Trojaner-Board
Seite 2 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Adware geht nicht mehr weg (https://www.trojaner-board.de/166848-adware-geht-mehr-weg.html)

Bootsektor 13.05.2015 21:39
Hallo,

wir sind hier aber noch nicht fertig.

Ich brauche die Quarantänen von FRST und auch von Combofix:

Schritt 1
Lade bitte folgendermassen Dateien zur Analyse hoch:
  • Deaktiviere bitte temporär deinen Virenscanner.
  • Suche folgenden Ordner
    C:\FRST\Quarantine
    und packe ihn in ein zip-Archiv (Rechtsklick darauf -> Senden an -> zip-komprimierten Ordner).
    Mache das gleiche mit dem Ordner C:\Qoobox
  • Gehe nun zum Trojaner-Board Upload-Channel:
    1. Drücke auf Durchsuchen..., wähle das erstellte zip-File aus und klicke Öffnen.
    2. Füge den Link deines Themas im Forum in das entsprechende Feld ein.
    3. Gib deinen Benutzernamen ein.
    4. Drücke auf den Button Hochladen.
  • Du kannst jetzt deinen Virenscanner wieder aktivieren.
    (bebilderte Anleitung)

Bitte gib mir Bescheid ob alles funktioniert hat.

Schritt 2
Da der Scan mit Eset sehr gründlich ist, kann er unter Umständen mehrere Stunden dauern :kaffee_reboot:

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset



Schritt 3
Starte noch einmal FRST.
  • Setze den Haken bei addition.txt und drücke auf Scan.
  • Wenn der Scan abgeschlossen ist, werden zwei neue Logfiles FRST.txt und addition.txt erstellt und auf dem Desktop (oder in dem Verzeichnis in dem FRST liegt) gespeichert.
  • Poste den Inhalt dieser Logfiles bitte hier in deinen Thread.

kriegnes 14.05.2015 23:46
Datei: Qoobox.zip empfangen
/usr/bin/zip -P infected -j /var/www/vhosts/trojaner-board.de/upload.trojaner-board.de/files/150515-0030_Qoobox.zip.zip /var/www/vhosts/trojaner-board.de/upload.trojaner-board.de/files/Qoobox.zip
Vorgang erfolgreich abgeschlossen.

Was mit der Quarantäne ist weis ich net das verbindet die ganze zeit und dann bin ich wieder auf der upload seite als ob nichts wäre....

Bootsektor 16.05.2015 21:17
Hallo,

bitte mach mit ESET weiter und schick die Quarantäne von FRST an die in der PN genannte Emailadresse. Danke schön. :)

kriegnes 18.05.2015 15:07
Beim Versuch die Email zu versenden erscheint die Fehlermeldung, dass ein Virus in der Datei drin sei und kann die Email deshalb nicht verschicken.

ESET log
Code:
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=97d652a23e92da44b6f3e28134b5dd9c
# engine=23855
# end=stopped
# remove_checked=false
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-05-15 12:16:11
# local_time=2015-05-15 02:16:11 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Microsoft Security Essentials'
# compatibility_mode=5895 16777213 100 100 43833 72955087 0 0
# scanned=284249
# found=28
# cleaned=0
# scan_time=5969
sh=6AA0E22699B2E8D6C644F2CAAED9561DD6229362 ft=1 fh=9e53404adbf6d918 vn="Variante von Win32/Packed.Komodia.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\HighlightSearches\ABDLL.dll.vir"
sh=59CAF453F6EB81A5436F4426C08219E4696B8FCB ft=1 fh=95ae5d39d3ca602c vn="Variante von Win32/Packed.Komodia.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\HighlightSearches\abenginecert.dll.vir"
sh=754B75E6B64D6B01129361DD40BBD3B61EB4D1C6 ft=1 fh=5515f5076d96fb29 vn="Variante von Win32/Packed.Komodia.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\HighlightSearches\abenginewd.dll.vir"
sh=0119B4C28815D7986DA549D5F7DCA0718A9E3FD8 ft=1 fh=4311010adafd499b vn="Win32/Adware.Flinject.A Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\HighlightSearches\iren3006.exe.vir"
sh=7C9FFF402BD3E0967EA1994704F039C978A30036 ft=1 fh=7093a7af9f3c7615 vn="Variante von Win32/Adware.SpeedingUpMyPC.AA Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\{8dcfec69-c822-d91f-8dcf-fec69c82b1a7}\hqghumeaylnlf.exe.vir"
sh=9DF4DA7C5E6B0F903D0089740DF8D339356E9CB5 ft=1 fh=9317db8c4b5b6436 vn="Variante von Win32/Adware.SpeedingUpMyPC.AA Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\{b3779435-d2fb-f000-b377-79435d2f50d7}\hqghumeaylnlf.exe.vir"
sh=6142578CD21CF27FD3C1B3A4F0626DE9FC6DF275 ft=1 fh=a0b7e9a9340cf144 vn="Variante von Win32/PriceGong.C evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Dima\AppData\Local\SmartWeb\SmartWebApp.exe.vir"
sh=AA2BA9D6607589A3C93D1C760E3512EC8E61F968 ft=1 fh=f770637cdb111250 vn="Variante von Win32/PriceGong.C evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Dima\AppData\Local\SmartWeb\SmartWebHelper.exe.vir"
sh=080016256C564232771ED8D6EFFC94ECAECAD316 ft=1 fh=bfc1d533ef10baf8 vn="Variante von Win32/PriceGong.C evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Dima\AppData\Local\SmartWeb\swhk.dll.vir"
sh=F2251A7A386675FE43902ADC0525D33672C8BB84 ft=1 fh=e069b17bc5bd2e6a vn="Variante von Win32/Adware.ConvertAd.KZ.gen Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Dima\AppData\Roaming\VOPackage\VOPackage.exe.vir"
sh=D4012273C077EEEDF4A6C4F279786592C2E201D3 ft=1 fh=6836990575352a04 vn="Variante von Win32/LiMo.C evtl. unerwünschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\ProgramData\ftb\2B1271501F484093BC99F8F09A5A45B3\setup.exe"
sh=F5107D4315C28F6E6A0F94CAD8414D0EE4B1B1E5 ft=1 fh=36723e1fa1633655 vn="Variante von Win32/Amonetize.BQ evtl. unerwünschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\ProgramData\ftb\4B433EA0269E47EB9186355DC4745B8A\setup.exe"
sh=3ADED111BA4C362714DD914AF2875D25390F9141 ft=1 fh=960d55973837187f vn="Variante von Win32/Adware.ConvertAd.KZ.gen Anwendung" ac=I fn="C:\FRST\Quarantine\C\ProgramData\ftb\570D30CFBBDF42EFACCB327FF20674D4\setup.exe"
sh=A9D3F228ED9EDD2242CC2E4BDD5B69B58D0AFE04 ft=1 fh=3b648e5b93f58a71 vn="Mehrere Bedrohungen" ac=I fn="C:\FRST\Quarantine\C\ProgramData\ftb\6E2EBD621A1E49DD8229E6DAC7C1DEB2\setup.exe"
sh=9DF4DA7C5E6B0F903D0089740DF8D339356E9CB5 ft=1 fh=9317db8c4b5b6436 vn="Variante von Win32/Adware.SpeedingUpMyPC.AA Anwendung" ac=I fn="C:\FRST\Quarantine\C\ProgramData\ftb\702C9DD2E977440A95283AEFA128CD53\setup.exe"
sh=F5107D4315C28F6E6A0F94CAD8414D0EE4B1B1E5 ft=1 fh=36723e1fa1633655 vn="Variante von Win32/Amonetize.BQ evtl. unerwünschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\ProgramData\ftb\B2EC72C460CC45379FB4C7789F5BD863\setup.exe"
sh=C8C51B42447C016140F47030806AD6287D540104 ft=1 fh=198f1fb36780ad4e vn="Variante von Win32/Adware.AddLyrics.EA Anwendung" ac=I fn="C:\FRST\Quarantine\C\ProgramData\ftb\F56A424BA6F54F68B35D6F1BBEBD6746\setup.exe"
sh=0EC30DF742984EA79C49703698D5777B1BCC6F42 ft=1 fh=e77459d120c26c8f vn="Variante von Win32/TrojanDownloader.Adcurl.A Trojaner" ac=I fn="C:\FRST\Quarantine\C\Windows\ftb.exe.xBAD"
sh=3FEEFD8CC7F6D589B33FA64855EE31DE6A16155D ft=1 fh=d6488b6ad0e8f119 vn="Variante von Win32/Packed.Themida evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\Elite Dekaron\bin\dkac.dll"
sh=5F0546EC86F3E27F0EEC4D5D5451EDC630907654 ft=1 fh=c71c001198f425ea vn="Win32/InstalleRex.M evtl. unerwünschte Anwendung" ac=I fn="C:\ProgramData\InstallMate\{5258BA33-D688-4688-A463-9EAA89BB98C5}\Custom.dll"
sh=04628B6C2B3C3C9CDE646EA8D07B34A01DD15103 ft=1 fh=4d63aec76d89f9c0 vn="Win32/AnyProtect.G evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Dima\AppData\Local\nsb44A6.tmp.vir"
sh=6FA07C781B84151C862A8FACD4E2EFB7D8DA3E2F ft=1 fh=ebf21d2230451b57 vn="Win32/AnyProtect.G evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Dima\AppData\Local\nsnE864.tmp.vir"
sh=C2CDF8F5CF8F8E7082898326B1937499DEFA5C63 ft=1 fh=4dce2de995a2d99e vn="Variante von Win32/Toolbar.CrossRider.CB evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Dima\AppData\Roaming\DXbbq3U.exe.vir"
sh=C2CDF8F5CF8F8E7082898326B1937499DEFA5C63 ft=1 fh=4dce2de995a2d99e vn="Variante von Win32/Toolbar.CrossRider.CB evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Dima\AppData\Roaming\IT7Lg6DU6w1.exe.vir"
sh=085F77EB21E35804B09F1D53064AD09EDFD30F3B ft=1 fh=30d6e2c5eecf8f6b vn="Variante von Win32/Toolbar.CrossRider.CB evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe.vir"
sh=085F77EB21E35804B09F1D53064AD09EDFD30F3B ft=1 fh=30d6e2c5eecf8f6b vn="Variante von Win32/Toolbar.CrossRider.CB evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe.vir"
sh=5F0546EC86F3E27F0EEC4D5D5451EDC630907654 ft=1 fh=c71c001198f425ea vn="Win32/InstalleRex.M evtl. unerwünschte Anwendung" ac=I fn="C:\Users\All Users\InstallMate\{5258BA33-D688-4688-A463-9EAA89BB98C5}\Custom.dll"
sh=C8B611780FD4EE9B510FC9C0C97CEC764A76945C ft=1 fh=c71c001193833c7f vn="Variante von Win32/Adware.ConvertAd.MW Anwendung" ac=I fn="C:\Users\Dima\AppData\Local\00000000-1431094823-0000-0000-D43D7EBF2FB4\bnsz7EBE.exe"
ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=97d652a23e92da44b6f3e28134b5dd9c
# end=init
# utc_time=2015-05-18 11:34:18
# local_time=2015-05-18 01:34:18 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
Update Finalize
Updated modules version: 23900
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=97d652a23e92da44b6f3e28134b5dd9c
# end=updated
# utc_time=2015-05-18 11:34:54
# local_time=2015-05-18 01:34:54 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=97d652a23e92da44b6f3e28134b5dd9c
# engine=23900
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-05-18 01:55:33
# local_time=2015-05-18 03:55:33 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Microsoft Security Essentials'
# compatibility_mode=5895 16777213 100 100 352195 73263449 0 0
# scanned=471266
# found=29
# cleaned=28
# scan_time=8438
sh=5F0546EC86F3E27F0EEC4D5D5451EDC630907654 ft=1 fh=c71c001198f425ea vn="Win32/InstalleRex.M evtl. unerwünschte Anwendung" ac=I fn="C:\Users\All Users\InstallMate\{5258BA33-D688-4688-A463-9EAA89BB98C5}\Custom.dll"
sh=6AA0E22699B2E8D6C644F2CAAED9561DD6229362 ft=1 fh=9e53404adbf6d918 vn="Variante von Win32/Packed.Komodia.A verdächtige Datei (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\HighlightSearches\ABDLL.dll.vir"
sh=59CAF453F6EB81A5436F4426C08219E4696B8FCB ft=1 fh=95ae5d39d3ca602c vn="Variante von Win32/Packed.Komodia.A verdächtige Datei (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\HighlightSearches\abenginecert.dll.vir"
sh=754B75E6B64D6B01129361DD40BBD3B61EB4D1C6 ft=1 fh=5515f5076d96fb29 vn="Variante von Win32/Packed.Komodia.A verdächtige Datei (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\HighlightSearches\abenginewd.dll.vir"
sh=0119B4C28815D7986DA549D5F7DCA0718A9E3FD8 ft=1 fh=4311010adafd499b vn="Win32/Adware.Flinject.A Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\HighlightSearches\iren3006.exe.vir"
sh=7C9FFF402BD3E0967EA1994704F039C978A30036 ft=1 fh=7093a7af9f3c7615 vn="Variante von Win32/Adware.SpeedingUpMyPC.AA Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\ProgramData\{8dcfec69-c822-d91f-8dcf-fec69c82b1a7}\hqghumeaylnlf.exe.vir"
sh=9DF4DA7C5E6B0F903D0089740DF8D339356E9CB5 ft=1 fh=9317db8c4b5b6436 vn="Variante von Win32/Adware.SpeedingUpMyPC.AA Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\ProgramData\{b3779435-d2fb-f000-b377-79435d2f50d7}\hqghumeaylnlf.exe.vir"
sh=6142578CD21CF27FD3C1B3A4F0626DE9FC6DF275 ft=1 fh=a0b7e9a9340cf144 vn="Variante von Win32/PriceGong.C evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Dima\AppData\Local\SmartWeb\SmartWebApp.exe.vir"
sh=AA2BA9D6607589A3C93D1C760E3512EC8E61F968 ft=1 fh=f770637cdb111250 vn="Variante von Win32/PriceGong.C evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Dima\AppData\Local\SmartWeb\SmartWebHelper.exe.vir"
sh=080016256C564232771ED8D6EFFC94ECAECAD316 ft=1 fh=bfc1d533ef10baf8 vn="Variante von Win32/PriceGong.C evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Dima\AppData\Local\SmartWeb\swhk.dll.vir"
sh=3C6235A2342A488A2DD67B6E26F7BE3A84C43292 ft=0 fh=0000000000000000 vn="Win32/AnyProtect.H evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Dima\AppData\Roaming\AnyProtectEx\swf\swfDpu.swf.vir"
sh=F2251A7A386675FE43902ADC0525D33672C8BB84 ft=1 fh=e069b17bc5bd2e6a vn="Variante von Win32/Adware.ConvertAd.KZ.gen Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Dima\AppData\Roaming\VOPackage\VOPackage.exe.vir"
sh=D4012273C077EEEDF4A6C4F279786592C2E201D3 ft=1 fh=6836990575352a04 vn="Variante von Win32/LiMo.C evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\FRST\Quarantine\C\ProgramData\ftb\2B1271501F484093BC99F8F09A5A45B3\setup.exe"
sh=F5107D4315C28F6E6A0F94CAD8414D0EE4B1B1E5 ft=1 fh=36723e1fa1633655 vn="Variante von Win32/Amonetize.BQ evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\FRST\Quarantine\C\ProgramData\ftb\4B433EA0269E47EB9186355DC4745B8A\setup.exe"
sh=3ADED111BA4C362714DD914AF2875D25390F9141 ft=1 fh=960d55973837187f vn="Variante von Win32/Adware.ConvertAd.KZ.gen Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\FRST\Quarantine\C\ProgramData\ftb\570D30CFBBDF42EFACCB327FF20674D4\setup.exe"
sh=A9D3F228ED9EDD2242CC2E4BDD5B69B58D0AFE04 ft=1 fh=3b648e5b93f58a71 vn="Mehrere Bedrohungen (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\FRST\Quarantine\C\ProgramData\ftb\6E2EBD621A1E49DD8229E6DAC7C1DEB2\setup.exe"
sh=9DF4DA7C5E6B0F903D0089740DF8D339356E9CB5 ft=1 fh=9317db8c4b5b6436 vn="Variante von Win32/Adware.SpeedingUpMyPC.AA Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\FRST\Quarantine\C\ProgramData\ftb\702C9DD2E977440A95283AEFA128CD53\setup.exe"
sh=F5107D4315C28F6E6A0F94CAD8414D0EE4B1B1E5 ft=1 fh=36723e1fa1633655 vn="Variante von Win32/Amonetize.BQ evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\FRST\Quarantine\C\ProgramData\ftb\B2EC72C460CC45379FB4C7789F5BD863\setup.exe"
sh=C8C51B42447C016140F47030806AD6287D540104 ft=1 fh=198f1fb36780ad4e vn="Variante von Win32/Adware.AddLyrics.EA Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\FRST\Quarantine\C\ProgramData\ftb\F56A424BA6F54F68B35D6F1BBEBD6746\setup.exe"
sh=0EC30DF742984EA79C49703698D5777B1BCC6F42 ft=1 fh=e77459d120c26c8f vn="Variante von Win32/TrojanDownloader.Adcurl.A Trojaner (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\FRST\Quarantine\C\Windows\ftb.exe.xBAD"
sh=3FEEFD8CC7F6D589B33FA64855EE31DE6A16155D ft=1 fh=d6488b6ad0e8f119 vn="Variante von Win32/Packed.Themida verdächtige Datei (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Program Files (x86)\Elite Dekaron\bin\dkac.dll"
sh=5F0546EC86F3E27F0EEC4D5D5451EDC630907654 ft=1 fh=c71c001198f425ea vn="Win32/InstalleRex.M evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\ProgramData\InstallMate\{5258BA33-D688-4688-A463-9EAA89BB98C5}\Custom.dll"
sh=04628B6C2B3C3C9CDE646EA8D07B34A01DD15103 ft=1 fh=4d63aec76d89f9c0 vn="Win32/AnyProtect.G evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Qoobox\Quarantine\C\Users\Dima\AppData\Local\nsb44A6.tmp.vir"
sh=6FA07C781B84151C862A8FACD4E2EFB7D8DA3E2F ft=1 fh=ebf21d2230451b57 vn="Win32/AnyProtect.G evtl. unerwünschte Anwendung (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Qoobox\Quarantine\C\Users\Dima\AppData\Local\nsnE864.tmp.vir"
sh=C2CDF8F5CF8F8E7082898326B1937499DEFA5C63 ft=1 fh=4dce2de995a2d99e vn="Variante von Win32/Toolbar.CrossRider.CB evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Qoobox\Quarantine\C\Users\Dima\AppData\Roaming\DXbbq3U.exe.vir"
sh=C2CDF8F5CF8F8E7082898326B1937499DEFA5C63 ft=1 fh=4dce2de995a2d99e vn="Variante von Win32/Toolbar.CrossRider.CB evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Qoobox\Quarantine\C\Users\Dima\AppData\Roaming\IT7Lg6DU6w1.exe.vir"
sh=085F77EB21E35804B09F1D53064AD09EDFD30F3B ft=1 fh=30d6e2c5eecf8f6b vn="Variante von Win32/Toolbar.CrossRider.CB evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Qoobox\Quarantine\C\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe.vir"
sh=085F77EB21E35804B09F1D53064AD09EDFD30F3B ft=1 fh=30d6e2c5eecf8f6b vn="Variante von Win32/Toolbar.CrossRider.CB evtl. unerwünschte Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Qoobox\Quarantine\C\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe.vir"
sh=C8B611780FD4EE9B510FC9C0C97CEC764A76945C ft=1 fh=c71c001193833c7f vn="Variante von Win32/Adware.ConvertAd.MW Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Dima\AppData\Local\00000000-1431094823-0000-0000-D43D7EBF2FB4\bnsz7EBE.exe"
FRST.txt

