Trojaner-Board - Positive Finds Ads lässt sich nicht deinstallieren

FRST.txt

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-02-2015

Ran by tobimc6 (administrator) on TOBIAS on 13-02-2015 22:58:34

Running from C:\Users\tobimc6\Downloads

Loaded Profiles: tobimc6 (Available profiles: tobimc6)

Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Softex Inc.) C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe

(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

(Microsoft Corporation) C:\Windows\System32\dasHost.exe

(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe

(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe

(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Steganos Software GmbH) C:\Program Files (x86)\OkayFreedom\OkayFreedomService.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe

(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe

(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Intel Corporation) C:\Windows\System32\igfxHK.exe

(Intel Corporation) C:\Windows\System32\igfxTray.exe

(Intel Corporation) C:\Windows\System32\igfxEM.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

() C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe

(Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe

(Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe

(Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe

(Pokki) C:\Users\tobimc6\AppData\Local\Pokki\Engine\HostAppServiceUpdater.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe

(sDesign) C:\Users\tobimc6\Desktop\Tobias\MySig.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.2.0.17\Lightshot.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe

(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe

() C:\Program Files (x86)\WhatPulse2\whatpulse.exe

() C:\Program Files (x86)\WhatPulse2\whatpulse-watchdog.exe

(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Pokki) C:\Users\tobimc6\AppData\Local\Pokki\Engine\HostAppService.exe

(Pokki) C:\Users\tobimc6\AppData\Local\Pokki\Engine\HostAppService.exe

(Pokki) C:\Users\tobimc6\AppData\Local\Pokki\Engine\StartMenuIndexer.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\nacl64.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\nacl64.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(TeamSpeak Systems GmbH) C:\Users\tobimc6\AppData\Local\TeamSpeak 3 Client\ts3client_win64.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7573208 2014-04-22] (Realtek Semiconductor)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2585928 2015-01-16] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart

HKLM\...\Run: [SimplePass] => C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe [3962936 2014-03-28] (Hewlett-Packard)

HKLM\...\Run: [OPBHOBroker] => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe [415288 2014-03-28] (Hewlett-Packard)

HKLM\...\Run: [OPBHOBrokerDesktop] => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe [415288 2014-03-28] (Hewlett-Packard)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2811120 2014-03-13] (Synaptics Incorporated)

HKLM\...\Run: [MouseDriver] => C:\Windows\system32\TiltWheelMouse.exe [241152 2013-04-09] (Pixart Imaging Inc)

HKLM-x32\...\Run: [AccelerometerSysTrayApplet] => C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe [126240 2014-02-13] (Hewlett-Packard Company)

HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe [475448 2014-03-26] (Hewlett-Packard Development Company, L.P.)

HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [843480 2014-10-08] (BlueStack Systems, Inc.)

HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226560 2014-11-18] ()

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [508800 2014-12-17] (Oracle Corporation)

HKLM\...\Policies\Explorer: [NoFolderOptions] 0

HKLM\...\Policies\Explorer: [NoControlPanel] 0

HKU\S-1-5-21-1166193647-1869122605-558368504-1001\...\Run: [Pokki] => "%LOCALAPPDATA%\Pokki\Engine\HostAppServiceUpdater.exe" /LOGON

HKU\S-1-5-21-1166193647-1869122605-558368504-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6482200 2014-09-26] (Piriform Ltd)

HKU\S-1-5-21-1166193647-1869122605-558368504-1001\...\Run: [WhatPulse] => C:\Program Files (x86)\WhatPulse2\whatpulse.exe [3563520 2014-12-08] ()

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ISCTSystray.lnk

ShortcutTarget: ISCTSystray.lnk -> C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe (Intel Corporation)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\LOLRecorder.lnk

ShortcutTarget: LOLRecorder.lnk -> C:\Program Files (x86)\LOLReplay\LOLRecorder.exe (LOL Replay)

Startup: C:\Users\tobimc6\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MySig.lnk

ShortcutTarget: MySig.lnk -> C:\Users\tobimc6\Desktop\Tobias\MySig.exe (sDesign)

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKU\S-1-5-21-1166193647-1869122605-558368504-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.

ProxyServer: [.DEFAULT] => http=127.0.0.1:51984;https=127.0.0.1:51984

ProxyServer: [S-1-5-21-1166193647-1869122605-558368504-1001] => http=127.0.0.1:63529;https=127.0.0.1:63529

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT14/4

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT14/4

HKU\S-1-5-21-1166193647-1869122605-558368504-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT14/4

HKU\S-1-5-21-1166193647-1869122605-558368504-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.giga.de/androidnews/

HKU\S-1-5-21-1166193647-1869122605-558368504-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?ocid=iehp

SearchScopes: HKLM -> {19F23DF0-46C9-4C7B-900A-D0D7D2770637} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}

SearchScopes: HKLM-x32 -> DefaultScope {7F3AD80B-5B2C-4B7F-BD00-459665872AB3} URL = 

SearchScopes: HKU\S-1-5-21-1166193647-1869122605-558368504-1001 -> DefaultScope {7F3AD80B-5B2C-4B7F-BD00-459665872AB3} URL = hxxp://trovi.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1561552&CUI=UN34832767181120822&UM=8

SearchScopes: HKU\S-1-5-21-1166193647-1869122605-558368504-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-1166193647-1869122605-558368504-1001 -> {7F3AD80B-5B2C-4B7F-BD00-459665872AB3} URL = hxxp://trovi.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1561552&CUI=UN34832767181120822&UM=8

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)

BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> C:\Program Files (x86)\Arc\Plugins\ArcPluginIE.dll (Perfect World Entertainment Inc)

BHO-x32: Advanced SystemCare Surfing Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)

Toolbar: HKLM - Hotspot Shield Toolbar - {C95A4E8E-816D-4655-8C79-D736DA1ADB6D} -  No File

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1
 

FireFox:

========

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()

FF Plugin: @java.com/DTPlugin,version=10.76.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.76.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin -> C:\Program Files (x86)\Arc\Plugins\npArcPluginFF.dll (Perfect World Entertainment Inc)

FF Plugin-x32: @raidcall.en/RCplugin -> C:\Users\tobimc6\AppData\Roaming\raidcall\plugins\nprcplugin.dll (Raidcall)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()

FF Plugin HKU\S-1-5-21-1166193647-1869122605-558368504-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\tobimc6\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
 

Chrome: 

=======

CHR HomePage: Default -> hxxp://www.google.de/

CHR StartupUrls: Default -> "https://www.google.com/"

CHR Profile: C:\Users\tobimc6\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Präsentationen) - C:\Users\tobimc6\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-10-24]

CHR Extension: (Google Docs) - C:\Users\tobimc6\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-10-24]

CHR Extension: (Google Drive) - C:\Users\tobimc6\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-24]

CHR Extension: (OkayFreedom) - C:\Users\tobimc6\AppData\Local\Google\Chrome\User Data\Default\Extensions\bckipplcmnfhblnpibpbehenelnkpecd [2014-12-24]

CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\tobimc6\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-10-24]

CHR Extension: (YouTube) - C:\Users\tobimc6\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-24]

CHR Extension: (Adblock Plus) - C:\Users\tobimc6\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-10-24]

CHR Extension: (Google-Suche) - C:\Users\tobimc6\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-24]

CHR Extension: (Google Tabellen) - C:\Users\tobimc6\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-10-24]

CHR Extension: (Calculator) - C:\Users\tobimc6\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhgccgjmilgadndgigplchopkfhfcphj [2014-11-27]

CHR Extension: (Tab Renamer) - C:\Users\tobimc6\AppData\Local\Google\Chrome\User Data\Default\Extensions\kfkmkfkllgjihelfoflhnkaphiobfkcp [2014-10-24]

CHR Extension: (Google Wallet) - C:\Users\tobimc6\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-24]

CHR Extension: (Abios eSports Match Ticker) - C:\Users\tobimc6\AppData\Local\Google\Chrome\User Data\Default\Extensions\opaikbihdaombgcfglhnmpjjpmjmglnm [2015-01-29]

CHR Extension: (Google Mail) - C:\Users\tobimc6\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-24]
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

S3 ArcService; C:\Program Files (x86)\Arc\ArcService.exe [88400 2015-02-09] (Perfect World Entertainment Inc)

S2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2251992 2013-11-13] (Broadcom Corporation.)

R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [409304 2014-10-08] (BlueStack Systems, Inc.)

R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [388824 2014-10-08] (BlueStack Systems, Inc.)

R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [782040 2014-10-08] (BlueStack Systems, Inc.)

R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-01-28] (WildTangent)

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2015-01-16] (NVIDIA Corporation)

R2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2015-01-12] (Hi-Rez Studios) [File not signed]

R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2014-01-13] (Hewlett-Packard Company) [File not signed]

R2 HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe [469304 2014-03-26] (Hewlett-Packard Development Company, L.P.)

