Trojaner-Board - Notebook sehr langsam

Hallo Leute,
hab das Problem mit dem Notebook, dass dieser in letzter Zeit sehr langsam läuft.Norton zeigte mir auch an, dass dieser Pc Malware hat.

MfG

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-12-2014

Ran by Hbib (administrator) on WOHNZIMMER-PC on 01-12-2014 14:42:22

Running from C:\Users\Pk\Pictures

Loaded Profile: Hbib (Available profiles: Hbib & issam_000 & ouali_000)

Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(AMD) C:\Windows\System32\atiesrxx.exe

(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\nis.exe

(Razer Inc.) C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe

(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\nis.exe

(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe

(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe

(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

() C:\Users\Pk\AppData\Local\PennyBee\PennyBeeW.exe

() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe

(Skillbrains) C:\Users\Pk\AppData\Local\Skillbrains\lightshot\5.1.4.41\Lightshot.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe

(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe

(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe

(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe

(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_239.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_239.exe

(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17246_none_fa4ae8e99b1f603c\TiWorker.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2890056 2013-05-22] (ELAN Microelectronics Corp.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13427784 2013-03-18] (Realtek Semiconductor)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2014-09-19] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642816 2013-06-13] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3802448 2014-09-04] (LogMeIn Inc.)

HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2694320 2014-10-01] (Adobe Systems Incorporated)

HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-04-24] ( (Atheros Communications))

HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\Run: [LightShot] => C:\Users\Pk\AppData\Local\Skillbrains\lightshot\Lightshot.exe [226560 2014-06-18] ()

HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\Run: [icq] => C:\Users\Pk\AppData\Roaming\ICQM\icq.exe [35239432 2014-11-02] (ICQ)

HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\Run: [PennyBee] => C:\Users\Pk\AppData\Local\PennyBee\PennyBeeW.exe [338432 2014-10-12] ()

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk

ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (McAfee, Inc.)

ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()

ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()

ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.trovi.com/?gd=&ctid=ct3314958&octid=eb_original_ctid&isid=m76ed4c76-afdf-4830-a42e-55c9714d3458&searchsource=55&cui=&um=5&up=sp03a61366-08c2-45e6-8454-e65300ed54d6&sspv=

SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 

SearchScopes: HKLM-x32 -> DefaultScope value is missing.

SearchScopes: HKU\S-1-5-21-1444305084-1481242938-3084423498-1001 -> {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = hxxp://nortonsafe.search.ask.com/web?q={SEARCHTERMS}&o=APN10506&l=dis&prt=NIS&chn=retail&geo=DE&ver=21&locale=de_DE&gct=kwd&qsrc=2869

BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine64\21.6.0.32\coIEPlg.dll (Symantec Corporation)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)

BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\coIEPlg.dll (Symantec Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.6.0.32\coIEPlg.dll (Symantec Corporation)

Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\coIEPlg.dll (Symantec Corporation)

Toolbar: HKU\S-1-5-21-1444305084-1481242938-3084423498-1001 -> Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.6.0.32\coIEPlg.dll (Symantec Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
 

FireFox:

========

FF ProfilePath: C:\Users\Pk\AppData\Roaming\Mozilla\Firefox\Profiles\yqrfhnfq.default

FF NewTab: hxxp://www.trovi.com/?gd=&ctid=CT3314958&octid=EB_ORIGINAL_CTID&ISID=M76ED4C76-AFDF-4830-A42E-55C9714D3458&SearchSource=69&CUI=&SSPV=&Lay=1&UM=5&UP=SP03A61366-08C2-45E6-8454-E65300ED54D6

FF DefaultSearchEngine: Trovi search

FF SelectedSearchEngine: Trovi search

FF Homepage: www.google.de

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_15_0_0_239.dll ()

FF Plugin: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_239.dll ()

FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @mcafee.com/McAfeeMssPlugin -> C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()

FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)

FF Plugin HKU\S-1-5-21-1444305084-1481242938-3084423498-1001: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF SearchPlugin: C:\Users\Pk\AppData\Roaming\Mozilla\Firefox\Profiles\yqrfhnfq.default\searchplugins\trovi-search.xml

FF Extension: MEGA - C:\Users\Pk\AppData\Roaming\Mozilla\Firefox\Profiles\yqrfhnfq.default\Extensions\firefox@mega.co.nz.xpi [2014-09-27]

FF Extension: Adblock Plus - C:\Users\Pk\AppData\Roaming\Mozilla\Firefox\Profiles\yqrfhnfq.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-02-01]

FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn

FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn [2014-12-01]
 

Chrome: 

=======

CHR Profile: C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Docs) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-05-20]

CHR Extension: (Google Drive) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-20]

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-20]

CHR Extension: (YouTube) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-20]

CHR Extension: (Adblock Plus) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-11-04]

CHR Extension: (Google-Suche) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-20]

CHR Extension: (Google Wallet) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-20]

CHR Extension: (Google Mail) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-20]

CHR HKLM\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\Exts\Chrome.crx [2014-10-04]

CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\Exts\Chrome.crx [2014-10-04]
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [310400 2013-04-24] (Windows (R) Win 7 DDK provider)

S3 DeviceFastLaneService; C:\Program Files\Packard Bell\Packard Bell Device Fast-lane\DeviceFastLaneSvc.exe [470056 2013-04-30] (Acer Incorporated)

R3 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [662088 2013-03-15] (Acer Incorporated)

R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-04-24] (WildTangent)

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-08-08] (LogMeIn, Inc.)

S4 LMSvc; C:\Program Files\Packard Bell\Packard Bell Launch Manager\LMSvc.exe [431656 2013-06-17] (Acer Incorporate)

S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)

R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\NIS.exe [276376 2014-09-21] (Symantec Corporation)

R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4343664 2014-04-09] (Symantec Corporation)

R2 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [106472 2013-09-18] (Razer Inc.)

R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2103096 2013-12-18] (TuneUp Software)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

S2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [219360 2013-04-18] (AppEx Networks Corporation)

R3 AthrSdSrv; C:\Windows\system32\DRIVERS\athrsd.sys [48760 2012-11-30] (Qualcomm Atheros, Inc.)

R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [98744 2013-04-23] (Advanced Micro Devices)

R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20141118.001\BHDrvx64.sys [1587416 2014-10-03] (Symantec Corporation)

R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-04-24] (Qualcomm Atheros)

R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-09-24] (Microsoft Corporation)

S3 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0404010.00B\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)

R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1506000.020\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)

R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2014-09-14] (Symantec Corporation)

R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2014-09-14] (Symantec Corporation)

S3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [46136 2014-09-04] (LogMeIn Inc.)

R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20141128.001\IDSvia64.sys [637656 2014-11-19] (Symantec Corporation)

R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-01-10] (Acer Incorporated)

S3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20141129.002\ENG64.SYS [129752 2014-09-14] (Symantec Corporation)

S3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20141129.002\EX64.SYS [2137304 2014-09-14] (Symantec Corporation)

R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [15704 2013-01-10] (Acer Incorporated)

S3 SRTSP; C:\Windows\System32\Drivers\NISx64\1506000.020\SRTSP64.SYS [876248 2014-08-26] (Symantec Corporation)

R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1506000.020\SRTSPX64.SYS [37592 2014-08-26] (Symantec Corporation)

R0 SymDS; C:\Windows\System32\drivers\NISx64\1506000.020\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)

R0 SymEFA; C:\Windows\System32\drivers\NISx64\1506000.020\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation)

S0 SymELAM; C:\Windows\System32\drivers\NISx64\1506000.020\SymELAM.sys [23568 2013-09-10] (Symantec Corporation)

R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-03-22] (Symantec Corporation)

R1 SymIRON; C:\Windows\system32\drivers\NISx64\1506000.020\Ironx64.SYS [266968 2014-08-06] (Symantec Corporation)

R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1506000.020\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation)

R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-12-16] (TuneUp Software)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)

S3 AtiDCM; \??\C:\AMD\WU-CCC2\ccc2_install\Support64\atdcm64a.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-12-01 14:41 - 2014-12-01 14:43 - 00000000 ____D () C:\FRST

2014-11-27 19:12 - 2014-11-27 19:15 - 00000646 _____ () C:\WINDOWS\setupact.log

2014-11-27 19:12 - 2014-11-27 19:12 - 00000000 _____ () C:\WINDOWS\setuperr.log

2014-11-27 17:27 - 2014-11-27 17:27 - 04443312 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe

2014-11-27 17:10 - 2014-11-27 17:44 - 3268147200 _____ () C:\Users\Pk\Desktop\X17-59885.iso

2014-11-25 14:35 - 2014-11-25 14:36 - 00000000 ____D () C:\Users\Pk\Desktop\worldsurvival

2014-11-25 14:33 - 2014-11-25 14:33 - 00000000 ____D () C:\Users\Pk\Desktop\world

2014-11-25 14:24 - 2014-11-25 14:25 - 00525638 _____ () C:\Users\Pk\Desktop\Alpine  Summer Hub.zip

2014-11-25 13:59 - 2014-11-25 14:02 - 09296123 _____ () C:\Users\Pk\Desktop\Minecraft Spawn Hub Map.zip

2014-11-25 12:51 - 2014-11-25 12:51 - 00009949 _____ () C:\Users\Pk\Desktop\ChatManagerPlus.jar

2014-11-23 12:28 - 2014-11-23 12:29 - 00026812 _____ () C:\Users\Pk\Desktop\CTag.jar

2014-11-23 12:06 - 2014-11-23 12:20 - 00053565 _____ () C:\Users\Pk\Desktop\ColoredTags.jar

2014-11-23 10:32 - 2014-11-23 10:32 - 00722782 _____ () C:\Users\Pk\Desktop\PermissionsEx.jar

2014-11-23 10:05 - 2014-11-23 10:05 - 00959115 _____ () C:\Users\Pk\Desktop\Citizens.jar

2014-11-22 18:40 - 2014-11-22 18:40 - 00000000 ____D () C:\Users\Pk\AppData\Local\ICSharpCode.net

2014-11-22 18:39 - 2014-11-30 18:09 - 00000000 ____D () C:\Users\Pk\AppData\Local\PennyBee

2014-11-22 18:39 - 2014-11-22 18:39 - 00002028 _____ () C:\Users\Pk\Desktop\FileZilla Client.lnk

2014-11-22 18:39 - 2014-11-22 18:39 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\PennyBee

2014-11-22 18:39 - 2014-11-22 18:39 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client

2014-11-22 18:38 - 2014-11-22 18:38 - 06126536 _____ (Tim Kosse) C:\Users\Pk\Downloads\FileZilla_3.9.0.6_win32-setup [1].exe

2014-11-22 18:38 - 2014-11-22 18:38 - 00789864 _____ ( ) C:\Users\Pk\Downloads\FileZilla_3.9.0.6_win32-setup.exe

2014-11-22 10:00 - 2014-11-20 20:51 - 00714208 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2014-11-22 10:00 - 2014-11-20 20:51 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2014-11-22 09:51 - 2014-11-22 10:01 - 00000000 ___RD () C:\WINDOWS\BrowserChoice

2014-11-21 15:54 - 2014-11-28 16:13 - 00000000 ____D () C:\Users\Pk\Desktop\Rest-Müll

2014-11-21 14:35 - 2014-11-21 14:36 - 92658088 _____ (Oracle Corporation) C:\Users\Pk\Downloads\jre-8u25-windows-x64.exe

2014-11-19 16:07 - 2014-11-09 23:19 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll

2014-11-19 16:07 - 2014-11-09 23:19 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll

2014-11-19 16:07 - 2014-11-09 23:18 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll

2014-11-19 16:07 - 2014-11-09 23:18 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll

2014-11-15 17:59 - 2014-12-01 14:28 - 00005848 _____ () C:\WINDOWS\PFRO.log

2014-11-14 15:51 - 2014-11-14 15:51 - 00000000 ____D () C:\Users\Pk\AppData\Local\Skype

2014-11-14 15:50 - 2014-11-14 15:50 - 00002533 _____ () C:\Users\Public\Desktop\Skype.lnk

2014-11-14 15:50 - 2014-11-14 15:50 - 00000000 ___RD () C:\Program Files (x86)\Skype

2014-11-14 15:50 - 2014-11-14 15:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2014-11-14 15:48 - 2014-11-14 15:49 - 01546856 _____ (Skype Technologies S.A.) C:\Users\Pk\Downloads\SkypeSetup.exe

2014-11-12 19:47 - 2014-11-12 19:49 - 00006038 _____ () C:\WINDOWS\system32\--traceoff

2014-11-12 19:47 - 2014-11-12 19:47 - 00000000 _____ () C:\WINDOWS\system32\--debugoff

2014-11-12 19:46 - 2014-11-12 19:49 - 00000000 ____D () C:\Users\Pk\AppData\Local\Sony

2014-11-12 19:46 - 2014-11-12 19:46 - 00000000 ____D () C:\ProgramData\Sony

2014-11-12 19:46 - 2014-11-12 19:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony

2014-11-12 19:46 - 2014-11-12 19:46 - 00000000 ____D () C:\Program Files\Sony

2014-11-12 19:46 - 2014-11-12 19:46 - 00000000 ____D () C:\Program Files (x86)\Sony

2014-11-12 19:43 - 2014-11-30 18:58 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Sony

2014-11-12 18:55 - 2014-11-12 19:30 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Mine_imator

2014-11-12 18:54 - 2014-11-30 18:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mine-imator

2014-11-12 18:54 - 2014-11-12 18:56 - 00000000 ____D () C:\Users\Pk\Mine-imator

2014-11-12 18:54 - 2014-11-12 18:54 - 08800436 _____ (David Norgren ) C:\Users\Pk\Downloads\Mine-imator installer 1.0.0 DEMO 5.exe

2014-11-11 19:09 - 2014-09-22 04:38 - 01519488 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll

2014-11-11 19:08 - 2014-09-22 03:06 - 00258368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys

2014-11-11 19:08 - 2014-09-22 03:06 - 00114496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys

2014-11-11 19:08 - 2014-09-22 02:49 - 00035320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys

2014-11-11 19:08 - 2014-09-19 00:16 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll

2014-11-11 19:08 - 2014-09-02 22:08 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll

2014-11-11 19:08 - 2014-09-02 22:08 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll

2014-11-11 19:07 - 2014-10-13 02:33 - 00116032 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe

2014-11-11 19:07 - 2014-10-11 00:58 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll

2014-11-11 19:07 - 2014-10-11 00:53 - 03607040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll

2014-11-11 19:07 - 2014-10-08 07:30 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll

2014-11-11 19:07 - 2014-10-08 07:09 - 00428032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll

2014-11-11 19:07 - 2014-10-08 06:27 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll

2014-11-11 19:07 - 2014-10-08 05:32 - 02773504 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll

2014-11-11 19:07 - 2014-10-08 05:19 - 02459136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll

2014-11-11 19:07 - 2014-09-27 07:13 - 00104336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll

2014-11-11 19:07 - 2014-09-27 05:24 - 00088800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll

2014-11-11 19:07 - 2014-09-27 03:38 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll

2014-11-11 19:07 - 2014-09-27 03:30 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll

2014-11-11 19:07 - 2014-09-27 03:17 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll

2014-11-11 19:06 - 2014-10-10 01:58 - 00177472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys

2014-11-11 19:06 - 2014-10-10 01:58 - 00027456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys

2014-11-11 19:06 - 2014-10-10 01:44 - 00563976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys

2014-11-11 19:06 - 2014-10-08 07:37 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll

2014-11-11 19:06 - 2014-10-08 07:37 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll

2014-11-11 19:06 - 2014-10-08 07:34 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll

2014-11-11 19:06 - 2014-10-08 07:24 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll

2014-11-11 19:06 - 2014-10-08 06:56 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll

2014-11-11 19:06 - 2014-10-08 06:51 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll

2014-11-11 19:06 - 2014-10-08 06:51 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll

2014-11-11 19:06 - 2014-10-08 06:18 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll

2014-11-11 19:06 - 2014-10-08 06:17 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll

2014-11-11 19:06 - 2014-10-08 05:23 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll

2014-11-11 19:00 - 2014-10-18 09:55 - 00055776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe

2014-11-11 19:00 - 2014-10-18 08:09 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll

2014-11-11 19:00 - 2014-10-18 08:09 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll

2014-11-11 19:00 - 2014-10-18 07:25 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll

2014-11-11 19:00 - 2014-10-18 06:50 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll

2014-11-11 19:00 - 2014-10-18 06:38 - 03557376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2014-11-11 19:00 - 2014-10-18 06:27 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe

2014-11-11 19:00 - 2014-10-18 06:26 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll

2014-11-11 19:00 - 2014-10-18 06:23 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll

2014-11-11 19:00 - 2014-10-18 06:23 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll

2014-11-11 19:00 - 2014-10-18 06:21 - 00894976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll

2014-11-11 19:00 - 2014-10-18 06:20 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll

2014-11-11 19:00 - 2014-10-18 06:14 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll

2014-11-11 19:00 - 2014-10-18 06:14 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe

2014-11-11 19:00 - 2014-10-18 06:12 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll

2014-11-11 19:00 - 2014-10-18 06:11 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll

2014-11-11 18:49 - 2014-10-31 05:28 - 25110016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2014-11-11 18:49 - 2014-10-31 03:42 - 19781632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2014-11-11 18:43 - 2014-10-31 03:59 - 14390272 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2014-11-11 18:42 - 2014-10-31 02:30 - 12819456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2014-11-11 18:41 - 2014-10-31 05:06 - 00580096 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2014-11-11 18:41 - 2014-10-31 05:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll