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16-05-2015 02
Ran by Dima (administrator) on DIMAS-PC on 18-05-2015 16:07:39
Running from C:\Users\Dima\Desktop\Downloads
Loaded Profiles: Dima (Available profiles: Dima)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 2\creator-ws.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Akamai Technologies, Inc.) C:\Users\Dima\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\Dima\AppData\Local\Akamai\netsession_win.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe
(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11785832 2011-03-10] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKLM\...\Run: [3D BubbleSound] => "C:\Program Files\BubbleSound\3D BubbleSound.exe"
HKLM-x32\...\Run: [SuiteTray] => C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [340848 2011-04-02] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisTecPMMUpdate] => C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [408432 2011-03-29] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisUpdate] => C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [202608 2011-03-29] (Egis Technology Inc.)
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [297280 2011-04-24] (NTI Corporation)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55568 2015-03-25] (Raptr, Inc)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-11-17] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-03-30] (LogMeIn Inc.)
HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [933888 2012-08-21] (AVM Berlin)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2888384 2015-05-15] (Valve Corporation)
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3619160 2015-01-28] (Electronic Arts)
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Dima\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-30] (Akamai Technologies, Inc.)
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Dxtory Update Checker 2.0] => C:\Program Files (x86)\ExKode\Dxtory2.0\UpdateChecker.exe [93696 2010-10-17] (Dxtory Software)
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [\\DIMA-PC\EPSON SX210 Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFDE.EXE [223232 2008-11-05] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [GoogleChromeAutoLaunch_74AB638E1E27FA41128D672CA46F567E] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [812872 2015-05-05] (Google Inc.)
HKU\S-1-5-18\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2014-08-23]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll No File
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
BHO-x32: PDF Architect Helper -> {691B33B0-B86E-47F3-81C7-56E4FE3B929C} -> C:\Program Files (x86)\PDF Architect 2\creator-ie-helper.dll [2014-10-10] (pdfforge GmbH)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28] (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation)
Toolbar: HKLM-x32 - PDF Architect Toolbar - {DEEB13D7-CEA9-45FB-B77C-E039BEC85221} - C:\Program Files (x86)\PDF Architect 2\creator-ie-plugin.dll [2014-10-10] (pdfforge GmbH)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll [2014-09-01] (EA Digital Illusions CE AB)
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-28] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2013-09-08] (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-11-12] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll [2014-06-24] (Adobe Systems, Inc.)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2014-11-21] (DivX, LLC)
FF Plugin-x32: @esn/npbattlelog,version=2.3.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll No File
FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll [2014-09-01] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-28] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation)
FF Plugin-x32: @mcafee.com/SAFFPlugin -> C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll No File
FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2013-09-08] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npnxgameEU.dll [2014-11-12] (Nexon)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-04-30] (Adobe Systems Inc.)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll [2014-10-10] (pdfforge GmbH)
FF Plugin HKU\S-1-5-21-221738678-620704744-704572411-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Dima\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-04-30] (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF HKLM-x32\...\Firefox\Extensions: [pdf_architect_2_conv@pdfarchitect.org] - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension
FF Extension: PDF Architect 2 Creator - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension [2015-02-26]
FF HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]