R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-11-08] (Intel Corporation)

R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-03-18] (Intel Corporation)

R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)

R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-12-10] (Intel Corporation)

R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [200168 2013-12-04] ()

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)

R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2631456 2014-12-10] (IObit)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1706312 2015-01-16] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21833544 2015-01-16] (NVIDIA Corporation)

R2 OkayFreedom VPN Starter Service; C:\Program Files (x86)\OkayFreedom\OkayFreedomService.exe [324024 2014-12-12] (Steganos Software GmbH)

R2 omniserv; C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe [88064 2014-03-28] (Softex Inc.) [File not signed]

S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1903472 2014-12-30] (Electronic Arts)

S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)

R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [290520 2014-01-08] (Realtek Semiconductor)

R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [190704 2014-03-13] (Synaptics Incorporated)

S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2014-04-02] (Microsoft Corporation)

R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)

R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [170712 2013-11-13] (Broadcom Corporation.)

R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [7532760 2014-08-07] (Broadcom Corporation)

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [122072 2014-10-08] (BlueStack Systems)

S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)

S3 BtwSerialBus; C:\Windows\System32\drivers\BtwSerialBus.sys [150744 2013-09-09] (Broadcom Corporation.)

R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91912 2013-11-12] (CyberLink)

R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2014-12-22] (REALiX(tm))

R3 ikbevent; C:\Windows\system32\DRIVERS\ikbevent.sys [21408 2013-08-13] ()

R3 imsevent; C:\Windows\system32\DRIVERS\imsevent.sys [21920 2013-08-13] ()

R3 INETMON; C:\Windows\System32\Drivers\INETMON.sys [29088 2013-08-13] ()

R3 ISCT; C:\Windows\System32\drivers\ISCTD64.sys [46568 2013-08-13] ()

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-02-13] (Malwarebytes Corporation)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2014-11-21] (Malwarebytes Corporation)

R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)

R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19784 2015-01-16] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)

U5 RTSPER; C:\Windows\System32\Drivers\RTSPER.sys [466136 2014-01-14] (Realsil Semiconductor Corporation)

S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [30448 2014-03-13] (Synaptics Incorporated)

R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [31472 2014-03-13] (Synaptics Incorporated)

R3 taphss6; C:\Windows\system32\DRIVERS\taphss6.sys [42184 2014-05-17] (Anchorfree Inc.)

R3 t_mouse.sys; C:\Windows\system32\DRIVERS\t_mouse.sys [6144 2013-04-09] ()

R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)

R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2013-07-22] (Hewlett-Packard Development Company, L.P.)

U3 McAPExe; No ImagePath

U3 McMPFSvc; No ImagePath

U3 McNaiAnn; No ImagePath

U3 mcpltsvc; No ImagePath

U3 mfecore; No ImagePath

U3 MSK80Service; No ImagePath

S3 X6va028; \??\C:\Windows\SysWOW64\Drivers\X6va028 [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-02-13 22:58 - 2015-02-13 22:59 - 00026196 _____ () C:\Users\tobimc6\Downloads\FRST.txt

2015-02-13 22:57 - 2015-02-13 22:58 - 00000000 ____D () C:\FRST

2015-02-13 22:57 - 2015-02-13 22:57 - 02134016 _____ (Farbar) C:\Users\tobimc6\Downloads\FRST64.exe

2015-02-13 22:44 - 2015-02-13 22:45 - 00000000 ____D () C:\Users\tobimc6\AppData\Roaming\Arc

2015-02-13 22:39 - 2015-02-13 22:39 - 00001624 _____ () C:\Users\Public\Desktop\Neverwinter.lnk

2015-02-13 22:39 - 2015-02-13 22:39 - 00001600 _____ () C:\Users\Public\Desktop\Arc.lnk

2015-02-13 22:39 - 2015-02-13 22:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perfect World Entertainment

2015-02-13 22:37 - 2015-02-13 22:38 - 00996456 _____ (Perfect World Entertainment) C:\Users\tobimc6\Downloads\Neverwinter_ArcSetup (1).exe

2015-02-13 17:49 - 2015-02-13 17:49 - 00000000 ____D () C:\Users\Public\Documents\Arc

2015-02-13 17:46 - 2015-02-13 22:45 - 00000000 ____D () C:\Program Files (x86)\Arc

2015-02-13 17:44 - 2015-02-13 22:38 - 00000000 ____D () C:\Users\tobimc6\Downloads\Log

2015-02-13 17:44 - 2015-01-09 20:42 - 10308984 _____ (Perfect World Entertainment) C:\Users\tobimc6\Downloads\ArcInstall_NW_20150108.exe

2015-02-13 17:43 - 2015-02-13 17:43 - 00996456 _____ (Perfect World Entertainment) C:\Users\tobimc6\Downloads\Neverwinter_ArcSetup.exe

2015-02-13 16:05 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-02-13 16:05 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-02-13 03:32 - 2015-02-13 03:32 - 00000222 _____ () C:\Users\tobimc6\Desktop\ORION Prelude.url

2015-02-12 23:14 - 2015-02-12 23:17 - 00000000 ____D () C:\AdwCleaner

2015-02-12 23:13 - 2015-02-12 23:14 - 02112512 _____ () C:\Users\tobimc6\Downloads\adwcleaner_4.110 (1).exe

2015-02-12 18:16 - 2015-02-13 21:24 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-02-12 18:16 - 2015-02-12 18:16 - 00001121 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2015-02-12 18:16 - 2015-02-12 18:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-02-12 18:16 - 2015-02-12 18:16 - 00000000 ____D () C:\ProgramData\Malwarebytes

2015-02-12 18:16 - 2015-02-12 18:16 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2015-02-12 18:16 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2015-02-12 18:16 - 2014-11-21 06:14 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2015-02-12 18:16 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2015-02-12 18:14 - 2015-02-12 18:14 - 01203488 _____ () C:\Users\tobimc6\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe

2015-02-12 17:07 - 2015-02-12 17:07 - 00047484 _____ () C:\Users\tobimc6\Documents\cc_20150212_170658.reg

2015-02-12 06:15 - 2015-02-12 06:16 - 00000000 ____D () C:\Users\tobimc6\Downloads\SMF

2015-02-12 06:13 - 2015-02-12 06:13 - 00019145 _____ () C:\Users\tobimc6\Downloads\[kickass.to]spore.with.expansions.cracks.patches.torrent

2015-02-12 06:01 - 2015-02-12 06:01 - 00000000 ____D () C:\Users\tobimc6\Downloads\Portal.2.Crack.Fix-SKIDROW

2015-02-12 06:00 - 2015-02-12 06:00 - 00002568 _____ () C:\Users\tobimc6\Downloads\[kickass.to]portal.2.crack.fix.skidrow.torrent

2015-02-12 05:49 - 2015-02-05 22:01 - 32106640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2015-02-12 05:49 - 2015-02-05 22:01 - 24768144 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2015-02-12 05:49 - 2015-02-05 22:01 - 18575880 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll

2015-02-12 05:49 - 2015-02-05 22:01 - 16017040 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2015-02-12 05:49 - 2015-02-05 22:01 - 13294528 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2015-02-12 05:49 - 2015-02-05 22:01 - 10773704 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2015-02-12 05:49 - 2015-02-05 22:01 - 10284872 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

2015-02-12 05:48 - 2015-02-05 22:01 - 25460880 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll

2015-02-12 05:48 - 2015-02-05 22:01 - 20466496 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll

2015-02-12 05:48 - 2015-02-05 22:01 - 17253848 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll

2015-02-12 05:48 - 2015-02-05 22:01 - 14119744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll

2015-02-12 05:48 - 2015-02-05 22:01 - 13208200 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2015-02-12 05:48 - 2015-02-05 22:01 - 10713256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2015-02-12 05:48 - 2015-02-05 22:01 - 03610768 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2015-02-12 05:48 - 2015-02-05 22:01 - 03247248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2015-02-12 05:48 - 2015-02-05 22:01 - 01895240 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434752.dll

2015-02-12 05:48 - 2015-02-05 22:01 - 01557648 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434752.dll

2015-02-12 05:48 - 2015-02-05 22:01 - 00969872 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2015-02-12 05:48 - 2015-02-05 22:01 - 00943760 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2015-02-12 05:48 - 2015-02-05 22:01 - 00929936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2015-02-12 05:48 - 2015-02-05 22:01 - 00908104 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2015-02-12 05:48 - 2015-02-05 22:01 - 00496272 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll

2015-02-12 05:48 - 2015-02-05 22:01 - 00399504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll

2015-02-12 05:48 - 2015-02-05 22:01 - 00390472 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll

2015-02-12 05:48 - 2015-02-05 22:01 - 00345744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll

2015-02-12 05:48 - 2015-02-05 22:01 - 00177624 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll

2015-02-12 05:48 - 2015-02-05 22:01 - 00164752 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll

2015-02-12 05:48 - 2015-02-05 22:01 - 00027441 _____ () C:\Windows\system32\nvinfo.pb