2014-11-11 18:41 - 2014-10-31 05:05 - 02884096 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2014-11-11 18:41 - 2014-10-31 04:53 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll

2014-11-11 18:41 - 2014-10-31 04:52 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll

2014-11-11 18:41 - 2014-10-31 04:51 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll

2014-11-11 18:41 - 2014-10-31 04:51 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe

2014-11-11 18:41 - 2014-10-31 04:51 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe

2014-11-11 18:41 - 2014-10-31 04:50 - 06040064 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2014-11-11 18:41 - 2014-10-31 04:50 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll

2014-11-11 18:41 - 2014-10-31 04:38 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll

2014-11-11 18:41 - 2014-10-31 04:29 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll

2014-11-11 18:41 - 2014-10-31 04:25 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll

2014-11-11 18:41 - 2014-10-31 04:23 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll

2014-11-11 18:41 - 2014-10-31 04:21 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll

2014-11-11 18:41 - 2014-10-31 04:15 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll

2014-11-11 18:41 - 2014-10-31 04:08 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll

2014-11-11 18:41 - 2014-10-31 04:06 - 00372736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll

2014-11-11 18:41 - 2014-10-31 04:05 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2014-11-11 18:41 - 2014-10-31 04:05 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe

2014-11-11 18:41 - 2014-10-31 04:03 - 02124288 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2014-11-11 18:41 - 2014-10-31 03:45 - 02365440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2014-11-11 18:41 - 2014-10-31 03:44 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll

2014-11-11 18:41 - 2014-10-31 03:32 - 01550336 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2014-11-11 18:41 - 2014-10-31 03:24 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2014-11-11 18:41 - 2014-10-31 03:23 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec

2014-11-11 18:41 - 2014-10-31 03:20 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll

2014-11-11 18:41 - 2014-10-31 03:18 - 02277376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2014-11-11 18:41 - 2014-10-31 03:13 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll

2014-11-11 18:41 - 2014-10-31 03:13 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll

2014-11-11 18:41 - 2014-10-31 03:12 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll

2014-11-11 18:41 - 2014-10-31 03:11 - 00620032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll

2014-11-11 18:41 - 2014-10-31 03:02 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll

2014-11-11 18:41 - 2014-10-31 02:53 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll

2014-11-11 18:41 - 2014-10-31 02:50 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll

2014-11-11 18:41 - 2014-10-31 02:46 - 04298240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2014-11-11 18:41 - 2014-10-31 02:46 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll

2014-11-11 18:41 - 2014-10-31 02:42 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll

2014-11-11 18:41 - 2014-10-31 02:40 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2014-11-11 18:41 - 2014-10-31 02:40 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll

2014-11-11 18:41 - 2014-10-31 02:39 - 02051072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2014-11-11 18:41 - 2014-10-31 02:26 - 01042944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll

2014-11-11 18:41 - 2014-10-31 02:17 - 01892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2014-11-11 18:41 - 2014-10-31 02:13 - 01310208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2014-11-11 18:41 - 2014-10-31 02:11 - 00708096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

2014-11-11 18:40 - 2014-10-31 05:12 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wextract.exe

2014-11-11 18:40 - 2014-10-31 05:12 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshta.exe

2014-11-11 18:40 - 2014-10-31 05:10 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iexpress.exe

2014-11-11 18:40 - 2014-10-31 05:09 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\pngfilt.dll

2014-11-11 18:40 - 2014-10-31 05:08 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe

2014-11-11 18:40 - 2014-10-31 05:06 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\url.dll

2014-11-11 18:40 - 2014-10-31 05:06 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll

2014-11-11 18:40 - 2014-10-31 05:05 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec

2014-11-11 18:40 - 2014-10-31 05:04 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll

2014-11-11 18:40 - 2014-10-31 04:57 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll

2014-11-11 18:40 - 2014-10-31 04:56 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll

2014-11-11 18:40 - 2014-10-31 04:54 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\IEAdvpack.dll

2014-11-11 18:40 - 2014-10-31 04:40 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\licmgr10.dll

2014-11-11 18:40 - 2014-10-31 04:30 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll

2014-11-11 18:40 - 2014-10-31 04:29 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx

2014-11-11 18:40 - 2014-10-31 04:28 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\inseng.dll

2014-11-11 18:40 - 2014-10-31 04:24 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll

2014-11-11 18:40 - 2014-10-31 04:24 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll

2014-11-11 18:40 - 2014-10-31 04:19 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\occache.dll

2014-11-11 18:40 - 2014-10-31 03:42 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\imgutil.dll

2014-11-11 18:40 - 2014-10-31 03:28 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wextract.exe

2014-11-11 18:40 - 2014-10-31 03:28 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshta.exe

2014-11-11 18:40 - 2014-10-31 03:27 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iexpress.exe

2014-11-11 18:40 - 2014-10-31 03:26 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pngfilt.dll

2014-11-11 18:40 - 2014-10-31 03:25 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe

2014-11-11 18:40 - 2014-10-31 03:24 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\url.dll

2014-11-11 18:40 - 2014-10-31 03:24 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll

2014-11-11 18:40 - 2014-10-31 03:23 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll

2014-11-11 18:40 - 2014-10-31 03:22 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll

2014-11-11 18:40 - 2014-10-31 03:16 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll

2014-11-11 18:40 - 2014-10-31 03:15 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll

2014-11-11 18:40 - 2014-10-31 03:14 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IEAdvpack.dll

2014-11-11 18:40 - 2014-10-31 03:12 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe

2014-11-11 18:40 - 2014-10-31 03:03 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\licmgr10.dll

2014-11-11 18:40 - 2014-10-31 02:57 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll

2014-11-11 18:40 - 2014-10-31 02:56 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inseng.dll

2014-11-11 18:40 - 2014-10-31 02:56 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll

2014-11-11 18:40 - 2014-10-31 02:56 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx

2014-11-11 18:40 - 2014-10-31 02:53 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll

2014-11-11 18:40 - 2014-10-31 02:52 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll

2014-11-11 18:40 - 2014-10-31 02:51 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll

2014-11-11 18:40 - 2014-10-31 02:48 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\occache.dll

2014-11-11 18:40 - 2014-10-31 02:24 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imgutil.dll

2014-11-11 18:40 - 2014-10-23 05:48 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\packager.dll

2014-11-11 18:40 - 2014-10-23 05:05 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\packager.dll

2014-11-11 18:40 - 2014-10-17 07:01 - 00789184 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll

2014-11-11 18:40 - 2014-10-17 06:58 - 00602768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll

2014-11-11 18:40 - 2014-10-07 06:28 - 00500016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll

2014-11-11 18:40 - 2014-10-07 06:27 - 00482872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll

2014-11-11 18:40 - 2014-10-07 06:27 - 00394120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll

2014-11-11 18:40 - 2014-10-07 06:27 - 00272248 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe

2014-11-11 18:40 - 2014-10-07 06:27 - 00108432 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll

2014-11-11 18:40 - 2014-10-07 03:34 - 00370424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll

2014-11-11 18:40 - 2014-10-07 03:34 - 00344536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll

2014-11-11 18:40 - 2014-10-07 03:33 - 00424544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll

2014-11-11 18:40 - 2014-10-07 03:30 - 04182016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys

2014-11-11 18:40 - 2014-10-07 01:54 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll

2014-11-11 18:40 - 2014-10-07 01:46 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll

2014-11-11 18:40 - 2014-08-23 05:18 - 02149376 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll

2014-11-11 18:40 - 2014-08-23 05:03 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll

2014-11-11 18:39 - 2014-09-10 06:25 - 00474432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys

2014-11-11 18:39 - 2014-09-08 03:07 - 02497344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys

2014-11-11 18:39 - 2014-09-08 03:07 - 00428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS

2014-11-11 18:39 - 2014-09-07 22:08 - 00389176 _____ () C:\WINDOWS\system32\ApnDatabase.xml

2014-11-11 18:39 - 2014-09-04 22:30 - 00822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll

2014-11-11 18:39 - 2014-09-04 22:21 - 01053184 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll

2014-11-11 18:39 - 2014-09-04 03:05 - 00836176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll

2014-11-11 18:39 - 2014-09-04 02:22 - 00670384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll

2014-11-11 18:39 - 2014-09-04 01:01 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll

2014-11-11 18:39 - 2014-09-04 00:32 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll

2014-11-11 18:39 - 2014-08-31 00:17 - 00148800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS

2014-11-11 18:39 - 2014-08-31 00:15 - 21197152 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2014-11-11 18:39 - 2014-08-30 22:59 - 18723112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2014-11-11 18:39 - 2014-08-30 22:05 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMEX.dll

2014-11-11 18:39 - 2014-08-30 21:58 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSAPI.dll

2014-11-11 18:39 - 2014-08-30 21:04 - 00941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll

2014-11-11 18:39 - 2014-08-30 20:53 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSAPI.dll

2014-11-11 18:39 - 2014-08-30 20:17 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll

2014-11-11 18:39 - 2014-08-28 02:55 - 07484224 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2014-11-11 18:39 - 2014-08-28 00:21 - 02480128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll

2014-11-11 18:39 - 2014-08-28 00:06 - 02030592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll

2014-11-11 18:39 - 2014-08-23 05:14 - 13424128 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll

2014-11-11 18:39 - 2014-08-23 05:04 - 11820544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll

2014-11-11 18:39 - 2014-08-23 04:50 - 02714112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll

2014-11-11 18:39 - 2014-08-02 00:51 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll

2014-11-11 18:39 - 2014-08-02 00:35 - 00485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll

2014-11-10 16:30 - 2014-11-10 16:30 - 02332316 _____ () C:\Users\Pk\Downloads\forge-1.5.2-7.8.1.738-installer.jar

2014-11-05 14:42 - 2014-11-05 14:42 - 02936397 _____ () C:\Users\Pk\Downloads\forge-1.7.2-10.12.2.1147-installer (3).jar

2014-11-05 14:40 - 2014-11-05 14:40 - 28917914 _____ () C:\Users\Pk\Downloads\The CraftingFabo Pack V.2.zip

2014-11-05 14:38 - 2014-11-25 18:02 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\.minecraft

2014-11-05 14:35 - 2014-11-05 14:36 - 54655526 _____ () C:\Users\Pk\Downloads\-Quasaro V.5!-.zip

2014-11-02 20:01 - 2014-12-01 14:39 - 00003946 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{51C63146-2830-466D-8742-F26078BC5B00}

2014-11-02 20:01 - 2014-11-02 20:01 - 00000000 __SHD () C:\Users\Pk\AppData\Local\EmieUserList

2014-11-02 20:01 - 2014-11-02 20:01 - 00000000 __SHD () C:\Users\Pk\AppData\Local\EmieSiteList

2014-11-02 13:07 - 2014-08-02 00:18 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll

2014-11-02 12:08 - 2014-08-15 00:36 - 00146752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys

2014-11-02 11:43 - 2014-07-10 04:08 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\lockscreencn.dll

2014-11-02 11:42 - 2014-07-15 18:16 - 03048880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe

2014-11-02 11:42 - 2014-07-15 08:29 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll

2014-11-02 11:42 - 2014-07-15 08:22 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll

2014-11-02 11:42 - 2014-07-15 08:03 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll

2014-11-02 11:38 - 2014-06-09 22:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe

2014-11-02 11:38 - 2014-06-09 22:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe

2014-11-02 11:21 - 2014-08-23 07:48 - 02374784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe

2014-11-02 11:21 - 2014-08-23 07:13 - 02084520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe

2014-11-02 11:21 - 2014-08-23 06:10 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll

2014-11-02 11:21 - 2014-08-23 05:32 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll

2014-11-02 11:21 - 2014-08-23 04:33 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll

2014-11-02 11:20 - 2014-08-16 04:08 - 01507648 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll

2014-11-02 11:20 - 2014-08-16 04:01 - 01710184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll

2014-11-02 11:20 - 2014-08-16 03:58 - 01112512 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll

2014-11-02 11:20 - 2014-08-16 03:16 - 01205976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll

2014-11-02 11:20 - 2014-08-16 03:03 - 01467384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll

2014-11-02 11:20 - 2014-08-16 01:31 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll

2014-11-02 11:20 - 2014-08-16 01:04 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll

2014-11-02 11:20 - 2014-08-16 00:58 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll

2014-11-02 11:20 - 2014-08-16 00:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll

2014-11-02 11:20 - 2014-08-16 00:46 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll

2014-11-02 11:20 - 2014-08-16 00:45 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll

2014-11-02 11:20 - 2014-08-16 00:43 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll

2014-11-02 11:20 - 2014-08-16 00:43 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll

2014-11-02 11:20 - 2014-08-16 00:31 - 00914432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll

2014-11-02 11:20 - 2014-08-16 00:31 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll

2014-11-02 11:20 - 2014-08-16 00:29 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2014-11-02 11:20 - 2014-08-16 00:23 - 01106432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll

2014-11-02 11:20 - 2014-08-16 00:22 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll

2014-11-02 11:20 - 2014-08-16 00:22 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll

2014-11-02 11:20 - 2014-08-16 00:19 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2014-11-02 11:20 - 2014-08-16 00:18 - 04758528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll

2014-11-02 11:20 - 2014-08-16 00:17 - 08757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll

2014-11-02 11:20 - 2014-08-16 00:14 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll

2014-11-02 11:20 - 2014-08-16 00:13 - 06649344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll

2014-11-02 11:20 - 2014-08-16 00:13 - 05902848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll

2014-11-02 11:20 - 2014-08-16 00:13 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll

2014-11-02 11:20 - 2014-08-16 00:11 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll

2014-11-02 11:20 - 2014-08-16 00:10 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe

2014-11-02 11:20 - 2014-08-16 00:08 - 05777408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll

2014-11-02 11:20 - 2014-08-16 00:07 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll

2014-11-02 11:12 - 2014-11-02 11:12 - 00000000 ____D () C:\Users\Pk\voip

2014-11-02 11:04 - 2014-07-24 03:20 - 00875688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll

2014-11-02 11:04 - 2014-07-24 03:20 - 00869544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll

2014-11-02 11:00 - 2014-11-02 11:13 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\ICQ-Profile

2014-11-02 11:00 - 2014-11-02 11:01 - 00001714 _____ () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\ICQ.lnk

2014-11-02 11:00 - 2014-11-02 11:01 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ICQ

2014-11-02 11:00 - 2014-11-02 11:01 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\ICQM

2014-11-02 10:59 - 2014-11-02 10:59 - 35212808 _____ (ICQ) C:\Users\Pk\Downloads\icq_rfrset.exe

2014-11-02 10:57 - 2014-06-02 02:10 - 00423768 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll

2014-11-02 10:57 - 2014-05-31 06:27 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys

2014-11-02 10:57 - 2014-05-31 06:26 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys

2014-11-02 10:57 - 2014-05-31 04:01 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe

2014-11-02 10:57 - 2014-05-31 04:01 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll

2014-11-02 10:57 - 2014-05-31 04:01 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll

2014-11-02 10:57 - 2014-05-27 09:56 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll

2014-11-02 10:57 - 2014-05-27 09:53 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll

2014-11-02 10:54 - 2014-07-12 04:17 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe

2014-11-02 10:52 - 2014-12-01 14:29 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

2014-11-02 10:52 - 2014-11-27 17:28 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater

2014-11-02 10:35 - 2014-11-27 20:33 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Skype

2014-11-02 10:34 - 2014-11-14 15:51 - 00000000 ____D () C:\ProgramData\Skype

2014-11-02 10:21 - 2014-11-02 10:22 - 30742784 _____ (Skype Technologies S.A.) C:\Users\Pk\Downloads\Skype_v6.1.0.129.exe

2014-11-01 14:19 - 2014-11-01 14:19 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Norton Internet Security

2014-11-01 14:15 - 2014-11-01 14:15 - 00001466 _____ () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-11-01 14:13 - 2014-11-01 14:13 - 00000020 ___SH () C:\Users\Pk\ntuser.ini

2014-11-01 14:10 - 2014-12-01 14:39 - 01821657 _____ () C:\WINDOWS\WindowsUpdate.log

2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\Vorlagen

2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\Startmenü

2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung

2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen

2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien

2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\Druckumgebung

2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik

2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder

2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf

2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten

2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten

2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik

2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder

2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf

2014-11-01 14:10 - 2014-11-01 14:10 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten

2014-11-01 14:08 - 2014-11-01 14:08 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat

2014-11-01 13:47 - 2014-11-01 13:47 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk

2014-11-01 13:47 - 2014-11-01 13:47 - 00000000 ____D () C:\Users\Default\AppData\Local\Pokki

2014-11-01 13:47 - 2014-11-01 13:47 - 00000000 ____D () C:\Users\Default User\AppData\Local\Pokki

2014-11-01 13:39 - 2014-11-01 13:39 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate

2014-11-01 13:35 - 2014-12-01 14:29 - 00000000 ____D () C:\Users\Pk

2014-11-01 13:35 - 2014-11-01 14:09 - 00036198 _____ () C:\WINDOWS\diagwrn.xml

2014-11-01 13:35 - 2014-11-01 14:09 - 00036198 _____ () C:\WINDOWS\diagerr.xml

2014-11-01 13:35 - 2014-11-01 14:02 - 00000000 ____D () C:\Users\issam_000

2014-11-01 13:35 - 2014-11-01 14:01 - 00000000 ____D () C:\Users\ouali_000

2014-11-01 13:35 - 2014-11-01 13:38 - 00000000 ___RD () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-11-01 13:35 - 2014-11-01 13:38 - 00000000 ___RD () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2014-11-01 13:35 - 2014-11-01 13:37 - 00000000 ___RD () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-11-01 13:35 - 2014-11-01 13:37 - 00000000 ___RD () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2014-11-01 13:35 - 2014-11-01 13:37 - 00000000 ___RD () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-11-01 13:35 - 2014-11-01 13:37 - 00000000 ___RD () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\Vorlagen

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\Startmenü

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\Netzwerkumgebung

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\Lokale Einstellungen

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\Eigene Dateien

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\Druckumgebung

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\Documents\Eigene Musik

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\Documents\Eigene Bilder

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\AppData\Local\Verlauf

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\AppData\Local\Anwendungsdaten

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\Pk\Anwendungsdaten

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\Vorlagen

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\Startmenü

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\Netzwerkumgebung

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\Lokale Einstellungen

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\Eigene Dateien

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\Druckumgebung

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\Documents\Eigene Musik

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\Documents\Eigene Bilder

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\AppData\Local\Verlauf

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\AppData\Local\Anwendungsdaten

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\ouali_000\Anwendungsdaten

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\Vorlagen

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\Startmenü

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\Netzwerkumgebung

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\Lokale Einstellungen

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\Eigene Dateien

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\Druckumgebung

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\Documents\Eigene Musik

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\Documents\Eigene Bilder

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\AppData\Local\Verlauf

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\AppData\Local\Anwendungsdaten

2014-11-01 13:35 - 2014-11-01 13:35 - 00000000 _SHDL () C:\Users\issam_000\Anwendungsdaten

2014-11-01 13:35 - 2014-09-24 06:18 - 00000369 _____ () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk

2014-11-01 13:35 - 2014-09-24 06:18 - 00000369 _____ () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk

2014-11-01 13:35 - 2014-09-24 06:18 - 00000369 _____ () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk

2014-11-01 13:35 - 2014-09-24 06:18 - 00000369 _____ () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk

2014-11-01 13:35 - 2014-09-24 06:18 - 00000369 _____ () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk

2014-11-01 13:35 - 2014-09-24 06:18 - 00000369 _____ () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk

2014-11-01 13:35 - 2013-08-22 15:36 - 00000000 ___RD () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2014-11-01 13:35 - 2013-08-22 15:36 - 00000000 ___RD () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2014-11-01 13:35 - 2013-08-22 15:36 - 00000000 ___RD () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2014-11-01 13:35 - 2013-08-22 15:36 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2014-11-01 13:35 - 2013-08-22 15:36 - 00000000 ____D () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2014-11-01 13:35 - 2013-08-22 15:36 - 00000000 ____D () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2014-11-01 13:23 - 2014-11-01 13:23 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM

2014-11-01 13:23 - 2014-11-01 13:23 - 00000000 ____D () C:\Program Files\Realtek

2014-11-01 13:22 - 2014-11-01 13:22 - 00000000 ____D () C:\Program Files\Elantech

2014-11-01 13:22 - 2014-11-01 13:22 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies

2014-11-01 13:22 - 2014-11-01 13:22 - 00000000 ____D () C:\Program Files\AMD

2014-11-01 13:22 - 2014-11-01 13:22 - 00000000 _____ () C:\WINDOWS\system32\spu_storage.bin

2014-11-01 13:22 - 2014-11-01 13:22 - 00000000 _____ () C:\WINDOWS\ativpsrm.bin

2014-11-01 12:18 - 2014-11-04 15:48 - 00000000 ___DC () C:\WINDOWS\Panther

2014-11-01 12:18 - 2014-11-01 13:28 - 00000000 __SHD () C:\Recovery

2014-11-01 12:15 - 2014-11-17 17:14 - 00000000 ____D () C:\Windows.old

2014-11-01 12:15 - 2014-11-01 12:15 - 00921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll

2014-11-01 12:15 - 2014-11-01 12:15 - 00626688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll

2014-11-01 12:15 - 2014-11-01 12:15 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll

2014-11-01 12:15 - 2014-11-01 12:15 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\BulkOperationHost.exe

2014-11-01 12:11 - 2014-11-01 12:11 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll

2014-11-01 12:11 - 2014-11-01 12:11 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll

2014-11-01 12:09 - 2014-11-01 12:09 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff

2014-11-01 12:05 - 2014-11-01 12:05 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer

2014-11-01 12:05 - 2014-11-01 12:05 - 00000000 ____D () C:\Program Files\Reference Assemblies

2014-11-01 12:05 - 2014-11-01 12:05 - 00000000 ____D () C:\Program Files\MSBuild

2014-11-01 12:05 - 2014-11-01 12:05 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies

2014-11-01 12:05 - 2014-11-01 12:05 - 00000000 ____D () C:\Program Files (x86)\MSBuild

2014-11-01 12:03 - 2013-08-03 04:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll

2014-11-01 12:03 - 2013-08-03 04:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll

2014-11-01 12:03 - 2013-08-03 04:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll

2014-11-01 12:03 - 2013-08-03 04:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-12-01 14:36 - 2013-11-23 14:53 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1444305084-1481242938-3084423498-1001

2014-12-01 14:34 - 2014-05-10 20:03 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-12-01 14:34 - 2013-11-23 15:34 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-12-01 14:33 - 2013-09-15 12:20 - 00000000 ____D () C:\ProgramData\boost_interprocess

2014-12-01 14:32 - 2014-05-20 14:36 - 00001142 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

2014-12-01 14:30 - 2013-08-22 13:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM

2014-12-01 14:29 - 2013-08-22 14:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT

2014-11-30 22:04 - 2012-07-26 07:59 - 00000000 ____D () C:\WINDOWS\CbsTemp

2014-11-30 22:02 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\sru

2014-11-30 22:00 - 2014-05-20 14:36 - 00001146 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

2014-11-30 21:15 - 2014-10-01 15:56 - 00000414 _____ () C:\WINDOWS\Tasks\update-sys.job

2014-11-30 20:37 - 2014-10-01 15:56 - 00000414 _____ () C:\WINDOWS\Tasks\update-S-1-5-21-1444305084-1481242938-3084423498-1001.job

2014-11-30 15:22 - 2013-11-29 17:33 - 00000000 ____D () C:\Users\Pk\AppData\Local\Adobe

2014-11-28 22:33 - 2013-11-30 16:17 - 00000000 ____D () C:\Users\Pk\AppData\Local\CrashDumps

2014-11-28 19:32 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\AppReadiness

2014-11-28 17:55 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\rescache

2014-11-27 19:16 - 2014-09-24 06:17 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI

2014-11-27 19:16 - 2014-09-24 05:43 - 00765582 _____ () C:\WINDOWS\system32\perfh007.dat

2014-11-27 19:16 - 2014-09-24 05:43 - 00159366 _____ () C:\WINDOWS\system32\perfc007.dat

2014-11-27 18:03 - 2014-05-20 14:38 - 00002207 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-11-27 17:44 - 2013-12-18 18:29 - 00000215 _____ () C:\Users\Pk\AppData\Roaming\WB.CFG

2014-11-25 18:06 - 2013-08-22 11:22 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll

2014-11-25 18:06 - 2013-08-22 11:22 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe

2014-11-25 18:06 - 2013-08-22 11:17 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll

2014-11-25 18:06 - 2013-08-22 11:17 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll

2014-11-25 18:06 - 2013-08-22 11:17 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll

2014-11-25 18:06 - 2013-08-22 04:05 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll

2014-11-25 18:06 - 2013-08-22 04:03 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe

2014-11-25 18:06 - 2013-08-22 03:59 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll

2014-11-25 18:06 - 2013-08-22 03:56 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll

2014-11-25 18:06 - 2013-08-22 03:56 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe

2014-11-25 18:06 - 2013-08-22 03:51 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll

2014-11-25 18:06 - 2013-08-22 03:51 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll

2014-11-25 18:06 - 2013-08-22 03:51 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll

2014-11-25 18:06 - 2013-08-22 03:51 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll

2014-11-25 14:36 - 2014-06-11 14:21 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\FileZilla

2014-11-24 13:26 - 2014-06-11 14:20 - 00000000 ____D () C:\Program Files (x86)\FileZilla FTP Client

2014-11-22 10:01 - 2013-11-23 14:32 - 00000000 ____D () C:\Users\Pk\AppData\Local\Packages

2014-11-22 09:59 - 2013-08-22 14:44 - 05007824 _____ () C:\WINDOWS\system32\FNTCACHE.DAT

2014-11-22 09:52 - 2013-08-22 15:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-11-22 09:52 - 2013-08-22 15:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-11-22 09:52 - 2013-08-22 15:36 - 00000000 ____D () C:\Program Files\Windows Defender

2014-11-22 09:52 - 2013-08-22 15:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender

2014-11-22 09:51 - 2013-08-22 15:36 - 00000000 ___RD () C:\WINDOWS\ToastData

2014-11-22 09:51 - 2013-08-22 15:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel

2014-11-22 09:51 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\WinStore

2014-11-21 16:33 - 2014-10-01 15:56 - 00003260 _____ () C:\WINDOWS\System32\Tasks\update-S-1-5-21-1444305084-1481242938-3084423498-1001

2014-11-21 16:33 - 2014-10-01 15:56 - 00000431 _____ () C:\Users\Pk\AppData\Local\UserProducts.xml

2014-11-21 16:33 - 2014-10-01 15:56 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lightshot

2014-11-21 16:27 - 2013-11-29 17:26 - 00000000 ____D () C:\WINDOWS\system32\MRT

2014-11-21 16:16 - 2013-11-29 17:26 - 103374192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2014-11-21 16:08 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\restore

2014-11-21 13:54 - 2014-09-20 14:07 - 00000000 ____D () C:\Users\Pk\AppData\Local\LogMeIn Hamachi

2014-11-16 12:49 - 2014-10-04 16:42 - 11895013 _____ () C:\Users\Pk\Downloads\WeepCraft 8.1.zip

2014-11-15 11:13 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\spool

2014-11-14 15:55 - 2014-05-20 14:36 - 00004118 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA

2014-11-14 15:55 - 2014-05-20 14:36 - 00003882 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore

2014-11-04 15:51 - 2014-09-20 18:51 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-11-04 15:51 - 2014-05-24 10:33 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\uTorrent

2014-11-01 14:35 - 2012-07-26 08:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP

2014-11-01 14:34 - 2013-08-22 13:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI

2014-11-01 14:20 - 2013-11-23 14:37 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD

2014-11-01 14:13 - 2013-08-06 07:24 - 00003234 _____ () C:\WINDOWS\System32\Tasks\Norton WSC Integration

2014-11-01 14:10 - 2013-08-22 15:36 - 00000000 ____D () C:\Program Files\Windows NT

2014-11-01 14:10 - 2013-08-22 13:36 - 00000000 __RHD () C:\Users\Default

2014-11-01 14:09 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\Registration

2014-11-01 14:04 - 2013-08-22 15:36 - 00000000 __RSD () C:\WINDOWS\Media

2014-11-01 14:04 - 2013-08-22 15:36 - 00000000 __RHD () C:\Users\Public\Libraries

2014-11-01 13:50 - 2014-10-22 15:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brick-Force

2014-11-01 13:50 - 2014-10-21 16:44 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Counter-Strike 1.6

2014-11-01 13:50 - 2014-10-19 15:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro

2014-11-01 13:50 - 2014-10-17 12:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer

2014-11-01 13:50 - 2014-10-15 15:47 - 00000000 ____D () C:\WINDOWS\de

2014-11-01 13:50 - 2014-10-11 13:31 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software

2014-11-01 13:50 - 2014-10-10 14:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AssaultCube

2014-11-01 13:50 - 2014-09-26 17:22 - 00000000 ____D () C:\ProgramData\regid.1995-08.com.techsmith

2014-11-01 13:50 - 2014-09-26 17:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith

2014-11-01 13:50 - 2014-09-21 10:13 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wurm Online

2014-11-01 13:50 - 2014-09-20 18:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam

2014-11-01 13:50 - 2014-09-20 14:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi76

2014-11-01 13:50 - 2014-08-14 17:13 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SA-MP Colorpicker

2014-11-01 13:50 - 2014-06-28 09:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elsword_DE

2014-11-01 13:50 - 2014-06-18 15:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Clonk Rage

2014-11-01 13:50 - 2014-06-11 14:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++

2014-11-01 13:50 - 2014-05-24 17:38 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client

2014-11-01 13:50 - 2014-05-23 17:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Online Backup

2014-11-01 13:50 - 2014-05-21 12:35 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

2014-11-01 13:50 - 2014-05-21 12:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR

2014-11-01 13:50 - 2014-05-20 15:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-11-01 13:50 - 2014-05-20 15:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner

2014-11-01 13:50 - 2014-05-20 14:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2014-11-01 13:50 - 2014-03-22 17:25 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security

2014-11-01 13:50 - 2014-03-12 18:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2014

2014-11-01 13:50 - 2014-02-19 15:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus

2014-11-01 13:50 - 2013-09-15 12:15 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD 12

2014-11-01 13:50 - 2013-09-15 12:05 - 00000000 ____D () C:\WINDOWS\SysWOW64\QCA_CR

2014-11-01 13:50 - 2013-09-15 11:55 - 00000000 ____D () C:\WINDOWS\SysWOW64\Atheros_L1e

2014-11-01 13:50 - 2013-09-15 11:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Quick Stream

2014-11-01 13:50 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\Help

2014-11-01 13:50 - 2013-08-22 13:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep

2014-11-01 13:50 - 2013-08-06 07:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero

2014-11-01 13:50 - 2013-08-06 07:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Packard Bell

2014-11-01 13:47 - 2012-07-26 05:37 - 00000000 ____D () C:\Users\Default.migrated

2014-11-01 13:46 - 2014-09-24 05:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN

2014-11-01 13:46 - 2014-09-24 05:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep

2014-11-01 13:46 - 2014-09-24 05:43 - 00000000 ____D () C:\WINDOWS\system32\WCN

2014-11-01 13:46 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz

2014-11-01 13:46 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME

2014-11-01 13:46 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns

2014-11-01 13:46 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\NDF

2014-11-01 13:46 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\IME

2014-11-01 13:46 - 2013-08-22 13:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI

2014-11-01 13:46 - 2013-08-22 13:36 - 00000000 ____D () C:\WINDOWS\system32\oobe

2014-11-01 13:43 - 2014-10-10 14:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Netgame

2014-11-01 13:43 - 2014-09-22 18:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer

2014-11-01 13:43 - 2013-08-22 15:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker

2014-11-01 13:43 - 2013-08-22 15:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar

2014-11-01 13:43 - 2013-08-22 15:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar

2014-11-01 13:43 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\IME

2014-11-01 13:43 - 2013-08-22 15:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared

2014-11-01 13:43 - 2013-08-06 07:17 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2014-11-01 13:43 - 2013-08-06 07:05 - 00000000 ____D () C:\ProgramData\PRICache

2014-11-01 13:39 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery

2014-11-01 13:38 - 2014-10-10 14:35 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Netgame

2014-11-01 13:38 - 2014-09-20 19:01 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2014-11-01 13:38 - 2014-05-27 13:06 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EA Games

2014-11-01 13:37 - 2014-05-20 14:24 - 00000000 ____D () C:\Users\ouali_000\AppData\Local\Packages

2014-11-01 13:37 - 2013-11-23 15:21 - 00000000 ____D () C:\Users\issam_000\AppData\Local\Packages

2014-11-01 12:15 - 2013-08-22 15:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template

2014-11-01 12:15 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\MediaViewer

2014-11-01 12:15 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\FileManager

2014-11-01 12:15 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\Camera

2014-11-01 12:14 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions

2014-11-01 12:05 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI

2014-11-01 12:05 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\MUI

2014-11-01 10:58 - 2012-07-26 08:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2014-11-27 19:28
 

==================== End Of Log ============================

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-12-2014

Ran by Hbib at 2014-12-01 14:50:30

Running from C:\Users\Pk\Pictures

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: Norton Internet Security (Disabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}

AS: Norton Internet Security (Enabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: Norton Internet Security (Disabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

µTorrent (HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\uTorrent) (Version: 3.4.2.34024 - BitTorrent Inc.)

Adobe After Effects CC 2014 (HKLM-x32\...\{2B22C750-5C3B-4738-B621-BA786AC7A494}) (Version: 13.0.2 - Adobe Systems Incorporated)

Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.8.0.447 - Adobe Systems Incorporated)

Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.239 - Adobe Systems Incorporated)

Adobe Photoshop CC 2014 (HKLM-x32\...\{D7A4F897-B20A-42D0-862D-CB5F6DB7391D}) (Version: 15.2 - Adobe Systems Incorporated)

AMD Catalyst Install Manager (HKLM\...\{9770EA17-52C1-78A7-C3B3-59F0A2091BAE}) (Version: 8.0.911.0 - Advanced Micro Devices, Inc.)