Chrome:
=======
CHR Profile: C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-05-08]
CHR Extension: (Google Docs) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-05-08]
CHR Extension: (Google Drive) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-05-08]
CHR Extension: (YouTube) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-05-08]
CHR Extension: (Google Search) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-05-08]
CHR Extension: (Google Sheets) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-05-08]
CHR Extension: (Bookmark Manager) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-08]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-08]
CHR Extension: (Google Wallet) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR Extension: (Gmail) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-08]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [237864 2015-03-21] (EasyAntiCheat Ltd)
R2 GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [29696 2011-05-26] (Acer Incorporated) [File not signed]
U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2015-02-16] (Hi-Rez Studios) [File not signed]
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-03-30] (LogMeIn, Inc.)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
R2 MSMQ; C:\Windows\system32\mqsvc.exe [9216 2009-07-14] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5128944 2013-11-19] (INCA Internet Co., Ltd.) [File not signed]
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256832 2011-04-24] (NTI Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910640 2015-03-02] (Electronic Arts)
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-10-10] (pdfforge GmbH)
R2 PDF Architect 2 Creator; C:\Program Files (x86)\PDF Architect 2\creator-ws.exe [738856 2014-10-10] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-10-10] (pdfforge GmbH)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-10-11] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
S3 Survarium-Steam Update Service; C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium_service.exe [76408 2015-04-03] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2012-04-25] (AVM Berlin)
R3 fwlanusb5; C:\Windows\System32\DRIVERS\fwlanusb5.sys [982784 2012-08-21] (AVM GmbH)
S3 GameKB; C:\Windows\System32\drivers\GameKB.sys [27648 2012-05-11] () [File not signed]
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
R3 MQAC; C:\Windows\System32\drivers\mqac.sys [189440 2009-07-14] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-05-17] (Anchorfree Inc.)
S3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2014-07-02] (SplitmediaLabs Limited)
S3 BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [X]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 hxsyol; \??\C:\AeriaGames\AuraKingdom\avital\hxsy64.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-15 00:32 - 2015-05-15 00:32 - 00000000 ____D () C:\Program Files (x86)\ESET
2015-05-15 00:22 - 2015-05-15 00:22 - 04602089 _____ () C:\Users\Dima\Desktop\Qoobox.zip
2015-05-15 00:21 - 2015-05-15 00:21 - 17490277 _____ () C:\Users\Dima\Desktop\Quarantine.zip
2015-05-14 20:34 - 2015-05-14 20:34 - 00006567 _____ () C:\Users\Dima\AppData\Local\recently-used.xbel
2015-05-14 16:26 - 2015-05-14 20:34 - 00000000 ____D () C:\Users\Dima\AppData\Local\gtk-2.0
2015-05-13 16:31 - 2015-05-13 16:31 - 00000000 ____D () C:\Users\Dima\AppData\Local\Unity
2015-05-13 14:46 - 2015-05-13 14:46 - 00002936 _____ () C:\Users\Dima\Desktop\mbam.txt
2015-05-12 22:45 - 2015-05-12 22:45 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2015-05-12 19:49 - 2015-05-12 19:49 - 00021496 _____ () C:\Users\Dima\Desktop\Tobi ist sexy.odt
2015-05-12 13:00 - 2015-05-12 13:00 - 00030620 _____ () C:\ComboFix.txt
2015-05-12 12:46 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2015-05-12 12:46 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2015-05-12 12:46 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-05-12 12:46 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-05-12 12:46 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-05-12 12:46 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2015-05-12 12:46 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2015-05-12 12:46 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2015-05-12 12:41 - 2015-05-12 13:00 - 00000000 ____D () C:\Qoobox
2015-05-12 12:40 - 2015-05-12 12:59 - 00000000 ____D () C:\Windows\erdnt
2015-05-12 12:38 - 2015-05-12 12:39 - 05623215 ____R (Swearware) C:\Users\Dima\Desktop\ComboFix.exe
2015-05-11 23:00 - 2015-05-15 13:24 - 00000000 ____D () C:\Users\Dima\AppData\Local\Eclipse
2015-05-11 22:03 - 2015-05-18 16:07 - 00000000 ____D () C:\FRST
2015-05-11 20:59 - 2015-05-11 20:59 - 00000000 ____D () C:\Users\Dima\AppData\Local\My Games
2015-05-10 18:44 - 2015-05-10 18:44 - 00000000 ____D () C:\Users\Dima\AppData\Local\Origin
2015-05-10 18:05 - 2015-05-10 18:05 - 00001117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-05-10 18:05 - 2015-05-10 18:05 - 00001105 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-05-10 18:05 - 2015-05-10 18:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-05-10 16:15 - 2015-05-10 16:15 - 00000000 ____D () C:\Users\Dima\AppData\Local\EgisTec IPS
2015-05-10 16:14 - 2015-05-10 16:14 - 00066432 _____ () C:\Users\Dima\AppData\Local\GDIPFONTCACHEV1.DAT
2015-05-10 16:13 - 2015-05-15 14:51 - 00000000 ____D () C:\Users\Dima\AppData\Local\LogMeIn Hamachi
2015-05-10 16:13 - 2015-05-10 16:13 - 00000000 ____D () C:\Users\Dima\AppData\Local\LogMeIn
2015-05-10 16:12 - 2015-05-10 16:12 - 00000000 ____D () C:\Users\Dima\AppData\Local\VirtualStore
2015-05-10 16:07 - 2015-05-11 23:41 - 00000000 ____D () C:\AdwCleaner
2015-05-08 20:43 - 2015-05-08 20:43 - 00000000 ____D () C:\Users\Dima\AppData\Local\openvr
2015-05-08 20:42 - 2015-05-08 20:42 - 00000000 ____D () C:\Users\Dima\AppData\Local\Steam
2015-05-08 19:44 - 2015-05-08 19:44 - 00000000 ____D () C:\Users\Dima\AppData\Local\Macromedia
2015-05-08 19:43 - 2015-05-09 22:34 - 00000000 ____D () C:\Users\Dima\AppData\Local\Mozilla
2015-05-08 18:41 - 2015-05-08 18:41 - 00000000 ____D () C:\Users\Dima\AppData\Local\ATI
2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieUserList
2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieSiteList
2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieBrowserModeList
2015-05-08 14:49 - 2015-05-08 14:49 - 00000000 ____D () C:\ProgramData\Kikblaster
2015-05-08 14:33 - 2015-05-08 19:54 - 00000000 ____D () C:\Program Files (x86)\Edu App
2015-05-08 14:20 - 2015-05-18 15:55 - 00000000 ____D () C:\Users\Dima\AppData\Local\00000000-1431094823-0000-0000-D43D7EBF2FB4
2015-05-04 20:34 - 2015-05-04 20:34 - 00059505 _____ () C:\Users\Dima\Documents\ts3_clientui-win64-1407159763-2015-05-04 20_34_27.843240.dmp
2015-04-26 16:02 - 2015-04-26 16:02 - 00000000 ____D () C:\Users\Dima\Documents\DFO
2015-04-25 20:20 - 2015-04-25 20:20 - 00001734 _____ () C:\Users\Public\Desktop\Dungeon Fighter Online.lnk
2015-04-25 20:20 - 2015-04-25 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\neople
2015-04-25 20:20 - 2015-04-25 20:20 - 00000000 ____D () C:\Neople
2015-04-25 15:57 - 2015-04-26 13:15 - 00000000 ____D () C:\Users\Dima\Documents\DragonNest
2015-04-24 12:20 - 2015-05-10 18:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-20 13:37 - 2015-04-20 13:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FRITZ!WLAN
2015-04-20 13:37 - 2015-04-20 13:37 - 00000000 ____D () C:\Program Files (x86)\avmwlanstick
2015-04-20 13:36 - 2015-04-20 13:36 - 00000000 ____D () C:\Users\Dima\AVM_Driver
2015-04-20 13:36 - 2012-04-25 01:00 - 00014120 _____ (AVM Berlin) C:\Windows\system32\Drivers\avmeject.sys
2015-04-20 00:51 - 2015-04-20 00:51 - 00002956 _____ () C:\Windows\avmacc1.log
2015-04-20 00:51 - 2012-07-12 02:00 - 00480632 _____ (AVM Berlin) C:\Windows\instwcli.dex
2015-04-20 00:45 - 2015-04-20 00:45 - 00003216 _____ () C:\Windows\System32\Tasks\{35EE529B-2794-4708-8B79-567E126A4A7F}
2015-04-20 00:05 - 2015-04-20 13:36 - 00001479 _____ () C:\Windows\avmsetup.log
2015-04-20 00:05 - 2015-04-20 13:36 - 00000490 _____ () C:\Windows\avmadd32.log
2015-04-20 00:05 - 2015-04-20 00:54 - 00197887 _____ () C:\Windows\avmacc.log
2015-04-20 00:05 - 2015-04-20 00:44 - 00000000 ____D () C:\Program Files (x86)\AVM_update
2015-04-19 20:43 - 2015-04-19 20:43 - 00001906 _____ () C:\Users\Dima\Desktop\EliteDekaron.lnk
2015-04-19 20:43 - 2015-04-19 20:43 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Elite Dekaron
2015-04-19 20:40 - 2015-04-19 21:03 - 00000000 ____D () C:\Program Files (x86)\Elite Dekaron
2015-04-19 20:40 - 2015-04-19 20:40 - 00000000 ____D () C:\Windows\Elite Dekaron

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-18 16:05 - 2013-08-08 20:19 - 01627403 _____ () C:\Windows\WindowsUpdate.log
2015-05-18 16:01 - 2013-08-15 21:16 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-18 15:47 - 2013-08-08 21:08 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-05-18 15:14 - 2013-08-15 14:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-18 13:25 - 2013-11-06 17:55 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Raptr
2015-05-17 22:54 - 2013-09-21 18:06 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\TS3Client
2015-05-17 19:01 - 2013-08-15 21:16 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-17 16:42 - 2009-07-14 06:51 - 00121481 _____ () C:\Windows\setupact.log
2015-05-16 18:56 - 2013-08-15 21:16 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-05-16 18:56 - 2013-08-15 21:16 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-05-15 23:23 - 2013-10-04 17:11 - 00000000 ____D () C:\ProgramData\Package Cache
2015-05-15 18:56 - 2009-07-14 06:45 - 00028928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-15 18:56 - 2009-07-14 06:45 - 00028928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-15 14:50 - 2013-08-17 15:43 - 00000000 ____D () C:\Program Files (x86)\Origin
2015-05-15 13:22 - 2015-04-10 17:41 - 00000000 ____D () C:\Users\Dima\Desktop\eclipse
2015-05-15 00:18 - 2014-08-09 17:35 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\.minecraft
2015-05-14 20:35 - 2014-11-30 22:57 - 00000000 ____D () C:\Users\Dima\.gimp-2.8
2015-05-14 20:34 - 2014-01-07 19:34 - 01856512 ___SH () C:\Users\Dima\Desktop\Thumbs.db
2015-05-14 20:27 - 2015-04-08 21:11 - 00000928 _____ () C:\Users\Dima\Desktop\GIMP 2.lnk
2015-05-14 16:25 - 2014-11-30 22:57 - 00000000 ____D () C:\Users\Dima\AppData\Local\gegl-0.2
2015-05-14 14:06 - 2013-11-11 13:28 - 00001912 _____ () C:\Windows\epplauncher.mif
2015-05-14 14:05 - 2013-11-11 13:27 - 00002119 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2015-05-14 14:05 - 2013-11-11 13:27 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2015-05-14 14:05 - 2013-11-11 13:27 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2015-05-14 14:04 - 2013-11-11 13:25 - 00000000 ____D () C:\Windows\system32\MRT
2015-05-14 13:57 - 2013-11-11 13:25 - 140425016 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-05-14 13:53 - 2013-09-01 03:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-05-14 13:52 - 2013-09-01 03:02 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-05-14 13:52 - 2013-09-01 03:02 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2015-05-13 18:22 - 2014-12-11 00:11 - 00001981 _____ () C:\Users\Public\Desktop\Adobe Reader X.lnk
2015-05-13 18:22 - 2011-07-25 05:18 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2015-05-13 16:34 - 2015-02-28 15:36 - 00000000 ____D () C:\Users\Dima\Desktop\Reod
2015-05-13 16:32 - 2015-01-14 14:04 - 00000000 ____D () C:\ProgramData\Unity
2015-05-13 14:44 - 2014-11-22 13:30 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-05-13 14:43 - 2013-08-09 06:11 - 00699416 _____ () C:\Windows\system32\perfh007.dat
2015-05-13 14:43 - 2013-08-09 06:11 - 00149556 _____ () C:\Windows\system32\perfc007.dat
2015-05-13 14:43 - 2009-07-14 07:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-13 14:36 - 2010-11-21 05:47 - 00401272 _____ () C:\Windows\PFRO.log
2015-05-13 14:36 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-13 14:22 - 2014-11-22 13:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-05-13 14:22 - 2014-11-22 13:30 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-05-12 22:38 - 2014-08-24 20:42 - 00000000 ____D () C:\Windows\System32\Tasks\Games
2015-05-12 22:38 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2015-05-12 22:38 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2015-05-12 13:00 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2015-05-12 12:57 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2015-05-11 23:42 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-05-10 18:44 - 2013-08-17 15:43 - 00000000 ____D () C:\ProgramData\Origin
2015-05-10 18:19 - 2014-11-14 00:10 - 00000000 ____D () C:\Users\Dima\Desktop\lqobqwkv.default
2015-05-10 16:42 - 2014-10-05 15:02 - 00000000 ____D () C:\Users\Dima\AppData\Local\Adobe
2015-05-10 16:15 - 2013-12-20 13:37 - 00000000 ____D () C:\Users\Dima\AppData\Local\Akamai
2015-05-10 16:12 - 2013-08-08 15:36 - 00001419 _____ () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-05-10 16:10 - 2014-11-26 23:57 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WorldofTanks
2015-05-08 21:41 - 2013-12-30 15:03 - 00000000 ____D () C:\Program Files (x86)\7-Zip
2015-05-08 21:39 - 2013-12-18 15:08 - 00000000 ____D () C:\Program Files (x86)\ACASystems
2015-05-08 18:40 - 2013-11-02 02:16 - 00000000 ____D () C:\Users\Dima\Desktop\Neuer Ordner
2015-05-08 18:40 - 2013-08-15 21:16 - 00000000 ____D () C:\Users\Dima\AppData\Local\Google
2015-05-08 14:52 - 2013-12-14 00:39 - 00000000 ____D () C:\Users\Dima\AppData\Local\Battle.net
2015-05-08 13:16 - 2013-08-15 15:52 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Skype
2015-05-02 22:30 - 2014-11-23 16:19 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\.technic
2015-05-02 22:30 - 2014-08-25 02:48 - 04697768 _____ () C:\Users\Dima\Desktop\TechnicLauncher.exe
2015-04-27 16:21 - 2015-02-28 15:34 - 00000000 ____D () C:\Users\Dima\Desktop\Bewerbung
2015-04-20 13:37 - 2014-02-12 19:55 - 00011424 _____ () C:\Windows\avmfwlanci.log
2015-04-20 13:37 - 2014-02-12 19:55 - 00011167 _____ () C:\Windows\AVMInstall.Log
2015-04-20 13:36 - 2014-02-12 19:54 - 00000000 ____D () C:\Windows\AVM_Driver
2015-04-20 13:36 - 2013-08-08 15:34 - 00000000 ____D () C:\Users\Dima
2015-04-20 00:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-04-18 17:38 - 2013-09-13 14:13 - 00000000 ____D () C:\Program Files (x86)\Raptr
2015-04-18 12:26 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat

==================== Files in the root of some directories =======

2013-11-09 21:45 - 2013-11-09 21:45 - 0000004 _____ () C:\Users\Dima\AppData\Roaming\steam_md4.dat
2015-05-14 20:34 - 2015-05-14 20:34 - 0006567 _____ () C:\Users\Dima\AppData\Local\recently-used.xbel
2013-08-08 21:05 - 2013-08-08 21:05 - 0000654 _____ () C:\ProgramData\ArcadeDeluxe5.log

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2011-07-25 04:31

==================== End Of Log ============================
--- --- ---

kriegnes 18.05.2015 15:10
Additions.txt
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-05-2015 02
Ran by Dima at 2015-05-18 16:08:16
Running from C:\Users\Dima\Desktop\Downloads
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-221738678-620704744-704572411-500 - Administrator - Disabled)
Dima (S-1-5-21-221738678-620704744-704572411-1000 - Administrator - Enabled) => C:\Users\Dima
Gast (S-1-5-21-221738678-620704744-704572411-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-221738678-620704744-704572411-1002 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
ACA Screen Recorder 5.30 (HKLM-x32\...\ACAScreenRecorder_EN_is1) (Version: 5.30 - ACA Systems)
Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.99 - NTI Corporation)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3502 - Acer Incorporated)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3502 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0517.2011 - Acer Incorporated)
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Reader X (10.1.14) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.14 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.)
AdVenture Capitalist (HKLM-x32\...\Steam App 346900) (Version:  - Hyper Hippo Games)
Agarest: Generations of War (HKLM-x32\...\Steam App 237890) (Version:  - Ghostlight)
Age of Empires II: HD Edition (HKLM-x32\...\Steam App 221380) (Version:  - Hidden Path Entertainment, Ensemble Studios)
AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.36 - Atheros Communications Inc.)
Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team)
Avidemux 2.6 - 64bits (HKLM-x32\...\Avidemux 2.6 - 64bits (64-bit)) (Version: 2.6.8.9046 - )
AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version: 1.2.0.0 - AVM Berlin)
Backup Manager V3 (x32 Version: 3.0.0.99 - NTI Corporation) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.3.2.15221 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.5.1 - EA Digital Illusions CE AB)
Borderlands 2 (HKLM-x32\...\Steam App 49520) (Version:  - Gearbox Software)
Call of Duty 4: Modern Warfare (HKLM-x32\...\Steam App 7940) (Version:  - Infinity Ward)
Call of Duty: Black Ops II - Multiplayer (HKLM-x32\...\Steam App 202990) (Version:  - )
Call of Duty: Black Ops II - Zombies (HKLM-x32\...\Steam App 212910) (Version:  - )
Call of Duty: Black Ops II (HKLM-x32\...\Steam App 202970) (Version:  - Treyarch)
Call of Duty: Ghosts - Multiplayer (HKLM-x32\...\Steam App 209170) (Version:  - )
Call of Duty: Ghosts (HKLM-x32\...\Steam App 209160) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare 3 - Multiplayer (HKLM-x32\...\Steam App 42690) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare 3 (HKLM-x32\...\Steam App 42680) (Version:  - Infinity Ward)
Castle Crashers (HKLM-x32\...\Steam App 204360) (Version:  - The Behemoth)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
clear.fi Client (HKLM-x32\...\{43AAE145-83CF-4C96-9A5E-756CEFCE879F}) (Version: 1.00.3500 - Acer Incorporated)
Combined Community Codec Pack 2013-11-27 (HKLM-x32\...\Combined Community Codec Pack_is1) (Version: 2013.11.27.0 - CCCP Project)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version:  - Valve)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Darksiders II (HKLM-x32\...\Steam App 50650) (Version:  - Vigil Games)
DFO (HKLM-x32\...\{C1E5C0FB-527E-42C6-BCA0-0A37A6124AE4}) (Version: 1.01.0000 - Neople)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.7.0.64 - DivX, LLC)
Dota 2 (HKLM-x32\...\Steam App 570) (Version:  - Valve)
Dragon Nest Europe (HKLM-x32\...\Steam App 258700) (Version:  - Eyedentity Games)
Dungeon Defenders (HKLM-x32\...\Steam App 65800) (Version:  - Trendy Entertainment)
Dxtory version 2.0.128 (HKLM-x32\...\Dxtory2.0_is1) (Version: 2.0.128 - ExKode Co. Ltd.)
Elite Dekaron (HKLM-x32\...\Elite Dekaron1.0) (Version: 1.0 - EliteKingdoms)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - )
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Free YouTube to MP3 Converter version 3.12.20.1230 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.20.1230 - DVDVideoSoft Ltd.)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Gameforge Live 2.0.5 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.5 - Gameforge)
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Facepunch Studios)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Glyph (HKLM-x32\...\Glyph) (Version:  - Trion Worlds, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.152 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
Gumboy Tournament (HKLM-x32\...\Steam App 11230) (Version:  - CINEMAX, s.r.o.)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.2.1004 - Intel Corporation)
Java 7 Update 75 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417075FF}) (Version: 7.0.750 - Oracle)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Java SE Development Kit 7 Update 75 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170750}) (Version: 1.7.0.750 - Oracle)
Java SE Development Kit 8 Update 25 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180250}) (Version: 8.0.250.18 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Loadout (HKLM-x32\...\Steam App 208090) (Version:  - Edge of Reality)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.328 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.328 - LogMeIn, Inc.) Hidden
LOLReplay (HKLM-x32\...\LOLReplay) (Version: 0.8.9.11 - www.leaguereplays.com)
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Might & Magic: Duel of Champions (HKLM-x32\...\Steam App 256410) (Version:  - Ubisoft Quebec)
MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)
Mozilla Firefox 37.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.2 (x86 de)) (Version: 37.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.2 - Mozilla)
MyWinLocker (Version: 4.0.14.25 - Egis Technology Inc.) Hidden
MyWinLocker 4 (x32 Version: 4.0.14.25 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.15 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 4.0.14.15 - Egis Technology Inc.) Hidden
Neverwinter (HKLM-x32\...\Steam App 109600) (Version:  - Cryptic Studios)
newsXpresso (HKLM-x32\...\InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}) (Version: 1.0.0.40 - esobi Inc.)
newsXpresso (x32 Version: 1.0.0.40 - esobi Inc.) Hidden
Nosgoth (HKLM-x32\...\Steam App 200110) (Version: 150120.100528 - Square Enix Ltd)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)
NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.8942 - NTI Corporation)
NTI Media Maker 9 (x32 Version: 9.0.2.8942 - NTI Corporation) Hidden
NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.3.1.4482 - Electronic Arts, Inc.)
paint.net (HKLM\...\{141BA46D-2D1F-4DA6-9448-B847334585C0}) (Version: 4.0.4 - dotPDN LLC)
PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.51.17865 - pdfforge GmbH)
PDF Architect 2 Create Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden
PDF Architect 2 Edit Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden
PDF Architect 2 View Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.0.2 - pdfforge)
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Pokemon Online 2.4.1 (HKLM-x32\...\{2C08D7E7-9EE1-4A08-AFE0-745F02DCD6A4}_is1) (Version:  - Dreambelievers)
Pokémon Trading Card Game Online (HKLM-x32\...\{B0952280-3DF0-4AA9-9599-092D5E8D36AD}) (Version: 2.24.1 - The Pokémon Company International)
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Ralink RT2860 Wireless LAN Card (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 1.5.6.0 - Ralink)
Raptr (HKLM-x32\...\Raptr) (Version:  - )
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6329 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30123 - Realtek Semiconductor Corp.)
Serious Sam 3: BFE (HKLM-x32\...\Steam App 41070) (Version:  - Croteam)
Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version:  - 2K Games, Inc.)
SIW 2013 Home Edition (HKLM-x32\...\{AB67580-257C-45FF-B8F4-C8C30682091A}_is1) (Version: 2013.05.14 - Topala Software Solutions)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 2.0.2574.0 - Hi-Rez Studios)
Source SDK Base 2006 (HKLM-x32\...\Steam App 215) (Version:  - Valve)
SpellForce (HKLM-x32\...\SpellForce) (Version:  - )
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Survarium (HKLM-x32\...\Steam App 355840) (Version:  - Vostok Games)
Survarium-Steam (HKLM-x32\...\{A3D9343D-77CD-4bf4-A47A-F87B3BE985B4}_is1) (Version: 0.27d - )
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
System Requirements Lab CYRI (HKLM-x32\...\{E362724E-9320-4946-AF34-874E7B6B2927}) (Version: 6.0.7.0 - Husdawg, LLC)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.12 - TeamSpeak Systems GmbH)
TIPP10 Version 2.1.0 (HKLM-x32\...\TIPP10_is1) (Version:  - (c) 2006-2011, Tom Thielicke IT Solutions)
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel)
Unity (HKLM-x32\...\Unity) (Version: 4.6.1f1 - Unity Technologies ApS)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Vindictus EU (HKLM-x32\...\Vindictus EU) (Version:  - )
VLC media player 2.1.1 (HKLM\...\VLC media player) (Version: 2.1.1 - VideoLAN)
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3503 - Acer Incorporated)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
WinRAR 5.00 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)
YGOPro DevPro Version 1.9.7 r2 (HKLM-x32\...\{3CF2634F-3F38-4DD3-9201-CB2FE6B5FF23}_is1) (Version: 1.9.7 r2 - YGOPro DevPro Online)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

