Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML

Antwort
Alt 30.06.2015, 06:26   #16
schrauber
/// the machine
/// TB-Ausbilder
 

Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder - Standard

Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder



Speicher die fixlist im Download Ordner, neben dem Programm FRST
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 02.07.2015, 15:40   #17
D4V1D
 
Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder - Standard

Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder



Hat nun funktioniert, erhalte aber immernoch die Fehlermeldung:
Code:
ATTFilter
Fix result of Farbar Recovery Scan Tool (x64) Version:28-06-2015 01
Ran by David at 2015-07-02 16:35:00 Run:1
Running from C:\Users\David\Desktop
Loaded Profiles: David (Available Profiles: David)
Boot Mode: Normal
==============================================

fixlist content:
*****************
C:\Users\David\AppData\Local\Temp\DMR\dmr_72.exe

C:\Users\David\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe

C:\Users\David\Downloads\Open Broadcaster Software - CHIP-Installer.exe
Emptytemp:
         
*****************

"C:\Users\David\AppData\Local\Temp\DMR\dmr_72.exe" => File/Folder not found.
"C:\Users\David\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe" => File/Folder not found.
"C:\Users\David\Downloads\Open Broadcaster Software - CHIP-Installer.exe" => File/Folder not found.
EmptyTemp: => 21 MB temporary data Removed.


The system needed a reboot.. 

==== End of Fixlog 16:35:04 ====
         
__________________


Alt 02.07.2015, 17:08   #18
schrauber
/// the machine
/// TB-Ausbilder
 

Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder - Standard

Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder



Welche Fehlermeldung?
__________________
__________________

Alt 03.07.2015, 12:14   #19
D4V1D
 
Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder - Standard

Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder



Nach dem Neustart, die folgende Fehlermeldung von AsusSetup: C:/users/David/Appdata/local/temp/213717Log.iniis lost

Alt 03.07.2015, 12:45   #20
schrauber
/// the machine
/// TB-Ausbilder
 

Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder - Standard

Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder



FRST bitte öffnen, Haken setzen bei Addition und scannen, poste bitte beide Logs.

__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 03.07.2015, 13:32   #21
D4V1D
 
Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder - Standard

Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder



[CODE]Additional
FRST Logfile:
Code:
ATTFilter
scan result of Farbar Recovery Scan Tool (x64) Version:28-06-2015 01
Ran by David at 2015-07-03 14:29:27
Running from C:\Users\David\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3975945495-1988407803-2975606891-500 - Administrator - Disabled)
David (S-1-5-21-3975945495-1988407803-2975606891-1000 - Administrator - Enabled) => C:\Users\David
Gast (S-1-5-21-3975945495-1988407803-2975606891-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3975945495-1988407803-2975606891-1003 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Computer Security (Enabled - Up to date) {15414183-282E-D62C-CA37-EF24860A2F17}
AS: Computer Security (Enabled - Up to date) {AE20A067-0E14-D9A2-F087-D456FD8D65AA}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.190 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.194 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.11) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated)
Apple Application Support (32-Bit) (HKLM-x32\...\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{D7B824DE-DA32-4772-9E5E-39C5158136A7}) (Version: 3.1.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Arma 3 (HKLM-x32\...\Steam App 107410) (Version:  - Bohemia Interactive)
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.14.3.0 - Asmedia Technology)
Asmedia ASM106x SATA Host Controller Driver (HKLM-x32\...\{61942EF5-2CD8-47D4-869C-2E9A8BB085F1}) (Version: 1.3.4.000 - Asmedia Technology)
Assassin's Creed Revelations (HKLM-x32\...\{33A22B2D-55BA-4508-B767-BF2E9C21A73F}) (Version: 1.00 - Ubisoft)
AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version:  - AVM Berlin)
Battle vs. Chess (HKLM-x32\...\Battle vs. Chess_is1) (Version: 1.0 - Zuxxez Entertainment)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.2 - EA Digital Illusions CE AB)
Bejeweled® 3 (HKLM-x32\...\{E99C27B2-EB2E-4244-9F5C-A96F55100F0C}) (Version: 1.1.13.4753 - Electronic Arts, Inc.)
Berkeley Madonna (HKLM-x32\...\{27AB9BD6-4A3E-4BBD-8381-CD445E474936}) (Version:  - )
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Cities: Skylines (HKLM-x32\...\Steam App 255710) (Version:  - Colossal Order)
Computer Security 14.106.103.0 (release) (x32 Version: 14.106.103.0 - F-Secure Corporation) Hidden
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version:  - Valve)
Crusader No Remorse (HKLM-x32\...\{2AEA735F-B393-4D89-93EF-5849CB72B4A3}) (Version: 1.0.0.2 - Electronic Arts)
David. (HKLM-x32\...\Steam App 346180) (Version:  - Fermenter)
Dead or Alive 5 Last Round (HKLM-x32\...\Steam App 311730) (Version:  - Team NINJA)
Die Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.4.83.1010 - Electronic Arts Inc.)
ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
F-Secure CCF Reputation (x32 Version: 1.1.25.2280 - F-Secure) Hidden
F-Secure CCF Scanning 1.51.111.300 (release) (x32 Version: 1.51.111.300 - F-Secure Corporation) Hidden
F-Secure Network CCF 1.02.136 (x32 Version: 1.02.136 - F-Secure Corporation) Hidden
F-Secure SafeSearch 1.03.146.0 (release) (x32 Version: 1.03.146.0 - F-Secure Corporation) Hidden
FUSSBALL MANAGER 12 (HKLM-x32\...\FUSSBALL MANAGER 12) (Version: 1.0.0.0 - Electronic Arts)
GameRanger (HKU\S-1-5-21-3975945495-1988407803-2975606891-1000\...\GameRanger) (Version:  - GameRanger Technologies)
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Facepunch Studios)
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
Goat Simulator (HKLM-x32\...\Steam App 265930) (Version:  - Coffee Stain Studios)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.130 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.6227.252 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
Grand Theft Auto: San Andreas (HKLM-x32\...\Steam App 12120) (Version:  - Rockstar Games)
Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version:  - NCsoft Corporation, Ltd.)
Half-Life (HKLM-x32\...\Steam App 70) (Version:  - Valve)
Half-Life 2 (HKLM-x32\...\Steam App 220) (Version:  - Valve)
Half-Life 2: Deathmatch (HKLM-x32\...\Steam App 320) (Version:  - Valve)
Half-Life 2: Episode One (HKLM-x32\...\Steam App 380) (Version:  - Valve)
Half-Life 2: Episode Two (HKLM-x32\...\Steam App 420) (Version:  - Valve)
Half-Life 2: Lost Coast (HKLM-x32\...\Steam App 340) (Version:  - Valve)
Half-Life Deathmatch: Source (HKLM-x32\...\Steam App 360) (Version:  - Valve)
Half-Life: Blue Shift (HKLM-x32\...\Steam App 130) (Version:  - Gearbox Software)
Half-Life: Opposing Force (HKLM-x32\...\Steam App 50) (Version:  - Gearbox Software)
Half-Life: Source (HKLM-x32\...\Steam App 280) (Version:  - Valve)
Hearts of Iron III (HKLM-x32\...\Steam App 25890) (Version:  - Paradox Development Studio)
Her Story (HKLM-x32\...\Steam App 368370) (Version:  - Sam Barlow)
Hotel Gigant 2 (HKLM-x32\...\{A142838E-E419-4D70-89AA-BBAD92D2C061}) (Version: 110 - Nobilis)
HP ENVY 4500 series - Grundlegende Software für das Gerät (HKLM\...\{E7A3B455-76AD-423A-AE5E-F431C69BF2B0}) (Version: 32.0.1180.44630 - Hewlett-Packard Co.)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.1.1399 - Intel Corporation)
Intel(R) Network Connections 16.6.126.0 (HKLM\...\PROSetDX) (Version: 16.6.126.0 - Intel)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.0.0.1032 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.1.209 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{538B98C3-773F-4F20-9C66-802D104DCBE2}) (Version: 1.23.219.2 - Intel Corporation)
iTunes (HKLM\...\{93F2A022-6C37-48B8-B241-FFABD9F60C30}) (Version: 12.1.2.27 - Apple Inc.)
Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
Launch Pad (HKLM-x32\...\F-Secure ServiceEnabler 45119) (Version: 2.06.303.0 - F-Secure Corporation)
Launch Pad (x32 Version: 2.06.303.0 - F-Secure Corporation) Hidden
Logger Pro 3.6.1 (HKLM-x32\...\{43DC9D80-3EFF-4595-9BA2-D9FC6AA18A37}) (Version: 3.6.0 - Vernier Software & Technology)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Games for Windows - LIVE (HKLM-x32\...\{F97E3841-CA9D-4964-9D64-26066241D26F}) (Version: 3.3.24.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{8FB1B528-E260-451E-9B55-E9152F94B80B}) (Version: 3.2.3.0 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Rise Of Nations (HKLM-x32\...\RiseOfNations 1.0) (Version:  - Microsoft)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 38.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 34.0.5 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML4 Parser (HKLM-x32\...\{01501EBA-EC35-4F9F-8889-3BE346E5DA13}) (Version: 1.0.0 - Microsoft Game Studios)
NVIDIA 3D Vision Controller-Treiber 349.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 349.95 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 350.12 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.8.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 350.12 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0324 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0324 - NVIDIA Corporation)
NVIDIA Virtual Audio 1.2.19 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.19 - NVIDIA Corporation)
Online Safety 2.107.2565.1702 (x32 Version: 2.107.2565.1702 - F-Secure Corporation) Hidden
Only If (HKLM-x32\...\Steam App 298260) (Version:  - Creability)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
Origin (HKLM-x32\...\Origin) (Version: 9.3.11.2762 - Electronic Arts, Inc.)
PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version:  - OVERKILL - a Starbreeze Studio.)
Portal 2 (HKLM-x32\...\Steam App 620) (Version:  - Valve)
POSTAL 2 (HKLM-x32\...\Steam App 223470) (Version:  - Running With Scissors)
Prison Architect (HKLM-x32\...\Steam App 233450) (Version:  - Introversion Software)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6543 - Realtek Semiconductor Corp.)
Rise of Nations Thrones and Patriots (HKLM-x32\...\RiseofNationsExpansion 1.0) (Version:  - )
RollerCoaster Tycoon 2: Triple Thrill Pack (HKLM-x32\...\Steam App 285330) (Version:  - Chris Sawyer Productions)
Saints Row IV (HKLM-x32\...\Steam App 206420) (Version:  - Deep Silver Volition)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
SHIELD Streaming (Version: 1.6.85 - NVIDIA Corporation) Hidden
Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version:  - 2K Games, Inc.)
SimCity™ (HKLM-x32\...\{F70FDE4B-8F86-4eb6-8C8E-636EC89F6419}) (Version: 4.0.86.0859 - Electronic Arts)
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
Space Engineers (HKLM-x32\...\Steam App 244850) (Version:  - Keen Software House)
Spec Ops: The Line (HKLM-x32\...\Steam App 50300) (Version:  - Yager)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Stronghold Crusader 2 (HKLM-x32\...\Steam App 232890) (Version:  - FireFly Studios)
Stronghold HD (HKLM-x32\...\Steam App 40950) (Version:  - FireFly Studios)
Stronghold Kingdoms (HKLM-x32\...\Steam App 47410) (Version:  - FireFly Studios)
Team Fortress Classic (HKLM-x32\...\Steam App 20) (Version:  - Valve)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
The Four Kings Casino and Slots (HKLM-x32\...\Steam App 260430) (Version:  - Digital Leisure Inc.)
The Stanley Parable (HKLM-x32\...\Steam App 221910) (Version:  - Galactic Cafe)
The Walking Dead: Season Two (HKLM-x32\...\Steam App 261030) (Version:  - Telltale Games)
The Way of Life (HKLM-x32\...\Steam App 310370) (Version:  - Fabio Ferrara)
Theme Hospital (HKLM-x32\...\{5118A4C2-C8A4-4CE5-AC37-F3E51C25402F}) (Version: 3.0.0.2 - Electronic Arts)
Tom Clancy's Ghost Recon Phantoms - EU (HKLM-x32\...\Steam App 272350) (Version:  - Ubisoft Singapore)
Total War: ROME II - Emperor Edition (HKLM-x32\...\Steam App 214950) (Version:  - Creative Assembly)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Warframe (HKLM-x32\...\Steam App 230410) (Version:  - Digital Extremes)
Wolfenstein: The New Order (HKLM-x32\...\Steam App 201810) (Version:  - Machine Games)
Wolfenstein: The New Order German Edition (HKLM-x32\...\Steam App 288570) (Version:  - MachineGames)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Restore Points =========================