2015-02-12 05:42 - 2015-02-12 16:58 - 00000000 ____D () C:\Users\tobimc6\Downloads\Far Cry 4 - Gold Edition [Update 7] (2014) PC RePack by R.G. Freedom

2015-02-12 05:38 - 2015-02-12 05:40 - 00000535 _____ () C:\Windows\eReg.dat

2015-02-12 05:28 - 2015-02-12 05:28 - 00000000 ____D () C:\ProgramData\Steam

2015-02-12 05:24 - 2015-02-12 05:24 - 00000295 _____ () C:\Users\tobimc6\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Papierkorb.lnk

2015-02-12 05:23 - 2015-02-12 05:52 - 00001213 _____ () C:\Users\tobimc6\Desktop\The Forest.lnk

2015-02-12 05:18 - 2015-02-12 05:18 - 00036584 _____ () C:\Users\tobimc6\Downloads\[kickass.to]far.cry.4.gold.edition.update.7.v.1.7.all.dlc.repack.r.g.freedom.torrent

2015-02-12 05:15 - 2015-02-12 05:30 - 1068963517 ____R () C:\Users\tobimc6\Downloads\SC4 Deluxe.rar

2015-02-12 05:15 - 2015-02-12 05:15 - 00020999 _____ () C:\Users\tobimc6\Downloads\[kickass.to]sim.city.4.deluxe.editon.crack.english.pc.torrent

2015-02-12 05:11 - 2015-02-12 05:21 - 714300945 ____R () C:\Users\tobimc6\Downloads\TheForest_v0.12.zip

2015-02-12 05:11 - 2015-02-12 05:11 - 00014347 _____ () C:\Users\tobimc6\Downloads\[kickass.to]the.forest.v0.12.windows.viruz (2).torrent

2015-02-12 05:11 - 2015-02-12 05:11 - 00000000 ____D () C:\Users\tobimc6\Downloads\Sour Soul Bundle

2015-02-12 05:10 - 2015-02-12 17:15 - 00000000 ____D () C:\Users\tobimc6\AppData\Roaming\uTorrent

2015-02-12 05:10 - 2015-02-12 05:10 - 00000868 _____ () C:\Users\tobimc6\Desktop\µTorrent.lnk

2015-02-12 05:10 - 2015-02-12 05:10 - 00000000 ____D () C:\ProgramData\APN

2015-02-12 05:09 - 2015-02-12 05:09 - 01740880 _____ (BitTorrent Inc.) C:\Users\tobimc6\Downloads\uTorrent.exe

2015-02-12 05:09 - 2015-02-12 05:09 - 00014347 _____ () C:\Users\tobimc6\Downloads\[kickass.to]the.forest.v0.12.windows.viruz (1).torrent

2015-02-12 05:08 - 2015-02-12 05:08 - 00014347 _____ () C:\Users\tobimc6\Downloads\[kickass.to]the.forest.v0.12.windows.viruz.torrent

2015-02-12 04:56 - 2015-02-12 04:56 - 00000000 ____D () C:\Users\tobimc6\Documents\Camtasia Studio

2015-02-12 04:56 - 2015-02-12 04:56 - 00000000 ____D () C:\Users\tobimc6\AppData\Roaming\TechSmith

2015-02-12 04:56 - 2015-02-12 04:56 - 00000000 ____D () C:\Users\tobimc6\AppData\Local\TechSmith

2015-02-12 04:54 - 2015-02-12 04:54 - 00001191 _____ () C:\Users\Public\Desktop\Camtasia Studio 8.lnk

2015-02-12 04:54 - 2015-02-12 04:54 - 00000000 ____D () C:\ProgramData\regid.1995-08.com.techsmith

2015-02-12 04:54 - 2015-02-12 04:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith

2015-02-12 04:54 - 2015-02-12 04:54 - 00000000 ____D () C:\Program Files (x86)\QuickTime

2015-02-12 04:53 - 2015-02-12 04:53 - 00000000 ____D () C:\ProgramData\TechSmith

2015-02-12 04:53 - 2015-02-12 04:53 - 00000000 ____D () C:\Program Files (x86)\TechSmith

2015-02-12 04:50 - 2015-02-12 04:51 - 00140796 _____ () C:\Users\tobimc6\Downloads\CamtasiaStudio8.zip

2015-02-12 04:49 - 2015-02-12 04:52 - 257705272 _____ () C:\Users\tobimc6\Downloads\camtasiade844.exe

2015-02-12 04:40 - 2015-02-12 04:40 - 00002125 _____ () C:\Users\Public\Desktop\Saints Row Gat out of Hell.lnk

2015-02-12 04:39 - 2015-02-12 04:41 - 108122535 _____ () C:\Users\tobimc6\Downloads\Photoshop CS6 13.0.1.1 64 Bit.rar

2015-02-12 04:38 - 2015-02-12 04:46 - 00001997 _____ () C:\Users\tobimc6\Desktop\Photoshop.lnk

2015-02-12 04:38 - 2015-02-12 04:38 - 00003502 _____ () C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-Tobias-tobimc6

2015-02-12 04:38 - 2015-02-12 04:38 - 00000112 ____H () C:\ABF7A91AEAFD

2015-02-12 04:38 - 2015-02-12 04:38 - 00000040 ____H () C:\76C423EA71BC

2015-02-12 04:38 - 2015-02-12 04:38 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe

2015-02-12 04:37 - 2015-02-12 04:38 - 00000000 ____D () C:\ProgramData\Adobe

2015-02-12 04:33 - 2015-02-12 04:34 - 109007566 _____ () C:\Users\tobimc6\Downloads\PhotoShop CS6.rar

2015-02-12 04:28 - 2015-02-12 04:41 - 00000000 ____D () C:\Program Files (x86)\Saints Row Gat out of Hell

2015-02-12 04:24 - 2015-02-12 04:24 - 00000000 ____D () C:\Users\tobimc6\AppData\Roaming\Publish Providers

2015-02-12 04:22 - 2015-02-12 04:22 - 00006088 _____ () C:\Windows\system32\--traceoff

2015-02-12 04:22 - 2015-02-12 04:22 - 00001061 _____ () C:\Users\Public\Desktop\Vegas Pro 13.0.lnk

2015-02-12 04:22 - 2015-02-12 04:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony

2015-02-12 04:22 - 2015-02-12 04:22 - 00000000 _____ () C:\Windows\system32\--debugoff

2015-02-12 04:21 - 2015-02-12 04:24 - 00000000 ____D () C:\Users\tobimc6\AppData\Local\Sony

2015-02-12 04:21 - 2015-02-12 04:21 - 00000000 ____D () C:\ProgramData\Sony

2015-02-12 04:21 - 2015-02-12 04:21 - 00000000 ____D () C:\Program Files\Sony

2015-02-12 04:21 - 2015-02-12 04:21 - 00000000 ____D () C:\Program Files (x86)\Sony

2015-02-12 04:19 - 2015-02-12 04:24 - 00000000 ____D () C:\Users\tobimc6\AppData\Roaming\Sony

2015-02-12 04:16 - 2015-02-12 04:17 - 361795390 _____ () C:\Users\tobimc6\Downloads\Sony Vegas Pro 13.0.zip

2015-02-12 04:11 - 2015-02-12 04:15 - 486135020 _____ () C:\Users\tobimc6\Downloads\Saints Row Gat out of Hell.zip

2015-02-12 04:05 - 2015-02-12 04:05 - 02777920 _____ (Beepa Pty Ltd) C:\Users\tobimc6\Downloads\Fraps_v3.5.9_Setup.exe

2015-02-12 04:05 - 2015-02-12 04:05 - 00000577 _____ () C:\Users\Public\Desktop\Fraps.lnk

2015-02-12 04:05 - 2015-02-12 04:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps

2015-02-12 04:05 - 2015-02-12 04:05 - 00000000 ____D () C:\Fraps

2015-02-12 00:21 - 2015-02-12 00:48 - 00001408 _____ () C:\Users\tobimc6\Desktop\CINEMA 4D.lnk

2015-02-12 00:19 - 2015-02-12 00:48 - 00000000 ____D () C:\Users\tobimc6\AppData\Roaming\MAXON

2015-02-12 00:13 - 2015-02-12 00:17 - 135961374 _____ () C:\Users\tobimc6\Downloads\Cinema 4D R13 by Intel.rar

2015-02-11 23:32 - 2015-02-11 23:32 - 00001772 _____ () C:\Users\tobimc6\Desktop\Stranded Deep.lnk

2015-02-11 23:31 - 2015-02-11 23:31 - 00000000 ____D () C:\Games

2015-02-11 19:57 - 2015-02-11 19:57 - 158422548 _____ () C:\Users\tobimc6\Downloads\Stranded Deep.zip

2015-02-11 15:52 - 2015-01-15 23:43 - 00563504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2015-02-11 15:52 - 2015-01-15 23:43 - 00177984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-02-11 15:52 - 2015-01-14 05:22 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll

2015-02-11 15:52 - 2015-01-14 04:53 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll

2015-02-11 15:52 - 2015-01-13 23:11 - 01762840 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2015-02-11 15:52 - 2015-01-13 23:04 - 01489072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2015-02-11 15:52 - 2015-01-10 10:10 - 07472960 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-02-11 15:52 - 2015-01-10 10:10 - 01733440 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2015-02-11 15:52 - 2015-01-10 09:28 - 01498360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2015-02-11 15:52 - 2015-01-10 08:00 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-02-11 15:52 - 2015-01-10 07:38 - 00359424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2015-02-11 15:52 - 2014-12-09 04:45 - 00393728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll

2015-02-11 15:52 - 2014-12-09 02:56 - 00538624 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll

2015-02-11 15:52 - 2014-10-29 03:51 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-02-11 15:52 - 2014-10-29 03:50 - 00736768 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-02-11 15:52 - 2014-10-29 03:06 - 00736768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2015-02-11 15:52 - 2014-10-29 03:06 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2015-02-11 15:52 - 2014-10-29 03:02 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2015-02-11 15:52 - 2014-10-29 03:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2015-02-11 15:52 - 2014-10-29 02:57 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2015-02-11 15:52 - 2014-10-29 02:31 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-02-11 15:52 - 2014-10-29 02:15 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2015-02-11 15:52 - 2014-10-29 02:15 - 00005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2015-02-11 15:52 - 2014-10-29 02:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2015-02-11 15:52 - 2014-10-29 02:13 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2015-02-11 15:52 - 2014-10-29 02:13 - 00008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2015-02-11 15:51 - 2015-02-04 00:38 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2015-02-11 15:51 - 2015-02-04 00:08 - 00761856 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2015-02-11 15:51 - 2015-02-04 00:08 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2015-02-11 15:51 - 2015-02-03 00:11 - 01098752 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2015-02-11 15:51 - 2015-02-03 00:11 - 00894464 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2015-02-11 15:51 - 2015-02-03 00:11 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2015-02-11 15:51 - 2015-01-19 19:42 - 01487976 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll

2015-02-11 15:51 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-02-11 15:51 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-02-11 15:51 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-02-11 15:51 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-02-11 15:51 - 2015-01-12 03:34 - 00816128 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2015-02-11 15:51 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-02-11 15:51 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-02-11 15:51 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-02-11 15:51 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-02-11 15:51 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2015-02-11 15:51 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-02-11 15:51 - 2015-01-12 02:58 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll

2015-02-11 15:51 - 2015-01-12 02:55 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2015-02-11 15:51 - 2015-01-12 02:51 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2015-02-11 15:51 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-02-11 15:51 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-02-11 15:51 - 2015-01-12 02:48 - 00374272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-02-11 15:51 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-02-11 15:51 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2015-02-11 15:51 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-02-11 15:51 - 2015-01-12 02:34 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2015-02-11 15:51 - 2015-01-12 02:30 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll

2015-02-11 15:51 - 2015-01-12 02:27 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll

2015-02-11 15:51 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-02-11 15:51 - 2015-01-12 02:25 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2015-02-11 15:51 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-02-11 15:51 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-02-11 15:51 - 2015-01-12 02:23 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2015-02-11 15:51 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-02-11 15:51 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-02-11 15:51 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-02-11 15:51 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-02-11 15:51 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-02-11 15:51 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2015-02-11 15:51 - 2015-01-10 09:22 - 04175872 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-02-11 15:51 - 2014-12-19 09:57 - 00788680 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2015-02-11 15:51 - 2014-12-19 09:25 - 00602776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2015-02-11 15:51 - 2014-12-09 00:12 - 00391526 _____ () C:\Windows\system32\ApnDatabase.xml

2015-02-10 21:53 - 2015-02-10 21:53 - 00893594 _____ () C:\Users\tobimc6\Downloads\OptiFine_1.8.1_HD_U_C7.jar

2015-02-09 07:04 - 2015-02-09 07:04 - 00013044 _____ () C:\Users\tobimc6\Documents\cc_20150209_070400.reg

2015-02-06 23:10 - 2015-02-06 23:10 - 00005895 _____ () C:\Users\tobimc6\Downloads\LOL_OPGG_Observer_1733611120_replay (2).bat

2015-02-06 09:35 - 2015-02-06 09:44 - 205843862 _____ () C:\Users\tobimc6\Downloads\Beatmap Pack #391.rar

2015-02-06 00:31 - 2015-02-06 03:34 - 00003732 _____ () C:\Users\tobimc6\FreeYTVDownloader.xml

2015-02-06 00:31 - 2015-02-06 00:31 - 00000008 _____ () C:\Users\tobimc6\FreeYTVDownloader.xml.lck

2015-02-06 00:09 - 2015-02-06 03:34 - 00000758 _____ () C:\Users\tobimc6\updhelper.xml

2015-02-06 00:09 - 2015-02-06 00:09 - 00001459 _____ () C:\Users\Public\Desktop\Free YouTube Download.lnk

2015-02-06 00:09 - 2015-02-06 00:09 - 00000008 _____ () C:\Users\tobimc6\updhelper.xml.lck

2015-02-06 00:09 - 2015-02-06 00:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft

2015-02-06 00:09 - 2015-02-06 00:09 - 00000000 ____D () C:\Program Files (x86)\Free Codec Pack

2015-02-06 00:08 - 2015-02-06 00:09 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft

2015-02-06 00:07 - 2015-02-06 00:09 - 00000000 ____D () C:\Users\tobimc6\AppData\Roaming\DVDVideoSoft

2015-02-06 00:06 - 2015-02-06 00:06 - 03533024 _____ (DVDVideoSoft Ltd. ) C:\Users\tobimc6\Downloads\FreeYouTube53Download.exe

2015-02-06 00:04 - 2015-02-06 00:04 - 06725288 _____ () C:\Users\tobimc6\Downloads\Ultimate Blaze Farm By impulseSV.zip

2015-02-05 23:43 - 2015-02-05 23:44 - 00000000 ____D () C:\Program Files (x86)\Minecraft

2015-02-05 23:43 - 2015-02-05 23:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft

2015-02-05 23:40 - 2015-02-05 23:41 - 02314240 _____ () C:\Users\tobimc6\Downloads\MinecraftInstaller.msi

2015-02-05 22:20 - 2015-02-05 22:20 - 00000004 _____ () C:\Users\tobimc6\Downloads\498316 (1).flv

2015-02-02 22:37 - 2015-02-02 22:54 - 316623516 _____ () C:\Users\tobimc6\Downloads\3523106_hd.flv

2015-02-02 22:36 - 2015-02-08 21:09 - 00000000 ____D () C:\Users\tobimc6\AppData\Roaming\FLV and Media Player

2015-02-02 22:35 - 2015-02-02 22:35 - 00001348 _____ () C:\Users\Public\Desktop\FLV and Media Player.lnk

2015-02-02 22:35 - 2015-02-02 22:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Applian Technologies

2015-02-02 22:35 - 2015-02-02 22:35 - 00000000 ____D () C:\Program Files (x86)\Applian Technologies

2015-02-02 22:34 - 2015-02-02 22:34 - 23750568 _____ () C:\Users\tobimc6\Downloads\FLVPlayer4211Install.exe

2015-02-02 22:16 - 2015-02-02 22:16 - 00000000 ____D () C:\Windows\Sun

2015-02-02 22:15 - 2015-02-02 22:14 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2015-02-02 22:14 - 2015-02-02 22:14 - 00000000 ____D () C:\Program Files (x86)\Java

2015-02-02 22:10 - 2015-02-02 22:10 - 00639400 _____ (Oracle Corporation) C:\Users\tobimc6\Downloads\chromeinstall-8u31.exe

2015-01-31 15:21 - 2015-01-31 15:21 - 00093604 _____ () C:\Users\tobimc6\Documents\cc_20150131_152111.reg

2015-01-31 14:44 - 2015-01-31 14:44 - 00000000 ____D () C:\Users\tobimc6\Documents\Klei

2015-01-27 20:41 - 2015-01-27 20:41 - 00064742 _____ () C:\Users\tobimc6\Documents\ts3_clientui-win64-1407159763-2015-01-27 20_41_12.443293.dmp

2015-01-27 20:27 - 2015-01-27 20:27 - 00000000 ____D () C:\Users\tobimc6\Documents\CyberLink

2015-01-27 20:27 - 2015-01-27 20:27 - 00000000 ____D () C:\Users\tobimc6\AppData\Roaming\CyberLink

2015-01-26 15:47 - 2015-02-02 22:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2015-01-26 15:47 - 2015-01-26 15:46 - 00320424 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2015-01-26 15:47 - 2015-01-26 15:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2015-01-26 15:47 - 2015-01-26 15:46 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2015-01-26 15:47 - 2015-01-26 15:46 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll

2015-01-26 15:46 - 2015-01-26 15:46 - 00000000 ____D () C:\Program Files\Java

2015-01-25 16:36 - 2015-01-25 16:36 - 00000219 _____ () C:\Users\tobimc6\Desktop\Counter-Strike Global Offensive.url

