Trojaner-Board - Adware geht nicht mehr weg

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Adware geht nicht mehr weg (https://www.trojaner-board.de/166848-adware-geht-mehr-weg.html)

kriegnes

11.05.2015 20:50

Adware geht nicht mehr weg

Während meiner Abschlussfahrt hat mein Bruder eine Menge Adware auf den PC geladen.
Diese krieg ich jetzt nicht mehr weg :/
Es ist überall Werbung wo Ads by info steht. Alles hängt und spackt rum. Es öffnen sich andauern neue Tabs und oft ändern sich meine Tabs sogar einfach.
Ich habe bereits alles in Systemsteurung -> Programme deinstalliert. Habe 3 oder 4 anitviren Software gedownloaded (von denen auch welche hier empfohlen wurden) Aber erst nach dem ich den Browser zurückgesetzt und neu installiert habe war die Adware weg. Jetzt kam sie aber einfach wieder zurück. Mein Brwoser ist ein paar mal abgestürzt und dann war sie wieder da.
Weis jemand was ich noch machen kann? Win7 komplett neu zu installieren wäre echt scheiße :/

Bootsektor

11.05.2015 20:56

:hallo:

Mein Name ist Sandra und ich werde Dir bei Deinem Problem behilflich sein.

Bitte arbeite alle Schritte der Reihe nach ab.
Lese die Anleitungen sorgfältig durch bevor Du beginnst. Wenn es Probleme gibt oder Du etwas nicht verstehst, dann stoppe mit Deiner Ausführung und beschreibe mir das Problem
Führe bitte nur Scans durch zu denen Du von mir aufgefordert wirst.
Bitte kein Crossposting ( posten in mehreren Foren).
Installiere oder deinstalliere während der Bereinigung keine Software, ausser Du wurdest dazu aufgefordert.
Poste die Logfiles direkt in deinen Thread in Code-Tags.
Bedenke, dass wir hier alle während unserer Freizeit tätig sind, wenn du innerhalb von 2 Tagen nichts von mir hörst, dann schreibe mir bitte eine PM.

Hinweis: Ich kann Dir niemals eine Garantie geben, dass ich auch alles finde. Eine Formatierung ist meist der schnellere und bei einem Befall durch Malware immer der sicherste Weg. Adware lässt sich in den allermeisten Fällen problemlos entfernen.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Dir jemand vom Team sagt, dass Du clean bist.

Posten in Code Tags
Bitte füge die Logs immer in Code-Tags ein. Wenn Du das nicht machst, erschwert es mir sehr das Auswerten. Danke.
Dazu:

Klicke über dem Antwortfenster auf die Raute #, dann steht dort in eckigen Klammern [] CODE /CODE.
Zwischen den beiden code-Bausteinen fügst Du dann deine Logfiles ein. Also CODE Logfile /CODE
Wenn die Logs zu lang sein sollten, dann teile sie bitte auf und poste sie dann hier in Deinem Thread, notfalls in mehreren Antworten.

Schritt 1
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

kriegnes

11.05.2015 21:11

FRST.txt

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-05-2015

Ran by Dima (administrator) on DIMAS-PC on 11-05-2015 22:03:08

Running from C:\Users\Dima\Desktop\Downloads

Loaded Profiles: Dima (Available profiles: Dima)

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: FF)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

() C:\Windows\ftb.exe

(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

(Akamai Technologies, Inc.) C:\Users\Dima\AppData\Local\Akamai\netsession_win.exe

(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe

(Akamai Technologies, Inc.) C:\Users\Dima\AppData\Local\Akamai\netsession_win.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

() C:\Windows\mftb.exe

(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe

(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe

(Microsoft Corporation) C:\Windows\System32\mqsvc.exe

(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe

(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe

(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 2\creator-ws.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe

(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe

(AVM Berlin) C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry.exe

(Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe

(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe

(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe

(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.OE.Systray.exe

(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe

() C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe

() C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.244\deploy\LoLLauncher.exe

() C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.28\deploy\LoLPatcher.exe

() C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.143\deploy\LolClient.exe

(Firaxis Games) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\CivilizationV_DX11.exe

(Valve Corporation) C:\Program Files (x86)\Steam\GameOverlayUI.exe

(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_encoder_server-94307.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11785832 2011-03-10] (Realtek Semiconductor)

HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1332296 2015-01-30] (Microsoft Corporation)

HKLM\...\Run: [3D BubbleSound] => "C:\Program Files\BubbleSound\3D BubbleSound.exe"

HKLM-x32\...\Run: [SuiteTray] => C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [340848 2011-04-02] (Egis Technology Inc.)

HKLM-x32\...\Run: [EgisTecPMMUpdate] => C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [408432 2011-03-29] (Egis Technology Inc.)

HKLM-x32\...\Run: [EgisUpdate] => C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [202608 2011-03-29] (Egis Technology Inc.)

HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [297280 2011-04-24] (NTI Corporation)

HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)

HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55568 2015-03-25] (Raptr, Inc)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-11-17] (DivX, LLC)

HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-03-30] (LogMeIn Inc.)

HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [933888 2012-08-21] (AVM Berlin)

HKLM-x32\...\Run: [gmsd_de_485] => [X]

HKLM-x32\...\Run: [gmsd_de_497] => [X]

HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\Launcher\Avira.OE.Systray.exe [127792 2015-04-21] (Avira Operations GmbH & Co. KG)

Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]

HKU\S-1-5-19\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}

HKU\S-1-5-20\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2888384 2015-05-08] (Valve Corporation)

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3619160 2015-01-28] (Electronic Arts)

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Dima\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-30] (Akamai Technologies, Inc.)

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Dxtory Update Checker 2.0] => C:\Program Files (x86)\ExKode\Dxtory2.0\UpdateChecker.exe [93696 2010-10-17] (Dxtory Software)

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [\\DIMA-PC\EPSON SX210 Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFDE.EXE [223232 2008-11-05] (SEIKO EPSON CORPORATION)

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [GameTracker] => "C:\Program Files (x86)\GameTracker\GTLite.exe"

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [AMDToggler] => C:\Users\Dima\AppData\Local\Temp\Rar$EXa0.826\Saturation Toggler.exe <===== ATTENTION

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [GoogleChromeAutoLaunch_74AB638E1E27FA41128D672CA46F567E] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [812872 2015-04-28] (Google Inc.)

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\MountPoints2: {b38c492d-9357-11e3-9d9f-b52bea23c753} - E:\pushinst.exe

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\MountPoints2: {d0b228e3-004f-11e3-8572-a5256f050d2a} - E:\pushinst.exe

HKU\S-1-5-18\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2014-08-23]

ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)

Startup: C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk [2015-05-05]

ShortcutTarget: hqghumeaylnlf.lnk -> C:\ProgramData\{b3779435-d2fb-f000-b377-79435d2f50d7}\hqghumeaylnlf.exe (No File)

BootExecute: autocheck autochk * sdnclean64.exe

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKU\S-1-5-21-221738678-620704744-704572411-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.

ProxyServer: [.DEFAULT] => http=127.0.0.1:63783;https=127.0.0.1:63783

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com

HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll No File

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28] (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation)

BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)

BHO-x32: PDF Architect Helper -> {691B33B0-B86E-47F3-81C7-56E4FE3B929C} -> C:\Program Files (x86)\PDF Architect 2\creator-ie-helper.dll [2014-10-10] (pdfforge GmbH)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28] (Oracle Corporation)

BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation)

Toolbar: HKLM-x32 - PDF Architect Toolbar - {DEEB13D7-CEA9-45FB-B77C-E039BEC85221} - C:\Program Files (x86)\PDF Architect 2\creator-ie-plugin.dll [2014-10-10] (pdfforge GmbH)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

StartMenuInternet: IEXPLORE.EXE - iexplore.exe
 

FireFox:

========

FF ProfilePath: C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)

FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll [2014-09-01] (EA Digital Illusions CE AB)

FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-28] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2013-09-08] (Microsoft Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-11-12] (VideoLAN)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll [2014-06-24] (Adobe Systems, Inc.)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)

FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2014-11-21] (DivX, LLC)

FF Plugin-x32: @esn/npbattlelog,version=2.3.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll No File

FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll [2014-09-01] (EA Digital Illusions CE AB)

FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-28] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation)

FF Plugin-x32: @mcafee.com/SAFFPlugin -> C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll No File

FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2013-09-08] (Microsoft Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)

FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npnxgameEU.dll [2014-11-12] (Nexon)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)

FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll [2014-10-10] (pdfforge GmbH)

FF Plugin HKU\S-1-5-21-221738678-620704744-704572411-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Dima\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS)

FF Extension: jid0XZn6pYCdV3ANrfYigxlyyGDrxAMjetpack - C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\Extensions\jid0-XZn6pYCdV3ANrfYigxlyyGDrxAM@jetpack [2015-05-11]

FF Extension: 9b9d2aaaae264447a7a1633a32b19ddd - C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\Extensions\{9b9d2aaa-ae26-4447-a7a1-633a32b19ddd} [2015-05-11]

FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor

FF HKLM-x32\...\Firefox\Extensions: [pdf_architect_2_conv@pdfarchitect.org] - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension

FF Extension: PDF Architect 2 Creator - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension [2015-02-26]

FF HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi

FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]

FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\browser\defaults\preferences\prefs.js [2015-05-11]
 

Chrome: 

=======

CHR Profile: C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Slides) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-05-08]

CHR Extension: (Google Docs) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-05-08]

CHR Extension: (Google Drive) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-05-08]

CHR Extension: (YouTube) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-05-08]

CHR Extension: (Google Search) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-05-08]

CHR Extension: (Google Sheets) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-05-08]

CHR Extension: (Bookmark Manager) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-08]

CHR Extension: (iilcekgoelpgecpjnnoikhbleipnjdhf) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\iilcekgoelpgecpjnnoikhbleipnjdhf [2015-05-11]

CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-08]

CHR Extension: (ljppcglljemjablfhgjdhndlpallobpl) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljppcglljemjablfhgjdhndlpallobpl [2015-05-11]

CHR Extension: (Google Wallet) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]

CHR Extension: (pioclpoplcdbaefihamjohnefbikjilc) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2015-05-10]

CHR Extension: (Gmail) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-08]
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [205616 2015-04-21] (Avira Operations GmbH & Co. KG)

S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [237864 2015-03-21] (EasyAntiCheat Ltd)

R2 ftb; c:\windows\ftb.exe [417792 2015-05-05] () [File not signed]

R2 GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [29696 2011-05-26] (Acer Incorporated) [File not signed]

S2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2015-02-16] (Hi-Rez Studios) [File not signed]

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-03-30] (LogMeIn, Inc.)

S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)

R2 mftb; c:\windows\mftb.exe [408576 2015-05-05] () [File not signed]

R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2015-01-30] (Microsoft Corporation)

R2 MSMQ; C:\Windows\system32\mqsvc.exe [9216 2009-07-14] (Microsoft Corporation)

R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366512 2015-01-30] (Microsoft Corporation)

S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5128944 2013-11-19] (INCA Internet Co., Ltd.) [File not signed]

R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256832 2011-04-24] (NTI Corporation)

S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910640 2015-03-02] (Electronic Arts)

S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-10-10] (pdfforge GmbH)

R2 PDF Architect 2 Creator; C:\Program Files (x86)\PDF Architect 2\creator-ws.exe [738856 2014-10-10] (pdfforge GmbH)

S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-10-10] (pdfforge GmbH)

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-10-11] ()

S2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)

R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)

R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)

S3 Survarium-Steam Update Service; C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium_service.exe [76408 2015-04-03] ()

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

S2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2012-04-25] (AVM Berlin)

R3 fwlanusb5; C:\Windows\System32\DRIVERS\fwlanusb5.sys [982784 2012-08-21] (AVM GmbH)

S3 GameKB; C:\Windows\System32\drivers\GameKB.sys [27648 2012-05-11] () [File not signed]

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [274696 2014-11-15] (Microsoft Corporation)

R3 MQAC; C:\Windows\System32\drivers\mqac.sys [189440 2009-07-14] (Microsoft Corporation)

R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124560 2014-11-15] (Microsoft Corporation)

S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-05-17] (Anchorfree Inc.)

S3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2014-07-02] (SplitmediaLabs Limited)

S3 BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [X]

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

S3 hxsyol; \??\C:\AeriaGames\AuraKingdom\avital\hxsy64.sys [X]

S1 qrnfd_1_10_0_13; system32\drivers\qrnfd_1_10_0_13.sys [X]

S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-05-11 22:03 - 2015-05-11 22:03 - 00000000 ____D () C:\FRST

2015-05-11 20:59 - 2015-05-11 20:59 - 00000000 ____D () C:\Users\Dima\AppData\Local\My Games

2015-05-10 19:33 - 2015-05-10 19:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2015-05-10 19:33 - 2015-05-10 19:33 - 00000000 ____D () C:\ProgramData\Avira

2015-05-10 19:33 - 2015-05-10 19:33 - 00000000 ____D () C:\Program Files (x86)\Avira

2015-05-10 18:44 - 2015-05-10 18:44 - 00000000 ____D () C:\Users\Dima\AppData\Local\Origin

2015-05-10 18:05 - 2015-05-10 18:05 - 00001117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2015-05-10 18:05 - 2015-05-10 18:05 - 00001105 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk

2015-05-10 18:05 - 2015-05-10 18:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2015-05-10 16:15 - 2015-05-10 16:15 - 00000000 ____D () C:\Users\Dima\AppData\Local\EgisTec IPS

2015-05-10 16:14 - 2015-05-10 16:14 - 00066432 _____ () C:\Users\Dima\AppData\Local\GDIPFONTCACHEV1.DAT

2015-05-10 16:13 - 2015-05-11 21:51 - 00000000 ____D () C:\Users\Dima\AppData\Local\LogMeIn Hamachi

2015-05-10 16:13 - 2015-05-10 16:13 - 00000000 ____D () C:\Users\Dima\AppData\Local\LogMeIn

2015-05-10 16:12 - 2015-05-10 16:12 - 00000000 ____D () C:\Users\Dima\AppData\Local\VirtualStore

2015-05-10 16:07 - 2015-05-10 18:39 - 00000000 ____D () C:\AdwCleaner

2015-05-08 20:43 - 2015-05-08 20:43 - 00000000 ____D () C:\Users\Dima\AppData\Local\openvr

2015-05-08 20:42 - 2015-05-08 20:42 - 00000000 ____D () C:\Users\Dima\AppData\Local\Steam

2015-05-08 20:00 - 2015-05-11 20:00 - 00001008 _____ () C:\Windows\Tasks\vj57Vb6Rn1O3ezZ75nEr.job

2015-05-08 20:00 - 2015-05-11 20:00 - 00000990 _____ () C:\Windows\Tasks\IT7Lg6DU6w1.job

2015-05-08 20:00 - 2015-05-08 20:00 - 00004032 _____ () C:\Windows\System32\Tasks\vj57Vb6Rn1O3ezZ75nEr

2015-05-08 20:00 - 2015-05-08 20:00 - 00004014 _____ () C:\Windows\System32\Tasks\IT7Lg6DU6w1

2015-05-08 19:54 - 2015-05-08 19:54 - 00613255 _____ (CMI Limited) C:\Users\Dima\AppData\Local\nsnE864.tmp

2015-05-08 19:51 - 2015-05-08 19:50 - 00628688 _____ (CMI Limited) C:\Users\Dima\AppData\Local\nsb44A6.tmp

2015-05-08 19:44 - 2015-05-08 19:44 - 00000000 ____D () C:\Users\Dima\AppData\Local\Macromedia

2015-05-08 19:43 - 2015-05-09 22:34 - 00000000 ____D () C:\Users\Dima\AppData\Local\Mozilla

2015-05-08 18:41 - 2015-05-08 18:41 - 00000000 ____D () C:\Users\Dima\AppData\Local\ATI

2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieUserList

2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieSiteList

2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieBrowserModeList

2015-05-08 14:49 - 2015-05-08 14:49 - 00000000 ____D () C:\ProgramData\Kikblaster

2015-05-08 14:38 - 2015-05-11 14:38 - 00000990 _____ () C:\Windows\Tasks\WfqE0YhY0IU.job

2015-05-08 14:38 - 2015-05-11 14:38 - 00000982 _____ () C:\Windows\Tasks\DXbbq3U.job

2015-05-08 14:38 - 2015-05-08 14:38 - 00004014 _____ () C:\Windows\System32\Tasks\WfqE0YhY0IU

2015-05-08 14:38 - 2015-05-08 14:38 - 00004006 _____ () C:\Windows\System32\Tasks\DXbbq3U

2015-05-08 14:33 - 2015-05-08 19:54 - 00000000 ____D () C:\Program Files (x86)\Edu App

2015-05-08 14:20 - 2015-05-08 14:52 - 00000000 ____D () C:\Users\Dima\AppData\Local\00000000-1431094823-0000-0000-D43D7EBF2FB4

2015-05-08 14:16 - 2015-05-08 14:16 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webTinstMKTN84_01009.Wdf

2015-05-05 21:45 - 2015-05-08 14:45 - 00000000 ___HD () C:\ProgramData\ftb

2015-05-05 21:13 - 2015-05-08 21:13 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7

2015-05-05 21:12 - 2015-05-05 21:12 - 00631296 _____ () C:\Windows\ftb.dat

2015-05-05 21:12 - 2015-05-05 21:12 - 00417792 _____ () C:\Windows\ftb.exe

2015-05-05 21:12 - 2015-05-05 21:12 - 00408576 _____ () C:\Windows\mftb.exe

2015-05-04 20:34 - 2015-05-04 20:34 - 00059505 _____ () C:\Users\Dima\Documents\ts3_clientui-win64-1407159763-2015-05-04 20_34_27.843240.dmp

2015-04-26 16:02 - 2015-04-26 16:02 - 00000000 ____D () C:\Users\Dima\Documents\DFO

2015-04-25 20:20 - 2015-04-25 20:20 - 00001734 _____ () C:\Users\Public\Desktop\Dungeon Fighter Online.lnk

2015-04-25 20:20 - 2015-04-25 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\neople

2015-04-25 20:20 - 2015-04-25 20:20 - 00000000 ____D () C:\Neople

2015-04-25 15:57 - 2015-04-26 13:15 - 00000000 ____D () C:\Users\Dima\Documents\DragonNest

2015-04-24 12:20 - 2015-05-10 18:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2015-04-20 16:05 - 2015-04-20 16:05 - 01579520 _____ () C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1.exe

2015-04-20 16:05 - 2015-04-20 16:05 - 01579520 _____ () C:\Users\Dima\AppData\Roaming\DXbbq3U.exe

2015-04-20 16:05 - 2015-04-20 16:05 - 01246720 _____ () C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe

2015-04-20 16:05 - 2015-04-20 16:05 - 01246720 _____ () C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe

2015-04-20 13:37 - 2015-04-20 13:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FRITZ!WLAN

2015-04-20 13:37 - 2015-04-20 13:37 - 00000000 ____D () C:\Program Files (x86)\avmwlanstick

2015-04-20 13:36 - 2015-04-20 13:36 - 00000000 ____D () C:\Users\Dima\AVM_Driver

2015-04-20 13:36 - 2012-04-25 01:00 - 00014120 _____ (AVM Berlin) C:\Windows\system32\Drivers\avmeject.sys

2015-04-20 00:51 - 2015-04-20 00:51 - 00002956 _____ () C:\Windows\avmacc1.log

2015-04-20 00:51 - 2012-07-12 02:00 - 00480632 _____ (AVM Berlin) C:\Windows\instwcli.dex

2015-04-20 00:45 - 2015-04-20 00:45 - 00003216 _____ () C:\Windows\System32\Tasks\{35EE529B-2794-4708-8B79-567E126A4A7F}

2015-04-20 00:05 - 2015-04-20 13:36 - 00001479 _____ () C:\Windows\avmsetup.log

2015-04-20 00:05 - 2015-04-20 13:36 - 00000490 _____ () C:\Windows\avmadd32.log

2015-04-20 00:05 - 2015-04-20 00:54 - 00197887 _____ () C:\Windows\avmacc.log

2015-04-20 00:05 - 2015-04-20 00:44 - 00000000 ____D () C:\Program Files (x86)\AVM_update

2015-04-19 20:43 - 2015-04-19 20:43 - 00001906 _____ () C:\Users\Dima\Desktop\EliteDekaron.lnk

2015-04-19 20:43 - 2015-04-19 20:43 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Elite Dekaron

2015-04-19 20:40 - 2015-04-19 21:03 - 00000000 ____D () C:\Program Files (x86)\Elite Dekaron

2015-04-19 20:40 - 2015-04-19 20:40 - 00000000 ____D () C:\Windows\Elite Dekaron

2015-04-19 14:20 - 2015-04-19 14:20 - 00005872 _____ () C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1

2015-04-19 14:20 - 2015-04-19 14:20 - 00005872 _____ () C:\Users\Dima\AppData\Roaming\DXbbq3U

2015-04-16 16:36 - 2015-04-16 16:43 - 00000000 ___SD () C:\Windows\system32\GWX

2015-04-16 16:36 - 2015-04-16 16:36 - 00000000 ___SD () C:\Windows\SysWOW64\GWX

2015-04-15 21:14 - 2015-04-15 21:14 - 18178736 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe

2015-04-14 20:39 - 2015-03-25 05:24 - 03298816 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 02553856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2015-04-14 20:39 - 2015-03-25 05:23 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-04-14 20:39 - 2015-03-25 05:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-04-14 20:39 - 2015-03-25 05:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll

2015-04-14 20:39 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2015-04-14 20:39 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2015-04-14 20:39 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2015-04-14 20:39 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2015-04-14 20:39 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2015-04-14 20:39 - 2015-03-23 05:25 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2015-04-14 20:39 - 2015-03-23 05:25 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2015-04-14 20:39 - 2015-03-23 05:24 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2015-04-14 20:39 - 2015-03-23 05:24 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2015-04-14 20:39 - 2015-03-23 05:24 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2015-04-14 20:39 - 2015-03-23 05:24 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2015-04-14 20:39 - 2015-03-23 05:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

2015-04-14 20:39 - 2015-03-23 05:17 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2015-04-14 20:39 - 2015-03-17 07:22 - 05557696 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-04-14 20:39 - 2015-03-17 07:22 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-04-14 20:39 - 2015-03-17 07:22 - 00095672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-04-14 20:39 - 2015-03-17 07:19 - 01727904 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2015-04-14 20:39 - 2015-03-17 07:17 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2015-04-14 20:39 - 2015-03-17 07:17 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-04-14 20:39 - 2015-03-17 07:16 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2015-04-14 20:39 - 2015-03-17 07:16 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2015-04-14 20:39 - 2015-03-17 07:15 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2015-04-14 20:39 - 2015-03-17 07:15 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-04-14 20:39 - 2015-03-17 07:15 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-04-14 20:39 - 2015-03-17 07:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2015-04-14 20:39 - 2015-03-17 07:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2015-04-14 20:39 - 2015-03-17 06:59 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2015-04-14 20:39 - 2015-03-17 06:56 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2015-04-14 20:39 - 2015-03-17 06:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2015-04-14 20:39 - 2015-03-17 06:56 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2015-04-14 20:39 - 2015-03-10 05:25 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2015-04-14 20:39 - 2015-03-10 05:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2015-04-14 20:39 - 2015-03-10 05:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2015-04-14 20:39 - 2015-03-10 05:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2015-04-14 20:39 - 2015-03-05 07:12 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2015-04-14 20:39 - 2015-03-05 06:05 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2015-04-14 20:38 - 2015-03-17 07:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2015-04-14 20:38 - 2015-03-17 07:16 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-04-14 20:38 - 2015-03-17 07:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-04-14 20:38 - 2015-03-17 07:13 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-04-14 20:38 - 2015-03-17 07:13 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2015-04-14 20:38 - 2015-03-17 06:57 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2015-04-14 20:38 - 2015-03-17 06:56 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2015-04-14 20:38 - 2015-03-17 06:56 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2015-04-14 20:38 - 2015-03-17 06:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2015-04-14 20:38 - 2015-03-17 06:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2015-04-14 20:38 - 2015-03-17 06:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2015-04-14 20:38 - 2015-03-17 06:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 05:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2015-04-14 20:38 - 2015-03-17 05:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2015-04-14 20:38 - 2015-03-17 05:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 05:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2015-04-14 20:38 - 2015-03-04 06:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys

2015-04-14 20:38 - 2015-03-04 06:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll

2015-04-14 20:38 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll

2015-04-14 20:38 - 2015-02-25 05:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys

2015-04-14 18:28 - 2015-04-14 18:28 - 00004387 _____ () C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU

2015-04-14 18:28 - 2015-04-14 18:28 - 00004387 _____ () C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-05-11 21:52 - 2013-08-15 21:16 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-05-11 21:30 - 2013-11-06 17:55 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Raptr

2015-05-11 21:14 - 2013-08-15 14:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-05-11 21:03 - 2013-08-08 20:19 - 01789936 _____ () C:\Windows\WindowsUpdate.log

2015-05-11 20:59 - 2013-08-08 21:08 - 00000000 ____D () C:\Program Files (x86)\Steam

2015-05-11 19:19 - 2013-09-21 18:06 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\TS3Client

2015-05-11 13:55 - 2009-07-14 06:45 - 00028928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-05-11 13:55 - 2009-07-14 06:45 - 00028928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-05-11 13:51 - 2013-08-15 21:16 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-05-10 19:33 - 2013-10-04 17:11 - 00000000 ____D () C:\ProgramData\Package Cache

2015-05-10 19:15 - 2009-07-14 06:51 - 00120977 _____ () C:\Windows\setupact.log

2015-05-10 18:49 - 2013-08-09 06:11 - 00699416 _____ () C:\Windows\system32\perfh007.dat

2015-05-10 18:49 - 2013-08-09 06:11 - 00149556 _____ () C:\Windows\system32\perfc007.dat

2015-05-10 18:49 - 2009-07-14 07:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-05-10 18:44 - 2013-08-17 15:43 - 00000000 ____D () C:\ProgramData\Origin

2015-05-10 18:40 - 2010-11-21 05:47 - 00399402 _____ () C:\Windows\PFRO.log

2015-05-10 18:40 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-05-10 18:19 - 2014-11-14 00:10 - 00000000 ____D () C:\Users\Dima\Desktop\lqobqwkv.default

2015-05-10 17:35 - 2013-08-17 15:43 - 00000481 _____ () C:\Windows\wininit.ini

2015-05-10 16:42 - 2014-10-05 15:02 - 00000000 ____D () C:\Users\Dima\AppData\Local\Adobe

2015-05-10 16:42 - 2014-01-07 19:34 - 01824768 ___SH () C:\Users\Dima\Desktop\Thumbs.db

2015-05-10 16:15 - 2013-12-20 13:37 - 00000000 ____D () C:\Users\Dima\AppData\Local\Akamai

2015-05-10 16:15 - 2013-08-17 15:43 - 00000000 ____D () C:\Program Files (x86)\Origin

2015-05-10 16:12 - 2013-08-08 15:36 - 00001419 _____ () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2015-05-10 16:10 - 2014-11-26 23:57 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WorldofTanks

2015-05-08 21:41 - 2013-12-30 15:03 - 00000000 ____D () C:\Program Files (x86)\7-Zip

2015-05-08 21:39 - 2013-12-18 15:08 - 00000000 ____D () C:\Program Files (x86)\ACASystems

2015-05-08 18:40 - 2013-11-02 02:16 - 00000000 ____D () C:\Users\Dima\Desktop\Neuer Ordner

2015-05-08 18:40 - 2013-08-15 21:16 - 00000000 ____D () C:\Users\Dima\AppData\Local\Google

2015-05-08 14:52 - 2014-11-30 22:57 - 00000000 ____D () C:\Users\Dima\AppData\Local\gegl-0.2

2015-05-08 14:52 - 2013-12-14 00:39 - 00000000 ____D () C:\Users\Dima\AppData\Local\Battle.net

2015-05-08 14:16 - 2014-02-09 01:27 - 00000306 __RSH () C:\ProgramData\ntuser.pol

2015-05-08 13:16 - 2013-08-15 15:52 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Skype

2015-05-03 15:37 - 2015-04-10 17:41 - 00000000 ____D () C:\Users\Dima\Desktop\eclipse

2015-05-02 22:30 - 2014-11-23 16:19 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\.technic

2015-05-02 22:30 - 2014-08-25 02:48 - 04697768 _____ () C:\Users\Dima\Desktop\TechnicLauncher.exe

2015-05-02 22:28 - 2014-08-09 17:35 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\.minecraft

2015-04-27 16:21 - 2015-02-28 15:34 - 00000000 ____D () C:\Users\Dima\Desktop\Bewerbung

2015-04-20 13:37 - 2014-02-12 19:55 - 00011424 _____ () C:\Windows\avmfwlanci.log

2015-04-20 13:37 - 2014-02-12 19:55 - 00011167 _____ () C:\Windows\AVMInstall.Log

2015-04-20 13:36 - 2014-02-12 19:54 - 00000000 ____D () C:\Windows\AVM_Driver

2015-04-20 13:36 - 2013-08-08 15:34 - 00000000 ____D () C:\Users\Dima

2015-04-20 00:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF

2015-04-18 17:38 - 2013-09-13 14:13 - 00000000 ____D () C:\Program Files (x86)\Raptr

2015-04-18 12:26 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat

2015-04-16 16:36 - 2014-12-22 19:12 - 00000000 ____D () C:\Windows\system32\appraiser

2015-04-16 16:36 - 2014-05-01 14:38 - 00000000 ___SD () C:\Windows\system32\CompatTel

2015-04-16 16:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2015-04-16 12:44 - 2014-02-26 15:58 - 00002022 _____ () C:\Users\Dima\monsterhunter.txt

2015-04-15 21:15 - 2013-08-15 14:45 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-04-15 21:15 - 2013-08-15 14:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2015-04-15 21:15 - 2011-07-25 05:19 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-04-15 12:54 - 2013-09-09 16:14 - 01593956 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2015-04-15 12:52 - 2014-10-06 19:31 - 00000000 ___RD () C:\Program Files (x86)\Skype

2015-04-15 12:52 - 2011-07-25 05:01 - 00000000 ____D () C:\ProgramData\Skype

2015-04-15 12:51 - 2013-11-11 13:25 - 00000000 ____D () C:\Windows\system32\MRT

2015-04-15 12:45 - 2013-11-11 13:25 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
 

==================== Files in the root of some directories =======
 

2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\Dima\AppData\Roaming\DXbbq3U

2015-04-20 16:05 - 2015-04-20 16:05 - 1579520 _____ () C:\Users\Dima\AppData\Roaming\DXbbq3U.exe

2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1

2015-04-20 16:05 - 2015-04-20 16:05 - 1579520 _____ () C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1.exe

2013-11-09 21:45 - 2013-11-09 21:45 - 0000004 _____ () C:\Users\Dima\AppData\Roaming\steam_md4.dat

2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr

2015-04-20 16:05 - 2015-04-20 16:05 - 1246720 _____ () C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe

2014-11-27 23:59 - 2014-11-29 01:59 - 0000068 _____ () C:\Users\Dima\AppData\Roaming\WB.CFG

2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU

2015-04-20 16:05 - 2015-04-20 16:05 - 1246720 _____ () C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe

2015-05-08 19:51 - 2015-05-08 19:50 - 0628688 _____ (CMI Limited) C:\Users\Dima\AppData\Local\nsb44A6.tmp

2015-05-08 19:54 - 2015-05-08 19:54 - 0613255 _____ (CMI Limited) C:\Users\Dima\AppData\Local\nsnE864.tmp

2013-08-08 21:05 - 2013-08-08 21:05 - 0000654 _____ () C:\ProgramData\ArcadeDeluxe5.log
 

Some content of TEMP:

====================

C:\Users\Dima\AppData\Local\Temp\Quarantine.exe

C:\Users\Dima\AppData\Local\Temp\sqlite3.dll
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2011-07-25 04:31
 

==================== End Of Log ============================

--- --- ---

kriegnes

11.05.2015 21:12

Additions.txt

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-05-2015

Ran by Dima at 2015-05-11 22:04:31

Running from C:\Users\Dima\Desktop\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Accounts: =============================
 

Administrator (S-1-5-21-221738678-620704744-704572411-500 - Administrator - Disabled)

Dima (S-1-5-21-221738678-620704744-704572411-1000 - Administrator - Enabled) => C:\Users\Dima

Gast (S-1-5-21-221738678-620704744-704572411-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-221738678-620704744-704572411-1002 - Limited - Enabled)
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}

AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Spybot - Search and Destroy (Disabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )

ACA Screen Recorder 5.30 (HKLM-x32\...\ACAScreenRecorder_EN_is1) (Version: 5.30 - ACA Systems)

Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.99 - NTI Corporation)

Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3502 - Acer Incorporated)

Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3502 - Acer Incorporated)

Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0517.2011 - Acer Incorporated)

Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)

Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)

Adobe Reader X (10.1.13) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.13 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.)

Agarest: Generations of War (HKLM-x32\...\Steam App 237890) (Version:  - Ghostlight)

Age of Empires II: HD Edition (HKLM-x32\...\Steam App 221380) (Version:  - Hidden Path Entertainment, Ensemble Studios)

Akamai NetSession Interface (HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Akamai) (Version:  - Akamai Technologies, Inc)

AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)

Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.36 - Atheros Communications Inc.)

Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team)

Avidemux 2.6 - 64bits (HKLM-x32\...\Avidemux 2.6 - 64bits (64-bit)) (Version: 2.6.8.9046 - )

Avira (HKLM-x32\...\{2d044ded-ae1b-40d3-8d18-97cfda75bd69}) (Version: 1.1.37.14600 - Avira Operations GmbH & Co. KG)

Avira (x32 Version: 1.1.37.14600 - Avira Operations GmbH & Co. KG) Hidden

AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version: 1.2.0.0 - AVM Berlin)

Backup Manager V3 (x32 Version: 3.0.0.99 - NTI Corporation) Hidden

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)

Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.3.2.15221 - Electronic Arts)

Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.5.1 - EA Digital Illusions CE AB)

Borderlands 2 (HKLM-x32\...\Steam App 49520) (Version:  - Gearbox Software)

Call of Duty 4: Modern Warfare (HKLM-x32\...\Steam App 7940) (Version:  - Infinity Ward)

Call of Duty: Black Ops II - Multiplayer (HKLM-x32\...\Steam App 202990) (Version:  - )

Call of Duty: Black Ops II - Zombies (HKLM-x32\...\Steam App 212910) (Version:  - )

Call of Duty: Black Ops II (HKLM-x32\...\Steam App 202970) (Version:  - Treyarch)

Call of Duty: Ghosts - Multiplayer (HKLM-x32\...\Steam App 209170) (Version:  - )

Call of Duty: Ghosts (HKLM-x32\...\Steam App 209160) (Version:  - Infinity Ward)

Call of Duty: Modern Warfare 3 - Multiplayer (HKLM-x32\...\Steam App 42690) (Version:  - Infinity Ward)

Call of Duty: Modern Warfare 3 (HKLM-x32\...\Steam App 42680) (Version:  - Infinity Ward)

Castle Crashers (HKLM-x32\...\Steam App 204360) (Version:  - The Behemoth)

Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)

Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)

Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)

clear.fi Client (HKLM-x32\...\{43AAE145-83CF-4C96-9A5E-756CEFCE879F}) (Version: 1.00.3500 - Acer Incorporated)

Combined Community Codec Pack 2013-11-27 (HKLM-x32\...\Combined Community Codec Pack_is1) (Version: 2013.11.27.0 - CCCP Project)

Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)

Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version:  - Valve)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Darksiders II (HKLM-x32\...\Steam App 50650) (Version:  - Vigil Games)

DFO (HKLM-x32\...\{C1E5C0FB-527E-42C6-BCA0-0A37A6124AE4}) (Version: 1.01.0000 - Neople)

DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.7.0.64 - DivX, LLC)

Dota 2 (HKLM-x32\...\Steam App 570) (Version:  - Valve)

Dragon Nest Europe (HKLM-x32\...\Steam App 258700) (Version:  - Eyedentity Games)

Dungeon Defenders (HKLM-x32\...\Steam App 65800) (Version:  - Trendy Entertainment)

Dxtory version 2.0.128 (HKLM-x32\...\Dxtory2.0_is1) (Version: 2.0.128 - ExKode Co. Ltd.)

Elite Dekaron (HKLM-x32\...\Elite Dekaron1.0) (Version: 1.0 - EliteKingdoms)

EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - )

Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )

Free YouTube to MP3 Converter version 3.12.20.1230 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.20.1230 - DVDVideoSoft Ltd.)

Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Gameforge Live 2.0.5 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.5 - Gameforge)

Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Facepunch Studios)

GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)

Glyph (HKLM-x32\...\Glyph) (Version:  - Trion Worlds, Inc.)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.135 - Google Inc.)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden

Gumboy Tournament (HKLM-x32\...\Steam App 11230) (Version:  - CINEMAX, s.r.o.)

Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)

Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)

Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.2.1004 - Intel Corporation)

Java 7 Update 75 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417075FF}) (Version: 7.0.750 - Oracle)

Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)

Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)

Java SE Development Kit 7 Update 75 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170750}) (Version: 1.7.0.750 - Oracle)

Java SE Development Kit 8 Update 25 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180250}) (Version: 8.0.250.18 - Oracle Corporation)

Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )

League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden

Loadout (HKLM-x32\...\Steam App 208090) (Version:  - Edge of Reality)

LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.328 - LogMeIn, Inc.)

LogMeIn Hamachi (x32 Version: 2.2.0.328 - LogMeIn, Inc.) Hidden

LOLReplay (HKLM-x32\...\LOLReplay) (Version: 0.8.9.11 - www.leaguereplays.com)

Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)

McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)

Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.7.205.0 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)

Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)

Might & Magic: Duel of Champions (HKLM-x32\...\Steam App 256410) (Version:  - Ubisoft Quebec)

MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)

Mozilla Firefox 37.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.2 (x86 de)) (Version: 37.0.2 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.2 - Mozilla)

MyWinLocker (Version: 4.0.14.25 - Egis Technology Inc.) Hidden

MyWinLocker 4 (x32 Version: 4.0.14.25 - Egis Technology Inc.) Hidden

MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.15 - Egis Technology Inc.)

MyWinLocker Suite (x32 Version: 4.0.14.15 - Egis Technology Inc.) Hidden

Neverwinter (HKLM-x32\...\Steam App 109600) (Version:  - Cryptic Studios)

newsXpresso (HKLM-x32\...\InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}) (Version: 1.0.0.40 - esobi Inc.)

newsXpresso (x32 Version: 1.0.0.40 - esobi Inc.) Hidden

Nosgoth (HKLM-x32\...\Steam App 200110) (Version: 150120.100528 - Square Enix Ltd)

Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)

NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.8942 - NTI Corporation)

NTI Media Maker 9 (x32 Version: 9.0.2.8942 - NTI Corporation) Hidden

NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)

Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )

OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)

Origin (HKLM-x32\...\Origin) (Version: 9.3.1.4482 - Electronic Arts, Inc.)

paint.net (HKLM\...\{141BA46D-2D1F-4DA6-9448-B847334585C0}) (Version: 4.0.4 - dotPDN LLC)

PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.51.17865 - pdfforge GmbH)

PDF Architect 2 Create Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden

PDF Architect 2 Edit Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden

PDF Architect 2 View Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden

PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.0.2 - pdfforge)

Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Pokemon Online 2.4.1 (HKLM-x32\...\{2C08D7E7-9EE1-4A08-AFE0-745F02DCD6A4}_is1) (Version:  - Dreambelievers)

Pokémon Trading Card Game Online (HKLM-x32\...\{B0952280-3DF0-4AA9-9599-092D5E8D36AD}) (Version: 2.24.1 - The Pokémon Company International)

Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)

Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Ralink RT2860 Wireless LAN Card (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 1.5.6.0 - Ralink)

Raptr (HKLM-x32\...\Raptr) (Version:  - )

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6329 - Realtek Semiconductor Corp.)

Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30123 - Realtek Semiconductor Corp.)

Serious Sam 3: BFE (HKLM-x32\...\Steam App 41070) (Version:  - Croteam)

Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden

Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden

Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version:  - 2K Games, Inc.)

SIW 2013 Home Edition (HKLM-x32\...\{AB67580-257C-45FF-B8F4-C8C30682091A}_is1) (Version: 2013.05.14 - Topala Software Solutions)

Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)

Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 2.0.2574.0 - Hi-Rez Studios)

Source SDK Base 2006 (HKLM-x32\...\Steam App 215) (Version:  - Valve)

SpellForce (HKLM-x32\...\SpellForce) (Version:  - )

Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)

Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)

Survarium (HKLM-x32\...\Steam App 355840) (Version:  - Vostok Games)

Survarium-Steam (HKLM-x32\...\{A3D9343D-77CD-4bf4-A47A-F87B3BE985B4}_is1) (Version: 0.27d - )

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

System Requirements Lab CYRI (HKLM-x32\...\{E362724E-9320-4946-AF34-874E7B6B2927}) (Version: 6.0.7.0 - Husdawg, LLC)

Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)

TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)

TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.12 - TeamSpeak Systems GmbH)

TIPP10 Version 2.1.0 (HKLM-x32\...\TIPP10_is1) (Version:  - (c) 2006-2011, Tom Thielicke IT Solutions)

Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel)

Unity (HKLM-x32\...\Unity) (Version: 4.6.1f1 - Unity Technologies ApS)

Unity Web Player (HKU\S-1-5-21-221738678-620704744-704572411-1000\...\UnityWebPlayer) (Version: 4.6.1f1 - Unity Technologies ApS)

VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden

Vindictus EU (HKLM-x32\...\Vindictus EU) (Version:  - )

VLC media player 2.1.1 (HKLM\...\VLC media player) (Version: 2.1.1 - VideoLAN)

Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3503 - Acer Incorporated)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)

WinRAR 5.00 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)

YGOPro DevPro Version 1.9.7 r2 (HKLM-x32\...\{3CF2634F-3F38-4DD3-9201-CB2FE6B5FF23}_is1) (Version: 1.9.7 r2 - YGOPro DevPro Online)

Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden

Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
 

==================== Restore Points  =========================
 

01-05-2015 14:43:01 Windows Update

05-05-2015 16:18:48 Windows Update

08-05-2015 20:00:02 Windows Update
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 04:34 - 2014-09-21 15:27 - 00000860 ____N C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost

::1 localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {0A4748C0-2366-4860-8A2A-22C28DD4F8FB} - System32\Tasks\DXbbq3U => C:\Users\Dima\AppData\Roaming\DXbbq3U.exe [2015-04-20] () <==== ATTENTION

Task: {15731A0E-D960-4E94-9E60-DACD297E3193} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2014-06-24] (Safer-Networking Ltd.)

Task: {1860A38F-8939-478A-BF5C-F565A480142F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2014-06-24] (Safer-Networking Ltd.)

Task: {1D4EC24B-2C6F-4F04-8F3E-6AA90BAED5D2} - System32\Tasks\{A10EA19B-8B09-454D-B360-CA92A1D17DBD} => pcalua.exe -a C:\Users\Dima\Desktop\InstallIW4M(1).exe -d C:\Users\Dima\Desktop

Task: {276BF61D-668E-4313-BA37-702F352555A9} - System32\Tasks\Adobe Reader Speed Launcher => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2014-12-03] (Adobe Systems Incorporated)

Task: {2B46497E-052E-4882-879A-2CED38AE75F5} - System32\Tasks\{6B05723E-8DB6-495D-A0DA-ECA4FC2E26D7} => C:\Program Files (x86)\WeGame\wegame.exe

Task: {2D0DD0EF-6F02-4AE5-81DA-8F7F44E9D915} - System32\Tasks\Games\UpdateCheck_S-1-5-21-221738678-620704744-704572411-1000

Task: {30516B1D-88D3-4A14-AD49-963F8AA1FCEE} - System32\Tasks\vj57Vb6Rn1O3ezZ75nEr => C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe [2015-04-20] () <==== ATTENTION

Task: {36C3C2EA-97D0-4CA5-BAA5-C0D3544BE0C8} - System32\Tasks\WfqE0YhY0IU => C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe [2015-04-20] () <==== ATTENTION

Task: {54E1645E-EDBD-4280-B2FF-13D3BBEC2047} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-07] (Google Inc.)

Task: {5975092F-1EFE-4D6C-A337-025C0E67059F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)

Task: {5B6F25FF-1AB6-4306-AF5F-150B752505F5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-07] (Google Inc.)

Task: {691D2C19-7551-41BB-BDBA-38CC87FF53F4} - System32\Tasks\{3D950745-404D-482F-B2F2-F7290B610680} => pcalua.exe -a C:\Users\Dima\AppData\Roaming\webssearches\UninstallManager.exe -c  -ptid=irs <==== ATTENTION

Task: {ADDA105F-5269-41EB-BE7A-FADC87447563} - System32\Tasks\{153E695E-4162-4A7B-8004-BCBAF85CE618} => pcalua.exe -a C:\Users\Dima\AVM_Driver\FWLAN\setup.exe -d C:\Users\Dima\AVM_Driver\FWLAN

Task: {B0E56CFC-54EA-49E5-AEE6-544EE780094B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15] (Adobe Systems Incorporated)

Task: {C4630A3F-B5F1-4159-9F2B-8EF55530D99B} - System32\Tasks\Adobe ARM => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)

Task: {C618B53C-0F59-4601-8B52-1D81C275086B} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)

Task: {C7F562CC-8836-44FC-8085-91BD492874BE} - System32\Tasks\{35EE529B-2794-4708-8B79-567E126A4A7F} => pcalua.exe -a C:\Users\Dima\Desktop\Downloads\avm_fritz!wlan_usb_stick_x64_build_100906.exe -d C:\Users\Dima\Desktop\Downloads

Task: {D021483F-10CB-41B4-8816-109CDA214F59} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)

Task: {D216A597-8DFB-49AE-BB0C-69D9574172C8} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {D390B225-5BC3-4867-B035-FE45B82F2599} - System32\Tasks\IT7Lg6DU6w1 => C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1.exe [2015-04-20] () <==== ATTENTION

Task: {D9E5BB12-DEEF-4673-A22C-7A60AF737292} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {E66F9E32-E05D-43A5-8A61-1251E464ABF9} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\DXbbq3U.job => C:\Users\Dima\AppData\Roaming\DXbbq3U.exe <==== ATTENTION

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\IT7Lg6DU6w1.job => C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1.exe <==== ATTENTION

Task: C:\Windows\Tasks\vj57Vb6Rn1O3ezZ75nEr.job => C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe <==== ATTENTION

Task: C:\Windows\Tasks\WfqE0YhY0IU.job => C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe <==== ATTENTION
 

==================== Loaded Modules (whitelisted) ==============
 

2009-01-22 01:45 - 2009-01-22 01:45 - 01401856 _____ () C:\Program Files (x86)\EgisTec MyWinLocker\x64\LIBEAY32.dll

2014-05-12 11:49 - 2014-05-12 11:49 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll

2015-05-05 21:12 - 2015-05-05 21:12 - 00417792 _____ () c:\windows\ftb.exe

2015-05-05 21:12 - 2015-05-05 21:12 - 00408576 _____ () c:\windows\mftb.exe

2014-01-10 07:26 - 2014-01-10 07:26 - 01861968 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

2013-09-02 13:14 - 2014-10-11 21:02 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe

2014-05-03 14:34 - 2014-05-03 14:34 - 00173568 _____ () C:\Program Files\TeamSpeak 3 Client\quazip.dll

2014-05-03 14:34 - 2014-05-03 14:34 - 01080832 _____ () C:\Program Files\TeamSpeak 3 Client\platforms\qwindows.dll

2014-05-03 14:34 - 2014-05-03 14:34 - 00833024 _____ () C:\Program Files\TeamSpeak 3 Client\sqldrivers\qsqlite.dll

2013-10-23 14:15 - 2014-10-15 17:45 - 00102344 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win64.dll

2013-10-23 14:15 - 2014-10-15 17:45 - 00108488 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win64.dll

2014-05-03 14:34 - 2014-05-03 14:34 - 00030208 _____ () C:\Program Files\TeamSpeak 3 Client\imageformats\qgif.dll

2014-05-03 14:34 - 2014-05-03 14:34 - 00233984 _____ () C:\Program Files\TeamSpeak 3 Client\imageformats\qjpeg.dll

2013-10-23 14:15 - 2014-10-15 17:45 - 00563656 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\clientquery_plugin.dll

2013-10-23 14:15 - 2014-10-15 17:45 - 00579016 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll

2014-05-03 14:34 - 2014-05-03 14:34 - 00159232 _____ () C:\Program Files\TeamSpeak 3 Client\accessible\qtaccessiblewidgets.dll

2013-06-12 18:11 - 2013-08-15 18:04 - 01294336 _____ () C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe

2015-04-29 14:38 - 2015-04-29 14:38 - 02323448 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.244\deploy\LoLLauncher.exe

2015-04-29 14:39 - 2015-04-29 14:39 - 03797496 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.28\deploy\LoLPatcher.exe

2014-05-16 15:31 - 2013-08-15 19:22 - 00074752 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.143\deploy\LolClient.exe

2011-04-24 03:29 - 2011-04-24 03:29 - 00465640 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll

2014-11-09 03:42 - 2014-05-13 13:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl

2014-11-09 03:42 - 2014-05-13 13:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl

2014-11-09 03:42 - 2014-05-13 13:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl

2011-04-24 03:29 - 2011-04-24 03:29 - 01081664 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll

2011-04-24 03:29 - 2011-04-24 03:29 - 00125760 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll

2014-01-10 07:28 - 2014-01-10 07:28 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll

2010-11-23 00:56 - 2010-11-23 00:56 - 00087040 _____ () C:\Program Files (x86)\Raptr\_ctypes.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00043008 _____ () C:\Program Files (x86)\Raptr\_socket.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00805376 _____ () C:\Program Files (x86)\Raptr\_ssl.pyd

2014-05-14 01:26 - 2014-05-14 01:26 - 05812736 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtGui.pyd

2014-05-14 01:26 - 2014-05-14 01:26 - 00067584 _____ () C:\Program Files (x86)\Raptr\sip.pyd

2014-05-14 01:26 - 2014-05-14 01:26 - 01662464 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtCore.pyd

2014-05-14 01:26 - 2014-05-14 01:26 - 00494592 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtNetwork.pyd

2010-11-23 00:57 - 2010-11-23 00:57 - 00096256 _____ () C:\Program Files (x86)\Raptr\win32api.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00110592 _____ () C:\Program Files (x86)\Raptr\pywintypes26.dll

2010-11-23 00:56 - 2010-11-23 00:56 - 00010240 _____ () C:\Program Files (x86)\Raptr\select.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00356864 _____ () C:\Program Files (x86)\Raptr\_hashlib.pyd

2010-11-23 00:57 - 2010-11-23 00:57 - 00036352 _____ () C:\Program Files (x86)\Raptr\win32process.pyd

2010-11-23 00:57 - 2010-11-23 00:57 - 00111104 _____ () C:\Program Files (x86)\Raptr\win32file.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00044544 _____ () C:\Program Files (x86)\Raptr\_sqlite3.pyd

2011-02-15 20:17 - 2011-02-15 20:17 - 00417501 _____ () C:\Program Files (x86)\Raptr\sqlite3.dll

2010-11-23 00:57 - 2010-11-23 00:57 - 00167936 _____ () C:\Program Files (x86)\Raptr\win32gui.pyd

2014-05-14 01:26 - 2014-05-14 01:26 - 00313856 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtWebKit.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00127488 _____ () C:\Program Files (x86)\Raptr\pyexpat.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00009216 _____ () C:\Program Files (x86)\Raptr\winsound.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00354304 _____ () C:\Program Files (x86)\Raptr\pythoncom26.dll

2010-11-23 00:57 - 2010-11-23 00:57 - 00016384 _____ () C:\Program Files (x86)\Raptr\win32trace.pyd

2014-08-14 02:37 - 2014-08-14 02:37 - 00113171 _____ () C:\Program Files (x86)\Raptr\libvlc.dll

2014-08-14 02:37 - 2014-08-14 02:37 - 02396691 _____ () C:\Program Files (x86)\Raptr\libvlccore.dll

2010-11-23 00:56 - 2010-11-23 00:56 - 00583680 _____ () C:\Program Files (x86)\Raptr\unicodedata.pyd

2010-11-23 00:57 - 2010-11-23 00:57 - 00263168 _____ () C:\Program Files (x86)\Raptr\win32com.shell.shell.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00324608 _____ () C:\Program Files (x86)\Raptr\PIL._imaging.pyd

2012-02-06 22:28 - 2012-02-06 22:28 - 00010752 _____ () C:\Program Files (x86)\Raptr\Crypto.Random.OSRNG.winrandom.pyd

2012-02-06 22:28 - 2012-02-06 22:28 - 00011264 _____ () C:\Program Files (x86)\Raptr\Crypto.Util._counter.pyd

2012-02-06 22:28 - 2012-02-06 22:28 - 00031744 _____ () C:\Program Files (x86)\Raptr\Crypto.Cipher.AES.pyd

2013-11-21 02:05 - 2013-11-21 02:05 - 00256000 _____ () C:\Program Files (x86)\Raptr\amd_ags.dll

2015-03-25 01:50 - 2015-03-25 01:50 - 02539776 _____ () C:\Program Files (x86)\Raptr\ltc_host_ex.DLL

2014-10-21 22:56 - 2014-10-21 22:56 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\9b1cac8d98bd69d3e56a26ff2f96f266\IsdiInterop.ni.dll

2011-07-25 04:42 - 2011-01-13 02:56 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

2010-11-23 00:57 - 2010-11-23 00:57 - 00141312 _____ () C:\Program Files (x86)\Raptr\gobject._gobject.pyd

2014-06-18 02:56 - 2014-06-18 02:56 - 02717595 _____ () C:\Program Files (x86)\Raptr\heliotrope._purple.pyd

2011-02-15 20:17 - 2011-02-15 20:17 - 01213633 _____ () C:\Program Files (x86)\Raptr\libxml2-2.dll

2010-11-23 01:06 - 2010-11-23 01:06 - 00055808 _____ () C:\Program Files (x86)\Raptr\zlib1.dll

2013-05-10 01:52 - 2013-05-10 01:52 - 00495680 _____ () C:\Program Files (x86)\Raptr\plugins\libaim.dll

2013-05-10 01:52 - 2013-05-10 01:52 - 01183699 _____ () C:\Program Files (x86)\Raptr\liboscar.dll

2013-05-10 01:52 - 2013-05-10 01:52 - 00483306 _____ () C:\Program Files (x86)\Raptr\plugins\libicq.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 00655356 _____ () C:\Program Files (x86)\Raptr\plugins\libirc.dll

2013-05-03 20:56 - 2013-05-03 20:56 - 01306387 _____ () C:\Program Files (x86)\Raptr\plugins\libmsn.dll

2013-05-03 20:56 - 2013-05-03 20:56 - 00565461 _____ () C:\Program Files (x86)\Raptr\plugins\libxmpp.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 01640221 _____ () C:\Program Files (x86)\Raptr\libjabber.dll

2013-05-03 20:56 - 2013-05-03 20:56 - 00506276 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoo.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 01053730 _____ () C:\Program Files (x86)\Raptr\libymsg.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 00497782 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoojp.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 00603326 _____ () C:\Program Files (x86)\Raptr\plugins\ssl-nss.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 00474199 _____ () C:\Program Files (x86)\Raptr\plugins\ssl.dll

2013-07-01 08:20 - 2015-04-16 19:40 - 00776192 _____ () C:\Program Files (x86)\Steam\SDL2.dll

2015-01-04 19:33 - 2015-04-23 04:16 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll

2015-01-04 19:33 - 2015-04-23 04:16 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll

2015-01-04 19:33 - 2015-04-23 04:16 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll

2014-05-21 20:08 - 2015-05-08 00:16 - 02396352 _____ () C:\Program Files (x86)\Steam\video.dll

2014-08-29 16:43 - 2014-12-01 23:31 - 02396672 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll

2014-08-29 16:43 - 2014-12-01 23:31 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll

2014-08-29 16:43 - 2014-12-01 23:31 - 00479744 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll

2014-08-29 16:43 - 2014-12-01 23:31 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll

2014-08-29 16:43 - 2014-12-01 23:31 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll

2013-07-26 14:46 - 2015-05-08 00:16 - 00703168 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL

2013-07-15 14:32 - 2015-05-08 00:16 - 36302216 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll

2015-04-24 19:11 - 2015-05-08 00:16 - 08958344 _____ () C:\Program Files (x86)\Steam\bin\pdf.dll

2015-04-29 14:39 - 2015-04-29 14:39 - 01672696 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.28\deploy\RiotLauncher.dll

2014-05-16 15:29 - 2013-08-15 19:21 - 04774248 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.143\deploy\Adobe AIR\Versions\1.0\Resources\WebKit.dll

2014-05-16 15:29 - 2013-08-15 19:21 - 16032616 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.143\deploy\Adobe AIR\Versions\1.0\Resources\NPSWF32.dll

2015-03-22 17:24 - 2015-03-22 17:24 - 00059904 _____ () C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\zlib1.dll

2015-03-22 15:48 - 2015-03-22 16:51 - 00822784 _____ () C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\CvLocalizationWin32Final Release.dll

2015-03-22 15:48 - 2015-03-22 16:53 - 00579584 _____ () C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\CvGameDatabaseWin32Final Release.dll

2015-03-22 16:53 - 2015-03-22 16:53 - 00151040 _____ () C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\lua51_Win32.dll

2013-07-15 14:32 - 2015-05-08 00:16 - 00371392 _____ () C:\Program Files (x86)\Steam\steam.dll

2015-03-22 17:05 - 2015-03-22 17:05 - 00047616 _____ () C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\Miles\win32\binkawin.asi

2015-03-22 17:05 - 2015-03-22 17:05 - 00078336 _____ () C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\Miles\win32\mssmp3.asi

2015-03-22 16:58 - 2015-03-22 16:58 - 00041472 _____ () C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\Miles\win32\mssogg.asi

2015-03-22 16:53 - 2015-03-22 16:53 - 00153600 _____ () C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\Miles\win32\mssvoice.asi

2015-03-22 16:58 - 2015-03-22 16:58 - 00013312 _____ () C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\Miles\win32\mssds3d.flt

2015-03-22 16:56 - 2015-03-22 16:56 - 00060416 _____ () C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\Miles\win32\msseax.flt

2015-05-01 14:34 - 2015-04-28 04:07 - 01252680 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\libglesv2.dll

2015-05-01 14:34 - 2015-04-28 04:07 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\libegl.dll

2015-05-01 14:34 - 2015-04-28 04:07 - 14980424 _____ () C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\PepperFlash\pepflashplayer.dll

2015-04-15 21:14 - 2015-04-15 21:14 - 16863920 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
 

==================== EXE Association (whitelisted) ===============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 

HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Classes\.exe: exefile =>  <===== ATTENTION!

HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Classes\exefile:  <===== ATTENTION!
 

==================== Internet Explorer trusted/restricted ===============
 

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)
 

IE trusted site: HKU\S-1-5-21-221738678-620704744-704572411-1000\...\aeriagames.com -> hxxps://aeriagames.com

IE trusted site: HKU\S-1-5-21-221738678-620704744-704572411-1000\...\aeriagames.com -> hxxp://aeriagames.com
 
 

==================== Other Areas ============================
 

(Currently there is no automatic fix for this section.)
 

HKU\S-1-5-21-221738678-620704744-704572411-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.178.1
 

==================== MSCONFIG/TASK MANAGER disabled items ==
 

(Currently there is no automatic fix for this section.)
 

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Ralink Wireless Utility.lnk => C:\Windows\pss\Ralink Wireless Utility.lnk.CommonStartup

MSCONFIG\startupreg: Aeria Ignite => "C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe" silent

MSCONFIG\startupreg: Overwolf => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent

MSCONFIG\startupreg: Raptr => C:\PROGRA~2\Raptr\raptrstub.exe --startup
 

==================== FirewallRules (whitelisted) ===============
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

FirewallRules: [{78594C1C-0D50-4158-BE4B-630F903AD614}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [{6FBF251F-BD39-4F99-9B43-11228600FA75}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe

FirewallRules: [{D2661B1C-FB14-4488-85B6-C9F0F671AC26}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe

FirewallRules: [{2C171432-29A8-41AE-B4FC-C8A1B17AA814}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{5AB70EC2-290C-47AF-93E6-2FF6583923AE}] => (Allow) LPort=2869

FirewallRules: [{E223E5D1-C91F-43A7-BAF4-034AF2D39963}] => (Allow) LPort=1900

FirewallRules: [{87113CB6-D031-4465-A7DA-1190F21F5789}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe

FirewallRules: [{A6A9391B-02D1-49D7-ADC4-9186A84936CB}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

FirewallRules: [{57B9C597-A0EB-408F-856B-FA683C8132A3}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{714CDBAF-5604-42B3-B700-E8038F5DF945}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [TCP Query User{06F842FE-DDFA-4FCC-AE92-5F69EEE0F652}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe

FirewallRules: [UDP Query User{3661892A-DE75-4580-91A0-F9FBF1799DF3}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe

FirewallRules: [TCP Query User{5765CABA-404A-44EF-8227-7422B4001117}C:\program files (x86)\dragon's prophet\dp_x64.exe] => (Allow) C:\program files (x86)\dragon's prophet\dp_x64.exe

FirewallRules: [UDP Query User{4AB4E404-C83C-479E-AE15-ED70B9717177}C:\program files (x86)\dragon's prophet\dp_x64.exe] => (Allow) C:\program files (x86)\dragon's prophet\dp_x64.exe

FirewallRules: [{D8B75AC5-DB8B-4A3C-A379-08351FDB3A8A}] => (Block) C:\program files (x86)\dragon's prophet\dp_x64.exe

FirewallRules: [{FA2BCC55-2D25-4982-9813-648096C2D014}] => (Block) C:\program files (x86)\dragon's prophet\dp_x64.exe

FirewallRules: [TCP Query User{8BC7D8B9-96BF-48DA-B566-50842124FA04}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe

FirewallRules: [UDP Query User{9C72FA86-27B7-40B5-BCCB-3EE160D8159F}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe

FirewallRules: [TCP Query User{643C5904-C3B1-4EF9-B893-4374ECF6D6DA}C:\program files (x86)\dragon's prophet\launcher.exe] => (Allow) C:\program files (x86)\dragon's prophet\launcher.exe

FirewallRules: [UDP Query User{878B8F84-B88B-4D79-BA68-B0CE420657C1}C:\program files (x86)\dragon's prophet\launcher.exe] => (Allow) C:\program files (x86)\dragon's prophet\launcher.exe

FirewallRules: [{80ED7FA9-4202-4D90-836F-F9F56B4CDAE4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe

FirewallRules: [{4399A304-14B2-4EFA-B537-E8EA862FCC80}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe

FirewallRules: [{01721DB0-F656-4031-8930-1E8373DC2F7F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3sp.exe

FirewallRules: [{C1942149-4BF2-4840-B25B-0861219DBE3B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3sp.exe

FirewallRules: [{AD3CBC94-9015-4EEC-8010-9730A95F050C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3mp.exe

FirewallRules: [{83C71D22-7773-410B-9C20-2AA7FDCEB96E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3mp.exe

FirewallRules: [{E7F483C4-10DC-4293-ACA0-F3AF08D31698}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x86.exe

FirewallRules: [{27ADCB35-4841-4AF9-B2D7-CC086CF7A903}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\launcher.exe

FirewallRules: [{4933D89C-009A-43A4-A839-09A511BC8DFC}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\launcher.exe

FirewallRules: [{3D9A3A59-0A6C-440B-A6F9-0A90AC0DE8EB}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x64.exe

FirewallRules: [{18241FBC-0EF3-483B-94A6-AC00EEDBF4A7}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x64.exe

FirewallRules: [{C7D1F9D6-5F5C-4788-8D75-AA4662252A42}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x86.exe

FirewallRules: [TCP Query User{4C269EB3-8471-4A9F-8BEC-B534B181151E}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe

FirewallRules: [UDP Query User{721D1BD2-BDD0-4F36-AD02-862EE89713FE}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe

FirewallRules: [TCP Query User{C39306B7-FF57-4794-8B9A-9AA0F84CB38F}C:\users\dima\appdata\local\iw4m\iw4m.dat] => (Block) C:\users\dima\appdata\local\iw4m\iw4m.dat

FirewallRules: [UDP Query User{F8E2B0E8-5340-4B1C-92C0-7DA4FD31E1C2}C:\users\dima\appdata\local\iw4m\iw4m.dat] => (Block) C:\users\dima\appdata\local\iw4m\iw4m.dat

FirewallRules: [TCP Query User{1D2F39A8-48D1-4F21-9CF1-DE335D47F856}C:\users\dima\desktop\iw4m\iw4m.dat] => (Allow) C:\users\dima\desktop\iw4m\iw4m.dat

FirewallRules: [UDP Query User{56A99EDF-B65F-4AFD-AE16-F7D98D17E077}C:\users\dima\desktop\iw4m\iw4m.dat] => (Allow) C:\users\dima\desktop\iw4m\iw4m.dat

FirewallRules: [TCP Query User{2615C76C-73D3-4D32-B632-E52A4C790CC1}C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe

FirewallRules: [UDP Query User{06CB1C71-BEEC-4057-B2DC-C2D7E2D1CA89}C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe

FirewallRules: [{C39F0114-CCFF-4583-BE3C-FCC7B4C918B2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014 Demo\DotP_D14.exe

FirewallRules: [{586F7494-D5E6-431C-B8E6-847AF4C525E9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014 Demo\DotP_D14.exe

FirewallRules: [{76EF348E-4A47-485D-9F6F-4D71F6E38FC1}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe

FirewallRules: [{7AE12753-DC2E-4865-9B9B-D3A3E3937C08}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe

FirewallRules: [{5951B7B2-DBCA-4C9A-9BF3-C4114D1B65B5}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe

FirewallRules: [{65B33429-5091-41E6-A332-E473323DD788}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe

FirewallRules: [{1EC8437C-CE05-4587-9FC8-1F694B4C7C17}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe

FirewallRules: [{D0028759-3301-4357-8B2F-C150FE1F51E3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe

FirewallRules: [{FBA36FBF-DB77-4FD8-BC3F-80825FA74D59}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe

FirewallRules: [{5F4313DD-BA94-4F06-A2F0-B409FDAC09F4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe

FirewallRules: [{67D60A7C-0385-470F-9033-87A08C2D2E4F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe

FirewallRules: [{E3735442-0A8C-41A3-9B08-729BC8802589}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe

FirewallRules: [TCP Query User{7090371A-9B4F-4254-84A8-364D16F3A38C}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [UDP Query User{31DB48CF-D0EF-4B0D-AAE6-7AF83D2137D8}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [{A045D731-60D5-4EAD-BF23-1F7796BB34FA}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [{2C6C6FBA-5AFC-4085-8A68-A8C98856386B}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [TCP Query User{3C639DFB-197E-4AFF-A15E-25F14B889032}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat

FirewallRules: [UDP Query User{82EE40F2-E294-4D7B-9D68-1B75AE208E6A}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat

FirewallRules: [{64E878D7-1907-4A7D-A779-834D5D060955}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat

FirewallRules: [{68209FB4-C66B-4D9D-A2F0-2397BE1AB277}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat

FirewallRules: [TCP Query User{00A0BD31-B63A-4C19-93E8-ABCC8DB5C578}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [UDP Query User{8999A7F5-D427-4328-AAB7-ADA1FA9C59BF}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [{8DC4935E-B350-42D1-8FB1-1BB8F7442E36}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [{6CFC61D0-18CC-49EB-B25A-ACAECA62E42B}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [TCP Query User{EBCAC3E3-AA9A-43CF-B83E-98D5FD5EA402}C:\users\dima\desktop\call of duty modern warfare 2\com.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\com.dat

FirewallRules: [UDP Query User{84C7686B-75DF-401A-9FDF-7FC9F6392C7D}C:\users\dima\desktop\call of duty modern warfare 2\com.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\com.dat

FirewallRules: [{049E4550-90D7-4FEF-B6AD-9D74DED0C676}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\com.dat

FirewallRules: [{993FB1C4-D279-479A-90BE-6165BF19AF2E}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\com.dat

FirewallRules: [TCP Query User{9B3FB14A-DDF0-4459-AB11-D96BA0A21D17}C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [UDP Query User{3511F905-74A3-4CF9-9DC4-31D40CA6C995}C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [{4BBE5ECB-54A4-4EF1-BAA9-DBE3F102DC2F}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [{A73E2F4B-AB36-4447-B71B-F28AF0D3F1C5}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [TCP Query User{85EDB327-F94C-42C7-A714-B52DCFABB896}C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [UDP Query User{62DB249D-8E0B-4DE5-866A-A5EC513C7675}C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [{9BA06BB7-A418-404C-A95C-D8E2282C6F57}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [{CED6EBE2-E036-4988-AB13-D5DA803410B6}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [{E546D188-E7DD-44EE-BC95-7E5100A1366C}] => (Allow) C:\Users\Dima\Downloads\HOTO_downloader.exe

FirewallRules: [{60F46196-1CBF-40C0-970C-031D8BAD38B2}] => (Allow) C:\Users\Dima\Downloads\HOTO_downloader.exe

FirewallRules: [{F45FED77-FF04-4879-9444-42D263E00C25}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe

FirewallRules: [{28EC56F2-D3A9-4BCE-A5F5-878749DE6407}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe

FirewallRules: [{A4083F49-4F11-4A32-B91C-2BAF1B4BF058}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe

FirewallRules: [{DF37D091-D2F9-4401-B457-D9030A3919A8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe

FirewallRules: [{1315155E-2220-4EDE-A4A4-755669B75E19}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe

FirewallRules: [{58E7FDFD-4736-4213-9B42-50E885AE99CA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe

FirewallRules: [{31958790-F30C-4BC7-BDAC-03B4DED35B86}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe

FirewallRules: [{CC1F0407-71B4-4EC3-9F37-0E161C8A3322}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe

FirewallRules: [{145C7649-7AA9-42B3-97E8-5B8400173F22}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe

FirewallRules: [{936F4879-D6DB-4A9A-BEB0-D9E0A63B56E1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe

FirewallRules: [{375BA601-C201-4FFF-9426-9DC8362E1D6A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe

FirewallRules: [{4EAF1A42-8BB1-49A8-8D54-63BE9EF5E1FC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe

FirewallRules: [{E7EEA6A5-9E71-4A90-B195-713ADC4D3DD9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe

FirewallRules: [{C7E9681A-9A64-4D1A-99A8-CFC9168448D5}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe

FirewallRules: [{4352484E-8611-4EF5-92B1-E1134658D51D}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe

FirewallRules: [{FAF9A5EF-500F-48F2-9A53-FB0E549E87A7}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe

FirewallRules: [{45E32924-61E5-4693-8142-5090A1DACC77}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe

FirewallRules: [{B51953D9-7C03-413E-B7EA-B60979F79136}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe

FirewallRules: [TCP Query User{58A3D1CA-EB63-41E1-815B-2C296E72A629}C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe] => (Allow) C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe

FirewallRules: [UDP Query User{42C952D4-1892-4D10-9AB1-1CC3F39A23F3}C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe] => (Allow) C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe

FirewallRules: [{1D455526-6B1D-4BF9-B8BA-00306E25FF9A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe

FirewallRules: [{0DA93301-8BDC-47FD-B914-E2FA1EC7AAFB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe

FirewallRules: [TCP Query User{0729B18F-9796-4FCF-A32F-7A5833FBE815}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\dima\appdata\local\akamai\netsession_win.exe

FirewallRules: [UDP Query User{A54F5C5A-D8E2-403E-A810-D1615D1E56C6}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\dima\appdata\local\akamai\netsession_win.exe

FirewallRules: [TCP Query User{9C8EF3A7-3266-4542-B95E-133CF9D2DFA9}C:\programdata\battle.net\agent\agent.beta.2514\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2514\agent.exe

FirewallRules: [UDP Query User{DF8986C4-FB63-4A37-874F-5E4F5AB0B070}C:\programdata\battle.net\agent\agent.beta.2514\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2514\agent.exe

FirewallRules: [TCP Query User{7D2074A4-AA89-4BA7-A7EB-1268C6492AEE}C:\program files (x86)\devpro\devpro.dll] => (Allow) C:\program files (x86)\devpro\devpro.dll

FirewallRules: [UDP Query User{F2B7C119-C5D0-4914-BEBC-71E99254D344}C:\program files (x86)\devpro\devpro.dll] => (Allow) C:\program files (x86)\devpro\devpro.dll

FirewallRules: [{EA7F7B92-3349-4537-9E50-3A0B4D818281}] => (Allow) C:\AeriaGames\AuraKingdom\game.bin

FirewallRules: [{AB6209F8-0BA4-4FC4-803C-1A73FEFDA112}] => (Allow) C:\AeriaGames\AuraKingdom\game.bin

FirewallRules: [TCP Query User{4F600FC8-F54A-49E9-B588-2F547BBA96B1}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe

FirewallRules: [UDP Query User{DF1CE9AE-5217-4393-B737-92F45CBCB4BD}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe

FirewallRules: [{A1A5A428-B18A-4BC9-A553-B1E6989C2A42}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Darksiders 2\Darksiders2.exe

FirewallRules: [{F60EBF1D-B0A7-4638-B48C-AF3F18B494BA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Darksiders 2\Darksiders2.exe

FirewallRules: [{767607AA-81B6-406F-BF1E-B8A81ED847FC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe

FirewallRules: [{35789372-EE60-4ED3-81F9-A81ED3BF2CE4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe

FirewallRules: [{07DE1F4A-0A51-4A63-BF8D-CD9580D92EB6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe

FirewallRules: [{5F40E8E8-9EF2-41AA-9414-FBA5770F0A94}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe

FirewallRules: [TCP Query User{744A07AB-09FD-499C-9F04-E01BB0351E8D}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\dima\appdata\local\akamai\netsession_win.exe

FirewallRules: [UDP Query User{F7498DED-162B-488F-B59F-256A51C6CE71}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\dima\appdata\local\akamai\netsession_win.exe

FirewallRules: [{AEAB3ECF-0BB1-453B-8D1F-476AE01D86A0}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe

FirewallRules: [{8D48AAEF-A0CE-44E7-9024-CA3944E81E7D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe

FirewallRules: [TCP Query User{6CF9A63C-F912-4E3A-8DDA-6D3AC6AF66DF}C:\programdata\battle.net\agent\agent.beta.2638\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2638\agent.exe

FirewallRules: [UDP Query User{5A9CB3D7-8747-407A-97AB-191DBFC43D75}C:\programdata\battle.net\agent\agent.beta.2638\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2638\agent.exe

FirewallRules: [{94644398-7E26-4C3A-BD3D-8AC488A93807}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe

FirewallRules: [{03DDFDE2-264E-4187-85CD-4382D41F4A6C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe

FirewallRules: [{C38A5A06-BB40-4CFC-BA71-87AEC286F6D6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe

FirewallRules: [{CB8BA2E2-B98E-442B-87D9-92EFB85FECAD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe

FirewallRules: [{234100A5-3277-4236-B80F-3BD7A113F330}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe

FirewallRules: [{9472EB6F-9BC9-4FC2-B7B2-45A96212D7C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe

FirewallRules: [{4DDCAB31-D1CA-49D7-83D1-9A7708CA3387}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Loadout\Loadout.exe

FirewallRules: [{50274324-D5E3-4A7D-9551-60285C4D51CE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Loadout\Loadout.exe

FirewallRules: [{505A793E-19FF-4163-85DA-BDD1366147B4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe

FirewallRules: [{5D9B037C-78AD-4F93-AFCB-A8BF0480CCCF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe

FirewallRules: [{71BA2590-5ED7-4DC0-919C-603D078A17E1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe

FirewallRules: [{E3C9045F-0538-43CE-9AC0-B88A7047D12B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe

FirewallRules: [{AA27854D-9002-4BB1-AC3B-2B040589990B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe

FirewallRules: [{F262DA23-A9A0-45ED-875A-42640AB812FD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe

FirewallRules: [{5B584B43-CDC2-482C-A915-51ED708E2BDE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe

FirewallRules: [{FBE87CBF-6E5E-443B-BB64-D76E91781977}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe

FirewallRules: [TCP Query User{5B78C40B-EF9C-4DE3-B847-DDC0913711FC}C:\program files (x86)\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\tera\tera-launcher.exe

FirewallRules: [UDP Query User{02ADE6C1-8488-448C-9DD6-1D4ABC838F09}C:\program files (x86)\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\tera\tera-launcher.exe

FirewallRules: [{4EC807D8-651B-4EDE-906E-15D8940E045A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe

FirewallRules: [{5C43F976-C8BD-461A-8160-E4037DEC5A46}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe

FirewallRules: [{91A8DE20-9DBA-43BD-9F4B-DE1B625D0D83}] => (Allow) C:\AeriaGames\EdenEternal-DE\_Launcher.exe

FirewallRules: [{CD8464F5-1D27-4ACC-848F-AD802961AD3D}] => (Allow) C:\AeriaGames\EdenEternal-DE\_Launcher.exe

FirewallRules: [{20FF7205-61B2-44CC-87A6-CCE211D4603C}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{6B725485-B1DC-4646-B9AD-C4E754073AD5}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{EFDADD2B-5B82-4D44-BFF6-7533A33E5D4B}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{EDABDFE1-A779-47FE-A7F2-0BE99128B9D1}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{C864BA6F-6F65-4A53-BACD-5590447E71A3}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe

FirewallRules: [{BF9437A3-0AAD-4EF3-9020-8A7EDA18FFFB}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe

FirewallRules: [{5EC4813D-F4A5-44A4-99AE-2FEEADC7BD68}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe

FirewallRules: [{5741DE79-8863-4C92-8CA4-43D24ED12E9D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe

FirewallRules: [{7FA5A6CC-69A0-4EF2-9E4E-D36CF4A6FFB1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe

FirewallRules: [{1E27B3D7-EBC5-46D1-A1F4-5150D5FC7ECA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe

FirewallRules: [{7ACB6A7B-1D9F-4159-9E5C-57293DE770B9}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA World\fifaworld.exe

FirewallRules: [{CC579040-BC64-4658-B938-3FC11265DBA0}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA World\fifaworld.exe

FirewallRules: [TCP Query User{466B6D60-FB8E-40F4-9A96-3F6B84C31F10}C:\programdata\battle.net\agent\agent.2787\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.2787\agent.exe

FirewallRules: [UDP Query User{747BD4DC-E6ED-4E9F-889A-E1029B9BD7EC}C:\programdata\battle.net\agent\agent.2787\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.2787\agent.exe

FirewallRules: [{024C2E0F-0F94-4571-AAA1-63A5D32016D2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe

FirewallRules: [{19CDF823-35E4-43AD-8A38-931E02B58B64}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe

FirewallRules: [{EA2378D9-ADC4-4A3E-947C-030BBA9A41B0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Aura Kingdom\game.bin

FirewallRules: [{E3E3914B-6929-4469-A807-4C9FC60B3CA5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Aura Kingdom\game.bin

FirewallRules: [{AB6817F8-474B-413B-B1A1-DB9F05CE61BB}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{8192EF82-EABD-49D0-92CB-1E602FCB2399}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{8E9567B7-FEC3-4B6A-8469-1B65ACAEBCF2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe

FirewallRules: [{9832DDCA-66F8-432C-8B22-60682E5E919E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe

FirewallRules: [TCP Query User{1128027D-DF51-428D-BBF5-261AD7F20EEC}C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe

FirewallRules: [UDP Query User{0D0921EC-8295-44F1-A446-52BAFD8EF6EB}C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe

FirewallRules: [TCP Query User{1FC5CC73-6F52-4B75-8D0B-4753B673D255}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [UDP Query User{A5E61E08-5C0A-4EA7-BD2C-D6ACED33386F}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [TCP Query User{E290B8F5-DC46-4D43-9E40-A8CFEBD19A8A}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe

FirewallRules: [UDP Query User{4A59CA75-CB6F-46C3-8E3B-D091F44ACDC5}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe

FirewallRules: [{51E7B824-61EF-498A-94AE-826ED3FE5CF2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe

FirewallRules: [{B9C59147-9E45-4E11-9B2F-5702A1ACAFA5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe

FirewallRules: [{BB70E8F0-DE1E-4EEF-873C-95044B81A8C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe

FirewallRules: [{49C70379-991F-4248-81CB-BA51F9158E4F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe

FirewallRules: [{6BB569B0-D223-4EAB-A4A0-83B776CDA2DD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age2HD\Launcher.exe

FirewallRules: [{D341F20A-E2E0-4320-82A8-3607608AD108}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age2HD\Launcher.exe

FirewallRules: [{757CE32E-DE9A-440C-BAB3-B9F8EF37A2A0}] => (Allow) C:\Users\Dima\Downloads\b9_downloader.exe

FirewallRules: [{ACA68B80-8F45-4E75-B7D3-470AF290871F}] => (Allow) C:\Users\Dima\Downloads\b9_downloader.exe

FirewallRules: [TCP Query User{B5BB55CB-DE77-4080-963B-3A266AC37CE5}C:\programdata\battle.net\agent\agent.3235\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3235\agent.exe

FirewallRules: [UDP Query User{30EBE90E-7ED1-4868-9D3D-50E6D7112675}C:\programdata\battle.net\agent\agent.3235\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3235\agent.exe

FirewallRules: [{1BAA9821-E2DD-48BF-9E27-F6297D2F5116}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe

FirewallRules: [{9C9260ED-7AA0-4AE4-972E-D83A5D097028}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe

FirewallRules: [{EA27D1BB-E05D-4097-97AF-BC7DE8174F52}] => (Allow) C:\Program Files (x86)\Bench\Proxy\proc.exe

FirewallRules: [{953D2DA8-7AEB-4931-BE76-87BDE0ACBC39}] => (Allow) C:\Program Files (x86)\Bench\Proxy\pwdg.exe

FirewallRules: [{91AF5EE1-530D-4D72-A308-BDBA132ABA31}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe

FirewallRules: [{AF831DA2-EC4A-4642-915F-DF7CBB2A2CF3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe

FirewallRules: [{BBBB3AD6-5EB2-4204-B5AF-9716942ACB1C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe

FirewallRules: [{63BB69A1-F607-4FB8-9EDD-1A607AABDA8B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe

FirewallRules: [{34F27A20-13E6-46E6-9901-39383CB7F97A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe

FirewallRules: [{DA9D712D-0C9F-441F-A880-FF8D27837E6E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe

FirewallRules: [TCP Query User{A250025F-7CBE-4CAD-93AE-C02E36E841C1}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe

FirewallRules: [UDP Query User{3D207EE9-306F-48FF-8735-CD8CDAFA0490}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe

FirewallRules: [TCP Query User{F7376CA3-FA2C-4F56-9AD8-0A2ADC4927AE}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe

FirewallRules: [UDP Query User{BCBA424F-EDE5-4DFC-8FD5-56BB5666B2F5}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe

FirewallRules: [{7A5EB71C-C724-402F-8557-A92B3BAD628E}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe

FirewallRules: [{AF09CC9B-68D7-404C-B498-D144643C1A54}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe

FirewallRules: [{D56AE5C0-0487-4C87-8284-10DC792A01DE}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe

FirewallRules: [{CB98B3E2-40A1-4A7C-ACCB-56A50C8E3F7B}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe

FirewallRules: [{B3D84AF2-F39E-4E7D-9D7E-FFCD803C1135}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe

FirewallRules: [{AB8E5377-F2F7-441D-9A50-434D83F90C0E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe

FirewallRules: [{CCA3F085-5CA5-4FEE-9ADD-935183AE6F1C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{9EA1B11A-0179-414A-AFF8-82050C792E6B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{256D7304-2C38-45D1-97DB-71739BA92297}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe

FirewallRules: [{E2070B33-5CCB-46B0-B6CF-4ED92F8AB562}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe

FirewallRules: [{1E69481E-7920-4B4D-9047-B812C456A75A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{A416660E-98DD-4A45-8A5A-C8BBA66A68A3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{72A09F1B-7789-4A3E-B327-FD1D052150FF}] => (Allow) C:\Program Files (x86)\GameforgeLive\gfl_client.exe

FirewallRules: [TCP Query User{2A0CBFD5-23A1-4C20-91ED-B00077755298}C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe

FirewallRules: [UDP Query User{3933DFA8-6EB3-47A1-A4F9-7C3E7BD2ED67}C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe

FirewallRules: [TCP Query User{69CF256B-C011-492C-B7A0-04F509D0D67B}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe

FirewallRules: [UDP Query User{FFEA845F-4BF9-44FF-89AC-628034543D28}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe

FirewallRules: [{7809CF2C-51C3-4520-8BD0-F210B5BBB57B}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe

FirewallRules: [{CE1678FF-6995-415D-ADDC-E165111812E1}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe

FirewallRules: [{2412E622-4FBF-402A-B899-DBC82E5C6B2B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe

FirewallRules: [{5817EFF9-3537-4F8B-97F9-2C33716052B4}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe

FirewallRules: [{B65003CD-97BF-4394-A2F7-21A3E24DCFB5}] => (Allow) C:\Nexon\Vindictus EU\en-EU\NMService.exe

FirewallRules: [{0CA242B9-DEDD-43C3-9F4C-BADAE74781E9}] => (Allow) C:\Nexon\Vindictus EU\en-EU\NMService.exe

FirewallRules: [TCP Query User{3D2A0F20-56AE-42D0-80DF-E8AC85D00D13}C:\nexon\vindictus eu\en-eu\vindictus.exe] => (Allow) C:\nexon\vindictus eu\en-eu\vindictus.exe

FirewallRules: [UDP Query User{2DFE002E-3069-4DA8-920D-442A029D663E}C:\nexon\vindictus eu\en-eu\vindictus.exe] => (Allow) C:\nexon\vindictus eu\en-eu\vindictus.exe

FirewallRules: [TCP Query User{93A7A5BC-03EA-42A5-AE99-CC30CBDF752F}C:\users\dima\desktop\eclipse\eclipse.exe] => (Allow) C:\users\dima\desktop\eclipse\eclipse.exe

FirewallRules: [UDP Query User{13A19341-79DD-4889-B496-24BB0AA8C4C2}C:\users\dima\desktop\eclipse\eclipse.exe] => (Allow) C:\users\dima\desktop\eclipse\eclipse.exe

FirewallRules: [TCP Query User{95CD7A11-031A-4E37-B3A1-64F53A1F7A75}C:\program files\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\javaw.exe

FirewallRules: [UDP Query User{9B60CDE5-BA1E-4E6D-BDF3-C1056F5F8650}C:\program files\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\javaw.exe

FirewallRules: [TCP Query User{C4E30886-3358-4A99-BE81-2F5BED09E73D}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe

FirewallRules: [UDP Query User{710835ED-1463-4E58-8DB1-9F37F56C4A0F}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe

FirewallRules: [TCP Query User{C7584B0F-6622-4E1D-8987-9D85C77F36F0}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe

FirewallRules: [UDP Query User{F365D46D-EED4-49F4-93DF-234F94019BB2}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe

FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe

FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe

FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe

FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe

FirewallRules: [TCP Query User{63488A2D-8F13-4C4E-8CC0-49944F9372BA}C:\users\dima\desktop\lancraft\lancraft.exe] => (Allow) C:\users\dima\desktop\lancraft\lancraft.exe

FirewallRules: [UDP Query User{EAEC2D64-0B8E-4599-A61B-53F358A64796}C:\users\dima\desktop\lancraft\lancraft.exe] => (Allow) C:\users\dima\desktop\lancraft\lancraft.exe

FirewallRules: [TCP Query User{A91AD53F-87ED-432A-9D7C-0AC95375B702}C:\users\dima\desktop\warcraft\war3.exe] => (Allow) C:\users\dima\desktop\warcraft\war3.exe

FirewallRules: [UDP Query User{CC9DF559-105D-4031-9013-ADF7BC24CFC3}C:\users\dima\desktop\warcraft\war3.exe] => (Allow) C:\users\dima\desktop\warcraft\war3.exe

FirewallRules: [TCP Query User{6E3020FE-2B2A-413D-8EBC-AC0261DDA56B}C:\users\dima\desktop\warcraft\lancraft.exe] => (Allow) C:\users\dima\desktop\warcraft\lancraft.exe

FirewallRules: [UDP Query User{83FC41EC-2250-4389-B57F-7CF1CF138244}C:\users\dima\desktop\warcraft\lancraft.exe] => (Allow) C:\users\dima\desktop\warcraft\lancraft.exe

FirewallRules: [{E762770A-34B1-461E-B15E-FFC052875F0A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\CastleCrashers\castle.exe

FirewallRules: [{32B2CED0-8283-4A5A-8965-FFCB653C38DA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\CastleCrashers\castle.exe

FirewallRules: [TCP Query User{CA917D8D-9E80-4B19-90E8-110407378DDD}C:\program files (x86)\unity\editor\unity.exe] => (Allow) C:\program files (x86)\unity\editor\unity.exe

FirewallRules: [UDP Query User{4A9F69B2-9BB4-4F0E-B34D-4D95E242700A}C:\program files (x86)\unity\editor\unity.exe] => (Allow) C:\program files (x86)\unity\editor\unity.exe

FirewallRules: [{5A44804A-99EB-4C63-8F18-C9310F1C4657}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe

FirewallRules: [{5C90DDB5-DFDC-4BF5-B6D0-B86A95AEE724}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe

FirewallRules: [TCP Query User{DD861486-7A78-460B-9A83-BFA67BC6A454}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe

FirewallRules: [UDP Query User{21543651-AA0C-4F30-B6F4-14C779C5E70B}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe

FirewallRules: [TCP Query User{5C83AE95-A82A-49CA-B905-4EFC8C6961F9}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe

FirewallRules: [UDP Query User{640696E3-D785-4576-883E-596F24E072B3}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe

FirewallRules: [{5880095B-DD8E-4F79-BA8F-727A270A9A7B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dungeon Defenders\Binaries\Win32\DungeonDefenders.exe

FirewallRules: [{A02B8413-228D-4E79-9B24-1B23EEBA9CE2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dungeon Defenders\Binaries\Win32\DungeonDefenders.exe

FirewallRules: [TCP Query User{E5CD1AD8-4898-41F1-880E-C3CCEEF12C49}C:\program files (x86)\secondlifeviewer\slvoice.exe] => (Allow) C:\program files (x86)\secondlifeviewer\slvoice.exe

FirewallRules: [UDP Query User{37F84E6A-EF30-44B7-8E99-DE3F7E7DF7EE}C:\program files (x86)\secondlifeviewer\slvoice.exe] => (Allow) C:\program files (x86)\secondlifeviewer\slvoice.exe

FirewallRules: [TCP Query User{2478D171-94B3-4D1F-8C59-4E8322B8E276}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [UDP Query User{28D75031-A654-47AF-802E-4A9A15D5EF3F}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [{3A112284-5247-4174-9FB4-B86BFEBD19F9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe

FirewallRules: [{B2899169-D59D-4AC1-BBE3-3F3903152981}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe

FirewallRules: [{12C4EFF7-DD2B-4A0E-A3A0-98777451B440}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3.exe

FirewallRules: [{4060C2B9-6F65-462B-9221-EEEBCF58BB56}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3.exe

FirewallRules: [{EFA22BC5-7DE3-47F6-8167-289BFDD93178}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3_Unrestricted.exe

FirewallRules: [{C0D1322B-FEBC-4B0A-BD29-158C54B47C3F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3_Unrestricted.exe

FirewallRules: [{13A229AF-4A20-4E5A-B1D5-E4DA450947FA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Gumboy Tournament\gumboytournament.exe

FirewallRules: [{BD506B34-1746-48BC-A17D-29CE55B609BC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Gumboy Tournament\gumboytournament.exe

FirewallRules: [TCP Query User{E9B42C51-F75A-4042-8D09-5FE64A6E0AFD}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe

FirewallRules: [UDP Query User{A47B5394-0D06-4B60-AEAC-F80C6A18EC73}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe

FirewallRules: [{1F0F5A11-9A4F-49CF-8202-86A2DAEB8299}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_launcher.exe

FirewallRules: [{472579C8-4E14-4D30-9C6E-7C1E88FAB3FD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe

FirewallRules: [{09D4FEB7-995B-4579-90DC-1C535713E99A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe

FirewallRules: [{418B6FDA-1046-4E47-AFFC-EC7C31A532E9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe

FirewallRules: [{7199E669-27DE-4BFD-94D5-FDCF6A7C93AA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe

FirewallRules: [{BFF61270-CC5A-432C-A7FB-7D76DC47C782}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium.exe

FirewallRules: [{490B16FF-C2D2-4175-A366-EFDAA08EB979}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium.exe

FirewallRules: [TCP Query User{C9F38270-E9E5-4168-9E99-11073C550934}C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe

FirewallRules: [UDP Query User{6082536E-F697-45B2-969C-5E5CA8E07E06}C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe

FirewallRules: [TCP Query User{5AC0DF45-9E80-410D-A952-1DDA7A565671}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe

FirewallRules: [UDP Query User{31F72C84-B935-4C8E-8E1E-6FBDDC891D1C}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe

FirewallRules: [{8EB84DED-EB81-4D74-9575-8282402E2D2E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cryptic Studios\Neverwinter.exe

FirewallRules: [{B5B40F25-2AC6-4642-8BBC-63AE2A925B7B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cryptic Studios\Neverwinter.exe

FirewallRules: [TCP Query User{096444F6-AA1C-44A3-8C5E-A8DFF4A1C6D0}C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe

FirewallRules: [UDP Query User{9E1BE6EE-CCE2-4CFC-8375-7D1F41A71285}C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe

FirewallRules: [{3E6ED98E-B2F8-4E5F-BAED-9D8ACD743A90}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe

FirewallRules: [{2F7FD9C7-09FF-4330-AB1D-62122B26142B}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe

FirewallRules: [{B6917A43-4FD1-4943-819E-0224DF009AD4}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe

FirewallRules: [{580CEC6F-22A8-423D-B6A2-60898E1991C0}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe

FirewallRules: [{1D779765-CEC8-476D-8663-FF565F9943D2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dragon Nest Europe\DragonNest\DragonNest.exe

FirewallRules: [{BFD8F340-3BB5-4D13-B4C8-64605B781AE5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dragon Nest Europe\DragonNest\DragonNest.exe

FirewallRules: [TCP Query User{51AE804F-C3F0-4BE7-8861-486111D1A4C3}C:\neople\dfo\dfo.exe] => (Allow) C:\neople\dfo\dfo.exe

FirewallRules: [UDP Query User{813C44E8-970E-4FB2-A994-1B7E6CFAB002}C:\neople\dfo\dfo.exe] => (Allow) C:\neople\dfo\dfo.exe

FirewallRules: [{721B343A-D002-417F-8012-828923F7CF99}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe

FirewallRules: [{51F7C144-FBEC-4072-83BA-D2DB2C1ED47D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe

FirewallRules: [{ECFA20B8-D75A-4C39-89BD-017F84E119BB}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

FirewallRules: [{0FE2304A-0072-4655-BD88-8EAC2F3EE694}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{7C5F9697-EA12-4FD9-AA6A-450DA3B7D57A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
 

==================== Faulty Device Manager Devices =============
 

Name: USB (Universal Serial Bus)-Controller

Description: USB (Universal Serial Bus)-Controller

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: Ethernet-Controller

Description: Ethernet-Controller

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: qrnfd_1_10_0_13

Description: qrnfd_1_10_0_13

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer: 

Service: qrnfd_1_10_0_13

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 

Name: SM-Bus-Controller

Description: SM-Bus-Controller

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (05/11/2015 09:18:12 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 37.0.2.5583, Zeitstempel: 0x552ef76c

Name des fehlerhaften Moduls: mozalloc.dll, Version: 37.0.2.5583, Zeitstempel: 0x552ee9ae

Ausnahmecode: 0x80000003

Fehleroffset: 0x00001aa1

ID des fehlerhaften Prozesses: 0x15f0

Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0

Pfad der fehlerhaften Anwendung: plugin-container.exe1

Pfad des fehlerhaften Moduls: plugin-container.exe2

Berichtskennung: plugin-container.exe3
 

Error: (05/10/2015 06:42:28 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (05/10/2015 04:13:33 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (05/10/2015 04:12:45 PM) (Source: ESENT) (EventID: 215) (User: )

Description: WinMail (2764) WindowsMail0: Die Sicherung wurde abgebrochen, weil sie vom Client angehalten wurde, oder weil die Verbindung mit dem Client unterbrochen wurde.
 

Error: (05/10/2015 03:57:19 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 37.0.2.5583, Zeitstempel: 0x552ef76c

Name des fehlerhaften Moduls: mozalloc.dll, Version: 37.0.2.5583, Zeitstempel: 0x552ee9ae

Ausnahmecode: 0x80000003

Fehleroffset: 0x00001aa1

ID des fehlerhaften Prozesses: 0x1c44

Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0

Pfad der fehlerhaften Anwendung: plugin-container.exe1

Pfad des fehlerhaften Moduls: plugin-container.exe2

Berichtskennung: plugin-container.exe3
 

Error: (05/10/2015 03:38:05 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm League of Legends.exe, Version 5.8.0.461 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 3c6c
 

Startzeit: 01d08b2209e5b9bd
 

Endzeit: 16
 

Anwendungspfad: C:\Riot Games\League of Legends\RADS\solutions\lol_game_client_sln\releases\0.0.1.88\deploy\League of Legends.exe
 

Berichts-ID:
 

Error: (05/10/2015 03:03:45 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 37.0.2.5583, Zeitstempel: 0x552ef76c

Name des fehlerhaften Moduls: mozalloc.dll, Version: 37.0.2.5583, Zeitstempel: 0x552ee9ae

Ausnahmecode: 0x80000003

Fehleroffset: 0x00001aa1

ID des fehlerhaften Prozesses: 0x23c4

Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0

Pfad der fehlerhaften Anwendung: plugin-container.exe1

Pfad des fehlerhaften Moduls: plugin-container.exe2

Berichtskennung: plugin-container.exe3
 

Error: (05/10/2015 02:46:11 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 37.0.2.5583, Zeitstempel: 0x552ef76c

Name des fehlerhaften Moduls: mozalloc.dll, Version: 37.0.2.5583, Zeitstempel: 0x552ee9ae

Ausnahmecode: 0x80000003

Fehleroffset: 0x00001aa1

ID des fehlerhaften Prozesses: 0x3eb4

Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0

Pfad der fehlerhaften Anwendung: plugin-container.exe1

Pfad des fehlerhaften Moduls: plugin-container.exe2

Berichtskennung: plugin-container.exe3
 

Error: (05/08/2015 09:03:09 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 37.0.2.5583, Zeitstempel: 0x552ef76c

Name des fehlerhaften Moduls: mozalloc.dll, Version: 37.0.2.5583, Zeitstempel: 0x552ee9ae

Ausnahmecode: 0x80000003

Fehleroffset: 0x00001aa1

ID des fehlerhaften Prozesses: 0x1ea8

Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0

Pfad der fehlerhaften Anwendung: plugin-container.exe1

Pfad des fehlerhaften Moduls: plugin-container.exe2

Berichtskennung: plugin-container.exe3
 

Error: (05/08/2015 08:20:49 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 37.0.2.5583, Zeitstempel: 0x552ef76c

Name des fehlerhaften Moduls: mozalloc.dll, Version: 37.0.2.5583, Zeitstempel: 0x552ee9ae

Ausnahmecode: 0x80000003

Fehleroffset: 0x00001aa1

ID des fehlerhaften Prozesses: 0x2ef0

Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0

Pfad der fehlerhaften Anwendung: plugin-container.exe1

Pfad des fehlerhaften Moduls: plugin-container.exe2

Berichtskennung: plugin-container.exe3
 
 

System errors:

=============

Error: (05/10/2015 08:53:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (05/10/2015 08:53:07 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.
 

Error: (05/10/2015 06:52:34 PM) (Source: Service Control Manager) (EventID: 7006) (User: )

Description: Der Aufruf "ScRegSetValueExW" ist für "FailureCommand" aufgrund folgenden Fehlers fehlgeschlagen: 

%%5
 

Error: (05/10/2015 06:51:14 PM) (Source: Service Control Manager) (EventID: 7006) (User: )

Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen: 

%%5
 

Error: (05/10/2015 06:43:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (05/10/2015 06:43:03 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht.
 

Error: (05/10/2015 06:42:33 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 

qrnfd_1_10_0_13
 

Error: (05/10/2015 06:42:20 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (05/10/2015 06:42:20 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht.
 

Error: (05/10/2015 06:41:30 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 
 

Microsoft Office Sessions:

=========================

Error: (05/11/2015 09:18:12 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: plugin-container.exe37.0.2.5583552ef76cmozalloc.dll37.0.2.5583552ee9ae8000000300001aa115f001d08c1ef99749a9C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll76a6dcfc-f812-11e4-b276-c9b362989730
 

Error: (05/10/2015 06:42:28 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (05/10/2015 04:13:33 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (05/10/2015 04:12:45 PM) (Source: ESENT) (EventID: 215) (User: )

Description: WinMail2764WindowsMail0:
 

Error: (05/10/2015 03:57:19 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: plugin-container.exe37.0.2.5583552ef76cmozalloc.dll37.0.2.5583552ee9ae8000000300001aa11c4401d08b21cd0c0d65C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll790802e2-f71c-11e4-861a-c7721c7623ca
 

Error: (05/10/2015 03:38:05 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: League of Legends.exe5.8.0.4613c6c01d08b2209e5b9bd16C:\Riot Games\League of Legends\RADS\solutions\lol_game_client_sln\releases\0.0.1.88\deploy\League of Legends.exe
 

Error: (05/10/2015 03:03:45 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: plugin-container.exe37.0.2.5583552ef76cmozalloc.dll37.0.2.5583552ee9ae8000000300001aa123c401d08b1f4d078973C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dllfce5a29c-f714-11e4-861a-c7721c7623ca
 

Error: (05/10/2015 02:46:11 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: plugin-container.exe37.0.2.5583552ef76cmozalloc.dll37.0.2.5583552ee9ae8000000300001aa13eb401d08b15b0bfacd9C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll88aa69a8-f712-11e4-861a-c7721c7623ca
 

Error: (05/08/2015 09:03:09 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: plugin-container.exe37.0.2.5583552ef76cmozalloc.dll37.0.2.5583552ee9ae8000000300001aa11ea801d089bbb9ecf4ecC:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dlldd3c82f2-f5b4-11e4-861a-c7721c7623ca
 

Error: (05/08/2015 08:20:49 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: plugin-container.exe37.0.2.5583552ef76cmozalloc.dll37.0.2.5583552ee9ae8000000300001aa12ef001d089ba304c78c2C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dllf341f357-f5ae-11e4-861a-c7721c7623ca
 
 

CodeIntegrity Errors:

===================================

  Date: 2015-05-08 20:38:53.994

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:37:07.273

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:37:03.798

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:36:19.340

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:34:40.221

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:34:12.814

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:20:56.969

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:20:56.706

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:20:18.534

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:20:17.995

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Core(TM) i5-4570 CPU @ 3.20GHz

Percentage of memory in use: 52%

Total physical RAM: 8136.6 MB

Available physical RAM: 3828.84 MB

Total Pagefile: 16271.39 MB

Available Pagefile: 11137.13 MB

Total Virtual: 8192 MB

Available Virtual: 8191.84 MB
 

==================== Drives ================================
 

Drive c: (OS) (Fixed) (Total:915.41 GB) (Free:454.26 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 277A7941)

Partition 1: (Not Active) - (Size=16 GB) - (Type=27)

Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=915.4 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

Bootsektor

11.05.2015 21:46

Hallo,

hast du einen ftb-server/client?

Schritt 1
Bitte lasse die Datei aus der Code-Box bei Virustotal überprüfen.

Klicke auf Wählen Sie eine
Kopiere nun folgendes in die Suchleiste

Code:

C:\Windows\ftb.exe
und klicke auf Öffnen.
Klicke auf Scannen!.
Warte bitte bis die Datei vollständig hochgeladen wurde. Solltest Du folgende Meldung bekommen

Zitat:

Diese Datei wurde bereits von VirusTotal analysiert...

klicke auf Neu analysieren.
Warte bis dir das Analysedatum angezeigt wird und der Scan abgeschlossen ist.
Kopiere den Link aus deiner Adresszeile und poste ihn hier.

Schritt 2
Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 3
Starte noch einmal FRST.

Setze den Haken bei addition.txt und drücke auf Scan.
Wenn der Scan abgeschlossen ist, werden zwei neue Logfiles FRST.txt und addition.txt erstellt und auf dem Desktop (oder in dem Verzeichnis in dem FRST liegt) gespeichert.
Poste den Inhalt dieser Logfiles bitte hier in deinen Thread.

kriegnes

11.05.2015 22:39

Vielen Dank für Ihre Antwort.
Der Link zu Schritt 1 https://www.virustotal.com/de/file/de4fcdad76135cb864903a070e232d976f99bd7834d9a2ac48fa246ba35239bd/analysis/1431380127/

Den Rest werde ich jetzt machen und dann hier rein editieren.

EDIT: AdwCleaner[S2].txt

Code:

# AdwCleaner v4.203 - Bericht erstellt 11/05/2015 um 23:41:36

# Aktualisiert 30/04/2015 von Xplode

# Datenbank : 2015-05-11.1 [Server]

# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64)

# Benutzername : Dima - DIMAS-PC

# Gestarted von : C:\Users\Dima\Desktop\Downloads\adwcleaner_4.203.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Datei Gelöscht : C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\yn1o6yyd.kriegnes\foxydeal.sqlite

Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\browser\defaults\preferences\prefs.js

Datei Gelöscht : C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.selectgo00.selectgo.net_0.localstorage

Datei Gelöscht : C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.selectgo00.selectgo.net_0.localstorage-journal
 

***** [ Geplante Tasks ] *****
 
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Daten Gelöscht : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - hxxp=127.0.0.1:63783;hxxps=127.0.0.1:63783

Daten Gelöscht : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyEnable] - 1

Daten Gelöscht : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <-loopback>

Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local>
 

***** [ Internetbrowser ] *****
 

-\\ Internet Explorer v11.0.9600.17689
 
 

-\\ Mozilla Firefox v37.0.2 (x86 de)
 
 

-\\ Google Chrome v42.0.2311.135
 
 

*************************
 

AdwCleaner[R0].txt - [22123 Bytes] - [10/05/2015 16:07:34]

AdwCleaner[R1].txt - [2082 Bytes] - [10/05/2015 18:39:08]

AdwCleaner[R2].txt - [2295 Bytes] - [11/05/2015 23:40:38]

AdwCleaner[S0].txt - [20918 Bytes] - [10/05/2015 16:09:59]

AdwCleaner[S1].txt - [1911 Bytes] - [10/05/2015 18:39:39]

AdwCleaner[S2].txt - [1985 Bytes] - [11/05/2015 23:41:36]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [2044  Bytes] ##########

FRST.txt

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-05-2015

Ran by Dima (administrator) on DIMAS-PC on 11-05-2015 23:49:08

Running from C:\Users\Dima\Desktop\Downloads

Loaded Profiles: Dima (Available profiles: Dima)

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: FF)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

() C:\Windows\ftb.exe

(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

(Akamai Technologies, Inc.) C:\Users\Dima\AppData\Local\Akamai\netsession_win.exe

(Dxtory Software) C:\Program Files (x86)\ExKode\Dxtory2.0\UpdateChecker.exe

(Akamai Technologies, Inc.) C:\Users\Dima\AppData\Local\Akamai\netsession_win.exe

(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe

(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe

() C:\Windows\mftb.exe

(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe

(Microsoft Corporation) C:\Windows\System32\msiexec.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

(AVM Berlin) C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe

(Microsoft Corporation) C:\Windows\System32\mqsvc.exe

(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe

(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe

(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 2\creator-ws.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry.exe

(Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe

(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.OE.Systray.exe

(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe

(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11785832 2011-03-10] (Realtek Semiconductor)

HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1332296 2015-01-30] (Microsoft Corporation)

HKLM\...\Run: [3D BubbleSound] => "C:\Program Files\BubbleSound\3D BubbleSound.exe"

HKLM-x32\...\Run: [SuiteTray] => C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [340848 2011-04-02] (Egis Technology Inc.)

HKLM-x32\...\Run: [EgisTecPMMUpdate] => C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [408432 2011-03-29] (Egis Technology Inc.)

HKLM-x32\...\Run: [EgisUpdate] => C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [202608 2011-03-29] (Egis Technology Inc.)

HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [297280 2011-04-24] (NTI Corporation)

HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)

HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55568 2015-03-25] (Raptr, Inc)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-11-17] (DivX, LLC)

HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-03-30] (LogMeIn Inc.)

HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [933888 2012-08-21] (AVM Berlin)

HKLM-x32\...\Run: [gmsd_de_485] => [X]

HKLM-x32\...\Run: [gmsd_de_497] => [X]

HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\Launcher\Avira.OE.Systray.exe [127792 2015-04-21] (Avira Operations GmbH & Co. KG)

Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]

HKU\S-1-5-19\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}

HKU\S-1-5-20\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2888384 2015-05-08] (Valve Corporation)

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3619160 2015-01-28] (Electronic Arts)

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Dima\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-30] (Akamai Technologies, Inc.)

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Dxtory Update Checker 2.0] => C:\Program Files (x86)\ExKode\Dxtory2.0\UpdateChecker.exe [93696 2010-10-17] (Dxtory Software)

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [\\DIMA-PC\EPSON SX210 Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFDE.EXE [223232 2008-11-05] (SEIKO EPSON CORPORATION)

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [GameTracker] => "C:\Program Files (x86)\GameTracker\GTLite.exe"

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [AMDToggler] => C:\Users\Dima\AppData\Local\Temp\Rar$EXa0.826\Saturation Toggler.exe <===== ATTENTION

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [GoogleChromeAutoLaunch_74AB638E1E27FA41128D672CA46F567E] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [812872 2015-04-28] (Google Inc.)

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\MountPoints2: {b38c492d-9357-11e3-9d9f-b52bea23c753} - E:\pushinst.exe

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\MountPoints2: {d0b228e3-004f-11e3-8572-a5256f050d2a} - E:\pushinst.exe

HKU\S-1-5-18\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2014-08-23]

ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)

Startup: C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk [2015-05-05]

ShortcutTarget: hqghumeaylnlf.lnk -> C:\ProgramData\{b3779435-d2fb-f000-b377-79435d2f50d7}\hqghumeaylnlf.exe (No File)

BootExecute: autocheck autochk * sdnclean64.exe

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKU\S-1-5-21-221738678-620704744-704572411-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.

ProxyServer: [.DEFAULT] => http=127.0.0.1:63783;https=127.0.0.1:63783

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com

HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll No File

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28] (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation)

BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)

BHO-x32: PDF Architect Helper -> {691B33B0-B86E-47F3-81C7-56E4FE3B929C} -> C:\Program Files (x86)\PDF Architect 2\creator-ie-helper.dll [2014-10-10] (pdfforge GmbH)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28] (Oracle Corporation)

BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation)

Toolbar: HKLM-x32 - PDF Architect Toolbar - {DEEB13D7-CEA9-45FB-B77C-E039BEC85221} - C:\Program Files (x86)\PDF Architect 2\creator-ie-plugin.dll [2014-10-10] (pdfforge GmbH)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

StartMenuInternet: IEXPLORE.EXE - iexplore.exe
 

FireFox:

========

FF ProfilePath: C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)

FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll [2014-09-01] (EA Digital Illusions CE AB)

FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-28] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2013-09-08] (Microsoft Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-11-12] (VideoLAN)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll [2014-06-24] (Adobe Systems, Inc.)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)

FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2014-11-21] (DivX, LLC)

FF Plugin-x32: @esn/npbattlelog,version=2.3.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll No File

FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll [2014-09-01] (EA Digital Illusions CE AB)

FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-28] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation)

FF Plugin-x32: @mcafee.com/SAFFPlugin -> C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll No File

FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2013-09-08] (Microsoft Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)

FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npnxgameEU.dll [2014-11-12] (Nexon)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)

FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll [2014-10-10] (pdfforge GmbH)

FF Plugin HKU\S-1-5-21-221738678-620704744-704572411-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Dima\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS)

FF Extension: jid0XZn6pYCdV3ANrfYigxlyyGDrxAMjetpack - C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\Extensions\jid0-XZn6pYCdV3ANrfYigxlyyGDrxAM@jetpack [2015-05-11]

FF Extension: 9b9d2aaaae264447a7a1633a32b19ddd - C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\Extensions\{9b9d2aaa-ae26-4447-a7a1-633a32b19ddd} [2015-05-11]

FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor

FF HKLM-x32\...\Firefox\Extensions: [pdf_architect_2_conv@pdfarchitect.org] - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension

FF Extension: PDF Architect 2 Creator - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension [2015-02-26]

FF HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi

FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
 

Chrome: 

=======

CHR Profile: C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Slides) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-05-08]

CHR Extension: (Google Docs) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-05-08]

CHR Extension: (Google Drive) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-05-08]

CHR Extension: (YouTube) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-05-08]

CHR Extension: (Google Search) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-05-08]

CHR Extension: (Google Sheets) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-05-08]

CHR Extension: (Bookmark Manager) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-08]

CHR Extension: (iilcekgoelpgecpjnnoikhbleipnjdhf) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\iilcekgoelpgecpjnnoikhbleipnjdhf [2015-05-11]

CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-08]

CHR Extension: (ljppcglljemjablfhgjdhndlpallobpl) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljppcglljemjablfhgjdhndlpallobpl [2015-05-11]

CHR Extension: (Google Wallet) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]

CHR Extension: (pioclpoplcdbaefihamjohnefbikjilc) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2015-05-10]

CHR Extension: (Gmail) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-08]
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [205616 2015-04-21] (Avira Operations GmbH & Co. KG)

S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [237864 2015-03-21] (EasyAntiCheat Ltd)

R2 ftb; c:\windows\ftb.exe [417792 2015-05-05] () [File not signed]

R2 GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [29696 2011-05-26] (Acer Incorporated) [File not signed]

S2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2015-02-16] (Hi-Rez Studios) [File not signed]

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-03-30] (LogMeIn, Inc.)

S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)

R2 mftb; c:\windows\mftb.exe [408576 2015-05-05] () [File not signed]

R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2015-01-30] (Microsoft Corporation)

R2 MSMQ; C:\Windows\system32\mqsvc.exe [9216 2009-07-14] (Microsoft Corporation)

R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366512 2015-01-30] (Microsoft Corporation)

S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5128944 2013-11-19] (INCA Internet Co., Ltd.) [File not signed]

R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256832 2011-04-24] (NTI Corporation)

S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910640 2015-03-02] (Electronic Arts)

S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-10-10] (pdfforge GmbH)

R2 PDF Architect 2 Creator; C:\Program Files (x86)\PDF Architect 2\creator-ws.exe [738856 2014-10-10] (pdfforge GmbH)

S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-10-10] (pdfforge GmbH)

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-10-11] ()

S2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)

R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)

R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)

S3 Survarium-Steam Update Service; C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium_service.exe [76408 2015-04-03] ()

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

S2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2012-04-25] (AVM Berlin)

R3 fwlanusb5; C:\Windows\System32\DRIVERS\fwlanusb5.sys [982784 2012-08-21] (AVM GmbH)

S3 GameKB; C:\Windows\System32\drivers\GameKB.sys [27648 2012-05-11] () [File not signed]

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [274696 2014-11-15] (Microsoft Corporation)

R3 MQAC; C:\Windows\System32\drivers\mqac.sys [189440 2009-07-14] (Microsoft Corporation)

R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124560 2014-11-15] (Microsoft Corporation)

S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-05-17] (Anchorfree Inc.)

