: Unable to back up image of binary rfuwdybo.

System Error:
Das System kann die angegebene Datei nicht finden.

Error: (02/13/2015 11:48:45 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/13/2015 10:54:09 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/12/2015 08:50:17 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/12/2015 04:38:59 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: starbound_opengl.exe0.9.0.000000000ntdll.dll6.1.7601.18247521eaf24c0000005000000000003179e15d801d046da009d5a3dD:\Steam\SteamApps\common\Starbound\win64\starbound_opengl.exeC:\Windows\SYSTEM32\ntdll.dll42b210d2-b2cd-11e4-b373-001d9233d728

Error: (02/12/2015 10:43:48 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity Errors:
===================================
  Date: 2015-01-07 16:36:14.757
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows.old\Windows\winsxs\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22736_none_c03ca8b21653b964\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-01-07 16:36:14.560
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows.old\Windows\winsxs\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22736_none_c03ca8b21653b964\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-01-07 16:36:14.353
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows.old\Windows\winsxs\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22736_none_c03ca8b21653b964\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-01-07 16:36:14.154
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows.old\Windows\winsxs\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22736_none_c03ca8b21653b964\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-01-07 16:36:11.639
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows.old\Windows\winsxs\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.18574_none_bf85c9bcfd585989\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-01-07 16:36:11.408
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows.old\Windows\winsxs\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.18574_none_bf85c9bcfd585989\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-01-07 16:36:11.215
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows.old\Windows\winsxs\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.18574_none_bf85c9bcfd585989\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-01-07 16:36:11.010
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows.old\Windows\winsxs\wow64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.18574_none_bf85c9bcfd585989\appidapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-01-07 16:15:48.398
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows.old\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22736_none_b5e7fe5fe1f2f769\appid.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-01-07 16:15:48.303
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume4\Windows.old\Windows\winsxs\amd64_microsoft-windows-appid_31bf3856ad364e35_6.1.7601.22736_none_b5e7fe5fe1f2f769\appid.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM)2 Duo CPU E8400 @ 3.00GHz
Percentage of memory in use: 67%
Total physical RAM: 4095.14 MB
Available physical RAM: 1325.73 MB
Total Pagefile: 8188.48 MB
Available Pagefile: 3720.5 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:300 GB) (Free:138.35 GB) NTFS
Drive d: (Programme) (Fixed) (Total:266.07 GB) (Free:133.89 GB) NTFS
Drive e: (Aufnahmen und Backups) (Fixed) (Total:596.17 GB) (Free:373.12 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive g: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.08 GB) NTFS
Drive n: (SUNFLOWER B) (Removable) (Total:3.73 GB) (Free:3.32 GB) FAT32
Drive w: (Volume) (Fixed) (Total:30 GB) (Free:16 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596.2 GB) (Disk ID: 91C00229)
Partition 1: (Active) - (Size=596.2 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 596.2 GB) (Disk ID: FE1623FC)
Partition 1: (Not Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Active) - (Size=300 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=266.1 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=30 GB) - (Type=OF Extended)

========================================================
Disk: 6 (MBR Code: Windows XP) (Size: 3.7 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=3.7 GB) - (Type=0B)

==================== End Of Log ============================