2015-01-25 01:18 - 2015-01-25 01:18 - 00061142 _____ () C:\Users\tobimc6\Documents\ts3_clientui-win64-1407159763-2015-01-25 01_18_32.666797.dmp

2015-01-23 14:14 - 2015-01-10 09:07 - 01895240 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434725.dll

2015-01-23 14:14 - 2015-01-10 09:07 - 01556808 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434725.dll

2015-01-15 07:30 - 2015-01-16 06:53 - 00000731 _____ () C:\Users\tobimc6\Desktop\ATLauncher.lnk

2015-01-15 07:28 - 2015-01-27 15:33 - 00000092 _____ () C:\Users\tobimc6\.atl.properties

2015-01-14 01:03 - 2015-01-14 01:03 - 00001350 _____ () C:\Users\tobimc6\Downloads\BR1_451168197.bat
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-02-13 22:59 - 2014-11-03 18:27 - 00000000 ____D () C:\Users\tobimc6\AppData\Local\whatpulse

2015-02-13 22:53 - 2014-10-26 06:37 - 00000000 ___RD () C:\Users\tobimc6\Desktop\Tobias

2015-02-13 22:48 - 2014-10-24 21:29 - 00001132 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-02-13 22:47 - 2014-10-29 17:35 - 00000406 _____ () C:\Windows\Tasks\update-sys.job

2015-02-13 22:44 - 2014-10-24 09:58 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1166193647-1869122605-558368504-1001

2015-02-13 22:39 - 2014-05-07 09:41 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2015-02-13 22:29 - 2014-10-24 11:41 - 00003930 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{BEEC1C59-833B-4D70-AD37-0DB72CB5D743}

2015-02-13 22:27 - 2014-10-28 09:07 - 01399337 _____ () C:\Windows\WindowsUpdate.log

2015-02-13 22:15 - 2014-10-24 21:46 - 00000000 ____D () C:\Users\tobimc6\AppData\Roaming\.minecraft

2015-02-13 22:02 - 2014-10-28 09:21 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-02-13 22:00 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sru

2015-02-13 21:49 - 2014-10-24 20:20 - 00000000 ____D () C:\Users\tobimc6\AppData\Roaming\TS3Client

2015-02-13 21:16 - 2014-10-29 17:35 - 00000406 _____ () C:\Windows\Tasks\update-S-1-5-21-1166193647-1869122605-558368504-1001.job

2015-02-13 21:16 - 2014-10-24 22:03 - 00000000 ____D () C:\Program Files (x86)\Steam

2015-02-13 21:14 - 2014-10-24 09:54 - 00000000 ____D () C:\Users\tobimc6\Documents\Youcam

2015-02-13 21:12 - 2014-10-24 21:29 - 00001128 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-02-13 21:11 - 2014-10-28 09:06 - 00012933 _____ () C:\Windows\setupact.log

2015-02-13 21:11 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-02-13 21:10 - 2014-11-04 18:54 - 00771002 _____ () C:\Windows\PFRO.log

2015-02-13 21:09 - 2013-08-22 16:20 - 00000000 ____D () C:\Windows\CbsTemp

2015-02-13 02:33 - 2014-10-24 09:51 - 00000000 ____D () C:\Users\tobimc6\AppData\Local\Pokki

2015-02-12 19:27 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\BBI

2015-02-12 18:07 - 2014-10-25 02:59 - 00000000 ____D () C:\ProgramData\AVAST Software

2015-02-12 05:51 - 2014-05-20 12:22 - 00000000 ____D () C:\ProgramData\NVIDIA

2015-02-12 05:41 - 2014-05-20 12:35 - 00000000 ____D () C:\ProgramData\CyberLink

2015-02-12 04:55 - 2014-10-24 09:51 - 00000000 ____D () C:\Users\tobimc6

2015-02-12 04:38 - 2014-10-25 03:24 - 00000000 ____D () C:\Users\tobimc6\AppData\Local\Adobe

2015-02-12 04:38 - 2014-10-24 09:53 - 00000000 ____D () C:\Users\tobimc6\AppData\Roaming\Adobe

2015-02-12 03:34 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness

2015-02-12 03:22 - 2013-08-22 15:44 - 00354344 _____ () C:\Windows\system32\FNTCACHE.DAT

2015-02-12 03:19 - 2014-12-11 20:02 - 00000000 ____D () C:\Windows\system32\appraiser

2015-02-12 03:19 - 2014-10-26 09:16 - 00000000 ___SD () C:\Windows\system32\CompatTel

2015-02-12 03:18 - 2014-10-26 07:53 - 00000000 ____D () C:\Windows\system32\MRT

2015-02-12 03:09 - 2014-10-26 07:53 - 116773704 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-02-10 18:57 - 2014-12-22 09:20 - 00000000 ____D () C:\ProgramData\ProductData

2015-02-10 02:36 - 2014-11-01 20:09 - 00003172 _____ () C:\Windows\System32\Tasks\HPCeeScheduleFortobimc6

2015-02-10 02:36 - 2014-11-01 20:09 - 00000354 _____ () C:\Windows\Tasks\HPCeeScheduleFortobimc6.job

2015-02-09 22:48 - 2014-10-28 11:47 - 00000000 ____D () C:\Program Files (x86)\Hearthstone

2015-02-09 22:47 - 2014-10-28 11:45 - 00000000 ____D () C:\Users\tobimc6\AppData\Local\Battle.net

2015-02-09 06:45 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\NDF

2015-02-08 21:01 - 2014-11-04 14:18 - 00000000 ____D () C:\Users\tobimc6\AppData\Local\osu!

2015-02-08 19:59 - 2014-10-24 14:04 - 00000000 ____D () C:\Users\tobimc6\AppData\Local\CrashDumps

2015-02-08 18:33 - 2014-05-07 18:54 - 00801992 _____ () C:\Windows\system32\perfh007.dat

2015-02-08 18:33 - 2014-05-07 18:54 - 00174994 _____ () C:\Windows\system32\perfc007.dat

2015-02-08 18:33 - 2014-03-18 10:53 - 01924576 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-02-08 18:27 - 2014-10-29 17:36 - 00000000 ____D () C:\Users\tobimc6\Documents\Lightshot

2015-02-08 00:02 - 2014-10-28 11:45 - 00000000 ____D () C:\Program Files (x86)\Battle.net

2015-02-07 20:27 - 2014-11-01 20:09 - 00000166 _____ () C:\Windows\SysWOW64\DOErrors.log

2015-02-06 09:43 - 2014-10-24 21:29 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2015-02-06 09:43 - 2014-10-24 21:29 - 00003868 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2015-02-05 22:02 - 2014-10-28 09:21 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2015-02-05 22:01 - 2014-12-23 20:11 - 02902784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll

2015-02-05 22:01 - 2014-05-20 12:21 - 03299512 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll

2015-02-05 20:07 - 2014-05-20 12:22 - 06861128 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll

2015-02-05 20:07 - 2014-05-20 12:22 - 03517584 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll

2015-02-05 20:07 - 2014-05-20 12:22 - 02558792 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll

2015-02-05 20:07 - 2014-05-20 12:22 - 00935056 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

2015-02-05 20:07 - 2014-05-20 12:22 - 00062792 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll

2015-02-05 20:06 - 2014-05-20 12:22 - 01098384 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll

2015-02-05 20:06 - 2014-05-20 12:22 - 00385168 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll

2015-02-05 20:06 - 2014-05-20 12:22 - 00074896 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll

2015-02-05 13:50 - 2014-05-20 12:22 - 04236870 _____ () C:\Windows\system32\nvcoproc.bin

2015-02-03 20:31 - 2014-10-26 09:23 - 00714720 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-02-03 20:31 - 2014-10-26 09:23 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-01-27 20:48 - 2014-10-25 05:36 - 00000000 ____D () C:\Users\tobimc6\Documents\My Games

2015-01-27 20:27 - 2014-10-24 09:54 - 00000000 ____D () C:\Users\tobimc6\AppData\Local\CyberLink

2015-01-27 20:27 - 2014-05-20 13:15 - 00000000 ____D () C:\Users\Public\Documents\CyberLink

2015-01-25 18:38 - 2014-10-30 20:24 - 00052516 _____ () C:\Windows\DirectX.log

2015-01-16 07:41 - 2014-12-16 18:57 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll

2015-01-16 07:41 - 2014-12-16 18:57 - 01316184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll

2015-01-16 07:41 - 2014-05-20 12:23 - 01514528 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll

2015-01-16 07:41 - 2014-05-20 12:23 - 01278920 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll

2015-01-14 22:45 - 2014-10-28 12:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
 

==================== Files in the root of some directories =======
 

2014-10-24 20:28 - 2014-10-24 20:28 - 0000040 _____ () C:\Program Files (x86)\errorlog.txt

2006-03-29 05:29 - 2008-08-14 19:43 - 0057344 _____ () C:\Program Files (x86)\MySigUpdater.exe