S3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2014-07-02] (SplitmediaLabs Limited)

S3 BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [X]

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

S3 hxsyol; \??\C:\AeriaGames\AuraKingdom\avital\hxsy64.sys [X]

S1 qrnfd_1_10_0_13; system32\drivers\qrnfd_1_10_0_13.sys [X]

S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-05-11 23:00 - 2015-05-11 23:00 - 00000000 ____D () C:\Users\Dima\AppData\Local\Eclipse

2015-05-11 22:03 - 2015-05-11 23:49 - 00000000 ____D () C:\FRST

2015-05-11 20:59 - 2015-05-11 20:59 - 00000000 ____D () C:\Users\Dima\AppData\Local\My Games

2015-05-10 19:33 - 2015-05-10 19:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2015-05-10 19:33 - 2015-05-10 19:33 - 00000000 ____D () C:\ProgramData\Avira

2015-05-10 19:33 - 2015-05-10 19:33 - 00000000 ____D () C:\Program Files (x86)\Avira

2015-05-10 18:44 - 2015-05-10 18:44 - 00000000 ____D () C:\Users\Dima\AppData\Local\Origin

2015-05-10 18:05 - 2015-05-10 18:05 - 00001117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2015-05-10 18:05 - 2015-05-10 18:05 - 00001105 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk

2015-05-10 18:05 - 2015-05-10 18:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2015-05-10 16:15 - 2015-05-10 16:15 - 00000000 ____D () C:\Users\Dima\AppData\Local\EgisTec IPS

2015-05-10 16:14 - 2015-05-10 16:14 - 00066432 _____ () C:\Users\Dima\AppData\Local\GDIPFONTCACHEV1.DAT

2015-05-10 16:13 - 2015-05-11 23:46 - 00000000 ____D () C:\Users\Dima\AppData\Local\LogMeIn Hamachi

2015-05-10 16:13 - 2015-05-10 16:13 - 00000000 ____D () C:\Users\Dima\AppData\Local\LogMeIn

2015-05-10 16:12 - 2015-05-10 16:12 - 00000000 ____D () C:\Users\Dima\AppData\Local\VirtualStore

2015-05-10 16:07 - 2015-05-11 23:41 - 00000000 ____D () C:\AdwCleaner

2015-05-08 20:43 - 2015-05-08 20:43 - 00000000 ____D () C:\Users\Dima\AppData\Local\openvr

2015-05-08 20:42 - 2015-05-08 20:42 - 00000000 ____D () C:\Users\Dima\AppData\Local\Steam

2015-05-08 20:00 - 2015-05-11 23:43 - 00001008 _____ () C:\Windows\Tasks\vj57Vb6Rn1O3ezZ75nEr.job

2015-05-08 20:00 - 2015-05-11 23:43 - 00000990 _____ () C:\Windows\Tasks\IT7Lg6DU6w1.job

2015-05-08 20:00 - 2015-05-08 20:00 - 00004032 _____ () C:\Windows\System32\Tasks\vj57Vb6Rn1O3ezZ75nEr

2015-05-08 20:00 - 2015-05-08 20:00 - 00004014 _____ () C:\Windows\System32\Tasks\IT7Lg6DU6w1

2015-05-08 19:54 - 2015-05-08 19:54 - 00613255 _____ (CMI Limited) C:\Users\Dima\AppData\Local\nsnE864.tmp

2015-05-08 19:51 - 2015-05-08 19:50 - 00628688 _____ (CMI Limited) C:\Users\Dima\AppData\Local\nsb44A6.tmp

2015-05-08 19:44 - 2015-05-08 19:44 - 00000000 ____D () C:\Users\Dima\AppData\Local\Macromedia

2015-05-08 19:43 - 2015-05-09 22:34 - 00000000 ____D () C:\Users\Dima\AppData\Local\Mozilla

2015-05-08 18:41 - 2015-05-08 18:41 - 00000000 ____D () C:\Users\Dima\AppData\Local\ATI

2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieUserList

2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieSiteList

2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieBrowserModeList

2015-05-08 14:49 - 2015-05-08 14:49 - 00000000 ____D () C:\ProgramData\Kikblaster

2015-05-08 14:38 - 2015-05-11 23:43 - 00000990 _____ () C:\Windows\Tasks\WfqE0YhY0IU.job

2015-05-08 14:38 - 2015-05-11 23:43 - 00000982 _____ () C:\Windows\Tasks\DXbbq3U.job

2015-05-08 14:38 - 2015-05-08 14:38 - 00004014 _____ () C:\Windows\System32\Tasks\WfqE0YhY0IU

2015-05-08 14:38 - 2015-05-08 14:38 - 00004006 _____ () C:\Windows\System32\Tasks\DXbbq3U

2015-05-08 14:33 - 2015-05-08 19:54 - 00000000 ____D () C:\Program Files (x86)\Edu App

2015-05-08 14:20 - 2015-05-08 14:52 - 00000000 ____D () C:\Users\Dima\AppData\Local\00000000-1431094823-0000-0000-D43D7EBF2FB4

2015-05-08 14:16 - 2015-05-08 14:16 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webTinstMKTN84_01009.Wdf

2015-05-05 21:45 - 2015-05-08 14:45 - 00000000 ___HD () C:\ProgramData\ftb

2015-05-05 21:13 - 2015-05-08 21:13 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7

2015-05-05 21:12 - 2015-05-05 21:12 - 00631296 _____ () C:\Windows\ftb.dat

2015-05-05 21:12 - 2015-05-05 21:12 - 00417792 _____ () C:\Windows\ftb.exe

2015-05-05 21:12 - 2015-05-05 21:12 - 00408576 _____ () C:\Windows\mftb.exe

2015-05-04 20:34 - 2015-05-04 20:34 - 00059505 _____ () C:\Users\Dima\Documents\ts3_clientui-win64-1407159763-2015-05-04 20_34_27.843240.dmp

2015-04-26 16:02 - 2015-04-26 16:02 - 00000000 ____D () C:\Users\Dima\Documents\DFO

2015-04-25 20:20 - 2015-04-25 20:20 - 00001734 _____ () C:\Users\Public\Desktop\Dungeon Fighter Online.lnk

2015-04-25 20:20 - 2015-04-25 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\neople

2015-04-25 20:20 - 2015-04-25 20:20 - 00000000 ____D () C:\Neople

2015-04-25 15:57 - 2015-04-26 13:15 - 00000000 ____D () C:\Users\Dima\Documents\DragonNest

2015-04-24 12:20 - 2015-05-10 18:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2015-04-20 16:05 - 2015-04-20 16:05 - 01579520 _____ () C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1.exe

2015-04-20 16:05 - 2015-04-20 16:05 - 01579520 _____ () C:\Users\Dima\AppData\Roaming\DXbbq3U.exe

2015-04-20 16:05 - 2015-04-20 16:05 - 01246720 _____ () C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe

2015-04-20 16:05 - 2015-04-20 16:05 - 01246720 _____ () C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe

2015-04-20 13:37 - 2015-04-20 13:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FRITZ!WLAN

2015-04-20 13:37 - 2015-04-20 13:37 - 00000000 ____D () C:\Program Files (x86)\avmwlanstick

2015-04-20 13:36 - 2015-04-20 13:36 - 00000000 ____D () C:\Users\Dima\AVM_Driver

2015-04-20 13:36 - 2012-04-25 01:00 - 00014120 _____ (AVM Berlin) C:\Windows\system32\Drivers\avmeject.sys

2015-04-20 00:51 - 2015-04-20 00:51 - 00002956 _____ () C:\Windows\avmacc1.log

2015-04-20 00:51 - 2012-07-12 02:00 - 00480632 _____ (AVM Berlin) C:\Windows\instwcli.dex

2015-04-20 00:45 - 2015-04-20 00:45 - 00003216 _____ () C:\Windows\System32\Tasks\{35EE529B-2794-4708-8B79-567E126A4A7F}

2015-04-20 00:05 - 2015-04-20 13:36 - 00001479 _____ () C:\Windows\avmsetup.log

2015-04-20 00:05 - 2015-04-20 13:36 - 00000490 _____ () C:\Windows\avmadd32.log

2015-04-20 00:05 - 2015-04-20 00:54 - 00197887 _____ () C:\Windows\avmacc.log

2015-04-20 00:05 - 2015-04-20 00:44 - 00000000 ____D () C:\Program Files (x86)\AVM_update

2015-04-19 20:43 - 2015-04-19 20:43 - 00001906 _____ () C:\Users\Dima\Desktop\EliteDekaron.lnk

2015-04-19 20:43 - 2015-04-19 20:43 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Elite Dekaron

2015-04-19 20:40 - 2015-04-19 21:03 - 00000000 ____D () C:\Program Files (x86)\Elite Dekaron

2015-04-19 20:40 - 2015-04-19 20:40 - 00000000 ____D () C:\Windows\Elite Dekaron

2015-04-19 14:20 - 2015-04-19 14:20 - 00005872 _____ () C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1

2015-04-19 14:20 - 2015-04-19 14:20 - 00005872 _____ () C:\Users\Dima\AppData\Roaming\DXbbq3U

2015-04-16 16:36 - 2015-04-16 16:43 - 00000000 ___SD () C:\Windows\system32\GWX

2015-04-16 16:36 - 2015-04-16 16:36 - 00000000 ___SD () C:\Windows\SysWOW64\GWX

2015-04-15 21:14 - 2015-04-15 21:14 - 18178736 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe

2015-04-14 20:39 - 2015-03-25 05:24 - 03298816 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 02553856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2015-04-14 20:39 - 2015-03-25 05:23 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-04-14 20:39 - 2015-03-25 05:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-04-14 20:39 - 2015-03-25 05:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll

2015-04-14 20:39 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2015-04-14 20:39 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2015-04-14 20:39 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2015-04-14 20:39 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2015-04-14 20:39 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2015-04-14 20:39 - 2015-03-23 05:25 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2015-04-14 20:39 - 2015-03-23 05:25 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2015-04-14 20:39 - 2015-03-23 05:24 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2015-04-14 20:39 - 2015-03-23 05:24 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2015-04-14 20:39 - 2015-03-23 05:24 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2015-04-14 20:39 - 2015-03-23 05:24 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2015-04-14 20:39 - 2015-03-23 05:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

2015-04-14 20:39 - 2015-03-23 05:17 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2015-04-14 20:39 - 2015-03-17 07:22 - 05557696 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-04-14 20:39 - 2015-03-17 07:22 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-04-14 20:39 - 2015-03-17 07:22 - 00095672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-04-14 20:39 - 2015-03-17 07:19 - 01727904 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2015-04-14 20:39 - 2015-03-17 07:17 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2015-04-14 20:39 - 2015-03-17 07:17 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-04-14 20:39 - 2015-03-17 07:16 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2015-04-14 20:39 - 2015-03-17 07:16 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2015-04-14 20:39 - 2015-03-17 07:15 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2015-04-14 20:39 - 2015-03-17 07:15 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-04-14 20:39 - 2015-03-17 07:15 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-04-14 20:39 - 2015-03-17 07:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2015-04-14 20:39 - 2015-03-17 07:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2015-04-14 20:39 - 2015-03-17 06:59 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2015-04-14 20:39 - 2015-03-17 06:56 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2015-04-14 20:39 - 2015-03-17 06:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2015-04-14 20:39 - 2015-03-17 06:56 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2015-04-14 20:39 - 2015-03-10 05:25 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2015-04-14 20:39 - 2015-03-10 05:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2015-04-14 20:39 - 2015-03-10 05:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2015-04-14 20:39 - 2015-03-10 05:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2015-04-14 20:39 - 2015-03-05 07:12 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2015-04-14 20:39 - 2015-03-05 06:05 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2015-04-14 20:38 - 2015-03-17 07:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2015-04-14 20:38 - 2015-03-17 07:16 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-04-14 20:38 - 2015-03-17 07:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-04-14 20:38 - 2015-03-17 07:13 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-04-14 20:38 - 2015-03-17 07:13 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2015-04-14 20:38 - 2015-03-17 06:57 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2015-04-14 20:38 - 2015-03-17 06:56 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2015-04-14 20:38 - 2015-03-17 06:56 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2015-04-14 20:38 - 2015-03-17 06:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2015-04-14 20:38 - 2015-03-17 06:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2015-04-14 20:38 - 2015-03-17 06:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2015-04-14 20:38 - 2015-03-17 06:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 05:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2015-04-14 20:38 - 2015-03-17 05:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2015-04-14 20:38 - 2015-03-17 05:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 05:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2015-04-14 20:38 - 2015-03-04 06:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys

2015-04-14 20:38 - 2015-03-04 06:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll

2015-04-14 20:38 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll

2015-04-14 20:38 - 2015-02-25 05:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys

2015-04-14 18:28 - 2015-04-14 18:28 - 00004387 _____ () C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU

2015-04-14 18:28 - 2015-04-14 18:28 - 00004387 _____ () C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-05-11 23:49 - 2013-08-08 20:19 - 01802094 _____ () C:\Windows\WindowsUpdate.log

2015-05-11 23:48 - 2013-11-06 17:55 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Raptr

2015-05-11 23:44 - 2013-08-15 21:16 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-05-11 23:43 - 2013-08-17 15:43 - 00000000 ____D () C:\Program Files (x86)\Origin

2015-05-11 23:42 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2015-05-11 23:42 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-05-11 23:42 - 2009-07-14 06:51 - 00121033 _____ () C:\Windows\setupact.log

2015-05-11 23:33 - 2014-01-07 19:34 - 01832960 ___SH () C:\Users\Dima\Desktop\Thumbs.db

2015-05-11 23:14 - 2013-08-15 14:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-05-11 22:59 - 2015-04-10 17:41 - 00000000 ____D () C:\Users\Dima\Desktop\eclipse

2015-05-11 22:52 - 2013-08-15 21:16 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-05-11 22:28 - 2013-09-21 18:06 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\TS3Client

2015-05-11 20:59 - 2013-08-08 21:08 - 00000000 ____D () C:\Program Files (x86)\Steam

2015-05-11 13:55 - 2009-07-14 06:45 - 00028928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-05-11 13:55 - 2009-07-14 06:45 - 00028928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-05-10 19:33 - 2013-10-04 17:11 - 00000000 ____D () C:\ProgramData\Package Cache

2015-05-10 18:49 - 2013-08-09 06:11 - 00699416 _____ () C:\Windows\system32\perfh007.dat

2015-05-10 18:49 - 2013-08-09 06:11 - 00149556 _____ () C:\Windows\system32\perfc007.dat

2015-05-10 18:49 - 2009-07-14 07:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-05-10 18:44 - 2013-08-17 15:43 - 00000000 ____D () C:\ProgramData\Origin

2015-05-10 18:40 - 2010-11-21 05:47 - 00399402 _____ () C:\Windows\PFRO.log

2015-05-10 18:19 - 2014-11-14 00:10 - 00000000 ____D () C:\Users\Dima\Desktop\lqobqwkv.default

2015-05-10 17:35 - 2013-08-17 15:43 - 00000481 _____ () C:\Windows\wininit.ini

2015-05-10 16:42 - 2014-10-05 15:02 - 00000000 ____D () C:\Users\Dima\AppData\Local\Adobe

2015-05-10 16:15 - 2013-12-20 13:37 - 00000000 ____D () C:\Users\Dima\AppData\Local\Akamai

2015-05-10 16:12 - 2013-08-08 15:36 - 00001419 _____ () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2015-05-10 16:10 - 2014-11-26 23:57 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WorldofTanks

2015-05-08 21:41 - 2013-12-30 15:03 - 00000000 ____D () C:\Program Files (x86)\7-Zip

2015-05-08 21:39 - 2013-12-18 15:08 - 00000000 ____D () C:\Program Files (x86)\ACASystems

2015-05-08 18:40 - 2013-11-02 02:16 - 00000000 ____D () C:\Users\Dima\Desktop\Neuer Ordner

2015-05-08 18:40 - 2013-08-15 21:16 - 00000000 ____D () C:\Users\Dima\AppData\Local\Google

2015-05-08 14:52 - 2014-11-30 22:57 - 00000000 ____D () C:\Users\Dima\AppData\Local\gegl-0.2

2015-05-08 14:52 - 2013-12-14 00:39 - 00000000 ____D () C:\Users\Dima\AppData\Local\Battle.net

2015-05-08 14:16 - 2014-02-09 01:27 - 00000306 __RSH () C:\ProgramData\ntuser.pol

2015-05-08 13:16 - 2013-08-15 15:52 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Skype

2015-05-02 22:30 - 2014-11-23 16:19 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\.technic

2015-05-02 22:30 - 2014-08-25 02:48 - 04697768 _____ () C:\Users\Dima\Desktop\TechnicLauncher.exe

2015-05-02 22:28 - 2014-08-09 17:35 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\.minecraft

2015-04-27 16:21 - 2015-02-28 15:34 - 00000000 ____D () C:\Users\Dima\Desktop\Bewerbung

2015-04-20 13:37 - 2014-02-12 19:55 - 00011424 _____ () C:\Windows\avmfwlanci.log

2015-04-20 13:37 - 2014-02-12 19:55 - 00011167 _____ () C:\Windows\AVMInstall.Log

2015-04-20 13:36 - 2014-02-12 19:54 - 00000000 ____D () C:\Windows\AVM_Driver

2015-04-20 13:36 - 2013-08-08 15:34 - 00000000 ____D () C:\Users\Dima

2015-04-20 00:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF

2015-04-18 17:38 - 2013-09-13 14:13 - 00000000 ____D () C:\Program Files (x86)\Raptr

2015-04-18 12:26 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat

2015-04-16 16:36 - 2014-12-22 19:12 - 00000000 ____D () C:\Windows\system32\appraiser

2015-04-16 16:36 - 2014-05-01 14:38 - 00000000 ___SD () C:\Windows\system32\CompatTel

2015-04-16 16:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2015-04-16 12:44 - 2014-02-26 15:58 - 00002022 _____ () C:\Users\Dima\monsterhunter.txt

2015-04-15 21:15 - 2013-08-15 14:45 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-04-15 21:15 - 2013-08-15 14:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2015-04-15 21:15 - 2011-07-25 05:19 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-04-15 12:54 - 2013-09-09 16:14 - 01593956 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2015-04-15 12:52 - 2014-10-06 19:31 - 00000000 ___RD () C:\Program Files (x86)\Skype

2015-04-15 12:52 - 2011-07-25 05:01 - 00000000 ____D () C:\ProgramData\Skype

2015-04-15 12:51 - 2013-11-11 13:25 - 00000000 ____D () C:\Windows\system32\MRT

2015-04-15 12:45 - 2013-11-11 13:25 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
 

==================== Files in the root of some directories =======
 

2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\Dima\AppData\Roaming\DXbbq3U

2015-04-20 16:05 - 2015-04-20 16:05 - 1579520 _____ () C:\Users\Dima\AppData\Roaming\DXbbq3U.exe

2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1

2015-04-20 16:05 - 2015-04-20 16:05 - 1579520 _____ () C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1.exe

2013-11-09 21:45 - 2013-11-09 21:45 - 0000004 _____ () C:\Users\Dima\AppData\Roaming\steam_md4.dat

2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr

2015-04-20 16:05 - 2015-04-20 16:05 - 1246720 _____ () C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe

2014-11-27 23:59 - 2014-11-29 01:59 - 0000068 _____ () C:\Users\Dima\AppData\Roaming\WB.CFG

2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU

2015-04-20 16:05 - 2015-04-20 16:05 - 1246720 _____ () C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe

2015-05-08 19:51 - 2015-05-08 19:50 - 0628688 _____ (CMI Limited) C:\Users\Dima\AppData\Local\nsb44A6.tmp

2015-05-08 19:54 - 2015-05-08 19:54 - 0613255 _____ (CMI Limited) C:\Users\Dima\AppData\Local\nsnE864.tmp

2013-08-08 21:05 - 2013-08-08 21:05 - 0000654 _____ () C:\ProgramData\ArcadeDeluxe5.log
 

Some content of TEMP:

====================

C:\Users\Dima\AppData\Local\Temp\Quarantine.exe

C:\Users\Dima\AppData\Local\Temp\sqlite3.dll
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2011-07-25 04:31
 

==================== End Of Log ============================

--- --- ---

kriegnes

11.05.2015 22:53

Additions.txt

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-05-2015

Ran by Dima at 2015-05-11 23:50:42

Running from C:\Users\Dima\Desktop\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Accounts: =============================
 

Administrator (S-1-5-21-221738678-620704744-704572411-500 - Administrator - Disabled)

Dima (S-1-5-21-221738678-620704744-704572411-1000 - Administrator - Enabled) => C:\Users\Dima

Gast (S-1-5-21-221738678-620704744-704572411-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-221738678-620704744-704572411-1002 - Limited - Enabled)
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}

AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Spybot - Search and Destroy (Disabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )

ACA Screen Recorder 5.30 (HKLM-x32\...\ACAScreenRecorder_EN_is1) (Version: 5.30 - ACA Systems)

Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.99 - NTI Corporation)

Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3502 - Acer Incorporated)

Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3502 - Acer Incorporated)

Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0517.2011 - Acer Incorporated)

Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)

Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)

Adobe Reader X (10.1.13) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.13 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.)

Agarest: Generations of War (HKLM-x32\...\Steam App 237890) (Version:  - Ghostlight)

Age of Empires II: HD Edition (HKLM-x32\...\Steam App 221380) (Version:  - Hidden Path Entertainment, Ensemble Studios)

Akamai NetSession Interface (HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Akamai) (Version:  - Akamai Technologies, Inc)

AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)

Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.36 - Atheros Communications Inc.)

Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team)

Avidemux 2.6 - 64bits (HKLM-x32\...\Avidemux 2.6 - 64bits (64-bit)) (Version: 2.6.8.9046 - )

Avira (HKLM-x32\...\{2d044ded-ae1b-40d3-8d18-97cfda75bd69}) (Version: 1.1.37.14600 - Avira Operations GmbH & Co. KG)

Avira (x32 Version: 1.1.37.14600 - Avira Operations GmbH & Co. KG) Hidden

AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version: 1.2.0.0 - AVM Berlin)

Backup Manager V3 (x32 Version: 3.0.0.99 - NTI Corporation) Hidden

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)

Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.3.2.15221 - Electronic Arts)

Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.5.1 - EA Digital Illusions CE AB)

Borderlands 2 (HKLM-x32\...\Steam App 49520) (Version:  - Gearbox Software)

Call of Duty 4: Modern Warfare (HKLM-x32\...\Steam App 7940) (Version:  - Infinity Ward)

Call of Duty: Black Ops II - Multiplayer (HKLM-x32\...\Steam App 202990) (Version:  - )

Call of Duty: Black Ops II - Zombies (HKLM-x32\...\Steam App 212910) (Version:  - )

Call of Duty: Black Ops II (HKLM-x32\...\Steam App 202970) (Version:  - Treyarch)

Call of Duty: Ghosts - Multiplayer (HKLM-x32\...\Steam App 209170) (Version:  - )

Call of Duty: Ghosts (HKLM-x32\...\Steam App 209160) (Version:  - Infinity Ward)

Call of Duty: Modern Warfare 3 - Multiplayer (HKLM-x32\...\Steam App 42690) (Version:  - Infinity Ward)

Call of Duty: Modern Warfare 3 (HKLM-x32\...\Steam App 42680) (Version:  - Infinity Ward)

Castle Crashers (HKLM-x32\...\Steam App 204360) (Version:  - The Behemoth)

Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)

Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)

Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)

clear.fi Client (HKLM-x32\...\{43AAE145-83CF-4C96-9A5E-756CEFCE879F}) (Version: 1.00.3500 - Acer Incorporated)

Combined Community Codec Pack 2013-11-27 (HKLM-x32\...\Combined Community Codec Pack_is1) (Version: 2013.11.27.0 - CCCP Project)

Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)

Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version:  - Valve)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Darksiders II (HKLM-x32\...\Steam App 50650) (Version:  - Vigil Games)

DFO (HKLM-x32\...\{C1E5C0FB-527E-42C6-BCA0-0A37A6124AE4}) (Version: 1.01.0000 - Neople)

DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.7.0.64 - DivX, LLC)

Dota 2 (HKLM-x32\...\Steam App 570) (Version:  - Valve)

Dragon Nest Europe (HKLM-x32\...\Steam App 258700) (Version:  - Eyedentity Games)

Dungeon Defenders (HKLM-x32\...\Steam App 65800) (Version:  - Trendy Entertainment)

Dxtory version 2.0.128 (HKLM-x32\...\Dxtory2.0_is1) (Version: 2.0.128 - ExKode Co. Ltd.)

Elite Dekaron (HKLM-x32\...\Elite Dekaron1.0) (Version: 1.0 - EliteKingdoms)

EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - )

Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )

Free YouTube to MP3 Converter version 3.12.20.1230 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.20.1230 - DVDVideoSoft Ltd.)

Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Gameforge Live 2.0.5 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.5 - Gameforge)

Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Facepunch Studios)

GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)

Glyph (HKLM-x32\...\Glyph) (Version:  - Trion Worlds, Inc.)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.135 - Google Inc.)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden

Gumboy Tournament (HKLM-x32\...\Steam App 11230) (Version:  - CINEMAX, s.r.o.)

Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)

Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)

Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.2.1004 - Intel Corporation)

Java 7 Update 75 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417075FF}) (Version: 7.0.750 - Oracle)

Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)

Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)

Java SE Development Kit 7 Update 75 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170750}) (Version: 1.7.0.750 - Oracle)

Java SE Development Kit 8 Update 25 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180250}) (Version: 8.0.250.18 - Oracle Corporation)

Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )

League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden

Loadout (HKLM-x32\...\Steam App 208090) (Version:  - Edge of Reality)

LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.328 - LogMeIn, Inc.)

LogMeIn Hamachi (x32 Version: 2.2.0.328 - LogMeIn, Inc.) Hidden

LOLReplay (HKLM-x32\...\LOLReplay) (Version: 0.8.9.11 - www.leaguereplays.com)

Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)

McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)

Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.7.205.0 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)

Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)

Might & Magic: Duel of Champions (HKLM-x32\...\Steam App 256410) (Version:  - Ubisoft Quebec)

MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)

Mozilla Firefox 37.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.2 (x86 de)) (Version: 37.0.2 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.2 - Mozilla)

MyWinLocker (Version: 4.0.14.25 - Egis Technology Inc.) Hidden

MyWinLocker 4 (x32 Version: 4.0.14.25 - Egis Technology Inc.) Hidden

MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.15 - Egis Technology Inc.)

MyWinLocker Suite (x32 Version: 4.0.14.15 - Egis Technology Inc.) Hidden

Neverwinter (HKLM-x32\...\Steam App 109600) (Version:  - Cryptic Studios)

newsXpresso (HKLM-x32\...\InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}) (Version: 1.0.0.40 - esobi Inc.)

newsXpresso (x32 Version: 1.0.0.40 - esobi Inc.) Hidden

Nosgoth (HKLM-x32\...\Steam App 200110) (Version: 150120.100528 - Square Enix Ltd)

Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)

NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.8942 - NTI Corporation)

NTI Media Maker 9 (x32 Version: 9.0.2.8942 - NTI Corporation) Hidden

NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)

Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )

OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)

Origin (HKLM-x32\...\Origin) (Version: 9.3.1.4482 - Electronic Arts, Inc.)

paint.net (HKLM\...\{141BA46D-2D1F-4DA6-9448-B847334585C0}) (Version: 4.0.4 - dotPDN LLC)

PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.51.17865 - pdfforge GmbH)

PDF Architect 2 Create Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden

PDF Architect 2 Edit Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden

PDF Architect 2 View Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden

PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.0.2 - pdfforge)

Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Pokemon Online 2.4.1 (HKLM-x32\...\{2C08D7E7-9EE1-4A08-AFE0-745F02DCD6A4}_is1) (Version:  - Dreambelievers)

Pokémon Trading Card Game Online (HKLM-x32\...\{B0952280-3DF0-4AA9-9599-092D5E8D36AD}) (Version: 2.24.1 - The Pokémon Company International)

Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)

Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Ralink RT2860 Wireless LAN Card (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 1.5.6.0 - Ralink)

Raptr (HKLM-x32\...\Raptr) (Version:  - )

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6329 - Realtek Semiconductor Corp.)

Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30123 - Realtek Semiconductor Corp.)

Serious Sam 3: BFE (HKLM-x32\...\Steam App 41070) (Version:  - Croteam)

Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden

Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden

Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version:  - 2K Games, Inc.)

SIW 2013 Home Edition (HKLM-x32\...\{AB67580-257C-45FF-B8F4-C8C30682091A}_is1) (Version: 2013.05.14 - Topala Software Solutions)

Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)

Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 2.0.2574.0 - Hi-Rez Studios)

Source SDK Base 2006 (HKLM-x32\...\Steam App 215) (Version:  - Valve)

SpellForce (HKLM-x32\...\SpellForce) (Version:  - )

Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)

Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)

Survarium (HKLM-x32\...\Steam App 355840) (Version:  - Vostok Games)

Survarium-Steam (HKLM-x32\...\{A3D9343D-77CD-4bf4-A47A-F87B3BE985B4}_is1) (Version: 0.27d - )

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

System Requirements Lab CYRI (HKLM-x32\...\{E362724E-9320-4946-AF34-874E7B6B2927}) (Version: 6.0.7.0 - Husdawg, LLC)

Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)

TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)

TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.12 - TeamSpeak Systems GmbH)

TIPP10 Version 2.1.0 (HKLM-x32\...\TIPP10_is1) (Version:  - (c) 2006-2011, Tom Thielicke IT Solutions)

Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel)

Unity (HKLM-x32\...\Unity) (Version: 4.6.1f1 - Unity Technologies ApS)

Unity Web Player (HKU\S-1-5-21-221738678-620704744-704572411-1000\...\UnityWebPlayer) (Version: 4.6.1f1 - Unity Technologies ApS)

VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden

Vindictus EU (HKLM-x32\...\Vindictus EU) (Version:  - )

VLC media player 2.1.1 (HKLM\...\VLC media player) (Version: 2.1.1 - VideoLAN)

Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3503 - Acer Incorporated)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)

WinRAR 5.00 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)

YGOPro DevPro Version 1.9.7 r2 (HKLM-x32\...\{3CF2634F-3F38-4DD3-9201-CB2FE6B5FF23}_is1) (Version: 1.9.7 r2 - YGOPro DevPro Online)

Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden

Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
 

==================== Restore Points  =========================
 

01-05-2015 14:43:01 Windows Update

05-05-2015 16:18:48 Windows Update

08-05-2015 20:00:02 Windows Update
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 04:34 - 2014-09-21 15:27 - 00000860 ____N C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost

::1 localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {0A4748C0-2366-4860-8A2A-22C28DD4F8FB} - System32\Tasks\DXbbq3U => C:\Users\Dima\AppData\Roaming\DXbbq3U.exe [2015-04-20] () <==== ATTENTION

Task: {15731A0E-D960-4E94-9E60-DACD297E3193} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2014-06-24] (Safer-Networking Ltd.)

Task: {1860A38F-8939-478A-BF5C-F565A480142F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2014-06-24] (Safer-Networking Ltd.)

Task: {1D4EC24B-2C6F-4F04-8F3E-6AA90BAED5D2} - System32\Tasks\{A10EA19B-8B09-454D-B360-CA92A1D17DBD} => pcalua.exe -a C:\Users\Dima\Desktop\InstallIW4M(1).exe -d C:\Users\Dima\Desktop

Task: {276BF61D-668E-4313-BA37-702F352555A9} - System32\Tasks\Adobe Reader Speed Launcher => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2014-12-03] (Adobe Systems Incorporated)

Task: {2B46497E-052E-4882-879A-2CED38AE75F5} - System32\Tasks\{6B05723E-8DB6-495D-A0DA-ECA4FC2E26D7} => C:\Program Files (x86)\WeGame\wegame.exe

Task: {2D0DD0EF-6F02-4AE5-81DA-8F7F44E9D915} - System32\Tasks\Games\UpdateCheck_S-1-5-21-221738678-620704744-704572411-1000

Task: {30516B1D-88D3-4A14-AD49-963F8AA1FCEE} - System32\Tasks\vj57Vb6Rn1O3ezZ75nEr => C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe [2015-04-20] () <==== ATTENTION

Task: {36C3C2EA-97D0-4CA5-BAA5-C0D3544BE0C8} - System32\Tasks\WfqE0YhY0IU => C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe [2015-04-20] () <==== ATTENTION

Task: {54E1645E-EDBD-4280-B2FF-13D3BBEC2047} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-07] (Google Inc.)

Task: {5975092F-1EFE-4D6C-A337-025C0E67059F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)

Task: {5B6F25FF-1AB6-4306-AF5F-150B752505F5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-07] (Google Inc.)

Task: {691D2C19-7551-41BB-BDBA-38CC87FF53F4} - System32\Tasks\{3D950745-404D-482F-B2F2-F7290B610680} => pcalua.exe -a C:\Users\Dima\AppData\Roaming\webssearches\UninstallManager.exe -c  -ptid=irs <==== ATTENTION

Task: {ADDA105F-5269-41EB-BE7A-FADC87447563} - System32\Tasks\{153E695E-4162-4A7B-8004-BCBAF85CE618} => pcalua.exe -a C:\Users\Dima\AVM_Driver\FWLAN\setup.exe -d C:\Users\Dima\AVM_Driver\FWLAN

Task: {B0E56CFC-54EA-49E5-AEE6-544EE780094B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15] (Adobe Systems Incorporated)

Task: {C4630A3F-B5F1-4159-9F2B-8EF55530D99B} - System32\Tasks\Adobe ARM => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)

Task: {C618B53C-0F59-4601-8B52-1D81C275086B} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)

Task: {C7F562CC-8836-44FC-8085-91BD492874BE} - System32\Tasks\{35EE529B-2794-4708-8B79-567E126A4A7F} => pcalua.exe -a C:\Users\Dima\Desktop\Downloads\avm_fritz!wlan_usb_stick_x64_build_100906.exe -d C:\Users\Dima\Desktop\Downloads

Task: {D021483F-10CB-41B4-8816-109CDA214F59} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)

Task: {D216A597-8DFB-49AE-BB0C-69D9574172C8} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {D390B225-5BC3-4867-B035-FE45B82F2599} - System32\Tasks\IT7Lg6DU6w1 => C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1.exe [2015-04-20] () <==== ATTENTION

Task: {D9E5BB12-DEEF-4673-A22C-7A60AF737292} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {E66F9E32-E05D-43A5-8A61-1251E464ABF9} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\DXbbq3U.job => C:\Users\Dima\AppData\Roaming\DXbbq3U.exe <==== ATTENTION

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\IT7Lg6DU6w1.job => C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1.exe <==== ATTENTION

Task: C:\Windows\Tasks\vj57Vb6Rn1O3ezZ75nEr.job => C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe <==== ATTENTION

Task: C:\Windows\Tasks\WfqE0YhY0IU.job => C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe <==== ATTENTION
 

==================== Loaded Modules (whitelisted) ==============
 

2015-05-05 21:12 - 2015-05-05 21:12 - 00417792 _____ () c:\windows\ftb.exe

2015-05-05 21:12 - 2015-05-05 21:12 - 00408576 _____ () c:\windows\mftb.exe

2014-01-10 07:26 - 2014-01-10 07:26 - 01861968 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

2013-09-02 13:14 - 2014-10-11 21:02 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe

2011-04-24 03:29 - 2011-04-24 03:29 - 00465640 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll

2014-11-09 03:42 - 2014-05-13 13:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl

2014-11-09 03:42 - 2014-05-13 13:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl

2014-11-09 03:42 - 2014-05-13 13:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl

2014-01-10 07:28 - 2014-01-10 07:28 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll

2011-04-24 03:29 - 2011-04-24 03:29 - 01081664 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll

2011-04-24 03:29 - 2011-04-24 03:29 - 00125760 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll

2015-04-15 21:14 - 2015-04-15 21:14 - 16863920 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll

2010-11-23 00:56 - 2010-11-23 00:56 - 00087040 _____ () C:\Program Files (x86)\Raptr\_ctypes.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00043008 _____ () C:\Program Files (x86)\Raptr\_socket.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00805376 _____ () C:\Program Files (x86)\Raptr\_ssl.pyd

2014-05-14 01:26 - 2014-05-14 01:26 - 05812736 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtGui.pyd

2014-05-14 01:26 - 2014-05-14 01:26 - 00067584 _____ () C:\Program Files (x86)\Raptr\sip.pyd

2014-05-14 01:26 - 2014-05-14 01:26 - 01662464 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtCore.pyd

2014-05-14 01:26 - 2014-05-14 01:26 - 00494592 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtNetwork.pyd

2010-11-23 00:57 - 2010-11-23 00:57 - 00096256 _____ () C:\Program Files (x86)\Raptr\win32api.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00110592 _____ () C:\Program Files (x86)\Raptr\pywintypes26.dll

2010-11-23 00:56 - 2010-11-23 00:56 - 00010240 _____ () C:\Program Files (x86)\Raptr\select.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00356864 _____ () C:\Program Files (x86)\Raptr\_hashlib.pyd

2010-11-23 00:57 - 2010-11-23 00:57 - 00036352 _____ () C:\Program Files (x86)\Raptr\win32process.pyd

2010-11-23 00:57 - 2010-11-23 00:57 - 00111104 _____ () C:\Program Files (x86)\Raptr\win32file.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00044544 _____ () C:\Program Files (x86)\Raptr\_sqlite3.pyd

2011-02-15 20:17 - 2011-02-15 20:17 - 00417501 _____ () C:\Program Files (x86)\Raptr\sqlite3.dll

2010-11-23 00:57 - 2010-11-23 00:57 - 00167936 _____ () C:\Program Files (x86)\Raptr\win32gui.pyd

2014-05-14 01:26 - 2014-05-14 01:26 - 00313856 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtWebKit.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00127488 _____ () C:\Program Files (x86)\Raptr\pyexpat.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00009216 _____ () C:\Program Files (x86)\Raptr\winsound.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00354304 _____ () C:\Program Files (x86)\Raptr\pythoncom26.dll

2010-11-23 00:57 - 2010-11-23 00:57 - 00016384 _____ () C:\Program Files (x86)\Raptr\win32trace.pyd

2014-08-14 02:37 - 2014-08-14 02:37 - 00113171 _____ () C:\Program Files (x86)\Raptr\libvlc.dll

2014-08-14 02:37 - 2014-08-14 02:37 - 02396691 _____ () C:\Program Files (x86)\Raptr\libvlccore.dll

2010-11-23 00:56 - 2010-11-23 00:56 - 00583680 _____ () C:\Program Files (x86)\Raptr\unicodedata.pyd

2010-11-23 00:57 - 2010-11-23 00:57 - 00263168 _____ () C:\Program Files (x86)\Raptr\win32com.shell.shell.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00324608 _____ () C:\Program Files (x86)\Raptr\PIL._imaging.pyd

2013-11-21 02:05 - 2013-11-21 02:05 - 00256000 _____ () C:\Program Files (x86)\Raptr\amd_ags.dll

2012-02-06 22:28 - 2012-02-06 22:28 - 00010752 _____ () C:\Program Files (x86)\Raptr\Crypto.Random.OSRNG.winrandom.pyd

2012-02-06 22:28 - 2012-02-06 22:28 - 00011264 _____ () C:\Program Files (x86)\Raptr\Crypto.Util._counter.pyd

2012-02-06 22:28 - 2012-02-06 22:28 - 00031744 _____ () C:\Program Files (x86)\Raptr\Crypto.Cipher.AES.pyd

2010-11-23 00:57 - 2010-11-23 00:57 - 00141312 _____ () C:\Program Files (x86)\Raptr\gobject._gobject.pyd

2014-06-18 02:56 - 2014-06-18 02:56 - 02717595 _____ () C:\Program Files (x86)\Raptr\heliotrope._purple.pyd

2011-02-15 20:17 - 2011-02-15 20:17 - 01213633 _____ () C:\Program Files (x86)\Raptr\libxml2-2.dll

2010-11-23 01:06 - 2010-11-23 01:06 - 00055808 _____ () C:\Program Files (x86)\Raptr\zlib1.dll

2013-05-10 01:52 - 2013-05-10 01:52 - 00495680 _____ () C:\Program Files (x86)\Raptr\plugins\libaim.dll

2013-05-10 01:52 - 2013-05-10 01:52 - 01183699 _____ () C:\Program Files (x86)\Raptr\liboscar.dll

2013-05-10 01:52 - 2013-05-10 01:52 - 00483306 _____ () C:\Program Files (x86)\Raptr\plugins\libicq.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 00655356 _____ () C:\Program Files (x86)\Raptr\plugins\libirc.dll

2013-05-03 20:56 - 2013-05-03 20:56 - 01306387 _____ () C:\Program Files (x86)\Raptr\plugins\libmsn.dll

2013-05-03 20:56 - 2013-05-03 20:56 - 00565461 _____ () C:\Program Files (x86)\Raptr\plugins\libxmpp.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 01640221 _____ () C:\Program Files (x86)\Raptr\libjabber.dll

2013-05-03 20:56 - 2013-05-03 20:56 - 00506276 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoo.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 01053730 _____ () C:\Program Files (x86)\Raptr\libymsg.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 00497782 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoojp.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 00603326 _____ () C:\Program Files (x86)\Raptr\plugins\ssl-nss.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 00474199 _____ () C:\Program Files (x86)\Raptr\plugins\ssl.dll

2014-10-21 22:56 - 2014-10-21 22:56 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\9b1cac8d98bd69d3e56a26ff2f96f266\IsdiInterop.ni.dll

2011-07-25 04:42 - 2011-01-13 02:56 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
 

==================== EXE Association (whitelisted) ===============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 

HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Classes\.exe: exefile =>  <===== ATTENTION!

HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Classes\exefile:  <===== ATTENTION!
 

==================== Internet Explorer trusted/restricted ===============
 

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)
 

IE trusted site: HKU\S-1-5-21-221738678-620704744-704572411-1000\...\aeriagames.com -> hxxps://aeriagames.com

IE trusted site: HKU\S-1-5-21-221738678-620704744-704572411-1000\...\aeriagames.com -> hxxp://aeriagames.com
 
 

==================== Other Areas ============================
 

(Currently there is no automatic fix for this section.)
 

HKU\S-1-5-21-221738678-620704744-704572411-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.178.1
 

==================== MSCONFIG/TASK MANAGER disabled items ==
 

(Currently there is no automatic fix for this section.)
 

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Ralink Wireless Utility.lnk => C:\Windows\pss\Ralink Wireless Utility.lnk.CommonStartup

MSCONFIG\startupreg: Aeria Ignite => "C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe" silent

MSCONFIG\startupreg: Overwolf => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent

MSCONFIG\startupreg: Raptr => C:\PROGRA~2\Raptr\raptrstub.exe --startup
 

==================== FirewallRules (whitelisted) ===============
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

FirewallRules: [{78594C1C-0D50-4158-BE4B-630F903AD614}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [{6FBF251F-BD39-4F99-9B43-11228600FA75}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe

FirewallRules: [{D2661B1C-FB14-4488-85B6-C9F0F671AC26}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe

FirewallRules: [{2C171432-29A8-41AE-B4FC-C8A1B17AA814}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{5AB70EC2-290C-47AF-93E6-2FF6583923AE}] => (Allow) LPort=2869

FirewallRules: [{E223E5D1-C91F-43A7-BAF4-034AF2D39963}] => (Allow) LPort=1900

FirewallRules: [{87113CB6-D031-4465-A7DA-1190F21F5789}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe

FirewallRules: [{A6A9391B-02D1-49D7-ADC4-9186A84936CB}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

FirewallRules: [{57B9C597-A0EB-408F-856B-FA683C8132A3}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{714CDBAF-5604-42B3-B700-E8038F5DF945}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [TCP Query User{06F842FE-DDFA-4FCC-AE92-5F69EEE0F652}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe

FirewallRules: [UDP Query User{3661892A-DE75-4580-91A0-F9FBF1799DF3}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe

FirewallRules: [TCP Query User{5765CABA-404A-44EF-8227-7422B4001117}C:\program files (x86)\dragon's prophet\dp_x64.exe] => (Allow) C:\program files (x86)\dragon's prophet\dp_x64.exe

FirewallRules: [UDP Query User{4AB4E404-C83C-479E-AE15-ED70B9717177}C:\program files (x86)\dragon's prophet\dp_x64.exe] => (Allow) C:\program files (x86)\dragon's prophet\dp_x64.exe

FirewallRules: [{D8B75AC5-DB8B-4A3C-A379-08351FDB3A8A}] => (Block) C:\program files (x86)\dragon's prophet\dp_x64.exe

FirewallRules: [{FA2BCC55-2D25-4982-9813-648096C2D014}] => (Block) C:\program files (x86)\dragon's prophet\dp_x64.exe

FirewallRules: [TCP Query User{8BC7D8B9-96BF-48DA-B566-50842124FA04}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe

FirewallRules: [UDP Query User{9C72FA86-27B7-40B5-BCCB-3EE160D8159F}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe

FirewallRules: [TCP Query User{643C5904-C3B1-4EF9-B893-4374ECF6D6DA}C:\program files (x86)\dragon's prophet\launcher.exe] => (Allow) C:\program files (x86)\dragon's prophet\launcher.exe

FirewallRules: [UDP Query User{878B8F84-B88B-4D79-BA68-B0CE420657C1}C:\program files (x86)\dragon's prophet\launcher.exe] => (Allow) C:\program files (x86)\dragon's prophet\launcher.exe

FirewallRules: [{80ED7FA9-4202-4D90-836F-F9F56B4CDAE4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe

FirewallRules: [{4399A304-14B2-4EFA-B537-E8EA862FCC80}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe

FirewallRules: [{01721DB0-F656-4031-8930-1E8373DC2F7F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3sp.exe

FirewallRules: [{C1942149-4BF2-4840-B25B-0861219DBE3B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3sp.exe

FirewallRules: [{AD3CBC94-9015-4EEC-8010-9730A95F050C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3mp.exe

FirewallRules: [{83C71D22-7773-410B-9C20-2AA7FDCEB96E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3mp.exe

FirewallRules: [{E7F483C4-10DC-4293-ACA0-F3AF08D31698}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x86.exe

FirewallRules: [{27ADCB35-4841-4AF9-B2D7-CC086CF7A903}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\launcher.exe

FirewallRules: [{4933D89C-009A-43A4-A839-09A511BC8DFC}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\launcher.exe

FirewallRules: [{3D9A3A59-0A6C-440B-A6F9-0A90AC0DE8EB}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x64.exe

FirewallRules: [{18241FBC-0EF3-483B-94A6-AC00EEDBF4A7}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x64.exe

FirewallRules: [{C7D1F9D6-5F5C-4788-8D75-AA4662252A42}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x86.exe

FirewallRules: [TCP Query User{4C269EB3-8471-4A9F-8BEC-B534B181151E}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe

FirewallRules: [UDP Query User{721D1BD2-BDD0-4F36-AD02-862EE89713FE}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe

FirewallRules: [TCP Query User{C39306B7-FF57-4794-8B9A-9AA0F84CB38F}C:\users\dima\appdata\local\iw4m\iw4m.dat] => (Block) C:\users\dima\appdata\local\iw4m\iw4m.dat

FirewallRules: [UDP Query User{F8E2B0E8-5340-4B1C-92C0-7DA4FD31E1C2}C:\users\dima\appdata\local\iw4m\iw4m.dat] => (Block) C:\users\dima\appdata\local\iw4m\iw4m.dat

FirewallRules: [TCP Query User{1D2F39A8-48D1-4F21-9CF1-DE335D47F856}C:\users\dima\desktop\iw4m\iw4m.dat] => (Allow) C:\users\dima\desktop\iw4m\iw4m.dat

FirewallRules: [UDP Query User{56A99EDF-B65F-4AFD-AE16-F7D98D17E077}C:\users\dima\desktop\iw4m\iw4m.dat] => (Allow) C:\users\dima\desktop\iw4m\iw4m.dat

FirewallRules: [TCP Query User{2615C76C-73D3-4D32-B632-E52A4C790CC1}C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe

FirewallRules: [UDP Query User{06CB1C71-BEEC-4057-B2DC-C2D7E2D1CA89}C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe

FirewallRules: [{C39F0114-CCFF-4583-BE3C-FCC7B4C918B2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014 Demo\DotP_D14.exe

FirewallRules: [{586F7494-D5E6-431C-B8E6-847AF4C525E9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014 Demo\DotP_D14.exe

FirewallRules: [{76EF348E-4A47-485D-9F6F-4D71F6E38FC1}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe

FirewallRules: [{7AE12753-DC2E-4865-9B9B-D3A3E3937C08}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe

FirewallRules: [{5951B7B2-DBCA-4C9A-9BF3-C4114D1B65B5}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe

FirewallRules: [{65B33429-5091-41E6-A332-E473323DD788}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe

FirewallRules: [{1EC8437C-CE05-4587-9FC8-1F694B4C7C17}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe

FirewallRules: [{D0028759-3301-4357-8B2F-C150FE1F51E3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe

FirewallRules: [{FBA36FBF-DB77-4FD8-BC3F-80825FA74D59}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe

FirewallRules: [{5F4313DD-BA94-4F06-A2F0-B409FDAC09F4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe

FirewallRules: [{67D60A7C-0385-470F-9033-87A08C2D2E4F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe

FirewallRules: [{E3735442-0A8C-41A3-9B08-729BC8802589}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe

FirewallRules: [TCP Query User{7090371A-9B4F-4254-84A8-364D16F3A38C}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [UDP Query User{31DB48CF-D0EF-4B0D-AAE6-7AF83D2137D8}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [{A045D731-60D5-4EAD-BF23-1F7796BB34FA}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [{2C6C6FBA-5AFC-4085-8A68-A8C98856386B}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [TCP Query User{3C639DFB-197E-4AFF-A15E-25F14B889032}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat

FirewallRules: [UDP Query User{82EE40F2-E294-4D7B-9D68-1B75AE208E6A}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat

FirewallRules: [{64E878D7-1907-4A7D-A779-834D5D060955}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat

FirewallRules: [{68209FB4-C66B-4D9D-A2F0-2397BE1AB277}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat

FirewallRules: [TCP Query User{00A0BD31-B63A-4C19-93E8-ABCC8DB5C578}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [UDP Query User{8999A7F5-D427-4328-AAB7-ADA1FA9C59BF}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [{8DC4935E-B350-42D1-8FB1-1BB8F7442E36}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [{6CFC61D0-18CC-49EB-B25A-ACAECA62E42B}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [TCP Query User{EBCAC3E3-AA9A-43CF-B83E-98D5FD5EA402}C:\users\dima\desktop\call of duty modern warfare 2\com.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\com.dat

FirewallRules: [UDP Query User{84C7686B-75DF-401A-9FDF-7FC9F6392C7D}C:\users\dima\desktop\call of duty modern warfare 2\com.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\com.dat

FirewallRules: [{049E4550-90D7-4FEF-B6AD-9D74DED0C676}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\com.dat

FirewallRules: [{993FB1C4-D279-479A-90BE-6165BF19AF2E}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\com.dat

FirewallRules: [TCP Query User{9B3FB14A-DDF0-4459-AB11-D96BA0A21D17}C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [UDP Query User{3511F905-74A3-4CF9-9DC4-31D40CA6C995}C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [{4BBE5ECB-54A4-4EF1-BAA9-DBE3F102DC2F}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [{A73E2F4B-AB36-4447-B71B-F28AF0D3F1C5}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [TCP Query User{85EDB327-F94C-42C7-A714-B52DCFABB896}C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [UDP Query User{62DB249D-8E0B-4DE5-866A-A5EC513C7675}C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [{9BA06BB7-A418-404C-A95C-D8E2282C6F57}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [{CED6EBE2-E036-4988-AB13-D5DA803410B6}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [{E546D188-E7DD-44EE-BC95-7E5100A1366C}] => (Allow) C:\Users\Dima\Downloads\HOTO_downloader.exe

FirewallRules: [{60F46196-1CBF-40C0-970C-031D8BAD38B2}] => (Allow) C:\Users\Dima\Downloads\HOTO_downloader.exe

FirewallRules: [{F45FED77-FF04-4879-9444-42D263E00C25}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe

FirewallRules: [{28EC56F2-D3A9-4BCE-A5F5-878749DE6407}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe

FirewallRules: [{A4083F49-4F11-4A32-B91C-2BAF1B4BF058}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe

FirewallRules: [{DF37D091-D2F9-4401-B457-D9030A3919A8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe

FirewallRules: [{1315155E-2220-4EDE-A4A4-755669B75E19}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe

FirewallRules: [{58E7FDFD-4736-4213-9B42-50E885AE99CA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe

FirewallRules: [{31958790-F30C-4BC7-BDAC-03B4DED35B86}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe

FirewallRules: [{CC1F0407-71B4-4EC3-9F37-0E161C8A3322}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe

FirewallRules: [{145C7649-7AA9-42B3-97E8-5B8400173F22}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe

FirewallRules: [{936F4879-D6DB-4A9A-BEB0-D9E0A63B56E1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe

FirewallRules: [{375BA601-C201-4FFF-9426-9DC8362E1D6A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe

FirewallRules: [{4EAF1A42-8BB1-49A8-8D54-63BE9EF5E1FC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe

FirewallRules: [{E7EEA6A5-9E71-4A90-B195-713ADC4D3DD9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe

FirewallRules: [{C7E9681A-9A64-4D1A-99A8-CFC9168448D5}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe

FirewallRules: [{4352484E-8611-4EF5-92B1-E1134658D51D}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe

FirewallRules: [{FAF9A5EF-500F-48F2-9A53-FB0E549E87A7}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe

FirewallRules: [{45E32924-61E5-4693-8142-5090A1DACC77}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe

FirewallRules: [{B51953D9-7C03-413E-B7EA-B60979F79136}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe

FirewallRules: [TCP Query User{58A3D1CA-EB63-41E1-815B-2C296E72A629}C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe] => (Allow) C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe

FirewallRules: [UDP Query User{42C952D4-1892-4D10-9AB1-1CC3F39A23F3}C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe] => (Allow) C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe

FirewallRules: [{1D455526-6B1D-4BF9-B8BA-00306E25FF9A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe

FirewallRules: [{0DA93301-8BDC-47FD-B914-E2FA1EC7AAFB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe

FirewallRules: [TCP Query User{0729B18F-9796-4FCF-A32F-7A5833FBE815}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\dima\appdata\local\akamai\netsession_win.exe

FirewallRules: [UDP Query User{A54F5C5A-D8E2-403E-A810-D1615D1E56C6}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\dima\appdata\local\akamai\netsession_win.exe

FirewallRules: [TCP Query User{9C8EF3A7-3266-4542-B95E-133CF9D2DFA9}C:\programdata\battle.net\agent\agent.beta.2514\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2514\agent.exe

FirewallRules: [UDP Query User{DF8986C4-FB63-4A37-874F-5E4F5AB0B070}C:\programdata\battle.net\agent\agent.beta.2514\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2514\agent.exe

FirewallRules: [TCP Query User{7D2074A4-AA89-4BA7-A7EB-1268C6492AEE}C:\program files (x86)\devpro\devpro.dll] => (Allow) C:\program files (x86)\devpro\devpro.dll

FirewallRules: [UDP Query User{F2B7C119-C5D0-4914-BEBC-71E99254D344}C:\program files (x86)\devpro\devpro.dll] => (Allow) C:\program files (x86)\devpro\devpro.dll

FirewallRules: [{EA7F7B92-3349-4537-9E50-3A0B4D818281}] => (Allow) C:\AeriaGames\AuraKingdom\game.bin

FirewallRules: [{AB6209F8-0BA4-4FC4-803C-1A73FEFDA112}] => (Allow) C:\AeriaGames\AuraKingdom\game.bin

FirewallRules: [TCP Query User{4F600FC8-F54A-49E9-B588-2F547BBA96B1}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe

FirewallRules: [UDP Query User{DF1CE9AE-5217-4393-B737-92F45CBCB4BD}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe

FirewallRules: [{A1A5A428-B18A-4BC9-A553-B1E6989C2A42}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Darksiders 2\Darksiders2.exe

FirewallRules: [{F60EBF1D-B0A7-4638-B48C-AF3F18B494BA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Darksiders 2\Darksiders2.exe

FirewallRules: [{767607AA-81B6-406F-BF1E-B8A81ED847FC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe

FirewallRules: [{35789372-EE60-4ED3-81F9-A81ED3BF2CE4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe

FirewallRules: [{07DE1F4A-0A51-4A63-BF8D-CD9580D92EB6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe

FirewallRules: [{5F40E8E8-9EF2-41AA-9414-FBA5770F0A94}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe

FirewallRules: [TCP Query User{744A07AB-09FD-499C-9F04-E01BB0351E8D}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\dima\appdata\local\akamai\netsession_win.exe

FirewallRules: [UDP Query User{F7498DED-162B-488F-B59F-256A51C6CE71}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\dima\appdata\local\akamai\netsession_win.exe

FirewallRules: [{AEAB3ECF-0BB1-453B-8D1F-476AE01D86A0}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe

FirewallRules: [{8D48AAEF-A0CE-44E7-9024-CA3944E81E7D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe

FirewallRules: [TCP Query User{6CF9A63C-F912-4E3A-8DDA-6D3AC6AF66DF}C:\programdata\battle.net\agent\agent.beta.2638\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2638\agent.exe

FirewallRules: [UDP Query User{5A9CB3D7-8747-407A-97AB-191DBFC43D75}C:\programdata\battle.net\agent\agent.beta.2638\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2638\agent.exe

FirewallRules: [{94644398-7E26-4C3A-BD3D-8AC488A93807}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe

FirewallRules: [{03DDFDE2-264E-4187-85CD-4382D41F4A6C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe

FirewallRules: [{C38A5A06-BB40-4CFC-BA71-87AEC286F6D6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe

FirewallRules: [{CB8BA2E2-B98E-442B-87D9-92EFB85FECAD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe

FirewallRules: [{234100A5-3277-4236-B80F-3BD7A113F330}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe

FirewallRules: [{9472EB6F-9BC9-4FC2-B7B2-45A96212D7C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe

FirewallRules: [{4DDCAB31-D1CA-49D7-83D1-9A7708CA3387}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Loadout\Loadout.exe

FirewallRules: [{50274324-D5E3-4A7D-9551-60285C4D51CE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Loadout\Loadout.exe