14-05-2015 13:48:43 Windows Update
15-05-2015 23:20:19 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
15-05-2015 23:20:48 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005
15-05-2015 23:21:51 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005
15-05-2015 23:22:34 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501
17-05-2015 14:49:58 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2014-09-21 15:27 - 00000860 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
::1 localhost

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {15731A0E-D960-4E94-9E60-DACD297E3193} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {1860A38F-8939-478A-BF5C-F565A480142F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {1D4EC24B-2C6F-4F04-8F3E-6AA90BAED5D2} - System32\Tasks\{A10EA19B-8B09-454D-B360-CA92A1D17DBD} => pcalua.exe -a C:\Users\Dima\Desktop\InstallIW4M(1).exe -d C:\Users\Dima\Desktop
Task: {276BF61D-668E-4313-BA37-702F352555A9} - System32\Tasks\Adobe Reader Speed Launcher => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2015-04-30] (Adobe Systems Incorporated)
Task: {2B46497E-052E-4882-879A-2CED38AE75F5} - System32\Tasks\{6B05723E-8DB6-495D-A0DA-ECA4FC2E26D7} => C:\Program Files (x86)\WeGame\wegame.exe
Task: {54E1645E-EDBD-4280-B2FF-13D3BBEC2047} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-07] (Google Inc.)
Task: {5975092F-1EFE-4D6C-A337-025C0E67059F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)
Task: {5B6F25FF-1AB6-4306-AF5F-150B752505F5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-07] (Google Inc.)
Task: {ADDA105F-5269-41EB-BE7A-FADC87447563} - System32\Tasks\{153E695E-4162-4A7B-8004-BCBAF85CE618} => pcalua.exe -a C:\Users\Dima\AVM_Driver\FWLAN\setup.exe -d C:\Users\Dima\AVM_Driver\FWLAN
Task: {B0E56CFC-54EA-49E5-AEE6-544EE780094B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15] (Adobe Systems Incorporated)
Task: {C4630A3F-B5F1-4159-9F2B-8EF55530D99B} - System32\Tasks\Adobe ARM => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {C618B53C-0F59-4601-8B52-1D81C275086B} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)
Task: {C7F562CC-8836-44FC-8085-91BD492874BE} - System32\Tasks\{35EE529B-2794-4708-8B79-567E126A4A7F} => pcalua.exe -a C:\Users\Dima\Desktop\Downloads\avm_fritz!wlan_usb_stick_x64_build_100906.exe -d C:\Users\Dima\Desktop\Downloads
Task: {D021483F-10CB-41B4-8816-109CDA214F59} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {D216A597-8DFB-49AE-BB0C-69D9574172C8} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {D9E5BB12-DEEF-4673-A22C-7A60AF737292} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {E66F9E32-E05D-43A5-8A61-1251E464ABF9} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2013-09-02 13:14 - 2014-10-11 21:02 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-01-10 07:26 - 2014-01-10 07:26 - 01861968 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
2011-04-24 03:29 - 2011-04-24 03:29 - 00465640 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll
2011-04-24 03:29 - 2011-04-24 03:29 - 01081664 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll
2011-04-24 03:29 - 2011-04-24 03:29 - 00125760 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll
2014-11-09 03:42 - 2014-05-13 13:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2014-11-09 03:42 - 2014-05-13 13:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2014-11-09 03:42 - 2014-05-13 13:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2014-11-09 03:42 - 2012-08-23 11:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2014-11-09 03:42 - 2012-04-03 18:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2014-10-21 22:56 - 2014-10-21 22:56 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\9b1cac8d98bd69d3e56a26ff2f96f266\IsdiInterop.ni.dll
2011-07-25 04:42 - 2011-01-13 02:56 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2014-01-10 07:28 - 2014-01-10 07:28 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00087040 _____ () C:\Program Files (x86)\Raptr\_ctypes.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00043008 _____ () C:\Program Files (x86)\Raptr\_socket.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00805376 _____ () C:\Program Files (x86)\Raptr\_ssl.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 05812736 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtGui.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00067584 _____ () C:\Program Files (x86)\Raptr\sip.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 01662464 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtCore.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00494592 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtNetwork.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00096256 _____ () C:\Program Files (x86)\Raptr\win32api.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00110592 _____ () C:\Program Files (x86)\Raptr\pywintypes26.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00010240 _____ () C:\Program Files (x86)\Raptr\select.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00356864 _____ () C:\Program Files (x86)\Raptr\_hashlib.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00036352 _____ () C:\Program Files (x86)\Raptr\win32process.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00111104 _____ () C:\Program Files (x86)\Raptr\win32file.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00044544 _____ () C:\Program Files (x86)\Raptr\_sqlite3.pyd
2011-02-15 20:17 - 2011-02-15 20:17 - 00417501 _____ () C:\Program Files (x86)\Raptr\sqlite3.dll
2010-11-23 00:57 - 2010-11-23 00:57 - 00167936 _____ () C:\Program Files (x86)\Raptr\win32gui.pyd
2014-05-14 01:26 - 2014-05-14 01:26 - 00313856 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtWebKit.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00127488 _____ () C:\Program Files (x86)\Raptr\pyexpat.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00009216 _____ () C:\Program Files (x86)\Raptr\winsound.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00354304 _____ () C:\Program Files (x86)\Raptr\pythoncom26.dll
2010-11-23 00:57 - 2010-11-23 00:57 - 00016384 _____ () C:\Program Files (x86)\Raptr\win32trace.pyd
2014-08-14 02:37 - 2014-08-14 02:37 - 00113171 _____ () C:\Program Files (x86)\Raptr\libvlc.dll
2014-08-14 02:37 - 2014-08-14 02:37 - 02396691 _____ () C:\Program Files (x86)\Raptr\libvlccore.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00583680 _____ () C:\Program Files (x86)\Raptr\unicodedata.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00263168 _____ () C:\Program Files (x86)\Raptr\win32com.shell.shell.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00324608 _____ () C:\Program Files (x86)\Raptr\PIL._imaging.pyd
2013-11-21 02:05 - 2013-11-21 02:05 - 00256000 _____ () C:\Program Files (x86)\Raptr\amd_ags.dll
2012-02-06 22:28 - 2012-02-06 22:28 - 00010752 _____ () C:\Program Files (x86)\Raptr\Crypto.Random.OSRNG.winrandom.pyd
2012-02-06 22:28 - 2012-02-06 22:28 - 00011264 _____ () C:\Program Files (x86)\Raptr\Crypto.Util._counter.pyd
2012-02-06 22:28 - 2012-02-06 22:28 - 00031744 _____ () C:\Program Files (x86)\Raptr\Crypto.Cipher.AES.pyd
2015-03-25 01:50 - 2015-03-25 01:50 - 02539776 _____ () C:\Program Files (x86)\Raptr\ltc_host_ex.DLL
2010-11-23 00:57 - 2010-11-23 00:57 - 00141312 _____ () C:\Program Files (x86)\Raptr\gobject._gobject.pyd
2014-06-18 02:56 - 2014-06-18 02:56 - 02717595 _____ () C:\Program Files (x86)\Raptr\heliotrope._purple.pyd
2011-02-15 20:17 - 2011-02-15 20:17 - 01213633 _____ () C:\Program Files (x86)\Raptr\libxml2-2.dll
2010-11-23 01:06 - 2010-11-23 01:06 - 00055808 _____ () C:\Program Files (x86)\Raptr\zlib1.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 00495680 _____ () C:\Program Files (x86)\Raptr\plugins\libaim.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 01183699 _____ () C:\Program Files (x86)\Raptr\liboscar.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 00483306 _____ () C:\Program Files (x86)\Raptr\plugins\libicq.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00655356 _____ () C:\Program Files (x86)\Raptr\plugins\libirc.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 01306387 _____ () C:\Program Files (x86)\Raptr\plugins\libmsn.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 00565461 _____ () C:\Program Files (x86)\Raptr\plugins\libxmpp.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 01640221 _____ () C:\Program Files (x86)\Raptr\libjabber.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 00506276 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoo.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 01053730 _____ () C:\Program Files (x86)\Raptr\libymsg.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00497782 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoojp.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00603326 _____ () C:\Program Files (x86)\Raptr\plugins\ssl-nss.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00474199 _____ () C:\Program Files (x86)\Raptr\plugins\ssl.dll
2013-07-01 08:20 - 2015-04-16 19:40 - 00776192 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2015-01-04 19:33 - 2015-04-23 04:16 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll
2015-01-04 19:33 - 2015-04-23 04:16 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2015-01-04 19:33 - 2015-04-23 04:16 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2014-05-21 20:08 - 2015-05-15 03:58 - 02396352 _____ () C:\Program Files (x86)\Steam\video.dll
2014-08-29 16:43 - 2014-12-01 23:31 - 02396672 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2014-08-29 16:43 - 2014-12-01 23:31 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2014-08-29 16:43 - 2014-12-01 23:31 - 00479744 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2014-08-29 16:43 - 2014-12-01 23:31 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2014-08-29 16:43 - 2014-12-01 23:31 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2013-07-26 14:46 - 2015-05-15 03:57 - 00703168 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2013-07-15 14:32 - 2015-05-11 21:01 - 36302728 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2015-04-24 19:11 - 2015-05-11 21:01 - 08958344 _____ () C:\Program Files (x86)\Steam\bin\pdf.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Classes\exefile:  <===== ATTENTION!

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-221738678-620704744-704572411-1000\...\aeriagames.com -> hxxps://aeriagames.com
IE trusted site: HKU\S-1-5-21-221738678-620704744-704572411-1000\...\aeriagames.com -> hxxp://aeriagames.com


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-221738678-620704744-704572411-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Ralink Wireless Utility.lnk => C:\Windows\pss\Ralink Wireless Utility.lnk.CommonStartup
MSCONFIG\startupreg: Aeria Ignite => "C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe" silent
MSCONFIG\startupreg: Overwolf => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent
MSCONFIG\startupreg: Raptr => C:\PROGRA~2\Raptr\raptrstub.exe --startup