2014-10-24 20:28 - 2014-10-24 22:31 - 0000306 _____ () C:\Program Files (x86)\setup.ini

2014-10-29 17:35 - 2014-10-29 17:35 - 0000003 _____ () C:\Users\tobimc6\AppData\Local\updater.log

2014-10-29 17:35 - 2014-12-18 17:28 - 0000425 _____ () C:\Users\tobimc6\AppData\Local\UserProducts.xml
 

Files to move or delete:

====================

C:\Users\tobimc6\jagex_cl_runescape_LIVE.dat

C:\Users\tobimc6\random.dat
 
 

Some content of TEMP:

====================

C:\Users\tobimc6\AppData\Local\Temp\amazonicon_v10.exe

C:\Users\tobimc6\AppData\Local\Temp\amazoninstallernircmdc.exe

C:\Users\tobimc6\AppData\Local\Temp\AutoRun.exe

C:\Users\tobimc6\AppData\Local\Temp\AutoRunGUI.dll

C:\Users\tobimc6\AppData\Local\Temp\bdfilters.dll

C:\Users\tobimc6\AppData\Local\Temp\BlueStacks_0.9.6.exe

C:\Users\tobimc6\AppData\Local\Temp\COMAP.EXE

C:\Users\tobimc6\AppData\Local\Temp\FreeYouTubeDownload.exe

C:\Users\tobimc6\AppData\Local\Temp\HssInstaller64.exe

C:\Users\tobimc6\AppData\Local\Temp\oct21D1.tmp.exe

C:\Users\tobimc6\AppData\Local\Temp\oct4A5B.tmp.exe

C:\Users\tobimc6\AppData\Local\Temp\oct6C0F.tmp.exe

C:\Users\tobimc6\AppData\Local\Temp\octD3DE.tmp.exe

C:\Users\tobimc6\AppData\Local\Temp\octEAD5.tmp.exe

C:\Users\tobimc6\AppData\Local\Temp\sdan.exe

C:\Users\tobimc6\AppData\Local\Temp\sdapk.exe

C:\Users\tobimc6\AppData\Local\Temp\sdaspwn.exe

C:\Users\tobimc6\AppData\Local\Temp\utt8251.tmp.exe

C:\Users\tobimc6\AppData\Local\Temp\xmlUpdater.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-02-08 15:53
 

==================== End Of Log ============================

--- --- ---

Addition.txt

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-02-2015

Ran by tobimc6 at 2015-02-13 23:01:01

Running from C:\Users\tobimc6\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

µTorrent (HKU\S-1-5-21-1166193647-1869122605-558368504-1001\...\uTorrent) (Version: 3.4.2.38656 - BitTorrent Inc.)

Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.4.144 - Adobe Systems, Inc.)

Arc (HKLM-x32\...\{CED8E25B-122A-4E80-B612-7F99B93284B3}) (Version: 1.0.0.9668 - Perfect World Entertainment)

Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version:  - Bandisoft.com)

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden

BigMacroTool 1.5 (HKLM-x32\...\{620CAD2D-0757-43A9-AA5F-C8D48A1E4D85}_is1) (Version:  - TLProd)

BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.9.4.4079 - BlueStack Systems, Inc.)

BlueStacks Notification Center (HKLM-x32\...\{8DCCC556-265B-478A-8B32-C12DA988BA74}) (Version: 0.9.4.4079 - BlueStack Systems, Inc.)

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version: 6.223.215.5 - Broadcom Corporation)

Broadcom Bluetooth Drivers (HKLM\...\{0A1B4690-E176-4533-8058-939480AEE1D0}) (Version: 12.0.0.9130 - Broadcom Corporation)

Build-a-lot (x32 Version: 2.2.0.98 - WildTangent) Hidden

Building the Great Wall of China Collector's Edition (x32 Version: 3.0.2.48 - WildTangent) Hidden

Camtasia Studio 8 (HKLM-x32\...\{6BED66AA-1DC6-474B-AC70-205CC3A68A39}) (Version: 8.4.4.1859 - TechSmith Corporation)

CCleaner (HKLM\...\CCleaner) (Version: 4.18 - Piriform)

Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.) Hidden

Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.) Hidden

Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.) Hidden

Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)

CPUID HWMonitor 1.25 (HKLM\...\CPUID HWMonitor_is1) (Version:  - )

Crazy Chicken Soccer (x32 Version: 2.2.0.110 - WildTangent) Hidden

CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.6.3728 - CyberLink Corp.)

Cyberlink PhotoDirector (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.4.4824 - CyberLink Corp.)

CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.6.3821 - CyberLink Corp.)

CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.6.3604 - CyberLink Corp.)

CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3.3709 - CyberLink Corp.)

CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 5.0.3.3907 - CyberLink Corp.)

DisableMSDefender (Version: 1.0.0 - Hewlett-Packard Company) Hidden

Don't Starve (HKLM-x32\...\Steam App 219740) (Version:  - Klei Entertainment)

Dota 2 (HKLM-x32\...\Steam App 570) (Version:  - Valve)

Dragon's Prophet (HKLM-x32\...\{C31556D7-F2B9-4787-B223-F7A035067E89}_is1) (Version: 2.2.1473.30 - Infernum Productions AG)

Energy Star (HKLM\...\{465CA2B6-98AF-4E77-BE22-A908C34BB9EC}) (Version: 1.0.9 - Hewlett-Packard Company)

Farm Frenzy (x32 Version: 2.2.0.98 - WildTangent) Hidden

FLV and Media Player 4.2.1.1 (HKLM-x32\...\FLV and Media Player) (Version: 4.2.1.1 - Applian Technologies)

Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )

Free YouTube Download version 3.2.53.128 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.53.128 - DVDVideoSoft Ltd.)

Gameforge Live 2.0.5 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.5 - Gameforge)

Glyph (HKLM-x32\...\Glyph) (Version:  - Trion Worlds, Inc.)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.111 - Google Inc.)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden

Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden

Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)

Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden

Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)

Host App Service (HKU\S-1-5-21-1166193647-1869122605-558368504-1001\...\Pokki) (Version: 0.269.5.375 - Pokki)

HP 3D DriveGuard (HKLM-x32\...\{F90A86C9-7779-47DD-AC06-8EE832C55F55}) (Version: 6.0.18.1 - Hewlett-Packard Company)

HP CoolSense (HKLM-x32\...\{E2C8D0C2-1C97-4C05-939A-5B13A0FE655C}) (Version: 2.20.31 - Hewlett-Packard Company)

HP Documentation (HKLM-x32\...\{082B1425-0F24-43FA-9B64-E8F617B0AD3B}) (Version: 1.1.0.0 - Hewlett-Packard)

HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.7493.4758 - Hewlett-Packard)

HP SimplePass (HKLM-x32\...\InstallShield_{314FAD12-F785-4471-BCE8-AB506642B9A1}) (Version: 8.01.11 - Hewlett-Packard)

HP Support Assistant (HKLM-x32\...\{8C696B4B-6AB1-44BC-9416-96EAC474CABE}) (Version: 7.5.2.12 - Hewlett-Packard Company)

HP System Event Utility (HKLM-x32\...\{DEF23826-DB71-4654-BC00-D5D6C20802EA}) (Version: 1.1.4 - Hewlett-Packard Company)

HP Utility Center (HKLM\...\{36F80C5F-DC0D-4DF4-AF09-DC1867F0EB0A}) (Version: 2.4.4 - Hewlett-Packard Company)

HP Wireless Button Driver (HKLM-x32\...\{30B2D1D8-0A07-4B71-9553-0710C5D31E35}) (Version: 1.1.2.1 - Hewlett-Packard Company)

Inst5675 (Version: 8.01.11 - Softex Inc.) Hidden

Inst5676 (Version: 8.01.11 - Softex Inc.) Hidden

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3496 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.9.1000 - Intel Corporation)

Intel(R) Smart Connect Technology (HKLM\...\{8B4EA042-9E21-46FB-8286-225F4D51CC52}) (Version: 4.2.41.2710 - Intel Corporation)

Java 7 Update 76 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417076FF}) (Version: 7.0.760 - Oracle)

Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)

Jewel Match 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden

League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )

League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden

Lightshot-5.2.0.17 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.2.0.17 - Skillbrains)

LIMBO (HKLM-x32\...\Steam App 48000) (Version:  - Playdead)

LOLReplay (HKLM-x32\...\LOLReplay) (Version: 0.8.9.20 - www.leaguereplays.com)

Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)

Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)

Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)

MySig 1.44.40.1  (HKLM-x32\...\MySig) (Version: 1.44.40.1 - sDesign)

Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)

NVIDIA GeForce Experience 2.2.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.2.2 - NVIDIA Corporation)

NVIDIA Grafiktreiber 347.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.52 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)

OkayFreedom (HKLM-x32\...\{3F3FB10C-7175-4D38-9335-3488B89C12AF}) (Version: 1.4.1 - Steganos Software GmbH)

Origin (HKLM-x32\...\Origin) (Version: 9.5.3.636 - Electronic Arts, Inc.)