29-06-2015 16:29:48 Ende der Bereinigung

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2015-06-25 17:51 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {326E6573-2019-49DE-B057-E7E6972F3BB2} - System32\Tasks\{C1B0EB6B-C6C9-40C7-8CE7-4F3D89BDFDFA} => pcalua.exe -a D:\HG2Setup.exe -d D:\
Task: {3C61F1B5-25BB-45D1-A3AC-E041A9068AB3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-18] (Google Inc.)
Task: {47D8A8D3-10B0-46E2-8B80-887D1439CD60} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-06-12] (Adobe Systems Incorporated)
Task: {B72E5C13-EE2E-4E4A-A153-995AC566731E} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {E1B9957F-0B33-48D5-8196-216C04EA75B7} - System32\Tasks\ASUS\i-Setup213717 => C:\Windows\Chipset\AsusSetup.exe [2010-09-08] (ASUSTeK Computer Inc.)
Task: {E3033771-96B3-4166-9241-38A62A004CEF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-18] (Google Inc.)
Task: {F7FD41F4-4661-4478-A444-0C76A84C5A1F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-02] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2015-02-13 05:20 - 2015-02-13 05:20 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-02-13 05:20 - 2015-02-13 05:20 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2013-05-31 22:04 - 2015-04-08 23:30 - 00116552 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2013-12-24 02:13 - 2014-08-20 17:44 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2013-06-08 11:42 - 2014-10-14 17:33 - 00045608 _____ () C:\Program Files (x86)\Internet Security\apps\ComputerSecurity\Anti-Virus\FSAVHRES.eng
2014-02-19 13:56 - 2014-02-19 13:56 - 00220200 _____ () C:\Program Files (x86)\Internet Security\daas2.dll
2013-06-08 11:45 - 2013-06-08 11:45 - 00030888 _____ () C:\Program Files (x86)\Internet Security\apps\ComputerSecurity\Anti-Virus\minifilter\hashlib_x86.dll
2013-06-08 11:42 - 2015-04-14 13:34 - 00175144 _____ () C:\Program Files (x86)\Internet Security\apps\ComputerSecurity\Gemini\fsgem.dll
2013-06-08 11:42 - 2015-02-24 17:39 - 00949288 _____ () C:\Program Files (x86)\Internet Security\apps\ComputerSecurity\Anti-Virus\fm4av.dll
2014-10-20 16:20 - 2014-10-20 16:20 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\92a1650dbe9fad5f46633b835420e1a8\IsdiInterop.ni.dll
2013-05-31 21:53 - 2011-11-29 20:00 - 00059392 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2013-05-31 21:48 - 2012-01-20 11:23 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-06-08 11:42 - 2014-10-14 17:33 - 00056360 _____ () C:\Program Files (x86)\Internet Security\apps\ComputerSecurity\FSGUI\fsavures.eng
2014-09-25 20:29 - 2014-09-25 20:29 - 00592936 _____ () C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.79_none_b59ec33311fcd586\QtMultimediaKit1.dll
2013-08-21 14:18 - 2015-04-16 19:40 - 00776192 _____ () z:\Games\SDL2.dll
2015-01-22 21:41 - 2015-04-23 04:16 - 04962816 _____ () z:\Games\v8.dll
2015-01-22 21:41 - 2015-04-23 04:16 - 01556992 _____ () z:\Games\icui18n.dll
2015-01-22 21:41 - 2015-04-23 04:16 - 01187840 _____ () z:\Games\icuuc.dll
2014-06-21 11:48 - 2015-06-04 20:56 - 02407104 _____ () z:\Games\video.dll
2014-09-04 17:48 - 2014-12-01 23:31 - 02396672 _____ () z:\Games\libavcodec-56.dll
2014-09-04 17:48 - 2014-12-01 23:31 - 00442880 _____ () z:\Games\libavutil-54.dll
2014-09-04 17:48 - 2014-12-01 23:31 - 00479744 _____ () z:\Games\libavformat-56.dll
2014-09-04 17:48 - 2014-12-01 23:31 - 00332800 _____ () z:\Games\libavresample-2.dll
2014-09-04 17:48 - 2014-12-01 23:31 - 00485888 _____ () z:\Games\libswscale-3.dll
2013-09-06 12:55 - 2015-06-04 20:56 - 00703168 _____ () Z:\Games\bin\chromehtml.DLL
2013-08-07 11:31 - 2015-05-11 21:01 - 36302728 _____ () Z:\Games\bin\libcef.dll
2015-05-19 20:00 - 2015-05-11 21:01 - 08958344 _____ () Z:\Games\bin\pdf.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3975945495-1988407803-2975606891-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\David\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: EADM => "Z:\Origin\Origin.exe" -AutoStart
MSCONFIG\startupreg: Steam => "z:\Games\Steam.exe" -silent