AMD Quick Stream (HKLM\...\{E9EED4AE-682B-4501-9574-D09A21717599}_is1) (Version: 3.4.4.2 - AppEx Networks)

AssaultCube v1.2.0.2 (HKLM-x32\...\AssaultCube) (Version: 1.2.0.2 - )

Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden

Brick-Force (HKLM-x32\...\{9853ABB2-6416-4C87-8650-DD8E528FF564}}_is1) (Version: 4.3.383.130.19 - Infernum Productions AG)

Camtasia Studio 8 (HKLM-x32\...\{FB05EAA3-D938-4EDA-9A38-88543E52680C}) (Version: 8.4.3.1792 - TechSmith Corporation)

CCleaner (HKLM\...\CCleaner) (Version: 4.14 - Piriform)

CINEMA 4D R14 (HKLM-x32\...\CINEMA 4D R14) (Version:  - )

Counter-Field 3 (HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\Counter-Field 3) (Version:  - )

Counter-Strike 1.6 (HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\Counter-Strike 1.6) (Version:  - )

CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.2826.57 - CyberLink Corp.)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Delicious: Emily's Childhood Memories Premium Edition (x32 Version: 3.0.2.32 - WildTangent) Hidden

eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)

ETDWare PS/2-X64 11.6.24.203_WHQL (HKLM\...\Elantech) (Version: 11.6.24.203 - ELAN Microelectronic Corp.)

FileZilla Client 3.9.0.6 (HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\FileZilla Client) (Version: 3.9.0.6 - Tim Kosse)

Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.71 - Google Inc.)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden

ICQ 8.2 (build 7138) (HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\ICQ) (Version: 8.2.7138.0 - ICQ)

Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3005 - Packard Bell)

Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.670 - Oracle)

Java 7 Update 71 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417071FF}) (Version: 7.0.710 - Oracle)

Jewel Match 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden

John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden

Lightshot-5.1.4.41 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.1.4.41 - Skillbrains)

Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.3008 - Packard Bell)

LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.236 - LogMeIn, Inc.)

LogMeIn Hamachi (x32 Version: 2.2.0.236 - LogMeIn, Inc.) Hidden

Magic Academy (x32 Version: 2.2.0.98 - WildTangent) Hidden

McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.141.11 - McAfee, Inc.)

Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Minecraft Packages (HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\Minecraft Packages) (Version:  - ) <==== ATTENTION

Mine-imator version 1.0.0 DEMO 5 (HKLM-x32\...\{AAA406D7-4C55-469A-86CC-241B2FA06D12}_is1) (Version: 1.0.0 DEMO 5 - David Norgren)

Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Mozilla Firefox 32.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 32.0.3 (x86 de)) (Version: 32.0.3 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)

MSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) Hidden

MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden

Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{4CA8F973-6377-4ABF-9ED5-CC2323B3C000}) (Version: 12.5.00500 - Nero AG)

Norton Internet Security (HKLM-x32\...\NIS) (Version: 21.6.0.32 - Symantec Corporation)

Norton Online Backup (HKLM-x32\...\{C6173775-C676-4E2A-9232-66E17261E614}) (Version: 2.9.0.19 - Symantec Corporation)

Norton Online Backup (x32 Version: 4.4.1.11 - Symantec Corporation) Hidden

Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.4 - Notepad++ Team)

OEM Application Profile (HKLM-x32\...\{276FD4A2-030F-8A24-7DFE-9B1384131BCD}) (Version: 1.00.0000 - Ihr Firmenname)

Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )

OpenAL (HKLM-x32\...\OpenAL) (Version:  - )

Packard Bell Device Fast-lane (HKLM\...\{3F62D2FD-13C1-49A2-8B5D-47623D9460D7}) (Version: 1.00.3013 - Packard Bell)

Packard Bell Games (HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\Pokki_c3e2005ede46d0c9848c79a4f19e87561ed8d0aa) (Version: 1.1.7.42206 - Pokki)

Packard Bell Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.3005 - Packard Bell)

Packard Bell Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3013 - Packard Bell)

Packard Bell Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3016 - Packard Bell)

paint.net (HKLM\...\{F509C1F4-0029-49F9-B145-A4C4E8DF481A}) (Version: 4.0.3 - dotPDN LLC)

Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.)

PennyBeeUpdate (HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\PennyBee) (Version: 1.0.5.0 - PennyBeeUpdate) <==== ATTENTION

Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Photo Gallery (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden

Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden

QCA CardReader Driver Installer (HKLM-x32\...\{4E0BC999-655B-421D-87F3-640C6F2BFC11}) (Version: 1.0.1.34 - Qualcomm Inc.)

Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.226 - Qualcomm Atheros Communications)

Qualcomm Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.13 - Qualcomm Atheros Communications Inc.)

Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 11.53 - Qualcomm Atheros)

Razer Game Booster (HKLM-x32\...\Razer Game Booster_is1) (Version: 4.0.68.0 - Razer Inc.)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6865 - Realtek Semiconductor Corp.)

SA-MP Colorpicker 1.1.0 (HKLM-x32\...\SA-MP Colorpicker) (Version: 1.1.0 - GTAvision.com)

Skype™ 6.22 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.22.105 - Skype Technologies S.A.)

Spielkanäle (HKLM-x32\...\WildTangentGameProvider-packardbell-genres) (Version: 8.1.0.17 - WildTangent, Inc.)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

Tales of Lagoona (x32 Version: 2.2.0.110 - WildTangent) Hidden

TeamSpeak 3 Client (HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)

TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.221 - TuneUp Software) Hidden

TuneUp Utilities 2014 (HKLM-x32\...\TuneUp Utilities) (Version: 14.0.1000.221 - TuneUp Software)

TuneUp Utilities 2014 (x32 Version: 14.0.1000.221 - TuneUp Software) Hidden

Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden

Vegas Pro 13.0 (64-bit) (HKLM\...\{CE92F061-BFBC-11E3-8FF3-F04DA23A5C58}) (Version: 13.0.290 - Sony)

WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)

WildTangent Games App (x32 Version: 4.0.11.14 - WildTangent) Hidden

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)

WinRAR 5.10 beta 4 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.4 - win.rar GmbH)
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
 

==================== Restore Points  =========================
 

21-11-2014 16:08:46 Windows Update

25-11-2014 12:31:32 Windows Update

28-11-2014 18:28:16 Windows Update
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2012-07-26 05:26 - 2014-09-26 17:27 - 00000986 ____A C:\WINDOWS\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {0C9C7584-2F0A-45C5-8042-C09DBB795048} - System32\Tasks\update-S-1-5-21-1444305084-1481242938-3084423498-1001 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-03-25] ()

Task: {19809562-05AC-4B6C-95CE-87D736A754E0} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe [2013-12-18] (TuneUp Software)

Task: {2571804A-CE4E-4DF3-9847-B865E5744A6D} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\WSCStub.exe [2014-09-21] (Symantec Corporation)

Task: {31A9915E-EA87-4841-A3EF-7A67A61BEFA8} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-05-20] (Piriform Ltd)

Task: {44786C93-5644-46E8-8E74-1CB49F9964F5} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-27] (Adobe Systems Incorporated)

Task: {4ACFEFCD-7719-47EB-8275-E95B49BDC530} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-03-25] ()

Task: {63258523-71B1-4737-8DB2-FAA322AA1E5B} - \PC Speed Maximizer Schedule No Task File <==== ATTENTION

Task: {67847EFA-DE54-4195-A4C7-F6C822765A2C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-20] (Google Inc.)

Task: {7AD0A9AD-21DD-49D3-8BE9-6E1E55EC097C} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-11-21] (Microsoft Corporation)

Task: {7E33E5E2-63C7-4D1D-8ABA-B6B3B6671097} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-20] (Google Inc.)

Task: {7EF87465-90E6-4616-B384-6A0FECA1FF70} - \UpdaterEX No Task File <==== ATTENTION

Task: {8A4B2E02-BEEC-4D6D-BC17-381FD9C992D0} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Packard Bell\Live Updater\liveupdater_agent.exe [2013-01-22] ()

Task: {90B45641-E68C-4061-8F87-0AA2137E55A8} - System32\Tasks\ALU => C:\Program Files (x86)\Packard Bell\Live Updater\updater.exe [2013-02-22] ()

Task: {9D32F6D9-6E61-4C5A-B4E4-C19013021C6C} - System32\Tasks\Power Management => C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [2013-03-15] (Acer Incorporated)

Task: {B8CAB970-822D-4554-A6AF-FBE48DB2F695} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\SymErr.exe [2014-01-30] (Symantec Corporation)

Task: {CB032C39-AA99-4975-A982-16732589A35C} - System32\Tasks\Launch Manager => C:\Program Files\Packard Bell\Packard Bell Launch Manager\LMLauncher.exe [2013-06-17] (Acer Incorporate)

Task: {DEBB4E65-31D2-4D9B-94FA-5E3B19F44C7E} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\SymErr.exe [2014-01-30] (Symantec Corporation)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\update-S-1-5-21-1444305084-1481242938-3084423498-1001.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

Task: C:\WINDOWS\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
 

==================== Loaded Modules (whitelisted) =============
 

2013-12-18 09:01 - 2013-12-18 09:01 - 00742200 _____ () C:\Program Files (x86)\TuneUp Utilities 2014\avgrepliba.dll

2014-09-26 13:41 - 2014-09-26 13:41 - 01021088 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll

2013-04-24 14:09 - 2013-04-24 14:09 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll

2013-04-24 14:07 - 2013-04-24 14:07 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll

2014-10-12 10:14 - 2014-10-12 10:14 - 00338432 _____ () C:\Users\Pk\AppData\Local\PennyBee\PennyBeeW.exe

2013-04-24 14:12 - 2013-04-24 14:12 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe

2014-10-16 09:15 - 2014-10-16 09:15 - 00035328 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll

2014-05-24 16:41 - 2014-05-24 16:41 - 00091648 _____ () C:\Program Files (x86)\FileZilla FTP Client\libgcc_s_sjlj-1.dll

2014-05-24 16:41 - 2014-05-24 16:41 - 00892416 _____ () C:\Program Files (x86)\FileZilla FTP Client\libstdc++-6.dll

2014-05-10 20:03 - 2014-12-01 14:34 - 03715184 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

2014-09-22 16:23 - 2014-09-22 16:23 - 00317960 _____ () C:\Users\Pk\AppData\Local\PennyBee\Resources\ntdis_32.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 

AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT

AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 

==================== EXE Association (whitelisted) =============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 

(Currently there is no automatic fix for this section.)
 

MSCONFIG\Services: GamesAppService => 3

MSCONFIG\Services: gupdate => 2

MSCONFIG\Services: gupdatem => 3

MSCONFIG\Services: Hamachi2Svc => 2

MSCONFIG\Services: LMSvc => 2

MSCONFIG\Services: MozillaMaintenance => 3

MSCONFIG\Services: NAUpdate => 2

MSCONFIG\Services: OverwolfUpdaterService => 3

HKLM\...\StartupApproved\StartupFolder: => "McAfee Security Scan Plus.lnk"

HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui"

HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"

HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "Pokki"

HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "CCleaner Monitoring"

HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "uTorrent"

HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "Overwolf"

HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "EADM"

HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "Skype"

HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "icq"
 

========================= Accounts: ==========================
 

Administrator (S-1-5-21-1444305084-1481242938-3084423498-500 - Administrator - Disabled)

Gast (S-1-5-21-1444305084-1481242938-3084423498-501 - Limited - Enabled)

Hbib (S-1-5-21-1444305084-1481242938-3084423498-1001 - Administrator - Enabled) => C:\Users\Pk

issam_000 (S-1-5-21-1444305084-1481242938-3084423498-1004 - Limited - Enabled) => C:\Users\issam_000

ouali_000 (S-1-5-21-1444305084-1481242938-3084423498-1005 - Limited - Enabled) => C:\Users\ouali_000
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (12/01/2014 02:34:11 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: WmiApRplC:\WINDOWS\system32\wbem\wmiaprpl.dll4
 

Error: (12/01/2014 02:34:09 PM) (Source: Perflib) (EventID: 1023) (User: )

Description: rdyboost4
 

Error: (12/01/2014 02:34:09 PM) (Source: PerfNet) (EventID: 2004) (User: )

Description: 
 

Error: (12/01/2014 02:34:08 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: MSDTCC:\WINDOWS\system32\msdtcuiu.DLL4
 

Error: (12/01/2014 02:34:08 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: LsaC:\Windows\System32\Secur32.dll4
 

Error: (12/01/2014 02:34:08 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: ESENTC:\WINDOWS\system32\esentprf.dll4
 

Error: (12/01/2014 02:34:08 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: BITSC:\Windows\System32\bitsperf.dll4
 

Error: (11/30/2014 03:23:41 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: WmiApRplC:\WINDOWS\system32\wbem\wmiaprpl.dll4
 

Error: (11/30/2014 03:23:40 PM) (Source: Perflib) (EventID: 1023) (User: )

Description: rdyboost4
 

Error: (11/30/2014 03:23:40 PM) (Source: PerfNet) (EventID: 2004) (User: )

Description: 
 
 

System errors:

=============

Error: (12/01/2014 02:30:41 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "LogMeIn Hamachi Tunneling Engine" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (12/01/2014 02:30:41 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst LogMeIn Hamachi Tunneling Engine erreicht.
 

Error: (12/01/2014 02:29:36 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "AppEx Networks Accelerator LWF" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%31
 

Error: (12/01/2014 02:29:36 PM) (Source: APXACC) (EventID: 1003) (User: )

Description: The NDIS6 LWF initialization has failed. (0xC0000001)
 

Error: (12/01/2014 02:28:23 PM) (Source: Microsoft-Windows-HAL) (EventID: 13) (User: NT-AUTORITÄT)

Description: Der Systemüberwachungszeitgeber wurde ausgelöst.
 

Error: (12/01/2014 02:29:31 PM) (Source: EventLog) (EventID: 6008) (User: )

Description: Das System wurde zuvor am ‎30.‎11.‎2014 um 22:32:04 unerwartet heruntergefahren.
 

Error: (11/28/2014 10:30:03 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073712 fehlgeschlagen: Update für Windows 8.1 für x64-Systeme (KB2962409)
 

Error: (11/28/2014 08:43:05 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073712 fehlgeschlagen: Update für Windows 8.1 für x64-Systeme (KB2962409)
 

Error: (11/28/2014 08:18:51 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073712 fehlgeschlagen: Update für Windows 8.1 für x64-Systeme (KB2962409)
 

Error: (11/28/2014 08:08:00 PM) (Source: DCOM) (EventID: 10010) (User: Wohnzimmer-PC)

Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
 
 

Microsoft Office Sessions:

=========================

Error: (12/01/2014 02:34:11 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: WmiApRplC:\WINDOWS\system32\wbem\wmiaprpl.dll4
 

Error: (12/01/2014 02:34:09 PM) (Source: Perflib) (EventID: 1023) (User: )

Description: rdyboost4
 

Error: (12/01/2014 02:34:09 PM) (Source: PerfNet) (EventID: 2004) (User: )

Description: 
 

Error: (12/01/2014 02:34:08 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: MSDTCC:\WINDOWS\system32\msdtcuiu.DLL4
 

Error: (12/01/2014 02:34:08 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: LsaC:\Windows\System32\Secur32.dll4
 

Error: (12/01/2014 02:34:08 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: ESENTC:\WINDOWS\system32\esentprf.dll4
 

Error: (12/01/2014 02:34:08 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: BITSC:\Windows\System32\bitsperf.dll4
 

Error: (11/30/2014 03:23:41 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: WmiApRplC:\WINDOWS\system32\wbem\wmiaprpl.dll4
 

Error: (11/30/2014 03:23:40 PM) (Source: Perflib) (EventID: 1023) (User: )

Description: rdyboost4
 

Error: (11/30/2014 03:23:40 PM) (Source: PerfNet) (EventID: 2004) (User: )

Description: 
 
 

==================== Memory info =========================== 
 

Processor: AMD E1-2500 APU with Radeon(TM) HD Graphics 

Percentage of memory in use: 82%

Total physical RAM: 1477.01 MB

Available physical RAM: 251.4 MB

Total Pagefile: 4549.01 MB

Available Pagefile: 2930.34 MB

Total Virtual: 131072 MB

Available Virtual: 131071.8 MB
 

==================== Drives ================================
 

Drive c: (Packard Bell) (Fixed) (Total:282.58 GB) (Free:196.95 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (Size: 298.1 GB) (Disk ID: EA4C7CA5)
 

Partition: GPT Partition Type.
 

==================== End Of Log ============================

Code:

Dateiname: pennybeew.exe

Bedrohungsname: WS.Malware.1

Vollständiger Pfad: c:\users\pk\appdata\local\pennybee\pennybeew.exe
 

____________________________
 
 
 

Details

Viele Benutzer,* Schon länger bekannt,* Risiko Hoch
 
 
 
 
 

Ursprung

Heruntergeladen von

*Unbekannt
 
 
 
 
 

Aktivität

Ausgeführte Aktionen: 4
 
 
 

____________________________
 
 
 

Auf Computern ab*

22.11.2014 um 19:39:24
 
 

Zuletzt verwendet*

01.12.2014 um 18:45:53
 
 

Start-Element*

Ja
 
 

Gestartet*

Ja
 
 

____________________________
 
 

Viele Benutzer

Tausende Benutzer in der Norton Community haben diese Datei verwendet.
 

Schon länger bekannt

Diese Datei wurde vor mehr als 31 Tagen 2 Monaten  veröffentlicht.
 