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

FirewallRules: [{78594C1C-0D50-4158-BE4B-630F903AD614}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{6FBF251F-BD39-4F99-9B43-11228600FA75}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
FirewallRules: [{D2661B1C-FB14-4488-85B6-C9F0F671AC26}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
FirewallRules: [{2C171432-29A8-41AE-B4FC-C8A1B17AA814}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{5AB70EC2-290C-47AF-93E6-2FF6583923AE}] => (Allow) LPort=2869
FirewallRules: [{E223E5D1-C91F-43A7-BAF4-034AF2D39963}] => (Allow) LPort=1900
FirewallRules: [{87113CB6-D031-4465-A7DA-1190F21F5789}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{A6A9391B-02D1-49D7-ADC4-9186A84936CB}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{57B9C597-A0EB-408F-856B-FA683C8132A3}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{714CDBAF-5604-42B3-B700-E8038F5DF945}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [TCP Query User{06F842FE-DDFA-4FCC-AE92-5F69EEE0F652}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{3661892A-DE75-4580-91A0-F9FBF1799DF3}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{5765CABA-404A-44EF-8227-7422B4001117}C:\program files (x86)\dragon's prophet\dp_x64.exe] => (Allow) C:\program files (x86)\dragon's prophet\dp_x64.exe
FirewallRules: [UDP Query User{4AB4E404-C83C-479E-AE15-ED70B9717177}C:\program files (x86)\dragon's prophet\dp_x64.exe] => (Allow) C:\program files (x86)\dragon's prophet\dp_x64.exe
FirewallRules: [{D8B75AC5-DB8B-4A3C-A379-08351FDB3A8A}] => (Block) C:\program files (x86)\dragon's prophet\dp_x64.exe
FirewallRules: [{FA2BCC55-2D25-4982-9813-648096C2D014}] => (Block) C:\program files (x86)\dragon's prophet\dp_x64.exe
FirewallRules: [TCP Query User{8BC7D8B9-96BF-48DA-B566-50842124FA04}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe
FirewallRules: [UDP Query User{9C72FA86-27B7-40B5-BCCB-3EE160D8159F}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe
FirewallRules: [TCP Query User{643C5904-C3B1-4EF9-B893-4374ECF6D6DA}C:\program files (x86)\dragon's prophet\launcher.exe] => (Allow) C:\program files (x86)\dragon's prophet\launcher.exe
FirewallRules: [UDP Query User{878B8F84-B88B-4D79-BA68-B0CE420657C1}C:\program files (x86)\dragon's prophet\launcher.exe] => (Allow) C:\program files (x86)\dragon's prophet\launcher.exe
FirewallRules: [{80ED7FA9-4202-4D90-836F-F9F56B4CDAE4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{4399A304-14B2-4EFA-B537-E8EA862FCC80}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{01721DB0-F656-4031-8930-1E8373DC2F7F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3sp.exe
FirewallRules: [{C1942149-4BF2-4840-B25B-0861219DBE3B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3sp.exe
FirewallRules: [{AD3CBC94-9015-4EEC-8010-9730A95F050C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3mp.exe
FirewallRules: [{83C71D22-7773-410B-9C20-2AA7FDCEB96E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3mp.exe
FirewallRules: [{E7F483C4-10DC-4293-ACA0-F3AF08D31698}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x86.exe
FirewallRules: [{27ADCB35-4841-4AF9-B2D7-CC086CF7A903}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\launcher.exe
FirewallRules: [{4933D89C-009A-43A4-A839-09A511BC8DFC}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\launcher.exe
FirewallRules: [{3D9A3A59-0A6C-440B-A6F9-0A90AC0DE8EB}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x64.exe
FirewallRules: [{18241FBC-0EF3-483B-94A6-AC00EEDBF4A7}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x64.exe
FirewallRules: [{C7D1F9D6-5F5C-4788-8D75-AA4662252A42}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x86.exe
FirewallRules: [TCP Query User{4C269EB3-8471-4A9F-8BEC-B534B181151E}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe
FirewallRules: [UDP Query User{721D1BD2-BDD0-4F36-AD02-862EE89713FE}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe
FirewallRules: [TCP Query User{C39306B7-FF57-4794-8B9A-9AA0F84CB38F}C:\users\dima\appdata\local\iw4m\iw4m.dat] => (Block) C:\users\dima\appdata\local\iw4m\iw4m.dat
FirewallRules: [UDP Query User{F8E2B0E8-5340-4B1C-92C0-7DA4FD31E1C2}C:\users\dima\appdata\local\iw4m\iw4m.dat] => (Block) C:\users\dima\appdata\local\iw4m\iw4m.dat
FirewallRules: [TCP Query User{1D2F39A8-48D1-4F21-9CF1-DE335D47F856}C:\users\dima\desktop\iw4m\iw4m.dat] => (Allow) C:\users\dima\desktop\iw4m\iw4m.dat
FirewallRules: [UDP Query User{56A99EDF-B65F-4AFD-AE16-F7D98D17E077}C:\users\dima\desktop\iw4m\iw4m.dat] => (Allow) C:\users\dima\desktop\iw4m\iw4m.dat
FirewallRules: [TCP Query User{2615C76C-73D3-4D32-B632-E52A4C790CC1}C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe
FirewallRules: [UDP Query User{06CB1C71-BEEC-4057-B2DC-C2D7E2D1CA89}C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe
FirewallRules: [{C39F0114-CCFF-4583-BE3C-FCC7B4C918B2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014 Demo\DotP_D14.exe
FirewallRules: [{586F7494-D5E6-431C-B8E6-847AF4C525E9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014 Demo\DotP_D14.exe
FirewallRules: [{76EF348E-4A47-485D-9F6F-4D71F6E38FC1}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{7AE12753-DC2E-4865-9B9B-D3A3E3937C08}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{5951B7B2-DBCA-4C9A-9BF3-C4114D1B65B5}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{65B33429-5091-41E6-A332-E473323DD788}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{1EC8437C-CE05-4587-9FC8-1F694B4C7C17}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe
FirewallRules: [{D0028759-3301-4357-8B2F-C150FE1F51E3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe
FirewallRules: [{FBA36FBF-DB77-4FD8-BC3F-80825FA74D59}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe
FirewallRules: [{5F4313DD-BA94-4F06-A2F0-B409FDAC09F4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe
FirewallRules: [{67D60A7C-0385-470F-9033-87A08C2D2E4F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [{E3735442-0A8C-41A3-9B08-729BC8802589}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [TCP Query User{7090371A-9B4F-4254-84A8-364D16F3A38C}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [UDP Query User{31DB48CF-D0EF-4B0D-AAE6-7AF83D2137D8}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [{A045D731-60D5-4EAD-BF23-1F7796BB34FA}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [{2C6C6FBA-5AFC-4085-8A68-A8C98856386B}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [TCP Query User{3C639DFB-197E-4AFF-A15E-25F14B889032}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat
FirewallRules: [UDP Query User{82EE40F2-E294-4D7B-9D68-1B75AE208E6A}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat
FirewallRules: [{64E878D7-1907-4A7D-A779-834D5D060955}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat
FirewallRules: [{68209FB4-C66B-4D9D-A2F0-2397BE1AB277}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat
FirewallRules: [TCP Query User{00A0BD31-B63A-4C19-93E8-ABCC8DB5C578}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [UDP Query User{8999A7F5-D427-4328-AAB7-ADA1FA9C59BF}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [{8DC4935E-B350-42D1-8FB1-1BB8F7442E36}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [{6CFC61D0-18CC-49EB-B25A-ACAECA62E42B}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [TCP Query User{EBCAC3E3-AA9A-43CF-B83E-98D5FD5EA402}C:\users\dima\desktop\call of duty modern warfare 2\com.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\com.dat
FirewallRules: [UDP Query User{84C7686B-75DF-401A-9FDF-7FC9F6392C7D}C:\users\dima\desktop\call of duty modern warfare 2\com.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\com.dat
FirewallRules: [{049E4550-90D7-4FEF-B6AD-9D74DED0C676}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\com.dat
FirewallRules: [{993FB1C4-D279-479A-90BE-6165BF19AF2E}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\com.dat
FirewallRules: [TCP Query User{9B3FB14A-DDF0-4459-AB11-D96BA0A21D17}C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [UDP Query User{3511F905-74A3-4CF9-9DC4-31D40CA6C995}C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [{4BBE5ECB-54A4-4EF1-BAA9-DBE3F102DC2F}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [{A73E2F4B-AB36-4447-B71B-F28AF0D3F1C5}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat
FirewallRules: [TCP Query User{85EDB327-F94C-42C7-A714-B52DCFABB896}C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [UDP Query User{62DB249D-8E0B-4DE5-866A-A5EC513C7675}C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [{9BA06BB7-A418-404C-A95C-D8E2282C6F57}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [{CED6EBE2-E036-4988-AB13-D5DA803410B6}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat
FirewallRules: [{E546D188-E7DD-44EE-BC95-7E5100A1366C}] => (Allow) C:\Users\Dima\Downloads\HOTO_downloader.exe
FirewallRules: [{60F46196-1CBF-40C0-970C-031D8BAD38B2}] => (Allow) C:\Users\Dima\Downloads\HOTO_downloader.exe
FirewallRules: [{F45FED77-FF04-4879-9444-42D263E00C25}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe
FirewallRules: [{28EC56F2-D3A9-4BCE-A5F5-878749DE6407}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe
FirewallRules: [{A4083F49-4F11-4A32-B91C-2BAF1B4BF058}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe
FirewallRules: [{DF37D091-D2F9-4401-B457-D9030A3919A8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe
FirewallRules: [{1315155E-2220-4EDE-A4A4-755669B75E19}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [{58E7FDFD-4736-4213-9B42-50E885AE99CA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [{31958790-F30C-4BC7-BDAC-03B4DED35B86}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe
FirewallRules: [{CC1F0407-71B4-4EC3-9F37-0E161C8A3322}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe
FirewallRules: [{145C7649-7AA9-42B3-97E8-5B8400173F22}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe
FirewallRules: [{936F4879-D6DB-4A9A-BEB0-D9E0A63B56E1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe
FirewallRules: [{375BA601-C201-4FFF-9426-9DC8362E1D6A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{4EAF1A42-8BB1-49A8-8D54-63BE9EF5E1FC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{E7EEA6A5-9E71-4A90-B195-713ADC4D3DD9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe
FirewallRules: [{C7E9681A-9A64-4D1A-99A8-CFC9168448D5}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe
FirewallRules: [{4352484E-8611-4EF5-92B1-E1134658D51D}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{FAF9A5EF-500F-48F2-9A53-FB0E549E87A7}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{45E32924-61E5-4693-8142-5090A1DACC77}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{B51953D9-7C03-413E-B7EA-B60979F79136}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [TCP Query User{58A3D1CA-EB63-41E1-815B-2C296E72A629}C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe] => (Allow) C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe
FirewallRules: [UDP Query User{42C952D4-1892-4D10-9AB1-1CC3F39A23F3}C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe] => (Allow) C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe
FirewallRules: [{1D455526-6B1D-4BF9-B8BA-00306E25FF9A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [{0DA93301-8BDC-47FD-B914-E2FA1EC7AAFB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe
FirewallRules: [TCP Query User{0729B18F-9796-4FCF-A32F-7A5833FBE815}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\dima\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{A54F5C5A-D8E2-403E-A810-D1615D1E56C6}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\dima\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{9C8EF3A7-3266-4542-B95E-133CF9D2DFA9}C:\programdata\battle.net\agent\agent.beta.2514\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2514\agent.exe
FirewallRules: [UDP Query User{DF8986C4-FB63-4A37-874F-5E4F5AB0B070}C:\programdata\battle.net\agent\agent.beta.2514\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2514\agent.exe
FirewallRules: [TCP Query User{7D2074A4-AA89-4BA7-A7EB-1268C6492AEE}C:\program files (x86)\devpro\devpro.dll] => (Allow) C:\program files (x86)\devpro\devpro.dll
FirewallRules: [UDP Query User{F2B7C119-C5D0-4914-BEBC-71E99254D344}C:\program files (x86)\devpro\devpro.dll] => (Allow) C:\program files (x86)\devpro\devpro.dll
FirewallRules: [{EA7F7B92-3349-4537-9E50-3A0B4D818281}] => (Allow) C:\AeriaGames\AuraKingdom\game.bin
FirewallRules: [{AB6209F8-0BA4-4FC4-803C-1A73FEFDA112}] => (Allow) C:\AeriaGames\AuraKingdom\game.bin
FirewallRules: [TCP Query User{4F600FC8-F54A-49E9-B588-2F547BBA96B1}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe
FirewallRules: [UDP Query User{DF1CE9AE-5217-4393-B737-92F45CBCB4BD}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe
FirewallRules: [{A1A5A428-B18A-4BC9-A553-B1E6989C2A42}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Darksiders 2\Darksiders2.exe
FirewallRules: [{F60EBF1D-B0A7-4638-B48C-AF3F18B494BA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Darksiders 2\Darksiders2.exe
FirewallRules: [{767607AA-81B6-406F-BF1E-B8A81ED847FC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe
FirewallRules: [{35789372-EE60-4ED3-81F9-A81ED3BF2CE4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe
FirewallRules: [{07DE1F4A-0A51-4A63-BF8D-CD9580D92EB6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{5F40E8E8-9EF2-41AA-9414-FBA5770F0A94}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [TCP Query User{744A07AB-09FD-499C-9F04-E01BB0351E8D}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\dima\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{F7498DED-162B-488F-B59F-256A51C6CE71}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\dima\appdata\local\akamai\netsession_win.exe
FirewallRules: [{AEAB3ECF-0BB1-453B-8D1F-476AE01D86A0}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe
FirewallRules: [{8D48AAEF-A0CE-44E7-9024-CA3944E81E7D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe
FirewallRules: [TCP Query User{6CF9A63C-F912-4E3A-8DDA-6D3AC6AF66DF}C:\programdata\battle.net\agent\agent.beta.2638\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2638\agent.exe
FirewallRules: [UDP Query User{5A9CB3D7-8747-407A-97AB-191DBFC43D75}C:\programdata\battle.net\agent\agent.beta.2638\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2638\agent.exe
FirewallRules: [{94644398-7E26-4C3A-BD3D-8AC488A93807}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe
FirewallRules: [{03DDFDE2-264E-4187-85CD-4382D41F4A6C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe
FirewallRules: [{C38A5A06-BB40-4CFC-BA71-87AEC286F6D6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe
FirewallRules: [{CB8BA2E2-B98E-442B-87D9-92EFB85FECAD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe
FirewallRules: [{234100A5-3277-4236-B80F-3BD7A113F330}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe
FirewallRules: [{9472EB6F-9BC9-4FC2-B7B2-45A96212D7C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe
FirewallRules: [{4DDCAB31-D1CA-49D7-83D1-9A7708CA3387}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Loadout\Loadout.exe
FirewallRules: [{50274324-D5E3-4A7D-9551-60285C4D51CE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Loadout\Loadout.exe
FirewallRules: [{505A793E-19FF-4163-85DA-BDD1366147B4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{5D9B037C-78AD-4F93-AFCB-A8BF0480CCCF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{71BA2590-5ED7-4DC0-919C-603D078A17E1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
FirewallRules: [{E3C9045F-0538-43CE-9AC0-B88A7047D12B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
FirewallRules: [{AA27854D-9002-4BB1-AC3B-2B040589990B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{F262DA23-A9A0-45ED-875A-42640AB812FD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{5B584B43-CDC2-482C-A915-51ED708E2BDE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
FirewallRules: [{FBE87CBF-6E5E-443B-BB64-D76E91781977}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
FirewallRules: [TCP Query User{5B78C40B-EF9C-4DE3-B847-DDC0913711FC}C:\program files (x86)\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\tera\tera-launcher.exe
FirewallRules: [UDP Query User{02ADE6C1-8488-448C-9DD6-1D4ABC838F09}C:\program files (x86)\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\tera\tera-launcher.exe
FirewallRules: [{4EC807D8-651B-4EDE-906E-15D8940E045A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{5C43F976-C8BD-461A-8160-E4037DEC5A46}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{91A8DE20-9DBA-43BD-9F4B-DE1B625D0D83}] => (Allow) C:\AeriaGames\EdenEternal-DE\_Launcher.exe
FirewallRules: [{CD8464F5-1D27-4ACC-848F-AD802961AD3D}] => (Allow) C:\AeriaGames\EdenEternal-DE\_Launcher.exe