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{0C850A2C-06F2-4D0F-A521-B30A04C03FCC}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{062F7EE4-A2F7-477A-AE5D-FED25FFA1D87}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [TCP Query User{40F37D65-6335-42B7-97DA-D8A91AFE004C}C:\users\david\appdata\local\temp\gw2.exe] => (Allow) C:\users\david\appdata\local\temp\gw2.exe
FirewallRules: [UDP Query User{BC03000E-34C9-42A0-BE67-C5D6836B2E66}C:\users\david\appdata\local\temp\gw2.exe] => (Allow) C:\users\david\appdata\local\temp\gw2.exe
FirewallRules: [TCP Query User{6E2FA417-5036-4C08-BC70-4BD1E61F52B5}C:\users\david\appdata\local\temp\gw2.exe] => (Block) C:\users\david\appdata\local\temp\gw2.exe
FirewallRules: [UDP Query User{86FA611A-AF3E-4464-BE16-7C3D92B4C2BE}C:\users\david\appdata\local\temp\gw2.exe] => (Block) C:\users\david\appdata\local\temp\gw2.exe
FirewallRules: [TCP Query User{4F4B7CD7-86CA-4330-9900-12DC57C0A708}Z:\guild wars 2\gw2.exe] => (Allow) Z:\guild wars 2\gw2.exe
FirewallRules: [UDP Query User{0E02C055-D54E-4C06-9837-37299B7E3223}Z:\guild wars 2\gw2.exe] => (Allow) Z:\guild wars 2\gw2.exe
FirewallRules: [TCP Query User{DF09ED8A-5D50-4227-96B9-6AD87DB05086}Z:\guild wars 2\gw2.exe] => (Block) Z:\guild wars 2\gw2.exe
FirewallRules: [UDP Query User{FC96D556-8701-4922-ABB7-EE1AE92B0E3A}Z:\guild wars 2\gw2.exe] => (Block) Z:\guild wars 2\gw2.exe
FirewallRules: [{700905C6-D28A-47EF-94EA-590E554AF416}] => (Allow) Z:\Games\Steam.exe
FirewallRules: [{2B238BD3-F529-4952-AAA8-84F0A4588AF5}] => (Allow) Z:\Games\Steam.exe
FirewallRules: [{E3736200-CABF-4788-A56A-98DAB62CBAA8}] => (Allow) Z:\Games\SteamApps\common\Arma 3\arma3.exe
FirewallRules: [{0F1A0CD7-1AE3-4BC8-BEB4-A49CAFB45C5C}] => (Allow) Z:\Games\SteamApps\common\Arma 3\arma3.exe
FirewallRules: [{17486E0D-DBED-4F52-9FBD-910EC8D7D2B5}] => (Allow) Z:\Games\SteamApps\common\Arma 3\arma3.exe
FirewallRules: [{21EF5922-3329-4A53-B5BD-61EB815EEE38}] => (Allow) Z:\Games\SteamApps\common\Arma 3\arma3.exe
FirewallRules: [{65E1DD2D-A670-4787-AA62-567F1CC8C8A2}] => (Allow) Z:\Games\SteamApps\common\Stronghold\Stronghold.exe
FirewallRules: [{6E96FD90-EF2D-4388-9F85-4BB6A0320657}] => (Allow) Z:\Games\SteamApps\common\Stronghold\Stronghold.exe
FirewallRules: [{FC15EF63-6594-49C0-A62B-36A62F2D2993}] => (Allow) Z:\Games\SteamApps\common\Portal 2\portal2.exe
FirewallRules: [{8BD77877-1B2D-420B-99A6-CC4B87643FD3}] => (Allow) Z:\Games\SteamApps\common\Portal 2\portal2.exe
FirewallRules: [{5F752A58-1128-4A9E-A95F-FF4B105A0BEF}] => (Allow) Z:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{6DCB2806-881E-4F78-AD29-DE24C873E509}] => (Allow) Z:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{35AC8BDC-DBD7-4719-8C03-7A8C48B21EB7}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{9334300C-A4CE-4DCE-A738-CF4D2CC8FF35}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{A554938D-A67E-4E86-B81B-4C6621EF4F0C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{EE24EC03-8936-4451-A1FC-8026A5B88B2A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{4E723DE6-53BD-4CFF-92C7-D6FC772B18DE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{5601D601-6474-4291-9D13-DEB9D9DD84E9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{5A1DC87F-A063-4FAA-9C2C-6ACDB978DDE9}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{9C9E0E91-5823-4035-996D-4D5A6400394F}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{B80446DD-F66B-4450-841F-F857DF92B330}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{0F803EF3-66F0-4F38-9A43-5D41D5370717}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{4F4E4682-67C8-4EA8-B309-500178D043DF}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{34DE4F50-9A29-4745-9F46-87D147023E22}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{A449883D-1E9C-45C9-93A0-9DAFCD8A074F}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{D79FC307-D60D-419D-84F4-2A90E3152D27}] => (Allow) Z:\Games\Steam.exe
FirewallRules: [{CEDC333B-BE3B-4AF4-BAAE-1FD953590275}] => (Allow) Z:\Games\Steam.exe
FirewallRules: [{86944573-AE55-4303-8D36-7A418651D713}] => (Allow) Z:\Games\SteamApps\common\Tom Clancy's Ghost Recon Phantoms - EU\Launcher.exe
FirewallRules: [{3E603A69-D149-4E4D-9733-30D7D40BA17C}] => (Allow) Z:\Games\SteamApps\common\Tom Clancy's Ghost Recon Phantoms - EU\Launcher.exe
FirewallRules: [{6AB93E02-6E42-4EE5-9812-59E33595708A}] => (Allow) Z:\Games\SteamApps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{07A1461A-854A-4EEE-85D1-4EC96741C24A}] => (Allow) Z:\Games\SteamApps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{58523A24-D250-469E-9FC8-82BC524E36D1}] => (Allow) Z:\Games\SteamApps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{62B213A0-742E-49D7-9085-531D8EC27684}] => (Allow) Z:\Games\SteamApps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{CAD2EF51-14D1-4A71-9362-52DAB301A4A5}] => (Allow) Z:\Games\SteamApps\common\Rollercoaster Tycoon 2\RCT2.EXE
FirewallRules: [{6C31E55E-05EA-482B-8BD7-10597F200058}] => (Allow) Z:\Games\SteamApps\common\Rollercoaster Tycoon 2\RCT2.EXE
FirewallRules: [{3AEB54B6-2FB6-4AB4-B1DE-6EEE1BB800FC}] => (Allow) Z:\Games\SteamApps\common\The Stanley Parable\stanley.exe
FirewallRules: [{F4B378A9-5D33-4BF1-97A0-E55B70954A77}] => (Allow) Z:\Games\SteamApps\common\The Stanley Parable\stanley.exe
FirewallRules: [{883D58D6-442B-47D9-AC16-AD1EDABBE269}] => (Allow) Z:\Games\SteamApps\common\The Walking Dead Season Two\TheWalkingDead2.exe
FirewallRules: [{68AB02E6-918A-42B5-84E0-CE13397CDC22}] => (Allow) Z:\Games\SteamApps\common\The Walking Dead Season Two\TheWalkingDead2.exe
FirewallRules: [{86025F3D-99D6-4028-A726-32CBA3C3B8D7}] => (Allow) Z:\Games\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{ABBBDAF1-B8DF-4E0C-AFC7-D6D2BC73C755}] => (Allow) Z:\Games\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{A3F1E7ED-50CE-44E4-82F7-1EF683488342}] => (Allow) Z:\Games\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{54A90F5B-E73D-43B0-9EB7-68C329BF66BD}] => (Allow) Z:\Games\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{C4FD8BC6-DB99-40CD-A25B-96E016A5B357}] => (Allow) Z:\Games\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{A875C5D3-705F-4039-946F-5A1D5774B8BC}] => (Allow) Z:\Games\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{FEDBE261-17E4-4F75-8B7A-EBE4524AD17B}] => (Allow) Z:\Games\SteamApps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{4B124CB8-01F5-44D3-B37B-803753493D4B}] => (Allow) Z:\Games\SteamApps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [TCP Query User{CD2572A6-4046-4F60-BE6B-3B9733889073}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{FE7C98ED-8756-4AFF-9171-F6A4BCB4A7FC}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [{A23F4D4F-38B0-4602-8361-D07F8C7BE0B5}] => (Allow) Z:\Games\SteamApps\common\Arma 3\arma3launcher.exe
FirewallRules: [{C1B6EA64-8449-4E1E-80AC-AC5BED9A95E5}] => (Allow) Z:\Games\SteamApps\common\Arma 3\arma3launcher.exe
FirewallRules: [{A2BEC3A8-5E6A-4897-9EE1-38337113DC3B}] => (Allow) Z:\Games\bin\steamwebhelper.exe
FirewallRules: [{E4352066-C2CD-49EE-81ED-B4618699AF40}] => (Allow) Z:\Games\bin\steamwebhelper.exe
FirewallRules: [{76A1B072-8C1F-4391-8B75-AB8C30C11550}] => (Allow) z:\Games\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{75730072-F3B5-4D4C-8B4B-C6A0678532A7}] => (Allow) z:\Games\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{F909DB4B-8A5F-45BD-A34B-1E1BB8A831F3}] => (Allow) z:\Games\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{DEB8015A-CDB5-4AA7-9228-D78F1425C5CD}] => (Allow) z:\Games\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{3C03D453-F5A5-47AC-9625-5CE5B0F310E0}] => (Allow) z:\Games\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{8FD6AC40-BDC2-4F94-8192-2F5ABB5EA792}] => (Allow) z:\Games\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{1803DE21-33B2-4A4D-B687-82371C309371}] => (Allow) z:\Games\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{49198E37-D83D-467E-9B6C-12C463EEB66F}] => (Allow) z:\Games\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{F75B9513-2C19-49C5-8966-678858A21E59}] => (Allow) Z:\Games\SteamApps\common\Stronghold Kingdoms\StrongholdKingdoms.exe
FirewallRules: [{88772D8A-E209-49FF-BF19-79F623BE9A36}] => (Allow) Z:\Games\SteamApps\common\Stronghold Kingdoms\StrongholdKingdoms.exe
FirewallRules: [{328913F2-5395-4DB8-9601-931114ACA877}] => (Allow) Z:\Games\SteamApps\common\ARMA Cold War Assault\ColdWarAssault.exe
FirewallRules: [{7054E4AF-E8B8-4D10-B6D6-2A8C8C3E5696}] => (Allow) Z:\Games\SteamApps\common\ARMA Cold War Assault\ColdWarAssault.exe
FirewallRules: [{47549FB8-DF0C-42AD-AE07-555747C394A3}] => (Allow) Z:\Games\SteamApps\common\Only If\Only If.exe
FirewallRules: [{FF959803-941F-4E92-9F9F-F40DF4ACA805}] => (Allow) Z:\Games\SteamApps\common\Only If\Only If.exe
FirewallRules: [{006FA18E-C106-4BD2-AC63-DDF5C48BCBFC}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{3D651F4A-A4D6-48C4-BD61-C40968950417}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{4A37B996-84A3-406A-9E5D-728320697864}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{061D577F-0467-4E32-9A22-45B6F9A8CCED}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{1BF06112-F24A-4EF6-8924-A3C1EE1B03B5}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{85CD6766-B06D-46BB-95B7-979AF591EF17}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{6E211893-FB11-49EF-A7BB-EAB614839D1E}] => (Allow) Z:\Non-Steam Games\ACRSP.exe
FirewallRules: [{963E31D8-9921-46CD-BA77-4CE6CA9E2565}] => (Allow) Z:\Non-Steam Games\ACRSP.exe
FirewallRules: [{79CC9C0D-6382-4703-99BB-3966FBF144B7}] => (Allow) Z:\Non-Steam Games\ACRMP.exe
FirewallRules: [{FF283063-017B-427D-A7C4-C531ADE4A450}] => (Allow) Z:\Non-Steam Games\ACRMP.exe
FirewallRules: [{62089326-B26E-4123-A0D5-8DDDA8684B3B}] => (Allow) Z:\Non-Steam Games\AssassinsCreedRevelations.exe
FirewallRules: [{7F690C66-EFE0-4EEB-9B2A-5DBABCD341DB}] => (Allow) Z:\Non-Steam Games\AssassinsCreedRevelations.exe