FirewallRules: [{505A793E-19FF-4163-85DA-BDD1366147B4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe

FirewallRules: [{5D9B037C-78AD-4F93-AFCB-A8BF0480CCCF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe

FirewallRules: [{71BA2590-5ED7-4DC0-919C-603D078A17E1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe

FirewallRules: [{E3C9045F-0538-43CE-9AC0-B88A7047D12B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe

FirewallRules: [{AA27854D-9002-4BB1-AC3B-2B040589990B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe

FirewallRules: [{F262DA23-A9A0-45ED-875A-42640AB812FD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe

FirewallRules: [{5B584B43-CDC2-482C-A915-51ED708E2BDE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe

FirewallRules: [{FBE87CBF-6E5E-443B-BB64-D76E91781977}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe

FirewallRules: [TCP Query User{5B78C40B-EF9C-4DE3-B847-DDC0913711FC}C:\program files (x86)\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\tera\tera-launcher.exe

FirewallRules: [UDP Query User{02ADE6C1-8488-448C-9DD6-1D4ABC838F09}C:\program files (x86)\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\tera\tera-launcher.exe

FirewallRules: [{4EC807D8-651B-4EDE-906E-15D8940E045A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe

FirewallRules: [{5C43F976-C8BD-461A-8160-E4037DEC5A46}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe

FirewallRules: [{91A8DE20-9DBA-43BD-9F4B-DE1B625D0D83}] => (Allow) C:\AeriaGames\EdenEternal-DE\_Launcher.exe

FirewallRules: [{CD8464F5-1D27-4ACC-848F-AD802961AD3D}] => (Allow) C:\AeriaGames\EdenEternal-DE\_Launcher.exe

FirewallRules: [{20FF7205-61B2-44CC-87A6-CCE211D4603C}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{6B725485-B1DC-4646-B9AD-C4E754073AD5}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{EFDADD2B-5B82-4D44-BFF6-7533A33E5D4B}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{EDABDFE1-A779-47FE-A7F2-0BE99128B9D1}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{C864BA6F-6F65-4A53-BACD-5590447E71A3}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe

FirewallRules: [{BF9437A3-0AAD-4EF3-9020-8A7EDA18FFFB}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe

FirewallRules: [{5EC4813D-F4A5-44A4-99AE-2FEEADC7BD68}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe

FirewallRules: [{5741DE79-8863-4C92-8CA4-43D24ED12E9D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe

FirewallRules: [{7FA5A6CC-69A0-4EF2-9E4E-D36CF4A6FFB1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe

FirewallRules: [{1E27B3D7-EBC5-46D1-A1F4-5150D5FC7ECA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe

FirewallRules: [{7ACB6A7B-1D9F-4159-9E5C-57293DE770B9}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA World\fifaworld.exe

FirewallRules: [{CC579040-BC64-4658-B938-3FC11265DBA0}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA World\fifaworld.exe

FirewallRules: [TCP Query User{466B6D60-FB8E-40F4-9A96-3F6B84C31F10}C:\programdata\battle.net\agent\agent.2787\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.2787\agent.exe

FirewallRules: [UDP Query User{747BD4DC-E6ED-4E9F-889A-E1029B9BD7EC}C:\programdata\battle.net\agent\agent.2787\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.2787\agent.exe

FirewallRules: [{024C2E0F-0F94-4571-AAA1-63A5D32016D2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe

FirewallRules: [{19CDF823-35E4-43AD-8A38-931E02B58B64}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe

FirewallRules: [{EA2378D9-ADC4-4A3E-947C-030BBA9A41B0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Aura Kingdom\game.bin

FirewallRules: [{E3E3914B-6929-4469-A807-4C9FC60B3CA5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Aura Kingdom\game.bin

FirewallRules: [{AB6817F8-474B-413B-B1A1-DB9F05CE61BB}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{8192EF82-EABD-49D0-92CB-1E602FCB2399}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{8E9567B7-FEC3-4B6A-8469-1B65ACAEBCF2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe

FirewallRules: [{9832DDCA-66F8-432C-8B22-60682E5E919E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe

FirewallRules: [TCP Query User{1128027D-DF51-428D-BBF5-261AD7F20EEC}C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe

FirewallRules: [UDP Query User{0D0921EC-8295-44F1-A446-52BAFD8EF6EB}C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe

FirewallRules: [TCP Query User{1FC5CC73-6F52-4B75-8D0B-4753B673D255}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [UDP Query User{A5E61E08-5C0A-4EA7-BD2C-D6ACED33386F}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [TCP Query User{E290B8F5-DC46-4D43-9E40-A8CFEBD19A8A}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe

FirewallRules: [UDP Query User{4A59CA75-CB6F-46C3-8E3B-D091F44ACDC5}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe

FirewallRules: [{51E7B824-61EF-498A-94AE-826ED3FE5CF2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe

FirewallRules: [{B9C59147-9E45-4E11-9B2F-5702A1ACAFA5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe

FirewallRules: [{BB70E8F0-DE1E-4EEF-873C-95044B81A8C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe

FirewallRules: [{49C70379-991F-4248-81CB-BA51F9158E4F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe

FirewallRules: [{6BB569B0-D223-4EAB-A4A0-83B776CDA2DD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age2HD\Launcher.exe

FirewallRules: [{D341F20A-E2E0-4320-82A8-3607608AD108}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age2HD\Launcher.exe

FirewallRules: [{757CE32E-DE9A-440C-BAB3-B9F8EF37A2A0}] => (Allow) C:\Users\Dima\Downloads\b9_downloader.exe

FirewallRules: [{ACA68B80-8F45-4E75-B7D3-470AF290871F}] => (Allow) C:\Users\Dima\Downloads\b9_downloader.exe

FirewallRules: [TCP Query User{B5BB55CB-DE77-4080-963B-3A266AC37CE5}C:\programdata\battle.net\agent\agent.3235\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3235\agent.exe

FirewallRules: [UDP Query User{30EBE90E-7ED1-4868-9D3D-50E6D7112675}C:\programdata\battle.net\agent\agent.3235\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3235\agent.exe

FirewallRules: [{1BAA9821-E2DD-48BF-9E27-F6297D2F5116}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe

FirewallRules: [{9C9260ED-7AA0-4AE4-972E-D83A5D097028}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe

FirewallRules: [{EA27D1BB-E05D-4097-97AF-BC7DE8174F52}] => (Allow) C:\Program Files (x86)\Bench\Proxy\proc.exe

FirewallRules: [{953D2DA8-7AEB-4931-BE76-87BDE0ACBC39}] => (Allow) C:\Program Files (x86)\Bench\Proxy\pwdg.exe

FirewallRules: [{91AF5EE1-530D-4D72-A308-BDBA132ABA31}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe

FirewallRules: [{AF831DA2-EC4A-4642-915F-DF7CBB2A2CF3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe

FirewallRules: [{BBBB3AD6-5EB2-4204-B5AF-9716942ACB1C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe

FirewallRules: [{63BB69A1-F607-4FB8-9EDD-1A607AABDA8B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe

FirewallRules: [{34F27A20-13E6-46E6-9901-39383CB7F97A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe

FirewallRules: [{DA9D712D-0C9F-441F-A880-FF8D27837E6E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe

FirewallRules: [TCP Query User{A250025F-7CBE-4CAD-93AE-C02E36E841C1}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe

FirewallRules: [UDP Query User{3D207EE9-306F-48FF-8735-CD8CDAFA0490}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe

FirewallRules: [TCP Query User{F7376CA3-FA2C-4F56-9AD8-0A2ADC4927AE}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe

FirewallRules: [UDP Query User{BCBA424F-EDE5-4DFC-8FD5-56BB5666B2F5}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe

FirewallRules: [{7A5EB71C-C724-402F-8557-A92B3BAD628E}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe

FirewallRules: [{AF09CC9B-68D7-404C-B498-D144643C1A54}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe

FirewallRules: [{D56AE5C0-0487-4C87-8284-10DC792A01DE}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe

FirewallRules: [{CB98B3E2-40A1-4A7C-ACCB-56A50C8E3F7B}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe

FirewallRules: [{B3D84AF2-F39E-4E7D-9D7E-FFCD803C1135}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe

FirewallRules: [{AB8E5377-F2F7-441D-9A50-434D83F90C0E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe

FirewallRules: [{CCA3F085-5CA5-4FEE-9ADD-935183AE6F1C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{9EA1B11A-0179-414A-AFF8-82050C792E6B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{256D7304-2C38-45D1-97DB-71739BA92297}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe

FirewallRules: [{E2070B33-5CCB-46B0-B6CF-4ED92F8AB562}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe

FirewallRules: [{1E69481E-7920-4B4D-9047-B812C456A75A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{A416660E-98DD-4A45-8A5A-C8BBA66A68A3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{72A09F1B-7789-4A3E-B327-FD1D052150FF}] => (Allow) C:\Program Files (x86)\GameforgeLive\gfl_client.exe

FirewallRules: [TCP Query User{2A0CBFD5-23A1-4C20-91ED-B00077755298}C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe

FirewallRules: [UDP Query User{3933DFA8-6EB3-47A1-A4F9-7C3E7BD2ED67}C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe

FirewallRules: [TCP Query User{69CF256B-C011-492C-B7A0-04F509D0D67B}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe

FirewallRules: [UDP Query User{FFEA845F-4BF9-44FF-89AC-628034543D28}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe

FirewallRules: [{7809CF2C-51C3-4520-8BD0-F210B5BBB57B}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe

FirewallRules: [{CE1678FF-6995-415D-ADDC-E165111812E1}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe

FirewallRules: [{2412E622-4FBF-402A-B899-DBC82E5C6B2B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe

FirewallRules: [{5817EFF9-3537-4F8B-97F9-2C33716052B4}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe

FirewallRules: [{B65003CD-97BF-4394-A2F7-21A3E24DCFB5}] => (Allow) C:\Nexon\Vindictus EU\en-EU\NMService.exe

FirewallRules: [{0CA242B9-DEDD-43C3-9F4C-BADAE74781E9}] => (Allow) C:\Nexon\Vindictus EU\en-EU\NMService.exe

FirewallRules: [TCP Query User{3D2A0F20-56AE-42D0-80DF-E8AC85D00D13}C:\nexon\vindictus eu\en-eu\vindictus.exe] => (Allow) C:\nexon\vindictus eu\en-eu\vindictus.exe

FirewallRules: [UDP Query User{2DFE002E-3069-4DA8-920D-442A029D663E}C:\nexon\vindictus eu\en-eu\vindictus.exe] => (Allow) C:\nexon\vindictus eu\en-eu\vindictus.exe

FirewallRules: [TCP Query User{93A7A5BC-03EA-42A5-AE99-CC30CBDF752F}C:\users\dima\desktop\eclipse\eclipse.exe] => (Allow) C:\users\dima\desktop\eclipse\eclipse.exe

FirewallRules: [UDP Query User{13A19341-79DD-4889-B496-24BB0AA8C4C2}C:\users\dima\desktop\eclipse\eclipse.exe] => (Allow) C:\users\dima\desktop\eclipse\eclipse.exe

FirewallRules: [TCP Query User{95CD7A11-031A-4E37-B3A1-64F53A1F7A75}C:\program files\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\javaw.exe

FirewallRules: [UDP Query User{9B60CDE5-BA1E-4E6D-BDF3-C1056F5F8650}C:\program files\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\javaw.exe

FirewallRules: [TCP Query User{C4E30886-3358-4A99-BE81-2F5BED09E73D}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe

FirewallRules: [UDP Query User{710835ED-1463-4E58-8DB1-9F37F56C4A0F}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe

FirewallRules: [TCP Query User{C7584B0F-6622-4E1D-8987-9D85C77F36F0}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe

FirewallRules: [UDP Query User{F365D46D-EED4-49F4-93DF-234F94019BB2}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe

FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe

FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe

FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe

FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe

FirewallRules: [TCP Query User{63488A2D-8F13-4C4E-8CC0-49944F9372BA}C:\users\dima\desktop\lancraft\lancraft.exe] => (Allow) C:\users\dima\desktop\lancraft\lancraft.exe

FirewallRules: [UDP Query User{EAEC2D64-0B8E-4599-A61B-53F358A64796}C:\users\dima\desktop\lancraft\lancraft.exe] => (Allow) C:\users\dima\desktop\lancraft\lancraft.exe

FirewallRules: [TCP Query User{A91AD53F-87ED-432A-9D7C-0AC95375B702}C:\users\dima\desktop\warcraft\war3.exe] => (Allow) C:\users\dima\desktop\warcraft\war3.exe

FirewallRules: [UDP Query User{CC9DF559-105D-4031-9013-ADF7BC24CFC3}C:\users\dima\desktop\warcraft\war3.exe] => (Allow) C:\users\dima\desktop\warcraft\war3.exe

FirewallRules: [TCP Query User{6E3020FE-2B2A-413D-8EBC-AC0261DDA56B}C:\users\dima\desktop\warcraft\lancraft.exe] => (Allow) C:\users\dima\desktop\warcraft\lancraft.exe

FirewallRules: [UDP Query User{83FC41EC-2250-4389-B57F-7CF1CF138244}C:\users\dima\desktop\warcraft\lancraft.exe] => (Allow) C:\users\dima\desktop\warcraft\lancraft.exe

FirewallRules: [{E762770A-34B1-461E-B15E-FFC052875F0A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\CastleCrashers\castle.exe

FirewallRules: [{32B2CED0-8283-4A5A-8965-FFCB653C38DA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\CastleCrashers\castle.exe

FirewallRules: [TCP Query User{CA917D8D-9E80-4B19-90E8-110407378DDD}C:\program files (x86)\unity\editor\unity.exe] => (Allow) C:\program files (x86)\unity\editor\unity.exe

FirewallRules: [UDP Query User{4A9F69B2-9BB4-4F0E-B34D-4D95E242700A}C:\program files (x86)\unity\editor\unity.exe] => (Allow) C:\program files (x86)\unity\editor\unity.exe

FirewallRules: [{5A44804A-99EB-4C63-8F18-C9310F1C4657}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe

FirewallRules: [{5C90DDB5-DFDC-4BF5-B6D0-B86A95AEE724}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe

FirewallRules: [TCP Query User{DD861486-7A78-460B-9A83-BFA67BC6A454}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe

FirewallRules: [UDP Query User{21543651-AA0C-4F30-B6F4-14C779C5E70B}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe

FirewallRules: [TCP Query User{5C83AE95-A82A-49CA-B905-4EFC8C6961F9}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe

FirewallRules: [UDP Query User{640696E3-D785-4576-883E-596F24E072B3}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe

FirewallRules: [{5880095B-DD8E-4F79-BA8F-727A270A9A7B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dungeon Defenders\Binaries\Win32\DungeonDefenders.exe

FirewallRules: [{A02B8413-228D-4E79-9B24-1B23EEBA9CE2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dungeon Defenders\Binaries\Win32\DungeonDefenders.exe

FirewallRules: [TCP Query User{E5CD1AD8-4898-41F1-880E-C3CCEEF12C49}C:\program files (x86)\secondlifeviewer\slvoice.exe] => (Allow) C:\program files (x86)\secondlifeviewer\slvoice.exe

FirewallRules: [UDP Query User{37F84E6A-EF30-44B7-8E99-DE3F7E7DF7EE}C:\program files (x86)\secondlifeviewer\slvoice.exe] => (Allow) C:\program files (x86)\secondlifeviewer\slvoice.exe

FirewallRules: [TCP Query User{2478D171-94B3-4D1F-8C59-4E8322B8E276}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [UDP Query User{28D75031-A654-47AF-802E-4A9A15D5EF3F}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [{3A112284-5247-4174-9FB4-B86BFEBD19F9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe

FirewallRules: [{B2899169-D59D-4AC1-BBE3-3F3903152981}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe

FirewallRules: [{12C4EFF7-DD2B-4A0E-A3A0-98777451B440}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3.exe

FirewallRules: [{4060C2B9-6F65-462B-9221-EEEBCF58BB56}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3.exe

FirewallRules: [{EFA22BC5-7DE3-47F6-8167-289BFDD93178}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3_Unrestricted.exe

FirewallRules: [{C0D1322B-FEBC-4B0A-BD29-158C54B47C3F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3_Unrestricted.exe

FirewallRules: [{13A229AF-4A20-4E5A-B1D5-E4DA450947FA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Gumboy Tournament\gumboytournament.exe

FirewallRules: [{BD506B34-1746-48BC-A17D-29CE55B609BC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Gumboy Tournament\gumboytournament.exe

FirewallRules: [TCP Query User{E9B42C51-F75A-4042-8D09-5FE64A6E0AFD}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe

FirewallRules: [UDP Query User{A47B5394-0D06-4B60-AEAC-F80C6A18EC73}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe

FirewallRules: [{1F0F5A11-9A4F-49CF-8202-86A2DAEB8299}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_launcher.exe

FirewallRules: [{472579C8-4E14-4D30-9C6E-7C1E88FAB3FD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe

FirewallRules: [{09D4FEB7-995B-4579-90DC-1C535713E99A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe

FirewallRules: [{418B6FDA-1046-4E47-AFFC-EC7C31A532E9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe

FirewallRules: [{7199E669-27DE-4BFD-94D5-FDCF6A7C93AA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe

FirewallRules: [{BFF61270-CC5A-432C-A7FB-7D76DC47C782}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium.exe

FirewallRules: [{490B16FF-C2D2-4175-A366-EFDAA08EB979}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium.exe

FirewallRules: [TCP Query User{C9F38270-E9E5-4168-9E99-11073C550934}C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe

FirewallRules: [UDP Query User{6082536E-F697-45B2-969C-5E5CA8E07E06}C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe

FirewallRules: [TCP Query User{5AC0DF45-9E80-410D-A952-1DDA7A565671}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe

FirewallRules: [UDP Query User{31F72C84-B935-4C8E-8E1E-6FBDDC891D1C}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe

FirewallRules: [{8EB84DED-EB81-4D74-9575-8282402E2D2E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cryptic Studios\Neverwinter.exe

FirewallRules: [{B5B40F25-2AC6-4642-8BBC-63AE2A925B7B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cryptic Studios\Neverwinter.exe

FirewallRules: [TCP Query User{096444F6-AA1C-44A3-8C5E-A8DFF4A1C6D0}C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe

FirewallRules: [UDP Query User{9E1BE6EE-CCE2-4CFC-8375-7D1F41A71285}C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe

FirewallRules: [{3E6ED98E-B2F8-4E5F-BAED-9D8ACD743A90}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe

FirewallRules: [{2F7FD9C7-09FF-4330-AB1D-62122B26142B}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe

FirewallRules: [{B6917A43-4FD1-4943-819E-0224DF009AD4}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe

FirewallRules: [{580CEC6F-22A8-423D-B6A2-60898E1991C0}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe

FirewallRules: [{1D779765-CEC8-476D-8663-FF565F9943D2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dragon Nest Europe\DragonNest\DragonNest.exe

FirewallRules: [{BFD8F340-3BB5-4D13-B4C8-64605B781AE5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dragon Nest Europe\DragonNest\DragonNest.exe

FirewallRules: [TCP Query User{51AE804F-C3F0-4BE7-8861-486111D1A4C3}C:\neople\dfo\dfo.exe] => (Allow) C:\neople\dfo\dfo.exe

FirewallRules: [UDP Query User{813C44E8-970E-4FB2-A994-1B7E6CFAB002}C:\neople\dfo\dfo.exe] => (Allow) C:\neople\dfo\dfo.exe

FirewallRules: [{721B343A-D002-417F-8012-828923F7CF99}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe

FirewallRules: [{51F7C144-FBEC-4072-83BA-D2DB2C1ED47D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe

FirewallRules: [{ECFA20B8-D75A-4C39-89BD-017F84E119BB}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

FirewallRules: [{0FE2304A-0072-4655-BD88-8EAC2F3EE694}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{7C5F9697-EA12-4FD9-AA6A-450DA3B7D57A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
 

==================== Faulty Device Manager Devices =============
 

Name: USB (Universal Serial Bus)-Controller

Description: USB (Universal Serial Bus)-Controller

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: Ethernet-Controller

Description: Ethernet-Controller

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: qrnfd_1_10_0_13

Description: qrnfd_1_10_0_13

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer: 

Service: qrnfd_1_10_0_13

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 

Name: SM-Bus-Controller

Description: SM-Bus-Controller

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (05/11/2015 11:44:49 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (05/11/2015 11:40:27 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm firefox.exe, Version 37.0.2.5583 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 1e98
 

Startzeit: 01d08c31eb0e7ef1
 

Endzeit: 28
 

Anwendungspfad: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 

Berichts-ID:
 

Error: (05/11/2015 11:40:27 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 37.0.2.5583, Zeitstempel: 0x552ef76c

Name des fehlerhaften Moduls: mozalloc.dll, Version: 37.0.2.5583, Zeitstempel: 0x552ee9ae

Ausnahmecode: 0x80000003

Fehleroffset: 0x00001aa1

ID des fehlerhaften Prozesses: 0x1ca4

Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0

Pfad der fehlerhaften Anwendung: plugin-container.exe1

Pfad des fehlerhaften Moduls: plugin-container.exe2

Berichtskennung: plugin-container.exe3
 

Error: (05/11/2015 11:33:17 PM) (Source: ftb) (EventID: 1) (User: )

Description: ftbStartServiceCtrlDispatcher failed with 1063
 

Error: (05/11/2015 11:33:00 PM) (Source: ftb) (EventID: 1) (User: )

Description: ftbStartServiceCtrlDispatcher failed with 1063
 

Error: (05/11/2015 11:32:00 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm firefox.exe, Version 37.0.2.5583 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 2130
 

Startzeit: 01d08c24cf8d69f1
 

Endzeit: 32
 

Anwendungspfad: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 

Berichts-ID:
 

Error: (05/11/2015 11:32:00 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 37.0.2.5583, Zeitstempel: 0x552ef76c

Name des fehlerhaften Moduls: mozalloc.dll, Version: 37.0.2.5583, Zeitstempel: 0x552ee9ae

Ausnahmecode: 0x80000003

Fehleroffset: 0x00001aa1

ID des fehlerhaften Prozesses: 0x3cc

Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0

Pfad der fehlerhaften Anwendung: plugin-container.exe1

Pfad des fehlerhaften Moduls: plugin-container.exe2

Berichtskennung: plugin-container.exe3
 

Error: (05/11/2015 09:18:12 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 37.0.2.5583, Zeitstempel: 0x552ef76c

Name des fehlerhaften Moduls: mozalloc.dll, Version: 37.0.2.5583, Zeitstempel: 0x552ee9ae

Ausnahmecode: 0x80000003

Fehleroffset: 0x00001aa1

ID des fehlerhaften Prozesses: 0x15f0

Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0

Pfad der fehlerhaften Anwendung: plugin-container.exe1

Pfad des fehlerhaften Moduls: plugin-container.exe2

Berichtskennung: plugin-container.exe3
 

Error: (05/10/2015 06:42:28 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (05/10/2015 04:13:33 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 

System errors:

=============

Error: (05/11/2015 11:45:34 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (05/11/2015 11:45:32 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht.
 

Error: (05/11/2015 11:45:01 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 

qrnfd_1_10_0_13
 

Error: (05/11/2015 11:44:41 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (05/11/2015 11:44:41 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht.
 

Error: (05/11/2015 11:43:37 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (05/11/2015 11:43:35 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Hi-Rez Studios Authenticate and Update Service erreicht.
 

Error: (05/11/2015 11:41:39 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "mftb" wurde unerwartet beendet. Dies ist bereits 2 Mal passiert.
 

Error: (05/11/2015 11:41:39 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "ftb" wurde unerwartet beendet. Dies ist bereits 2 Mal passiert.
 

Error: (05/11/2015 11:41:38 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 
 

Microsoft Office Sessions:

=========================

Error: (05/11/2015 11:44:49 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (05/11/2015 11:40:27 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: firefox.exe37.0.2.55831e9801d08c31eb0e7ef128C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 

Error: (05/11/2015 11:40:27 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: plugin-container.exe37.0.2.5583552ef76cmozalloc.dll37.0.2.5583552ee9ae8000000300001aa11ca401d08c31edc36601C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll5613711c-f826-11e4-b276-c9b362989730
 

Error: (05/11/2015 11:33:17 PM) (Source: ftb) (EventID: 1) (User: )

Description: ftbStartServiceCtrlDispatcher failed with 1063
 

Error: (05/11/2015 11:33:00 PM) (Source: ftb) (EventID: 1) (User: )

Description: ftbStartServiceCtrlDispatcher failed with 1063
 

Error: (05/11/2015 11:32:00 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: firefox.exe37.0.2.5583213001d08c24cf8d69f132C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 

Error: (05/11/2015 11:32:00 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: plugin-container.exe37.0.2.5583552ef76cmozalloc.dll37.0.2.5583552ee9ae8000000300001aa13cc01d08c31e2b05b1fC:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll2805ac04-f825-11e4-b276-c9b362989730
 

Error: (05/11/2015 09:18:12 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: plugin-container.exe37.0.2.5583552ef76cmozalloc.dll37.0.2.5583552ee9ae8000000300001aa115f001d08c1ef99749a9C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll76a6dcfc-f812-11e4-b276-c9b362989730
 

Error: (05/10/2015 06:42:28 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (05/10/2015 04:13:33 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 

CodeIntegrity Errors:

===================================

  Date: 2015-05-08 20:38:53.994

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:37:07.273

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:37:03.798

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:36:19.340

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:34:40.221

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:34:12.814

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:20:56.969

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:20:56.706

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:20:18.534

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:20:17.995

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Core(TM) i5-4570 CPU @ 3.20GHz

Percentage of memory in use: 39%

Total physical RAM: 8136.6 MB

Available physical RAM: 4958.17 MB

Total Pagefile: 16271.39 MB

Available Pagefile: 13187.23 MB

Total Virtual: 8192 MB

Available Virtual: 8191.85 MB
 

==================== Drives ================================
 

Drive c: (OS) (Fixed) (Total:915.41 GB) (Free:454.25 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 277A7941)

Partition 1: (Not Active) - (Size=16 GB) - (Type=27)

Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=915.4 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

Bootsektor

12.05.2015 09:10

Hallo,

dann machen wir so weiter:

Schritt 1
Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Schritt 2
Starte noch einmal FRST.

Ändere keine der Voreinstellungen und drücke auf Scan.
Wenn der Scan abgeschlossen ist, wird ein neues Logfile FRST.txt erstellt und auf dem Desktop gespeichert.
Poste den Inhalt dieses Logfiles bitte hier in deinen Thread.

kriegnes

12.05.2015 12:04

Code:

ComboFix 15-05-09.01 - Dima 12.05.2015  12:48:59.1.4 - x64

Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.8137.5392 [GMT 2:00]

ausgeführt von:: c:\users\Dima\Desktop\ComboFix.exe

AV: Microsoft Security Essentials *Enabled/Updated* {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}

SP: Microsoft Security Essentials *Enabled/Updated* {0C8D1929-27B2-688D-E114-9117BD2BB1B7}

SP: Spybot - Search and Destroy *Disabled/Outdated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

 * Neuer Wiederherstellungspunkt wurde erstellt

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

C:\install.exe

c:\programdata\ntuser.pol

c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdonfjaemnemdnnpebbcelibeocdmkai

c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdonfjaemnemdnnpebbcelibeocdmkai\156\background.html

c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdonfjaemnemdnnpebbcelibeocdmkai\156\content.js

c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdonfjaemnemdnnpebbcelibeocdmkai\156\IftGT.js

c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdonfjaemnemdnnpebbcelibeocdmkai\156\lsdb.js

c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdonfjaemnemdnnpebbcelibeocdmkai\156\manifest.json

c:\users\Dima\AppData\Local\nsb44A6.tmp

c:\users\Dima\AppData\Local\nsnE864.tmp

c:\users\Dima\AppData\Roaming\DXbbq3U.exe

c:\users\Dima\AppData\Roaming\IT7Lg6DU6w1.exe

c:\users\Dima\AppData\Roaming\Microsoft\Windows\Recent\Naruto Sages59.url

c:\users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe

c:\users\Dima\AppData\Roaming\WfqE0YhY0IU.exe

c:\windows\msdownld.tmp

c:\windows\wininit.ini

.

.

(((((((((((((((((((((((   Dateien erstellt von 2015-04-12 bis 2015-05-12  ))))))))))))))))))))))))))))))

.

.

2015-05-12 10:57 . 2015-05-12 10:57        --------        d-----w-        c:\users\Default\AppData\Local\temp

2015-05-11 21:00 . 2015-05-11 21:00        --------        d-----w-        c:\users\Dima\AppData\Local\Eclipse

2015-05-11 20:03 . 2015-05-11 21:51        --------        d-----w-        C:\FRST

2015-05-11 18:59 . 2015-05-11 18:59        --------        d-----w-        c:\users\Dima\AppData\Local\My Games

2015-05-11 11:51 . 2015-04-04 06:25        12032440        ----a-w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{86645A6A-4DE0-4A71-A6B6-500C986EC6AB}\mpengine.dll

2015-05-10 16:44 . 2015-05-10 16:44        --------        d-----w-        c:\users\Dima\AppData\Local\Origin

2015-05-10 16:05 . 2015-05-10 16:05        --------        d-----w-        c:\program files (x86)\Mozilla Maintenance Service

2015-05-10 14:15 . 2015-05-10 14:15        --------        d-----w-        c:\users\Dima\AppData\Local\EgisTec IPS

2015-05-10 14:13 . 2015-05-11 21:46        --------        d-----w-        c:\users\Dima\AppData\Local\LogMeIn Hamachi

2015-05-10 14:13 . 2015-05-10 14:13        --------        d-----w-        c:\users\Dima\AppData\Local\LogMeIn

2015-05-10 14:12 . 2015-05-10 14:12        --------        d-----w-        c:\users\Dima\AppData\Local\VirtualStore

2015-05-10 14:07 . 2015-05-11 21:41        --------        d-----w-        C:\AdwCleaner

2015-05-09 20:42 . 2015-04-04 06:25        12032440        ----a-w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll

2015-05-08 18:43 . 2015-05-08 18:43        --------        d-----w-        c:\users\Dima\AppData\Local\openvr

2015-05-08 18:42 . 2015-05-08 18:42        --------        d-----w-        c:\users\Dima\AppData\Local\Steam

2015-05-08 17:44 . 2015-05-08 17:44        --------        d-----w-        c:\users\Dima\AppData\Local\Programs

2015-05-08 17:44 . 2015-05-08 17:44        --------        d-----w-        c:\users\Dima\AppData\Local\Macromedia

2015-05-08 17:43 . 2015-05-09 20:34        --------        d-----w-        c:\users\Dima\AppData\Local\Mozilla

2015-05-08 16:41 . 2015-05-08 16:41        --------        d-----w-        c:\users\Dima\AppData\Local\ATI

2015-05-08 12:55 . 2015-05-08 12:55        --------        d-sh--w-        c:\users\Dima\AppData\Local\EmieUserList

2015-05-08 12:55 . 2015-05-08 12:55        --------        d-sh--w-        c:\users\Dima\AppData\Local\EmieSiteList

2015-05-08 12:55 . 2015-05-08 12:55        --------        d-sh--w-        c:\users\Dima\AppData\Local\EmieBrowserModeList

2015-05-08 12:49 . 2015-05-08 12:49        --------        d-----w-        c:\programdata\Kikblaster

2015-05-08 12:33 . 2015-05-08 17:54        --------        d-----w-        c:\program files (x86)\Edu App

2015-05-08 12:20 . 2015-05-08 12:52        --------        d-----w-        c:\users\Dima\AppData\Local\00000000-1431094823-0000-0000-D43D7EBF2FB4

2015-05-05 19:45 . 2015-05-08 12:45        --------        d--h--w-        c:\programdata\ftb

2015-05-05 19:12 . 2015-05-05 19:12        408576        ----a-w-        c:\windows\mftb.exe

2015-05-05 19:12 . 2015-05-05 19:12        417792        ----a-w-        c:\windows\ftb.exe

2015-04-25 18:20 . 2015-04-25 18:20        --------        d-----w-        C:\Neople

2015-04-20 11:37 . 2015-04-20 11:37        --------        d-----w-        c:\program files (x86)\avmwlanstick

2015-04-20 11:36 . 2012-04-24 23:00        14120        ----a-w-        c:\windows\system32\drivers\avmeject.sys

2015-04-20 11:36 . 2015-04-20 11:36        --------        d-----w-        c:\users\Dima\AVM_Driver

2015-04-19 22:51 . 2012-07-12 00:00        480632        ----a-w-        c:\windows\instwcli.dex

2015-04-19 22:05 . 2015-04-19 22:44        --------        d-----w-        c:\program files (x86)\AVM_update

2015-04-19 18:40 . 2015-04-19 19:03        --------        d-----w-        c:\program files (x86)\Elite Dekaron

2015-04-19 18:40 . 2015-04-19 18:40        --------        d-----w-        c:\windows\Elite Dekaron

2015-04-16 14:36 . 2015-04-16 14:43        --------        d-s---w-        c:\windows\system32\GWX

2015-04-16 14:36 . 2015-04-16 14:36        --------        d-s---w-        c:\windows\SysWow64\GWX

2015-04-15 19:14 . 2015-04-15 19:14        18178736        ----a-w-        c:\windows\SysWow64\FlashPlayerInstaller.exe

2015-04-14 18:38 . 2015-03-17 05:17        13312        ----a-w-        c:\windows\system32\wow64cpu.dll

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2015-05-11 21:44 . 2014-12-10 21:58        4194304        ----a-w-        c:\windows\ServiceProfiles\NetworkService\msmqlog.bin

2015-04-15 19:15 . 2013-08-15 12:45        778416        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe

2015-04-15 19:15 . 2011-07-25 03:19        142512        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2015-04-15 10:45 . 2013-11-11 11:25        128913832        ----a-w-        c:\windows\system32\MRT.exe

2015-03-30 13:25 . 2013-09-23 10:48        33856        ---ha-w-        c:\windows\system32\hamachi.sys

2015-03-26 11:54 . 2015-04-01 13:01        1187344        ----a-w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{5FE7D19D-7B1C-44AA-A706-B84AA345680D}\gapaengine.dll

2015-03-26 11:54 . 2013-12-06 19:17        1187344        ----a-w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll

2015-03-20 22:39 . 2015-03-20 22:41        237864        ----a-w-        c:\windows\SysWow64\EasyAntiCheat.exe

2015-03-17 04:56 . 2015-04-14 18:39        44032        ----a-w-        c:\windows\apppatch\acwow64.dll

2015-03-03 13:17 . 2010-11-21 03:27        295552        ------w-        c:\windows\system32\MpSigStub.exe

2015-02-26 18:04 . 2015-02-26 18:03        114872        ----a-w-        c:\windows\system32\pdfcmon.dll

2015-02-26 03:25 . 2015-03-11 12:01        3204096        ----a-w-        c:\windows\system32\win32k.sys

2015-02-24 03:15 . 2015-03-11 12:01        389800        ----a-w-        c:\windows\system32\iedkcs32.dll

2015-02-21 01:16 . 2015-03-11 12:01        25021440        ----a-w-        c:\windows\system32\mshtml.dll

2015-02-20 23:58 . 2015-03-11 12:01        92160        ----a-w-        c:\windows\system32\mshtmled.dll

2015-02-20 04:41 . 2015-03-11 12:02        41984        ----a-w-        c:\windows\system32\lpk.dll

2015-02-20 04:40 . 2015-03-11 12:02        100864        ----a-w-        c:\windows\system32\fontsub.dll

2015-02-20 04:40 . 2015-03-11 12:02        14336        ----a-w-        c:\windows\system32\dciman32.dll

2015-02-20 04:40 . 2015-03-11 12:02        46080        ----a-w-        c:\windows\system32\atmlib.dll

2015-02-20 04:13 . 2015-03-11 12:02        70656        ----a-w-        c:\windows\SysWow64\fontsub.dll

2015-02-20 04:13 . 2015-03-11 12:02        10240        ----a-w-        c:\windows\SysWow64\dciman32.dll

2015-02-20 04:13 . 2015-03-11 12:02        34304        ----a-w-        c:\windows\SysWow64\atmlib.dll

2015-02-20 04:12 . 2015-03-11 12:02        25600        ----a-w-        c:\windows\SysWow64\lpk.dll

2015-02-20 03:29 . 2015-03-11 12:02        372224        ----a-w-        c:\windows\system32\atmfd.dll

2015-02-20 03:09 . 2015-03-11 12:02        299008        ----a-w-        c:\windows\SysWow64\atmfd.dll

2015-02-20 03:06 . 2015-03-11 12:01        2724864        ----a-w-        c:\windows\system32\mshtml.tlb

2015-02-20 03:05 . 2015-03-11 12:01        4096        ----a-w-        c:\windows\system32\ieetwcollectorres.dll

2015-02-20 02:50 . 2015-03-11 12:01        66560        ----a-w-        c:\windows\system32\iesetup.dll

2015-02-20 02:49 . 2015-03-11 12:01        48640        ----a-w-        c:\windows\system32\ieetwproxystub.dll

2015-02-20 02:49 . 2015-03-11 12:01        584192        ----a-w-        c:\windows\system32\vbscript.dll

2015-02-20 02:48 . 2015-03-11 12:01        2886144        ----a-w-        c:\windows\system32\iertutil.dll

2015-02-20 02:47 . 2015-03-11 12:01        88064        ----a-w-        c:\windows\system32\MshtmlDac.dll

2015-02-20 02:41 . 2015-03-11 12:01        54784        ----a-w-        c:\windows\system32\jsproxy.dll

2015-02-20 02:40 . 2015-03-11 12:01        34304        ----a-w-        c:\windows\system32\iernonce.dll

2015-02-20 02:36 . 2015-03-11 12:01        633856        ----a-w-        c:\windows\system32\ieui.dll

2015-02-20 02:35 . 2015-03-11 12:01        144384        ----a-w-        c:\windows\system32\ieUnatt.exe

2015-02-20 02:35 . 2015-03-11 12:01        114688        ----a-w-        c:\windows\system32\ieetwcollector.exe

2015-02-20 02:34 . 2015-03-11 12:01        814080        ----a-w-        c:\windows\system32\jscript9diag.dll

2015-02-20 02:32 . 2015-03-11 12:01        6035456        ----a-w-        c:\windows\system32\jscript9.dll

2015-02-20 02:26 . 2015-03-11 12:01        968704        ----a-w-        c:\windows\system32\MsSpellCheckingFacility.exe

2015-02-20 02:22 . 2015-03-11 12:01        2724864        ----a-w-        c:\windows\SysWow64\mshtml.tlb

2015-02-20 02:22 . 2015-03-11 12:01        490496        ----a-w-        c:\windows\system32\dxtmsft.dll

2015-02-20 02:13 . 2015-03-11 12:01        77824        ----a-w-        c:\windows\system32\JavaScriptCollectionAgent.dll

2015-02-20 02:09 . 2015-03-11 12:01        503296        ----a-w-        c:\windows\SysWow64\vbscript.dll

2015-02-20 02:08 . 2015-03-11 12:01        62464        ----a-w-        c:\windows\SysWow64\iesetup.dll

2015-02-20 02:08 . 2015-03-11 12:01        199680        ----a-w-        c:\windows\system32\msrating.dll

2015-02-20 02:08 . 2015-03-11 12:01        47616        ----a-w-        c:\windows\SysWow64\ieetwproxystub.dll

2015-02-20 02:06 . 2015-03-11 12:01        64000        ----a-w-        c:\windows\SysWow64\MshtmlDac.dll

2015-02-20 02:05 . 2015-03-11 12:01        316928        ----a-w-        c:\windows\system32\dxtrans.dll

2015-02-20 01:56 . 2015-03-11 12:01        115712        ----a-w-        c:\windows\SysWow64\ieUnatt.exe

2015-02-20 01:56 . 2015-03-11 12:01        620032        ----a-w-        c:\windows\SysWow64\jscript9diag.dll

2015-02-20 01:49 . 2015-03-11 12:01        718848        ----a-w-        c:\windows\system32\ie4uinit.exe

2015-02-20 01:49 . 2015-03-11 12:01        801280        ----a-w-        c:\windows\system32\msfeeds.dll

2015-02-20 01:47 . 2015-03-11 12:01        1359360        ----a-w-        c:\windows\system32\mshtmlmedia.dll

2015-02-20 01:46 . 2015-03-11 12:01        2125824        ----a-w-        c:\windows\system32\inetcpl.cpl

2015-02-20 01:43 . 2015-03-11 12:01        14398976        ----a-w-        c:\windows\system32\ieframe.dll

2015-02-20 01:41 . 2015-03-11 12:01        60416        ----a-w-        c:\windows\SysWow64\JavaScriptCollectionAgent.dll

2015-02-20 01:30 . 2015-03-11 12:01        4300288        ----a-w-        c:\windows\SysWow64\jscript9.dll

2015-02-20 01:28 . 2015-03-11 12:01        2358784        ----a-w-        c:\windows\system32\wininet.dll

2015-02-20 01:24 . 2015-03-11 12:01        2052608        ----a-w-        c:\windows\SysWow64\inetcpl.cpl

2015-02-20 01:23 . 2015-03-11 12:01        1155072        ----a-w-        c:\windows\SysWow64\mshtmlmedia.dll

2015-02-20 01:16 . 2015-03-11 12:01        1548288        ----a-w-        c:\windows\system32\urlmon.dll

2015-02-20 01:03 . 2015-03-11 12:01        800768        ----a-w-        c:\windows\system32\ieapfltr.dll

2015-02-20 01:01 . 2015-03-11 12:01        1888256        ----a-w-        c:\windows\SysWow64\wininet.dll

2015-02-13 05:22 . 2015-03-11 12:01        14177280        ----a-w-        c:\windows\system32\shell32.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Steam"="c:\program files (x86)\Steam\steam.exe" [2015-05-11 2888384]

"EADM"="c:\program files (x86)\Origin\Origin.exe" [2015-01-28 3619160]

"Akamai NetSession Interface"="c:\users\Dima\AppData\Local\Akamai\netsession_win.exe" [2014-10-29 4673432]

"Dxtory Update Checker 2.0"="c:\program files (x86)\ExKode\Dxtory2.0\UpdateChecker.exe" [2010-10-17 93696]

"\\DIMA-PC\EPSON SX210 Series"="c:\windows\system32\spool\DRIVERS\x64\3\E_IATIFDE.EXE" [2008-11-05 223232]

"GoogleChromeAutoLaunch_74AB638E1E27FA41128D672CA46F567E"="c:\program files (x86)\Google\Chrome\Application\chrome.exe" [2015-04-28 812872]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"SuiteTray"="c:\program files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [2011-04-02 340848]

"EgisTecPMMUpdate"="c:\program files (x86)\EgisTec IPS\PmmUpdate.exe" [2011-03-29 408432]

"EgisUpdate"="c:\program files (x86)\EgisTec IPS\EgisUpdate.exe" [2011-03-29 202608]

"BackupManagerTray"="c:\program files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" [2011-04-24 297280]

"SDTray"="c:\program files (x86)\Spybot - Search & Destroy 2\SDTray.exe" [2014-06-24 4101576]

"Raptr"="c:\program files (x86)\Raptr\raptrstub.exe" [2015-03-25 55568]

"StartCCC"="c:\program files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2014-11-20 767176]

"DivXMediaServer"="c:\program files (x86)\DivX\DivX Media Server\DivXMediaServer.exe" [2014-11-17 448856]

"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2014-01-10 1861968]

"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2015-03-30 3978600]

"AVMWlanClient"="c:\program files (x86)\avmwlanstick\FRITZWLANMini.exe" [2012-08-21 933888]

.

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"IsMyWinLockerReboot"="msiexec.exe" [2010-11-21 73216]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\3.8.150\SSScheduler.exe [2014-4-9 332016]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]

"LoadAppInit_DLLs"=1 (0x1)

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]

BootExecute        REG_MULTI_SZ           autocheck autochk *\0\0sdnclean64.exe

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

@=""

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

@="Service"

.

R1 qrnfd_1_10_0_13;qrnfd_1_10_0_13;c:\windows\system32\drivers\qrnfd_1_10_0_13.sys;c:\windows\SYSNATIVE\drivers\qrnfd_1_10_0_13.sys [x]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]

R2 ftb;ftb;c:\windows\ftb.exe;c:\windows\ftb.exe [x]

R2 HiPatchService;Hi-Rez Studios Authenticate and Update Service;c:\program files (x86)\Hi-Rez Studios\HiPatchService.exe;c:\program files (x86)\Hi-Rez Studios\HiPatchService.exe [x]

R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\progra~2\mcafee\SITEAD~1\mcsacore.exe;c:\progra~2\mcafee\SITEAD~1\mcsacore.exe [x]

R2 mftb;mftb;c:\windows\mftb.exe;c:\windows\mftb.exe [x]

R2 SDScannerService;Spybot-S&D 2 Scanner Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [x]

R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]

R3 avmeject;AVM Eject;c:\windows\system32\drivers\avmeject.sys;c:\windows\SYSNATIVE\drivers\avmeject.sys [x]

R3 BRDriver64_1_3_3_E02B25FC;BRDriver64_1_3_3_E02B25FC;c:\programdata\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys;c:\programdata\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [x]

R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNATIVE\drivers\EagleX64.sys [x]

R3 EasyAntiCheat;EasyAntiCheat;c:\windows\system32\EasyAntiCheat.exe;c:\windows\SYSNATIVE\EasyAntiCheat.exe [x]

R3 EgisTec Ticket Service;EgisTec Ticket Service;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [x]

R3 GameKB;SHARKOON Skiller;c:\windows\system32\drivers\GameKB.sys;c:\windows\SYSNATIVE\drivers\GameKB.sys [x]

R3 hxsyol;hxsyol;c:\aeriagames\AuraKingdom\avital\hxsy64.sys;c:\aeriagames\AuraKingdom\avital\hxsy64.sys [x]

R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]

R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]

R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\3.8.150\McCHSvc.exe;c:\program files\McAfee Security Scan\3.8.150\McCHSvc.exe [x]

R3 MotioninJoyXFilter;MotioninJoy Virtual Xinput device Filter Driver;c:\windows\system32\DRIVERS\MijXfilt.sys;c:\windows\SYSNATIVE\DRIVERS\MijXfilt.sys [x]

R3 netr28x;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28x.sys;c:\windows\SYSNATIVE\DRIVERS\netr28x.sys [x]

R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des;c:\windows\SYSNATIVE\GameMon.des [x]

R3 Origin Client Service;Origin Client Service;c:\program files (x86)\Origin\OriginClientService.exe;c:\program files (x86)\Origin\OriginClientService.exe [x]

R3 PDF Architect 2;PDF Architect 2;c:\program files (x86)\PDF Architect 2\ws.exe;c:\program files (x86)\PDF Architect 2\ws.exe [x]

R3 pdfforge CrashHandler;pdfforge CrashHandler;c:\program files (x86)\PDF Architect 2\crash-handler-ws.exe;c:\program files (x86)\PDF Architect 2\crash-handler-ws.exe [x]

R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\System32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]

R3 Survarium-Steam Update Service;Survarium-Steam Update Service;c:\program files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium_service.exe Survarium-Steam;c:\program files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium_service.exe Survarium-Steam [x]

R3 taphss6;Anchorfree HSS VPN Adapter;c:\windows\system32\DRIVERS\taphss6.sys;c:\windows\SYSNATIVE\DRIVERS\taphss6.sys [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]

R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]

R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe;c:\program files\Intel\TurboBoost\TurboBoost.exe [x]

R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]

R3 xhunter1;xhunter1;c:\windows\xhunter1.sys;c:\windows\xhunter1.sys [x]

R3 XSplit_Dummy;XSplit  Stream  Audio  Renderer;c:\windows\system32\drivers\xspltspk.sys;c:\windows\SYSNATIVE\drivers\xspltspk.sys [x]

R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]

S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDFilter.sys [x]

S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDNServ.sys [x]

S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDVDisk.sys [x]

S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]

S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe;c:\program files (x86)\Acer\Registration\GREGsvc.exe [x]

S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x]

S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]

S2 Live Updater Service;Live Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe;c:\program files\Acer\Acer Updater\UpdaterService.exe [x]

S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [x]

S2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]

S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe;c:\program files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [x]

S2 PDF Architect 2 Creator;PDF Architect 2 Creator;c:\program files (x86)\PDF Architect 2\creator-ws.exe;c:\program files (x86)\PDF Architect 2\creator-ws.exe [x]

S2 RalinkRegistryWriter64;Ralink Registry Writer 64;c:\program files (x86)\Ralink\Common\RaRegistry64.exe;c:\program files (x86)\Ralink\Common\RaRegistry64.exe [x]

S2 SDUpdateService;Spybot-S&D 2 Updating Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [x]

S2 SDWSCService;Spybot-S&D 2 Security Center Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [x]

S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys;c:\windows\SYSNATIVE\DRIVERS\TurboB.sys [x]

S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]

S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]

S3 fwlanusb5;FRITZ!WLAN N v2;c:\windows\system32\DRIVERS\fwlanusb5.sys;c:\windows\SYSNATIVE\DRIVERS\fwlanusb5.sys [x]

S3 NisSrv;Microsoft-Netzwerkinspektion;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]

.

.

Inhalt des "geplante Tasks" Ordners

.

2015-05-12 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-15 19:15]

.

2015-05-11 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-10-07 14:30]

.

2015-05-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-10-07 14:30]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IntelTBRunOnce"="wscript.exe" [2013-10-12 168960]

"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-03-10 11785832]

"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2015-01-30 1332296]

.

------- Zusätzlicher Suchlauf -------

.

uStart Page = about:blank

uLocal Page = c:\windows\system32\blank.htm

uDefault_Search_URL = hxxp://www.google.com

mDefault_Search_URL = www.google.com

mDefault_Page_URL = about:blank

mStart Page = about:blank

mLocal Page = c:\windows\SysWOW64\blank.htm

mSearch Page = www.google.com

uInternet Settings,ProxyOverride = <local>

uSearchAssistant = www.google.com

mCustomizeSearch = hxxp://www.bing.com/search?q={searchTerms}

mSearchAssistant = hxxp://www.bing.com/search?q={searchTerms}

Trusted Zone: aeriagames.com

FF - ProfilePath - c:\users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

Toolbar-Locked - (no file)

Wow6432Node-HKCU-Run-GameTracker - c:\program files (x86)\GameTracker\GTLite.exe

Wow6432Node-HKLM-Run-gmsd_de_485 - (no file)

Wow6432Node-HKLM-Run-gmsd_de_497 - (no file)

c:\users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk - c:\programdata\{b3779435-d2fb-f000-b377-79435d2f50d7}\hqghumeaylnlf.exe /startup

Notify-SDWinLogon - SDWinLogon.dll

BHO-{10921475-03CE-4E04-90CE-E2E7EF20C814} - c:\program files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll

Toolbar-Locked - (no file)

HKLM-Run-3D BubbleSound - c:\program files\BubbleSound\3D BubbleSound.exe

AddRemove-Battlelog Web Plugins - c:\program files (x86)\Battlelog Web Plugins\uninstall.exe

AddRemove-SpellForce - c:\progra~2\JoWooD\SPELLF~1\UNWISE.EXE

AddRemove-Akamai - c:\users\Dima\AppData\Local\Akamai\uninstall.exe

AddRemove-UnityWebPlayer - c:\users\Dima\AppData\Local\Unity\WebPlayer\Uninstall.exe

.

.

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc]

"ImagePath"="c:\windows\system32\GameMon.des -service"

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_17_0_0_169_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]

@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_17_0_0_169_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]

@Denied: (A 2) (Everyone)

@="IFlashBroker6"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_17_0_0_169_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_17_0_0_169_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_169.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.17"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_169.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_169.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_169.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]

@Denied: (A 2) (Everyone)

@="IFlashBroker6"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]

"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,

   00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Zeit der Fertigstellung: 2015-05-12  13:00:31

ComboFix-quarantined-files.txt  2015-05-12 11:00

.

Vor Suchlauf: 20 Verzeichnis(se), 488.874.655.744 Bytes frei

Nach Suchlauf: 26 Verzeichnis(se), 488.137.469.952 Bytes frei

.

- - End Of File - - 9A16E55ACA390805FD338BFF70BE0050

A36C5E4F47E84449FF07ED3517B43A31

FRST

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-05-2015

Ran by Dima (administrator) on DIMAS-PC on 12-05-2015 13:03:29

Running from C:\Users\Dima\Desktop\Downloads

Loaded Profiles: Dima (Available profiles: Dima)

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: IE)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe

(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe

(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

(AVM Berlin) C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe

(Microsoft Corporation) C:\Windows\System32\mqsvc.exe

(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe

(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe

(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 2\creator-ws.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry.exe

(Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe

(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe

(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe

(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11785832 2011-03-10] (Realtek Semiconductor)

HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1332296 2015-01-30] (Microsoft Corporation)

HKLM\...\Run: [3D BubbleSound] => "C:\Program Files\BubbleSound\3D BubbleSound.exe"

HKLM-x32\...\Run: [SuiteTray] => C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [340848 2011-04-02] (Egis Technology Inc.)

HKLM-x32\...\Run: [EgisTecPMMUpdate] => C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [408432 2011-03-29] (Egis Technology Inc.)

HKLM-x32\...\Run: [EgisUpdate] => C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [202608 2011-03-29] (Egis Technology Inc.)

HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [297280 2011-04-24] (NTI Corporation)

HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)

HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55568 2015-03-25] (Raptr, Inc)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-11-17] (DivX, LLC)

HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-03-30] (LogMeIn Inc.)

HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [933888 2012-08-21] (AVM Berlin)

Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2888384 2015-05-12] (Valve Corporation)

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3619160 2015-01-28] (Electronic Arts)

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Dima\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-30] (Akamai Technologies, Inc.)

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Dxtory Update Checker 2.0] => C:\Program Files (x86)\ExKode\Dxtory2.0\UpdateChecker.exe [93696 2010-10-17] (Dxtory Software)

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [\\DIMA-PC\EPSON SX210 Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFDE.EXE [223232 2008-11-05] (SEIKO EPSON CORPORATION)

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [GoogleChromeAutoLaunch_74AB638E1E27FA41128D672CA46F567E] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [812872 2015-04-28] (Google Inc.)

HKU\S-1-5-18\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2014-08-23]

ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)

BootExecute: autocheck autochk * sdnclean64.exe

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKU\S-1-5-21-221738678-620704744-704572411-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.

ProxyServer: [.DEFAULT] => http=127.0.0.1:63783;https=127.0.0.1:63783

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome

HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll No File

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28] (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation)

BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)

BHO-x32: PDF Architect Helper -> {691B33B0-B86E-47F3-81C7-56E4FE3B929C} -> C:\Program Files (x86)\PDF Architect 2\creator-ie-helper.dll [2014-10-10] (pdfforge GmbH)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28] (Oracle Corporation)

BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation)

Toolbar: HKLM-x32 - PDF Architect Toolbar - {DEEB13D7-CEA9-45FB-B77C-E039BEC85221} - C:\Program Files (x86)\PDF Architect 2\creator-ie-plugin.dll [2014-10-10] (pdfforge GmbH)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)

FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll [2014-09-01] (EA Digital Illusions CE AB)

FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-28] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2013-09-08] (Microsoft Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-11-12] (VideoLAN)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll [2014-06-24] (Adobe Systems, Inc.)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)

FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2014-11-21] (DivX, LLC)

FF Plugin-x32: @esn/npbattlelog,version=2.3.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll No File

FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll [2014-09-01] (EA Digital Illusions CE AB)

FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-28] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation)

FF Plugin-x32: @mcafee.com/SAFFPlugin -> C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll No File

FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2013-09-08] (Microsoft Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)

FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npnxgameEU.dll [2014-11-12] (Nexon)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)

FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll [2014-10-10] (pdfforge GmbH)

FF Plugin HKU\S-1-5-21-221738678-620704744-704572411-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Dima\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS)

FF Extension: jid0XZn6pYCdV3ANrfYigxlyyGDrxAMjetpack - C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\Extensions\jid0-XZn6pYCdV3ANrfYigxlyyGDrxAM@jetpack [2015-05-11]

FF Extension: 9b9d2aaaae264447a7a1633a32b19ddd - C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\Extensions\{9b9d2aaa-ae26-4447-a7a1-633a32b19ddd} [2015-05-11]

FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor

FF HKLM-x32\...\Firefox\Extensions: [pdf_architect_2_conv@pdfarchitect.org] - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension

FF Extension: PDF Architect 2 Creator - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension [2015-02-26]

FF HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi

FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
 

Chrome: 

=======

CHR Profile: C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Slides) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-05-08]

CHR Extension: (Google Docs) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-05-08]

CHR Extension: (Google Drive) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-05-08]

CHR Extension: (YouTube) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-05-08]

CHR Extension: (Google Search) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-05-08]

CHR Extension: (Google Sheets) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-05-08]

CHR Extension: (Bookmark Manager) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-08]

CHR Extension: (iilcekgoelpgecpjnnoikhbleipnjdhf) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\iilcekgoelpgecpjnnoikhbleipnjdhf [2015-05-11]

CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-08]

CHR Extension: (ljppcglljemjablfhgjdhndlpallobpl) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljppcglljemjablfhgjdhndlpallobpl [2015-05-11]

CHR Extension: (Google Wallet) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]

CHR Extension: (pioclpoplcdbaefihamjohnefbikjilc) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2015-05-10]

CHR Extension: (Gmail) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-08]
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [237864 2015-03-21] (EasyAntiCheat Ltd)

S2 ftb; c:\windows\ftb.exe [417792 2015-05-05] () [File not signed]

R2 GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [29696 2011-05-26] (Acer Incorporated) [File not signed]

S2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2015-02-16] (Hi-Rez Studios) [File not signed]

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-03-30] (LogMeIn, Inc.)