Hoch

Das Risiko dieser Datei ist hoch.
 

Art der Bedrohung: Virus. Programme, die andere Programme, Dateien oder Computerbereiche infizieren, indem sie sich einfügen oder anhängen.
 
 
 

____________________________
 
 
 

Quelle: externe Medien
 
 
 

Quelldatei:

pennybeew.exe
 
 
 
 

____________________________
 

Dateiaktionen
 

Ereignis: Laufender Prozess: c:\users\pk\appdata\local\pennybee\ pennybeew.exe Beendet

Ereignis: Laufender Prozess: c:\users\pk\appdata\local\pennybee\ pennybeew.exe Reparatur nicht versucht

Infizierte Datei: c:\users\pk\appdata\local\pennybee\ pennybeew.exe Keine Aktion erforderlich

____________________________
 

Registrierungsaktionen
 

Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1001\Software\Microsoft\Windows\CurrentVersion\ Run->PennyBee Keine Aktion erforderlich

____________________________
 
 

Dateiabdruck - SHA:

8a4aee9965ae465aebdbf767f23d77afbe33adcefe75928956cd88d06a32dd61

Dateiabdruck - MD5:

Nicht verfügbar

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-12-2014

Ran by Hbib (administrator) on WOHNZIMMER-PC on 01-12-2014 19:08:11

Running from C:\Users\Pk\Pictures

Loaded Profiles: Hbib & issam_000 & ouali_000 (Available profiles: Hbib & issam_000 & ouali_000)

Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\nis.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(Razer Inc.) C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\nis.exe

(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe

(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe

() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe

(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe

(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe

(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe

(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe

(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2890056 2013-05-22] (ELAN Microelectronics Corp.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13427784 2013-03-18] (Realtek Semiconductor)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642816 2013-06-13] (Advanced Micro Devices, Inc.)

HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-04-24] ( (Atheros Communications))

HKU\S-1-5-21-1444305084-1481242938-3084423498-1004\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2013-08-22] (Microsoft Corporation)

HKU\S-1-5-21-1444305084-1481242938-3084423498-1005\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2013-08-22] (Microsoft Corporation)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk

ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (McAfee, Inc.)

BootExecute: autocheck mslnautocheck autochk * 
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKU\S-1-5-21-1444305084-1481242938-3084423498-1004\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer13.msn.com

HKU\S-1-5-21-1444305084-1481242938-3084423498-1004\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com

HKU\S-1-5-21-1444305084-1481242938-3084423498-1005\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer13.msn.com

HKU\S-1-5-21-1444305084-1481242938-3084423498-1005\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com

SearchScopes: HKLM-x32 -> DefaultScope value is missing.

SearchScopes: HKU\S-1-5-21-1444305084-1481242938-3084423498-1004 -> DefaultScope {58EEA0ED-7C32-4F46-ADEF-5677392D44C0} URL = 

SearchScopes: HKU\S-1-5-21-1444305084-1481242938-3084423498-1004 -> {58EEA0ED-7C32-4F46-ADEF-5677392D44C0} URL = 

BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine64\21.6.0.32\coIEPlg.dll (Symantec Corporation)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)

BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\coIEPlg.dll (Symantec Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.6.0.32\coIEPlg.dll (Symantec Corporation)

Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\coIEPlg.dll (Symantec Corporation)

Toolbar: HKU\S-1-5-21-1444305084-1481242938-3084423498-1001 -> Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.6.0.32\coIEPlg.dll (Symantec Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
 

FireFox:

========

FF ProfilePath: C:\Users\Pk\AppData\Roaming\Mozilla\Firefox\Profiles\yqrfhnfq.default

FF Homepage: www.google.de

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_15_0_0_239.dll ()

FF Plugin: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_239.dll ()

FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @mcafee.com/McAfeeMssPlugin -> C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()

FF Extension: MEGA - C:\Users\Pk\AppData\Roaming\Mozilla\Firefox\Profiles\yqrfhnfq.default\Extensions\firefox@mega.co.nz.xpi [2014-09-27]

FF Extension: Adblock Plus - C:\Users\Pk\AppData\Roaming\Mozilla\Firefox\Profiles\yqrfhnfq.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-02-01]

FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn

FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn [2014-12-01]
 

Chrome: 

=======

CHR Profile: C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Docs) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-05-20]

CHR Extension: (Google Drive) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-20]

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-20]

CHR Extension: (YouTube) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-20]

CHR Extension: (Adblock Plus) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-11-04]

CHR Extension: (Google-Suche) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-20]

CHR Extension: (Google Wallet) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-20]

CHR Extension: (Google Mail) - C:\Users\Pk\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-20]

CHR HKLM\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\Exts\Chrome.crx [2014-10-04]

CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\Exts\Chrome.crx [2014-10-04]
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [310400 2013-04-24] (Windows (R) Win 7 DDK provider)

S3 DeviceFastLaneService; C:\Program Files\Packard Bell\Packard Bell Device Fast-lane\DeviceFastLaneSvc.exe [470056 2013-05-01] (Acer Incorporated)

R3 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [662088 2013-03-15] (Acer Incorporated)

S2 EraserSvc11410; C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\NIS.exe [276376 2014-09-21] (Symantec Corporation)

R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-04-24] (WildTangent)

S4 LMSvc; C:\Program Files\Packard Bell\Packard Bell Launch Manager\LMSvc.exe [431656 2013-06-18] (Acer Incorporate)

S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)

R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\NIS.exe [276376 2014-09-21] (Symantec Corporation)

R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4343664 2014-04-09] (Symantec Corporation)

R2 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [106472 2013-09-18] (Razer Inc.)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)

S2 Hamachi2Svc; "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s [X]

S2 LMIGuardianSvc; "C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe" [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

S2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [219360 2013-04-18] (AppEx Networks Corporation)

R3 AthrSdSrv; C:\Windows\system32\DRIVERS\athrsd.sys [48760 2012-12-01] (Qualcomm Atheros, Inc.)

R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [98744 2013-04-23] (Advanced Micro Devices)

R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20141118.001\BHDrvx64.sys [1587416 2014-10-03] (Symantec Corporation)

R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-04-24] (Qualcomm Atheros)

R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-09-24] (Microsoft Corporation)

S3 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0404010.00B\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)

R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1506000.020\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)

R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2014-09-14] (Symantec Corporation)

R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [142640 2014-09-14] (Symantec Corporation)

S3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [46136 2014-09-04] (LogMeIn Inc.)

R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20141128.001\IDSvia64.sys [637656 2014-11-19] (Symantec Corporation)

R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-01-10] (Acer Incorporated)

R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20141130.022\ENG64.SYS [129752 2014-09-14] (Symantec Corporation)

R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20141130.022\EX64.SYS [2137304 2014-09-14] (Symantec Corporation)

R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [15704 2013-01-10] (Acer Incorporated)

R1 SRTSP; C:\Windows\System32\Drivers\NISx64\1506000.020\SRTSP64.SYS [876248 2014-08-26] (Symantec Corporation)

R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1506000.020\SRTSPX64.SYS [37592 2014-08-26] (Symantec Corporation)

R0 SymDS; C:\Windows\System32\drivers\NISx64\1506000.020\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)

R0 SymEFA; C:\Windows\System32\drivers\NISx64\1506000.020\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation)

S0 SymELAM; C:\Windows\System32\drivers\NISx64\1506000.020\SymELAM.sys [23568 2013-09-10] (Symantec Corporation)

R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-03-22] (Symantec Corporation)

R1 SymIRON; C:\Windows\system32\drivers\NISx64\1506000.020\Ironx64.SYS [266968 2014-08-06] (Symantec Corporation)

R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1506000.020\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)

S3 AtiDCM; \??\C:\AMD\WU-CCC2\ccc2_install\Support64\atdcm64a.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-12-01 18:45 - 2014-12-01 18:45 - 00067632 _____ (Symantec Corporation) C:\WINDOWS\system32\msln.exe

2014-12-01 18:45 - 2014-12-01 18:45 - 00001056 _____ () C:\Users\Pk\Documents\asd.txt

2014-12-01 17:26 - 2014-12-01 18:46 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys

2014-12-01 17:25 - 2014-12-01 17:25 - 00001130 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-12-01 17:25 - 2014-12-01 17:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-12-01 17:25 - 2014-12-01 17:25 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-12-01 17:25 - 2014-12-01 17:25 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-12-01 17:25 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys

2014-12-01 17:25 - 2014-10-01 11:11 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys

2014-12-01 17:25 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys

2014-12-01 17:24 - 2014-12-01 17:24 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Pk\Downloads\mbam-setup-2.0.3.1025.exe

2014-12-01 17:22 - 2014-12-01 17:22 - 00000994 _____ () C:\Users\Pk\Desktop\JRT.txt

2014-12-01 17:12 - 2014-12-01 17:12 - 00000000 ____D () C:\WINDOWS\ERUNT

2014-12-01 17:10 - 2014-12-01 17:10 - 01707646 _____ (Thisisu) C:\Users\Pk\Downloads\JRT.exe

2014-12-01 16:10 - 2014-12-01 16:10 - 00001296 _____ () C:\Users\Pk\Desktop\Revo Uninstaller.lnk

2014-12-01 16:10 - 2014-12-01 16:10 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group

2014-12-01 15:41 - 2014-12-01 19:08 - 00000000 ____D () C:\FRST

2014-11-27 20:12 - 2014-11-27 20:15 - 00000646 _____ () C:\WINDOWS\setupact.log

2014-11-27 20:12 - 2014-11-27 20:12 - 00000000 _____ () C:\WINDOWS\setuperr.log

2014-11-27 18:27 - 2014-11-27 18:27 - 04443312 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe

2014-11-27 18:10 - 2014-11-27 18:44 - 3268147200 _____ () C:\Users\Pk\Desktop\X17-59885.iso

2014-11-25 15:35 - 2014-11-25 15:36 - 00000000 ____D () C:\Users\Pk\Desktop\worldsurvival

2014-11-25 15:33 - 2014-11-25 15:33 - 00000000 ____D () C:\Users\Pk\Desktop\world

2014-11-25 15:24 - 2014-11-25 15:25 - 00525638 _____ () C:\Users\Pk\Desktop\Alpine  Summer Hub.zip

2014-11-25 14:59 - 2014-11-25 15:02 - 09296123 _____ () C:\Users\Pk\Desktop\Minecraft Spawn Hub Map.zip

2014-11-25 13:51 - 2014-11-25 13:51 - 00009949 _____ () C:\Users\Pk\Desktop\ChatManagerPlus.jar

2014-11-23 13:28 - 2014-11-23 13:29 - 00026812 _____ () C:\Users\Pk\Desktop\CTag.jar

2014-11-23 13:06 - 2014-11-23 13:20 - 00053565 _____ () C:\Users\Pk\Desktop\ColoredTags.jar

2014-11-23 11:32 - 2014-11-23 11:32 - 00722782 _____ () C:\Users\Pk\Desktop\PermissionsEx.jar

2014-11-23 11:05 - 2014-11-23 11:05 - 00959115 _____ () C:\Users\Pk\Desktop\Citizens.jar

2014-11-22 19:38 - 2014-11-22 19:38 - 06126536 _____ (Tim Kosse) C:\Users\Pk\Downloads\FileZilla_3.9.0.6_win32-setup [1].exe

2014-11-22 19:38 - 2014-11-22 19:38 - 00789864 _____ ( ) C:\Users\Pk\Downloads\FileZilla_3.9.0.6_win32-setup.exe

2014-11-22 11:00 - 2014-11-20 21:51 - 00714208 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2014-11-22 11:00 - 2014-11-20 21:51 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2014-11-22 10:51 - 2014-11-22 11:01 - 00000000 ___RD () C:\WINDOWS\BrowserChoice

2014-11-21 16:54 - 2014-12-01 16:24 - 00000000 ____D () C:\Users\Pk\Desktop\Rest-Müll

2014-11-21 15:35 - 2014-11-21 15:36 - 92658088 _____ (Oracle Corporation) C:\Users\Pk\Downloads\jre-8u25-windows-x64.exe

2014-11-19 17:07 - 2014-11-10 00:19 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll

2014-11-19 17:07 - 2014-11-10 00:19 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll

2014-11-19 17:07 - 2014-11-10 00:18 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll

2014-11-19 17:07 - 2014-11-10 00:18 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll

2014-11-15 18:59 - 2014-12-01 18:41 - 00014360 _____ () C:\WINDOWS\PFRO.log

2014-11-14 16:51 - 2014-11-14 16:51 - 00000000 ____D () C:\Users\Pk\AppData\Local\Skype

2014-11-14 16:50 - 2014-11-14 16:50 - 00002533 _____ () C:\Users\Public\Desktop\Skype.lnk

2014-11-14 16:50 - 2014-11-14 16:50 - 00000000 ___RD () C:\Program Files (x86)\Skype

2014-11-14 16:50 - 2014-11-14 16:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2014-11-14 16:48 - 2014-11-14 16:49 - 01546856 _____ (Skype Technologies S.A.) C:\Users\Pk\Downloads\SkypeSetup.exe

2014-11-12 20:47 - 2014-12-01 16:22 - 00007630 _____ () C:\WINDOWS\system32\--traceoff

2014-11-12 20:47 - 2014-11-12 20:47 - 00000000 _____ () C:\WINDOWS\system32\--debugoff

2014-11-12 20:46 - 2014-12-01 16:22 - 00000000 ____D () C:\Users\Pk\AppData\Local\Sony

2014-11-12 20:43 - 2014-11-30 19:58 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Sony

2014-11-12 19:55 - 2014-11-12 20:30 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Mine_imator

2014-11-12 19:54 - 2014-12-01 16:21 - 00000000 ____D () C:\Users\Pk\Mine-imator

2014-11-12 19:54 - 2014-11-12 19:54 - 08800436 _____ (David Norgren ) C:\Users\Pk\Downloads\Mine-imator installer 1.0.0 DEMO 5.exe

2014-11-11 20:09 - 2014-09-22 05:38 - 01519488 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll

2014-11-11 20:08 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys

2014-11-11 20:08 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys

2014-11-11 20:08 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys

2014-11-11 20:08 - 2014-09-19 01:16 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll

2014-11-11 20:08 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll

2014-11-11 20:08 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll

2014-11-11 20:07 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe

2014-11-11 20:07 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll

2014-11-11 20:07 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll

2014-11-11 20:07 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll

2014-11-11 20:07 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll

2014-11-11 20:07 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll

2014-11-11 20:07 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll

2014-11-11 20:07 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll

2014-11-11 20:07 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll

2014-11-11 20:07 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll

2014-11-11 20:07 - 2014-09-27 04:38 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll

2014-11-11 20:07 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll

2014-11-11 20:07 - 2014-09-27 04:17 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll

2014-11-11 20:06 - 2014-10-10 02:58 - 00177472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys

2014-11-11 20:06 - 2014-10-10 02:58 - 00027456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys

2014-11-11 20:06 - 2014-10-10 02:44 - 00563976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys

2014-11-11 20:06 - 2014-10-08 08:37 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll

2014-11-11 20:06 - 2014-10-08 08:37 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll

2014-11-11 20:06 - 2014-10-08 08:34 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll

2014-11-11 20:06 - 2014-10-08 08:24 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll

2014-11-11 20:06 - 2014-10-08 07:56 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll

2014-11-11 20:06 - 2014-10-08 07:51 - 00736768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll

2014-11-11 20:06 - 2014-10-08 07:51 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll

2014-11-11 20:06 - 2014-10-08 07:18 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll

2014-11-11 20:06 - 2014-10-08 07:17 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll

2014-11-11 20:06 - 2014-10-08 06:23 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll

2014-11-11 20:00 - 2014-10-18 10:55 - 00055776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe

2014-11-11 20:00 - 2014-10-18 09:09 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll

2014-11-11 20:00 - 2014-10-18 09:09 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll

2014-11-11 20:00 - 2014-10-18 08:25 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll

2014-11-11 20:00 - 2014-10-18 07:50 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll

2014-11-11 20:00 - 2014-10-18 07:38 - 03557376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2014-11-11 20:00 - 2014-10-18 07:27 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe

2014-11-11 20:00 - 2014-10-18 07:26 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll

2014-11-11 20:00 - 2014-10-18 07:23 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll

2014-11-11 20:00 - 2014-10-18 07:23 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll

2014-11-11 20:00 - 2014-10-18 07:21 - 00894976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll

2014-11-11 20:00 - 2014-10-18 07:20 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll

2014-11-11 20:00 - 2014-10-18 07:14 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll

2014-11-11 20:00 - 2014-10-18 07:14 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe

2014-11-11 20:00 - 2014-10-18 07:12 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll

2014-11-11 20:00 - 2014-10-18 07:11 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll

2014-11-11 19:49 - 2014-10-31 06:28 - 25110016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2014-11-11 19:49 - 2014-10-31 04:42 - 19781632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2014-11-11 19:43 - 2014-10-31 04:59 - 14390272 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2014-11-11 19:42 - 2014-10-31 03:30 - 12819456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2014-11-11 19:41 - 2014-10-31 06:06 - 00580096 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2014-11-11 19:41 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll

2014-11-11 19:41 - 2014-10-31 06:05 - 02884096 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2014-11-11 19:41 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll

2014-11-11 19:41 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll

2014-11-11 19:41 - 2014-10-31 05:51 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll

2014-11-11 19:41 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe

2014-11-11 19:41 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe

2014-11-11 19:41 - 2014-10-31 05:50 - 06040064 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2014-11-11 19:41 - 2014-10-31 05:50 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll

2014-11-11 19:41 - 2014-10-31 05:38 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll

2014-11-11 19:41 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll

2014-11-11 19:41 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll

2014-11-11 19:41 - 2014-10-31 05:23 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll

2014-11-11 19:41 - 2014-10-31 05:21 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll

2014-11-11 19:41 - 2014-10-31 05:15 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll

2014-11-11 19:41 - 2014-10-31 05:08 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll

2014-11-11 19:41 - 2014-10-31 05:06 - 00372736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll

2014-11-11 19:41 - 2014-10-31 05:05 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2014-11-11 19:41 - 2014-10-31 05:05 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe

2014-11-11 19:41 - 2014-10-31 05:03 - 02124288 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2014-11-11 19:41 - 2014-10-31 04:45 - 02365440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2014-11-11 19:41 - 2014-10-31 04:44 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll

2014-11-11 19:41 - 2014-10-31 04:32 - 01550336 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2014-11-11 19:41 - 2014-10-31 04:24 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2014-11-11 19:41 - 2014-10-31 04:23 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec

2014-11-11 19:41 - 2014-10-31 04:20 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll

2014-11-11 19:41 - 2014-10-31 04:18 - 02277376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2014-11-11 19:41 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll

2014-11-11 19:41 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll

2014-11-11 19:41 - 2014-10-31 04:12 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll

2014-11-11 19:41 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll

2014-11-11 19:41 - 2014-10-31 04:02 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll

2014-11-11 19:41 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll

2014-11-11 19:41 - 2014-10-31 03:50 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll

2014-11-11 19:41 - 2014-10-31 03:46 - 04298240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2014-11-11 19:41 - 2014-10-31 03:46 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll

2014-11-11 19:41 - 2014-10-31 03:42 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll

2014-11-11 19:41 - 2014-10-31 03:40 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2014-11-11 19:41 - 2014-10-31 03:40 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll

2014-11-11 19:41 - 2014-10-31 03:39 - 02051072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2014-11-11 19:41 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll

2014-11-11 19:41 - 2014-10-31 03:17 - 01892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2014-11-11 19:41 - 2014-10-31 03:13 - 01310208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2014-11-11 19:41 - 2014-10-31 03:11 - 00708096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

2014-11-11 19:40 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wextract.exe

2014-11-11 19:40 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshta.exe

2014-11-11 19:40 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iexpress.exe

2014-11-11 19:40 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\pngfilt.dll

2014-11-11 19:40 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe

2014-11-11 19:40 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\url.dll

2014-11-11 19:40 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll

2014-11-11 19:40 - 2014-10-31 06:05 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec

2014-11-11 19:40 - 2014-10-31 06:04 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll

2014-11-11 19:40 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll

2014-11-11 19:40 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll

2014-11-11 19:40 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\IEAdvpack.dll

2014-11-11 19:40 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\licmgr10.dll

2014-11-11 19:40 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll

2014-11-11 19:40 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx

2014-11-11 19:40 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\inseng.dll

2014-11-11 19:40 - 2014-10-31 05:24 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll

2014-11-11 19:40 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll

2014-11-11 19:40 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\occache.dll

2014-11-11 19:40 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\imgutil.dll

2014-11-11 19:40 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wextract.exe

2014-11-11 19:40 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshta.exe

2014-11-11 19:40 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iexpress.exe

2014-11-11 19:40 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pngfilt.dll

2014-11-11 19:40 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe

2014-11-11 19:40 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\url.dll

2014-11-11 19:40 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll

2014-11-11 19:40 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll

2014-11-11 19:40 - 2014-10-31 04:22 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll

2014-11-11 19:40 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll

2014-11-11 19:40 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll

2014-11-11 19:40 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IEAdvpack.dll

2014-11-11 19:40 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe

2014-11-11 19:40 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\licmgr10.dll

2014-11-11 19:40 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll

2014-11-11 19:40 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inseng.dll

2014-11-11 19:40 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll

2014-11-11 19:40 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx

2014-11-11 19:40 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll

2014-11-11 19:40 - 2014-10-31 03:52 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll

2014-11-11 19:40 - 2014-10-31 03:51 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll

2014-11-11 19:40 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\occache.dll

2014-11-11 19:40 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imgutil.dll

2014-11-11 19:40 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\packager.dll

2014-11-11 19:40 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\packager.dll

2014-11-11 19:40 - 2014-10-17 08:01 - 00789184 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll

2014-11-11 19:40 - 2014-10-17 07:58 - 00602768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll

2014-11-11 19:40 - 2014-10-07 07:28 - 00500016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll

2014-11-11 19:40 - 2014-10-07 07:27 - 00482872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll

2014-11-11 19:40 - 2014-10-07 07:27 - 00394120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll

2014-11-11 19:40 - 2014-10-07 07:27 - 00272248 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe

2014-11-11 19:40 - 2014-10-07 07:27 - 00108432 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll

2014-11-11 19:40 - 2014-10-07 04:34 - 00370424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll

2014-11-11 19:40 - 2014-10-07 04:34 - 00344536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll

2014-11-11 19:40 - 2014-10-07 04:33 - 00424544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll

2014-11-11 19:40 - 2014-10-07 04:30 - 04182016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys

2014-11-11 19:40 - 2014-10-07 02:54 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll

2014-11-11 19:40 - 2014-10-07 02:46 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll

2014-11-11 19:40 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll

2014-11-11 19:40 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll

2014-11-11 19:39 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys

2014-11-11 19:39 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys

2014-11-11 19:39 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS

2014-11-11 19:39 - 2014-09-07 23:08 - 00389176 _____ () C:\WINDOWS\system32\ApnDatabase.xml

2014-11-11 19:39 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll

2014-11-11 19:39 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll

2014-11-11 19:39 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll

2014-11-11 19:39 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll

2014-11-11 19:39 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll

2014-11-11 19:39 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll

2014-11-11 19:39 - 2014-08-31 01:17 - 00148800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS

2014-11-11 19:39 - 2014-08-31 01:15 - 21197152 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2014-11-11 19:39 - 2014-08-30 23:59 - 18723112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2014-11-11 19:39 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMEX.dll

2014-11-11 19:39 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSAPI.dll

2014-11-11 19:39 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll

2014-11-11 19:39 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSAPI.dll

2014-11-11 19:39 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll

2014-11-11 19:39 - 2014-08-28 03:55 - 07484224 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2014-11-11 19:39 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll

2014-11-11 19:39 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll

2014-11-11 19:39 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll

2014-11-11 19:39 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll

2014-11-11 19:39 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll

2014-11-11 19:39 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll

2014-11-11 19:39 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll

2014-11-10 17:30 - 2014-11-10 17:30 - 02332316 _____ () C:\Users\Pk\Downloads\forge-1.5.2-7.8.1.738-installer.jar

2014-11-05 15:42 - 2014-11-05 15:42 - 02936397 _____ () C:\Users\Pk\Downloads\forge-1.7.2-10.12.2.1147-installer (3).jar

2014-11-05 15:40 - 2014-11-05 15:40 - 28917914 _____ () C:\Users\Pk\Downloads\The CraftingFabo Pack V.2.zip

2014-11-05 15:38 - 2014-11-25 19:02 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\.minecraft

2014-11-05 15:35 - 2014-11-05 15:36 - 54655526 _____ () C:\Users\Pk\Downloads\-Quasaro V.5!-.zip

2014-11-02 21:01 - 2014-12-01 15:39 - 00003946 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{51C63146-2830-466D-8742-F26078BC5B00}

2014-11-02 21:01 - 2014-11-02 21:01 - 00000000 __SHD () C:\Users\Pk\AppData\Local\EmieUserList

2014-11-02 21:01 - 2014-11-02 21:01 - 00000000 __SHD () C:\Users\Pk\AppData\Local\EmieSiteList

2014-11-02 14:07 - 2014-08-02 01:18 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll

2014-11-02 13:08 - 2014-08-15 01:36 - 00146752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys

2014-11-02 12:43 - 2014-07-10 05:08 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\lockscreencn.dll

2014-11-02 12:42 - 2014-07-15 19:16 - 03048880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe

2014-11-02 12:42 - 2014-07-15 09:29 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll

2014-11-02 12:42 - 2014-07-15 09:22 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll

2014-11-02 12:42 - 2014-07-15 09:03 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll

2014-11-02 12:38 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe

2014-11-02 12:38 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe

2014-11-02 12:21 - 2014-08-23 08:48 - 02374784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe

2014-11-02 12:21 - 2014-08-23 08:13 - 02084520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe

2014-11-02 12:21 - 2014-08-23 07:10 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll

2014-11-02 12:21 - 2014-08-23 06:32 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll

2014-11-02 12:21 - 2014-08-23 05:33 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll

2014-11-02 12:20 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll

2014-11-02 12:20 - 2014-08-16 05:01 - 01710184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll

2014-11-02 12:20 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll

2014-11-02 12:20 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll

2014-11-02 12:20 - 2014-08-16 04:03 - 01467384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll

2014-11-02 12:20 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll

2014-11-02 12:20 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll

2014-11-02 12:20 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll

2014-11-02 12:20 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll

2014-11-02 12:20 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll

2014-11-02 12:20 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll

2014-11-02 12:20 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll

2014-11-02 12:20 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll

2014-11-02 12:20 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll

2014-11-02 12:20 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll

2014-11-02 12:20 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2014-11-02 12:20 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll

2014-11-02 12:20 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll

2014-11-02 12:20 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll

2014-11-02 12:20 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2014-11-02 12:20 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll

2014-11-02 12:20 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll

2014-11-02 12:20 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll

2014-11-02 12:20 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll

2014-11-02 12:20 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll

2014-11-02 12:20 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll

2014-11-02 12:20 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll

2014-11-02 12:20 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe

2014-11-02 12:20 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll

2014-11-02 12:20 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll

2014-11-02 12:12 - 2014-11-02 12:12 - 00000000 ____D () C:\Users\Pk\voip

2014-11-02 12:04 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll

2014-11-02 12:04 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll

2014-11-02 12:00 - 2014-12-01 16:24 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ICQ

2014-11-02 11:59 - 2014-11-02 11:59 - 35212808 _____ (ICQ) C:\Users\Pk\Downloads\icq_rfrset.exe

2014-11-02 11:57 - 2014-06-02 03:10 - 00423768 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll

2014-11-02 11:57 - 2014-05-31 07:27 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys

2014-11-02 11:57 - 2014-05-31 07:26 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys

2014-11-02 11:57 - 2014-05-31 05:01 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe

2014-11-02 11:57 - 2014-05-31 05:01 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll

2014-11-02 11:57 - 2014-05-31 05:01 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll

2014-11-02 11:57 - 2014-05-27 10:56 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll

2014-11-02 11:57 - 2014-05-27 10:53 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll

2014-11-02 11:54 - 2014-07-12 05:17 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe

2014-11-02 11:52 - 2014-12-01 18:29 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

2014-11-02 11:52 - 2014-11-27 18:28 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater

2014-11-02 11:35 - 2014-11-27 21:33 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Skype

2014-11-02 11:34 - 2014-11-14 16:51 - 00000000 ____D () C:\ProgramData\Skype

2014-11-02 11:21 - 2014-11-02 11:22 - 30742784 _____ (Skype Technologies S.A.) C:\Users\Pk\Downloads\Skype_v6.1.0.129.exe

2014-11-01 15:19 - 2014-11-01 15:19 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Norton Internet Security

2014-11-01 15:15 - 2014-11-01 15:15 - 00001466 _____ () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-11-01 15:13 - 2014-11-01 15:13 - 00000020 ___SH () C:\Users\Pk\ntuser.ini

2014-11-01 15:10 - 2014-12-01 19:05 - 01872863 _____ () C:\WINDOWS\WindowsUpdate.log

2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default\Vorlagen

2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default\Startmenü

2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung

2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen

2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien

2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default\Druckumgebung

2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik

2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder

2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf

2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten

2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten

2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik

2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder

2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf

2014-11-01 15:10 - 2014-11-01 15:10 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten

2014-11-01 15:08 - 2014-11-01 15:08 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat

2014-11-01 14:47 - 2014-11-01 14:47 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk

2014-11-01 14:47 - 2014-11-01 14:47 - 00000000 ____D () C:\Users\Default\AppData\Local\Pokki

2014-11-01 14:47 - 2014-11-01 14:47 - 00000000 ____D () C:\Users\Default User\AppData\Local\Pokki

2014-11-01 14:39 - 2014-11-01 14:39 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate

2014-11-01 14:35 - 2014-12-01 15:29 - 00000000 ____D () C:\Users\Pk

2014-11-01 14:35 - 2014-11-01 15:09 - 00036198 _____ () C:\WINDOWS\diagwrn.xml

2014-11-01 14:35 - 2014-11-01 15:09 - 00036198 _____ () C:\WINDOWS\diagerr.xml

2014-11-01 14:35 - 2014-11-01 15:02 - 00000000 ____D () C:\Users\issam_000

2014-11-01 14:35 - 2014-11-01 15:01 - 00000000 ____D () C:\Users\ouali_000

2014-11-01 14:35 - 2014-11-01 14:38 - 00000000 ___RD () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-11-01 14:35 - 2014-11-01 14:38 - 00000000 ___RD () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2014-11-01 14:35 - 2014-11-01 14:37 - 00000000 ___RD () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-11-01 14:35 - 2014-11-01 14:37 - 00000000 ___RD () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2014-11-01 14:35 - 2014-11-01 14:37 - 00000000 ___RD () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-11-01 14:35 - 2014-11-01 14:37 - 00000000 ___RD () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\Pk\Vorlagen

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\Pk\Startmenü

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\Pk\Netzwerkumgebung

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\Pk\Lokale Einstellungen

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\Pk\Eigene Dateien

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\Pk\Druckumgebung

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\Pk\Documents\Eigene Musik

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\Pk\Documents\Eigene Bilder

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\Pk\AppData\Local\Verlauf

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\Pk\AppData\Local\Anwendungsdaten

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\Pk\Anwendungsdaten

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\ouali_000\Vorlagen

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\ouali_000\Startmenü

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\ouali_000\Netzwerkumgebung

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\ouali_000\Lokale Einstellungen

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\ouali_000\Eigene Dateien

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\ouali_000\Druckumgebung

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\ouali_000\Documents\Eigene Musik

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\ouali_000\Documents\Eigene Bilder

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\ouali_000\AppData\Local\Verlauf

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\ouali_000\AppData\Local\Anwendungsdaten

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\ouali_000\Anwendungsdaten

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\issam_000\Vorlagen

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\issam_000\Startmenü

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\issam_000\Netzwerkumgebung

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\issam_000\Lokale Einstellungen

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\issam_000\Eigene Dateien

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\issam_000\Druckumgebung

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\issam_000\Documents\Eigene Musik

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\issam_000\Documents\Eigene Bilder

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\issam_000\AppData\Local\Verlauf

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\issam_000\AppData\Local\Anwendungsdaten

2014-11-01 14:35 - 2014-11-01 14:35 - 00000000 _SHDL () C:\Users\issam_000\Anwendungsdaten

2014-11-01 14:35 - 2014-09-24 07:18 - 00000369 _____ () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk

2014-11-01 14:35 - 2014-09-24 07:18 - 00000369 _____ () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk

2014-11-01 14:35 - 2014-09-24 07:18 - 00000369 _____ () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk

2014-11-01 14:35 - 2014-09-24 07:18 - 00000369 _____ () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk

2014-11-01 14:35 - 2014-09-24 07:18 - 00000369 _____ () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk

2014-11-01 14:35 - 2014-09-24 07:18 - 00000369 _____ () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk

2014-11-01 14:35 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2014-11-01 14:35 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2014-11-01 14:35 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2014-11-01 14:35 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2014-11-01 14:35 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\ouali_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2014-11-01 14:35 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\issam_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2014-11-01 14:23 - 2014-11-01 14:23 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM

2014-11-01 14:23 - 2014-11-01 14:23 - 00000000 ____D () C:\Program Files\Realtek

2014-11-01 14:22 - 2014-11-01 14:22 - 00000000 ____D () C:\Program Files\Elantech

2014-11-01 14:22 - 2014-11-01 14:22 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies

2014-11-01 14:22 - 2014-11-01 14:22 - 00000000 ____D () C:\Program Files\AMD

2014-11-01 14:22 - 2014-11-01 14:22 - 00000000 _____ () C:\WINDOWS\system32\spu_storage.bin

2014-11-01 14:22 - 2014-11-01 14:22 - 00000000 _____ () C:\WINDOWS\ativpsrm.bin

2014-11-01 13:18 - 2014-11-04 16:48 - 00000000 ___DC () C:\WINDOWS\Panther

2014-11-01 13:18 - 2014-11-01 14:28 - 00000000 __SHD () C:\Recovery

2014-11-01 13:15 - 2014-11-17 18:14 - 00000000 ____D () C:\Windows.old

2014-11-01 13:15 - 2014-11-01 13:15 - 00921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll

2014-11-01 13:15 - 2014-11-01 13:15 - 00626688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll

2014-11-01 13:15 - 2014-11-01 13:15 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll

2014-11-01 13:15 - 2014-11-01 13:15 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\BulkOperationHost.exe

2014-11-01 13:11 - 2014-11-01 13:11 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll

2014-11-01 13:11 - 2014-11-01 13:11 - 00514048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll

2014-11-01 13:09 - 2014-11-01 13:09 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff

2014-11-01 13:05 - 2014-11-01 13:05 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer

2014-11-01 13:05 - 2014-11-01 13:05 - 00000000 ____D () C:\Program Files\Reference Assemblies

2014-11-01 13:05 - 2014-11-01 13:05 - 00000000 ____D () C:\Program Files\MSBuild

2014-11-01 13:05 - 2014-11-01 13:05 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies

2014-11-01 13:05 - 2014-11-01 13:05 - 00000000 ____D () C:\Program Files (x86)\MSBuild

2014-11-01 13:03 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll

2014-11-01 13:03 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll

2014-11-01 13:03 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll

2014-11-01 13:03 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2014-12-01 19:02 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru

2014-12-01 19:00 - 2014-05-20 15:36 - 00001146 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

2014-12-01 19:00 - 2013-11-23 15:53 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1444305084-1481242938-3084423498-1001

2014-12-01 18:47 - 2014-09-24 07:17 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI

2014-12-01 18:47 - 2014-09-24 06:43 - 00765582 _____ () C:\WINDOWS\system32\perfh007.dat

2014-12-01 18:47 - 2014-09-24 06:43 - 00159366 _____ () C:\WINDOWS\system32\perfc007.dat

2014-12-01 18:44 - 2013-09-15 13:20 - 00000000 ____D () C:\ProgramData\boost_interprocess

2014-12-01 18:43 - 2014-05-20 15:36 - 00001142 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

2014-12-01 18:42 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT

2014-12-01 18:41 - 2014-09-24 07:00 - 00000000 ____D () C:\WINDOWS\SKB

2014-12-01 18:41 - 2013-11-23 16:34 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-12-01 17:08 - 2014-05-10 21:03 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-12-01 17:06 - 2014-09-20 15:12 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi

2014-12-01 17:06 - 2013-08-22 14:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI

2014-12-01 17:04 - 2014-05-24 11:13 - 00000000 ____D () C:\AdwCleaner

2014-12-01 16:57 - 2014-06-11 15:44 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Notepad++

2014-12-01 16:54 - 2013-08-06 08:17 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games

2014-12-01 16:52 - 2014-10-14 17:45 - 00000000 ____D () C:\Program Files (x86)\Adobe

2014-12-01 16:52 - 2014-09-20 15:07 - 00000000 ____D () C:\Users\Pk\AppData\Local\LogMeIn Hamachi

2014-12-01 16:52 - 2013-11-23 15:36 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Adobe

2014-12-01 16:45 - 2014-10-15 12:57 - 00000000 ____D () C:\Program Files\Common Files\Adobe

2014-12-01 16:45 - 2014-10-14 18:00 - 00000000 ____D () C:\ProgramData\Adobe

2014-12-01 16:29 - 2013-09-15 12:53 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-12-01 16:28 - 2014-03-16 10:23 - 00000000 ____D () C:\Users\Pk\Documents\CyberLink

2014-12-01 16:28 - 2013-09-15 13:15 - 00000000 ____D () C:\Users\Public\CyberLink

2014-12-01 16:28 - 2013-09-15 13:15 - 00000000 ____D () C:\ProgramData\CyberLink

2014-12-01 16:26 - 2014-10-01 16:56 - 00000059 _____ () C:\Users\Pk\AppData\Local\UserProducts.xml

2014-12-01 16:19 - 2014-05-24 11:33 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\uTorrent

2014-12-01 15:30 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM

2014-11-30 23:04 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp

2014-11-30 16:22 - 2013-11-29 18:33 - 00000000 ____D () C:\Users\Pk\AppData\Local\Adobe

2014-11-28 23:33 - 2013-11-30 17:17 - 00000000 ____D () C:\Users\Pk\AppData\Local\CrashDumps

2014-11-28 20:32 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness

2014-11-28 18:55 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache

2014-11-27 19:03 - 2014-05-20 15:38 - 00002207 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-11-27 18:44 - 2013-12-18 19:29 - 00000215 _____ () C:\Users\Pk\AppData\Roaming\WB.CFG

2014-11-25 19:06 - 2013-08-22 12:22 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll

2014-11-25 19:06 - 2013-08-22 12:22 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe

2014-11-25 19:06 - 2013-08-22 12:17 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll

2014-11-25 19:06 - 2013-08-22 12:17 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll

2014-11-25 19:06 - 2013-08-22 12:17 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll

2014-11-25 19:06 - 2013-08-22 05:05 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll

2014-11-25 19:06 - 2013-08-22 05:03 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe

2014-11-25 19:06 - 2013-08-22 04:59 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll

2014-11-25 19:06 - 2013-08-22 04:56 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll

2014-11-25 19:06 - 2013-08-22 04:56 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe

2014-11-25 19:06 - 2013-08-22 04:51 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll

2014-11-25 19:06 - 2013-08-22 04:51 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll

2014-11-25 19:06 - 2013-08-22 04:51 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll

2014-11-25 19:06 - 2013-08-22 04:51 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll

2014-11-25 15:36 - 2014-06-11 15:21 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\FileZilla

2014-11-24 14:26 - 2014-06-11 15:20 - 00000000 ____D () C:\Program Files (x86)\FileZilla FTP Client

2014-11-22 11:01 - 2013-11-23 15:32 - 00000000 ____D () C:\Users\Pk\AppData\Local\Packages

2014-11-22 10:59 - 2013-08-22 15:44 - 05007824 _____ () C:\WINDOWS\system32\FNTCACHE.DAT

2014-11-22 10:52 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-11-22 10:52 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-11-22 10:52 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender

2014-11-22 10:52 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender

2014-11-22 10:51 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData

2014-11-22 10:51 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel

2014-11-22 10:51 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore

2014-11-21 17:27 - 2013-11-29 18:26 - 00000000 ____D () C:\WINDOWS\system32\MRT

2014-11-21 17:16 - 2013-11-29 18:26 - 103374192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2014-11-21 17:08 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\restore

2014-11-16 13:49 - 2014-10-04 17:42 - 11895013 _____ () C:\Users\Pk\Downloads\WeepCraft 8.1.zip

2014-11-15 12:13 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\spool

2014-11-14 16:55 - 2014-05-20 15:36 - 00004118 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA

2014-11-14 16:55 - 2014-05-20 15:36 - 00003882 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore

2014-11-04 16:51 - 2014-09-20 19:51 - 00000000 ____D () C:\Program Files (x86)\Steam

2014-11-01 15:35 - 2012-07-26 09:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP

2014-11-01 15:20 - 2013-11-23 15:37 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD

2014-11-01 15:13 - 2013-08-06 08:24 - 00003234 _____ () C:\WINDOWS\System32\Tasks\Norton WSC Integration

2014-11-01 15:10 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT

2014-11-01 15:10 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default

2014-11-01 15:09 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Registration

2014-11-01 15:04 - 2013-08-22 16:36 - 00000000 __RSD () C:\WINDOWS\Media

2014-11-01 15:04 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries

2014-11-01 14:50 - 2014-10-17 13:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer

2014-11-01 14:50 - 2014-10-15 16:47 - 00000000 ____D () C:\WINDOWS\de

2014-11-01 14:50 - 2014-10-11 14:31 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software

2014-11-01 14:50 - 2014-09-21 11:13 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wurm Online

2014-11-01 14:50 - 2014-09-20 19:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam

2014-11-01 14:50 - 2014-09-20 15:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi76

2014-11-01 14:50 - 2014-08-14 18:13 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SA-MP Colorpicker

2014-11-01 14:50 - 2014-06-28 10:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elsword_DE

2014-11-01 14:50 - 2014-06-18 16:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Clonk Rage

2014-11-01 14:50 - 2014-05-24 18:38 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client

2014-11-01 14:50 - 2014-05-23 18:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Online Backup

2014-11-01 14:50 - 2014-05-21 13:35 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

2014-11-01 14:50 - 2014-05-21 13:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR

2014-11-01 14:50 - 2014-05-20 16:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-11-01 14:50 - 2014-05-20 15:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2014-11-01 14:50 - 2014-03-22 18:25 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security

2014-11-01 14:50 - 2014-02-19 16:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus

2014-11-01 14:50 - 2013-09-15 13:05 - 00000000 ____D () C:\WINDOWS\SysWOW64\QCA_CR

2014-11-01 14:50 - 2013-09-15 12:55 - 00000000 ____D () C:\WINDOWS\SysWOW64\Atheros_L1e

2014-11-01 14:50 - 2013-09-15 12:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Quick Stream

2014-11-01 14:50 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Help

2014-11-01 14:50 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep

2014-11-01 14:50 - 2013-08-06 08:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero

2014-11-01 14:50 - 2013-08-06 08:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Packard Bell

2014-11-01 14:47 - 2012-07-26 06:37 - 00000000 ____D () C:\Users\Default.migrated

2014-11-01 14:46 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN

2014-11-01 14:46 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep

2014-11-01 14:46 - 2014-09-24 06:43 - 00000000 ____D () C:\WINDOWS\system32\WCN

2014-11-01 14:46 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz

2014-11-01 14:46 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME

2014-11-01 14:46 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns

2014-11-01 14:46 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF

2014-11-01 14:46 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\IME

2014-11-01 14:46 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI

2014-11-01 14:46 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\oobe

2014-11-01 14:43 - 2014-10-10 15:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Netgame

2014-11-01 14:43 - 2014-09-22 19:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer

2014-11-01 14:43 - 2013-08-22 16:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker

2014-11-01 14:43 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar

2014-11-01 14:43 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar

2014-11-01 14:43 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\IME

2014-11-01 14:43 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared

2014-11-01 14:43 - 2013-08-06 08:17 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

2014-11-01 14:43 - 2013-08-06 08:05 - 00000000 ____D () C:\ProgramData\PRICache

2014-11-01 14:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery

2014-11-01 14:38 - 2014-10-10 15:35 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Netgame

2014-11-01 14:38 - 2014-09-20 20:01 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2014-11-01 14:38 - 2014-05-27 14:06 - 00000000 ____D () C:\Users\Pk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EA Games

2014-11-01 14:37 - 2014-05-20 15:24 - 00000000 ____D () C:\Users\ouali_000\AppData\Local\Packages

2014-11-01 14:37 - 2013-11-23 16:21 - 00000000 ____D () C:\Users\issam_000\AppData\Local\Packages

2014-11-01 13:15 - 2013-08-22 16:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template

2014-11-01 13:15 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer

2014-11-01 13:15 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager

2014-11-01 13:15 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera

2014-11-01 13:14 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions

2014-11-01 13:05 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI

2014-11-01 13:05 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\MUI

2014-11-01 11:58 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
 

Some content of TEMP:

====================

C:\Users\Pk\AppData\Local\Temp\DseShExt-x64.dll

C:\Users\Pk\AppData\Local\Temp\DseShExt-x86.dll

C:\Users\Pk\AppData\Local\Temp\icqsetup.exe

C:\Users\Pk\AppData\Local\Temp\Quarantine.exe

C:\Users\Pk\AppData\Local\Temp\SDShelEx-win32.dll

C:\Users\Pk\AppData\Local\Temp\SDShelEx-x64.dll

C:\Users\Pk\AppData\Local\Temp\sqlite3.dll
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2014-12-01 19:01
 

==================== End Of Log ============================

--- --- ---

--- --- ---

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-12-2014

Ran by Hbib at 2014-12-01 19:11:59

Running from C:\Users\Pk\Pictures

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: Norton Internet Security (Enabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}

AS: Norton Internet Security (Enabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: Norton Internet Security (Enabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.239 - Adobe Systems Incorporated)

AMD Catalyst Install Manager (HKLM\...\{9770EA17-52C1-78A7-C3B3-59F0A2091BAE}) (Version: 8.0.911.0 - Advanced Micro Devices, Inc.)

AMD Quick Stream (HKLM\...\{E9EED4AE-682B-4501-9574-D09A21717599}_is1) (Version: 3.4.4.2 - AppEx Networks)

Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Delicious: Emily's Childhood Memories Premium Edition (x32 Version: 3.0.2.32 - WildTangent) Hidden

ETDWare PS/2-X64 11.6.24.203_WHQL (HKLM\...\Elantech) (Version: 11.6.24.203 - ELAN Microelectronic Corp.)

Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.71 - Google Inc.)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden

Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3005 - Packard Bell)

Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.670 - Oracle)

Java 7 Update 71 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417071FF}) (Version: 7.0.710 - Oracle)

Jewel Match 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden

John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden

Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.3008 - Packard Bell)

Magic Academy (x32 Version: 2.2.0.98 - WildTangent) Hidden

Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)

McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.141.11 - McAfee, Inc.)

Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Mozilla Firefox 33.1.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.1.1 (x86 de)) (Version: 33.1.1 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)

MSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) Hidden

MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden

Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{4CA8F973-6377-4ABF-9ED5-CC2323B3C000}) (Version: 12.5.00500 - Nero AG)

Norton Internet Security (HKLM-x32\...\NIS) (Version: 21.6.0.32 - Symantec Corporation)

Norton Online Backup (HKLM-x32\...\{C6173775-C676-4E2A-9232-66E17261E614}) (Version: 2.9.0.19 - Symantec Corporation)

Norton Online Backup (x32 Version: 4.4.1.11 - Symantec Corporation) Hidden

OEM Application Profile (HKLM-x32\...\{276FD4A2-030F-8A24-7DFE-9B1384131BCD}) (Version: 1.00.0000 - Ihr Firmenname)

Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )

OpenAL (HKLM-x32\...\OpenAL) (Version:  - )

Packard Bell Device Fast-lane (HKLM\...\{3F62D2FD-13C1-49A2-8B5D-47623D9460D7}) (Version: 1.00.3013 - Packard Bell)

Packard Bell Games (HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\Pokki_c3e2005ede46d0c9848c79a4f19e87561ed8d0aa) (Version: 1.1.7.42206 - Pokki)

Packard Bell Games (HKU\S-1-5-21-1444305084-1481242938-3084423498-1004\...\Pokki_c3e2005ede46d0c9848c79a4f19e87561ed8d0aa) (Version: 1.1.7.42206 - Pokki)

Packard Bell Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.3005 - Packard Bell)

Packard Bell Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3013 - Packard Bell)

Packard Bell Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3016 - Packard Bell)

paint.net (HKLM\...\{F509C1F4-0029-49F9-B145-A4C4E8DF481A}) (Version: 4.0.3 - dotPDN LLC)

Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Photo Gallery (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden

Pokki (HKU\S-1-5-21-1444305084-1481242938-3084423498-1004\...\Pokki) (Version: 0.263.14.114 - Pokki)

Pokki (HKU\S-1-5-21-1444305084-1481242938-3084423498-1005\...\Pokki) (Version: 0.263.14.114 - Pokki)

Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden

QCA CardReader Driver Installer (HKLM-x32\...\{4E0BC999-655B-421D-87F3-640C6F2BFC11}) (Version: 1.0.1.34 - Qualcomm Inc.)

Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.226 - Qualcomm Atheros Communications)

Qualcomm Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.13 - Qualcomm Atheros Communications Inc.)

Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 11.53 - Qualcomm Atheros)

Razer Game Booster (HKLM-x32\...\Razer Game Booster_is1) (Version: 4.0.68.0 - Razer Inc.)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6865 - Realtek Semiconductor Corp.)

Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

SA-MP Colorpicker 1.1.0 (HKLM-x32\...\SA-MP Colorpicker) (Version: 1.1.0 - GTAvision.com)

Skype™ 6.22 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.22.105 - Skype Technologies S.A.)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

Tales of Lagoona (x32 Version: 2.2.0.110 - WildTangent) Hidden

TeamSpeak 3 Client (HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)

Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden

WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)

WildTangent Games App (x32 Version: 4.0.11.14 - WildTangent) Hidden

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)

WinRAR 5.10 beta 4 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.4 - win.rar GmbH)
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
 

==================== Restore Points  =========================
 

21-11-2014 16:08:46 Windows Update

25-11-2014 12:31:32 Windows Update

28-11-2014 18:28:16 Windows Update

01-12-2014 15:11:25 Revo Uninstaller's restore point - TuneUp Utilities 2014
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2012-07-26 06:26 - 2014-09-26 18:27 - 00000986 ____A C:\WINDOWS\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {2571804A-CE4E-4DF3-9847-B865E5744A6D} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\WSCStub.exe [2014-09-21] (Symantec Corporation)

Task: {44786C93-5644-46E8-8E74-1CB49F9964F5} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-27] (Adobe Systems Incorporated)

Task: {63258523-71B1-4737-8DB2-FAA322AA1E5B} - \PC Speed Maximizer Schedule No Task File <==== ATTENTION

Task: {67847EFA-DE54-4195-A4C7-F6C822765A2C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-20] (Google Inc.)

Task: {7AD0A9AD-21DD-49D3-8BE9-6E1E55EC097C} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-11-21] (Microsoft Corporation)

Task: {7E33E5E2-63C7-4D1D-8ABA-B6B3B6671097} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-20] (Google Inc.)