FirewallRules: [{0E131332-5D83-4924-9548-A2EED5553130}] => (Allow) C:\Users\David\AppData\Local\Temp\7zS481D\HPDiagnosticCoreUI.exe
FirewallRules: [{06B9D15F-1A4E-483A-A39B-B51EF4A65B53}] => (Allow) C:\Users\David\AppData\Local\Temp\7zS481D\HPDiagnosticCoreUI.exe
FirewallRules: [{8CAF9B43-00DA-4C77-8B16-F67FB6CB0E60}] => (Allow) C:\Users\David\AppData\Local\Temp\7zS4926\HPDiagnosticCoreUI.exe
FirewallRules: [{1A457CD1-7303-43C4-A9C5-E7AAE3BBFD52}] => (Allow) C:\Users\David\AppData\Local\Temp\7zS4926\HPDiagnosticCoreUI.exe
FirewallRules: [{8549C253-DB49-453D-BE5E-D469E42B55D8}] => (Allow) C:\Program Files\HP\HP ENVY 4500 series\Bin\DeviceSetup.exe
FirewallRules: [{2C3AC473-A57C-4889-BF6C-519F73116CA2}] => (Allow) LPort=5357
FirewallRules: [{A52C1FD7-A98B-451F-BC09-D34A0C7EFEE1}] => (Allow) C:\Program Files\HP\HP ENVY 4500 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{A8512ABB-AC4F-4880-BB61-359330061EB5}] => (Allow) Z:\Program Files (x86)\Origin Games\Bejeweled 3\Bejeweled3.exe
FirewallRules: [{F47FCA84-D34F-4B8D-8E3F-C2EF688BC166}] => (Allow) Z:\Program Files (x86)\Origin Games\Bejeweled 3\Bejeweled3.exe
FirewallRules: [{60BE3BA6-E95D-4F78-8ECC-410D1A4ACC30}] => (Allow) Z:\Program Files (x86)\Origin Games\SimCity\SimCity\SimCity.exe
FirewallRules: [{5F790643-B364-4574-A25B-937DBD97F061}] => (Allow) Z:\Program Files (x86)\Origin Games\SimCity\SimCity\SimCity.exe
FirewallRules: [{83F4B6A6-4F40-41AD-B14B-4ACB03520315}] => (Allow) Z:\Program Files (x86)\Origin Games\Crusader No Remorse\data\Game\DOSBox\DOSBox.exe
FirewallRules: [{4C82AFEA-ECC7-4DA3-A784-6BEC7BED53A6}] => (Allow) Z:\Program Files (x86)\Origin Games\Crusader No Remorse\data\Game\DOSBox\DOSBox.exe
FirewallRules: [{8C3A27C1-A5F7-4260-ADCA-E3F9F4698289}] => (Allow) Z:\Games\SteamApps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [{783D46BB-1DAB-4F11-B620-CF0647004C4D}] => (Allow) Z:\Games\SteamApps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [{59891B23-7664-43F2-B237-0E96D38C355E}] => (Allow) Z:\Games\SteamApps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{301B374D-AB34-4371-A07D-601045A8E593}] => (Allow) Z:\Games\SteamApps\common\Prison Architect\Prison Architect.exe
FirewallRules: [TCP Query User{C170D3F4-647F-454C-A5F0-A9E1DD0675E6}Z:\games\steamapps\common\total war rome ii\rome2.exe] => (Block) Z:\games\steamapps\common\total war rome ii\rome2.exe
FirewallRules: [UDP Query User{91E5C09A-CAD6-4BCD-B0D6-5B59CF079205}Z:\games\steamapps\common\total war rome ii\rome2.exe] => (Block) Z:\games\steamapps\common\total war rome ii\rome2.exe
FirewallRules: [{A3AF1EA8-4C48-42E5-A445-9E4B3A2BC829}] => (Allow) Z:\Games\SteamApps\common\Half-Life 1 Source Deathmatch\hl2.exe
FirewallRules: [{B079859F-419F-488C-9CE1-20A5891DFB47}] => (Allow) Z:\Games\SteamApps\common\Half-Life 1 Source Deathmatch\hl2.exe
FirewallRules: [{7E32429E-BD95-4A91-B40F-5F143F53C15E}] => (Allow) Z:\Games\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{2CF467D1-B456-4CEE-AEB1-D24769B5CA41}] => (Allow) Z:\Games\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{79FD1496-E6AA-4449-BD67-266228F60BE4}] => (Allow) Z:\Games\SteamApps\common\Half-Life\hl.exe
FirewallRules: [{78A92653-2654-4CBD-9981-2A947CC98722}] => (Allow) Z:\Games\SteamApps\common\Half-Life\hl.exe
FirewallRules: [{BC9916B6-0BE5-41B5-94C9-ACF10F401018}] => (Allow) Z:\Games\SteamApps\common\Wolfenstein.The.New.Order.DE\WolfNewOrder_x64.exe
FirewallRules: [{5B5018BB-CC18-4335-9153-B2D4AA7BB01A}] => (Allow) Z:\Games\SteamApps\common\Wolfenstein.The.New.Order.DE\WolfNewOrder_x64.exe
FirewallRules: [{316A39E5-2634-48D2-AC49-2C567003A329}] => (Allow) Z:\Games\SteamApps\common\Half-Life 2 Deathmatch\hl2.exe
FirewallRules: [{3429DE28-7345-4E31-9ADE-CD700FF46007}] => (Allow) Z:\Games\SteamApps\common\Half-Life 2 Deathmatch\hl2.exe
FirewallRules: [{12BEBCB6-6593-4E3B-B46D-2318DFB016B2}] => (Allow) Z:\Games\SteamApps\common\Wolfenstein.The.New.Order\WolfNewOrder_x64.exe
FirewallRules: [{26D88824-5489-4AEF-8BB6-C71AC5AB2245}] => (Allow) Z:\Games\SteamApps\common\Wolfenstein.The.New.Order\WolfNewOrder_x64.exe
FirewallRules: [{5525D1A4-CA70-4C4B-8C20-4F785EE9FF60}] => (Allow) Z:\Games\SteamApps\common\SpecOps_TheLine\Binaries\Win32\SpecOpsTheLine.exe
FirewallRules: [{573FE97F-D889-4BCD-89CA-7674B90767F9}] => (Allow) Z:\Games\SteamApps\common\SpecOps_TheLine\Binaries\Win32\SpecOpsTheLine.exe
FirewallRules: [{4CB21D58-F59D-427C-87E9-1529D3871C02}] => (Allow) Z:\Games\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{753567FF-9F83-45B4-8EAB-07707239EFE8}] => (Allow) Z:\Games\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{3F4E0C02-0612-459C-B6DE-CA9952AD5635}] => (Allow) Z:\Games\SteamApps\common\The Way of Life\TheWayOfLifeDemoWindows.exe
FirewallRules: [{0E5AE006-90F1-4E87-8430-DBB103AFA4C1}] => (Allow) Z:\Games\SteamApps\common\The Way of Life\TheWayOfLifeDemoWindows.exe
FirewallRules: [{B375CC6E-7966-4E52-B143-2DFD2202C1F3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{23529FFE-488D-4A89-8657-487B6B9AF0CD}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{A6242E31-AAC4-4579-9F10-EF1587B7C2EE}] => (Allow) Z:\Games\SteamApps\common\Stronghold Crusader 2\bin\win32_release\Crusader2.exe
FirewallRules: [{BC0D2AD8-0DC1-4200-91A6-C278D7394590}] => (Allow) Z:\Games\SteamApps\common\Stronghold Crusader 2\bin\win32_release\Crusader2.exe
FirewallRules: [{3BBBE607-1B34-4BC7-B0E8-CAE105D1335C}] => (Allow) Z:\Games\SteamApps\common\Hearts of Iron 3\hoi3.exe
FirewallRules: [{E9FB6D9F-3963-4169-AF12-A6781FA74D03}] => (Allow) Z:\Games\SteamApps\common\Hearts of Iron 3\hoi3.exe
FirewallRules: [{C736EB6B-57B2-4CF7-8808-5AD7C6A5F247}] => (Allow) Z:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{7C5CA459-DB1A-4F24-A3F5-F1228548B7DD}] => (Allow) Z:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{E9AEBA7C-CBFF-4198-B73F-F38D3DE9A4FA}] => (Allow) Z:\Games\SteamApps\common\Saints Row IV\SaintsRowIV.exe
FirewallRules: [{19307BFC-A394-4989-99D9-9776C7318E76}] => (Allow) Z:\Games\SteamApps\common\Saints Row IV\SaintsRowIV.exe
FirewallRules: [{F9B16204-824A-4562-87AF-EC6F4FE991A5}] => (Allow) Z:\Program Files (x86)\Origin Games\Theme Hospital\data\Game\DOSBox\LAUNCHER.exe
FirewallRules: [{BF8F9A4A-B996-4920-9F87-AA7576FF893E}] => (Allow) Z:\Program Files (x86)\Origin Games\Theme Hospital\data\Game\DOSBox\LAUNCHER.exe
FirewallRules: [{95787CC0-09CB-4EB1-BA33-7375EFD47E3A}] => (Allow) Z:\Games\SteamApps\common\Total War Rome II\launcher\launcher.exe
FirewallRules: [{BAACB87D-1238-4991-B032-FD347EACD597}] => (Allow) Z:\Games\SteamApps\common\Total War Rome II\launcher\launcher.exe
FirewallRules: [{F5BA0B2B-3E8F-4E77-BD4C-3A5E5CC4A183}] => (Allow) Z:\Games\SteamApps\common\David\David.exe
FirewallRules: [{B19B9293-FD71-4AB0-AD8E-2E7A38EE732B}] => (Allow) Z:\Games\SteamApps\common\David\David.exe
FirewallRules: [{FA663F0A-5BB8-4A78-9469-1AA0AEA91318}] => (Allow) Z:\Games\SteamApps\common\Cities_Skylines\Cities.exe
FirewallRules: [{95250FFD-D847-4B99-8DE0-27D86400288E}] => (Allow) Z:\Games\SteamApps\common\Cities_Skylines\Cities.exe
FirewallRules: [TCP Query User{E59DABB0-0654-4F27-9A1E-C3E5F77D51F0}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{841DA21C-21A8-459A-BFEC-6A5A487F8E42}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{4734F1EA-4B27-42F8-81EB-5B7FDC80836C}] => (Allow) Z:\Games\SteamApps\common\Grand Theft Auto San Andreas\gta-sa.exe
FirewallRules: [{06223D37-09F7-4C50-B333-40B77A2B9540}] => (Allow) Z:\Games\SteamApps\common\Grand Theft Auto San Andreas\gta-sa.exe
FirewallRules: [{6756BF04-C815-486F-A0B0-B390B5C64B9B}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{4F2CD76D-32EF-454E-833C-DC9B359990E3}] => (Allow) Z:\Games\SteamApps\common\POSTAL2Complete\System\Postal2.exe
FirewallRules: [{FF841279-0E0E-4D38-97D1-65289053B29B}] => (Allow) Z:\Games\SteamApps\common\POSTAL2Complete\System\Postal2.exe
FirewallRules: [{D014C531-8764-47D5-8AE5-5A7B9EAD4B6B}] => (Allow) Z:\Games\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe
FirewallRules: [{E9ABEFC9-0B56-46B7-8C98-2BC2B00AB00A}] => (Allow) Z:\Games\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe
FirewallRules: [{E34CA4CE-8B61-434D-8F4C-9DFE22B4C9D3}] => (Allow) Z:\Games\SteamApps\common\The Four Kings Casino and Slots\Casino.exe
FirewallRules: [{49C3CCD1-E13A-4D27-A158-AB4CACC3730B}] => (Allow) Z:\Games\SteamApps\common\The Four Kings Casino and Slots\Casino.exe
FirewallRules: [{F654B851-38B2-41A6-98BF-C69600D93FD5}] => (Allow) Z:\Games\SteamApps\common\GoatSimulator\Binaries\Win32\GoatGame-Win32-Shipping.exe
FirewallRules: [{1E9CDDCA-13FD-4F54-92B7-C26F0F03CBE7}] => (Allow) Z:\Games\SteamApps\common\GoatSimulator\Binaries\Win32\GoatGame-Win32-Shipping.exe
FirewallRules: [TCP Query User{003261C1-5B67-4229-8137-750387D105B5}Z:\games\secondlifeviewer\slvoice.exe] => (Allow) Z:\games\secondlifeviewer\slvoice.exe
FirewallRules: [UDP Query User{B80C0A4C-0800-45A9-B5FF-D63435530B1B}Z:\games\secondlifeviewer\slvoice.exe] => (Allow) Z:\games\secondlifeviewer\slvoice.exe
FirewallRules: [{511BFDA6-51EA-4221-834A-1A7719D0B3E4}] => (Allow) Z:\Games\SteamApps\common\Dead or Alive 5 Last Round\game.exe
FirewallRules: [{9613B1A7-46FF-4EC2-B422-C02AC60ED33A}] => (Allow) Z:\Games\SteamApps\common\Dead or Alive 5 Last Round\game.exe
FirewallRules: [{2E175176-80FB-4B6E-8FBD-37D55E1DAEF0}] => (Allow) Z:\Games\SteamApps\common\Dead or Alive 5 Last Round\startup_setting.exe
FirewallRules: [{12E7C493-48D6-4D4A-9238-5D934D253AB9}] => (Allow) Z:\Games\SteamApps\common\Dead or Alive 5 Last Round\startup_setting.exe
FirewallRules: [{2312BF7F-F248-4282-B26F-311871E78EB9}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{4D8E25D4-69C2-4412-91C3-6D3523A8AD59}] => (Allow) Z:\Games\SteamApps\common\HER STORY\HerStory.exe
FirewallRules: [{8F87A658-0767-4C93-AD0D-B23E457FE1C4}] => (Allow) Z:\Games\SteamApps\common\HER STORY\HerStory.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (06/28/2015 08:02:36 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 15226