ORION: Prelude (HKLM-x32\...\Steam App 104900) (Version:  - Spiral Game Studios)

osu! (HKLM-x32\...\{cdecc544-edb4-441a-85e9-3036ffc2a7ba}) (Version: latest - ppy Pty Ltd)

Path of Exile (HKLM-x32\...\{90A4562F-D4A1-4B65-906D-41F236CF6902}) (Version: 1.2.4.37002 - Grinding Gear Games)

Plants vs. Zombies - Game of the Year (x32 Version: 3.0.2.51 - WildTangent) Hidden

Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden

RaidCall (HKLM-x32\...\RaidCall) (Version: 7.3.6-1.0.12972.94 - raidcall.com)

Ranch Rush 2 - Premium Edition (x32 Version: 2.2.0.98 - WildTangent) Hidden

Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.273.40 - Realtek Semiconductor Corp.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.24.1218.2013 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7231 - Realtek Semiconductor Corp.)

Saints Row Gat out of Hell (HKLM-x32\...\Saints Row Gat out of Hell_is1) (Version: 1.0 - Релиз от R.G. Steamgames)

SHIELD Streaming (Version: 4.0.1000 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 17.12.8 - NVIDIA Corporation) Hidden

Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)

Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 1.0.2531.0 - Hi-Rez Studios)

Start Menu (HKU\S-1-5-21-1166193647-1869122605-558368504-1001\...\Pokki_Start_Menu) (Version: 0.269.5.375 - Pokki)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

Strife (HKLM-x32\...\Strife) (Version:  - S2 Games)

Super Meat Boy (HKLM-x32\...\Steam App 40800) (Version:  - Team Meat)

Surfing Protection (HKLM-x32\...\IObit Surfing Protection_is1) (Version: 1.2 - IObit)

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 18.1.5.2 - Synaptics Incorporated)

Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)

TeamSpeak 3 Client (HKU\S-1-5-21-1166193647-1869122605-558368504-1001\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)

TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.32494 - TeamViewer)

TERA (HKLM-x32\...\{A2F166A0-F031-4E27-A057-C69733219434}_is1) (Version: 28 - Gameforge Productions GmbH)

Terraria (HKLM-x32\...\Steam App 105600) (Version:  - Re-Logic)

Trinklit Supreme (x32 Version: 2.2.0.98 - WildTangent) Hidden

Unity Web Player (HKU\S-1-5-21-1166193647-1869122605-558368504-1001\...\UnityWebPlayer) (Version: 4.6.0f2 - Unity Technologies ApS)

Unturned (HKLM-x32\...\Steam App 304930) (Version:  - Nelson Sexton)

Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden

Vacation Quest™ - Australia (x32 Version: 3.0.2.32 - WildTangent) Hidden

Vegas Pro 13.0 (64-bit) (HKLM\...\{D0360940-CCC6-11E3-B9C6-F04DA23A5C58}) (Version: 13.0.310 - Sony)

Virtual Families (x32 Version: 2.2.0.98 - WildTangent) Hidden

Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden

WhatPulse version 2.4.1 (HKLM-x32\...\{95CC8D5F-90A1-4285-9B2D-8D0FBCFD8D0D}_is1) (Version: 2.4.1 - WhatPulse)

WildTangent Games App für HP (x32 Version: 4.0.11.2 - WildTangent) Hidden

WildTangent-Spiele (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)

WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)

WinRAR 5.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)

Youda Jewel Shop (x32 Version: 3.0.2.51 - WildTangent) Hidden
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

CustomCLSID: HKU\S-1-5-21-1166193647-1869122605-558368504-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
 

==================== Restore Points  =========================
 

29-01-2015 17:00:38 Windows Update

31-01-2015 14:54:05 DirectX wurde installiert

05-02-2015 23:41:57 Installed Minecraft

12-02-2015 03:08:16 Windows Update

13-02-2015 17:45:49 Installiert Arc
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2013-08-22 14:25 - 2015-02-12 04:55 - 00001553 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {0059AC97-50F5-4DE0-9A49-DEA868644CAA} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company)

Task: {178EC412-C43D-411F-A137-2FFB201A4518} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-02-12] (Microsoft Corporation)

Task: {2E2235D0-E2E4-47EC-B015-1F2AA3F6AE00} - System32\Tasks\{72D2B265-7AFD-4904-B856-F553BCA8184A} => pcalua.exe -a C:\Users\tobimc6\AppData\Local\Unity\WebPlayer\Uninstall.exe -c /CurrentUser

Task: {458970BC-E8BC-4F22-8647-274B2507C471} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-24] (Google Inc.)

Task: {490E7082-3977-4378-B569-6BDE3B426D43} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-24] (Google Inc.)

Task: {56E8E625-6603-41C7-8119-AAB9680923FB} - System32\Tasks\{22EEE64C-D840-44A1-A7F3-49CC0EAB5C0D} => pcalua.exe -a "C:\Program Files (x86)\Z8Games\CrossFire\CF_G4box.exe" -d "C:\Program Files (x86)\Z8Games\CrossFire"

Task: {57775F9D-AFB7-489B-B1FD-3FF1E8656E51} - System32\Tasks\Hewlett-Packard\HP CoolSense\HP CoolSense Start at Logon => C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [2013-11-01] (Hewlett-Packard Development Company, L.P.)

Task: {71BDBEAC-84F2-4B53-AD05-728C2D744307} - System32\Tasks\HPCeeScheduleFortobimc6 => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)

Task: {7DD44CDF-36D9-4C1F-92DD-B2A02EDBC99D} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-03-25] ()

Task: {899FD794-B27D-4470-9CBB-76DFD02D1680} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2014-01-13] (Hewlett-Packard Company)

Task: {98462573-5D68-4F2F-9B4B-8FFC8DEE1D26} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2014-10-21] (Hewlett-Packard)

Task: {9A67B9BF-E3CF-4633-9958-A33E27782FD0} - System32\Tasks\Driver Booster SkipUAC (tobimc6) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe

Task: {A7D760E0-5FF2-4493-BE8A-D04147F5137C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2014-01-13] (Hewlett-Packard Company)

Task: {B8DEF522-56D1-4355-A99B-530BFCE9AA61} - System32\Tasks\Uninstaller_SkipUac_Administrator => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe

Task: {BE2192DA-BE72-491B-93D5-1B5B8269AF59} - System32\Tasks\AdobeAAMUpdater-1.0-Tobias-tobimc6 => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe

Task: {C7D76A6E-CAFD-4E99-B691-B8A475F20C00} - System32\Tasks\YCMServiceAgent => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [2014-03-07] (CyberLink Corp.)

Task: {C84A2F11-F1AE-4B71-8269-D9B5AEE6A454} - System32\Tasks\update-S-1-5-21-1166193647-1869122605-558368504-1001 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-03-25] ()

Task: {E0426ECA-E7F2-42EA-849D-CDE36E9178F5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2014-10-21] (Hewlett-Packard)

Task: {EE6FC511-4366-43B3-8379-680CA7317910} - System32\Tasks\Uninstaller_SkipUac_tobimc6 => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe

Task: {F07B103B-48AA-49EC-AB58-67E35858FE18} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-09-26] (Piriform Ltd)

Task: {F10A4340-3408-4FDA-B94A-EEE6AE85CD0D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-05] (Adobe Systems Incorporated)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\HPCeeScheduleFortobimc6.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

Task: C:\Windows\Tasks\Uninstaller_SkipUac_Administrator.job => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe

Task: C:\Windows\Tasks\Uninstaller_SkipUac_tobimc6.job => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe

Task: C:\Windows\Tasks\update-S-1-5-21-1166193647-1869122605-558368504-1001.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

Task: C:\Windows\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
 

==================== Loaded Modules (whitelisted) ==============
 

2014-05-20 12:22 - 2015-02-05 20:07 - 00117576 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2014-03-28 12:31 - 2014-03-28 12:31 - 02110464 _____ () C:\Program Files\Hewlett-Packard\SimplePass\autheng.dll

2014-03-28 12:27 - 2014-03-28 12:27 - 00021504 _____ () C:\Program Files\Hewlett-Packard\SimplePass\cryptodll.dll

2014-03-28 12:27 - 2014-03-28 12:27 - 00035328 _____ () C:\Program Files\Hewlett-Packard\SimplePass\ssplogon.dll

2014-03-28 12:27 - 2014-03-28 12:27 - 00055296 _____ () C:\Program Files\Hewlett-Packard\SimplePass\RandomPass.dll

2014-03-28 12:48 - 2014-03-28 12:48 - 00367504 _____ () C:\Program Files\Hewlett-Packard\SimplePass\mstrpwd.dll

2014-03-28 12:48 - 2014-03-28 12:48 - 00712080 _____ () C:\Program Files\Hewlett-Packard\SimplePass\GraphicalPwd.dll

2013-12-04 07:44 - 2013-12-04 07:44 - 00200168 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe

2013-12-04 07:44 - 2013-12-04 07:44 - 00054760 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\NetworkHeuristic.dll

2013-12-04 07:44 - 2013-12-04 07:44 - 00034792 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTNetMon.dll

2014-03-28 12:36 - 2014-03-28 12:36 - 00065024 _____ () C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe

2014-11-03 18:26 - 2014-12-08 14:55 - 03563520 _____ () C:\Program Files (x86)\WhatPulse2\whatpulse.exe

2014-11-03 18:26 - 2014-09-27 16:24 - 00664064 _____ () C:\Program Files (x86)\WhatPulse2\whatpulse-watchdog.exe

2014-02-28 10:14 - 2014-02-28 10:14 - 00173568 _____ () C:\Users\tobimc6\AppData\Local\TeamSpeak 3 Client\quazip.dll

2014-02-27 15:51 - 2014-02-27 15:51 - 01080832 _____ () C:\Users\tobimc6\AppData\Local\TeamSpeak 3 Client\platforms\qwindows.dll

2014-02-27 15:51 - 2014-02-27 15:51 - 00833024 _____ () C:\Users\tobimc6\AppData\Local\TeamSpeak 3 Client\sqldrivers\qsqlite.dll

2014-08-04 14:43 - 2014-08-04 14:43 - 00102344 _____ () C:\Users\tobimc6\AppData\Local\TeamSpeak 3 Client\soundbackends\directsound_win64.dll

2014-08-04 14:43 - 2014-08-04 14:43 - 00108488 _____ () C:\Users\tobimc6\AppData\Local\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win64.dll

2014-02-27 15:51 - 2014-02-27 15:51 - 00030208 _____ () C:\Users\tobimc6\AppData\Local\TeamSpeak 3 Client\imageformats\qgif.dll

2014-02-27 15:51 - 2014-02-27 15:51 - 00233984 _____ () C:\Users\tobimc6\AppData\Local\TeamSpeak 3 Client\imageformats\qjpeg.dll

2014-08-04 14:46 - 2014-08-04 14:46 - 00563656 _____ () C:\Users\tobimc6\AppData\Local\TeamSpeak 3 Client\plugins\clientquery_plugin.dll

2014-08-04 14:46 - 2014-08-04 14:46 - 00579016 _____ () C:\Users\tobimc6\AppData\Local\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll

2014-02-27 15:51 - 2014-02-27 15:51 - 00159232 _____ () C:\Users\tobimc6\AppData\Local\TeamSpeak 3 Client\accessible\qtaccessiblewidgets.dll

2014-11-03 18:26 - 2013-04-08 09:34 - 00039936 _____ () C:\Program Files (x86)\WhatPulse2\CrashRpt1402.dll

2014-11-03 18:26 - 2014-09-03 22:26 - 00875520 _____ () C:\Program Files (x86)\WhatPulse2\platforms\qwindows.dll

2014-05-20 12:12 - 2013-12-10 16:27 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

2015-01-04 05:06 - 2015-01-04 05:06 - 00569856 _____ () C:\Users\tobimc6\AppData\Local\Pokki\Engine\ppGoogleNaClPluginChrome.dll

2015-01-04 05:06 - 2015-01-04 05:06 - 01400846 _____ () C:\Users\tobimc6\AppData\Local\Pokki\Engine\avcodec-54.dll

2015-01-04 05:06 - 2015-01-04 05:06 - 00151054 _____ () C:\Users\tobimc6\AppData\Local\Pokki\Engine\avutil-51.dll

2015-01-04 05:06 - 2015-01-04 05:06 - 00222734 _____ () C:\Users\tobimc6\AppData\Local\Pokki\Engine\avformat-54.dll

2015-02-06 23:56 - 2015-02-04 10:02 - 01117512 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\libglesv2.dll

2015-02-06 23:56 - 2015-02-04 10:02 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\libegl.dll

2015-02-06 23:56 - 2015-02-04 10:02 - 09170760 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\pdf.dll

2015-02-06 23:56 - 2015-02-04 10:02 - 14965064 _____ () C:\Program Files (x86)\Google\Chrome\Application\40.0.2214.111\PepperFlash\pepflashplayer.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
 

==================== EXE Association (whitelisted) ===============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== Other Areas ============================
 

(Currently there is no automatic fix for this section.)
 

HKU\S-1-5-21-1166193647-1869122605-558368504-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\tobimc6\Pictures\fe76PZi.jpg

DNS Servers: 192.168.2.1
 

==================== MSCONFIG/TASK MANAGER disabled items ==
 

(Currently there is no automatic fix for this section.)
 

HKLM\...\StartupApproved\StartupFolder: => "LOLRecorder.lnk"

HKLM\...\StartupApproved\Run32: => "BlueStacks Agent"

HKU\S-1-5-21-1166193647-1869122605-558368504-1001\...\StartupApproved\Run: => "CCleaner Monitoring"

HKU\S-1-5-21-1166193647-1869122605-558368504-1001\...\StartupApproved\Run: => "Optimizer Pro"

HKU\S-1-5-21-1166193647-1869122605-558368504-1001\...\StartupApproved\Run: => "Browser Infrastructure Helper"

HKU\S-1-5-21-1166193647-1869122605-558368504-1001\...\StartupApproved\Run: => "OKAYFREEDOM_Agent"
 

==================== Accounts: =============================
 

Administrator (S-1-5-21-1166193647-1869122605-558368504-500 - Administrator - Disabled)

Gast (S-1-5-21-1166193647-1869122605-558368504-501 - Limited - Disabled)

tobimc6 (S-1-5-21-1166193647-1869122605-558368504-1001 - Administrator - Enabled) => C:\Users\tobimc6
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (02/13/2015 04:05:29 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 8156
 

Error: (02/13/2015 04:05:29 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 8156
 

Error: (02/13/2015 04:05:29 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (02/13/2015 04:05:28 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 6750
 

Error: (02/13/2015 04:05:28 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 6750
 

Error: (02/13/2015 04:05:28 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (02/13/2015 04:05:27 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 5406
 

Error: (02/13/2015 04:05:27 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 5406
 

Error: (02/13/2015 04:05:27 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (02/13/2015 04:05:25 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 4046
 
 

System errors:

=============

Error: (02/13/2015 09:09:00 PM) (Source: DCOM) (EventID: 10010) (User: Tobias)

Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
 

Error: (02/13/2015 09:09:00 PM) (Source: DCOM) (EventID: 10010) (User: Tobias)

Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
 

Error: (02/13/2015 09:08:49 PM) (Source: DCOM) (EventID: 10010) (User: Tobias)

Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
 

Error: (02/13/2015 09:08:49 PM) (Source: DCOM) (EventID: 10010) (User: Tobias)

Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
 

Error: (02/13/2015 09:08:49 PM) (Source: DCOM) (EventID: 10010) (User: Tobias)

Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
 

Error: (02/13/2015 09:08:49 PM) (Source: DCOM) (EventID: 10010) (User: Tobias)

Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
 

Error: (02/12/2015 08:23:20 PM) (Source: DCOM) (EventID: 10010) (User: Tobias)

Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}
 

Error: (02/12/2015 08:22:49 PM) (Source: DCOM) (EventID: 10010) (User: Tobias)

Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
 

Error: (02/12/2015 06:18:03 AM) (Source: DCOM) (EventID: 10010) (User: Tobias)

Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
 

Error: (02/12/2015 06:18:03 AM) (Source: DCOM) (EventID: 10010) (User: Tobias)

Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
 
 

Microsoft Office Sessions:

=========================

Error: (02/13/2015 04:05:29 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 8156
 

Error: (02/13/2015 04:05:29 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 8156
 

Error: (02/13/2015 04:05:29 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (02/13/2015 04:05:28 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 6750
 

Error: (02/13/2015 04:05:28 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 6750
 

Error: (02/13/2015 04:05:28 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (02/13/2015 04:05:27 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 5406
 

Error: (02/13/2015 04:05:27 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 5406
 

Error: (02/13/2015 04:05:27 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (02/13/2015 04:05:25 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 4046
 
 

CodeIntegrity Errors:

===================================

  Date: 2015-02-12 20:25:34.238

  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 

  Date: 2015-01-23 15:41:09.390

  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Core(TM) i5-4210U CPU @ 1.70GHz

Percentage of memory in use: 51%

Total physical RAM: 8122.15 MB

Available physical RAM: 3940.19 MB

Total Pagefile: 9402.15 MB

Available Pagefile: 4602 MB

Total Virtual: 131072 MB

Available Virtual: 131071.8 MB
 

==================== Drives ================================
 

Drive c: (Windows) (Fixed) (Total:910.62 GB) (Free:648.24 GB) NTFS

Drive d: (RECOVERY) (Fixed) (Total:19.87 GB) (Free:1.97 GB) NTFS ==>[System with boot components (obtained from reading drive)]
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (Size: 931.5 GB) (Disk ID: 9AF1B1A5)
 

Partition: GPT Partition Type.
 

==================== End Of Log ============================