FirewallRules: [{20FF7205-61B2-44CC-87A6-CCE211D4603C}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{6B725485-B1DC-4646-B9AD-C4E754073AD5}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{EFDADD2B-5B82-4D44-BFF6-7533A33E5D4B}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{EDABDFE1-A779-47FE-A7F2-0BE99128B9D1}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{C864BA6F-6F65-4A53-BACD-5590447E71A3}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{BF9437A3-0AAD-4EF3-9020-8A7EDA18FFFB}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{5EC4813D-F4A5-44A4-99AE-2FEEADC7BD68}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe
FirewallRules: [{5741DE79-8863-4C92-8CA4-43D24ED12E9D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe
FirewallRules: [{7FA5A6CC-69A0-4EF2-9E4E-D36CF4A6FFB1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe
FirewallRules: [{1E27B3D7-EBC5-46D1-A1F4-5150D5FC7ECA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe
FirewallRules: [{7ACB6A7B-1D9F-4159-9E5C-57293DE770B9}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA World\fifaworld.exe
FirewallRules: [{CC579040-BC64-4658-B938-3FC11265DBA0}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA World\fifaworld.exe
FirewallRules: [TCP Query User{466B6D60-FB8E-40F4-9A96-3F6B84C31F10}C:\programdata\battle.net\agent\agent.2787\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.2787\agent.exe
FirewallRules: [UDP Query User{747BD4DC-E6ED-4E9F-889A-E1029B9BD7EC}C:\programdata\battle.net\agent\agent.2787\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.2787\agent.exe
FirewallRules: [{024C2E0F-0F94-4571-AAA1-63A5D32016D2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe
FirewallRules: [{19CDF823-35E4-43AD-8A38-931E02B58B64}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe
FirewallRules: [{EA2378D9-ADC4-4A3E-947C-030BBA9A41B0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Aura Kingdom\game.bin
FirewallRules: [{E3E3914B-6929-4469-A807-4C9FC60B3CA5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Aura Kingdom\game.bin
FirewallRules: [{AB6817F8-474B-413B-B1A1-DB9F05CE61BB}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{8192EF82-EABD-49D0-92CB-1E602FCB2399}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{8E9567B7-FEC3-4B6A-8469-1B65ACAEBCF2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe
FirewallRules: [{9832DDCA-66F8-432C-8B22-60682E5E919E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe
FirewallRules: [TCP Query User{1128027D-DF51-428D-BBF5-261AD7F20EEC}C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe
FirewallRules: [UDP Query User{0D0921EC-8295-44F1-A446-52BAFD8EF6EB}C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe
FirewallRules: [TCP Query User{1FC5CC73-6F52-4B75-8D0B-4753B673D255}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{A5E61E08-5C0A-4EA7-BD2C-D6ACED33386F}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{E290B8F5-DC46-4D43-9E40-A8CFEBD19A8A}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe
FirewallRules: [UDP Query User{4A59CA75-CB6F-46C3-8E3B-D091F44ACDC5}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe
FirewallRules: [{51E7B824-61EF-498A-94AE-826ED3FE5CF2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{B9C59147-9E45-4E11-9B2F-5702A1ACAFA5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{BB70E8F0-DE1E-4EEF-873C-95044B81A8C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [{49C70379-991F-4248-81CB-BA51F9158E4F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [{6BB569B0-D223-4EAB-A4A0-83B776CDA2DD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age2HD\Launcher.exe
FirewallRules: [{D341F20A-E2E0-4320-82A8-3607608AD108}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age2HD\Launcher.exe
FirewallRules: [{757CE32E-DE9A-440C-BAB3-B9F8EF37A2A0}] => (Allow) C:\Users\Dima\Downloads\b9_downloader.exe
FirewallRules: [{ACA68B80-8F45-4E75-B7D3-470AF290871F}] => (Allow) C:\Users\Dima\Downloads\b9_downloader.exe
FirewallRules: [TCP Query User{B5BB55CB-DE77-4080-963B-3A266AC37CE5}C:\programdata\battle.net\agent\agent.3235\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3235\agent.exe
FirewallRules: [UDP Query User{30EBE90E-7ED1-4868-9D3D-50E6D7112675}C:\programdata\battle.net\agent\agent.3235\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3235\agent.exe
FirewallRules: [{1BAA9821-E2DD-48BF-9E27-F6297D2F5116}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [{9C9260ED-7AA0-4AE4-972E-D83A5D097028}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [{EA27D1BB-E05D-4097-97AF-BC7DE8174F52}] => (Allow) C:\Program Files (x86)\Bench\Proxy\proc.exe
FirewallRules: [{953D2DA8-7AEB-4931-BE76-87BDE0ACBC39}] => (Allow) C:\Program Files (x86)\Bench\Proxy\pwdg.exe
FirewallRules: [{91AF5EE1-530D-4D72-A308-BDBA132ABA31}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{AF831DA2-EC4A-4642-915F-DF7CBB2A2CF3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{BBBB3AD6-5EB2-4204-B5AF-9716942ACB1C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
FirewallRules: [{63BB69A1-F607-4FB8-9EDD-1A607AABDA8B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
FirewallRules: [{34F27A20-13E6-46E6-9901-39383CB7F97A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [{DA9D712D-0C9F-441F-A880-FF8D27837E6E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [TCP Query User{A250025F-7CBE-4CAD-93AE-C02E36E841C1}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe
FirewallRules: [UDP Query User{3D207EE9-306F-48FF-8735-CD8CDAFA0490}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe
FirewallRules: [TCP Query User{F7376CA3-FA2C-4F56-9AD8-0A2ADC4927AE}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe
FirewallRules: [UDP Query User{BCBA424F-EDE5-4DFC-8FD5-56BB5666B2F5}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe
FirewallRules: [{7A5EB71C-C724-402F-8557-A92B3BAD628E}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe
FirewallRules: [{AF09CC9B-68D7-404C-B498-D144643C1A54}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe
FirewallRules: [{D56AE5C0-0487-4C87-8284-10DC792A01DE}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe
FirewallRules: [{CB98B3E2-40A1-4A7C-ACCB-56A50C8E3F7B}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe
FirewallRules: [{B3D84AF2-F39E-4E7D-9D7E-FFCD803C1135}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{AB8E5377-F2F7-441D-9A50-434D83F90C0E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{CCA3F085-5CA5-4FEE-9ADD-935183AE6F1C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{9EA1B11A-0179-414A-AFF8-82050C792E6B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{256D7304-2C38-45D1-97DB-71739BA92297}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [{E2070B33-5CCB-46B0-B6CF-4ED92F8AB562}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [{1E69481E-7920-4B4D-9047-B812C456A75A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{A416660E-98DD-4A45-8A5A-C8BBA66A68A3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{72A09F1B-7789-4A3E-B327-FD1D052150FF}] => (Allow) C:\Program Files (x86)\GameforgeLive\gfl_client.exe
FirewallRules: [TCP Query User{2A0CBFD5-23A1-4C20-91ED-B00077755298}C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe
FirewallRules: [UDP Query User{3933DFA8-6EB3-47A1-A4F9-7C3E7BD2ED67}C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe
FirewallRules: [TCP Query User{69CF256B-C011-492C-B7A0-04F509D0D67B}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe
FirewallRules: [UDP Query User{FFEA845F-4BF9-44FF-89AC-628034543D28}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe
FirewallRules: [{7809CF2C-51C3-4520-8BD0-F210B5BBB57B}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [{CE1678FF-6995-415D-ADDC-E165111812E1}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [{2412E622-4FBF-402A-B899-DBC82E5C6B2B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{5817EFF9-3537-4F8B-97F9-2C33716052B4}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{B65003CD-97BF-4394-A2F7-21A3E24DCFB5}] => (Allow) C:\Nexon\Vindictus EU\en-EU\NMService.exe
FirewallRules: [{0CA242B9-DEDD-43C3-9F4C-BADAE74781E9}] => (Allow) C:\Nexon\Vindictus EU\en-EU\NMService.exe
FirewallRules: [TCP Query User{3D2A0F20-56AE-42D0-80DF-E8AC85D00D13}C:\nexon\vindictus eu\en-eu\vindictus.exe] => (Allow) C:\nexon\vindictus eu\en-eu\vindictus.exe
FirewallRules: [UDP Query User{2DFE002E-3069-4DA8-920D-442A029D663E}C:\nexon\vindictus eu\en-eu\vindictus.exe] => (Allow) C:\nexon\vindictus eu\en-eu\vindictus.exe
FirewallRules: [TCP Query User{93A7A5BC-03EA-42A5-AE99-CC30CBDF752F}C:\users\dima\desktop\eclipse\eclipse.exe] => (Allow) C:\users\dima\desktop\eclipse\eclipse.exe
FirewallRules: [UDP Query User{13A19341-79DD-4889-B496-24BB0AA8C4C2}C:\users\dima\desktop\eclipse\eclipse.exe] => (Allow) C:\users\dima\desktop\eclipse\eclipse.exe
FirewallRules: [TCP Query User{95CD7A11-031A-4E37-B3A1-64F53A1F7A75}C:\program files\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{9B60CDE5-BA1E-4E6D-BDF3-C1056F5F8650}C:\program files\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{C4E30886-3358-4A99-BE81-2F5BED09E73D}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [UDP Query User{710835ED-1463-4E58-8DB1-9F37F56C4A0F}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [TCP Query User{C7584B0F-6622-4E1D-8987-9D85C77F36F0}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [UDP Query User{F365D46D-EED4-49F4-93DF-234F94019BB2}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [TCP Query User{63488A2D-8F13-4C4E-8CC0-49944F9372BA}C:\users\dima\desktop\lancraft\lancraft.exe] => (Allow) C:\users\dima\desktop\lancraft\lancraft.exe
FirewallRules: [UDP Query User{EAEC2D64-0B8E-4599-A61B-53F358A64796}C:\users\dima\desktop\lancraft\lancraft.exe] => (Allow) C:\users\dima\desktop\lancraft\lancraft.exe
FirewallRules: [TCP Query User{A91AD53F-87ED-432A-9D7C-0AC95375B702}C:\users\dima\desktop\warcraft\war3.exe] => (Allow) C:\users\dima\desktop\warcraft\war3.exe
FirewallRules: [UDP Query User{CC9DF559-105D-4031-9013-ADF7BC24CFC3}C:\users\dima\desktop\warcraft\war3.exe] => (Allow) C:\users\dima\desktop\warcraft\war3.exe
FirewallRules: [TCP Query User{6E3020FE-2B2A-413D-8EBC-AC0261DDA56B}C:\users\dima\desktop\warcraft\lancraft.exe] => (Allow) C:\users\dima\desktop\warcraft\lancraft.exe
FirewallRules: [UDP Query User{83FC41EC-2250-4389-B57F-7CF1CF138244}C:\users\dima\desktop\warcraft\lancraft.exe] => (Allow) C:\users\dima\desktop\warcraft\lancraft.exe
FirewallRules: [{E762770A-34B1-461E-B15E-FFC052875F0A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\CastleCrashers\castle.exe
FirewallRules: [{32B2CED0-8283-4A5A-8965-FFCB653C38DA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\CastleCrashers\castle.exe
FirewallRules: [TCP Query User{CA917D8D-9E80-4B19-90E8-110407378DDD}C:\program files (x86)\unity\editor\unity.exe] => (Allow) C:\program files (x86)\unity\editor\unity.exe
FirewallRules: [UDP Query User{4A9F69B2-9BB4-4F0E-B34D-4D95E242700A}C:\program files (x86)\unity\editor\unity.exe] => (Allow) C:\program files (x86)\unity\editor\unity.exe
FirewallRules: [{5A44804A-99EB-4C63-8F18-C9310F1C4657}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe
FirewallRules: [{5C90DDB5-DFDC-4BF5-B6D0-B86A95AEE724}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe
FirewallRules: [TCP Query User{DD861486-7A78-460B-9A83-BFA67BC6A454}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [UDP Query User{21543651-AA0C-4F30-B6F4-14C779C5E70B}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [TCP Query User{5C83AE95-A82A-49CA-B905-4EFC8C6961F9}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [UDP Query User{640696E3-D785-4576-883E-596F24E072B3}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [{5880095B-DD8E-4F79-BA8F-727A270A9A7B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dungeon Defenders\Binaries\Win32\DungeonDefenders.exe
FirewallRules: [{A02B8413-228D-4E79-9B24-1B23EEBA9CE2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dungeon Defenders\Binaries\Win32\DungeonDefenders.exe
FirewallRules: [TCP Query User{E5CD1AD8-4898-41F1-880E-C3CCEEF12C49}C:\program files (x86)\secondlifeviewer\slvoice.exe] => (Allow) C:\program files (x86)\secondlifeviewer\slvoice.exe
FirewallRules: [UDP Query User{37F84E6A-EF30-44B7-8E99-DE3F7E7DF7EE}C:\program files (x86)\secondlifeviewer\slvoice.exe] => (Allow) C:\program files (x86)\secondlifeviewer\slvoice.exe
FirewallRules: [TCP Query User{2478D171-94B3-4D1F-8C59-4E8322B8E276}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{28D75031-A654-47AF-802E-4A9A15D5EF3F}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{3A112284-5247-4174-9FB4-B86BFEBD19F9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{B2899169-D59D-4AC1-BBE3-3F3903152981}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{12C4EFF7-DD2B-4A0E-A3A0-98777451B440}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3.exe
FirewallRules: [{4060C2B9-6F65-462B-9221-EEEBCF58BB56}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3.exe
FirewallRules: [{EFA22BC5-7DE3-47F6-8167-289BFDD93178}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3_Unrestricted.exe
FirewallRules: [{C0D1322B-FEBC-4B0A-BD29-158C54B47C3F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3_Unrestricted.exe
FirewallRules: [{13A229AF-4A20-4E5A-B1D5-E4DA450947FA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Gumboy Tournament\gumboytournament.exe
FirewallRules: [{BD506B34-1746-48BC-A17D-29CE55B609BC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Gumboy Tournament\gumboytournament.exe
FirewallRules: [TCP Query User{E9B42C51-F75A-4042-8D09-5FE64A6E0AFD}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe
FirewallRules: [UDP Query User{A47B5394-0D06-4B60-AEAC-F80C6A18EC73}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe
FirewallRules: [{1F0F5A11-9A4F-49CF-8202-86A2DAEB8299}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_launcher.exe
FirewallRules: [{472579C8-4E14-4D30-9C6E-7C1E88FAB3FD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe
FirewallRules: [{09D4FEB7-995B-4579-90DC-1C535713E99A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe
FirewallRules: [{418B6FDA-1046-4E47-AFFC-EC7C31A532E9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe
FirewallRules: [{7199E669-27DE-4BFD-94D5-FDCF6A7C93AA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe
FirewallRules: [{BFF61270-CC5A-432C-A7FB-7D76DC47C782}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium.exe
FirewallRules: [{490B16FF-C2D2-4175-A366-EFDAA08EB979}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium.exe
FirewallRules: [TCP Query User{C9F38270-E9E5-4168-9E99-11073C550934}C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe
FirewallRules: [UDP Query User{6082536E-F697-45B2-969C-5E5CA8E07E06}C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe
FirewallRules: [TCP Query User{5AC0DF45-9E80-410D-A952-1DDA7A565671}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{31F72C84-B935-4C8E-8E1E-6FBDDC891D1C}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe
FirewallRules: [{8EB84DED-EB81-4D74-9575-8282402E2D2E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cryptic Studios\Neverwinter.exe
FirewallRules: [{B5B40F25-2AC6-4642-8BBC-63AE2A925B7B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cryptic Studios\Neverwinter.exe
FirewallRules: [TCP Query User{096444F6-AA1C-44A3-8C5E-A8DFF4A1C6D0}C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe
FirewallRules: [UDP Query User{9E1BE6EE-CCE2-4CFC-8375-7D1F41A71285}C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe
FirewallRules: [{3E6ED98E-B2F8-4E5F-BAED-9D8ACD743A90}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{2F7FD9C7-09FF-4330-AB1D-62122B26142B}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{B6917A43-4FD1-4943-819E-0224DF009AD4}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{580CEC6F-22A8-423D-B6A2-60898E1991C0}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{1D779765-CEC8-476D-8663-FF565F9943D2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dragon Nest Europe\DragonNest\DragonNest.exe
FirewallRules: [{BFD8F340-3BB5-4D13-B4C8-64605B781AE5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dragon Nest Europe\DragonNest\DragonNest.exe
FirewallRules: [TCP Query User{51AE804F-C3F0-4BE7-8861-486111D1A4C3}C:\neople\dfo\dfo.exe] => (Allow) C:\neople\dfo\dfo.exe
FirewallRules: [UDP Query User{813C44E8-970E-4FB2-A994-1B7E6CFAB002}C:\neople\dfo\dfo.exe] => (Allow) C:\neople\dfo\dfo.exe
FirewallRules: [{0FE2304A-0072-4655-BD88-8EAC2F3EE694}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7C5F9697-EA12-4FD9-AA6A-450DA3B7D57A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{C5FE8083-9835-43F3-84CC-1CE403C9CBA7}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{82994BB7-EAE8-4B5D-9D16-0C4D21C9BEBD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe
FirewallRules: [{5AE542AF-7756-45E9-8C69-ED3AA9618842}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe
FirewallRules: [{B0B5A360-9E6E-443A-90B8-80094D1A2B73}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AdVenture Capitalist\adventure-capitalist.exe
FirewallRules: [{9C15C70C-9E4C-4502-92C2-C767C7E22FB5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AdVenture Capitalist\adventure-capitalist.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service