Error: (06/28/2015 08:02:36 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 15226

Error: (06/28/2015 08:02:36 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (06/28/2015 06:46:41 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

Error: (06/28/2015 05:24:59 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

Error: (06/28/2015 05:24:41 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

Error: (06/28/2015 05:24:41 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

Error: (06/28/2015 05:24:38 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

Error: (06/26/2015 08:08:38 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   18 5.7.3.9.4.E.F.1.4.A.8.0.3.6.8.D.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa. PTR David-PC-2.local.

Error: (06/26/2015 08:08:38 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.1.110:5353   16 5.7.3.9.4.E.F.1.4.A.8.0.3.6.8.D.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa. PTR David-PC.local.


System errors:
=============
Error: (06/29/2015 11:56:07 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎29.‎06.‎2015 um 23:53:22 unerwartet heruntergefahren.

Error: (06/28/2015 05:31:33 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275

Error: (06/28/2015 05:31:33 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\David\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (06/28/2015 05:31:33 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275

Error: (06/28/2015 05:31:33 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\David\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (06/28/2015 05:31:33 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275

Error: (06/28/2015 05:31:33 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\David\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (06/28/2015 05:28:05 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275

Error: (06/28/2015 05:28:05 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\David\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (06/28/2015 05:28:04 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275


Microsoft Office:
=========================
Error: (06/28/2015 08:02:36 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 15226

Error: (06/28/2015 08:02:36 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 15226

Error: (06/28/2015 08:02:36 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (06/28/2015 06:46:41 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (06/28/2015 05:24:59 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Users\David\Downloads\esetsmartinstaller_deu.exe

Error: (06/28/2015 05:24:41 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Users\David\Downloads\esetsmartinstaller_deu.exe

Error: (06/28/2015 05:24:41 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Users\David\Downloads\esetsmartinstaller_deu.exe

Error: (06/28/2015 05:24:38 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Users\David\Downloads\esetsmartinstaller_deu.exe

Error: (06/26/2015 08:08:38 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   18 5.7.3.9.4.E.F.1.4.A.8.0.3.6.8.D.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa. PTR David-PC-2.local.

Error: (06/26/2015 08:08:38 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.1.110:5353   16 5.7.3.9.4.E.F.1.4.A.8.0.3.6.8.D.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa. PTR David-PC.local.


CodeIntegrity Errors:
===================================
  Date: 2015-06-25 17:50:56.871
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-06-25 17:50:56.793
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i7-3770K CPU @ 3.50GHz
Percentage of memory in use: 17%
Total physical RAM: 16339.26 MB
Available physical RAM: 13417.05 MB
Total Pagefile: 32676.72 MB
Available Pagefile: 29655.52 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:223.57 GB) (Free:105.65 GB) NTFS
Drive z: (Volume) (Fixed) (Total:1862.92 GB) (Free:1504.52 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 3885F7B1)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=1862.9 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 223.6 GB) (Disk ID: 84A0769B)
Partition 1: (Not Active) - (Size=223.6 GB) - (Type=07 NTFS)

==================== End of log ============================
         
--- --- ---


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:28-06-2015 01
Ran by David (administrator) on DAVID-PC on 03-07-2015 14:29:12
Running from C:\Users\David\Desktop
Loaded Profiles: David (Available Profiles: David)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanNetService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(F-Secure Corporation) C:\Program Files (x86)\Internet Security\fshoster32.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(F-Secure Corporation) C:\Program Files (x86)\Internet Security\apps\CCF_Reputation\fsorsp.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(F-Secure Corporation) C:\Program Files (x86)\Internet Security\apps\ComputerSecurity\Anti-Virus\fsgk32.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(F-Secure Corporation) C:\Program Files (x86)\Internet Security\apps\ComputerSecurity\Common\FSMA32.EXE
(F-Secure Corporation) C:\Program Files (x86)\Internet Security\apps\ComputerSecurity\Anti-Virus\fssm32.exe
(F-Secure Corporation) C:\Program Files (x86)\Internet Security\apps\ComputerSecurity\Common\FSHDLL64.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\WLanGUI.exe
(F-Secure Corporation) C:\Program Files (x86)\Internet Security\apps\ComputerSecurity\Common\FSM32.EXE
(F-Secure Corporation) C:\Program Files (x86)\Internet Security\fshoster32.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Valve Corporation) Z:\Games\Steam.exe
(Valve Corporation) Z:\Games\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) Z:\Games\bin\steamwebhelper.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6457960 2011-12-28] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-04-07] (Apple Inc.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-04] (Intel Corporation)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\wlangui.exe [2105344 2010-10-22] (AVM Berlin)
HKLM-x32\...\Run: [F-Secure Manager] => C:\Program Files (x86)\Internet Security\apps\ComputerSecurity\Common\FSM32.EXE [310312 2014-10-14] (F-Secure Corporation)
HKLM-x32\...\Run: [F-Secure Hoster (45119)] => C:\Program Files (x86)\Internet Security\fshoster32.exe [187432 2014-02-19] (F-Secure Corporation)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
Startup: C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GameRanger.lnk [2013-12-24]
ShortcutTarget: GameRanger.lnk -> C:\Users\David\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe (GameRanger Technologies)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-3975945495-1988407803-2975606891-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3975945495-1988407803-2975606891-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-3975945495-1988407803-2975606891-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://wiki-de.guildwars2.com/wiki/Hauptseite
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3975945495-1988407803-2975606891-1000 -> {146E3655-CCF2-416F-8393-25F813A3A4DB} URL = hxxp://www.google.com/search?q={searchTerms}&rlz=
BHO: Browsing Protection -> {45BBE08D-81C5-4A67-AF20-B2A077C67747} -> C:\Program Files (x86)\Internet Security\apps\CCF_Scanning\bin\browser\install\fs_ie_https\fs_ie_https64.dll [2015-06-15] (F-Secure Corporation)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-06] (Google Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Browsing Protection -> {45BBE08D-81C5-4A67-AF20-B2A077C67747} -> C:\Program Files (x86)\Internet Security\apps\CCF_Scanning\bin\browser\install\fs_ie_https\fs_ie_https.dll [2015-06-15] (F-Secure Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-07-02] (Oracle Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-06] (Google Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-07-02] (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-06] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-06] (Google Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{8FEE6159-FC10-4F85-B4B4-4CE56BE64FB4}: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\8aleuple.default
FF Homepage: hxxp://wiki-de.guildwars2.com/wiki/Hauptseite
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_194.dll [2015-07-02] ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_194.dll [2015-07-02] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll [2013-11-21] (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-01-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-01-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-07-02] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-07-02] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-04-08] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-04-08] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-19] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-19] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{cf8b227c-139f-4358-99ed-0f6a6d744cca}] - C:\Program Files (x86)\Internet Security\apps\CCF_Scanning\bin\browser\deploy\fs_firefox_https
FF Extension: Browsing Protection - C:\Program Files (x86)\Internet Security\apps\CCF_Scanning\bin\browser\deploy\fs_firefox_https [2014-12-09]