Task: {8A4B2E02-BEEC-4D6D-BC17-381FD9C992D0} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Packard Bell\Live Updater\liveupdater_agent.exe [2013-01-22] ()

Task: {90B45641-E68C-4061-8F87-0AA2137E55A8} - System32\Tasks\ALU => C:\Program Files (x86)\Packard Bell\Live Updater\updater.exe [2013-02-22] ()

Task: {9D32F6D9-6E61-4C5A-B4E4-C19013021C6C} - System32\Tasks\Power Management => C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [2013-03-15] (Acer Incorporated)

Task: {B8CAB970-822D-4554-A6AF-FBE48DB2F695} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\SymErr.exe [2014-01-30] (Symantec Corporation)

Task: {CB032C39-AA99-4975-A982-16732589A35C} - System32\Tasks\Launch Manager => C:\Program Files\Packard Bell\Packard Bell Launch Manager\LMLauncher.exe [2013-06-18] (Acer Incorporate)

Task: {DEBB4E65-31D2-4D9B-94FA-5E3B19F44C7E} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\SymErr.exe [2014-01-30] (Symantec Corporation)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2013-04-24 15:09 - 2013-04-24 15:09 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll

2013-04-24 15:07 - 2013-04-24 15:07 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll

2013-04-24 15:12 - 2013-04-24 15:12 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe

2014-10-16 10:15 - 2014-10-16 10:15 - 00035328 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll

2014-05-24 17:41 - 2014-05-24 17:41 - 00091648 _____ () C:\Program Files (x86)\FileZilla FTP Client\libgcc_s_sjlj-1.dll

2014-05-24 17:41 - 2014-05-24 17:41 - 00892416 _____ () C:\Program Files (x86)\FileZilla FTP Client\libstdc++-6.dll

2014-05-10 21:03 - 2014-12-01 17:08 - 03649648 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

2014-11-02 13:37 - 2014-11-02 13:38 - 00055808 _____ () C:\Program Files\WindowsApps\Fingersoft.HillClimbRacing_1.19.1.0_x86__r6rtpscs7gwyg\BackgroundTasks.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 

AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT

AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 

==================== EXE Association (whitelisted) =============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== MSCONFIG/TASK MANAGER disabled items =========
 

(Currently there is no automatic fix for this section.)
 

MSCONFIG\Services: GamesAppService => 3

MSCONFIG\Services: gupdate => 2

MSCONFIG\Services: gupdatem => 3

MSCONFIG\Services: Hamachi2Svc => 2

MSCONFIG\Services: LMSvc => 2

MSCONFIG\Services: MozillaMaintenance => 3

MSCONFIG\Services: NAUpdate => 2

MSCONFIG\Services: OverwolfUpdaterService => 3

HKLM\...\StartupApproved\StartupFolder: => "McAfee Security Scan Plus.lnk"

HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui"

HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"

HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "Pokki"

HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "CCleaner Monitoring"

HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "uTorrent"

HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "Overwolf"

HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "EADM"

HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "Skype"

HKU\S-1-5-21-1444305084-1481242938-3084423498-1001\...\StartupApproved\Run: => "icq"
 

========================= Accounts: ==========================
 

Administrator (S-1-5-21-1444305084-1481242938-3084423498-500 - Administrator - Disabled)

Gast (S-1-5-21-1444305084-1481242938-3084423498-501 - Limited - Enabled)

Hbib (S-1-5-21-1444305084-1481242938-3084423498-1001 - Administrator - Enabled) => C:\Users\Pk

issam_000 (S-1-5-21-1444305084-1481242938-3084423498-1004 - Limited - Enabled) => C:\Users\issam_000

ouali_000 (S-1-5-21-1444305084-1481242938-3084423498-1005 - Limited - Enabled) => C:\Users\ouali_000
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================
 

System errors:

=============

Error: (12/01/2014 07:01:36 PM) (Source: DCOM) (EventID: 10010) (User: Wohnzimmer-PC)

Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}
 

Error: (12/01/2014 07:00:58 PM) (Source: DCOM) (EventID: 10010) (User: Wohnzimmer-PC)

Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
 

Error: (12/01/2014 06:42:23 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "LogMeIn Hamachi Tunneling Engine" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (12/01/2014 06:42:19 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "LMIGuardianSvc" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (12/01/2014 06:42:13 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "AppEx Networks Accelerator LWF" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%31
 

Error: (12/01/2014 06:42:13 PM) (Source: APXACC) (EventID: 1003) (User: )

Description: The NDIS6 LWF initialization has failed. (0xC0000001)
 
 

Microsoft Office Sessions:

=========================
 

==================== Memory info =========================== 
 

Processor: AMD E1-2500 APU with Radeon(TM) HD Graphics 

Percentage of memory in use: 67%

Total physical RAM: 1477.01 MB

Available physical RAM: 476.78 MB

Total Pagefile: 4549.01 MB

Available Pagefile: 3145.48 MB

Total Virtual: 131072 MB

Available Virtual: 131071.84 MB
 

==================== Drives ================================
 

Drive c: (Packard Bell) (Fixed) (Total:282.58 GB) (Free:206.16 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (Size: 298.1 GB) (Disk ID: EA4C7CA5)
 

Partition: GPT Partition Type.
 

==================== End Of Log ============================

Und ein weiteres von Norton

Code:

Dateiname: pennybeew.exe

Bedrohungsname: Trojan.Zbot

Vollständiger Pfad: c:\users\pk\appdata\local\pennybee\pennybeew.exe
 

____________________________
 
 
 

Details

Viele Benutzer,* Schon länger bekannt,* Risiko Hoch
 
 
 
 
 

Ursprung

Heruntergeladen von

*Unbekannt
 
 
 
 
 

Aktivität

Ausgeführte Aktionen: 108
 
 
 

____________________________
 
 
 

Auf Computern ab*

22.11.2014 um 19:39:24
 
 

Zuletzt verwendet*

01.12.2014 um 18:46:00
 
 

Start-Element*

Ja
 
 

Gestartet*

Ja
 
 

____________________________
 
 

Viele Benutzer

Tausende Benutzer in der Norton Community haben diese Datei verwendet.
 

Schon länger bekannt

Diese Datei wurde vor mehr als 31 Tagen 2 Monaten  veröffentlicht.
 

Hoch

Das Risiko dieser Datei ist hoch.
 

Art der Bedrohung: Virus. Programme, die andere Programme, Dateien oder Computerbereiche infizieren, indem sie sich einfügen oder anhängen.
 
 
 

____________________________
 
 
 

Quelle: externe Medien
 
 
 

____________________________
 

Dateiaktionen
 

Datei: c:\users\pk\appdata\local\virtualstore\windows\syswow64\ ntos.exe Neustart erforderlich

Datei: c:\windows\syswow64\ ntos.exe Neustart erforderlich

Datei: c:\users\pk\appdata\local\virtualstore\windows\syswow64\wsnpoem\ audio.dll Neustart erforderlich

Datei: c:\windows\syswow64\wsnpoem\ audio.dll Neustart erforderlich

Datei: c:\users\pk\appdata\local\virtualstore\windows\syswow64\wsnpoem\ video.dll Neustart erforderlich

Datei: c:\windows\syswow64\wsnpoem\ video.dll Neustart erforderlich

Datei: c:\users\networkservice\application data\wsnpoem\ audio.dll Keine Aktion erforderlich

Datei: c:\users\networkservice\application data\wsnpoem\ video.dll Keine Aktion erforderlich

Datei: c:\users\pk\appdata\local\virtualstore\windows\syswow64\ wsnpoem Neustart erforderlich

Datei: c:\windows\syswow64\ wsnpoem Neustart erforderlich

Datei: c:\users\localservice\application data\twain_32\ user.ds Keine Aktion erforderlich

Datei: c:\users\networkservice\application data\twain_32\ user.ds Keine Aktion erforderlich

Datei: c:\users\pk\appdata\local\virtualstore\windows\syswow64\twain_32\ local.ds Keine Aktion erforderlich

Datei: c:\windows\syswow64\twain_32\ local.ds Keine Aktion erforderlich

Datei: c:\users\pk\appdata\local\virtualstore\windows\syswow64\twain_32\ user.ds Keine Aktion erforderlich

Datei: c:\windows\syswow64\twain_32\ user.ds Keine Aktion erforderlich

Datei: c:\users\pk\appdata\local\virtualstore\windows\syswow64\lowsec\ local.ds Keine Aktion erforderlich

Datei: c:\windows\syswow64\lowsec\ local.ds Keine Aktion erforderlich

Datei: c:\users\pk\appdata\local\virtualstore\windows\syswow64\lowsec\ user.ds Keine Aktion erforderlich

Datei: c:\windows\syswow64\lowsec\ user.ds Keine Aktion erforderlich

Datei: c:\users\pk\appdata\local\virtualstore\windows\syswow64\lowsec\ user.ds.lll Keine Aktion erforderlich

Datei: c:\windows\syswow64\lowsec\ user.ds.lll Keine Aktion erforderlich

Datei: c:\users\pk\appdata\roaming\lowsec\ local.ds Keine Aktion erforderlich

Datei: c:\users\pk\appdata\roaming\lowsec\ user.ds Keine Aktion erforderlich

Datei: c:\users\pk\appdata\local\virtualstore\windows\syswow64\ sdra64.exe Keine Aktion erforderlich

Datei: c:\windows\syswow64\ sdra64.exe Keine Aktion erforderlich

Datei: c:\users\pk\appdata\local\ sdra64.exe Keine Aktion erforderlich

Datei: c:\users\pk\appdata\local\virtualstore\windows\syswow64\sysproc64\ sysproc32.sys Neustart erforderlich

Datei: c:\windows\syswow64\sysproc64\ sysproc32.sys Neustart erforderlich

Datei: c:\users\pk\appdata\local\virtualstore\windows\syswow64\sysproc64\ sysproc86.sys Neustart erforderlich

Datei: c:\windows\syswow64\sysproc64\ sysproc86.sys Neustart erforderlich

Datei: c:\users\pk\appdata\roaming\microsoft\windows\ghcq8r9\ ghcq8r9.dat Keine Aktion erforderlich

Datei: c:\users\pk\appdata\roaming\microsoft\windows\ghcq8r9\ ghcq8r9.nfo Keine Aktion erforderlich

Datei: c:\users\pk\appdata\roaming\microsoft\windows\ghcq8r9\ ghcq8r9.svr Keine Aktion erforderlich

Datei: c:\users\pk\appdata\local\virtualstore\windows\ bootmgr.dat Keine Aktion erforderlich

Datei: c:\windows\ bootmgr.dat Keine Aktion erforderlich

Datei: c:\users\pk\ data.x.dat Keine Aktion erforderlich

Datei: c:\ data.rar.dat Keine Aktion erforderlich

Datei: c:\ data.x.dat Keine Aktion erforderlich

Datei: c:\users\pk\appdata\local\pennybee\configs\ timers.xml Keine Aktion erforderlich

Ereignis: Laufender Prozess: C:\Users\Pk\AppData\Local\ sdra64.exe Keine Aktion erforderlich

Ereignis: Laufender Prozess: c:\users\pk\appdata\local\pennybee\ pennybeew.exe Beendet

Ereignis: Laufender Prozess: C:\Users\Pk\AppData\Local\virtualstore\windows\syswow64\ sdra64.exe Keine Aktion erforderlich

Ereignis: Laufender Prozess: C:\WINDOWS\SysWOW64\ sdra64.exe Keine Aktion erforderlich

Ereignis: Laufender Prozess: C:\Users\Pk\AppData\Local\ sdra64.exe Reparatur nicht versucht

Ereignis: Laufender Prozess: C:\Users\Pk\AppData\Local\virtualstore\windows\syswow64\ sdra64.exe Reparatur nicht versucht

Ereignis: Laufender Prozess: C:\WINDOWS\SysWOW64\ sdra64.exe Reparatur nicht versucht

Ereignis: Laufender Prozess: c:\users\pk\appdata\local\pennybee\ pennybeew.exe Reparatur nicht versucht

Infizierte Datei: c:\users\pk\appdata\local\pennybee\ pennybeew.exe Keine Aktion erforderlich

Verzeichnis: c:\users\pk\appdata\local\ icsharpcode.net entfernt

Verzeichnis: c:\users\pk\appdata\local\icsharpcode.net\ pennybeew.exe_url_ubgogtsy2oqxpavqftahxghie3hz2d4q Keine Aktion erforderlich

Verzeichnis: c:\users\pk\appdata\local\icsharpcode.net\pennybeew.exe_url_ubgogtsy2oqxpavqftahxghie3hz2d4q\ 1.0.5.0 Keine Aktion erforderlich

____________________________
 

Registrierungsaktionen
 

Registrierungsänderung: HKEY_USERS\S-1-5-19\Software\ gHcq8R9 Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1001\Software\ gHcq8R9 Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-20\Software\ gHcq8R9 Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1004\Software\ gHcq8R9 Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1005\Software\ gHcq8R9 Neustart erforderlich

Registrierungsänderung: HKEY_USERS\.DEFAULT\Software\ gHcq8R9 Neustart erforderlich

Registrierungsänderung: HKEY_CLASSES_ROOT\CLSID\ {DE7CBE17-0368-40E2-8357-1639DA027BAB} Neustart erforderlich

Registrierungsänderung: HKEY_CLASSES_ROOT\ PPT_Test.Application Neustart erforderlich

Registrierungsänderung: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon->Userinit:C:\WINDOWS\SysWOW64\ userinit.exe, Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\ Run->userinit Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1001\Software\Microsoft\Windows\CurrentVersion\ Run->userinit Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\ Run->userinit Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1004\Software\Microsoft\Windows\CurrentVersion\ Run->userinit Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1005\Software\Microsoft\Windows\CurrentVersion\ Run->userinit Neustart erforderlich

Registrierungsänderung: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\ Run->userinit Neustart erforderlich

Registrierungsänderung: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\ CurrentVersion->Win32 Neustart erforderlich

Registrierungsänderung: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ Network->UID Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ Network->UID Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ Network->UID Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ Network->UID Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1004\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ Network->UID Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1005\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ Network->UID Neustart erforderlich

Registrierungsänderung: HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ Network->UID Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\ {19127AD2-394B-70F5-C650-B97867BAA1F7} Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\ {19127AD2-394B-70F5-C650-B97867BAA1F7} Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer\ {19127AD2-394B-70F5-C650-B97867BAA1F7} Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\ {19127AD2-394B-70F5-C650-B97867BAA1F7} Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\ {19127AD2-394B-70F5-C650-B97867BAA1F7} Neustart erforderlich

Registrierungsänderung: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\ {19127AD2-394B-70F5-C650-B97867BAA1F7} Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\ {35106240-D2F0-DB35-716E-127EB80A0299} Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\ {35106240-D2F0-DB35-716E-127EB80A0299} Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer\ {35106240-D2F0-DB35-716E-127EB80A0299} Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\ {35106240-D2F0-DB35-716E-127EB80A0299} Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\ {35106240-D2F0-DB35-716E-127EB80A0299} Neustart erforderlich

Registrierungsänderung: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\ {35106240-D2F0-DB35-716E-127EB80A0299} Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\ {43BF8CD1-C5D5-2230-7BB2-98F22C2B7DC6} Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\ {43BF8CD1-C5D5-2230-7BB2-98F22C2B7DC6} Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer\ {43BF8CD1-C5D5-2230-7BB2-98F22C2B7DC6} Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\ {43BF8CD1-C5D5-2230-7BB2-98F22C2B7DC6} Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1005\Software\Microsoft\Windows\CurrentVersion\Explorer\ {43BF8CD1-C5D5-2230-7BB2-98F22C2B7DC6} Neustart erforderlich

Registrierungsänderung: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\ {43BF8CD1-C5D5-2230-7BB2-98F22C2B7DC6} Neustart erforderlich

Registrierungsänderung: HKEY_CLASSES_ROOT\ Cad.Document Neustart erforderlich

Registrierungsänderung: HKEY_CLASSES_ROOT\ .max, Registrierungsstruktur: 32 bit Neustart erforderlich

Registrierungsänderung: HKEY_CLASSES_ROOT\ .max, Registrierungsstruktur: 64 bit Neustart erforderlich

Registrierungsänderung: HKEY_CLASSES_ROOT\ Matrix.Document, Registrierungsstruktur: 32 bit Neustart erforderlich

Registrierungsänderung: HKEY_CLASSES_ROOT\ Matrix.Document, Registrierungsstruktur: 64 bit Neustart erforderlich

Registrierungsänderung: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ .max Neustart erforderlich

Registrierungsänderung: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ Matrix.Document Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Policies\System\ ->DisableTaskMgr:0 Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1001\Software\Microsoft\Windows\CurrentVersion\Policies\System\ ->DisableTaskMgr:0 Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Policies\System\ ->DisableTaskMgr:0 Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1004\Software\Microsoft\Windows\CurrentVersion\Policies\System\ ->DisableTaskMgr:0 Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1005\Software\Microsoft\Windows\CurrentVersion\Policies\System\ ->DisableTaskMgr:0 Neustart erforderlich

Registrierungsänderung: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\System\ ->DisableTaskMgr:0 Neustart erforderlich

Registrierungsänderung: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ system->EnableLUA:1 Neustart erforderlich

Registrierungsänderung: HKEY_USERS\S-1-5-21-1444305084-1481242938-3084423498-1001\Software\Microsoft\Windows\CurrentVersion\ Run->PennyBee Neustart erforderlich

____________________________
 
 

Dateiabdruck - SHA:

8a4aee9965ae465aebdbf767f23d77afbe33adcefe75928956cd88d06a32dd61

Dateiabdruck - MD5:

Nicht verfügbar