==================== Faulty Device Manager Devices =============

Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/18/2015 01:34:01 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/18/2015 01:33:59 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/18/2015 01:33:48 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/18/2015 01:33:48 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/18/2015 01:33:48 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/18/2015 01:32:30 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/18/2015 01:32:23 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/18/2015 01:32:23 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/18/2015 01:32:20 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (05/17/2015 03:34:41 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm csgo.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 2718

Startzeit: 01d090419913fd3d

Endzeit: 32

Anwendungspfad: C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe

Berichts-ID:


System errors:
=============
Error: (05/18/2015 03:55:36 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275

Error: (05/18/2015 03:55:36 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\Dima\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (05/18/2015 03:55:35 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275

Error: (05/18/2015 03:55:35 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\Dima\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (05/18/2015 03:55:35 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275

Error: (05/18/2015 03:55:35 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\Dima\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (05/18/2015 03:55:34 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275

Error: (05/18/2015 03:55:34 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\Dima\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (05/18/2015 03:55:34 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275

Error: (05/18/2015 03:55:34 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\Dima\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.


Microsoft Office Sessions:
=========================
Error: (05/18/2015 01:34:01 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (05/18/2015 01:33:59 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (05/18/2015 01:33:48 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Dima\Desktop\Downloads\esetsmartinstaller_deu.exe

Error: (05/18/2015 01:33:48 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Dima\Desktop\Downloads\esetsmartinstaller_deu.exe

Error: (05/18/2015 01:33:48 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (05/18/2015 01:32:30 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Dima\Desktop\Downloads\esetsmartinstaller_deu.exe

Error: (05/18/2015 01:32:23 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Dima\Desktop\Downloads\esetsmartinstaller_deu.exe

Error: (05/18/2015 01:32:23 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Dima\Desktop\Downloads\esetsmartinstaller_deu.exe

Error: (05/18/2015 01:32:20 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Dima\Desktop\Downloads\esetsmartinstaller_deu.exe

Error: (05/17/2015 03:34:41 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: csgo.exe0.0.0.0271801d090419913fd3d32C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe


CodeIntegrity Errors:
===================================
  Date: 2015-05-12 12:56:52.122
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-05-12 12:56:52.091
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-05-08 20:38:53.994
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:37:07.273
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:37:03.798
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:36:19.340
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:34:40.221
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:34:12.814
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:20:56.969
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-05-08 20:20:56.706
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5-4570 CPU @ 3.20GHz
Percentage of memory in use: 40%
Total physical RAM: 8136.6 MB
Available physical RAM: 4800.99 MB
Total Pagefile: 16271.39 MB
Available Pagefile: 12184.91 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:915.41 GB) (Free:455.78 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 277A7941)
Partition 1: (Not Active) - (Size=16 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=915.4 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Bootsektor 18.05.2015 22:44
Hallo,

hast du die Quarantäne gezippt und mit einem Passwort versehen? Wir brauchen die füür weitere Analysen, ansonsten nochmal upload versuchen. Danke dir.

kriegnes 19.05.2015 15:27
Hat diesmal funktioniert. (Die Email nicht das uploaden.)


Alle Zeitangaben in WEZ +1. Es ist jetzt 13:23 Uhr.
Seite 2 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19