Chrome: 
=======
CHR Profile: C:\Users\David\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-07-18]
CHR Extension: (Google Search) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-07-18]
CHR Extension: (Browsing Protection by F-Secure) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmjjnhpacphpjmnnlnccpfmhkcloaade [2014-10-07]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-03]
CHR Extension: (Google Wallet) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-01]
CHR Extension: (Gmail) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-07-18]
CHR HKLM-x32\...\Chrome\Extension: [jmjjnhpacphpjmnnlnccpfmhkcloaade] - C:/Program Files (x86)/Internet Security/apps/CCF_Scanning/bin/browser/install/fs_chrome_https/fs_chrome_https.crx [2014-11-27]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-20] (Apple Inc.)
R2 AVM WLAN Connection Service; C:\Program Files (x86)\avmwlanstick\WlanNetService.exe [376832 2010-10-22] (AVM Berlin) [File not signed]
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2013-09-27] () [File not signed]
R2 fshoster; C:\Program Files (x86)\Internet Security\fshoster32.exe [187432 2014-02-19] (F-Secure Corporation)
R3 FSMA; C:\Program Files (x86)\Internet Security\apps\ComputerSecurity\Common\FSMA32.EXE [216104 2014-10-14] (F-Secure Corporation)
R2 FSORSPClient; C:\Program Files (x86)\Internet Security\apps\CCF_Reputation\fsorsp.exe [60456 2015-03-10] (F-Secure Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-01-20] (Intel Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
S3 Origin Client Service; Z:\Origin\OriginClientService.exe [1910128 2015-01-31] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-08-20] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [49760 2012-01-06] (Asmedia Technology)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-25] (AVM Berlin)
R3 F-Secure Gatekeeper; C:\Program Files (x86)\Internet Security\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [208424 2015-06-08] (F-Secure Corporation)
R1 F-Secure HIPS; C:\Program Files (x86)\Internet Security\apps\ComputerSecurity\HIPS\drivers\fshs.sys [71080 2015-06-08] (F-Secure Corporation)
R0 fsbts; C:\Windows\System32\Drivers\fsbts.sys [55336 2015-05-28] ()
R0 fsbts; C:\Windows\SysWOW64\Drivers\fsbts.sys [42672 2013-06-08] ()
R3 fsni; C:\Program Files (x86)\Internet Security\apps\CCF_Scanning\bin\fsni64.sys [95784 2015-06-15] (F-Secure Corporation)
R1 fsvista; C:\Program Files (x86)\Internet Security\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys [13248 2013-06-24] ()
R3 fwlanusbn; C:\Windows\System32\DRIVERS\fwlanusbn.sys [714368 2010-10-25] (AVM GmbH)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-03 14:29 - 2015-07-03 14:29 - 00017301 _____ C:\Users\David\Desktop\FRST.txt
2015-07-03 14:28 - 2015-07-03 14:28 - 02112512 _____ (Farbar) C:\Users\David\Desktop\FRST64.exe
2015-07-02 16:26 - 2015-07-03 14:29 - 00000000 ____D C:\FRST
2015-06-29 16:29 - 2015-06-29 16:29 - 00001379 _____ C:\DelFix.txt
2015-06-29 16:29 - 2015-06-29 16:29 - 00000000 ____D C:\Windows\ERUNT
2015-06-26 10:30 - 2015-06-26 10:30 - 00000207 _____ C:\Windows\tweaking.com-regbackup-DAVID-PC-Windows-7-Ultimate-(64-bit).dat
2015-06-25 17:57 - 2015-06-25 17:57 - 00002032 _____ C:\Users\David\Desktop\Internet Security.lnk
2015-06-25 17:42 - 2015-06-29 16:27 - 00000000 ____D C:\Windows\erdnt
2015-06-20 11:10 - 2015-06-26 10:02 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-06-20 11:10 - 2015-06-20 11:26 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-06-20 11:06 - 2015-06-20 11:06 - 16502728 _____ (Malwarebytes Corp.) C:\Users\David\Downloads\mbar-1.09.1.1004.exe
2015-06-17 23:26 - 2015-06-17 23:26 - 00000000 ____D C:\Windows\pss
2015-06-15 22:32 - 2015-06-15 22:32 - 00000000 ____D C:\Users\David\Documents\KoeiTecmo
2015-06-12 18:46 - 2015-06-17 23:14 - 00000000 ____D C:\Users\David\AppData\Roaming\SecondLife
2015-06-12 18:45 - 2015-06-12 18:45 - 32384792 _____ C:\Users\David\Downloads\Second_Life_3_7_29_301305_i686_Setup.exe
2015-06-11 20:24 - 2015-06-01 21:16 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-06-11 20:24 - 2015-06-01 20:07 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-06-11 20:24 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-06-11 20:24 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-06-11 20:24 - 2015-05-25 20:24 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-06-11 20:24 - 2015-05-25 20:23 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-06-11 20:24 - 2015-05-25 20:23 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-06-11 20:24 - 2015-05-25 20:21 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-06-11 20:24 - 2015-05-25 20:19 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-06-11 20:24 - 2015-05-25 20:19 - 01255424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-06-11 20:24 - 2015-05-25 20:19 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-06-11 20:24 - 2015-05-25 20:19 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-06-11 20:24 - 2015-05-25 20:19 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-06-11 20:24 - 2015-05-25 20:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-06-11 20:24 - 2015-05-25 20:19 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-06-11 20:24 - 2015-05-25 20:19 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-06-11 20:24 - 2015-05-25 20:19 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-06-11 20:24 - 2015-05-25 20:19 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-06-11 20:24 - 2015-05-25 20:19 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-06-11 20:24 - 2015-05-25 20:19 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-06-11 20:24 - 2015-05-25 20:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-06-11 20:24 - 2015-05-25 20:19 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-06-11 20:24 - 2015-05-25 20:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-06-11 20:24 - 2015-05-25 20:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-06-11 20:24 - 2015-05-25 20:19 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-06-11 20:24 - 2015-05-25 20:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-06-11 20:24 - 2015-05-25 20:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-06-11 20:24 - 2015-05-25 20:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-06-11 20:24 - 2015-05-25 20:19 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-06-11 20:24 - 2015-05-25 20:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-06-11 20:24 - 2015-05-25 20:18 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-06-11 20:24 - 2015-05-25 20:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-06-11 20:24 - 2015-05-25 20:18 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-06-11 20:24 - 2015-05-25 20:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-06-11 20:24 - 2015-05-25 20:18 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-06-11 20:24 - 2015-05-25 20:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-06-11 20:24 - 2015-05-25 20:18 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-06-11 20:24 - 2015-05-25 20:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-06-11 20:24 - 2015-05-25 20:18 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-06-11 20:24 - 2015-05-25 20:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-06-11 20:24 - 2015-05-25 20:18 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-06-11 20:24 - 2015-05-25 20:18 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-06-11 20:24 - 2015-05-25 20:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-06-11 20:24 - 2015-05-25 20:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-06-11 20:24 - 2015-05-25 20:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-06-11 20:24 - 2015-05-25 20:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-06-11 20:24 - 2015-05-25 20:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-06-11 20:24 - 2015-05-25 20:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 20:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 20:07 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-06-11 20:24 - 2015-05-25 20:07 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-06-11 20:24 - 2015-05-25 20:04 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-06-11 20:24 - 2015-05-25 20:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-06-11 20:24 - 2015-05-25 20:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-06-11 20:24 - 2015-05-25 20:01 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-06-11 20:24 - 2015-05-25 20:01 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-06-11 20:24 - 2015-05-25 20:01 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-06-11 20:24 - 2015-05-25 20:01 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-06-11 20:24 - 2015-05-25 20:01 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-06-11 20:24 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-06-11 20:24 - 2015-05-25 20:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-06-11 20:24 - 2015-05-25 20:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-06-11 20:24 - 2015-05-25 20:01 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-06-11 20:24 - 2015-05-25 20:01 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-06-11 20:24 - 2015-05-25 20:01 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-06-11 20:24 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-06-11 20:24 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-06-11 20:24 - 2015-05-25 20:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-06-11 20:24 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-06-11 20:24 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-06-11 20:24 - 2015-05-25 20:00 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-06-11 20:24 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-06-11 20:24 - 2015-05-25 19:59 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-06-11 20:24 - 2015-05-25 19:59 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-06-11 20:24 - 2015-05-25 19:59 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-06-11 20:24 - 2015-05-25 19:59 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-06-11 20:24 - 2015-05-25 19:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-06-11 20:24 - 2015-05-25 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-06-11 20:24 - 2015-05-25 19:55 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-06-11 20:24 - 2015-05-25 19:55 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-06-11 20:24 - 2015-05-25 19:55 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 19:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 19:08 - 03206144 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-06-11 20:24 - 2015-05-25 19:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-06-11 20:24 - 2015-05-25 18:50 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-06-11 20:24 - 2015-05-25 18:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-06-11 20:24 - 2015-05-25 18:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 18:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-06-11 20:24 - 2015-05-25 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-06-11 20:24 - 2015-05-23 05:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-06-11 20:24 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-06-11 20:24 - 2015-05-23 05:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-06-11 20:24 - 2015-05-23 05:15 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-06-11 20:24 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-06-11 20:24 - 2015-05-23 05:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-06-11 20:24 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-06-11 20:24 - 2015-05-23 05:09 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-06-11 20:24 - 2015-05-23 05:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-06-11 20:24 - 2015-05-23 05:06 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-06-11 20:24 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-06-11 20:24 - 2015-05-23 05:05 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-06-11 20:24 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-06-11 20:24 - 2015-05-23 04:57 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-06-11 20:24 - 2015-05-23 04:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-06-11 20:24 - 2015-05-23 04:49 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-06-11 20:24 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-06-11 20:24 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-06-11 20:24 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-06-11 20:24 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-06-11 20:24 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-06-11 20:24 - 2015-05-23 04:37 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-06-11 20:24 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-06-11 20:24 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-06-11 20:24 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-06-11 20:24 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-06-11 20:24 - 2015-05-22 21:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-06-11 20:24 - 2015-05-22 21:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-06-11 20:24 - 2015-05-22 21:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-06-11 20:24 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-06-11 20:24 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-06-11 20:24 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-06-11 20:24 - 2015-05-22 21:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-06-11 20:24 - 2015-05-22 20:59 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-06-11 20:24 - 2015-05-22 20:53 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-06-11 20:24 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-06-11 20:24 - 2015-05-22 20:52 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-06-11 20:24 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-06-11 20:24 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-06-11 20:24 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-06-11 20:24 - 2015-05-22 20:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-06-11 20:24 - 2015-05-22 20:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-06-11 20:24 - 2015-05-22 20:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-06-11 20:24 - 2015-05-22 20:36 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-06-11 20:24 - 2015-05-22 20:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-06-11 20:24 - 2015-05-22 20:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-06-11 20:24 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-06-11 20:24 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-06-11 20:24 - 2015-05-22 20:18 - 01021440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-06-11 20:24 - 2015-05-22 20:18 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-06-11 20:24 - 2015-05-22 20:18 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-06-11 20:24 - 2015-05-22 20:18 - 00423424 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-06-11 20:24 - 2015-05-22 20:18 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-06-11 20:24 - 2015-05-22 20:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-06-11 20:24 - 2015-05-22 20:13 - 01119232 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-06-11 20:24 - 2015-05-22 20:07 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-06-11 20:24 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-06-11 20:24 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-06-11 20:24 - 2015-05-22 20:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-06-11 20:24 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-06-11 20:24 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-06-11 20:24 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-06-11 20:24 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-06-11 20:24 - 2015-05-21 15:19 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-06-11 20:24 - 2015-04-29 20:22 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-06-11 20:24 - 2015-04-29 20:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-06-11 20:24 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-06-11 20:24 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-06-11 20:24 - 2015-04-29 20:19 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-06-11 20:24 - 2015-04-29 20:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-06-11 20:24 - 2015-04-29 20:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-06-11 20:24 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-06-11 20:24 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-06-11 20:24 - 2015-04-29 20:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-06-11 20:24 - 2015-04-24 20:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-06-11 20:24 - 2015-04-24 19:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2015-06-11 20:24 - 2015-04-11 05:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2015-06-04 11:17 - 2015-06-07 19:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-03 14:23 - 2013-05-31 21:35 - 01358840 _____ C:\Windows\WindowsUpdate.log
2015-07-03 14:02 - 2013-07-24 20:59 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-07-03 13:55 - 2013-07-18 16:45 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-07-03 13:10 - 2013-07-18 16:45 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-07-03 13:05 - 2009-07-14 06:45 - 00021472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-07-03 13:05 - 2009-07-14 06:45 - 00021472 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-07-03 13:01 - 2010-09-15 15:02 - 00648600 _____ C:\Windows\system32\perfh01F.dat
2015-07-03 13:01 - 2010-09-15 15:02 - 00139982 _____ C:\Windows\system32\perfc01F.dat
2015-07-03 13:01 - 2010-09-15 14:50 - 00720936 _____ C:\Windows\system32\prfh0816.dat
2015-07-03 13:01 - 2010-09-15 14:50 - 00152888 _____ C:\Windows\system32\prfc0816.dat
2015-07-03 13:01 - 2010-09-15 14:43 - 00737374 _____ C:\Windows\system32\perfh00A.dat
2015-07-03 13:01 - 2010-09-15 14:43 - 00158456 _____ C:\Windows\system32\perfc00A.dat
2015-07-03 13:01 - 2010-02-01 14:36 - 00699416 _____ C:\Windows\system32\perfh007.dat
2015-07-03 13:01 - 2010-02-01 14:36 - 00149556 _____ C:\Windows\system32\perfc007.dat
2015-07-03 13:01 - 2010-02-01 14:27 - 00737634 _____ C:\Windows\system32\perfh00C.dat
2015-07-03 13:01 - 2010-02-01 14:27 - 00149562 _____ C:\Windows\system32\perfc00C.dat
2015-07-03 13:01 - 2010-02-01 14:18 - 00731964 _____ C:\Windows\system32\perfh010.dat
2015-07-03 13:01 - 2010-02-01 14:18 - 00146828 _____ C:\Windows\system32\perfc010.dat
2015-07-03 13:01 - 2009-07-14 07:13 - 05944428 _____ C:\Windows\system32\PerfStringBackup.INI
2015-07-03 12:57 - 2013-05-31 22:05 - 00000000 ____D C:\ProgramData\NVIDIA
2015-07-03 12:57 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-03 12:57 - 2009-07-14 06:51 - 00191215 _____ C:\Windows\setupact.log
2015-07-02 17:05 - 2013-08-24 16:23 - 00000000 ____D C:\Users\David\AppData\Roaming\TS3Client
2015-07-02 16:52 - 2014-06-04 17:58 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-07-02 16:52 - 2014-06-04 17:58 - 00000000 ____D C:\Program Files (x86)\Java
2015-07-02 16:42 - 2014-06-24 12:13 - 00000000 ____D C:\Users\David\AppData\Local\Adobe
2015-07-02 16:42 - 2013-07-24 20:59 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-07-02 16:42 - 2013-07-24 20:59 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-07-02 16:42 - 2013-07-24 20:59 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-07-01 21:37 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-06-28 22:00 - 2013-07-18 16:42 - 00239740 _____ C:\Windows\PFRO.log
2015-06-26 10:51 - 2013-06-08 11:35 - 00016716 _____ C:\Windows\AVMInstall.Log
2015-06-26 10:51 - 2013-06-08 11:35 - 00000000 ____D C:\Program Files (x86)\avmwlanstick
2015-06-25 21:17 - 2014-06-30 18:20 - 00000000 ____D C:\Users\David\Desktop\Steam Games
2015-06-25 17:52 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2015-06-25 17:51 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2015-06-25 17:35 - 2014-12-27 21:05 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-06-23 19:56 - 2013-07-18 16:45 - 00002175 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-06-22 21:31 - 2015-01-12 15:43 - 00007605 _____ C:\Users\David\AppData\Local\Resmon.ResmonCfg
2015-06-22 21:30 - 2014-11-18 15:33 - 00000000 __SHD C:\Users\David\AppData\Local\EmieBrowserModeList
2015-06-22 21:30 - 2014-05-07 16:50 - 00000000 __SHD C:\Users\David\AppData\Local\EmieUserList
2015-06-22 21:30 - 2014-05-07 16:50 - 00000000 __SHD C:\Users\David\AppData\Local\EmieSiteList
2015-06-19 13:39 - 2014-11-16 15:29 - 00000000 ____D C:\ProgramData\Package Cache
2015-06-19 13:39 - 2013-12-24 00:56 - 00000000 ____D C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2015-06-12 12:45 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-06-12 12:19 - 2009-07-14 06:45 - 00342624 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-12 12:18 - 2014-12-12 18:44 - 00000000 ____D C:\Windows\system32\appraiser
2015-06-12 12:18 - 2014-05-06 21:12 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-06-12 12:18 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2015-06-12 12:18 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\sr-Latn-CS
2015-06-12 12:18 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\tr-TR
2015-06-12 12:18 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sr-Latn-CS
2015-06-12 12:18 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-06-11 23:04 - 2014-02-18 17:44 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-06-11 23:03 - 2013-08-15 21:28 - 00000000 ____D C:\Windows\system32\MRT
2015-06-11 23:01 - 2013-06-08 12:05 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-11 20:53 - 2014-07-06 13:22 - 00000000 ____D C:\Users\David\Documents\My Games
2015-06-07 22:33 - 2014-03-08 19:09 - 00000000 ____D C:\Users\David\AppData\Roaming\Skype
2015-06-07 19:59 - 2014-06-04 17:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