S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)

S2 mftb; c:\windows\mftb.exe [408576 2015-05-05] () [File not signed]

R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2015-01-30] (Microsoft Corporation)

R2 MSMQ; C:\Windows\system32\mqsvc.exe [9216 2009-07-14] (Microsoft Corporation)

R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366512 2015-01-30] (Microsoft Corporation)

S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5128944 2013-11-19] (INCA Internet Co., Ltd.) [File not signed]

R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256832 2011-04-24] (NTI Corporation)

S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910640 2015-03-02] (Electronic Arts)

S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-10-10] (pdfforge GmbH)

R2 PDF Architect 2 Creator; C:\Program Files (x86)\PDF Architect 2\creator-ws.exe [738856 2014-10-10] (pdfforge GmbH)

S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-10-10] (pdfforge GmbH)

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-10-11] ()

S2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)

R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)

R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)

S3 Survarium-Steam Update Service; C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium_service.exe [76408 2015-04-03] ()

S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

S2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2012-04-25] (AVM Berlin)

R3 fwlanusb5; C:\Windows\System32\DRIVERS\fwlanusb5.sys [982784 2012-08-21] (AVM GmbH)

S3 GameKB; C:\Windows\System32\drivers\GameKB.sys [27648 2012-05-11] () [File not signed]

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [274696 2014-11-15] (Microsoft Corporation)

R3 MQAC; C:\Windows\System32\drivers\mqac.sys [189440 2009-07-14] (Microsoft Corporation)

R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124560 2014-11-15] (Microsoft Corporation)

S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-05-17] (Anchorfree Inc.)

S3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2014-07-02] (SplitmediaLabs Limited)

S3 BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [X]

U3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

S3 hxsyol; \??\C:\AeriaGames\AuraKingdom\avital\hxsy64.sys [X]

S1 qrnfd_1_10_0_13; system32\drivers\qrnfd_1_10_0_13.sys [X]

S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-05-12 13:00 - 2015-05-12 13:00 - 00030620 _____ () C:\ComboFix.txt

2015-05-12 12:46 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe

2015-05-12 12:46 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe

2015-05-12 12:46 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2015-05-12 12:46 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2015-05-12 12:46 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2015-05-12 12:46 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe

2015-05-12 12:46 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe

2015-05-12 12:46 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe

2015-05-12 12:41 - 2015-05-12 13:00 - 00000000 ____D () C:\Qoobox

2015-05-12 12:40 - 2015-05-12 12:59 - 00000000 ____D () C:\Windows\erdnt

2015-05-12 12:38 - 2015-05-12 12:39 - 05623215 ____R (Swearware) C:\Users\Dima\Desktop\ComboFix.exe

2015-05-11 23:00 - 2015-05-11 23:00 - 00000000 ____D () C:\Users\Dima\AppData\Local\Eclipse

2015-05-11 22:03 - 2015-05-12 13:03 - 00000000 ____D () C:\FRST

2015-05-11 20:59 - 2015-05-11 20:59 - 00000000 ____D () C:\Users\Dima\AppData\Local\My Games

2015-05-10 18:44 - 2015-05-10 18:44 - 00000000 ____D () C:\Users\Dima\AppData\Local\Origin

2015-05-10 18:05 - 2015-05-10 18:05 - 00001117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2015-05-10 18:05 - 2015-05-10 18:05 - 00001105 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk

2015-05-10 18:05 - 2015-05-10 18:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2015-05-10 16:15 - 2015-05-10 16:15 - 00000000 ____D () C:\Users\Dima\AppData\Local\EgisTec IPS

2015-05-10 16:14 - 2015-05-10 16:14 - 00066432 _____ () C:\Users\Dima\AppData\Local\GDIPFONTCACHEV1.DAT

2015-05-10 16:13 - 2015-05-11 23:46 - 00000000 ____D () C:\Users\Dima\AppData\Local\LogMeIn Hamachi

2015-05-10 16:13 - 2015-05-10 16:13 - 00000000 ____D () C:\Users\Dima\AppData\Local\LogMeIn

2015-05-10 16:12 - 2015-05-10 16:12 - 00000000 ____D () C:\Users\Dima\AppData\Local\VirtualStore

2015-05-10 16:07 - 2015-05-11 23:41 - 00000000 ____D () C:\AdwCleaner

2015-05-08 20:43 - 2015-05-08 20:43 - 00000000 ____D () C:\Users\Dima\AppData\Local\openvr

2015-05-08 20:42 - 2015-05-08 20:42 - 00000000 ____D () C:\Users\Dima\AppData\Local\Steam

2015-05-08 19:44 - 2015-05-08 19:44 - 00000000 ____D () C:\Users\Dima\AppData\Local\Macromedia

2015-05-08 19:43 - 2015-05-09 22:34 - 00000000 ____D () C:\Users\Dima\AppData\Local\Mozilla

2015-05-08 18:41 - 2015-05-08 18:41 - 00000000 ____D () C:\Users\Dima\AppData\Local\ATI

2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieUserList

2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieSiteList

2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieBrowserModeList

2015-05-08 14:49 - 2015-05-08 14:49 - 00000000 ____D () C:\ProgramData\Kikblaster

2015-05-08 14:33 - 2015-05-08 19:54 - 00000000 ____D () C:\Program Files (x86)\Edu App

2015-05-08 14:20 - 2015-05-08 14:52 - 00000000 ____D () C:\Users\Dima\AppData\Local\00000000-1431094823-0000-0000-D43D7EBF2FB4

2015-05-08 14:16 - 2015-05-08 14:16 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webTinstMKTN84_01009.Wdf

2015-05-05 21:45 - 2015-05-08 14:45 - 00000000 ___HD () C:\ProgramData\ftb

2015-05-05 21:13 - 2015-05-08 21:13 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7

2015-05-05 21:12 - 2015-05-05 21:12 - 00631296 _____ () C:\Windows\ftb.dat

2015-05-05 21:12 - 2015-05-05 21:12 - 00417792 _____ () C:\Windows\ftb.exe

2015-05-05 21:12 - 2015-05-05 21:12 - 00408576 _____ () C:\Windows\mftb.exe

2015-05-04 20:34 - 2015-05-04 20:34 - 00059505 _____ () C:\Users\Dima\Documents\ts3_clientui-win64-1407159763-2015-05-04 20_34_27.843240.dmp

2015-04-26 16:02 - 2015-04-26 16:02 - 00000000 ____D () C:\Users\Dima\Documents\DFO

2015-04-25 20:20 - 2015-04-25 20:20 - 00001734 _____ () C:\Users\Public\Desktop\Dungeon Fighter Online.lnk

2015-04-25 20:20 - 2015-04-25 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\neople

2015-04-25 20:20 - 2015-04-25 20:20 - 00000000 ____D () C:\Neople

2015-04-25 15:57 - 2015-04-26 13:15 - 00000000 ____D () C:\Users\Dima\Documents\DragonNest

2015-04-24 12:20 - 2015-05-10 18:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2015-04-20 13:37 - 2015-04-20 13:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FRITZ!WLAN

2015-04-20 13:37 - 2015-04-20 13:37 - 00000000 ____D () C:\Program Files (x86)\avmwlanstick

2015-04-20 13:36 - 2015-04-20 13:36 - 00000000 ____D () C:\Users\Dima\AVM_Driver

2015-04-20 13:36 - 2012-04-25 01:00 - 00014120 _____ (AVM Berlin) C:\Windows\system32\Drivers\avmeject.sys

2015-04-20 00:51 - 2015-04-20 00:51 - 00002956 _____ () C:\Windows\avmacc1.log

2015-04-20 00:51 - 2012-07-12 02:00 - 00480632 _____ (AVM Berlin) C:\Windows\instwcli.dex

2015-04-20 00:45 - 2015-04-20 00:45 - 00003216 _____ () C:\Windows\System32\Tasks\{35EE529B-2794-4708-8B79-567E126A4A7F}

2015-04-20 00:05 - 2015-04-20 13:36 - 00001479 _____ () C:\Windows\avmsetup.log

2015-04-20 00:05 - 2015-04-20 13:36 - 00000490 _____ () C:\Windows\avmadd32.log

2015-04-20 00:05 - 2015-04-20 00:54 - 00197887 _____ () C:\Windows\avmacc.log

2015-04-20 00:05 - 2015-04-20 00:44 - 00000000 ____D () C:\Program Files (x86)\AVM_update

2015-04-19 20:43 - 2015-04-19 20:43 - 00001906 _____ () C:\Users\Dima\Desktop\EliteDekaron.lnk

2015-04-19 20:43 - 2015-04-19 20:43 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Elite Dekaron

2015-04-19 20:40 - 2015-04-19 21:03 - 00000000 ____D () C:\Program Files (x86)\Elite Dekaron

2015-04-19 20:40 - 2015-04-19 20:40 - 00000000 ____D () C:\Windows\Elite Dekaron

2015-04-19 14:20 - 2015-04-19 14:20 - 00005872 _____ () C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1

2015-04-19 14:20 - 2015-04-19 14:20 - 00005872 _____ () C:\Users\Dima\AppData\Roaming\DXbbq3U

2015-04-16 16:36 - 2015-04-16 16:43 - 00000000 ___SD () C:\Windows\system32\GWX

2015-04-16 16:36 - 2015-04-16 16:36 - 00000000 ___SD () C:\Windows\SysWOW64\GWX

2015-04-15 21:14 - 2015-04-15 21:14 - 18178736 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe

2015-04-14 20:39 - 2015-03-25 05:24 - 03298816 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 02553856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2015-04-14 20:39 - 2015-03-25 05:23 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-04-14 20:39 - 2015-03-25 05:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-04-14 20:39 - 2015-03-25 05:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll

2015-04-14 20:39 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2015-04-14 20:39 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2015-04-14 20:39 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2015-04-14 20:39 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2015-04-14 20:39 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2015-04-14 20:39 - 2015-03-23 05:25 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2015-04-14 20:39 - 2015-03-23 05:25 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2015-04-14 20:39 - 2015-03-23 05:24 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2015-04-14 20:39 - 2015-03-23 05:24 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2015-04-14 20:39 - 2015-03-23 05:24 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2015-04-14 20:39 - 2015-03-23 05:24 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2015-04-14 20:39 - 2015-03-23 05:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

2015-04-14 20:39 - 2015-03-23 05:17 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2015-04-14 20:39 - 2015-03-17 07:22 - 05557696 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-04-14 20:39 - 2015-03-17 07:22 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-04-14 20:39 - 2015-03-17 07:22 - 00095672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-04-14 20:39 - 2015-03-17 07:19 - 01727904 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2015-04-14 20:39 - 2015-03-17 07:17 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2015-04-14 20:39 - 2015-03-17 07:17 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-04-14 20:39 - 2015-03-17 07:16 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2015-04-14 20:39 - 2015-03-17 07:16 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2015-04-14 20:39 - 2015-03-17 07:15 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2015-04-14 20:39 - 2015-03-17 07:15 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-04-14 20:39 - 2015-03-17 07:15 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-04-14 20:39 - 2015-03-17 07:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2015-04-14 20:39 - 2015-03-17 07:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2015-04-14 20:39 - 2015-03-17 06:59 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2015-04-14 20:39 - 2015-03-17 06:56 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2015-04-14 20:39 - 2015-03-17 06:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2015-04-14 20:39 - 2015-03-17 06:56 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2015-04-14 20:39 - 2015-03-10 05:25 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2015-04-14 20:39 - 2015-03-10 05:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2015-04-14 20:39 - 2015-03-10 05:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2015-04-14 20:39 - 2015-03-10 05:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2015-04-14 20:39 - 2015-03-05 07:12 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2015-04-14 20:39 - 2015-03-05 06:05 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2015-04-14 20:38 - 2015-03-17 07:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2015-04-14 20:38 - 2015-03-17 07:16 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-04-14 20:38 - 2015-03-17 07:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-04-14 20:38 - 2015-03-17 07:13 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-04-14 20:38 - 2015-03-17 07:13 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2015-04-14 20:38 - 2015-03-17 06:57 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2015-04-14 20:38 - 2015-03-17 06:56 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2015-04-14 20:38 - 2015-03-17 06:56 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2015-04-14 20:38 - 2015-03-17 06:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2015-04-14 20:38 - 2015-03-17 06:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2015-04-14 20:38 - 2015-03-17 06:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2015-04-14 20:38 - 2015-03-17 06:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 05:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2015-04-14 20:38 - 2015-03-17 05:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2015-04-14 20:38 - 2015-03-17 05:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 05:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2015-04-14 20:38 - 2015-03-04 06:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys

2015-04-14 20:38 - 2015-03-04 06:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll

2015-04-14 20:38 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll

2015-04-14 20:38 - 2015-02-25 05:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys

2015-04-14 18:28 - 2015-04-14 18:28 - 00004387 _____ () C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU

2015-04-14 18:28 - 2015-04-14 18:28 - 00004387 _____ () C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-05-12 13:00 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default

2015-05-12 12:57 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini

2015-05-12 12:52 - 2013-08-15 21:16 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-05-12 12:41 - 2009-07-14 06:45 - 00028928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-05-12 12:41 - 2009-07-14 06:45 - 00028928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-05-12 12:40 - 2013-10-04 17:11 - 00000000 ____D () C:\ProgramData\Package Cache

2015-05-12 12:40 - 2013-08-08 20:19 - 01841210 _____ () C:\Windows\WindowsUpdate.log

2015-05-12 12:23 - 2013-11-06 17:55 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Raptr

2015-05-12 12:22 - 2013-08-15 14:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-05-11 23:56 - 2013-08-08 21:08 - 00000000 ____D () C:\Program Files (x86)\Steam

2015-05-11 23:50 - 2013-08-09 06:11 - 00699416 _____ () C:\Windows\system32\perfh007.dat

2015-05-11 23:50 - 2013-08-09 06:11 - 00149556 _____ () C:\Windows\system32\perfc007.dat

2015-05-11 23:50 - 2009-07-14 07:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-05-11 23:44 - 2013-08-15 21:16 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-05-11 23:43 - 2013-08-17 15:43 - 00000000 ____D () C:\Program Files (x86)\Origin

2015-05-11 23:42 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2015-05-11 23:42 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-05-11 23:42 - 2009-07-14 06:51 - 00121033 _____ () C:\Windows\setupact.log

2015-05-11 23:33 - 2014-01-07 19:34 - 01832960 ___SH () C:\Users\Dima\Desktop\Thumbs.db

2015-05-11 22:59 - 2015-04-10 17:41 - 00000000 ____D () C:\Users\Dima\Desktop\eclipse

2015-05-11 22:28 - 2013-09-21 18:06 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\TS3Client

2015-05-10 18:44 - 2013-08-17 15:43 - 00000000 ____D () C:\ProgramData\Origin

2015-05-10 18:40 - 2010-11-21 05:47 - 00399402 _____ () C:\Windows\PFRO.log

2015-05-10 18:19 - 2014-11-14 00:10 - 00000000 ____D () C:\Users\Dima\Desktop\lqobqwkv.default

2015-05-10 16:42 - 2014-10-05 15:02 - 00000000 ____D () C:\Users\Dima\AppData\Local\Adobe

2015-05-10 16:15 - 2013-12-20 13:37 - 00000000 ____D () C:\Users\Dima\AppData\Local\Akamai

2015-05-10 16:12 - 2013-08-08 15:36 - 00001419 _____ () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2015-05-10 16:10 - 2014-11-26 23:57 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WorldofTanks

2015-05-08 21:41 - 2013-12-30 15:03 - 00000000 ____D () C:\Program Files (x86)\7-Zip

2015-05-08 21:39 - 2013-12-18 15:08 - 00000000 ____D () C:\Program Files (x86)\ACASystems

2015-05-08 18:40 - 2013-11-02 02:16 - 00000000 ____D () C:\Users\Dima\Desktop\Neuer Ordner

2015-05-08 18:40 - 2013-08-15 21:16 - 00000000 ____D () C:\Users\Dima\AppData\Local\Google

2015-05-08 14:52 - 2014-11-30 22:57 - 00000000 ____D () C:\Users\Dima\AppData\Local\gegl-0.2

2015-05-08 14:52 - 2013-12-14 00:39 - 00000000 ____D () C:\Users\Dima\AppData\Local\Battle.net

2015-05-08 13:16 - 2013-08-15 15:52 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Skype

2015-05-02 22:30 - 2014-11-23 16:19 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\.technic

2015-05-02 22:30 - 2014-08-25 02:48 - 04697768 _____ () C:\Users\Dima\Desktop\TechnicLauncher.exe

2015-05-02 22:28 - 2014-08-09 17:35 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\.minecraft

2015-04-27 16:21 - 2015-02-28 15:34 - 00000000 ____D () C:\Users\Dima\Desktop\Bewerbung

2015-04-20 13:37 - 2014-02-12 19:55 - 00011424 _____ () C:\Windows\avmfwlanci.log

2015-04-20 13:37 - 2014-02-12 19:55 - 00011167 _____ () C:\Windows\AVMInstall.Log

2015-04-20 13:36 - 2014-02-12 19:54 - 00000000 ____D () C:\Windows\AVM_Driver

2015-04-20 13:36 - 2013-08-08 15:34 - 00000000 ____D () C:\Users\Dima

2015-04-20 00:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF

2015-04-18 17:38 - 2013-09-13 14:13 - 00000000 ____D () C:\Program Files (x86)\Raptr

2015-04-18 12:26 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat

2015-04-16 16:36 - 2014-12-22 19:12 - 00000000 ____D () C:\Windows\system32\appraiser

2015-04-16 16:36 - 2014-05-01 14:38 - 00000000 ___SD () C:\Windows\system32\CompatTel

2015-04-16 16:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2015-04-16 12:44 - 2014-02-26 15:58 - 00002022 _____ () C:\Users\Dima\monsterhunter.txt

2015-04-15 21:15 - 2013-08-15 14:45 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-04-15 21:15 - 2013-08-15 14:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2015-04-15 21:15 - 2011-07-25 05:19 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-04-15 12:54 - 2013-09-09 16:14 - 01593956 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2015-04-15 12:52 - 2014-10-06 19:31 - 00000000 ___RD () C:\Program Files (x86)\Skype

2015-04-15 12:52 - 2011-07-25 05:01 - 00000000 ____D () C:\ProgramData\Skype

2015-04-15 12:51 - 2013-11-11 13:25 - 00000000 ____D () C:\Windows\system32\MRT

2015-04-15 12:45 - 2013-11-11 13:25 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
 

==================== Files in the root of some directories =======
 

2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\Dima\AppData\Roaming\DXbbq3U

2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1

2013-11-09 21:45 - 2013-11-09 21:45 - 0000004 _____ () C:\Users\Dima\AppData\Roaming\steam_md4.dat

2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr

2014-11-27 23:59 - 2014-11-29 01:59 - 0000068 _____ () C:\Users\Dima\AppData\Roaming\WB.CFG

2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU

2013-08-08 21:05 - 2013-08-08 21:05 - 0000654 _____ () C:\ProgramData\ArcadeDeluxe5.log
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2011-07-25 04:31
 

==================== End Of Log ============================

--- --- ---

Bootsektor

12.05.2015 21:04

Hallo,

du hast dir da etwas sehr interessantes eingefangen. Ich brauche nachher unbedingt die Quarantäne von Combofix und auch von FRST. Wir machen so weiter:

Wie sieht es mit der Adware nach dieser Aktion aus?

Schritt 1

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

S2 mftb; c:\windows\mftb.exe [408576 2015-05-05] () [File not signed]

S2 ftb; c:\windows\ftb.exe [417792 2015-05-05] () [File not signed]

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

FF Extension: 9b9d2aaaae264447a7a1633a32b19ddd - C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\Extensions\{9b9d2aaa-ae26-4447-a7a1-633a32b19ddd} [2015-05-11]

CHR Extension: (iilcekgoelpgecpjnnoikhbleipnjdhf) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\iilcekgoelpgecpjnnoikhbleipnjdhf [2015-05-11]

CHR Extension: (ljppcglljemjablfhgjdhndlpallobpl) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljppcglljemjablfhgjdhndlpallobpl [2015-05-11]

CHR Extension: (pioclpoplcdbaefihamjohnefbikjilc) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2015-05-10]

Task: {0A4748C0-2366-4860-8A2A-22C28DD4F8FB} - System32\Tasks\DXbbq3U => C:\Users\Dima\AppData\Roaming\DXbbq3U.exe [2015-04-20] () <==== ATTENTION

Task: {2D0DD0EF-6F02-4AE5-81DA-8F7F44E9D915} - System32\Tasks\Games\UpdateCheck_S-1-5-21-221738678-620704744-704572411-1000

Task: {30516B1D-88D3-4A14-AD49-963F8AA1FCEE} - System32\Tasks\vj57Vb6Rn1O3ezZ75nEr => C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe [2015-04-20] () <==== ATTENTION

Task: {36C3C2EA-97D0-4CA5-BAA5-C0D3544BE0C8} - System32\Tasks\WfqE0YhY0IU => C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe [2015-04-20] () <==== ATTENTION

Task: {691D2C19-7551-41BB-BDBA-38CC87FF53F4} - System32\Tasks\{3D950745-404D-482F-B2F2-F7290B610680} => pcalua.exe -a C:\Users\Dima\AppData\Roaming\webssearches\UninstallManager.exe -c  -ptid=irs <==== ATTENTION

Task: {D390B225-5BC3-4867-B035-FE45B82F2599} - System32\Tasks\IT7Lg6DU6w1 => C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1.exe [2015-04-20] () <==== ATTENTION

Task: C:\Windows\Tasks\DXbbq3U.job => C:\Users\Dima\AppData\Roaming\DXbbq3U.exe <==== ATTENTION

Task: C:\Windows\Tasks\IT7Lg6DU6w1.job => C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1.exe <==== ATTENTION

Task: C:\Windows\Tasks\vj57Vb6Rn1O3ezZ75nEr.job => C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe <==== ATTENTION

Task: C:\Windows\Tasks\WfqE0YhY0IU.job => C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe <==== ATTENTION

c:\windows\ftb.exe

c:\windows\mftb.exe

C:\ProgramData\ftb

C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7

C:\Windows\ftb.dat

C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1

C:\Users\Dima\AppData\Roaming\DXbbq3U

C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU

C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr

C:\Users\Dima\AppData\Roaming\WB.CFG

C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU

C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe 

C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe

C:\Users\Dima\AppData\Roaming\webssearches

C:\Users\Dima\AppData\Roaming\DXbbq3U.exe

RemoveProxy:

Emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Schritt 2
Starte noch einmal FRST.

Setze den Haken bei addition.txt und drücke auf Scan.
Wenn der Scan abgeschlossen ist, werden zwei neue Logfiles FRST.txt und addition.txt erstellt und auf dem Desktop (oder in dem Verzeichnis in dem FRST liegt) gespeichert.
Poste den Inhalt dieser Logfiles bitte hier in deinen Thread.

kriegnes

12.05.2015 21:51

Die Adware ist immernoch da.Abe der Bildschirm wird nicht mehr so extrem wie davor vollgespammt. Vielleicht ist das aber auch nur grade Zufall.
Fixlog.txt

Code:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 09-05-2015

Ran by Dima at 2015-05-12 22:38:28 Run:1

Running from C:\Users\Dima\Desktop\Downloads

Loaded Profiles: Dima (Available profiles: Dima)

Boot Mode: Normal

==============================================
 

Content of fixlist:

*****************

S2 mftb; c:\windows\mftb.exe [408576 2015-05-05] () [File not signed]

S2 ftb; c:\windows\ftb.exe [417792 2015-05-05] () [File not signed]

GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

FF Extension: 9b9d2aaaae264447a7a1633a32b19ddd - C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\Extensions\{9b9d2aaa-ae26-4447-a7a1-633a32b19ddd} [2015-05-11]

CHR Extension: (iilcekgoelpgecpjnnoikhbleipnjdhf) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\iilcekgoelpgecpjnnoikhbleipnjdhf [2015-05-11]

CHR Extension: (ljppcglljemjablfhgjdhndlpallobpl) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljppcglljemjablfhgjdhndlpallobpl [2015-05-11]

CHR Extension: (pioclpoplcdbaefihamjohnefbikjilc) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2015-05-10]

Task: {0A4748C0-2366-4860-8A2A-22C28DD4F8FB} - System32\Tasks\DXbbq3U => C:\Users\Dima\AppData\Roaming\DXbbq3U.exe [2015-04-20] () <==== ATTENTION

Task: {2D0DD0EF-6F02-4AE5-81DA-8F7F44E9D915} - System32\Tasks\Games\UpdateCheck_S-1-5-21-221738678-620704744-704572411-1000

Task: {30516B1D-88D3-4A14-AD49-963F8AA1FCEE} - System32\Tasks\vj57Vb6Rn1O3ezZ75nEr => C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe [2015-04-20] () <==== ATTENTION

Task: {36C3C2EA-97D0-4CA5-BAA5-C0D3544BE0C8} - System32\Tasks\WfqE0YhY0IU => C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe [2015-04-20] () <==== ATTENTION

Task: {691D2C19-7551-41BB-BDBA-38CC87FF53F4} - System32\Tasks\{3D950745-404D-482F-B2F2-F7290B610680} => pcalua.exe -a C:\Users\Dima\AppData\Roaming\webssearches\UninstallManager.exe -c  -ptid=irs <==== ATTENTION

Task: {D390B225-5BC3-4867-B035-FE45B82F2599} - System32\Tasks\IT7Lg6DU6w1 => C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1.exe [2015-04-20] () <==== ATTENTION

Task: C:\Windows\Tasks\DXbbq3U.job => C:\Users\Dima\AppData\Roaming\DXbbq3U.exe <==== ATTENTION

Task: C:\Windows\Tasks\IT7Lg6DU6w1.job => C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1.exe <==== ATTENTION

Task: C:\Windows\Tasks\vj57Vb6Rn1O3ezZ75nEr.job => C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe <==== ATTENTION

Task: C:\Windows\Tasks\WfqE0YhY0IU.job => C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe <==== ATTENTION

c:\windows\ftb.exe

c:\windows\mftb.exe

C:\ProgramData\ftb

C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7

C:\Windows\ftb.dat

C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1

C:\Users\Dima\AppData\Roaming\DXbbq3U

C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU

C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr

C:\Users\Dima\AppData\Roaming\WB.CFG

C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU

C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe 

C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe

C:\Users\Dima\AppData\Roaming\webssearches

C:\Users\Dima\AppData\Roaming\DXbbq3U.exe

RemoveProxy:

Emptytemp:

         

*****************
 

mftb => Service deleted successfully.

ftb => Service deleted successfully.

C:\Windows\system32\GroupPolicy\Machine => Moved successfully.

C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.

C:\Windows\SysWOW64\GroupPolicy\GPT.ini => Moved successfully.

"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.

"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.

C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\Extensions\{9b9d2aaa-ae26-4447-a7a1-633a32b19ddd} => Moved successfully.

C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\iilcekgoelpgecpjnnoikhbleipnjdhf => Moved successfully.

C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljppcglljemjablfhgjdhndlpallobpl => Moved successfully.

C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc => Moved successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0A4748C0-2366-4860-8A2A-22C28DD4F8FB} => Key not found. 

C:\Windows\System32\Tasks\DXbbq3U not found.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DXbbq3U => Key not found. 

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{2D0DD0EF-6F02-4AE5-81DA-8F7F44E9D915}" => Key deleted successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2D0DD0EF-6F02-4AE5-81DA-8F7F44E9D915}" => Key deleted successfully.

C:\Windows\System32\Tasks\Games\UpdateCheck_S-1-5-21-221738678-620704744-704572411-1000 => Moved successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Games\UpdateCheck_S-1-5-21-221738678-620704744-704572411-1000" => Key deleted successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{30516B1D-88D3-4A14-AD49-963F8AA1FCEE} => Key not found. 

C:\Windows\System32\Tasks\vj57Vb6Rn1O3ezZ75nEr not found.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\vj57Vb6Rn1O3ezZ75nEr => Key not found. 

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{36C3C2EA-97D0-4CA5-BAA5-C0D3544BE0C8} => Key not found. 

C:\Windows\System32\Tasks\WfqE0YhY0IU not found.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WfqE0YhY0IU => Key not found. 

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{691D2C19-7551-41BB-BDBA-38CC87FF53F4}" => Key deleted successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{691D2C19-7551-41BB-BDBA-38CC87FF53F4}" => Key deleted successfully.

C:\Windows\System32\Tasks\{3D950745-404D-482F-B2F2-F7290B610680} => Moved successfully.

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{3D950745-404D-482F-B2F2-F7290B610680}" => Key deleted successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D390B225-5BC3-4867-B035-FE45B82F2599} => Key not found. 

C:\Windows\System32\Tasks\IT7Lg6DU6w1 not found.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\IT7Lg6DU6w1 => Key not found. 

C:\Windows\Tasks\DXbbq3U.job not found.

C:\Windows\Tasks\IT7Lg6DU6w1.job not found.

C:\Windows\Tasks\vj57Vb6Rn1O3ezZ75nEr.job not found.

C:\Windows\Tasks\WfqE0YhY0IU.job not found.

c:\windows\ftb.exe => Moved successfully.

c:\windows\mftb.exe => Moved successfully.

C:\ProgramData\ftb => Moved successfully.

C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7 => Moved successfully.

C:\Windows\ftb.dat => Moved successfully.

C:\Users\Dima\AppData\Roaming\IT7Lg6DU6w1 => Moved successfully.

C:\Users\Dima\AppData\Roaming\DXbbq3U => Moved successfully.

C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU => Moved successfully.

C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr => Moved successfully.

C:\Users\Dima\AppData\Roaming\WB.CFG => Moved successfully.

"C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU" => File/Directory not found.

"C:\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe" => File/Directory not found.

"C:\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe" => File/Directory not found.

"C:\Users\Dima\AppData\Roaming\webssearches" => File/Directory not found.

"C:\Users\Dima\AppData\Roaming\DXbbq3U.exe" => File/Directory not found.
 

========= RemoveProxy: =========
 

"HKU\S-1-5-21-221738678-620704744-704572411-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.

HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => value deleted successfully.

HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value deleted successfully.

HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value deleted successfully.

HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value deleted successfully.

HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value deleted successfully.

HKU\S-1-5-21-221738678-620704744-704572411-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value deleted successfully.

HKU\S-1-5-21-221738678-620704744-704572411-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value deleted successfully.
 
 

========= End of RemoveProxy: =========
 

EmptyTemp: => Removed 1.4 GB temporary data.
 
 

The system needed a reboot. 
 

==== End of Fixlog 22:42:21 ====

FRST.txt

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-05-2015

Ran by Dima (administrator) on DIMAS-PC on 12-05-2015 22:51:42

Running from C:\Users\Dima\Desktop\Downloads

Loaded Profiles: Dima (Available profiles: Dima)

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: FF)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe

(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

(Microsoft Corporation) C:\Windows\System32\msiexec.exe

(Microsoft Corporation) C:\Windows\System32\mqsvc.exe

(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe

(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 2\creator-ws.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry.exe

(Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

(Akamai Technologies, Inc.) C:\Users\Dima\AppData\Local\Akamai\netsession_win.exe

(Dxtory Software) C:\Program Files (x86)\ExKode\Dxtory2.0\UpdateChecker.exe

(Akamai Technologies, Inc.) C:\Users\Dima\AppData\Local\Akamai\netsession_win.exe

(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe

(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe

(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe

(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

(AVM Berlin) C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe

(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Don HO don.h@free.fr) C:\Program Files (x86)\Notepad++\notepad++.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe

(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe

(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe

(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11785832 2011-03-10] (Realtek Semiconductor)

HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1332296 2015-01-30] (Microsoft Corporation)

HKLM\...\Run: [3D BubbleSound] => "C:\Program Files\BubbleSound\3D BubbleSound.exe"

HKLM-x32\...\Run: [SuiteTray] => C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [340848 2011-04-02] (Egis Technology Inc.)

HKLM-x32\...\Run: [EgisTecPMMUpdate] => C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [408432 2011-03-29] (Egis Technology Inc.)

HKLM-x32\...\Run: [EgisUpdate] => C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [202608 2011-03-29] (Egis Technology Inc.)

HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [297280 2011-04-24] (NTI Corporation)

HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)

HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55568 2015-03-25] (Raptr, Inc)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-11-17] (DivX, LLC)

HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-03-30] (LogMeIn Inc.)

HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [933888 2012-08-21] (AVM Berlin)

Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2888384 2015-05-12] (Valve Corporation)

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3619160 2015-01-28] (Electronic Arts)

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Dima\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-30] (Akamai Technologies, Inc.)

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Dxtory Update Checker 2.0] => C:\Program Files (x86)\ExKode\Dxtory2.0\UpdateChecker.exe [93696 2010-10-17] (Dxtory Software)

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [\\DIMA-PC\EPSON SX210 Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFDE.EXE [223232 2008-11-05] (SEIKO EPSON CORPORATION)

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [GoogleChromeAutoLaunch_74AB638E1E27FA41128D672CA46F567E] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [812872 2015-04-28] (Google Inc.)

HKU\S-1-5-18\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2014-08-23]

ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)

BootExecute: autocheck autochk * sdnclean64.exe
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome

HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll No File

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28] (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation)

BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)

BHO-x32: PDF Architect Helper -> {691B33B0-B86E-47F3-81C7-56E4FE3B929C} -> C:\Program Files (x86)\PDF Architect 2\creator-ie-helper.dll [2014-10-10] (pdfforge GmbH)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28] (Oracle Corporation)

BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation)

Toolbar: HKLM-x32 - PDF Architect Toolbar - {DEEB13D7-CEA9-45FB-B77C-E039BEC85221} - C:\Program Files (x86)\PDF Architect 2\creator-ie-plugin.dll [2014-10-10] (pdfforge GmbH)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
 

FireFox:

========

FF ProfilePath: C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)

FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll [2014-09-01] (EA Digital Illusions CE AB)

FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-28] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2013-09-08] (Microsoft Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-11-12] (VideoLAN)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll [2014-06-24] (Adobe Systems, Inc.)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)

FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2014-11-21] (DivX, LLC)

FF Plugin-x32: @esn/npbattlelog,version=2.3.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll No File

FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll [2014-09-01] (EA Digital Illusions CE AB)

FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-28] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation)

FF Plugin-x32: @mcafee.com/SAFFPlugin -> C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll No File

FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2013-09-08] (Microsoft Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)

FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npnxgameEU.dll [2014-11-12] (Nexon)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)

FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll [2014-10-10] (pdfforge GmbH)

FF Plugin HKU\S-1-5-21-221738678-620704744-704572411-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Dima\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS)

FF Extension: jid0XZn6pYCdV3ANrfYigxlyyGDrxAMjetpack - C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\Extensions\jid0-XZn6pYCdV3ANrfYigxlyyGDrxAM@jetpack [2015-05-11]

FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor

FF HKLM-x32\...\Firefox\Extensions: [pdf_architect_2_conv@pdfarchitect.org] - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension

FF Extension: PDF Architect 2 Creator - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension [2015-02-26]

FF HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi

FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
 

Chrome: 

=======

CHR Profile: C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Slides) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-05-08]

CHR Extension: (Google Docs) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-05-08]

CHR Extension: (Google Drive) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-05-08]

CHR Extension: (YouTube) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-05-08]

CHR Extension: (Google Search) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-05-08]

CHR Extension: (Google Sheets) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-05-08]

CHR Extension: (Bookmark Manager) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-08]

CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-08]

CHR Extension: (Google Wallet) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]

CHR Extension: (Gmail) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-08]
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [237864 2015-03-21] (EasyAntiCheat Ltd)

R2 GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [29696 2011-05-26] (Acer Incorporated) [File not signed]

U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2015-02-16] (Hi-Rez Studios) [File not signed]

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-03-30] (LogMeIn, Inc.)

S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)

R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2015-01-30] (Microsoft Corporation)

R2 MSMQ; C:\Windows\system32\mqsvc.exe [9216 2009-07-14] (Microsoft Corporation)

R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366512 2015-01-30] (Microsoft Corporation)

S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5128944 2013-11-19] (INCA Internet Co., Ltd.) [File not signed]

R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256832 2011-04-24] (NTI Corporation)

S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910640 2015-03-02] (Electronic Arts)

S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-10-10] (pdfforge GmbH)

R2 PDF Architect 2 Creator; C:\Program Files (x86)\PDF Architect 2\creator-ws.exe [738856 2014-10-10] (pdfforge GmbH)

S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-10-10] (pdfforge GmbH)

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-10-11] ()

R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)

R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)

R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)

S3 Survarium-Steam Update Service; C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium_service.exe [76408 2015-04-03] ()

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

S2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2012-04-25] (AVM Berlin)

R3 fwlanusb5; C:\Windows\System32\DRIVERS\fwlanusb5.sys [982784 2012-08-21] (AVM GmbH)

S3 GameKB; C:\Windows\System32\drivers\GameKB.sys [27648 2012-05-11] () [File not signed]

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [274696 2014-11-15] (Microsoft Corporation)

R3 MQAC; C:\Windows\System32\drivers\mqac.sys [189440 2009-07-14] (Microsoft Corporation)

R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124560 2014-11-15] (Microsoft Corporation)

S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-05-17] (Anchorfree Inc.)

S3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2014-07-02] (SplitmediaLabs Limited)

S3 BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [X]

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

S3 hxsyol; \??\C:\AeriaGames\AuraKingdom\avital\hxsy64.sys [X]

S1 qrnfd_1_10_0_13; system32\drivers\qrnfd_1_10_0_13.sys [X]

S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-05-12 22:45 - 2015-05-12 22:45 - 00000008 __RSH () C:\ProgramData\ntuser.pol

2015-05-12 19:49 - 2015-05-12 19:49 - 00021496 _____ () C:\Users\Dima\Desktop\Tobi ist sexy.odt

2015-05-12 13:00 - 2015-05-12 13:00 - 00030620 _____ () C:\ComboFix.txt

2015-05-12 12:46 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe

2015-05-12 12:46 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe

2015-05-12 12:46 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2015-05-12 12:46 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2015-05-12 12:46 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2015-05-12 12:46 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe

2015-05-12 12:46 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe

2015-05-12 12:46 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe

2015-05-12 12:41 - 2015-05-12 13:00 - 00000000 ____D () C:\Qoobox

2015-05-12 12:40 - 2015-05-12 12:59 - 00000000 ____D () C:\Windows\erdnt

2015-05-12 12:38 - 2015-05-12 12:39 - 05623215 ____R (Swearware) C:\Users\Dima\Desktop\ComboFix.exe

2015-05-11 23:00 - 2015-05-12 16:13 - 00000000 ____D () C:\Users\Dima\AppData\Local\Eclipse

2015-05-11 22:03 - 2015-05-12 22:51 - 00000000 ____D () C:\FRST

2015-05-11 20:59 - 2015-05-11 20:59 - 00000000 ____D () C:\Users\Dima\AppData\Local\My Games

2015-05-10 18:44 - 2015-05-10 18:44 - 00000000 ____D () C:\Users\Dima\AppData\Local\Origin

2015-05-10 18:05 - 2015-05-10 18:05 - 00001117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2015-05-10 18:05 - 2015-05-10 18:05 - 00001105 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk

2015-05-10 18:05 - 2015-05-10 18:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2015-05-10 16:15 - 2015-05-10 16:15 - 00000000 ____D () C:\Users\Dima\AppData\Local\EgisTec IPS

2015-05-10 16:14 - 2015-05-10 16:14 - 00066432 _____ () C:\Users\Dima\AppData\Local\GDIPFONTCACHEV1.DAT

2015-05-10 16:13 - 2015-05-12 22:47 - 00000000 ____D () C:\Users\Dima\AppData\Local\LogMeIn Hamachi

2015-05-10 16:13 - 2015-05-10 16:13 - 00000000 ____D () C:\Users\Dima\AppData\Local\LogMeIn

2015-05-10 16:12 - 2015-05-10 16:12 - 00000000 ____D () C:\Users\Dima\AppData\Local\VirtualStore

2015-05-10 16:07 - 2015-05-11 23:41 - 00000000 ____D () C:\AdwCleaner

2015-05-08 20:43 - 2015-05-08 20:43 - 00000000 ____D () C:\Users\Dima\AppData\Local\openvr

2015-05-08 20:42 - 2015-05-08 20:42 - 00000000 ____D () C:\Users\Dima\AppData\Local\Steam

2015-05-08 19:44 - 2015-05-08 19:44 - 00000000 ____D () C:\Users\Dima\AppData\Local\Macromedia

2015-05-08 19:43 - 2015-05-09 22:34 - 00000000 ____D () C:\Users\Dima\AppData\Local\Mozilla

2015-05-08 18:41 - 2015-05-08 18:41 - 00000000 ____D () C:\Users\Dima\AppData\Local\ATI

2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieUserList

2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieSiteList

2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieBrowserModeList

2015-05-08 14:49 - 2015-05-08 14:49 - 00000000 ____D () C:\ProgramData\Kikblaster

2015-05-08 14:33 - 2015-05-08 19:54 - 00000000 ____D () C:\Program Files (x86)\Edu App

2015-05-08 14:20 - 2015-05-08 14:52 - 00000000 ____D () C:\Users\Dima\AppData\Local\00000000-1431094823-0000-0000-D43D7EBF2FB4

2015-05-08 14:16 - 2015-05-08 14:16 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webTinstMKTN84_01009.Wdf

2015-05-04 20:34 - 2015-05-04 20:34 - 00059505 _____ () C:\Users\Dima\Documents\ts3_clientui-win64-1407159763-2015-05-04 20_34_27.843240.dmp

2015-04-26 16:02 - 2015-04-26 16:02 - 00000000 ____D () C:\Users\Dima\Documents\DFO

2015-04-25 20:20 - 2015-04-25 20:20 - 00001734 _____ () C:\Users\Public\Desktop\Dungeon Fighter Online.lnk

2015-04-25 20:20 - 2015-04-25 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\neople

2015-04-25 20:20 - 2015-04-25 20:20 - 00000000 ____D () C:\Neople

2015-04-25 15:57 - 2015-04-26 13:15 - 00000000 ____D () C:\Users\Dima\Documents\DragonNest

2015-04-24 12:20 - 2015-05-10 18:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2015-04-20 13:37 - 2015-04-20 13:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FRITZ!WLAN

2015-04-20 13:37 - 2015-04-20 13:37 - 00000000 ____D () C:\Program Files (x86)\avmwlanstick

2015-04-20 13:36 - 2015-04-20 13:36 - 00000000 ____D () C:\Users\Dima\AVM_Driver

2015-04-20 13:36 - 2012-04-25 01:00 - 00014120 _____ (AVM Berlin) C:\Windows\system32\Drivers\avmeject.sys

2015-04-20 00:51 - 2015-04-20 00:51 - 00002956 _____ () C:\Windows\avmacc1.log

2015-04-20 00:51 - 2012-07-12 02:00 - 00480632 _____ (AVM Berlin) C:\Windows\instwcli.dex

2015-04-20 00:45 - 2015-04-20 00:45 - 00003216 _____ () C:\Windows\System32\Tasks\{35EE529B-2794-4708-8B79-567E126A4A7F}

2015-04-20 00:05 - 2015-04-20 13:36 - 00001479 _____ () C:\Windows\avmsetup.log

2015-04-20 00:05 - 2015-04-20 13:36 - 00000490 _____ () C:\Windows\avmadd32.log

2015-04-20 00:05 - 2015-04-20 00:54 - 00197887 _____ () C:\Windows\avmacc.log

2015-04-20 00:05 - 2015-04-20 00:44 - 00000000 ____D () C:\Program Files (x86)\AVM_update

2015-04-19 20:43 - 2015-04-19 20:43 - 00001906 _____ () C:\Users\Dima\Desktop\EliteDekaron.lnk

2015-04-19 20:43 - 2015-04-19 20:43 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Elite Dekaron

2015-04-19 20:40 - 2015-04-19 21:03 - 00000000 ____D () C:\Program Files (x86)\Elite Dekaron

2015-04-19 20:40 - 2015-04-19 20:40 - 00000000 ____D () C:\Windows\Elite Dekaron

2015-04-16 16:36 - 2015-04-16 16:43 - 00000000 ___SD () C:\Windows\system32\GWX

2015-04-16 16:36 - 2015-04-16 16:36 - 00000000 ___SD () C:\Windows\SysWOW64\GWX

2015-04-15 21:14 - 2015-04-15 21:14 - 18178736 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe

2015-04-14 20:39 - 2015-03-25 05:24 - 03298816 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 02553856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2015-04-14 20:39 - 2015-03-25 05:23 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-04-14 20:39 - 2015-03-25 05:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-04-14 20:39 - 2015-03-25 05:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll

2015-04-14 20:39 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2015-04-14 20:39 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2015-04-14 20:39 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2015-04-14 20:39 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2015-04-14 20:39 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2015-04-14 20:39 - 2015-03-23 05:25 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2015-04-14 20:39 - 2015-03-23 05:25 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2015-04-14 20:39 - 2015-03-23 05:24 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2015-04-14 20:39 - 2015-03-23 05:24 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2015-04-14 20:39 - 2015-03-23 05:24 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2015-04-14 20:39 - 2015-03-23 05:24 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2015-04-14 20:39 - 2015-03-23 05:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

2015-04-14 20:39 - 2015-03-23 05:17 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2015-04-14 20:39 - 2015-03-17 07:22 - 05557696 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-04-14 20:39 - 2015-03-17 07:22 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-04-14 20:39 - 2015-03-17 07:22 - 00095672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-04-14 20:39 - 2015-03-17 07:19 - 01727904 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2015-04-14 20:39 - 2015-03-17 07:17 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2015-04-14 20:39 - 2015-03-17 07:17 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-04-14 20:39 - 2015-03-17 07:16 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2015-04-14 20:39 - 2015-03-17 07:16 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2015-04-14 20:39 - 2015-03-17 07:15 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2015-04-14 20:39 - 2015-03-17 07:15 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-04-14 20:39 - 2015-03-17 07:15 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-04-14 20:39 - 2015-03-17 07:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2015-04-14 20:39 - 2015-03-17 07:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2015-04-14 20:39 - 2015-03-17 06:59 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2015-04-14 20:39 - 2015-03-17 06:56 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2015-04-14 20:39 - 2015-03-17 06:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2015-04-14 20:39 - 2015-03-17 06:56 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2015-04-14 20:39 - 2015-03-10 05:25 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2015-04-14 20:39 - 2015-03-10 05:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2015-04-14 20:39 - 2015-03-10 05:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2015-04-14 20:39 - 2015-03-10 05:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2015-04-14 20:39 - 2015-03-05 07:12 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2015-04-14 20:39 - 2015-03-05 06:05 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2015-04-14 20:38 - 2015-03-17 07:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2015-04-14 20:38 - 2015-03-17 07:16 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-04-14 20:38 - 2015-03-17 07:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-04-14 20:38 - 2015-03-17 07:13 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-04-14 20:38 - 2015-03-17 07:13 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2015-04-14 20:38 - 2015-03-17 06:57 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2015-04-14 20:38 - 2015-03-17 06:56 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2015-04-14 20:38 - 2015-03-17 06:56 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2015-04-14 20:38 - 2015-03-17 06:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2015-04-14 20:38 - 2015-03-17 06:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2015-04-14 20:38 - 2015-03-17 06:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2015-04-14 20:38 - 2015-03-17 06:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 05:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2015-04-14 20:38 - 2015-03-17 05:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2015-04-14 20:38 - 2015-03-17 05:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 05:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2015-04-14 20:38 - 2015-03-04 06:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys

2015-04-14 20:38 - 2015-03-04 06:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll

2015-04-14 20:38 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll

2015-04-14 20:38 - 2015-02-25 05:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-05-12 22:52 - 2013-08-15 21:16 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-05-12 22:51 - 2013-08-09 06:11 - 00699416 _____ () C:\Windows\system32\perfh007.dat

2015-05-12 22:51 - 2013-08-09 06:11 - 00149556 _____ () C:\Windows\system32\perfc007.dat

2015-05-12 22:51 - 2013-08-08 20:19 - 01872695 _____ () C:\Windows\WindowsUpdate.log

2015-05-12 22:51 - 2009-07-14 07:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-05-12 22:47 - 2014-01-07 19:34 - 01850368 ___SH () C:\Users\Dima\Desktop\Thumbs.db

2015-05-12 22:47 - 2013-11-06 17:55 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Raptr

2015-05-12 22:47 - 2013-08-17 15:43 - 00000000 ____D () C:\Program Files (x86)\Origin

2015-05-12 22:45 - 2013-08-15 21:16 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-05-12 22:44 - 2010-11-21 05:47 - 00400638 _____ () C:\Windows\PFRO.log

2015-05-12 22:44 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-05-12 22:44 - 2009-07-14 06:51 - 00121089 _____ () C:\Windows\setupact.log

2015-05-12 22:38 - 2014-08-24 20:42 - 00000000 ____D () C:\Windows\System32\Tasks\Games

2015-05-12 22:38 - 2013-09-21 18:06 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\TS3Client

2015-05-12 22:38 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy

2015-05-12 22:38 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy

2015-05-12 22:14 - 2013-08-15 14:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-05-12 21:00 - 2013-08-08 21:08 - 00000000 ____D () C:\Program Files (x86)\Steam

2015-05-12 20:59 - 2014-08-09 17:35 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\.minecraft

2015-05-12 16:12 - 2015-04-10 17:41 - 00000000 ____D () C:\Users\Dima\Desktop\eclipse

2015-05-12 13:00 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default

2015-05-12 12:57 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini

2015-05-12 12:41 - 2009-07-14 06:45 - 00028928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-05-12 12:41 - 2009-07-14 06:45 - 00028928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-05-12 12:40 - 2013-10-04 17:11 - 00000000 ____D () C:\ProgramData\Package Cache

2015-05-11 23:42 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2015-05-10 18:44 - 2013-08-17 15:43 - 00000000 ____D () C:\ProgramData\Origin

2015-05-10 18:19 - 2014-11-14 00:10 - 00000000 ____D () C:\Users\Dima\Desktop\lqobqwkv.default

2015-05-10 16:42 - 2014-10-05 15:02 - 00000000 ____D () C:\Users\Dima\AppData\Local\Adobe

2015-05-10 16:15 - 2013-12-20 13:37 - 00000000 ____D () C:\Users\Dima\AppData\Local\Akamai

2015-05-10 16:12 - 2013-08-08 15:36 - 00001419 _____ () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2015-05-10 16:10 - 2014-11-26 23:57 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WorldofTanks

2015-05-08 21:41 - 2013-12-30 15:03 - 00000000 ____D () C:\Program Files (x86)\7-Zip

2015-05-08 21:39 - 2013-12-18 15:08 - 00000000 ____D () C:\Program Files (x86)\ACASystems

2015-05-08 18:40 - 2013-11-02 02:16 - 00000000 ____D () C:\Users\Dima\Desktop\Neuer Ordner

2015-05-08 18:40 - 2013-08-15 21:16 - 00000000 ____D () C:\Users\Dima\AppData\Local\Google

2015-05-08 14:52 - 2014-11-30 22:57 - 00000000 ____D () C:\Users\Dima\AppData\Local\gegl-0.2

2015-05-08 14:52 - 2013-12-14 00:39 - 00000000 ____D () C:\Users\Dima\AppData\Local\Battle.net

2015-05-08 13:16 - 2013-08-15 15:52 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Skype

2015-05-02 22:30 - 2014-11-23 16:19 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\.technic

2015-05-02 22:30 - 2014-08-25 02:48 - 04697768 _____ () C:\Users\Dima\Desktop\TechnicLauncher.exe

2015-04-27 16:21 - 2015-02-28 15:34 - 00000000 ____D () C:\Users\Dima\Desktop\Bewerbung

2015-04-20 13:37 - 2014-02-12 19:55 - 00011424 _____ () C:\Windows\avmfwlanci.log

2015-04-20 13:37 - 2014-02-12 19:55 - 00011167 _____ () C:\Windows\AVMInstall.Log

2015-04-20 13:36 - 2014-02-12 19:54 - 00000000 ____D () C:\Windows\AVM_Driver

2015-04-20 13:36 - 2013-08-08 15:34 - 00000000 ____D () C:\Users\Dima

2015-04-20 00:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF

2015-04-18 17:38 - 2013-09-13 14:13 - 00000000 ____D () C:\Program Files (x86)\Raptr

2015-04-18 12:26 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat

2015-04-16 16:36 - 2014-12-22 19:12 - 00000000 ____D () C:\Windows\system32\appraiser

2015-04-16 16:36 - 2014-05-01 14:38 - 00000000 ___SD () C:\Windows\system32\CompatTel

2015-04-16 16:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2015-04-16 12:44 - 2014-02-26 15:58 - 00002022 _____ () C:\Users\Dima\monsterhunter.txt

2015-04-15 21:15 - 2013-08-15 14:45 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-04-15 21:15 - 2013-08-15 14:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2015-04-15 21:15 - 2011-07-25 05:19 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-04-15 12:54 - 2013-09-09 16:14 - 01593956 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2015-04-15 12:52 - 2014-10-06 19:31 - 00000000 ___RD () C:\Program Files (x86)\Skype

2015-04-15 12:52 - 2011-07-25 05:01 - 00000000 ____D () C:\ProgramData\Skype

2015-04-15 12:51 - 2013-11-11 13:25 - 00000000 ____D () C:\Windows\system32\MRT

2015-04-15 12:45 - 2013-11-11 13:25 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
 

==================== Files in the root of some directories =======
 

2013-11-09 21:45 - 2013-11-09 21:45 - 0000004 _____ () C:\Users\Dima\AppData\Roaming\steam_md4.dat

2013-08-08 21:05 - 2013-08-08 21:05 - 0000654 _____ () C:\ProgramData\ArcadeDeluxe5.log
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2011-07-25 04:31
 

==================== End Of Log ============================

--- --- ---

kriegnes

12.05.2015 21:54

Additions.txt

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-05-2015

Ran by Dima at 2015-05-12 22:52:27

Running from C:\Users\Dima\Desktop\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Accounts: =============================
 

Administrator (S-1-5-21-221738678-620704744-704572411-500 - Administrator - Disabled)

Dima (S-1-5-21-221738678-620704744-704572411-1000 - Administrator - Enabled) => C:\Users\Dima

Gast (S-1-5-21-221738678-620704744-704572411-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-221738678-620704744-704572411-1002 - Limited - Enabled)
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}

AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )

ACA Screen Recorder 5.30 (HKLM-x32\...\ACAScreenRecorder_EN_is1) (Version: 5.30 - ACA Systems)

Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.99 - NTI Corporation)

Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3502 - Acer Incorporated)

Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3502 - Acer Incorporated)

Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0517.2011 - Acer Incorporated)

Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)

Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)

Adobe Reader X (10.1.13) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.13 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.)

Agarest: Generations of War (HKLM-x32\...\Steam App 237890) (Version:  - Ghostlight)

Age of Empires II: HD Edition (HKLM-x32\...\Steam App 221380) (Version:  - Hidden Path Entertainment, Ensemble Studios)

AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)

Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.36 - Atheros Communications Inc.)

Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team)

Avidemux 2.6 - 64bits (HKLM-x32\...\Avidemux 2.6 - 64bits (64-bit)) (Version: 2.6.8.9046 - )

AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version: 1.2.0.0 - AVM Berlin)

Backup Manager V3 (x32 Version: 3.0.0.99 - NTI Corporation) Hidden

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)

Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.3.2.15221 - Electronic Arts)

Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.5.1 - EA Digital Illusions CE AB)

Borderlands 2 (HKLM-x32\...\Steam App 49520) (Version:  - Gearbox Software)

Call of Duty 4: Modern Warfare (HKLM-x32\...\Steam App 7940) (Version:  - Infinity Ward)

Call of Duty: Black Ops II - Multiplayer (HKLM-x32\...\Steam App 202990) (Version:  - )

Call of Duty: Black Ops II - Zombies (HKLM-x32\...\Steam App 212910) (Version:  - )

Call of Duty: Black Ops II (HKLM-x32\...\Steam App 202970) (Version:  - Treyarch)

Call of Duty: Ghosts - Multiplayer (HKLM-x32\...\Steam App 209170) (Version:  - )

Call of Duty: Ghosts (HKLM-x32\...\Steam App 209160) (Version:  - Infinity Ward)

Call of Duty: Modern Warfare 3 - Multiplayer (HKLM-x32\...\Steam App 42690) (Version:  - Infinity Ward)

Call of Duty: Modern Warfare 3 (HKLM-x32\...\Steam App 42680) (Version:  - Infinity Ward)

Castle Crashers (HKLM-x32\...\Steam App 204360) (Version:  - The Behemoth)

Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)

Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)

Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)

clear.fi Client (HKLM-x32\...\{43AAE145-83CF-4C96-9A5E-756CEFCE879F}) (Version: 1.00.3500 - Acer Incorporated)

Combined Community Codec Pack 2013-11-27 (HKLM-x32\...\Combined Community Codec Pack_is1) (Version: 2013.11.27.0 - CCCP Project)

Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)

Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version:  - Valve)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Darksiders II (HKLM-x32\...\Steam App 50650) (Version:  - Vigil Games)

DFO (HKLM-x32\...\{C1E5C0FB-527E-42C6-BCA0-0A37A6124AE4}) (Version: 1.01.0000 - Neople)

DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.7.0.64 - DivX, LLC)

Dota 2 (HKLM-x32\...\Steam App 570) (Version:  - Valve)

Dragon Nest Europe (HKLM-x32\...\Steam App 258700) (Version:  - Eyedentity Games)

Dungeon Defenders (HKLM-x32\...\Steam App 65800) (Version:  - Trendy Entertainment)

Dxtory version 2.0.128 (HKLM-x32\...\Dxtory2.0_is1) (Version: 2.0.128 - ExKode Co. Ltd.)

Elite Dekaron (HKLM-x32\...\Elite Dekaron1.0) (Version: 1.0 - EliteKingdoms)

EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - )

Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )

Free YouTube to MP3 Converter version 3.12.20.1230 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.20.1230 - DVDVideoSoft Ltd.)

Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Gameforge Live 2.0.5 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.5 - Gameforge)

Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Facepunch Studios)

GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)

Glyph (HKLM-x32\...\Glyph) (Version:  - Trion Worlds, Inc.)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.135 - Google Inc.)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden

Gumboy Tournament (HKLM-x32\...\Steam App 11230) (Version:  - CINEMAX, s.r.o.)

Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)

Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)

Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.2.1004 - Intel Corporation)

Java 7 Update 75 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417075FF}) (Version: 7.0.750 - Oracle)

Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)

Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)

Java SE Development Kit 7 Update 75 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170750}) (Version: 1.7.0.750 - Oracle)

Java SE Development Kit 8 Update 25 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180250}) (Version: 8.0.250.18 - Oracle Corporation)

Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )

League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden

Loadout (HKLM-x32\...\Steam App 208090) (Version:  - Edge of Reality)

LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.328 - LogMeIn, Inc.)

LogMeIn Hamachi (x32 Version: 2.2.0.328 - LogMeIn, Inc.) Hidden

LOLReplay (HKLM-x32\...\LOLReplay) (Version: 0.8.9.11 - www.leaguereplays.com)

Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)

McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)

Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.7.205.0 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)

Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)

Might & Magic: Duel of Champions (HKLM-x32\...\Steam App 256410) (Version:  - Ubisoft Quebec)

MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)

Mozilla Firefox 37.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.2 (x86 de)) (Version: 37.0.2 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.2 - Mozilla)

MyWinLocker (Version: 4.0.14.25 - Egis Technology Inc.) Hidden

MyWinLocker 4 (x32 Version: 4.0.14.25 - Egis Technology Inc.) Hidden

MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.15 - Egis Technology Inc.)

MyWinLocker Suite (x32 Version: 4.0.14.15 - Egis Technology Inc.) Hidden

Neverwinter (HKLM-x32\...\Steam App 109600) (Version:  - Cryptic Studios)

newsXpresso (HKLM-x32\...\InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}) (Version: 1.0.0.40 - esobi Inc.)

newsXpresso (x32 Version: 1.0.0.40 - esobi Inc.) Hidden

Nosgoth (HKLM-x32\...\Steam App 200110) (Version: 150120.100528 - Square Enix Ltd)

Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)

NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.8942 - NTI Corporation)

NTI Media Maker 9 (x32 Version: 9.0.2.8942 - NTI Corporation) Hidden

NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)

Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )

OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)

Origin (HKLM-x32\...\Origin) (Version: 9.3.1.4482 - Electronic Arts, Inc.)

paint.net (HKLM\...\{141BA46D-2D1F-4DA6-9448-B847334585C0}) (Version: 4.0.4 - dotPDN LLC)

PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.51.17865 - pdfforge GmbH)

PDF Architect 2 Create Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden

PDF Architect 2 Edit Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden

PDF Architect 2 View Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden

PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.0.2 - pdfforge)

Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Pokemon Online 2.4.1 (HKLM-x32\...\{2C08D7E7-9EE1-4A08-AFE0-745F02DCD6A4}_is1) (Version:  - Dreambelievers)

Pokémon Trading Card Game Online (HKLM-x32\...\{B0952280-3DF0-4AA9-9599-092D5E8D36AD}) (Version: 2.24.1 - The Pokémon Company International)

Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)

Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Ralink RT2860 Wireless LAN Card (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 1.5.6.0 - Ralink)

Raptr (HKLM-x32\...\Raptr) (Version:  - )

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6329 - Realtek Semiconductor Corp.)

Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30123 - Realtek Semiconductor Corp.)

Serious Sam 3: BFE (HKLM-x32\...\Steam App 41070) (Version:  - Croteam)

Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden

Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden

Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version:  - 2K Games, Inc.)

SIW 2013 Home Edition (HKLM-x32\...\{AB67580-257C-45FF-B8F4-C8C30682091A}_is1) (Version: 2013.05.14 - Topala Software Solutions)

Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)

Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 2.0.2574.0 - Hi-Rez Studios)

Source SDK Base 2006 (HKLM-x32\...\Steam App 215) (Version:  - Valve)

SpellForce (HKLM-x32\...\SpellForce) (Version:  - )

Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)

Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)

Survarium (HKLM-x32\...\Steam App 355840) (Version:  - Vostok Games)

Survarium-Steam (HKLM-x32\...\{A3D9343D-77CD-4bf4-A47A-F87B3BE985B4}_is1) (Version: 0.27d - )

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

System Requirements Lab CYRI (HKLM-x32\...\{E362724E-9320-4946-AF34-874E7B6B2927}) (Version: 6.0.7.0 - Husdawg, LLC)

Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)

TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)

TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.12 - TeamSpeak Systems GmbH)

TIPP10 Version 2.1.0 (HKLM-x32\...\TIPP10_is1) (Version:  - (c) 2006-2011, Tom Thielicke IT Solutions)

Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel)

Unity (HKLM-x32\...\Unity) (Version: 4.6.1f1 - Unity Technologies ApS)

VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden

Vindictus EU (HKLM-x32\...\Vindictus EU) (Version:  - )

VLC media player 2.1.1 (HKLM\...\VLC media player) (Version: 2.1.1 - VideoLAN)

Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3503 - Acer Incorporated)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)

WinRAR 5.00 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)

YGOPro DevPro Version 1.9.7 r2 (HKLM-x32\...\{3CF2634F-3F38-4DD3-9201-CB2FE6B5FF23}_is1) (Version: 1.9.7 r2 - YGOPro DevPro Online)

Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden

Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
 

==================== Restore Points  =========================
 

01-05-2015 14:43:01 Windows Update

05-05-2015 16:18:48 Windows Update

08-05-2015 20:00:02 Windows Update

12-05-2015 12:46:24 ComboFix created restore point
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 04:34 - 2014-09-21 15:27 - 00000860 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost

::1 localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {15731A0E-D960-4E94-9E60-DACD297E3193} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2014-06-24] (Safer-Networking Ltd.)

Task: {1860A38F-8939-478A-BF5C-F565A480142F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2014-06-24] (Safer-Networking Ltd.)

Task: {1D4EC24B-2C6F-4F04-8F3E-6AA90BAED5D2} - System32\Tasks\{A10EA19B-8B09-454D-B360-CA92A1D17DBD} => pcalua.exe -a C:\Users\Dima\Desktop\InstallIW4M(1).exe -d C:\Users\Dima\Desktop

Task: {276BF61D-668E-4313-BA37-702F352555A9} - System32\Tasks\Adobe Reader Speed Launcher => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2014-12-03] (Adobe Systems Incorporated)

Task: {2B46497E-052E-4882-879A-2CED38AE75F5} - System32\Tasks\{6B05723E-8DB6-495D-A0DA-ECA4FC2E26D7} => C:\Program Files (x86)\WeGame\wegame.exe

Task: {54E1645E-EDBD-4280-B2FF-13D3BBEC2047} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-07] (Google Inc.)

Task: {5975092F-1EFE-4D6C-A337-025C0E67059F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)

Task: {5B6F25FF-1AB6-4306-AF5F-150B752505F5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-07] (Google Inc.)

Task: {ADDA105F-5269-41EB-BE7A-FADC87447563} - System32\Tasks\{153E695E-4162-4A7B-8004-BCBAF85CE618} => pcalua.exe -a C:\Users\Dima\AVM_Driver\FWLAN\setup.exe -d C:\Users\Dima\AVM_Driver\FWLAN

Task: {B0E56CFC-54EA-49E5-AEE6-544EE780094B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15] (Adobe Systems Incorporated)

Task: {C4630A3F-B5F1-4159-9F2B-8EF55530D99B} - System32\Tasks\Adobe ARM => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)

Task: {C618B53C-0F59-4601-8B52-1D81C275086B} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)

Task: {C7F562CC-8836-44FC-8085-91BD492874BE} - System32\Tasks\{35EE529B-2794-4708-8B79-567E126A4A7F} => pcalua.exe -a C:\Users\Dima\Desktop\Downloads\avm_fritz!wlan_usb_stick_x64_build_100906.exe -d C:\Users\Dima\Desktop\Downloads

Task: {D021483F-10CB-41B4-8816-109CDA214F59} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)

Task: {D216A597-8DFB-49AE-BB0C-69D9574172C8} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {D9E5BB12-DEEF-4673-A22C-7A60AF737292} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {E66F9E32-E05D-43A5-8A61-1251E464ABF9} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) ==============
 

2013-09-02 13:14 - 2014-10-11 21:02 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe

2014-01-10 07:26 - 2014-01-10 07:26 - 01861968 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

2011-04-24 03:29 - 2011-04-24 03:29 - 00465640 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll

2011-04-24 03:29 - 2011-04-24 03:29 - 01081664 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll

2011-04-24 03:29 - 2011-04-24 03:29 - 00125760 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll

2014-11-09 03:42 - 2014-05-13 13:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl

2014-11-09 03:42 - 2014-05-13 13:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl

2014-11-09 03:42 - 2014-05-13 13:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl

2014-11-09 03:42 - 2012-08-23 11:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll

2014-11-09 03:42 - 2012-04-03 18:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll

2014-01-10 07:28 - 2014-01-10 07:28 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll

2014-10-21 22:56 - 2014-10-21 22:56 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\9b1cac8d98bd69d3e56a26ff2f96f266\IsdiInterop.ni.dll

2011-07-25 04:42 - 2011-01-13 02:56 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

2011-07-18 23:07 - 2011-07-18 23:07 - 00014336 _____ () C:\Program Files (x86)\Notepad++\plugins\NppExport.dll

2014-01-07 01:42 - 2014-01-07 01:42 - 01611264 _____ () C:\Program Files (x86)\Notepad++\plugins\NppFTP.dll

2015-04-15 21:14 - 2015-04-15 21:14 - 16863920 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll

2010-11-23 00:56 - 2010-11-23 00:56 - 00087040 _____ () C:\Program Files (x86)\Raptr\_ctypes.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00043008 _____ () C:\Program Files (x86)\Raptr\_socket.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00805376 _____ () C:\Program Files (x86)\Raptr\_ssl.pyd

2014-05-14 01:26 - 2014-05-14 01:26 - 05812736 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtGui.pyd

2014-05-14 01:26 - 2014-05-14 01:26 - 00067584 _____ () C:\Program Files (x86)\Raptr\sip.pyd

2014-05-14 01:26 - 2014-05-14 01:26 - 01662464 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtCore.pyd

2014-05-14 01:26 - 2014-05-14 01:26 - 00494592 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtNetwork.pyd

2010-11-23 00:57 - 2010-11-23 00:57 - 00096256 _____ () C:\Program Files (x86)\Raptr\win32api.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00110592 _____ () C:\Program Files (x86)\Raptr\pywintypes26.dll

2010-11-23 00:56 - 2010-11-23 00:56 - 00010240 _____ () C:\Program Files (x86)\Raptr\select.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00356864 _____ () C:\Program Files (x86)\Raptr\_hashlib.pyd

2010-11-23 00:57 - 2010-11-23 00:57 - 00036352 _____ () C:\Program Files (x86)\Raptr\win32process.pyd

2010-11-23 00:57 - 2010-11-23 00:57 - 00111104 _____ () C:\Program Files (x86)\Raptr\win32file.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00044544 _____ () C:\Program Files (x86)\Raptr\_sqlite3.pyd

2011-02-15 20:17 - 2011-02-15 20:17 - 00417501 _____ () C:\Program Files (x86)\Raptr\sqlite3.dll

2010-11-23 00:57 - 2010-11-23 00:57 - 00167936 _____ () C:\Program Files (x86)\Raptr\win32gui.pyd

2014-05-14 01:26 - 2014-05-14 01:26 - 00313856 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtWebKit.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00127488 _____ () C:\Program Files (x86)\Raptr\pyexpat.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00009216 _____ () C:\Program Files (x86)\Raptr\winsound.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00354304 _____ () C:\Program Files (x86)\Raptr\pythoncom26.dll

2010-11-23 00:57 - 2010-11-23 00:57 - 00016384 _____ () C:\Program Files (x86)\Raptr\win32trace.pyd

2014-08-14 02:37 - 2014-08-14 02:37 - 00113171 _____ () C:\Program Files (x86)\Raptr\libvlc.dll

2014-08-14 02:37 - 2014-08-14 02:37 - 02396691 _____ () C:\Program Files (x86)\Raptr\libvlccore.dll

2010-11-23 00:56 - 2010-11-23 00:56 - 00583680 _____ () C:\Program Files (x86)\Raptr\unicodedata.pyd

2010-11-23 00:57 - 2010-11-23 00:57 - 00141312 _____ () C:\Program Files (x86)\Raptr\gobject._gobject.pyd

2014-06-18 02:56 - 2014-06-18 02:56 - 02717595 _____ () C:\Program Files (x86)\Raptr\heliotrope._purple.pyd

2011-02-15 20:17 - 2011-02-15 20:17 - 01213633 _____ () C:\Program Files (x86)\Raptr\libxml2-2.dll

2010-11-23 01:06 - 2010-11-23 01:06 - 00055808 _____ () C:\Program Files (x86)\Raptr\zlib1.dll

2013-05-10 01:52 - 2013-05-10 01:52 - 00495680 _____ () C:\Program Files (x86)\Raptr\plugins\libaim.dll

2013-05-10 01:52 - 2013-05-10 01:52 - 01183699 _____ () C:\Program Files (x86)\Raptr\liboscar.dll

2013-05-10 01:52 - 2013-05-10 01:52 - 00483306 _____ () C:\Program Files (x86)\Raptr\plugins\libicq.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 00655356 _____ () C:\Program Files (x86)\Raptr\plugins\libirc.dll

2013-05-03 20:56 - 2013-05-03 20:56 - 01306387 _____ () C:\Program Files (x86)\Raptr\plugins\libmsn.dll

2013-05-03 20:56 - 2013-05-03 20:56 - 00565461 _____ () C:\Program Files (x86)\Raptr\plugins\libxmpp.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 01640221 _____ () C:\Program Files (x86)\Raptr\libjabber.dll

2013-05-03 20:56 - 2013-05-03 20:56 - 00506276 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoo.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 01053730 _____ () C:\Program Files (x86)\Raptr\libymsg.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 00497782 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoojp.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 00603326 _____ () C:\Program Files (x86)\Raptr\plugins\ssl-nss.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 00474199 _____ () C:\Program Files (x86)\Raptr\plugins\ssl.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
 

==================== EXE Association (whitelisted) ===============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 

HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Classes\exefile:  <===== ATTENTION!
 

==================== Internet Explorer trusted/restricted ===============
 

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)
 

IE trusted site: HKU\S-1-5-21-221738678-620704744-704572411-1000\...\aeriagames.com -> hxxps://aeriagames.com

IE trusted site: HKU\S-1-5-21-221738678-620704744-704572411-1000\...\aeriagames.com -> hxxp://aeriagames.com
 
 

==================== Other Areas ============================
 

(Currently there is no automatic fix for this section.)
 

HKU\S-1-5-21-221738678-620704744-704572411-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.178.1
 

==================== MSCONFIG/TASK MANAGER disabled items ==
 

(Currently there is no automatic fix for this section.)
 

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Ralink Wireless Utility.lnk => C:\Windows\pss\Ralink Wireless Utility.lnk.CommonStartup

MSCONFIG\startupreg: Aeria Ignite => "C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe" silent

MSCONFIG\startupreg: Overwolf => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent

MSCONFIG\startupreg: Raptr => C:\PROGRA~2\Raptr\raptrstub.exe --startup
 

==================== FirewallRules (whitelisted) ===============
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

FirewallRules: [{78594C1C-0D50-4158-BE4B-630F903AD614}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [{6FBF251F-BD39-4F99-9B43-11228600FA75}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe

FirewallRules: [{D2661B1C-FB14-4488-85B6-C9F0F671AC26}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe

FirewallRules: [{2C171432-29A8-41AE-B4FC-C8A1B17AA814}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{5AB70EC2-290C-47AF-93E6-2FF6583923AE}] => (Allow) LPort=2869

FirewallRules: [{E223E5D1-C91F-43A7-BAF4-034AF2D39963}] => (Allow) LPort=1900

FirewallRules: [{87113CB6-D031-4465-A7DA-1190F21F5789}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe

FirewallRules: [{A6A9391B-02D1-49D7-ADC4-9186A84936CB}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

FirewallRules: [{57B9C597-A0EB-408F-856B-FA683C8132A3}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{714CDBAF-5604-42B3-B700-E8038F5DF945}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [TCP Query User{06F842FE-DDFA-4FCC-AE92-5F69EEE0F652}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe

FirewallRules: [UDP Query User{3661892A-DE75-4580-91A0-F9FBF1799DF3}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe

FirewallRules: [TCP Query User{5765CABA-404A-44EF-8227-7422B4001117}C:\program files (x86)\dragon's prophet\dp_x64.exe] => (Allow) C:\program files (x86)\dragon's prophet\dp_x64.exe

FirewallRules: [UDP Query User{4AB4E404-C83C-479E-AE15-ED70B9717177}C:\program files (x86)\dragon's prophet\dp_x64.exe] => (Allow) C:\program files (x86)\dragon's prophet\dp_x64.exe

FirewallRules: [{D8B75AC5-DB8B-4A3C-A379-08351FDB3A8A}] => (Block) C:\program files (x86)\dragon's prophet\dp_x64.exe

FirewallRules: [{FA2BCC55-2D25-4982-9813-648096C2D014}] => (Block) C:\program files (x86)\dragon's prophet\dp_x64.exe

FirewallRules: [TCP Query User{8BC7D8B9-96BF-48DA-B566-50842124FA04}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe

FirewallRules: [UDP Query User{9C72FA86-27B7-40B5-BCCB-3EE160D8159F}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe

FirewallRules: [TCP Query User{643C5904-C3B1-4EF9-B893-4374ECF6D6DA}C:\program files (x86)\dragon's prophet\launcher.exe] => (Allow) C:\program files (x86)\dragon's prophet\launcher.exe

FirewallRules: [UDP Query User{878B8F84-B88B-4D79-BA68-B0CE420657C1}C:\program files (x86)\dragon's prophet\launcher.exe] => (Allow) C:\program files (x86)\dragon's prophet\launcher.exe

FirewallRules: [{80ED7FA9-4202-4D90-836F-F9F56B4CDAE4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe

FirewallRules: [{4399A304-14B2-4EFA-B537-E8EA862FCC80}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe

FirewallRules: [{01721DB0-F656-4031-8930-1E8373DC2F7F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3sp.exe

FirewallRules: [{C1942149-4BF2-4840-B25B-0861219DBE3B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3sp.exe

FirewallRules: [{AD3CBC94-9015-4EEC-8010-9730A95F050C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3mp.exe

FirewallRules: [{83C71D22-7773-410B-9C20-2AA7FDCEB96E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3mp.exe

FirewallRules: [{E7F483C4-10DC-4293-ACA0-F3AF08D31698}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x86.exe

FirewallRules: [{27ADCB35-4841-4AF9-B2D7-CC086CF7A903}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\launcher.exe

FirewallRules: [{4933D89C-009A-43A4-A839-09A511BC8DFC}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\launcher.exe

FirewallRules: [{3D9A3A59-0A6C-440B-A6F9-0A90AC0DE8EB}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x64.exe

FirewallRules: [{18241FBC-0EF3-483B-94A6-AC00EEDBF4A7}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x64.exe

FirewallRules: [{C7D1F9D6-5F5C-4788-8D75-AA4662252A42}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x86.exe

FirewallRules: [TCP Query User{4C269EB3-8471-4A9F-8BEC-B534B181151E}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe

FirewallRules: [UDP Query User{721D1BD2-BDD0-4F36-AD02-862EE89713FE}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe

FirewallRules: [TCP Query User{C39306B7-FF57-4794-8B9A-9AA0F84CB38F}C:\users\dima\appdata\local\iw4m\iw4m.dat] => (Block) C:\users\dima\appdata\local\iw4m\iw4m.dat

FirewallRules: [UDP Query User{F8E2B0E8-5340-4B1C-92C0-7DA4FD31E1C2}C:\users\dima\appdata\local\iw4m\iw4m.dat] => (Block) C:\users\dima\appdata\local\iw4m\iw4m.dat

FirewallRules: [TCP Query User{1D2F39A8-48D1-4F21-9CF1-DE335D47F856}C:\users\dima\desktop\iw4m\iw4m.dat] => (Allow) C:\users\dima\desktop\iw4m\iw4m.dat

FirewallRules: [UDP Query User{56A99EDF-B65F-4AFD-AE16-F7D98D17E077}C:\users\dima\desktop\iw4m\iw4m.dat] => (Allow) C:\users\dima\desktop\iw4m\iw4m.dat

FirewallRules: [TCP Query User{2615C76C-73D3-4D32-B632-E52A4C790CC1}C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe

FirewallRules: [UDP Query User{06CB1C71-BEEC-4057-B2DC-C2D7E2D1CA89}C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe

FirewallRules: [{C39F0114-CCFF-4583-BE3C-FCC7B4C918B2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014 Demo\DotP_D14.exe

FirewallRules: [{586F7494-D5E6-431C-B8E6-847AF4C525E9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014 Demo\DotP_D14.exe

FirewallRules: [{76EF348E-4A47-485D-9F6F-4D71F6E38FC1}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe

FirewallRules: [{7AE12753-DC2E-4865-9B9B-D3A3E3937C08}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe

FirewallRules: [{5951B7B2-DBCA-4C9A-9BF3-C4114D1B65B5}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe

FirewallRules: [{65B33429-5091-41E6-A332-E473323DD788}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe

FirewallRules: [{1EC8437C-CE05-4587-9FC8-1F694B4C7C17}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe

FirewallRules: [{D0028759-3301-4357-8B2F-C150FE1F51E3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe

FirewallRules: [{FBA36FBF-DB77-4FD8-BC3F-80825FA74D59}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe

FirewallRules: [{5F4313DD-BA94-4F06-A2F0-B409FDAC09F4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe

FirewallRules: [{67D60A7C-0385-470F-9033-87A08C2D2E4F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe

FirewallRules: [{E3735442-0A8C-41A3-9B08-729BC8802589}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe

FirewallRules: [TCP Query User{7090371A-9B4F-4254-84A8-364D16F3A38C}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [UDP Query User{31DB48CF-D0EF-4B0D-AAE6-7AF83D2137D8}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [{A045D731-60D5-4EAD-BF23-1F7796BB34FA}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [{2C6C6FBA-5AFC-4085-8A68-A8C98856386B}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [TCP Query User{3C639DFB-197E-4AFF-A15E-25F14B889032}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat

FirewallRules: [UDP Query User{82EE40F2-E294-4D7B-9D68-1B75AE208E6A}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat

FirewallRules: [{64E878D7-1907-4A7D-A779-834D5D060955}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat

FirewallRules: [{68209FB4-C66B-4D9D-A2F0-2397BE1AB277}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat

FirewallRules: [TCP Query User{00A0BD31-B63A-4C19-93E8-ABCC8DB5C578}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [UDP Query User{8999A7F5-D427-4328-AAB7-ADA1FA9C59BF}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [{8DC4935E-B350-42D1-8FB1-1BB8F7442E36}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [{6CFC61D0-18CC-49EB-B25A-ACAECA62E42B}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [TCP Query User{EBCAC3E3-AA9A-43CF-B83E-98D5FD5EA402}C:\users\dima\desktop\call of duty modern warfare 2\com.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\com.dat

FirewallRules: [UDP Query User{84C7686B-75DF-401A-9FDF-7FC9F6392C7D}C:\users\dima\desktop\call of duty modern warfare 2\com.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\com.dat

FirewallRules: [{049E4550-90D7-4FEF-B6AD-9D74DED0C676}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\com.dat

FirewallRules: [{993FB1C4-D279-479A-90BE-6165BF19AF2E}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\com.dat

FirewallRules: [TCP Query User{9B3FB14A-DDF0-4459-AB11-D96BA0A21D17}C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [UDP Query User{3511F905-74A3-4CF9-9DC4-31D40CA6C995}C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [{4BBE5ECB-54A4-4EF1-BAA9-DBE3F102DC2F}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [{A73E2F4B-AB36-4447-B71B-F28AF0D3F1C5}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [TCP Query User{85EDB327-F94C-42C7-A714-B52DCFABB896}C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [UDP Query User{62DB249D-8E0B-4DE5-866A-A5EC513C7675}C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [{9BA06BB7-A418-404C-A95C-D8E2282C6F57}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [{CED6EBE2-E036-4988-AB13-D5DA803410B6}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [{E546D188-E7DD-44EE-BC95-7E5100A1366C}] => (Allow) C:\Users\Dima\Downloads\HOTO_downloader.exe

FirewallRules: [{60F46196-1CBF-40C0-970C-031D8BAD38B2}] => (Allow) C:\Users\Dima\Downloads\HOTO_downloader.exe

FirewallRules: [{F45FED77-FF04-4879-9444-42D263E00C25}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe

FirewallRules: [{28EC56F2-D3A9-4BCE-A5F5-878749DE6407}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe

FirewallRules: [{A4083F49-4F11-4A32-B91C-2BAF1B4BF058}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe

FirewallRules: [{DF37D091-D2F9-4401-B457-D9030A3919A8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe

FirewallRules: [{1315155E-2220-4EDE-A4A4-755669B75E19}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe

FirewallRules: [{58E7FDFD-4736-4213-9B42-50E885AE99CA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe

FirewallRules: [{31958790-F30C-4BC7-BDAC-03B4DED35B86}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe

FirewallRules: [{CC1F0407-71B4-4EC3-9F37-0E161C8A3322}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe

FirewallRules: [{145C7649-7AA9-42B3-97E8-5B8400173F22}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe

FirewallRules: [{936F4879-D6DB-4A9A-BEB0-D9E0A63B56E1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe

FirewallRules: [{375BA601-C201-4FFF-9426-9DC8362E1D6A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe

FirewallRules: [{4EAF1A42-8BB1-49A8-8D54-63BE9EF5E1FC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe

FirewallRules: [{E7EEA6A5-9E71-4A90-B195-713ADC4D3DD9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe

FirewallRules: [{C7E9681A-9A64-4D1A-99A8-CFC9168448D5}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe

FirewallRules: [{4352484E-8611-4EF5-92B1-E1134658D51D}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe

FirewallRules: [{FAF9A5EF-500F-48F2-9A53-FB0E549E87A7}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe

FirewallRules: [{45E32924-61E5-4693-8142-5090A1DACC77}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe

FirewallRules: [{B51953D9-7C03-413E-B7EA-B60979F79136}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe

FirewallRules: [TCP Query User{58A3D1CA-EB63-41E1-815B-2C296E72A629}C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe] => (Allow) C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe

FirewallRules: [UDP Query User{42C952D4-1892-4D10-9AB1-1CC3F39A23F3}C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe] => (Allow) C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe

FirewallRules: [{1D455526-6B1D-4BF9-B8BA-00306E25FF9A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe

FirewallRules: [{0DA93301-8BDC-47FD-B914-E2FA1EC7AAFB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe

FirewallRules: [TCP Query User{0729B18F-9796-4FCF-A32F-7A5833FBE815}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\dima\appdata\local\akamai\netsession_win.exe

FirewallRules: [UDP Query User{A54F5C5A-D8E2-403E-A810-D1615D1E56C6}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\dima\appdata\local\akamai\netsession_win.exe

FirewallRules: [TCP Query User{9C8EF3A7-3266-4542-B95E-133CF9D2DFA9}C:\programdata\battle.net\agent\agent.beta.2514\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2514\agent.exe

FirewallRules: [UDP Query User{DF8986C4-FB63-4A37-874F-5E4F5AB0B070}C:\programdata\battle.net\agent\agent.beta.2514\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2514\agent.exe

FirewallRules: [TCP Query User{7D2074A4-AA89-4BA7-A7EB-1268C6492AEE}C:\program files (x86)\devpro\devpro.dll] => (Allow) C:\program files (x86)\devpro\devpro.dll

FirewallRules: [UDP Query User{F2B7C119-C5D0-4914-BEBC-71E99254D344}C:\program files (x86)\devpro\devpro.dll] => (Allow) C:\program files (x86)\devpro\devpro.dll

FirewallRules: [{EA7F7B92-3349-4537-9E50-3A0B4D818281}] => (Allow) C:\AeriaGames\AuraKingdom\game.bin

FirewallRules: [{AB6209F8-0BA4-4FC4-803C-1A73FEFDA112}] => (Allow) C:\AeriaGames\AuraKingdom\game.bin

FirewallRules: [TCP Query User{4F600FC8-F54A-49E9-B588-2F547BBA96B1}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe

FirewallRules: [UDP Query User{DF1CE9AE-5217-4393-B737-92F45CBCB4BD}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe

FirewallRules: [{A1A5A428-B18A-4BC9-A553-B1E6989C2A42}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Darksiders 2\Darksiders2.exe

FirewallRules: [{F60EBF1D-B0A7-4638-B48C-AF3F18B494BA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Darksiders 2\Darksiders2.exe

FirewallRules: [{767607AA-81B6-406F-BF1E-B8A81ED847FC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe

FirewallRules: [{35789372-EE60-4ED3-81F9-A81ED3BF2CE4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe

FirewallRules: [{07DE1F4A-0A51-4A63-BF8D-CD9580D92EB6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe

FirewallRules: [{5F40E8E8-9EF2-41AA-9414-FBA5770F0A94}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe

FirewallRules: [TCP Query User{744A07AB-09FD-499C-9F04-E01BB0351E8D}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\dima\appdata\local\akamai\netsession_win.exe

FirewallRules: [UDP Query User{F7498DED-162B-488F-B59F-256A51C6CE71}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\dima\appdata\local\akamai\netsession_win.exe

FirewallRules: [{AEAB3ECF-0BB1-453B-8D1F-476AE01D86A0}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe

FirewallRules: [{8D48AAEF-A0CE-44E7-9024-CA3944E81E7D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe

FirewallRules: [TCP Query User{6CF9A63C-F912-4E3A-8DDA-6D3AC6AF66DF}C:\programdata\battle.net\agent\agent.beta.2638\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2638\agent.exe

FirewallRules: [UDP Query User{5A9CB3D7-8747-407A-97AB-191DBFC43D75}C:\programdata\battle.net\agent\agent.beta.2638\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2638\agent.exe

FirewallRules: [{94644398-7E26-4C3A-BD3D-8AC488A93807}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe

FirewallRules: [{03DDFDE2-264E-4187-85CD-4382D41F4A6C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe

FirewallRules: [{C38A5A06-BB40-4CFC-BA71-87AEC286F6D6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe

FirewallRules: [{CB8BA2E2-B98E-442B-87D9-92EFB85FECAD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe

FirewallRules: [{234100A5-3277-4236-B80F-3BD7A113F330}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe

FirewallRules: [{9472EB6F-9BC9-4FC2-B7B2-45A96212D7C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe

FirewallRules: [{4DDCAB31-D1CA-49D7-83D1-9A7708CA3387}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Loadout\Loadout.exe

FirewallRules: [{50274324-D5E3-4A7D-9551-60285C4D51CE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Loadout\Loadout.exe

FirewallRules: [{505A793E-19FF-4163-85DA-BDD1366147B4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe

FirewallRules: [{5D9B037C-78AD-4F93-AFCB-A8BF0480CCCF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe

FirewallRules: [{71BA2590-5ED7-4DC0-919C-603D078A17E1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe

FirewallRules: [{E3C9045F-0538-43CE-9AC0-B88A7047D12B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe

FirewallRules: [{AA27854D-9002-4BB1-AC3B-2B040589990B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe

FirewallRules: [{F262DA23-A9A0-45ED-875A-42640AB812FD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe

FirewallRules: [{5B584B43-CDC2-482C-A915-51ED708E2BDE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe

FirewallRules: [{FBE87CBF-6E5E-443B-BB64-D76E91781977}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe

FirewallRules: [TCP Query User{5B78C40B-EF9C-4DE3-B847-DDC0913711FC}C:\program files (x86)\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\tera\tera-launcher.exe

FirewallRules: [UDP Query User{02ADE6C1-8488-448C-9DD6-1D4ABC838F09}C:\program files (x86)\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\tera\tera-launcher.exe

FirewallRules: [{4EC807D8-651B-4EDE-906E-15D8940E045A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe

FirewallRules: [{5C43F976-C8BD-461A-8160-E4037DEC5A46}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe

FirewallRules: [{91A8DE20-9DBA-43BD-9F4B-DE1B625D0D83}] => (Allow) C:\AeriaGames\EdenEternal-DE\_Launcher.exe

FirewallRules: [{CD8464F5-1D27-4ACC-848F-AD802961AD3D}] => (Allow) C:\AeriaGames\EdenEternal-DE\_Launcher.exe

FirewallRules: [{20FF7205-61B2-44CC-87A6-CCE211D4603C}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{6B725485-B1DC-4646-B9AD-C4E754073AD5}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{EFDADD2B-5B82-4D44-BFF6-7533A33E5D4B}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{EDABDFE1-A779-47FE-A7F2-0BE99128B9D1}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{C864BA6F-6F65-4A53-BACD-5590447E71A3}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe

FirewallRules: [{BF9437A3-0AAD-4EF3-9020-8A7EDA18FFFB}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe

FirewallRules: [{5EC4813D-F4A5-44A4-99AE-2FEEADC7BD68}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe

FirewallRules: [{5741DE79-8863-4C92-8CA4-43D24ED12E9D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe

FirewallRules: [{7FA5A6CC-69A0-4EF2-9E4E-D36CF4A6FFB1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe

FirewallRules: [{1E27B3D7-EBC5-46D1-A1F4-5150D5FC7ECA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe

FirewallRules: [{7ACB6A7B-1D9F-4159-9E5C-57293DE770B9}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA World\fifaworld.exe

FirewallRules: [{CC579040-BC64-4658-B938-3FC11265DBA0}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA World\fifaworld.exe

FirewallRules: [TCP Query User{466B6D60-FB8E-40F4-9A96-3F6B84C31F10}C:\programdata\battle.net\agent\agent.2787\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.2787\agent.exe

FirewallRules: [UDP Query User{747BD4DC-E6ED-4E9F-889A-E1029B9BD7EC}C:\programdata\battle.net\agent\agent.2787\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.2787\agent.exe

FirewallRules: [{024C2E0F-0F94-4571-AAA1-63A5D32016D2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe

FirewallRules: [{19CDF823-35E4-43AD-8A38-931E02B58B64}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe

FirewallRules: [{EA2378D9-ADC4-4A3E-947C-030BBA9A41B0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Aura Kingdom\game.bin

FirewallRules: [{E3E3914B-6929-4469-A807-4C9FC60B3CA5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Aura Kingdom\game.bin

FirewallRules: [{AB6817F8-474B-413B-B1A1-DB9F05CE61BB}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{8192EF82-EABD-49D0-92CB-1E602FCB2399}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{8E9567B7-FEC3-4B6A-8469-1B65ACAEBCF2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe

FirewallRules: [{9832DDCA-66F8-432C-8B22-60682E5E919E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe

FirewallRules: [TCP Query User{1128027D-DF51-428D-BBF5-261AD7F20EEC}C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe

FirewallRules: [UDP Query User{0D0921EC-8295-44F1-A446-52BAFD8EF6EB}C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe

FirewallRules: [TCP Query User{1FC5CC73-6F52-4B75-8D0B-4753B673D255}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [UDP Query User{A5E61E08-5C0A-4EA7-BD2C-D6ACED33386F}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [TCP Query User{E290B8F5-DC46-4D43-9E40-A8CFEBD19A8A}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe

FirewallRules: [UDP Query User{4A59CA75-CB6F-46C3-8E3B-D091F44ACDC5}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe

FirewallRules: [{51E7B824-61EF-498A-94AE-826ED3FE5CF2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe

FirewallRules: [{B9C59147-9E45-4E11-9B2F-5702A1ACAFA5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe

FirewallRules: [{BB70E8F0-DE1E-4EEF-873C-95044B81A8C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe

FirewallRules: [{49C70379-991F-4248-81CB-BA51F9158E4F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe

FirewallRules: [{6BB569B0-D223-4EAB-A4A0-83B776CDA2DD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age2HD\Launcher.exe

FirewallRules: [{D341F20A-E2E0-4320-82A8-3607608AD108}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age2HD\Launcher.exe

FirewallRules: [{757CE32E-DE9A-440C-BAB3-B9F8EF37A2A0}] => (Allow) C:\Users\Dima\Downloads\b9_downloader.exe

FirewallRules: [{ACA68B80-8F45-4E75-B7D3-470AF290871F}] => (Allow) C:\Users\Dima\Downloads\b9_downloader.exe

FirewallRules: [TCP Query User{B5BB55CB-DE77-4080-963B-3A266AC37CE5}C:\programdata\battle.net\agent\agent.3235\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3235\agent.exe

FirewallRules: [UDP Query User{30EBE90E-7ED1-4868-9D3D-50E6D7112675}C:\programdata\battle.net\agent\agent.3235\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3235\agent.exe

FirewallRules: [{1BAA9821-E2DD-48BF-9E27-F6297D2F5116}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe

FirewallRules: [{9C9260ED-7AA0-4AE4-972E-D83A5D097028}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe

FirewallRules: [{EA27D1BB-E05D-4097-97AF-BC7DE8174F52}] => (Allow) C:\Program Files (x86)\Bench\Proxy\proc.exe

FirewallRules: [{953D2DA8-7AEB-4931-BE76-87BDE0ACBC39}] => (Allow) C:\Program Files (x86)\Bench\Proxy\pwdg.exe

FirewallRules: [{91AF5EE1-530D-4D72-A308-BDBA132ABA31}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe

FirewallRules: [{AF831DA2-EC4A-4642-915F-DF7CBB2A2CF3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe

FirewallRules: [{BBBB3AD6-5EB2-4204-B5AF-9716942ACB1C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe

FirewallRules: [{63BB69A1-F607-4FB8-9EDD-1A607AABDA8B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe

FirewallRules: [{34F27A20-13E6-46E6-9901-39383CB7F97A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe

FirewallRules: [{DA9D712D-0C9F-441F-A880-FF8D27837E6E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe

FirewallRules: [TCP Query User{A250025F-7CBE-4CAD-93AE-C02E36E841C1}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe

FirewallRules: [UDP Query User{3D207EE9-306F-48FF-8735-CD8CDAFA0490}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe

FirewallRules: [TCP Query User{F7376CA3-FA2C-4F56-9AD8-0A2ADC4927AE}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe

FirewallRules: [UDP Query User{BCBA424F-EDE5-4DFC-8FD5-56BB5666B2F5}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe

FirewallRules: [{7A5EB71C-C724-402F-8557-A92B3BAD628E}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe

FirewallRules: [{AF09CC9B-68D7-404C-B498-D144643C1A54}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe

FirewallRules: [{D56AE5C0-0487-4C87-8284-10DC792A01DE}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe

FirewallRules: [{CB98B3E2-40A1-4A7C-ACCB-56A50C8E3F7B}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe

FirewallRules: [{B3D84AF2-F39E-4E7D-9D7E-FFCD803C1135}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe

FirewallRules: [{AB8E5377-F2F7-441D-9A50-434D83F90C0E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe

FirewallRules: [{CCA3F085-5CA5-4FEE-9ADD-935183AE6F1C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{9EA1B11A-0179-414A-AFF8-82050C792E6B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{256D7304-2C38-45D1-97DB-71739BA92297}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe

FirewallRules: [{E2070B33-5CCB-46B0-B6CF-4ED92F8AB562}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe

FirewallRules: [{1E69481E-7920-4B4D-9047-B812C456A75A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{A416660E-98DD-4A45-8A5A-C8BBA66A68A3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{72A09F1B-7789-4A3E-B327-FD1D052150FF}] => (Allow) C:\Program Files (x86)\GameforgeLive\gfl_client.exe

FirewallRules: [TCP Query User{2A0CBFD5-23A1-4C20-91ED-B00077755298}C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe

FirewallRules: [UDP Query User{3933DFA8-6EB3-47A1-A4F9-7C3E7BD2ED67}C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe

FirewallRules: [TCP Query User{69CF256B-C011-492C-B7A0-04F509D0D67B}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe

FirewallRules: [UDP Query User{FFEA845F-4BF9-44FF-89AC-628034543D28}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe

FirewallRules: [{7809CF2C-51C3-4520-8BD0-F210B5BBB57B}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe

FirewallRules: [{CE1678FF-6995-415D-ADDC-E165111812E1}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe

FirewallRules: [{2412E622-4FBF-402A-B899-DBC82E5C6B2B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe

FirewallRules: [{5817EFF9-3537-4F8B-97F9-2C33716052B4}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe

FirewallRules: [{B65003CD-97BF-4394-A2F7-21A3E24DCFB5}] => (Allow) C:\Nexon\Vindictus EU\en-EU\NMService.exe

FirewallRules: [{0CA242B9-DEDD-43C3-9F4C-BADAE74781E9}] => (Allow) C:\Nexon\Vindictus EU\en-EU\NMService.exe

FirewallRules: [TCP Query User{3D2A0F20-56AE-42D0-80DF-E8AC85D00D13}C:\nexon\vindictus eu\en-eu\vindictus.exe] => (Allow) C:\nexon\vindictus eu\en-eu\vindictus.exe

FirewallRules: [UDP Query User{2DFE002E-3069-4DA8-920D-442A029D663E}C:\nexon\vindictus eu\en-eu\vindictus.exe] => (Allow) C:\nexon\vindictus eu\en-eu\vindictus.exe

FirewallRules: [TCP Query User{93A7A5BC-03EA-42A5-AE99-CC30CBDF752F}C:\users\dima\desktop\eclipse\eclipse.exe] => (Allow) C:\users\dima\desktop\eclipse\eclipse.exe

FirewallRules: [UDP Query User{13A19341-79DD-4889-B496-24BB0AA8C4C2}C:\users\dima\desktop\eclipse\eclipse.exe] => (Allow) C:\users\dima\desktop\eclipse\eclipse.exe

FirewallRules: [TCP Query User{95CD7A11-031A-4E37-B3A1-64F53A1F7A75}C:\program files\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\javaw.exe

FirewallRules: [UDP Query User{9B60CDE5-BA1E-4E6D-BDF3-C1056F5F8650}C:\program files\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\javaw.exe

FirewallRules: [TCP Query User{C4E30886-3358-4A99-BE81-2F5BED09E73D}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe

FirewallRules: [UDP Query User{710835ED-1463-4E58-8DB1-9F37F56C4A0F}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe

FirewallRules: [TCP Query User{C7584B0F-6622-4E1D-8987-9D85C77F36F0}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe

FirewallRules: [UDP Query User{F365D46D-EED4-49F4-93DF-234F94019BB2}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe

FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe

FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe

FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe

FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe

FirewallRules: [TCP Query User{63488A2D-8F13-4C4E-8CC0-49944F9372BA}C:\users\dima\desktop\lancraft\lancraft.exe] => (Allow) C:\users\dima\desktop\lancraft\lancraft.exe

FirewallRules: [UDP Query User{EAEC2D64-0B8E-4599-A61B-53F358A64796}C:\users\dima\desktop\lancraft\lancraft.exe] => (Allow) C:\users\dima\desktop\lancraft\lancraft.exe

FirewallRules: [TCP Query User{A91AD53F-87ED-432A-9D7C-0AC95375B702}C:\users\dima\desktop\warcraft\war3.exe] => (Allow) C:\users\dima\desktop\warcraft\war3.exe

FirewallRules: [UDP Query User{CC9DF559-105D-4031-9013-ADF7BC24CFC3}C:\users\dima\desktop\warcraft\war3.exe] => (Allow) C:\users\dima\desktop\warcraft\war3.exe

FirewallRules: [TCP Query User{6E3020FE-2B2A-413D-8EBC-AC0261DDA56B}C:\users\dima\desktop\warcraft\lancraft.exe] => (Allow) C:\users\dima\desktop\warcraft\lancraft.exe

FirewallRules: [UDP Query User{83FC41EC-2250-4389-B57F-7CF1CF138244}C:\users\dima\desktop\warcraft\lancraft.exe] => (Allow) C:\users\dima\desktop\warcraft\lancraft.exe

FirewallRules: [{E762770A-34B1-461E-B15E-FFC052875F0A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\CastleCrashers\castle.exe

FirewallRules: [{32B2CED0-8283-4A5A-8965-FFCB653C38DA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\CastleCrashers\castle.exe

FirewallRules: [TCP Query User{CA917D8D-9E80-4B19-90E8-110407378DDD}C:\program files (x86)\unity\editor\unity.exe] => (Allow) C:\program files (x86)\unity\editor\unity.exe

FirewallRules: [UDP Query User{4A9F69B2-9BB4-4F0E-B34D-4D95E242700A}C:\program files (x86)\unity\editor\unity.exe] => (Allow) C:\program files (x86)\unity\editor\unity.exe

FirewallRules: [{5A44804A-99EB-4C63-8F18-C9310F1C4657}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe

FirewallRules: [{5C90DDB5-DFDC-4BF5-B6D0-B86A95AEE724}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe

FirewallRules: [TCP Query User{DD861486-7A78-460B-9A83-BFA67BC6A454}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe

FirewallRules: [UDP Query User{21543651-AA0C-4F30-B6F4-14C779C5E70B}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe

FirewallRules: [TCP Query User{5C83AE95-A82A-49CA-B905-4EFC8C6961F9}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe

FirewallRules: [UDP Query User{640696E3-D785-4576-883E-596F24E072B3}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe

FirewallRules: [{5880095B-DD8E-4F79-BA8F-727A270A9A7B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dungeon Defenders\Binaries\Win32\DungeonDefenders.exe

FirewallRules: [{A02B8413-228D-4E79-9B24-1B23EEBA9CE2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dungeon Defenders\Binaries\Win32\DungeonDefenders.exe

FirewallRules: [TCP Query User{E5CD1AD8-4898-41F1-880E-C3CCEEF12C49}C:\program files (x86)\secondlifeviewer\slvoice.exe] => (Allow) C:\program files (x86)\secondlifeviewer\slvoice.exe

FirewallRules: [UDP Query User{37F84E6A-EF30-44B7-8E99-DE3F7E7DF7EE}C:\program files (x86)\secondlifeviewer\slvoice.exe] => (Allow) C:\program files (x86)\secondlifeviewer\slvoice.exe

FirewallRules: [TCP Query User{2478D171-94B3-4D1F-8C59-4E8322B8E276}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [UDP Query User{28D75031-A654-47AF-802E-4A9A15D5EF3F}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [{3A112284-5247-4174-9FB4-B86BFEBD19F9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe

FirewallRules: [{B2899169-D59D-4AC1-BBE3-3F3903152981}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe

FirewallRules: [{12C4EFF7-DD2B-4A0E-A3A0-98777451B440}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3.exe

FirewallRules: [{4060C2B9-6F65-462B-9221-EEEBCF58BB56}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3.exe

FirewallRules: [{EFA22BC5-7DE3-47F6-8167-289BFDD93178}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3_Unrestricted.exe

FirewallRules: [{C0D1322B-FEBC-4B0A-BD29-158C54B47C3F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3_Unrestricted.exe

FirewallRules: [{13A229AF-4A20-4E5A-B1D5-E4DA450947FA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Gumboy Tournament\gumboytournament.exe

FirewallRules: [{BD506B34-1746-48BC-A17D-29CE55B609BC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Gumboy Tournament\gumboytournament.exe

FirewallRules: [TCP Query User{E9B42C51-F75A-4042-8D09-5FE64A6E0AFD}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe

FirewallRules: [UDP Query User{A47B5394-0D06-4B60-AEAC-F80C6A18EC73}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe

FirewallRules: [{1F0F5A11-9A4F-49CF-8202-86A2DAEB8299}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_launcher.exe

FirewallRules: [{472579C8-4E14-4D30-9C6E-7C1E88FAB3FD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe

FirewallRules: [{09D4FEB7-995B-4579-90DC-1C535713E99A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe

FirewallRules: [{418B6FDA-1046-4E47-AFFC-EC7C31A532E9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe

FirewallRules: [{7199E669-27DE-4BFD-94D5-FDCF6A7C93AA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe

FirewallRules: [{BFF61270-CC5A-432C-A7FB-7D76DC47C782}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium.exe

FirewallRules: [{490B16FF-C2D2-4175-A366-EFDAA08EB979}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium.exe

FirewallRules: [TCP Query User{C9F38270-E9E5-4168-9E99-11073C550934}C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe

FirewallRules: [UDP Query User{6082536E-F697-45B2-969C-5E5CA8E07E06}C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe

FirewallRules: [TCP Query User{5AC0DF45-9E80-410D-A952-1DDA7A565671}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe

FirewallRules: [UDP Query User{31F72C84-B935-4C8E-8E1E-6FBDDC891D1C}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe

FirewallRules: [{8EB84DED-EB81-4D74-9575-8282402E2D2E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cryptic Studios\Neverwinter.exe

FirewallRules: [{B5B40F25-2AC6-4642-8BBC-63AE2A925B7B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cryptic Studios\Neverwinter.exe

FirewallRules: [TCP Query User{096444F6-AA1C-44A3-8C5E-A8DFF4A1C6D0}C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe

FirewallRules: [UDP Query User{9E1BE6EE-CCE2-4CFC-8375-7D1F41A71285}C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe

FirewallRules: [{3E6ED98E-B2F8-4E5F-BAED-9D8ACD743A90}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe

FirewallRules: [{2F7FD9C7-09FF-4330-AB1D-62122B26142B}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe

FirewallRules: [{B6917A43-4FD1-4943-819E-0224DF009AD4}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe

FirewallRules: [{580CEC6F-22A8-423D-B6A2-60898E1991C0}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe

FirewallRules: [{1D779765-CEC8-476D-8663-FF565F9943D2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dragon Nest Europe\DragonNest\DragonNest.exe

FirewallRules: [{BFD8F340-3BB5-4D13-B4C8-64605B781AE5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dragon Nest Europe\DragonNest\DragonNest.exe

FirewallRules: [TCP Query User{51AE804F-C3F0-4BE7-8861-486111D1A4C3}C:\neople\dfo\dfo.exe] => (Allow) C:\neople\dfo\dfo.exe

FirewallRules: [UDP Query User{813C44E8-970E-4FB2-A994-1B7E6CFAB002}C:\neople\dfo\dfo.exe] => (Allow) C:\neople\dfo\dfo.exe

FirewallRules: [{721B343A-D002-417F-8012-828923F7CF99}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe

FirewallRules: [{51F7C144-FBEC-4072-83BA-D2DB2C1ED47D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe

FirewallRules: [{ECFA20B8-D75A-4C39-89BD-017F84E119BB}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

FirewallRules: [{0FE2304A-0072-4655-BD88-8EAC2F3EE694}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{7C5F9697-EA12-4FD9-AA6A-450DA3B7D57A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
 

==================== Faulty Device Manager Devices =============
 

Name: USB (Universal Serial Bus)-Controller

Description: USB (Universal Serial Bus)-Controller

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: Ethernet-Controller

Description: Ethernet-Controller

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: qrnfd_1_10_0_13

Description: qrnfd_1_10_0_13

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer: 

Service: qrnfd_1_10_0_13

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 

Name: SM-Bus-Controller

Description: SM-Bus-Controller

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (05/12/2015 10:45:55 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (05/12/2015 10:38:32 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 37.0.2.5583, Zeitstempel: 0x552ef76c

Name des fehlerhaften Moduls: mozalloc.dll, Version: 37.0.2.5583, Zeitstempel: 0x552ee9ae

Ausnahmecode: 0x80000003

Fehleroffset: 0x00001aa1

ID des fehlerhaften Prozesses: 0x614

Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0

Pfad der fehlerhaften Anwendung: plugin-container.exe1

Pfad des fehlerhaften Moduls: plugin-container.exe2

Berichtskennung: plugin-container.exe3
 

Error: (05/12/2015 09:00:17 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm csgo.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: d98
 

Startzeit: 01d08ce59fe19b13
 

Endzeit: 22
 

Anwendungspfad: C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
 

Berichts-ID:
 

Error: (05/11/2015 11:44:49 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (05/11/2015 11:40:27 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm firefox.exe, Version 37.0.2.5583 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 1e98
 

Startzeit: 01d08c31eb0e7ef1
 

Endzeit: 28
 

Anwendungspfad: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 

Berichts-ID:
 

Error: (05/11/2015 11:40:27 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 37.0.2.5583, Zeitstempel: 0x552ef76c

Name des fehlerhaften Moduls: mozalloc.dll, Version: 37.0.2.5583, Zeitstempel: 0x552ee9ae

Ausnahmecode: 0x80000003

Fehleroffset: 0x00001aa1

ID des fehlerhaften Prozesses: 0x1ca4

Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0

Pfad der fehlerhaften Anwendung: plugin-container.exe1

Pfad des fehlerhaften Moduls: plugin-container.exe2

Berichtskennung: plugin-container.exe3
 

Error: (05/11/2015 11:33:17 PM) (Source: ftb) (EventID: 1) (User: )

Description: ftbStartServiceCtrlDispatcher failed with 1063
 

Error: (05/11/2015 11:33:00 PM) (Source: ftb) (EventID: 1) (User: )

Description: ftbStartServiceCtrlDispatcher failed with 1063
 

Error: (05/11/2015 11:32:00 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm firefox.exe, Version 37.0.2.5583 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 2130
 

Startzeit: 01d08c24cf8d69f1
 

Endzeit: 32
 

Anwendungspfad: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 

Berichts-ID:
 

Error: (05/11/2015 11:32:00 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 37.0.2.5583, Zeitstempel: 0x552ef76c

Name des fehlerhaften Moduls: mozalloc.dll, Version: 37.0.2.5583, Zeitstempel: 0x552ee9ae

Ausnahmecode: 0x80000003

Fehleroffset: 0x00001aa1

ID des fehlerhaften Prozesses: 0x3cc

Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0

Pfad der fehlerhaften Anwendung: plugin-container.exe1

Pfad des fehlerhaften Moduls: plugin-container.exe2

Berichtskennung: plugin-container.exe3
 
 

System errors:

=============

Error: (05/12/2015 10:46:01 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 

qrnfd_1_10_0_13
 

Error: (05/12/2015 10:45:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (05/12/2015 01:02:22 PM) (Source: bowser) (EventID: 8003) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "PAPA-NB",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{E0D7CF45-4DC0-4905-AF73-9C813310A65F}-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (05/12/2015 00:57:15 PM) (Source: Service Control Manager) (EventID: 7030) (User: )

Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
 

Error: (05/12/2015 00:56:52 PM) (Source: Application Popup) (EventID: 1060) (User: )

Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\ComboFix\catchme.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
 

Error: (05/12/2015 00:53:57 PM) (Source: Service Control Manager) (EventID: 7030) (User: )

Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
 

Error: (05/12/2015 00:48:58 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "mftb" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (05/12/2015 00:48:57 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "ftb" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (05/11/2015 11:54:16 PM) (Source: Service Control Manager) (EventID: 7006) (User: )

Description: Der Aufruf "ScRegSetValueExW" ist für "FailureCommand" aufgrund folgenden Fehlers fehlgeschlagen: 

%%5
 

Error: (05/11/2015 11:53:23 PM) (Source: Service Control Manager) (EventID: 7006) (User: )

Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen: 

%%5
 
 

Microsoft Office Sessions:

=========================

Error: (05/12/2015 10:45:55 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (05/12/2015 10:38:32 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: plugin-container.exe37.0.2.5583552ef76cmozalloc.dll37.0.2.5583552ee9ae8000000300001aa161401d08cd4b2317e5cC:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dllda56909c-f8e6-11e4-b156-d25776320b33
 

Error: (05/12/2015 09:00:17 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: csgo.exe0.0.0.0d9801d08ce59fe19b1322C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
 

Error: (05/11/2015 11:44:49 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (05/11/2015 11:40:27 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: firefox.exe37.0.2.55831e9801d08c31eb0e7ef128C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 

Error: (05/11/2015 11:40:27 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: plugin-container.exe37.0.2.5583552ef76cmozalloc.dll37.0.2.5583552ee9ae8000000300001aa11ca401d08c31edc36601C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll5613711c-f826-11e4-b276-c9b362989730
 

Error: (05/11/2015 11:33:17 PM) (Source: ftb) (EventID: 1) (User: )

Description: ftbStartServiceCtrlDispatcher failed with 1063
 

Error: (05/11/2015 11:33:00 PM) (Source: ftb) (EventID: 1) (User: )

Description: ftbStartServiceCtrlDispatcher failed with 1063
 

Error: (05/11/2015 11:32:00 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: firefox.exe37.0.2.5583213001d08c24cf8d69f132C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 

Error: (05/11/2015 11:32:00 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: plugin-container.exe37.0.2.5583552ef76cmozalloc.dll37.0.2.5583552ee9ae8000000300001aa13cc01d08c31e2b05b1fC:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll2805ac04-f825-11e4-b276-c9b362989730
 
 

CodeIntegrity Errors:

===================================

  Date: 2015-05-12 12:56:52.122

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-05-12 12:56:52.091

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-05-08 20:38:53.994

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:37:07.273

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:37:03.798

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:36:19.340

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:34:40.221

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:34:12.814

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:20:56.969

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:20:56.706

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Core(TM) i5-4570 CPU @ 3.20GHz

Percentage of memory in use: 38%

Total physical RAM: 8136.6 MB

Available physical RAM: 5016.1 MB

Total Pagefile: 16271.39 MB

Available Pagefile: 13250.66 MB

Total Virtual: 8192 MB

Available Virtual: 8191.85 MB
 

==================== Drives ================================
 

Drive c: (OS) (Fixed) (Total:915.41 GB) (Free:454.82 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 277A7941)

Partition 1: (Not Active) - (Size=16 GB) - (Type=27)

Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=915.4 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

Bootsektor

12.05.2015 22:27

Hallo,

in welchem Browser denn?

Schritt 1

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

FF Extension: jid0XZn6pYCdV3ANrfYigxlyyGDrxAMjetpack - C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\Extensions\jid0-XZn6pYCdV3ANrfYigxlyyGDrxAM@jetpack [2015-05-11]

C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\Extensions\jid0-XZn6pYCdV3ANrfYigxlyyGDrxAM@jetpack

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Schritt 2
Downloade Dir bitte Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad.
Starte Malwarebytes' Anti-Malware (MBAM).
Sollte die Benutzeroberfläche noch in Englisch sein, klicke auf Settings und wähle bei Language Deutsch aus.
Klicke im Anschluss auf Suchlauf, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf jetzt starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Aktionen anwenden.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Suchlauf-Protokoll aus und klicke auf Ansicht. Wähle Exportieren auf Textdatei (.txt) und speichere die Datei als mbam.txt auf dem Desktop ab.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 3
Starte noch einmal FRST.