==================== Files in the root of some directories =======

2015-01-12 15:43 - 2015-06-22 21:31 - 0007605 _____ () C:\Users\David\AppData\Local\Resmon.ResmonCfg
2008-02-05 14:28 - 2008-02-05 14:28 - 0000051 _____ () C:\Users\David\AppData\Local\setup.txt
2014-11-24 22:03 - 2014-11-24 22:03 - 0000057 _____ () C:\ProgramData\Ament.ini

Some files in TEMP:
====================
C:\Users\David\AppData\Local\Temp\jre-8u45-windows-au.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-06-24 16:24

==================== End of log ============================
         
--- --- ---

Alt 04.07.2015, 14:52   #22
schrauber
/// the machine
/// TB-Ausbilder
 

Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder - Standard

Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder



Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
Task: {E1B9957F-0B33-48D5-8196-216C04EA75B7} - System32\Tasks\ASUS\i-Setup213717 => C:\Windows\Chipset\AsusSetup.exe [2010-09-08] (ASUSTeK Computer Inc.)
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.

__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 05.07.2015, 18:48   #23
D4V1D
 
Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder - Standard

Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder



Code:
ATTFilter
Fix result of Farbar Recovery Scan Tool (x64) Version:28-06-2015 01
Ran by David at 2015-07-05 19:45:39 Run:2
Running from C:\Users\David\Desktop
Loaded Profiles: David (Available Profiles: David)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Task: {E1B9957F-0B33-48D5-8196-216C04EA75B7} - System32\Tasks\ASUS\i-Setup213717 => C:\Windows\Chipset\AsusSetup.exe [2010-09-08] (ASUSTeK Computer Inc.)
*****************

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E1B9957F-0B33-48D5-8196-216C04EA75B7}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E1B9957F-0B33-48D5-8196-216C04EA75B7}" => key removed successfully
C:\Windows\System32\Tasks\ASUS\i-Setup213717 => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ASUS\i-Setup213717" => key removed successfully

==== End of Fixlog 19:45:39 ====
         

Alt 06.07.2015, 05:46   #24
schrauber
/// the machine
/// TB-Ausbilder
 

Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder - Standard

Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder



Kommt die Meldung noch beim Start?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 06.07.2015, 21:13   #25
D4V1D
 
Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder - Standard

Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder



Nein, ich erhalte keine Fehlermeldung mehr.

Alt 07.07.2015, 06:26   #26
schrauber
/// the machine
/// TB-Ausbilder
 

Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder - Standard

Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder



Cleanup:
(Die Reihenfolge ist hier entscheidend)

Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken.

Falls Combofix verwendet wurde:
Combofix deinstallieren .
  • Wichtig: Bitte Antivirus-Programm, evtl. vorhandenes Skript-Blocking und Anti-Malware Programme deaktivieren.
  • Drücke bitte die + R Taste und schreibe Combofix /Uninstall in das Ausführen-Fenster.
  • Klicke auf OK.
    Damit wird Combofix komplett entfernt und der Cache der Systemwiederherstellung geleert.
  • Nun die eben deaktivierten Programme wieder aktivieren.

Alle Logs gepostet? Dann lade Dir bitte DelFix herunter.
  • Schließe alle offenen Programme.
  • Starte die delfix.exe mit einem Doppelklick.
  • Setze vor jede Funktion ein Häkchen.
  • Klicke auf Start.

Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...und/oder das Forum mit einer kleinen Spende unterstützen.

Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:

Browser
Java
Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.

Verwende ein Antivirusprogramm mit Echtzeitscanner und stets aktueller Signaturendatenbank.
Meine Empfehlung:

Emsisoft

Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.

Optional:
NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.
Malwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.


Lade Software von einem sauberen Portal wie .
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwarecleaner .


Abschließend noch ein paar grundsätzliche Bemerkungen:
Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 09.07.2015, 15:14   #27
D4V1D
 
Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder - Standard

Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder



Ich habe nun ein weiteres Problem! All meine Browser(Chrome, Firefox) sind extrem langsam, Seiten laden langsam und Browserspiele stocken (z.b Agar.io). Allerdings kann ich Onlinespiele wie Counter Strike Problemlos spielen... Ich habe ein Scan laufenlassen. Keine Malwares entdeckt nur die folgenden Dateien konnten nicht geöffnet werden:
Code:
ATTFilter
    Datei (Klicken Sie hier, um weitere Informationen zu erhalten) kann nicht geöffnet werden C:\HIBERFIL.SYS
    Datei (Klicken Sie hier, um weitere Informationen zu erhalten) kann nicht geöffnet werden C:\PAGEFILE.SYS
    Datei (Klicken Sie hier, um weitere Informationen zu erhalten) kann nicht geöffnet werden C:\WINDOWS\TASKS\GOOGLEUPDATETASKMACHINECORE.JOB
    Datei (Klicken Sie hier, um weitere Informationen zu erhalten) kann nicht geöffnet werden C:\WINDOWS\TASKS\GOOGLEUPDATETASKMACHINEUA.JOB
    Datei (Klicken Sie hier, um weitere Informationen zu erhalten) kann nicht geöffnet werden C:\WINDOWS\TASKS\ADOBE FLASH PLAYER UPDATER.JOB
    Datei (Klicken Sie hier, um weitere Informationen zu erhalten) kann nicht geöffnet werden C:\WINDOWS\SYSTEM32\SYSPREP\PANTHER\IE\DIAGERR.XML
    Datei (Klicken Sie hier, um weitere Informationen zu erhalten) kann nicht geöffnet werden C:\WINDOWS\SYSTEM32\SYSPREP\PANTHER\IE\DIAGWRN.XML
    Datei (Klicken Sie hier, um weitere Informationen zu erhalten) kann nicht geöffnet werden C:\WINDOWS\PLA\SYSTEM\SYSTEM DIAGNOSTICS.XML
    Datei (Klicken Sie hier, um weitere Informationen zu erhalten) kann nicht geöffnet werden C:\WINDOWS\PLA\SYSTEM\SYSTEM PERFORMANCE.XML
    Datei (Klicken Sie hier, um weitere Informationen zu erhalten) kann nicht geöffnet werden C:\WINDOWS\PANTHER\UNATTENDGC\DIAGERR.XML
    Datei (Klicken Sie hier, um weitere Informationen zu erhalten) kann nicht geöffnet werden C:\WINDOWS\PANTHER\UNATTENDGC\DIAGWRN.XML
    Datei (Klicken Sie hier, um weitere Informationen zu erhalten) kann nicht geöffnet werden C:\USERS\DAVID\APPDATA\LOCAL\TEMP\NVIDIA CORPORATION\NV_CACHE\9E53CAC1F699E676CCC302D9CB5A5F_FCE8395F8FD8A84B_6229CCD76215AEA1_0_0.BIN
    Datei im Archiv Z:\Games\BWA3.rar\@ModpackBWA3\@R3F_ARMES\Addons\r3f_armes.pbo kann nicht geöffnet werden
         

Alt 10.07.2015, 07:50   #28
schrauber
/// the machine
/// TB-Ausbilder
 

Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder - Standard

Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder



Setz einen Browser mal komplett zurück, als Test, und überprüfe den Speed nochmal.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder
antivirus, anzahl, blockiert, dateien, folge, gelöscht, gen, google, hallo zusammen, internet, klicke, links, löschen, myfilestore, myfilestore.com, netzwerk, ordner, probleme, registry, scan, scanner, seite, startseite, virenscanner, virus, weitergeleitet, weiterleitung




Ähnliche Themen: Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder


  1. Gen:Variant.Kazy.707123 als repair.exe unter c:\programdata\
    Plagegeister aller Art und deren Bekämpfung - 12.08.2015 (17)
  2. Virus:Gen:Variant.Kazy.631108 und weiterleitung auf Myfilestore etc..
    Mülltonne - 19.06.2015 (0)
  3. Virus "Gen:Variant.Kazy.418613 (Engine A)
    Plagegeister aller Art und deren Bekämpfung - 08.12.2014 (9)
  4. Virus Gen Variant Kazy 96431
    Log-Analyse und Auswertung - 11.07.2013 (1)
  5. Redirect Virus NB - Landete auf MyFilestore.com bei google Suche und installierte etwas Komisches
    Log-Analyse und Auswertung - 28.04.2013 (23)
  6. Redirect Virus - Lande auf MyFilestore.com bei google Suche
    Log-Analyse und Auswertung - 26.04.2013 (15)
  7. Virus Gen:Variant.Symmi.10389 und Gen:Variant.Graftor.Elzob.23242 eingefangen
    Plagegeister aller Art und deren Bekämpfung - 14.02.2013 (29)
  8. Gen:Variant.Kazy.116595: Reicht Entfernung von MFC71FRAW.dll?
    Log-Analyse und Auswertung - 01.01.2013 (2)
  9. Gen:Variant.Kazy.88735 (B) ; TR/Kazy.88735.3 ; Artemis!F1ED8568AD5F ; TROJ_GEN.RCBH1IM
    Log-Analyse und Auswertung - 01.11.2012 (1)
  10. conhost.exe, dwm.exe, Gen:Variant.Kazy.38270, Werbebot?
    Plagegeister aller Art und deren Bekämpfung - 26.09.2011 (8)
  11. Trojan.Generic.xxx, Exploit.JS.Pdf.AK, Gen:Variant.Kazy.154, Trojanerbefall
    Plagegeister aller Art und deren Bekämpfung - 30.05.2011 (22)
  12. variant.kazy hat meinen PC überfallen - otl+extra, mbam und hjt vorhanden + 2 Bilder
    Log-Analyse und Auswertung - 20.05.2011 (1)
  13. Explorer.exe funkt nicht richtig (variant.kazy Virus) mit Logfiles
    Log-Analyse und Auswertung - 19.05.2011 (2)
  14. Trojaner "Gen:Variant.Kazy.22655" nach öffnen Scr Datei ??
    Log-Analyse und Auswertung - 12.05.2011 (1)
  15. Wohl Virus Gen:Variant.Kazy.9072, einige Webseiten nicht erreichbar, MBM nicht aktualisierbar
    Log-Analyse und Auswertung - 27.01.2011 (9)
  16. Befall von Trojan.Generic.kdv.55894 und GEn:Variant.Kazy.2385.taskeng.exe
    Plagegeister aller Art und deren Bekämpfung - 28.10.2010 (1)
  17. AdultFriendFinder
    Plagegeister aller Art und deren Bekämpfung - 15.12.2004 (1)

Zum Thema Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder - Speicher die fixlist im Download Ordner, neben dem Programm FRST - Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder...
Archiv
Du betrachtest: Virus Gen:Variant.Kazy.631108 und Weiterleitung auf Myfilestore und adultfriendfinder auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.