Setze den Haken bei addition.txt und drücke auf Scan.
Wenn der Scan abgeschlossen ist, werden zwei neue Logfiles FRST.txt und addition.txt erstellt und auf dem Desktop (oder in dem Verzeichnis in dem FRST liegt) gespeichert.
Poste den Inhalt dieser Logfiles bitte hier in deinen Thread.

kriegnes

13.05.2015 13:21

Ich nutze hauptsächlich Firefox. Manchmal aber auch Google Chrome.
Fixlog.txt

Code:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 09-05-2015

Ran by Dima at 2015-05-13 14:19:54 Run:2

Running from C:\Users\Dima\Desktop\Downloads

Loaded Profiles: Dima (Available profiles: Dima)

Boot Mode: Normal

==============================================
 

Content of fixlist:

*****************

FF Extension: jid0XZn6pYCdV3ANrfYigxlyyGDrxAMjetpack - C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\Extensions\jid0-XZn6pYCdV3ANrfYigxlyyGDrxAM@jetpack [2015-05-11]

C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\Extensions\jid0-XZn6pYCdV3ANrfYigxlyyGDrxAM@jetpack

       

*****************
 

C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\Extensions\jid0-XZn6pYCdV3ANrfYigxlyyGDrxAM@jetpack => Moved successfully.

"C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default\Extensions\jid0-XZn6pYCdV3ANrfYigxlyyGDrxAM@jetpack" => File/Directory not found.
 

==== End of Fixlog 14:19:54 ====

Die Adware scheint weg zu sein. Ich weis aber nicht ob sie vielleicht wieder kommt.... Hatte ich schonmal. Trotzdem vielen Dank für Ihre Hilfe :D
mbam.txt

Code:

Malwarebytes Anti-Malware

www.malwarebytes.org
 

Suchlauf Datum: 13.05.2015

Suchlauf-Zeit: 14:22:52

Logdatei: mbam.txt

Administrator: Ja
 

Version: 2.01.6.1022

Malware Datenbank: v2015.05.13.03

Rootkit Datenbank: v2015.04.21.01

Lizenz: Kostenlos

Malware Schutz: Deaktiviert

Bösartiger Webseiten Schutz: Deaktiviert

Selbstschutz: Deaktiviert
 

Betriebssystem: Windows 7 Service Pack 1

CPU: x64

Dateisystem: NTFS

Benutzer: Dima
 

Suchlauf-Art: Bedrohungs-Suchlauf

Ergebnis: Abgeschlossen

Durchsuchte Objekte: 435364

Verstrichene Zeit: 10 Min, 54 Sek
 

Speicher: Aktiviert

Autostart: Aktiviert

Dateisystem: Aktiviert

Archive: Aktiviert

Rootkits: Deaktiviert

Heuristik: Aktiviert

PUP: Aktiviert

PUM: Aktiviert
 

Prozesse: 0

(Keine schädliche Elemente gefunden)
 

Module: 0

(Keine schädliche Elemente gefunden)
 

Registrierungsschlüssel: 10

PUP.Optional.CinemaPlus.A, HKLM\SOFTWARE\WOW6432NODE\CinemaPlus-3.2cV07.05, In Quarantäne, [c0b9e65da4e61224e4efa611e02319e7], 

PUP.Optional.CinemaPlus.A, HKLM\SOFTWARE\WOW6432NODE\CinemaPlus-3.2cV07.05-nv, In Quarantäne, [fd7cd66daddd3105518202b5dd2645bb], 

PUP.Optional.CinemaPlus.A, HKLM\SOFTWARE\WOW6432NODE\CinemaPlus-3.2cV07.05-nv-ie, In Quarantäne, [aacf5fe4d2b8db5b08cb595e887be31d], 

PUP.Optional.QuickRef.A, HKLM\SOFTWARE\WOW6432NODE\QuickRef_1.10.0.13, In Quarantäne, [6f0a1b2818726dc9b0ed75389b6851af], 

PUP.Optional.Booster.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{1146AC44-2F03-4431-B4FD-889BC837521F}{cae99edb}, In Quarantäne, [d4a58bb888025bdbf78f6968e81bd32d], 

PUP.Optional.Booster.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{1146AC44-2F03-4431-B4FD-889BC837521F}{da05e809}, In Quarantäne, [80f9f64d3c4e261088fe9c35be451fe1], 

PUP.Optional.QuickRef.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\qrnfd_1_10_0_13, In Quarantäne, [86f31e251d6d91a54b55a607739019e7], 

PUP.Optional.CinemaPlus.A, HKU\S-1-5-21-221738678-620704744-704572411-1000\SOFTWARE\CinemaPlus-3.2cV07.05-nv, In Quarantäne, [5821ba89f5953ef8a82cb9fe8d7624dc], 

PUP.Optional.CinemaPlus.A, HKU\S-1-5-21-221738678-620704744-704572411-1000\SOFTWARE\CinemaPlus-3.2cV07.05-nv-ie, In Quarantäne, [da9f6ed5abdf9d994094734417ecea16], 

PUP.Optional.ICinema.A, HKU\S-1-5-21-221738678-620704744-704572411-1000\SOFTWARE\I-Cinema, In Quarantäne, [48312221d5b57bbbfd05dfe8c142649c], 
 

Registrierungswerte: 0

(Keine schädliche Elemente gefunden)
 

Registrierungsdaten: 0

(Keine schädliche Elemente gefunden)
 

Ordner: 0

(Keine schädliche Elemente gefunden)
 

Dateien: 2

PUP.Optional.WebTInst.A, C:\Windows\System32\drivers\Msft_Kernel_webTinstMKTN84_01009.Wdf, In Quarantäne, [94e592b1365443f3ff1d03a5da297789], 

PUP.Optional.WebInstr.A, C:\Windows\System32\drivers\Msft_Kernel_webinstr_01009.Wdf, In Quarantäne, [8fea70d385058ea865cfc2eea45f4fb1], 
 

Physische Sektoren: 0

(Keine schädliche Elemente gefunden)
 
 

(end)

FRST.txt

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-05-2015

Ran by Dima (administrator) on DIMAS-PC on 13-05-2015 14:48:23

Running from C:\Users\Dima\Desktop\Downloads

Loaded Profiles: Dima (Available profiles: Dima)

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: FF)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe

(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

(Microsoft Corporation) C:\Windows\System32\mqsvc.exe

(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe

(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 2\creator-ws.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry.exe

(Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe

(Microsoft Corporation) C:\Windows\System32\rundll32.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

(Akamai Technologies, Inc.) C:\Users\Dima\AppData\Local\Akamai\netsession_win.exe

(Akamai Technologies, Inc.) C:\Users\Dima\AppData\Local\Akamai\netsession_win.exe

(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe

(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe

(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe

(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

(AVM Berlin) C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe

(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe

(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe

(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11785832 2011-03-10] (Realtek Semiconductor)

HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1332296 2015-01-30] (Microsoft Corporation)

HKLM\...\Run: [3D BubbleSound] => "C:\Program Files\BubbleSound\3D BubbleSound.exe"

HKLM-x32\...\Run: [SuiteTray] => C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [340848 2011-04-02] (Egis Technology Inc.)

HKLM-x32\...\Run: [EgisTecPMMUpdate] => C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [408432 2011-03-29] (Egis Technology Inc.)

HKLM-x32\...\Run: [EgisUpdate] => C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [202608 2011-03-29] (Egis Technology Inc.)

HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [297280 2011-04-24] (NTI Corporation)

HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)

HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55568 2015-03-25] (Raptr, Inc)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-11-17] (DivX, LLC)

HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-03-30] (LogMeIn Inc.)

HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [933888 2012-08-21] (AVM Berlin)

Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2888384 2015-05-12] (Valve Corporation)

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3619160 2015-01-28] (Electronic Arts)

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Dima\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-30] (Akamai Technologies, Inc.)

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Dxtory Update Checker 2.0] => C:\Program Files (x86)\ExKode\Dxtory2.0\UpdateChecker.exe [93696 2010-10-17] (Dxtory Software)

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [\\DIMA-PC\EPSON SX210 Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFDE.EXE [223232 2008-11-05] (SEIKO EPSON CORPORATION)

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [GoogleChromeAutoLaunch_74AB638E1E27FA41128D672CA46F567E] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [812872 2015-05-05] (Google Inc.)

HKU\S-1-5-18\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2014-08-23]

ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)

BootExecute: autocheck autochk * sdnclean64.exe
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome

HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll No File

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28] (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation)

BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)

BHO-x32: PDF Architect Helper -> {691B33B0-B86E-47F3-81C7-56E4FE3B929C} -> C:\Program Files (x86)\PDF Architect 2\creator-ie-helper.dll [2014-10-10] (pdfforge GmbH)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28] (Oracle Corporation)

BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation)

Toolbar: HKLM-x32 - PDF Architect Toolbar - {DEEB13D7-CEA9-45FB-B77C-E039BEC85221} - C:\Program Files (x86)\PDF Architect 2\creator-ie-plugin.dll [2014-10-10] (pdfforge GmbH)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
 

FireFox:

========

FF ProfilePath: C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)

FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll [2014-09-01] (EA Digital Illusions CE AB)

FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-28] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2013-09-08] (Microsoft Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-11-12] (VideoLAN)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll [2014-06-24] (Adobe Systems, Inc.)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)

FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2014-11-21] (DivX, LLC)

FF Plugin-x32: @esn/npbattlelog,version=2.3.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll No File

FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll [2014-09-01] (EA Digital Illusions CE AB)

FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-28] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation)

FF Plugin-x32: @mcafee.com/SAFFPlugin -> C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll No File

FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2013-09-08] (Microsoft Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)

FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npnxgameEU.dll [2014-11-12] (Nexon)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)

FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll [2014-10-10] (pdfforge GmbH)

FF Plugin HKU\S-1-5-21-221738678-620704744-704572411-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Dima\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS)

FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor

FF HKLM-x32\...\Firefox\Extensions: [pdf_architect_2_conv@pdfarchitect.org] - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension

FF Extension: PDF Architect 2 Creator - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension [2015-02-26]

FF HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi

FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
 

Chrome: 

=======

CHR Profile: C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Slides) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-05-08]

CHR Extension: (Google Docs) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-05-08]

CHR Extension: (Google Drive) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-05-08]

CHR Extension: (YouTube) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-05-08]

CHR Extension: (Google Search) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-05-08]

CHR Extension: (Google Sheets) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-05-08]

CHR Extension: (Bookmark Manager) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-08]

CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-08]

CHR Extension: (Google Wallet) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]

CHR Extension: (Gmail) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-08]
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [237864 2015-03-21] (EasyAntiCheat Ltd)

R2 GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [29696 2011-05-26] (Acer Incorporated) [File not signed]

U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2015-02-16] (Hi-Rez Studios) [File not signed]

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-03-30] (LogMeIn, Inc.)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)

S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)

R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2015-01-30] (Microsoft Corporation)

R2 MSMQ; C:\Windows\system32\mqsvc.exe [9216 2009-07-14] (Microsoft Corporation)

R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366512 2015-01-30] (Microsoft Corporation)

S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5128944 2013-11-19] (INCA Internet Co., Ltd.) [File not signed]

R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256832 2011-04-24] (NTI Corporation)

S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910640 2015-03-02] (Electronic Arts)

S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-10-10] (pdfforge GmbH)

R2 PDF Architect 2 Creator; C:\Program Files (x86)\PDF Architect 2\creator-ws.exe [738856 2014-10-10] (pdfforge GmbH)

S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-10-10] (pdfforge GmbH)

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-10-11] ()

R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)

R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)

R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)

S3 Survarium-Steam Update Service; C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium_service.exe [76408 2015-04-03] ()

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

S2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2012-04-25] (AVM Berlin)

R3 fwlanusb5; C:\Windows\System32\DRIVERS\fwlanusb5.sys [982784 2012-08-21] (AVM GmbH)

S3 GameKB; C:\Windows\System32\drivers\GameKB.sys [27648 2012-05-11] () [File not signed]

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)

S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [274696 2014-11-15] (Microsoft Corporation)

R3 MQAC; C:\Windows\System32\drivers\mqac.sys [189440 2009-07-14] (Microsoft Corporation)

R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124560 2014-11-15] (Microsoft Corporation)

S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-05-17] (Anchorfree Inc.)

S3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2014-07-02] (SplitmediaLabs Limited)

S3 BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [X]

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

S3 hxsyol; \??\C:\AeriaGames\AuraKingdom\avital\hxsy64.sys [X]

S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-05-13 14:46 - 2015-05-13 14:46 - 00002936 _____ () C:\Users\Dima\Desktop\mbam.txt

2015-05-12 22:45 - 2015-05-12 22:45 - 00000008 __RSH () C:\ProgramData\ntuser.pol

2015-05-12 19:49 - 2015-05-12 19:49 - 00021496 _____ () C:\Users\Dima\Desktop\Tobi ist sexy.odt

2015-05-12 13:00 - 2015-05-12 13:00 - 00030620 _____ () C:\ComboFix.txt

2015-05-12 12:46 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe

2015-05-12 12:46 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe

2015-05-12 12:46 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2015-05-12 12:46 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2015-05-12 12:46 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2015-05-12 12:46 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe

2015-05-12 12:46 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe

2015-05-12 12:46 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe

2015-05-12 12:41 - 2015-05-12 13:00 - 00000000 ____D () C:\Qoobox

2015-05-12 12:40 - 2015-05-12 12:59 - 00000000 ____D () C:\Windows\erdnt

2015-05-12 12:38 - 2015-05-12 12:39 - 05623215 ____R (Swearware) C:\Users\Dima\Desktop\ComboFix.exe

2015-05-11 23:00 - 2015-05-12 16:13 - 00000000 ____D () C:\Users\Dima\AppData\Local\Eclipse

2015-05-11 22:03 - 2015-05-13 14:48 - 00000000 ____D () C:\FRST

2015-05-11 20:59 - 2015-05-11 20:59 - 00000000 ____D () C:\Users\Dima\AppData\Local\My Games

2015-05-10 18:44 - 2015-05-10 18:44 - 00000000 ____D () C:\Users\Dima\AppData\Local\Origin

2015-05-10 18:05 - 2015-05-10 18:05 - 00001117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2015-05-10 18:05 - 2015-05-10 18:05 - 00001105 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk

2015-05-10 18:05 - 2015-05-10 18:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2015-05-10 16:15 - 2015-05-10 16:15 - 00000000 ____D () C:\Users\Dima\AppData\Local\EgisTec IPS

2015-05-10 16:14 - 2015-05-10 16:14 - 00066432 _____ () C:\Users\Dima\AppData\Local\GDIPFONTCACHEV1.DAT

2015-05-10 16:13 - 2015-05-13 14:41 - 00000000 ____D () C:\Users\Dima\AppData\Local\LogMeIn Hamachi

2015-05-10 16:13 - 2015-05-10 16:13 - 00000000 ____D () C:\Users\Dima\AppData\Local\LogMeIn

2015-05-10 16:12 - 2015-05-10 16:12 - 00000000 ____D () C:\Users\Dima\AppData\Local\VirtualStore

2015-05-10 16:07 - 2015-05-11 23:41 - 00000000 ____D () C:\AdwCleaner

2015-05-08 20:43 - 2015-05-08 20:43 - 00000000 ____D () C:\Users\Dima\AppData\Local\openvr

2015-05-08 20:42 - 2015-05-08 20:42 - 00000000 ____D () C:\Users\Dima\AppData\Local\Steam

2015-05-08 19:44 - 2015-05-08 19:44 - 00000000 ____D () C:\Users\Dima\AppData\Local\Macromedia

2015-05-08 19:43 - 2015-05-09 22:34 - 00000000 ____D () C:\Users\Dima\AppData\Local\Mozilla

2015-05-08 18:41 - 2015-05-08 18:41 - 00000000 ____D () C:\Users\Dima\AppData\Local\ATI

2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieUserList

2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieSiteList

2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieBrowserModeList

2015-05-08 14:49 - 2015-05-08 14:49 - 00000000 ____D () C:\ProgramData\Kikblaster

2015-05-08 14:33 - 2015-05-08 19:54 - 00000000 ____D () C:\Program Files (x86)\Edu App

2015-05-08 14:20 - 2015-05-08 14:52 - 00000000 ____D () C:\Users\Dima\AppData\Local\00000000-1431094823-0000-0000-D43D7EBF2FB4

2015-05-04 20:34 - 2015-05-04 20:34 - 00059505 _____ () C:\Users\Dima\Documents\ts3_clientui-win64-1407159763-2015-05-04 20_34_27.843240.dmp

2015-04-26 16:02 - 2015-04-26 16:02 - 00000000 ____D () C:\Users\Dima\Documents\DFO

2015-04-25 20:20 - 2015-04-25 20:20 - 00001734 _____ () C:\Users\Public\Desktop\Dungeon Fighter Online.lnk

2015-04-25 20:20 - 2015-04-25 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\neople

2015-04-25 20:20 - 2015-04-25 20:20 - 00000000 ____D () C:\Neople

2015-04-25 15:57 - 2015-04-26 13:15 - 00000000 ____D () C:\Users\Dima\Documents\DragonNest

2015-04-24 12:20 - 2015-05-10 18:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2015-04-20 13:37 - 2015-04-20 13:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FRITZ!WLAN

2015-04-20 13:37 - 2015-04-20 13:37 - 00000000 ____D () C:\Program Files (x86)\avmwlanstick

2015-04-20 13:36 - 2015-04-20 13:36 - 00000000 ____D () C:\Users\Dima\AVM_Driver

2015-04-20 13:36 - 2012-04-25 01:00 - 00014120 _____ (AVM Berlin) C:\Windows\system32\Drivers\avmeject.sys

2015-04-20 00:51 - 2015-04-20 00:51 - 00002956 _____ () C:\Windows\avmacc1.log

2015-04-20 00:51 - 2012-07-12 02:00 - 00480632 _____ (AVM Berlin) C:\Windows\instwcli.dex

2015-04-20 00:45 - 2015-04-20 00:45 - 00003216 _____ () C:\Windows\System32\Tasks\{35EE529B-2794-4708-8B79-567E126A4A7F}

2015-04-20 00:05 - 2015-04-20 13:36 - 00001479 _____ () C:\Windows\avmsetup.log

2015-04-20 00:05 - 2015-04-20 13:36 - 00000490 _____ () C:\Windows\avmadd32.log

2015-04-20 00:05 - 2015-04-20 00:54 - 00197887 _____ () C:\Windows\avmacc.log

2015-04-20 00:05 - 2015-04-20 00:44 - 00000000 ____D () C:\Program Files (x86)\AVM_update

2015-04-19 20:43 - 2015-04-19 20:43 - 00001906 _____ () C:\Users\Dima\Desktop\EliteDekaron.lnk

2015-04-19 20:43 - 2015-04-19 20:43 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Elite Dekaron

2015-04-19 20:40 - 2015-04-19 21:03 - 00000000 ____D () C:\Program Files (x86)\Elite Dekaron

2015-04-19 20:40 - 2015-04-19 20:40 - 00000000 ____D () C:\Windows\Elite Dekaron

2015-04-16 16:36 - 2015-04-16 16:43 - 00000000 ___SD () C:\Windows\system32\GWX

2015-04-16 16:36 - 2015-04-16 16:36 - 00000000 ___SD () C:\Windows\SysWOW64\GWX

2015-04-15 21:14 - 2015-04-15 21:14 - 18178736 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe

2015-04-14 20:39 - 2015-03-25 05:24 - 03298816 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 02553856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2015-04-14 20:39 - 2015-03-25 05:24 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2015-04-14 20:39 - 2015-03-25 05:23 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-04-14 20:39 - 2015-03-25 05:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-04-14 20:39 - 2015-03-25 05:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll

2015-04-14 20:39 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2015-04-14 20:39 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2015-04-14 20:39 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2015-04-14 20:39 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2015-04-14 20:39 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2015-04-14 20:39 - 2015-03-23 05:25 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2015-04-14 20:39 - 2015-03-23 05:25 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2015-04-14 20:39 - 2015-03-23 05:24 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2015-04-14 20:39 - 2015-03-23 05:24 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2015-04-14 20:39 - 2015-03-23 05:24 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2015-04-14 20:39 - 2015-03-23 05:24 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2015-04-14 20:39 - 2015-03-23 05:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

2015-04-14 20:39 - 2015-03-23 05:17 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2015-04-14 20:39 - 2015-03-17 07:22 - 05557696 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-04-14 20:39 - 2015-03-17 07:22 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-04-14 20:39 - 2015-03-17 07:22 - 00095672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-04-14 20:39 - 2015-03-17 07:19 - 01727904 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2015-04-14 20:39 - 2015-03-17 07:17 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2015-04-14 20:39 - 2015-03-17 07:17 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-04-14 20:39 - 2015-03-17 07:16 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2015-04-14 20:39 - 2015-03-17 07:16 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-04-14 20:39 - 2015-03-17 07:16 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2015-04-14 20:39 - 2015-03-17 07:15 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2015-04-14 20:39 - 2015-03-17 07:15 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-04-14 20:39 - 2015-03-17 07:15 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-04-14 20:39 - 2015-03-17 07:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2015-04-14 20:39 - 2015-03-17 07:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2015-04-14 20:39 - 2015-03-17 06:59 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2015-04-14 20:39 - 2015-03-17 06:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2015-04-14 20:39 - 2015-03-17 06:56 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2015-04-14 20:39 - 2015-03-17 06:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2015-04-14 20:39 - 2015-03-17 06:56 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2015-04-14 20:39 - 2015-03-10 05:25 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2015-04-14 20:39 - 2015-03-10 05:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2015-04-14 20:39 - 2015-03-10 05:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2015-04-14 20:39 - 2015-03-10 05:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2015-04-14 20:39 - 2015-03-05 07:12 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2015-04-14 20:39 - 2015-03-05 06:05 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2015-04-14 20:38 - 2015-03-17 07:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2015-04-14 20:38 - 2015-03-17 07:16 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-04-14 20:38 - 2015-03-17 07:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-04-14 20:38 - 2015-03-17 07:13 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-04-14 20:38 - 2015-03-17 07:13 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2015-04-14 20:38 - 2015-03-17 06:57 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2015-04-14 20:38 - 2015-03-17 06:56 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2015-04-14 20:38 - 2015-03-17 06:56 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2015-04-14 20:38 - 2015-03-17 06:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2015-04-14 20:38 - 2015-03-17 06:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2015-04-14 20:38 - 2015-03-17 06:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2015-04-14 20:38 - 2015-03-17 06:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 05:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2015-04-14 20:38 - 2015-03-17 05:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2015-04-14 20:38 - 2015-03-17 05:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 05:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2015-04-14 20:38 - 2015-03-17 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2015-04-14 20:38 - 2015-03-04 06:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys

2015-04-14 20:38 - 2015-03-04 06:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll

2015-04-14 20:38 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll

2015-04-14 20:38 - 2015-02-25 05:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-05-13 14:50 - 2009-07-14 06:45 - 00028928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-05-13 14:50 - 2009-07-14 06:45 - 00028928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-05-13 14:47 - 2013-08-08 20:19 - 01111539 _____ () C:\Windows\WindowsUpdate.log

2015-05-13 14:44 - 2014-11-22 13:30 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-05-13 14:43 - 2013-11-06 17:55 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Raptr

2015-05-13 14:43 - 2013-08-09 06:11 - 00699416 _____ () C:\Windows\system32\perfh007.dat

2015-05-13 14:43 - 2013-08-09 06:11 - 00149556 _____ () C:\Windows\system32\perfc007.dat

2015-05-13 14:43 - 2009-07-14 07:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-05-13 14:39 - 2013-08-17 15:43 - 00000000 ____D () C:\Program Files (x86)\Origin

2015-05-13 14:37 - 2013-08-15 21:16 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-05-13 14:36 - 2010-11-21 05:47 - 00401272 _____ () C:\Windows\PFRO.log

2015-05-13 14:36 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-05-13 14:36 - 2009-07-14 06:51 - 00121145 _____ () C:\Windows\setupact.log

2015-05-13 14:22 - 2014-11-22 13:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-05-13 14:22 - 2014-11-22 13:30 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2015-05-13 14:14 - 2013-08-15 14:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-05-13 14:12 - 2013-08-08 21:08 - 00000000 ____D () C:\Program Files (x86)\Steam

2015-05-13 13:52 - 2013-08-15 21:16 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-05-12 22:47 - 2014-01-07 19:34 - 01850368 ___SH () C:\Users\Dima\Desktop\Thumbs.db

2015-05-12 22:38 - 2014-08-24 20:42 - 00000000 ____D () C:\Windows\System32\Tasks\Games

2015-05-12 22:38 - 2013-09-21 18:06 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\TS3Client

2015-05-12 22:38 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy

2015-05-12 22:38 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy

2015-05-12 20:59 - 2014-08-09 17:35 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\.minecraft

2015-05-12 16:12 - 2015-04-10 17:41 - 00000000 ____D () C:\Users\Dima\Desktop\eclipse

2015-05-12 13:00 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default

2015-05-12 12:57 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini

2015-05-12 12:40 - 2013-10-04 17:11 - 00000000 ____D () C:\ProgramData\Package Cache

2015-05-11 23:42 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2015-05-10 18:44 - 2013-08-17 15:43 - 00000000 ____D () C:\ProgramData\Origin

2015-05-10 18:19 - 2014-11-14 00:10 - 00000000 ____D () C:\Users\Dima\Desktop\lqobqwkv.default

2015-05-10 16:42 - 2014-10-05 15:02 - 00000000 ____D () C:\Users\Dima\AppData\Local\Adobe

2015-05-10 16:15 - 2013-12-20 13:37 - 00000000 ____D () C:\Users\Dima\AppData\Local\Akamai

2015-05-10 16:12 - 2013-08-08 15:36 - 00001419 _____ () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2015-05-10 16:10 - 2014-11-26 23:57 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WorldofTanks

2015-05-08 21:41 - 2013-12-30 15:03 - 00000000 ____D () C:\Program Files (x86)\7-Zip

2015-05-08 21:39 - 2013-12-18 15:08 - 00000000 ____D () C:\Program Files (x86)\ACASystems

2015-05-08 18:40 - 2013-11-02 02:16 - 00000000 ____D () C:\Users\Dima\Desktop\Neuer Ordner

2015-05-08 18:40 - 2013-08-15 21:16 - 00000000 ____D () C:\Users\Dima\AppData\Local\Google

2015-05-08 14:52 - 2014-11-30 22:57 - 00000000 ____D () C:\Users\Dima\AppData\Local\gegl-0.2

2015-05-08 14:52 - 2013-12-14 00:39 - 00000000 ____D () C:\Users\Dima\AppData\Local\Battle.net

2015-05-08 13:16 - 2013-08-15 15:52 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Skype

2015-05-02 22:30 - 2014-11-23 16:19 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\.technic

2015-05-02 22:30 - 2014-08-25 02:48 - 04697768 _____ () C:\Users\Dima\Desktop\TechnicLauncher.exe

2015-04-27 16:21 - 2015-02-28 15:34 - 00000000 ____D () C:\Users\Dima\Desktop\Bewerbung

2015-04-20 13:37 - 2014-02-12 19:55 - 00011424 _____ () C:\Windows\avmfwlanci.log

2015-04-20 13:37 - 2014-02-12 19:55 - 00011167 _____ () C:\Windows\AVMInstall.Log

2015-04-20 13:36 - 2014-02-12 19:54 - 00000000 ____D () C:\Windows\AVM_Driver

2015-04-20 13:36 - 2013-08-08 15:34 - 00000000 ____D () C:\Users\Dima

2015-04-20 00:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF

2015-04-18 17:38 - 2013-09-13 14:13 - 00000000 ____D () C:\Program Files (x86)\Raptr

2015-04-18 12:26 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat

2015-04-16 16:36 - 2014-12-22 19:12 - 00000000 ____D () C:\Windows\system32\appraiser

2015-04-16 16:36 - 2014-05-01 14:38 - 00000000 ___SD () C:\Windows\system32\CompatTel

2015-04-16 16:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions

2015-04-16 12:44 - 2014-02-26 15:58 - 00002022 _____ () C:\Users\Dima\monsterhunter.txt

2015-04-15 21:15 - 2013-08-15 14:45 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-04-15 21:15 - 2013-08-15 14:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2015-04-15 21:15 - 2011-07-25 05:19 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-04-15 12:54 - 2013-09-09 16:14 - 01593956 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2015-04-15 12:52 - 2014-10-06 19:31 - 00000000 ___RD () C:\Program Files (x86)\Skype

2015-04-15 12:52 - 2011-07-25 05:01 - 00000000 ____D () C:\ProgramData\Skype

2015-04-15 12:51 - 2013-11-11 13:25 - 00000000 ____D () C:\Windows\system32\MRT

2015-04-15 12:45 - 2013-11-11 13:25 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-04-14 09:37 - 2014-11-22 13:30 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2015-04-14 09:37 - 2014-11-22 13:30 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2015-04-14 09:37 - 2014-11-22 13:30 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
 

==================== Files in the root of some directories =======
 

2013-11-09 21:45 - 2013-11-09 21:45 - 0000004 _____ () C:\Users\Dima\AppData\Roaming\steam_md4.dat

2013-08-08 21:05 - 2013-08-08 21:05 - 0000654 _____ () C:\ProgramData\ArcadeDeluxe5.log
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2011-07-25 04:31
 

==================== End Of Log ============================

--- --- ---

kriegnes

13.05.2015 13:57

Addition.txt

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-05-2015

Ran by Dima at 2015-05-13 14:50:44

Running from C:\Users\Dima\Desktop\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Accounts: =============================
 

Administrator (S-1-5-21-221738678-620704744-704572411-500 - Administrator - Disabled)

Dima (S-1-5-21-221738678-620704744-704572411-1000 - Administrator - Enabled) => C:\Users\Dima

Gast (S-1-5-21-221738678-620704744-704572411-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-221738678-620704744-704572411-1002 - Limited - Enabled)
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}

AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )

ACA Screen Recorder 5.30 (HKLM-x32\...\ACAScreenRecorder_EN_is1) (Version: 5.30 - ACA Systems)

Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.99 - NTI Corporation)

Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3502 - Acer Incorporated)

Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3502 - Acer Incorporated)

Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0517.2011 - Acer Incorporated)

Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)

Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)

Adobe Reader X (10.1.13) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.13 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.)

Agarest: Generations of War (HKLM-x32\...\Steam App 237890) (Version:  - Ghostlight)

Age of Empires II: HD Edition (HKLM-x32\...\Steam App 221380) (Version:  - Hidden Path Entertainment, Ensemble Studios)

AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)

Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.36 - Atheros Communications Inc.)

Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team)

Avidemux 2.6 - 64bits (HKLM-x32\...\Avidemux 2.6 - 64bits (64-bit)) (Version: 2.6.8.9046 - )

AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version: 1.2.0.0 - AVM Berlin)

Backup Manager V3 (x32 Version: 3.0.0.99 - NTI Corporation) Hidden

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)

Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.3.2.15221 - Electronic Arts)

Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.5.1 - EA Digital Illusions CE AB)

Borderlands 2 (HKLM-x32\...\Steam App 49520) (Version:  - Gearbox Software)

Call of Duty 4: Modern Warfare (HKLM-x32\...\Steam App 7940) (Version:  - Infinity Ward)

Call of Duty: Black Ops II - Multiplayer (HKLM-x32\...\Steam App 202990) (Version:  - )

Call of Duty: Black Ops II - Zombies (HKLM-x32\...\Steam App 212910) (Version:  - )

Call of Duty: Black Ops II (HKLM-x32\...\Steam App 202970) (Version:  - Treyarch)

Call of Duty: Ghosts - Multiplayer (HKLM-x32\...\Steam App 209170) (Version:  - )

Call of Duty: Ghosts (HKLM-x32\...\Steam App 209160) (Version:  - Infinity Ward)

Call of Duty: Modern Warfare 3 - Multiplayer (HKLM-x32\...\Steam App 42690) (Version:  - Infinity Ward)

Call of Duty: Modern Warfare 3 (HKLM-x32\...\Steam App 42680) (Version:  - Infinity Ward)

Castle Crashers (HKLM-x32\...\Steam App 204360) (Version:  - The Behemoth)

Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)

Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)

Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)

clear.fi Client (HKLM-x32\...\{43AAE145-83CF-4C96-9A5E-756CEFCE879F}) (Version: 1.00.3500 - Acer Incorporated)

Combined Community Codec Pack 2013-11-27 (HKLM-x32\...\Combined Community Codec Pack_is1) (Version: 2013.11.27.0 - CCCP Project)

Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)

Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version:  - Valve)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Darksiders II (HKLM-x32\...\Steam App 50650) (Version:  - Vigil Games)

DFO (HKLM-x32\...\{C1E5C0FB-527E-42C6-BCA0-0A37A6124AE4}) (Version: 1.01.0000 - Neople)

DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.7.0.64 - DivX, LLC)

Dota 2 (HKLM-x32\...\Steam App 570) (Version:  - Valve)

Dragon Nest Europe (HKLM-x32\...\Steam App 258700) (Version:  - Eyedentity Games)

Dungeon Defenders (HKLM-x32\...\Steam App 65800) (Version:  - Trendy Entertainment)

Dxtory version 2.0.128 (HKLM-x32\...\Dxtory2.0_is1) (Version: 2.0.128 - ExKode Co. Ltd.)

Elite Dekaron (HKLM-x32\...\Elite Dekaron1.0) (Version: 1.0 - EliteKingdoms)

EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - )

Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )

Free YouTube to MP3 Converter version 3.12.20.1230 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.20.1230 - DVDVideoSoft Ltd.)

Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Gameforge Live 2.0.5 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.5 - Gameforge)

Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Facepunch Studios)

GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)

Glyph (HKLM-x32\...\Glyph) (Version:  - Trion Worlds, Inc.)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.152 - Google Inc.)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden

Gumboy Tournament (HKLM-x32\...\Steam App 11230) (Version:  - CINEMAX, s.r.o.)

Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)

Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)

Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.2.1004 - Intel Corporation)

Java 7 Update 75 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417075FF}) (Version: 7.0.750 - Oracle)

Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)

Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)

Java SE Development Kit 7 Update 75 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170750}) (Version: 1.7.0.750 - Oracle)

Java SE Development Kit 8 Update 25 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180250}) (Version: 8.0.250.18 - Oracle Corporation)

Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )

League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden

Loadout (HKLM-x32\...\Steam App 208090) (Version:  - Edge of Reality)

LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.328 - LogMeIn, Inc.)

LogMeIn Hamachi (x32 Version: 2.2.0.328 - LogMeIn, Inc.) Hidden

LOLReplay (HKLM-x32\...\LOLReplay) (Version: 0.8.9.11 - www.leaguereplays.com)

Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)

McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)

Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.7.205.0 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)

Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)

Might & Magic: Duel of Champions (HKLM-x32\...\Steam App 256410) (Version:  - Ubisoft Quebec)

MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)

Mozilla Firefox 37.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.2 (x86 de)) (Version: 37.0.2 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.2 - Mozilla)

MyWinLocker (Version: 4.0.14.25 - Egis Technology Inc.) Hidden

MyWinLocker 4 (x32 Version: 4.0.14.25 - Egis Technology Inc.) Hidden

MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.15 - Egis Technology Inc.)

MyWinLocker Suite (x32 Version: 4.0.14.15 - Egis Technology Inc.) Hidden

Neverwinter (HKLM-x32\...\Steam App 109600) (Version:  - Cryptic Studios)

newsXpresso (HKLM-x32\...\InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}) (Version: 1.0.0.40 - esobi Inc.)

newsXpresso (x32 Version: 1.0.0.40 - esobi Inc.) Hidden

Nosgoth (HKLM-x32\...\Steam App 200110) (Version: 150120.100528 - Square Enix Ltd)

Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)

NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.8942 - NTI Corporation)

NTI Media Maker 9 (x32 Version: 9.0.2.8942 - NTI Corporation) Hidden

NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)

Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )

OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)

Origin (HKLM-x32\...\Origin) (Version: 9.3.1.4482 - Electronic Arts, Inc.)

paint.net (HKLM\...\{141BA46D-2D1F-4DA6-9448-B847334585C0}) (Version: 4.0.4 - dotPDN LLC)

PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.51.17865 - pdfforge GmbH)

PDF Architect 2 Create Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden

PDF Architect 2 Edit Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden

PDF Architect 2 View Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden

PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.0.2 - pdfforge)

Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Pokemon Online 2.4.1 (HKLM-x32\...\{2C08D7E7-9EE1-4A08-AFE0-745F02DCD6A4}_is1) (Version:  - Dreambelievers)

Pokémon Trading Card Game Online (HKLM-x32\...\{B0952280-3DF0-4AA9-9599-092D5E8D36AD}) (Version: 2.24.1 - The Pokémon Company International)

Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)

Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Ralink RT2860 Wireless LAN Card (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 1.5.6.0 - Ralink)

Raptr (HKLM-x32\...\Raptr) (Version:  - )

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6329 - Realtek Semiconductor Corp.)

Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30123 - Realtek Semiconductor Corp.)

Serious Sam 3: BFE (HKLM-x32\...\Steam App 41070) (Version:  - Croteam)

Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden

Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden

Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version:  - 2K Games, Inc.)

SIW 2013 Home Edition (HKLM-x32\...\{AB67580-257C-45FF-B8F4-C8C30682091A}_is1) (Version: 2013.05.14 - Topala Software Solutions)

Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)

Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 2.0.2574.0 - Hi-Rez Studios)

Source SDK Base 2006 (HKLM-x32\...\Steam App 215) (Version:  - Valve)

SpellForce (HKLM-x32\...\SpellForce) (Version:  - )

Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)

Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)

Survarium (HKLM-x32\...\Steam App 355840) (Version:  - Vostok Games)

Survarium-Steam (HKLM-x32\...\{A3D9343D-77CD-4bf4-A47A-F87B3BE985B4}_is1) (Version: 0.27d - )

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

System Requirements Lab CYRI (HKLM-x32\...\{E362724E-9320-4946-AF34-874E7B6B2927}) (Version: 6.0.7.0 - Husdawg, LLC)

Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)

TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)

TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.12 - TeamSpeak Systems GmbH)

TIPP10 Version 2.1.0 (HKLM-x32\...\TIPP10_is1) (Version:  - (c) 2006-2011, Tom Thielicke IT Solutions)

Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel)

Unity (HKLM-x32\...\Unity) (Version: 4.6.1f1 - Unity Technologies ApS)

VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden

Vindictus EU (HKLM-x32\...\Vindictus EU) (Version:  - )

VLC media player 2.1.1 (HKLM\...\VLC media player) (Version: 2.1.1 - VideoLAN)

Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3503 - Acer Incorporated)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)

WinRAR 5.00 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)

YGOPro DevPro Version 1.9.7 r2 (HKLM-x32\...\{3CF2634F-3F38-4DD3-9201-CB2FE6B5FF23}_is1) (Version: 1.9.7 r2 - YGOPro DevPro Online)

Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden

Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
 

==================== Restore Points  =========================
 

05-05-2015 16:18:48 Windows Update

08-05-2015 20:00:02 Windows Update

12-05-2015 12:46:24 ComboFix created restore point
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 04:34 - 2014-09-21 15:27 - 00000860 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost

::1 localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {15731A0E-D960-4E94-9E60-DACD297E3193} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2014-06-24] (Safer-Networking Ltd.)

Task: {1860A38F-8939-478A-BF5C-F565A480142F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2014-06-24] (Safer-Networking Ltd.)

Task: {1D4EC24B-2C6F-4F04-8F3E-6AA90BAED5D2} - System32\Tasks\{A10EA19B-8B09-454D-B360-CA92A1D17DBD} => pcalua.exe -a C:\Users\Dima\Desktop\InstallIW4M(1).exe -d C:\Users\Dima\Desktop

Task: {276BF61D-668E-4313-BA37-702F352555A9} - System32\Tasks\Adobe Reader Speed Launcher => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2014-12-03] (Adobe Systems Incorporated)

Task: {2B46497E-052E-4882-879A-2CED38AE75F5} - System32\Tasks\{6B05723E-8DB6-495D-A0DA-ECA4FC2E26D7} => C:\Program Files (x86)\WeGame\wegame.exe

Task: {54E1645E-EDBD-4280-B2FF-13D3BBEC2047} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-07] (Google Inc.)

Task: {5975092F-1EFE-4D6C-A337-025C0E67059F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)

Task: {5B6F25FF-1AB6-4306-AF5F-150B752505F5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-07] (Google Inc.)

Task: {ADDA105F-5269-41EB-BE7A-FADC87447563} - System32\Tasks\{153E695E-4162-4A7B-8004-BCBAF85CE618} => pcalua.exe -a C:\Users\Dima\AVM_Driver\FWLAN\setup.exe -d C:\Users\Dima\AVM_Driver\FWLAN

Task: {B0E56CFC-54EA-49E5-AEE6-544EE780094B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15] (Adobe Systems Incorporated)

Task: {C4630A3F-B5F1-4159-9F2B-8EF55530D99B} - System32\Tasks\Adobe ARM => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)

Task: {C618B53C-0F59-4601-8B52-1D81C275086B} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)

Task: {C7F562CC-8836-44FC-8085-91BD492874BE} - System32\Tasks\{35EE529B-2794-4708-8B79-567E126A4A7F} => pcalua.exe -a C:\Users\Dima\Desktop\Downloads\avm_fritz!wlan_usb_stick_x64_build_100906.exe -d C:\Users\Dima\Desktop\Downloads

Task: {D021483F-10CB-41B4-8816-109CDA214F59} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)

Task: {D216A597-8DFB-49AE-BB0C-69D9574172C8} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {D9E5BB12-DEEF-4673-A22C-7A60AF737292} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {E66F9E32-E05D-43A5-8A61-1251E464ABF9} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) ==============
 

2013-09-02 13:14 - 2014-10-11 21:02 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe

2014-01-10 07:26 - 2014-01-10 07:26 - 01861968 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

2011-04-24 03:29 - 2011-04-24 03:29 - 00465640 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll

2011-04-24 03:29 - 2011-04-24 03:29 - 01081664 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll

2011-04-24 03:29 - 2011-04-24 03:29 - 00125760 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll

2014-11-09 03:42 - 2014-05-13 13:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl

2014-11-09 03:42 - 2014-05-13 13:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl

2014-11-09 03:42 - 2014-05-13 13:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl

2014-11-09 03:42 - 2012-08-23 11:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll

2014-11-09 03:42 - 2012-04-03 18:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll

2014-01-10 07:28 - 2014-01-10 07:28 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll

2014-10-21 22:56 - 2014-10-21 22:56 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\9b1cac8d98bd69d3e56a26ff2f96f266\IsdiInterop.ni.dll

2011-07-25 04:42 - 2011-01-13 02:56 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

2010-11-23 00:56 - 2010-11-23 00:56 - 00087040 _____ () C:\Program Files (x86)\Raptr\_ctypes.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00043008 _____ () C:\Program Files (x86)\Raptr\_socket.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00805376 _____ () C:\Program Files (x86)\Raptr\_ssl.pyd

2014-05-14 01:26 - 2014-05-14 01:26 - 05812736 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtGui.pyd

2014-05-14 01:26 - 2014-05-14 01:26 - 00067584 _____ () C:\Program Files (x86)\Raptr\sip.pyd

2014-05-14 01:26 - 2014-05-14 01:26 - 01662464 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtCore.pyd

2014-05-14 01:26 - 2014-05-14 01:26 - 00494592 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtNetwork.pyd

2010-11-23 00:57 - 2010-11-23 00:57 - 00096256 _____ () C:\Program Files (x86)\Raptr\win32api.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00110592 _____ () C:\Program Files (x86)\Raptr\pywintypes26.dll

2010-11-23 00:56 - 2010-11-23 00:56 - 00010240 _____ () C:\Program Files (x86)\Raptr\select.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00356864 _____ () C:\Program Files (x86)\Raptr\_hashlib.pyd

2010-11-23 00:57 - 2010-11-23 00:57 - 00036352 _____ () C:\Program Files (x86)\Raptr\win32process.pyd

2010-11-23 00:57 - 2010-11-23 00:57 - 00111104 _____ () C:\Program Files (x86)\Raptr\win32file.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00044544 _____ () C:\Program Files (x86)\Raptr\_sqlite3.pyd

2011-02-15 20:17 - 2011-02-15 20:17 - 00417501 _____ () C:\Program Files (x86)\Raptr\sqlite3.dll

2010-11-23 00:57 - 2010-11-23 00:57 - 00167936 _____ () C:\Program Files (x86)\Raptr\win32gui.pyd

2014-05-14 01:26 - 2014-05-14 01:26 - 00313856 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtWebKit.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00127488 _____ () C:\Program Files (x86)\Raptr\pyexpat.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00009216 _____ () C:\Program Files (x86)\Raptr\winsound.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00354304 _____ () C:\Program Files (x86)\Raptr\pythoncom26.dll

2010-11-23 00:57 - 2010-11-23 00:57 - 00016384 _____ () C:\Program Files (x86)\Raptr\win32trace.pyd

2014-08-14 02:37 - 2014-08-14 02:37 - 00113171 _____ () C:\Program Files (x86)\Raptr\libvlc.dll

2014-08-14 02:37 - 2014-08-14 02:37 - 02396691 _____ () C:\Program Files (x86)\Raptr\libvlccore.dll

2010-11-23 00:56 - 2010-11-23 00:56 - 00583680 _____ () C:\Program Files (x86)\Raptr\unicodedata.pyd

2010-11-23 00:57 - 2010-11-23 00:57 - 00263168 _____ () C:\Program Files (x86)\Raptr\win32com.shell.shell.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00324608 _____ () C:\Program Files (x86)\Raptr\PIL._imaging.pyd

2013-11-21 02:05 - 2013-11-21 02:05 - 00256000 _____ () C:\Program Files (x86)\Raptr\amd_ags.dll

2012-02-06 22:28 - 2012-02-06 22:28 - 00010752 _____ () C:\Program Files (x86)\Raptr\Crypto.Random.OSRNG.winrandom.pyd

2012-02-06 22:28 - 2012-02-06 22:28 - 00011264 _____ () C:\Program Files (x86)\Raptr\Crypto.Util._counter.pyd

2012-02-06 22:28 - 2012-02-06 22:28 - 00031744 _____ () C:\Program Files (x86)\Raptr\Crypto.Cipher.AES.pyd

2010-11-23 00:57 - 2010-11-23 00:57 - 00141312 _____ () C:\Program Files (x86)\Raptr\gobject._gobject.pyd

2014-06-18 02:56 - 2014-06-18 02:56 - 02717595 _____ () C:\Program Files (x86)\Raptr\heliotrope._purple.pyd

2011-02-15 20:17 - 2011-02-15 20:17 - 01213633 _____ () C:\Program Files (x86)\Raptr\libxml2-2.dll

2010-11-23 01:06 - 2010-11-23 01:06 - 00055808 _____ () C:\Program Files (x86)\Raptr\zlib1.dll

2013-05-10 01:52 - 2013-05-10 01:52 - 00495680 _____ () C:\Program Files (x86)\Raptr\plugins\libaim.dll

2013-05-10 01:52 - 2013-05-10 01:52 - 01183699 _____ () C:\Program Files (x86)\Raptr\liboscar.dll

2013-05-10 01:52 - 2013-05-10 01:52 - 00483306 _____ () C:\Program Files (x86)\Raptr\plugins\libicq.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 00655356 _____ () C:\Program Files (x86)\Raptr\plugins\libirc.dll

2013-05-03 20:56 - 2013-05-03 20:56 - 01306387 _____ () C:\Program Files (x86)\Raptr\plugins\libmsn.dll

2013-05-03 20:56 - 2013-05-03 20:56 - 00565461 _____ () C:\Program Files (x86)\Raptr\plugins\libxmpp.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 01640221 _____ () C:\Program Files (x86)\Raptr\libjabber.dll

2013-05-03 20:56 - 2013-05-03 20:56 - 00506276 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoo.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 01053730 _____ () C:\Program Files (x86)\Raptr\libymsg.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 00497782 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoojp.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 00603326 _____ () C:\Program Files (x86)\Raptr\plugins\ssl-nss.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 00474199 _____ () C:\Program Files (x86)\Raptr\plugins\ssl.dll

2015-04-15 21:14 - 2015-04-15 21:14 - 16863920 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
 

==================== EXE Association (whitelisted) ===============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 

HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Classes\exefile:  <===== ATTENTION!
 

==================== Internet Explorer trusted/restricted ===============
 

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)
 

IE trusted site: HKU\S-1-5-21-221738678-620704744-704572411-1000\...\aeriagames.com -> hxxps://aeriagames.com

IE trusted site: HKU\S-1-5-21-221738678-620704744-704572411-1000\...\aeriagames.com -> hxxp://aeriagames.com
 
 

==================== Other Areas ============================
 

(Currently there is no automatic fix for this section.)
 

HKU\S-1-5-21-221738678-620704744-704572411-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.178.1
 

==================== MSCONFIG/TASK MANAGER disabled items ==
 

(Currently there is no automatic fix for this section.)
 

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Ralink Wireless Utility.lnk => C:\Windows\pss\Ralink Wireless Utility.lnk.CommonStartup

MSCONFIG\startupreg: Aeria Ignite => "C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe" silent

MSCONFIG\startupreg: Overwolf => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent

MSCONFIG\startupreg: Raptr => C:\PROGRA~2\Raptr\raptrstub.exe --startup
 

==================== FirewallRules (whitelisted) ===============
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

FirewallRules: [{78594C1C-0D50-4158-BE4B-630F903AD614}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [{6FBF251F-BD39-4F99-9B43-11228600FA75}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe

FirewallRules: [{D2661B1C-FB14-4488-85B6-C9F0F671AC26}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe

FirewallRules: [{2C171432-29A8-41AE-B4FC-C8A1B17AA814}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{5AB70EC2-290C-47AF-93E6-2FF6583923AE}] => (Allow) LPort=2869

FirewallRules: [{E223E5D1-C91F-43A7-BAF4-034AF2D39963}] => (Allow) LPort=1900

FirewallRules: [{87113CB6-D031-4465-A7DA-1190F21F5789}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe

FirewallRules: [{A6A9391B-02D1-49D7-ADC4-9186A84936CB}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

FirewallRules: [{57B9C597-A0EB-408F-856B-FA683C8132A3}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{714CDBAF-5604-42B3-B700-E8038F5DF945}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [TCP Query User{06F842FE-DDFA-4FCC-AE92-5F69EEE0F652}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe

FirewallRules: [UDP Query User{3661892A-DE75-4580-91A0-F9FBF1799DF3}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe

FirewallRules: [TCP Query User{5765CABA-404A-44EF-8227-7422B4001117}C:\program files (x86)\dragon's prophet\dp_x64.exe] => (Allow) C:\program files (x86)\dragon's prophet\dp_x64.exe

FirewallRules: [UDP Query User{4AB4E404-C83C-479E-AE15-ED70B9717177}C:\program files (x86)\dragon's prophet\dp_x64.exe] => (Allow) C:\program files (x86)\dragon's prophet\dp_x64.exe

FirewallRules: [{D8B75AC5-DB8B-4A3C-A379-08351FDB3A8A}] => (Block) C:\program files (x86)\dragon's prophet\dp_x64.exe

FirewallRules: [{FA2BCC55-2D25-4982-9813-648096C2D014}] => (Block) C:\program files (x86)\dragon's prophet\dp_x64.exe

FirewallRules: [TCP Query User{8BC7D8B9-96BF-48DA-B566-50842124FA04}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe

FirewallRules: [UDP Query User{9C72FA86-27B7-40B5-BCCB-3EE160D8159F}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe

FirewallRules: [TCP Query User{643C5904-C3B1-4EF9-B893-4374ECF6D6DA}C:\program files (x86)\dragon's prophet\launcher.exe] => (Allow) C:\program files (x86)\dragon's prophet\launcher.exe

FirewallRules: [UDP Query User{878B8F84-B88B-4D79-BA68-B0CE420657C1}C:\program files (x86)\dragon's prophet\launcher.exe] => (Allow) C:\program files (x86)\dragon's prophet\launcher.exe

FirewallRules: [{80ED7FA9-4202-4D90-836F-F9F56B4CDAE4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe

FirewallRules: [{4399A304-14B2-4EFA-B537-E8EA862FCC80}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe

FirewallRules: [{01721DB0-F656-4031-8930-1E8373DC2F7F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3sp.exe

FirewallRules: [{C1942149-4BF2-4840-B25B-0861219DBE3B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3sp.exe

FirewallRules: [{AD3CBC94-9015-4EEC-8010-9730A95F050C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3mp.exe

FirewallRules: [{83C71D22-7773-410B-9C20-2AA7FDCEB96E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3mp.exe

FirewallRules: [{E7F483C4-10DC-4293-ACA0-F3AF08D31698}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x86.exe

FirewallRules: [{27ADCB35-4841-4AF9-B2D7-CC086CF7A903}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\launcher.exe

FirewallRules: [{4933D89C-009A-43A4-A839-09A511BC8DFC}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\launcher.exe

FirewallRules: [{3D9A3A59-0A6C-440B-A6F9-0A90AC0DE8EB}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x64.exe

FirewallRules: [{18241FBC-0EF3-483B-94A6-AC00EEDBF4A7}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x64.exe

FirewallRules: [{C7D1F9D6-5F5C-4788-8D75-AA4662252A42}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x86.exe

FirewallRules: [TCP Query User{4C269EB3-8471-4A9F-8BEC-B534B181151E}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe

FirewallRules: [UDP Query User{721D1BD2-BDD0-4F36-AD02-862EE89713FE}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe

FirewallRules: [TCP Query User{C39306B7-FF57-4794-8B9A-9AA0F84CB38F}C:\users\dima\appdata\local\iw4m\iw4m.dat] => (Block) C:\users\dima\appdata\local\iw4m\iw4m.dat

FirewallRules: [UDP Query User{F8E2B0E8-5340-4B1C-92C0-7DA4FD31E1C2}C:\users\dima\appdata\local\iw4m\iw4m.dat] => (Block) C:\users\dima\appdata\local\iw4m\iw4m.dat

FirewallRules: [TCP Query User{1D2F39A8-48D1-4F21-9CF1-DE335D47F856}C:\users\dima\desktop\iw4m\iw4m.dat] => (Allow) C:\users\dima\desktop\iw4m\iw4m.dat

FirewallRules: [UDP Query User{56A99EDF-B65F-4AFD-AE16-F7D98D17E077}C:\users\dima\desktop\iw4m\iw4m.dat] => (Allow) C:\users\dima\desktop\iw4m\iw4m.dat

FirewallRules: [TCP Query User{2615C76C-73D3-4D32-B632-E52A4C790CC1}C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe

FirewallRules: [UDP Query User{06CB1C71-BEEC-4057-B2DC-C2D7E2D1CA89}C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe

FirewallRules: [{C39F0114-CCFF-4583-BE3C-FCC7B4C918B2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014 Demo\DotP_D14.exe

FirewallRules: [{586F7494-D5E6-431C-B8E6-847AF4C525E9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014 Demo\DotP_D14.exe

FirewallRules: [{76EF348E-4A47-485D-9F6F-4D71F6E38FC1}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe

FirewallRules: [{7AE12753-DC2E-4865-9B9B-D3A3E3937C08}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe

FirewallRules: [{5951B7B2-DBCA-4C9A-9BF3-C4114D1B65B5}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe

FirewallRules: [{65B33429-5091-41E6-A332-E473323DD788}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe

FirewallRules: [{1EC8437C-CE05-4587-9FC8-1F694B4C7C17}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe

FirewallRules: [{D0028759-3301-4357-8B2F-C150FE1F51E3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe

FirewallRules: [{FBA36FBF-DB77-4FD8-BC3F-80825FA74D59}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe

FirewallRules: [{5F4313DD-BA94-4F06-A2F0-B409FDAC09F4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe

FirewallRules: [{67D60A7C-0385-470F-9033-87A08C2D2E4F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe

FirewallRules: [{E3735442-0A8C-41A3-9B08-729BC8802589}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe

FirewallRules: [TCP Query User{7090371A-9B4F-4254-84A8-364D16F3A38C}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [UDP Query User{31DB48CF-D0EF-4B0D-AAE6-7AF83D2137D8}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [{A045D731-60D5-4EAD-BF23-1F7796BB34FA}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [{2C6C6FBA-5AFC-4085-8A68-A8C98856386B}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [TCP Query User{3C639DFB-197E-4AFF-A15E-25F14B889032}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat

FirewallRules: [UDP Query User{82EE40F2-E294-4D7B-9D68-1B75AE208E6A}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat

FirewallRules: [{64E878D7-1907-4A7D-A779-834D5D060955}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat

FirewallRules: [{68209FB4-C66B-4D9D-A2F0-2397BE1AB277}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat

FirewallRules: [TCP Query User{00A0BD31-B63A-4C19-93E8-ABCC8DB5C578}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [UDP Query User{8999A7F5-D427-4328-AAB7-ADA1FA9C59BF}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [{8DC4935E-B350-42D1-8FB1-1BB8F7442E36}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [{6CFC61D0-18CC-49EB-B25A-ACAECA62E42B}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [TCP Query User{EBCAC3E3-AA9A-43CF-B83E-98D5FD5EA402}C:\users\dima\desktop\call of duty modern warfare 2\com.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\com.dat

FirewallRules: [UDP Query User{84C7686B-75DF-401A-9FDF-7FC9F6392C7D}C:\users\dima\desktop\call of duty modern warfare 2\com.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\com.dat

FirewallRules: [{049E4550-90D7-4FEF-B6AD-9D74DED0C676}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\com.dat

FirewallRules: [{993FB1C4-D279-479A-90BE-6165BF19AF2E}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\com.dat

FirewallRules: [TCP Query User{9B3FB14A-DDF0-4459-AB11-D96BA0A21D17}C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [UDP Query User{3511F905-74A3-4CF9-9DC4-31D40CA6C995}C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [{4BBE5ECB-54A4-4EF1-BAA9-DBE3F102DC2F}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [{A73E2F4B-AB36-4447-B71B-F28AF0D3F1C5}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [TCP Query User{85EDB327-F94C-42C7-A714-B52DCFABB896}C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [UDP Query User{62DB249D-8E0B-4DE5-866A-A5EC513C7675}C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [{9BA06BB7-A418-404C-A95C-D8E2282C6F57}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [{CED6EBE2-E036-4988-AB13-D5DA803410B6}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [{E546D188-E7DD-44EE-BC95-7E5100A1366C}] => (Allow) C:\Users\Dima\Downloads\HOTO_downloader.exe

FirewallRules: [{60F46196-1CBF-40C0-970C-031D8BAD38B2}] => (Allow) C:\Users\Dima\Downloads\HOTO_downloader.exe

FirewallRules: [{F45FED77-FF04-4879-9444-42D263E00C25}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe

FirewallRules: [{28EC56F2-D3A9-4BCE-A5F5-878749DE6407}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe

FirewallRules: [{A4083F49-4F11-4A32-B91C-2BAF1B4BF058}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe

FirewallRules: [{DF37D091-D2F9-4401-B457-D9030A3919A8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe

FirewallRules: [{1315155E-2220-4EDE-A4A4-755669B75E19}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe

FirewallRules: [{58E7FDFD-4736-4213-9B42-50E885AE99CA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe

FirewallRules: [{31958790-F30C-4BC7-BDAC-03B4DED35B86}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe

FirewallRules: [{CC1F0407-71B4-4EC3-9F37-0E161C8A3322}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe

FirewallRules: [{145C7649-7AA9-42B3-97E8-5B8400173F22}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe

FirewallRules: [{936F4879-D6DB-4A9A-BEB0-D9E0A63B56E1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe

FirewallRules: [{375BA601-C201-4FFF-9426-9DC8362E1D6A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe

FirewallRules: [{4EAF1A42-8BB1-49A8-8D54-63BE9EF5E1FC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe

FirewallRules: [{E7EEA6A5-9E71-4A90-B195-713ADC4D3DD9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe

FirewallRules: [{C7E9681A-9A64-4D1A-99A8-CFC9168448D5}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe

FirewallRules: [{4352484E-8611-4EF5-92B1-E1134658D51D}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe

FirewallRules: [{FAF9A5EF-500F-48F2-9A53-FB0E549E87A7}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe

FirewallRules: [{45E32924-61E5-4693-8142-5090A1DACC77}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe

FirewallRules: [{B51953D9-7C03-413E-B7EA-B60979F79136}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe

FirewallRules: [TCP Query User{58A3D1CA-EB63-41E1-815B-2C296E72A629}C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe] => (Allow) C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe

FirewallRules: [UDP Query User{42C952D4-1892-4D10-9AB1-1CC3F39A23F3}C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe] => (Allow) C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe

FirewallRules: [{1D455526-6B1D-4BF9-B8BA-00306E25FF9A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe

FirewallRules: [{0DA93301-8BDC-47FD-B914-E2FA1EC7AAFB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe

FirewallRules: [TCP Query User{0729B18F-9796-4FCF-A32F-7A5833FBE815}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\dima\appdata\local\akamai\netsession_win.exe

FirewallRules: [UDP Query User{A54F5C5A-D8E2-403E-A810-D1615D1E56C6}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\dima\appdata\local\akamai\netsession_win.exe

FirewallRules: [TCP Query User{9C8EF3A7-3266-4542-B95E-133CF9D2DFA9}C:\programdata\battle.net\agent\agent.beta.2514\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2514\agent.exe

FirewallRules: [UDP Query User{DF8986C4-FB63-4A37-874F-5E4F5AB0B070}C:\programdata\battle.net\agent\agent.beta.2514\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2514\agent.exe

FirewallRules: [TCP Query User{7D2074A4-AA89-4BA7-A7EB-1268C6492AEE}C:\program files (x86)\devpro\devpro.dll] => (Allow) C:\program files (x86)\devpro\devpro.dll

FirewallRules: [UDP Query User{F2B7C119-C5D0-4914-BEBC-71E99254D344}C:\program files (x86)\devpro\devpro.dll] => (Allow) C:\program files (x86)\devpro\devpro.dll

FirewallRules: [{EA7F7B92-3349-4537-9E50-3A0B4D818281}] => (Allow) C:\AeriaGames\AuraKingdom\game.bin

FirewallRules: [{AB6209F8-0BA4-4FC4-803C-1A73FEFDA112}] => (Allow) C:\AeriaGames\AuraKingdom\game.bin

FirewallRules: [TCP Query User{4F600FC8-F54A-49E9-B588-2F547BBA96B1}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe

FirewallRules: [UDP Query User{DF1CE9AE-5217-4393-B737-92F45CBCB4BD}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe

FirewallRules: [{A1A5A428-B18A-4BC9-A553-B1E6989C2A42}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Darksiders 2\Darksiders2.exe

FirewallRules: [{F60EBF1D-B0A7-4638-B48C-AF3F18B494BA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Darksiders 2\Darksiders2.exe

FirewallRules: [{767607AA-81B6-406F-BF1E-B8A81ED847FC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe

FirewallRules: [{35789372-EE60-4ED3-81F9-A81ED3BF2CE4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe

FirewallRules: [{07DE1F4A-0A51-4A63-BF8D-CD9580D92EB6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe

FirewallRules: [{5F40E8E8-9EF2-41AA-9414-FBA5770F0A94}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe

FirewallRules: [TCP Query User{744A07AB-09FD-499C-9F04-E01BB0351E8D}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\dima\appdata\local\akamai\netsession_win.exe

FirewallRules: [UDP Query User{F7498DED-162B-488F-B59F-256A51C6CE71}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\dima\appdata\local\akamai\netsession_win.exe

FirewallRules: [{AEAB3ECF-0BB1-453B-8D1F-476AE01D86A0}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe

FirewallRules: [{8D48AAEF-A0CE-44E7-9024-CA3944E81E7D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe

FirewallRules: [TCP Query User{6CF9A63C-F912-4E3A-8DDA-6D3AC6AF66DF}C:\programdata\battle.net\agent\agent.beta.2638\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2638\agent.exe

FirewallRules: [UDP Query User{5A9CB3D7-8747-407A-97AB-191DBFC43D75}C:\programdata\battle.net\agent\agent.beta.2638\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2638\agent.exe

FirewallRules: [{94644398-7E26-4C3A-BD3D-8AC488A93807}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe

FirewallRules: [{03DDFDE2-264E-4187-85CD-4382D41F4A6C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe

FirewallRules: [{C38A5A06-BB40-4CFC-BA71-87AEC286F6D6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe

FirewallRules: [{CB8BA2E2-B98E-442B-87D9-92EFB85FECAD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe

FirewallRules: [{234100A5-3277-4236-B80F-3BD7A113F330}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe

FirewallRules: [{9472EB6F-9BC9-4FC2-B7B2-45A96212D7C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe

FirewallRules: [{4DDCAB31-D1CA-49D7-83D1-9A7708CA3387}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Loadout\Loadout.exe

FirewallRules: [{50274324-D5E3-4A7D-9551-60285C4D51CE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Loadout\Loadout.exe

FirewallRules: [{505A793E-19FF-4163-85DA-BDD1366147B4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe

FirewallRules: [{5D9B037C-78AD-4F93-AFCB-A8BF0480CCCF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe

FirewallRules: [{71BA2590-5ED7-4DC0-919C-603D078A17E1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe

FirewallRules: [{E3C9045F-0538-43CE-9AC0-B88A7047D12B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe

FirewallRules: [{AA27854D-9002-4BB1-AC3B-2B040589990B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe

FirewallRules: [{F262DA23-A9A0-45ED-875A-42640AB812FD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe

FirewallRules: [{5B584B43-CDC2-482C-A915-51ED708E2BDE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe

FirewallRules: [{FBE87CBF-6E5E-443B-BB64-D76E91781977}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe

FirewallRules: [TCP Query User{5B78C40B-EF9C-4DE3-B847-DDC0913711FC}C:\program files (x86)\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\tera\tera-launcher.exe

FirewallRules: [UDP Query User{02ADE6C1-8488-448C-9DD6-1D4ABC838F09}C:\program files (x86)\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\tera\tera-launcher.exe

FirewallRules: [{4EC807D8-651B-4EDE-906E-15D8940E045A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe

FirewallRules: [{5C43F976-C8BD-461A-8160-E4037DEC5A46}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe

FirewallRules: [{91A8DE20-9DBA-43BD-9F4B-DE1B625D0D83}] => (Allow) C:\AeriaGames\EdenEternal-DE\_Launcher.exe

FirewallRules: [{CD8464F5-1D27-4ACC-848F-AD802961AD3D}] => (Allow) C:\AeriaGames\EdenEternal-DE\_Launcher.exe

FirewallRules: [{20FF7205-61B2-44CC-87A6-CCE211D4603C}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{6B725485-B1DC-4646-B9AD-C4E754073AD5}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{EFDADD2B-5B82-4D44-BFF6-7533A33E5D4B}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{EDABDFE1-A779-47FE-A7F2-0BE99128B9D1}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{C864BA6F-6F65-4A53-BACD-5590447E71A3}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe

FirewallRules: [{BF9437A3-0AAD-4EF3-9020-8A7EDA18FFFB}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe

FirewallRules: [{5EC4813D-F4A5-44A4-99AE-2FEEADC7BD68}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe

FirewallRules: [{5741DE79-8863-4C92-8CA4-43D24ED12E9D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe

FirewallRules: [{7FA5A6CC-69A0-4EF2-9E4E-D36CF4A6FFB1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe

FirewallRules: [{1E27B3D7-EBC5-46D1-A1F4-5150D5FC7ECA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe

FirewallRules: [{7ACB6A7B-1D9F-4159-9E5C-57293DE770B9}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA World\fifaworld.exe

FirewallRules: [{CC579040-BC64-4658-B938-3FC11265DBA0}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA World\fifaworld.exe

FirewallRules: [TCP Query User{466B6D60-FB8E-40F4-9A96-3F6B84C31F10}C:\programdata\battle.net\agent\agent.2787\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.2787\agent.exe

FirewallRules: [UDP Query User{747BD4DC-E6ED-4E9F-889A-E1029B9BD7EC}C:\programdata\battle.net\agent\agent.2787\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.2787\agent.exe

FirewallRules: [{024C2E0F-0F94-4571-AAA1-63A5D32016D2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe

FirewallRules: [{19CDF823-35E4-43AD-8A38-931E02B58B64}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe

FirewallRules: [{EA2378D9-ADC4-4A3E-947C-030BBA9A41B0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Aura Kingdom\game.bin

FirewallRules: [{E3E3914B-6929-4469-A807-4C9FC60B3CA5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Aura Kingdom\game.bin

FirewallRules: [{AB6817F8-474B-413B-B1A1-DB9F05CE61BB}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{8192EF82-EABD-49D0-92CB-1E602FCB2399}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{8E9567B7-FEC3-4B6A-8469-1B65ACAEBCF2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe

FirewallRules: [{9832DDCA-66F8-432C-8B22-60682E5E919E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe

FirewallRules: [TCP Query User{1128027D-DF51-428D-BBF5-261AD7F20EEC}C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe

FirewallRules: [UDP Query User{0D0921EC-8295-44F1-A446-52BAFD8EF6EB}C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe

FirewallRules: [TCP Query User{1FC5CC73-6F52-4B75-8D0B-4753B673D255}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [UDP Query User{A5E61E08-5C0A-4EA7-BD2C-D6ACED33386F}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [TCP Query User{E290B8F5-DC46-4D43-9E40-A8CFEBD19A8A}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe

FirewallRules: [UDP Query User{4A59CA75-CB6F-46C3-8E3B-D091F44ACDC5}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe

FirewallRules: [{51E7B824-61EF-498A-94AE-826ED3FE5CF2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe

FirewallRules: [{B9C59147-9E45-4E11-9B2F-5702A1ACAFA5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe

FirewallRules: [{BB70E8F0-DE1E-4EEF-873C-95044B81A8C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe

FirewallRules: [{49C70379-991F-4248-81CB-BA51F9158E4F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe

FirewallRules: [{6BB569B0-D223-4EAB-A4A0-83B776CDA2DD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age2HD\Launcher.exe

FirewallRules: [{D341F20A-E2E0-4320-82A8-3607608AD108}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age2HD\Launcher.exe

FirewallRules: [{757CE32E-DE9A-440C-BAB3-B9F8EF37A2A0}] => (Allow) C:\Users\Dima\Downloads\b9_downloader.exe

FirewallRules: [{ACA68B80-8F45-4E75-B7D3-470AF290871F}] => (Allow) C:\Users\Dima\Downloads\b9_downloader.exe

FirewallRules: [TCP Query User{B5BB55CB-DE77-4080-963B-3A266AC37CE5}C:\programdata\battle.net\agent\agent.3235\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3235\agent.exe

FirewallRules: [UDP Query User{30EBE90E-7ED1-4868-9D3D-50E6D7112675}C:\programdata\battle.net\agent\agent.3235\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3235\agent.exe

FirewallRules: [{1BAA9821-E2DD-48BF-9E27-F6297D2F5116}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe

FirewallRules: [{9C9260ED-7AA0-4AE4-972E-D83A5D097028}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe

FirewallRules: [{EA27D1BB-E05D-4097-97AF-BC7DE8174F52}] => (Allow) C:\Program Files (x86)\Bench\Proxy\proc.exe

FirewallRules: [{953D2DA8-7AEB-4931-BE76-87BDE0ACBC39}] => (Allow) C:\Program Files (x86)\Bench\Proxy\pwdg.exe

FirewallRules: [{91AF5EE1-530D-4D72-A308-BDBA132ABA31}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe

FirewallRules: [{AF831DA2-EC4A-4642-915F-DF7CBB2A2CF3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe

FirewallRules: [{BBBB3AD6-5EB2-4204-B5AF-9716942ACB1C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe

FirewallRules: [{63BB69A1-F607-4FB8-9EDD-1A607AABDA8B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe

FirewallRules: [{34F27A20-13E6-46E6-9901-39383CB7F97A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe

FirewallRules: [{DA9D712D-0C9F-441F-A880-FF8D27837E6E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe

FirewallRules: [TCP Query User{A250025F-7CBE-4CAD-93AE-C02E36E841C1}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe

FirewallRules: [UDP Query User{3D207EE9-306F-48FF-8735-CD8CDAFA0490}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe

FirewallRules: [TCP Query User{F7376CA3-FA2C-4F56-9AD8-0A2ADC4927AE}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe

FirewallRules: [UDP Query User{BCBA424F-EDE5-4DFC-8FD5-56BB5666B2F5}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe

FirewallRules: [{7A5EB71C-C724-402F-8557-A92B3BAD628E}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe

FirewallRules: [{AF09CC9B-68D7-404C-B498-D144643C1A54}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe

FirewallRules: [{D56AE5C0-0487-4C87-8284-10DC792A01DE}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe

FirewallRules: [{CB98B3E2-40A1-4A7C-ACCB-56A50C8E3F7B}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe

FirewallRules: [{B3D84AF2-F39E-4E7D-9D7E-FFCD803C1135}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe

FirewallRules: [{AB8E5377-F2F7-441D-9A50-434D83F90C0E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe

FirewallRules: [{CCA3F085-5CA5-4FEE-9ADD-935183AE6F1C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{9EA1B11A-0179-414A-AFF8-82050C792E6B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{256D7304-2C38-45D1-97DB-71739BA92297}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe

FirewallRules: [{E2070B33-5CCB-46B0-B6CF-4ED92F8AB562}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe

FirewallRules: [{1E69481E-7920-4B4D-9047-B812C456A75A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{A416660E-98DD-4A45-8A5A-C8BBA66A68A3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{72A09F1B-7789-4A3E-B327-FD1D052150FF}] => (Allow) C:\Program Files (x86)\GameforgeLive\gfl_client.exe

FirewallRules: [TCP Query User{2A0CBFD5-23A1-4C20-91ED-B00077755298}C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe

FirewallRules: [UDP Query User{3933DFA8-6EB3-47A1-A4F9-7C3E7BD2ED67}C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe

FirewallRules: [TCP Query User{69CF256B-C011-492C-B7A0-04F509D0D67B}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe

FirewallRules: [UDP Query User{FFEA845F-4BF9-44FF-89AC-628034543D28}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe

FirewallRules: [{7809CF2C-51C3-4520-8BD0-F210B5BBB57B}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe

FirewallRules: [{CE1678FF-6995-415D-ADDC-E165111812E1}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe

FirewallRules: [{2412E622-4FBF-402A-B899-DBC82E5C6B2B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe

FirewallRules: [{5817EFF9-3537-4F8B-97F9-2C33716052B4}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe

FirewallRules: [{B65003CD-97BF-4394-A2F7-21A3E24DCFB5}] => (Allow) C:\Nexon\Vindictus EU\en-EU\NMService.exe

FirewallRules: [{0CA242B9-DEDD-43C3-9F4C-BADAE74781E9}] => (Allow) C:\Nexon\Vindictus EU\en-EU\NMService.exe

FirewallRules: [TCP Query User{3D2A0F20-56AE-42D0-80DF-E8AC85D00D13}C:\nexon\vindictus eu\en-eu\vindictus.exe] => (Allow) C:\nexon\vindictus eu\en-eu\vindictus.exe

FirewallRules: [UDP Query User{2DFE002E-3069-4DA8-920D-442A029D663E}C:\nexon\vindictus eu\en-eu\vindictus.exe] => (Allow) C:\nexon\vindictus eu\en-eu\vindictus.exe

FirewallRules: [TCP Query User{93A7A5BC-03EA-42A5-AE99-CC30CBDF752F}C:\users\dima\desktop\eclipse\eclipse.exe] => (Allow) C:\users\dima\desktop\eclipse\eclipse.exe

FirewallRules: [UDP Query User{13A19341-79DD-4889-B496-24BB0AA8C4C2}C:\users\dima\desktop\eclipse\eclipse.exe] => (Allow) C:\users\dima\desktop\eclipse\eclipse.exe

FirewallRules: [TCP Query User{95CD7A11-031A-4E37-B3A1-64F53A1F7A75}C:\program files\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\javaw.exe

FirewallRules: [UDP Query User{9B60CDE5-BA1E-4E6D-BDF3-C1056F5F8650}C:\program files\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\javaw.exe

FirewallRules: [TCP Query User{C4E30886-3358-4A99-BE81-2F5BED09E73D}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe

FirewallRules: [UDP Query User{710835ED-1463-4E58-8DB1-9F37F56C4A0F}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe

FirewallRules: [TCP Query User{C7584B0F-6622-4E1D-8987-9D85C77F36F0}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe

FirewallRules: [UDP Query User{F365D46D-EED4-49F4-93DF-234F94019BB2}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe

FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe

FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe

FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe

FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe

FirewallRules: [TCP Query User{63488A2D-8F13-4C4E-8CC0-49944F9372BA}C:\users\dima\desktop\lancraft\lancraft.exe] => (Allow) C:\users\dima\desktop\lancraft\lancraft.exe

FirewallRules: [UDP Query User{EAEC2D64-0B8E-4599-A61B-53F358A64796}C:\users\dima\desktop\lancraft\lancraft.exe] => (Allow) C:\users\dima\desktop\lancraft\lancraft.exe

FirewallRules: [TCP Query User{A91AD53F-87ED-432A-9D7C-0AC95375B702}C:\users\dima\desktop\warcraft\war3.exe] => (Allow) C:\users\dima\desktop\warcraft\war3.exe

FirewallRules: [UDP Query User{CC9DF559-105D-4031-9013-ADF7BC24CFC3}C:\users\dima\desktop\warcraft\war3.exe] => (Allow) C:\users\dima\desktop\warcraft\war3.exe

FirewallRules: [TCP Query User{6E3020FE-2B2A-413D-8EBC-AC0261DDA56B}C:\users\dima\desktop\warcraft\lancraft.exe] => (Allow) C:\users\dima\desktop\warcraft\lancraft.exe

FirewallRules: [UDP Query User{83FC41EC-2250-4389-B57F-7CF1CF138244}C:\users\dima\desktop\warcraft\lancraft.exe] => (Allow) C:\users\dima\desktop\warcraft\lancraft.exe

FirewallRules: [{E762770A-34B1-461E-B15E-FFC052875F0A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\CastleCrashers\castle.exe

FirewallRules: [{32B2CED0-8283-4A5A-8965-FFCB653C38DA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\CastleCrashers\castle.exe

FirewallRules: [TCP Query User{CA917D8D-9E80-4B19-90E8-110407378DDD}C:\program files (x86)\unity\editor\unity.exe] => (Allow) C:\program files (x86)\unity\editor\unity.exe

FirewallRules: [UDP Query User{4A9F69B2-9BB4-4F0E-B34D-4D95E242700A}C:\program files (x86)\unity\editor\unity.exe] => (Allow) C:\program files (x86)\unity\editor\unity.exe

FirewallRules: [{5A44804A-99EB-4C63-8F18-C9310F1C4657}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe

FirewallRules: [{5C90DDB5-DFDC-4BF5-B6D0-B86A95AEE724}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe

FirewallRules: [TCP Query User{DD861486-7A78-460B-9A83-BFA67BC6A454}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe

FirewallRules: [UDP Query User{21543651-AA0C-4F30-B6F4-14C779C5E70B}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe

FirewallRules: [TCP Query User{5C83AE95-A82A-49CA-B905-4EFC8C6961F9}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe

FirewallRules: [UDP Query User{640696E3-D785-4576-883E-596F24E072B3}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe

FirewallRules: [{5880095B-DD8E-4F79-BA8F-727A270A9A7B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dungeon Defenders\Binaries\Win32\DungeonDefenders.exe

FirewallRules: [{A02B8413-228D-4E79-9B24-1B23EEBA9CE2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dungeon Defenders\Binaries\Win32\DungeonDefenders.exe

FirewallRules: [TCP Query User{E5CD1AD8-4898-41F1-880E-C3CCEEF12C49}C:\program files (x86)\secondlifeviewer\slvoice.exe] => (Allow) C:\program files (x86)\secondlifeviewer\slvoice.exe

FirewallRules: [UDP Query User{37F84E6A-EF30-44B7-8E99-DE3F7E7DF7EE}C:\program files (x86)\secondlifeviewer\slvoice.exe] => (Allow) C:\program files (x86)\secondlifeviewer\slvoice.exe

FirewallRules: [TCP Query User{2478D171-94B3-4D1F-8C59-4E8322B8E276}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [UDP Query User{28D75031-A654-47AF-802E-4A9A15D5EF3F}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [{3A112284-5247-4174-9FB4-B86BFEBD19F9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe

FirewallRules: [{B2899169-D59D-4AC1-BBE3-3F3903152981}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe

FirewallRules: [{12C4EFF7-DD2B-4A0E-A3A0-98777451B440}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3.exe

FirewallRules: [{4060C2B9-6F65-462B-9221-EEEBCF58BB56}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3.exe

FirewallRules: [{EFA22BC5-7DE3-47F6-8167-289BFDD93178}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3_Unrestricted.exe

FirewallRules: [{C0D1322B-FEBC-4B0A-BD29-158C54B47C3F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3_Unrestricted.exe

FirewallRules: [{13A229AF-4A20-4E5A-B1D5-E4DA450947FA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Gumboy Tournament\gumboytournament.exe

FirewallRules: [{BD506B34-1746-48BC-A17D-29CE55B609BC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Gumboy Tournament\gumboytournament.exe

FirewallRules: [TCP Query User{E9B42C51-F75A-4042-8D09-5FE64A6E0AFD}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe

FirewallRules: [UDP Query User{A47B5394-0D06-4B60-AEAC-F80C6A18EC73}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe

FirewallRules: [{1F0F5A11-9A4F-49CF-8202-86A2DAEB8299}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_launcher.exe

FirewallRules: [{472579C8-4E14-4D30-9C6E-7C1E88FAB3FD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe

FirewallRules: [{09D4FEB7-995B-4579-90DC-1C535713E99A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe

FirewallRules: [{418B6FDA-1046-4E47-AFFC-EC7C31A532E9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe

FirewallRules: [{7199E669-27DE-4BFD-94D5-FDCF6A7C93AA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe

FirewallRules: [{BFF61270-CC5A-432C-A7FB-7D76DC47C782}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium.exe

FirewallRules: [{490B16FF-C2D2-4175-A366-EFDAA08EB979}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium.exe

FirewallRules: [TCP Query User{C9F38270-E9E5-4168-9E99-11073C550934}C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe

FirewallRules: [UDP Query User{6082536E-F697-45B2-969C-5E5CA8E07E06}C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe

FirewallRules: [TCP Query User{5AC0DF45-9E80-410D-A952-1DDA7A565671}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe

FirewallRules: [UDP Query User{31F72C84-B935-4C8E-8E1E-6FBDDC891D1C}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe

FirewallRules: [{8EB84DED-EB81-4D74-9575-8282402E2D2E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cryptic Studios\Neverwinter.exe

FirewallRules: [{B5B40F25-2AC6-4642-8BBC-63AE2A925B7B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cryptic Studios\Neverwinter.exe

FirewallRules: [TCP Query User{096444F6-AA1C-44A3-8C5E-A8DFF4A1C6D0}C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe

FirewallRules: [UDP Query User{9E1BE6EE-CCE2-4CFC-8375-7D1F41A71285}C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe

FirewallRules: [{3E6ED98E-B2F8-4E5F-BAED-9D8ACD743A90}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe

FirewallRules: [{2F7FD9C7-09FF-4330-AB1D-62122B26142B}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe

FirewallRules: [{B6917A43-4FD1-4943-819E-0224DF009AD4}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe

FirewallRules: [{580CEC6F-22A8-423D-B6A2-60898E1991C0}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe

FirewallRules: [{1D779765-CEC8-476D-8663-FF565F9943D2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dragon Nest Europe\DragonNest\DragonNest.exe

FirewallRules: [{BFD8F340-3BB5-4D13-B4C8-64605B781AE5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dragon Nest Europe\DragonNest\DragonNest.exe

FirewallRules: [TCP Query User{51AE804F-C3F0-4BE7-8861-486111D1A4C3}C:\neople\dfo\dfo.exe] => (Allow) C:\neople\dfo\dfo.exe

FirewallRules: [UDP Query User{813C44E8-970E-4FB2-A994-1B7E6CFAB002}C:\neople\dfo\dfo.exe] => (Allow) C:\neople\dfo\dfo.exe

FirewallRules: [{721B343A-D002-417F-8012-828923F7CF99}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe

FirewallRules: [{51F7C144-FBEC-4072-83BA-D2DB2C1ED47D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe

FirewallRules: [{0FE2304A-0072-4655-BD88-8EAC2F3EE694}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{7C5F9697-EA12-4FD9-AA6A-450DA3B7D57A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{C5FE8083-9835-43F3-84CC-1CE403C9CBA7}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
 

==================== Faulty Device Manager Devices =============
 

Name: USB (Universal Serial Bus)-Controller

Description: USB (Universal Serial Bus)-Controller

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: Ethernet-Controller

Description: Ethernet-Controller

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: SM-Bus-Controller

Description: SM-Bus-Controller

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (05/13/2015 02:43:54 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 37.0.2.5583, Zeitstempel: 0x552ef76c

Name des fehlerhaften Moduls: mozalloc.dll, Version: 37.0.2.5583, Zeitstempel: 0x552ee9ae

Ausnahmecode: 0x80000003

Fehleroffset: 0x00001aa1

ID des fehlerhaften Prozesses: 0x1704

Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0

Pfad der fehlerhaften Anwendung: plugin-container.exe1

Pfad des fehlerhaften Moduls: plugin-container.exe2

Berichtskennung: plugin-container.exe3
 

Error: (05/13/2015 02:43:41 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: CCC.exe, Version: 4.5.0.0, Zeitstempel: 0x53ad0dcc

Name des fehlerhaften Moduls: ltc_game64-94307.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x5511f6fc

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000007fedd0633f0

ID des fehlerhaften Prozesses: 0x9a0

Startzeit der fehlerhaften Anwendung: 0xCCC.exe0

Pfad der fehlerhaften Anwendung: CCC.exe1

Pfad des fehlerhaften Moduls: CCC.exe2

Berichtskennung: CCC.exe3
 

Error: (05/13/2015 02:43:41 PM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Anwendung: CCC.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.

Ausnahmeinformationen: Ausnahmecode c0000005, Ausnahmeadresse 000007FEDD0633F0
 

Error: (05/13/2015 02:37:53 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (05/13/2015 02:19:56 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 37.0.2.5583, Zeitstempel: 0x552ef76c

Name des fehlerhaften Moduls: mozalloc.dll, Version: 37.0.2.5583, Zeitstempel: 0x552ee9ae

Ausnahmecode: 0x80000003

Fehleroffset: 0x00001aa1

ID des fehlerhaften Prozesses: 0x1b4

Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0

Pfad der fehlerhaften Anwendung: plugin-container.exe1

Pfad des fehlerhaften Moduls: plugin-container.exe2

Berichtskennung: plugin-container.exe3
 

Error: (05/13/2015 00:50:38 PM) (Source: System Restore) (EventID: 8193) (User: )

Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Fehler = 0x81000101).
 

Error: (05/12/2015 10:45:55 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (05/12/2015 10:38:32 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 37.0.2.5583, Zeitstempel: 0x552ef76c

Name des fehlerhaften Moduls: mozalloc.dll, Version: 37.0.2.5583, Zeitstempel: 0x552ee9ae

Ausnahmecode: 0x80000003

Fehleroffset: 0x00001aa1

ID des fehlerhaften Prozesses: 0x614

Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0

Pfad der fehlerhaften Anwendung: plugin-container.exe1

Pfad des fehlerhaften Moduls: plugin-container.exe2

Berichtskennung: plugin-container.exe3
 

Error: (05/12/2015 09:00:17 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm csgo.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: d98
 

Startzeit: 01d08ce59fe19b13
 

Endzeit: 22
 

Anwendungspfad: C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
 

Berichts-ID:
 

Error: (05/11/2015 11:44:49 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 

System errors:

=============

Error: (05/13/2015 02:43:23 PM) (Source: Service Control Manager) (EventID: 7022) (User: )

Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.
 

Error: (05/13/2015 02:37:14 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (05/13/2015 02:35:23 PM) (Source: DCOM) (EventID: 10010) (User: )

Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
 

Error: (05/12/2015 10:46:01 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 

qrnfd_1_10_0_13
 

Error: (05/12/2015 10:45:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "McAfee SiteAdvisor Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (05/12/2015 01:02:22 PM) (Source: bowser) (EventID: 8003) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "PAPA-NB",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{E0D7CF45-4DC0-4905-AF73-9C813310A65F}-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (05/12/2015 00:57:15 PM) (Source: Service Control Manager) (EventID: 7030) (User: )

Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
 

Error: (05/12/2015 00:56:52 PM) (Source: Application Popup) (EventID: 1060) (User: )

Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\ComboFix\catchme.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
 

Error: (05/12/2015 00:53:57 PM) (Source: Service Control Manager) (EventID: 7030) (User: )

Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
 

Error: (05/12/2015 00:48:58 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "mftb" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 
 

Microsoft Office Sessions:

=========================

Error: (05/13/2015 02:43:54 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: plugin-container.exe37.0.2.5583552ef76cmozalloc.dll37.0.2.5583552ee9ae8000000300001aa1170401d08d7a1457bd61C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dllb652ad04-f96d-11e4-b11e-f079b1923b2f
 

Error: (05/13/2015 02:43:41 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: CCC.exe4.5.0.053ad0dccltc_game64-94307.dll_unloaded0.0.0.05511f6fcc0000005000007fedd0633f09a001d08d79dc0dccf5C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exeltc_game64-94307.dllaedb926d-f96d-11e4-b11e-f079b1923b2f
 

Error: (05/13/2015 02:43:41 PM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Anwendung: CCC.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.

Ausnahmeinformationen: Ausnahmecode c0000005, Ausnahmeadresse 000007FEDD0633F0
 

Error: (05/13/2015 02:37:53 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (05/13/2015 02:19:56 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: plugin-container.exe37.0.2.5583552ef76cmozalloc.dll37.0.2.5583552ee9ae8000000300001aa11b401d08d7699c0b091C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll5d5642e2-f96a-11e4-863a-bd361c78cd2c
 

Error: (05/13/2015 00:50:38 PM) (Source: System Restore) (EventID: 8193) (User: )

Description: C:\Windows\system32\svchost.exe -k netsvcsWindows Update0x81000101
 

Error: (05/12/2015 10:45:55 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (05/12/2015 10:38:32 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: plugin-container.exe37.0.2.5583552ef76cmozalloc.dll37.0.2.5583552ee9ae8000000300001aa161401d08cd4b2317e5cC:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dllda56909c-f8e6-11e4-b156-d25776320b33
 

Error: (05/12/2015 09:00:17 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: csgo.exe0.0.0.0d9801d08ce59fe19b1322C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
 

Error: (05/11/2015 11:44:49 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 

CodeIntegrity Errors:

===================================

  Date: 2015-05-12 12:56:52.122

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-05-12 12:56:52.091

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-05-08 20:38:53.994

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:37:07.273

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:37:03.798

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:36:19.340

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:34:40.221

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:34:12.814

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:20:56.969

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:20:56.706

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Core(TM) i5-4570 CPU @ 3.20GHz

Percentage of memory in use: 39%

Total physical RAM: 8136.6 MB

Available physical RAM: 4895.6 MB

Total Pagefile: 16271.39 MB

Available Pagefile: 13217.2 MB

Total Virtual: 8192 MB

Available Virtual: 8191.85 MB
 

==================== Drives ================================
 

Drive c: (OS) (Fixed) (Total:915.41 GB) (Free:455.23 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 277A7941)

Partition 1: (Not Active) - (Size=16 GB) - (Type=27)

Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=915.4 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

Bootsektor

13.05.2015 21:39

Hallo,

wir sind hier aber noch nicht fertig.

Ich brauche die Quarantänen von FRST und auch von Combofix:

Schritt 1
Lade bitte folgendermassen Dateien zur Analyse hoch:

Deaktiviere bitte temporär deinen Virenscanner.
Suche folgenden Ordner
C:\FRST\Quarantine
und packe ihn in ein zip-Archiv (Rechtsklick darauf -> Senden an -> zip-komprimierten Ordner).
Mache das gleiche mit dem Ordner C:\Qoobox
Gehe nun zum Trojaner-Board Upload-Channel:
1. Drücke auf Durchsuchen..., wähle das erstellte zip-File aus und klicke Öffnen.
2. Füge den Link deines Themas im Forum in das entsprechende Feld ein.
3. Gib deinen Benutzernamen ein.
4. Drücke auf den Button Hochladen.
Du kannst jetzt deinen Virenscanner wieder aktivieren.
(bebilderte Anleitung)

Bitte gib mir Bescheid ob alles funktioniert hat.

Schritt 2
Da der Scan mit Eset sehr gründlich ist, kann er unter Umständen mehrere Stunden dauern :kaffee_reboot:

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Schritt 3
Starte noch einmal FRST.

Setze den Haken bei addition.txt und drücke auf Scan.
Wenn der Scan abgeschlossen ist, werden zwei neue Logfiles FRST.txt und addition.txt erstellt und auf dem Desktop (oder in dem Verzeichnis in dem FRST liegt) gespeichert.
Poste den Inhalt dieser Logfiles bitte hier in deinen Thread.

kriegnes

14.05.2015 23:46

Datei: Qoobox.zip empfangen
/usr/bin/zip -P infected -j /var/www/vhosts/trojaner-board.de/upload.trojaner-board.de/files/150515-0030_Qoobox.zip.zip /var/www/vhosts/trojaner-board.de/upload.trojaner-board.de/files/Qoobox.zip
Vorgang erfolgreich abgeschlossen.

Was mit der Quarantäne ist weis ich net das verbindet die ganze zeit und dann bin ich wieder auf der upload seite als ob nichts wäre....

Bootsektor

16.05.2015 21:17

Hallo,

bitte mach mit ESET weiter und schick die Quarantäne von FRST an die in der PN genannte Emailadresse. Danke schön. :)

kriegnes

18.05.2015 15:07

Beim Versuch die Email zu versenden erscheint die Fehlermeldung, dass ein Virus in der Datei drin sei und kann die Email deshalb nicht verschicken.

ESET log

Code:

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7623

# api_version=3.0.2

# EOSSerial=97d652a23e92da44b6f3e28134b5dd9c

# engine=23855

# end=stopped

# remove_checked=false

# archives_checked=false

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2015-05-15 12:16:11

# local_time=2015-05-15 02:16:11 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode_1='Microsoft Security Essentials'

# compatibility_mode=5895 16777213 100 100 43833 72955087 0 0

# scanned=284249

# found=28

# cleaned=0

# scan_time=5969

sh=6AA0E22699B2E8D6C644F2CAAED9561DD6229362 ft=1 fh=9e53404adbf6d918 vn="Variante von Win32/Packed.Komodia.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\HighlightSearches\ABDLL.dll.vir"

sh=59CAF453F6EB81A5436F4426C08219E4696B8FCB ft=1 fh=95ae5d39d3ca602c vn="Variante von Win32/Packed.Komodia.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\HighlightSearches\abenginecert.dll.vir"

sh=754B75E6B64D6B01129361DD40BBD3B61EB4D1C6 ft=1 fh=5515f5076d96fb29 vn="Variante von Win32/Packed.Komodia.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\HighlightSearches\abenginewd.dll.vir"

sh=0119B4C28815D7986DA549D5F7DCA0718A9E3FD8 ft=1 fh=4311010adafd499b vn="Win32/Adware.Flinject.A Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\HighlightSearches\iren3006.exe.vir"

sh=7C9FFF402BD3E0967EA1994704F039C978A30036 ft=1 fh=7093a7af9f3c7615 vn="Variante von Win32/Adware.SpeedingUpMyPC.AA Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\{8dcfec69-c822-d91f-8dcf-fec69c82b1a7}\hqghumeaylnlf.exe.vir"

sh=9DF4DA7C5E6B0F903D0089740DF8D339356E9CB5 ft=1 fh=9317db8c4b5b6436 vn="Variante von Win32/Adware.SpeedingUpMyPC.AA Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\{b3779435-d2fb-f000-b377-79435d2f50d7}\hqghumeaylnlf.exe.vir"

sh=6142578CD21CF27FD3C1B3A4F0626DE9FC6DF275 ft=1 fh=a0b7e9a9340cf144 vn="Variante von Win32/PriceGong.C evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Dima\AppData\Local\SmartWeb\SmartWebApp.exe.vir"

sh=AA2BA9D6607589A3C93D1C760E3512EC8E61F968 ft=1 fh=f770637cdb111250 vn="Variante von Win32/PriceGong.C evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Dima\AppData\Local\SmartWeb\SmartWebHelper.exe.vir"

sh=080016256C564232771ED8D6EFFC94ECAECAD316 ft=1 fh=bfc1d533ef10baf8 vn="Variante von Win32/PriceGong.C evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Dima\AppData\Local\SmartWeb\swhk.dll.vir"

sh=F2251A7A386675FE43902ADC0525D33672C8BB84 ft=1 fh=e069b17bc5bd2e6a vn="Variante von Win32/Adware.ConvertAd.KZ.gen Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Dima\AppData\Roaming\VOPackage\VOPackage.exe.vir"

sh=D4012273C077EEEDF4A6C4F279786592C2E201D3 ft=1 fh=6836990575352a04 vn="Variante von Win32/LiMo.C evtl. unerwünschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\ProgramData\ftb\2B1271501F484093BC99F8F09A5A45B3\setup.exe"

sh=F5107D4315C28F6E6A0F94CAD8414D0EE4B1B1E5 ft=1 fh=36723e1fa1633655 vn="Variante von Win32/Amonetize.BQ evtl. unerwünschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\ProgramData\ftb\4B433EA0269E47EB9186355DC4745B8A\setup.exe"

sh=3ADED111BA4C362714DD914AF2875D25390F9141 ft=1 fh=960d55973837187f vn="Variante von Win32/Adware.ConvertAd.KZ.gen Anwendung" ac=I fn="C:\FRST\Quarantine\C\ProgramData\ftb\570D30CFBBDF42EFACCB327FF20674D4\setup.exe"

sh=A9D3F228ED9EDD2242CC2E4BDD5B69B58D0AFE04 ft=1 fh=3b648e5b93f58a71 vn="Mehrere Bedrohungen" ac=I fn="C:\FRST\Quarantine\C\ProgramData\ftb\6E2EBD621A1E49DD8229E6DAC7C1DEB2\setup.exe"

sh=9DF4DA7C5E6B0F903D0089740DF8D339356E9CB5 ft=1 fh=9317db8c4b5b6436 vn="Variante von Win32/Adware.SpeedingUpMyPC.AA Anwendung" ac=I fn="C:\FRST\Quarantine\C\ProgramData\ftb\702C9DD2E977440A95283AEFA128CD53\setup.exe"

sh=F5107D4315C28F6E6A0F94CAD8414D0EE4B1B1E5 ft=1 fh=36723e1fa1633655 vn="Variante von Win32/Amonetize.BQ evtl. unerwünschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\ProgramData\ftb\B2EC72C460CC45379FB4C7789F5BD863\setup.exe"

sh=C8C51B42447C016140F47030806AD6287D540104 ft=1 fh=198f1fb36780ad4e vn="Variante von Win32/Adware.AddLyrics.EA Anwendung" ac=I fn="C:\FRST\Quarantine\C\ProgramData\ftb\F56A424BA6F54F68B35D6F1BBEBD6746\setup.exe"

sh=0EC30DF742984EA79C49703698D5777B1BCC6F42 ft=1 fh=e77459d120c26c8f vn="Variante von Win32/TrojanDownloader.Adcurl.A Trojaner" ac=I fn="C:\FRST\Quarantine\C\Windows\ftb.exe.xBAD"

sh=3FEEFD8CC7F6D589B33FA64855EE31DE6A16155D ft=1 fh=d6488b6ad0e8f119 vn="Variante von Win32/Packed.Themida evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\Elite Dekaron\bin\dkac.dll"

sh=5F0546EC86F3E27F0EEC4D5D5451EDC630907654 ft=1 fh=c71c001198f425ea vn="Win32/InstalleRex.M evtl. unerwünschte Anwendung" ac=I fn="C:\ProgramData\InstallMate\{5258BA33-D688-4688-A463-9EAA89BB98C5}\Custom.dll"

sh=04628B6C2B3C3C9CDE646EA8D07B34A01DD15103 ft=1 fh=4d63aec76d89f9c0 vn="Win32/AnyProtect.G evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Dima\AppData\Local\nsb44A6.tmp.vir"

sh=6FA07C781B84151C862A8FACD4E2EFB7D8DA3E2F ft=1 fh=ebf21d2230451b57 vn="Win32/AnyProtect.G evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Dima\AppData\Local\nsnE864.tmp.vir"

sh=C2CDF8F5CF8F8E7082898326B1937499DEFA5C63 ft=1 fh=4dce2de995a2d99e vn="Variante von Win32/Toolbar.CrossRider.CB evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Dima\AppData\Roaming\DXbbq3U.exe.vir"

sh=C2CDF8F5CF8F8E7082898326B1937499DEFA5C63 ft=1 fh=4dce2de995a2d99e vn="Variante von Win32/Toolbar.CrossRider.CB evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Dima\AppData\Roaming\IT7Lg6DU6w1.exe.vir"

sh=085F77EB21E35804B09F1D53064AD09EDFD30F3B ft=1 fh=30d6e2c5eecf8f6b vn="Variante von Win32/Toolbar.CrossRider.CB evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe.vir"

sh=085F77EB21E35804B09F1D53064AD09EDFD30F3B ft=1 fh=30d6e2c5eecf8f6b vn="Variante von Win32/Toolbar.CrossRider.CB evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe.vir"

sh=5F0546EC86F3E27F0EEC4D5D5451EDC630907654 ft=1 fh=c71c001198f425ea vn="Win32/InstalleRex.M evtl. unerwünschte Anwendung" ac=I fn="C:\Users\All Users\InstallMate\{5258BA33-D688-4688-A463-9EAA89BB98C5}\Custom.dll"

sh=C8B611780FD4EE9B510FC9C0C97CEC764A76945C ft=1 fh=c71c001193833c7f vn="Variante von Win32/Adware.ConvertAd.MW Anwendung" ac=I fn="C:\Users\Dima\AppData\Local\00000000-1431094823-0000-0000-D43D7EBF2FB4\bnsz7EBE.exe"

ESETSmartInstaller@High as downloader log:

all ok

ESETSmartInstaller@High as downloader log:

all ok

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=97d652a23e92da44b6f3e28134b5dd9c

# end=init

# utc_time=2015-05-18 11:34:18

# local_time=2015-05-18 01:34:18 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# osver=6.1.7601 NT Service Pack 1

Update Init

Update Download

Update Finalize

Updated modules version: 23900

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=97d652a23e92da44b6f3e28134b5dd9c

# end=updated

# utc_time=2015-05-18 11:34:54

# local_time=2015-05-18 01:34:54 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# osver=6.1.7601 NT Service Pack 1

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7777

# api_version=3.1.1

# EOSSerial=97d652a23e92da44b6f3e28134b5dd9c

# engine=23900

# end=finished

# remove_checked=true

# archives_checked=false

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2015-05-18 01:55:33

# local_time=2015-05-18 03:55:33 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode_1='Microsoft Security Essentials'

# compatibility_mode=5895 16777213 100 100 352195 73263449 0 0

# scanned=471266

# found=29

# cleaned=28

# scan_time=8438

sh=5F0546EC86F3E27F0EEC4D5D5451EDC630907654 ft=1 fh=c71c001198f425ea vn="Win32/InstalleRex.M evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\All Users\InstallMate\{5258BA33-D688-4688-A463-9EAA89BB98C5}\Custom.dll"

sh=6AA0E22699B2E8D6C644F2CAAED9561DD6229362 ft=1 fh=9e53404adbf6d918 vn="Variante von Win32/Packed.Komodia.A verdÃ¤chtige Datei (GesÃ¤ubert durch LÃ¶schen - in QuarantÃ¤ne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\HighlightSearches\ABDLL.dll.vir"

sh=59CAF453F6EB81A5436F4426C08219E4696B8FCB ft=1 fh=95ae5d39d3ca602c vn="Variante von Win32/Packed.Komodia.A verdÃ¤chtige Datei (GesÃ¤ubert durch LÃ¶schen - in QuarantÃ¤ne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\HighlightSearches\abenginecert.dll.vir"

sh=754B75E6B64D6B01129361DD40BBD3B61EB4D1C6 ft=1 fh=5515f5076d96fb29 vn="Variante von Win32/Packed.Komodia.A verdÃ¤chtige Datei (GesÃ¤ubert durch LÃ¶schen - in QuarantÃ¤ne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\HighlightSearches\abenginewd.dll.vir"

sh=0119B4C28815D7986DA549D5F7DCA0718A9E3FD8 ft=1 fh=4311010adafd499b vn="Win32/Adware.Flinject.A Anwendung (GesÃ¤ubert durch LÃ¶schen - in QuarantÃ¤ne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\HighlightSearches\iren3006.exe.vir"

sh=7C9FFF402BD3E0967EA1994704F039C978A30036 ft=1 fh=7093a7af9f3c7615 vn="Variante von Win32/Adware.SpeedingUpMyPC.AA Anwendung (GesÃ¤ubert durch LÃ¶schen - in QuarantÃ¤ne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\ProgramData\{8dcfec69-c822-d91f-8dcf-fec69c82b1a7}\hqghumeaylnlf.exe.vir"

sh=9DF4DA7C5E6B0F903D0089740DF8D339356E9CB5 ft=1 fh=9317db8c4b5b6436 vn="Variante von Win32/Adware.SpeedingUpMyPC.AA Anwendung (GesÃ¤ubert durch LÃ¶schen - in QuarantÃ¤ne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\ProgramData\{b3779435-d2fb-f000-b377-79435d2f50d7}\hqghumeaylnlf.exe.vir"

sh=6142578CD21CF27FD3C1B3A4F0626DE9FC6DF275 ft=1 fh=a0b7e9a9340cf144 vn="Variante von Win32/PriceGong.C evtl. unerwÃ¼nschte Anwendung (GesÃ¤ubert durch LÃ¶schen - in QuarantÃ¤ne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Dima\AppData\Local\SmartWeb\SmartWebApp.exe.vir"

sh=AA2BA9D6607589A3C93D1C760E3512EC8E61F968 ft=1 fh=f770637cdb111250 vn="Variante von Win32/PriceGong.C evtl. unerwÃ¼nschte Anwendung (GesÃ¤ubert durch LÃ¶schen - in QuarantÃ¤ne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Dima\AppData\Local\SmartWeb\SmartWebHelper.exe.vir"

sh=080016256C564232771ED8D6EFFC94ECAECAD316 ft=1 fh=bfc1d533ef10baf8 vn="Variante von Win32/PriceGong.C evtl. unerwÃ¼nschte Anwendung (GesÃ¤ubert durch LÃ¶schen - in QuarantÃ¤ne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Dima\AppData\Local\SmartWeb\swhk.dll.vir"

sh=3C6235A2342A488A2DD67B6E26F7BE3A84C43292 ft=0 fh=0000000000000000 vn="Win32/AnyProtect.H evtl. unerwÃ¼nschte Anwendung (gelÃ¶scht - in QuarantÃ¤ne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Dima\AppData\Roaming\AnyProtectEx\swf\swfDpu.swf.vir"

sh=F2251A7A386675FE43902ADC0525D33672C8BB84 ft=1 fh=e069b17bc5bd2e6a vn="Variante von Win32/Adware.ConvertAd.KZ.gen Anwendung (GesÃ¤ubert durch LÃ¶schen - in QuarantÃ¤ne kopiert)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Dima\AppData\Roaming\VOPackage\VOPackage.exe.vir"

sh=D4012273C077EEEDF4A6C4F279786592C2E201D3 ft=1 fh=6836990575352a04 vn="Variante von Win32/LiMo.C evtl. unerwÃ¼nschte Anwendung (GesÃ¤ubert durch LÃ¶schen - in QuarantÃ¤ne kopiert)" ac=C fn="C:\FRST\Quarantine\C\ProgramData\ftb\2B1271501F484093BC99F8F09A5A45B3\setup.exe"

sh=F5107D4315C28F6E6A0F94CAD8414D0EE4B1B1E5 ft=1 fh=36723e1fa1633655 vn="Variante von Win32/Amonetize.BQ evtl. unerwÃ¼nschte Anwendung (GesÃ¤ubert durch LÃ¶schen - in QuarantÃ¤ne kopiert)" ac=C fn="C:\FRST\Quarantine\C\ProgramData\ftb\4B433EA0269E47EB9186355DC4745B8A\setup.exe"

sh=3ADED111BA4C362714DD914AF2875D25390F9141 ft=1 fh=960d55973837187f vn="Variante von Win32/Adware.ConvertAd.KZ.gen Anwendung (GesÃ¤ubert durch LÃ¶schen - in QuarantÃ¤ne kopiert)" ac=C fn="C:\FRST\Quarantine\C\ProgramData\ftb\570D30CFBBDF42EFACCB327FF20674D4\setup.exe"

sh=A9D3F228ED9EDD2242CC2E4BDD5B69B58D0AFE04 ft=1 fh=3b648e5b93f58a71 vn="Mehrere Bedrohungen (GesÃ¤ubert durch LÃ¶schen - in QuarantÃ¤ne kopiert)" ac=C fn="C:\FRST\Quarantine\C\ProgramData\ftb\6E2EBD621A1E49DD8229E6DAC7C1DEB2\setup.exe"

sh=9DF4DA7C5E6B0F903D0089740DF8D339356E9CB5 ft=1 fh=9317db8c4b5b6436 vn="Variante von Win32/Adware.SpeedingUpMyPC.AA Anwendung (GesÃ¤ubert durch LÃ¶schen - in QuarantÃ¤ne kopiert)" ac=C fn="C:\FRST\Quarantine\C\ProgramData\ftb\702C9DD2E977440A95283AEFA128CD53\setup.exe"

sh=F5107D4315C28F6E6A0F94CAD8414D0EE4B1B1E5 ft=1 fh=36723e1fa1633655 vn="Variante von Win32/Amonetize.BQ evtl. unerwÃ¼nschte Anwendung (GesÃ¤ubert durch LÃ¶schen - in QuarantÃ¤ne kopiert)" ac=C fn="C:\FRST\Quarantine\C\ProgramData\ftb\B2EC72C460CC45379FB4C7789F5BD863\setup.exe"

sh=C8C51B42447C016140F47030806AD6287D540104 ft=1 fh=198f1fb36780ad4e vn="Variante von Win32/Adware.AddLyrics.EA Anwendung (GesÃ¤ubert durch LÃ¶schen - in QuarantÃ¤ne kopiert)" ac=C fn="C:\FRST\Quarantine\C\ProgramData\ftb\F56A424BA6F54F68B35D6F1BBEBD6746\setup.exe"

sh=0EC30DF742984EA79C49703698D5777B1BCC6F42 ft=1 fh=e77459d120c26c8f vn="Variante von Win32/TrojanDownloader.Adcurl.A Trojaner (GesÃ¤ubert durch LÃ¶schen - in QuarantÃ¤ne kopiert)" ac=C fn="C:\FRST\Quarantine\C\Windows\ftb.exe.xBAD"

sh=3FEEFD8CC7F6D589B33FA64855EE31DE6A16155D ft=1 fh=d6488b6ad0e8f119 vn="Variante von Win32/Packed.Themida verdÃ¤chtige Datei (GesÃ¤ubert durch LÃ¶schen - in QuarantÃ¤ne kopiert)" ac=C fn="C:\Program Files (x86)\Elite Dekaron\bin\dkac.dll"

sh=5F0546EC86F3E27F0EEC4D5D5451EDC630907654 ft=1 fh=c71c001198f425ea vn="Win32/InstalleRex.M evtl. unerwÃ¼nschte Anwendung (GesÃ¤ubert durch LÃ¶schen - in QuarantÃ¤ne kopiert)" ac=C fn="C:\ProgramData\InstallMate\{5258BA33-D688-4688-A463-9EAA89BB98C5}\Custom.dll"

sh=04628B6C2B3C3C9CDE646EA8D07B34A01DD15103 ft=1 fh=4d63aec76d89f9c0 vn="Win32/AnyProtect.G evtl. unerwÃ¼nschte Anwendung (gelÃ¶scht - in QuarantÃ¤ne kopiert)" ac=C fn="C:\Qoobox\Quarantine\C\Users\Dima\AppData\Local\nsb44A6.tmp.vir"

sh=6FA07C781B84151C862A8FACD4E2EFB7D8DA3E2F ft=1 fh=ebf21d2230451b57 vn="Win32/AnyProtect.G evtl. unerwÃ¼nschte Anwendung (gelÃ¶scht - in QuarantÃ¤ne kopiert)" ac=C fn="C:\Qoobox\Quarantine\C\Users\Dima\AppData\Local\nsnE864.tmp.vir"

sh=C2CDF8F5CF8F8E7082898326B1937499DEFA5C63 ft=1 fh=4dce2de995a2d99e vn="Variante von Win32/Toolbar.CrossRider.CB evtl. unerwÃ¼nschte Anwendung (GesÃ¤ubert durch LÃ¶schen - in QuarantÃ¤ne kopiert)" ac=C fn="C:\Qoobox\Quarantine\C\Users\Dima\AppData\Roaming\DXbbq3U.exe.vir"

sh=C2CDF8F5CF8F8E7082898326B1937499DEFA5C63 ft=1 fh=4dce2de995a2d99e vn="Variante von Win32/Toolbar.CrossRider.CB evtl. unerwÃ¼nschte Anwendung (GesÃ¤ubert durch LÃ¶schen - in QuarantÃ¤ne kopiert)" ac=C fn="C:\Qoobox\Quarantine\C\Users\Dima\AppData\Roaming\IT7Lg6DU6w1.exe.vir"

sh=085F77EB21E35804B09F1D53064AD09EDFD30F3B ft=1 fh=30d6e2c5eecf8f6b vn="Variante von Win32/Toolbar.CrossRider.CB evtl. unerwÃ¼nschte Anwendung (GesÃ¤ubert durch LÃ¶schen - in QuarantÃ¤ne kopiert)" ac=C fn="C:\Qoobox\Quarantine\C\Users\Dima\AppData\Roaming\vj57Vb6Rn1O3ezZ75nEr.exe.vir"

sh=085F77EB21E35804B09F1D53064AD09EDFD30F3B ft=1 fh=30d6e2c5eecf8f6b vn="Variante von Win32/Toolbar.CrossRider.CB evtl. unerwÃ¼nschte Anwendung (GesÃ¤ubert durch LÃ¶schen - in QuarantÃ¤ne kopiert)" ac=C fn="C:\Qoobox\Quarantine\C\Users\Dima\AppData\Roaming\WfqE0YhY0IU.exe.vir"

sh=C8B611780FD4EE9B510FC9C0C97CEC764A76945C ft=1 fh=c71c001193833c7f vn="Variante von Win32/Adware.ConvertAd.MW Anwendung (GesÃ¤ubert durch LÃ¶schen - in QuarantÃ¤ne kopiert)" ac=C fn="C:\Users\Dima\AppData\Local\00000000-1431094823-0000-0000-D43D7EBF2FB4\bnsz7EBE.exe"

FRST.txt

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16-05-2015 02

Ran by Dima (administrator) on DIMAS-PC on 18-05-2015 16:07:39

Running from C:\Users\Dima\Desktop\Downloads

Loaded Profiles: Dima (Available profiles: Dima)

Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: FF)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(AMD) C:\Windows\System32\atiesrxx.exe

(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe

(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

(Microsoft Corporation) C:\Windows\System32\mqsvc.exe

(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe

(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 2\creator-ws.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry.exe

(Ralink Technology, Corp.) C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Akamai Technologies, Inc.) C:\Users\Dima\AppData\Local\Akamai\netsession_win.exe

(Akamai Technologies, Inc.) C:\Users\Dima\AppData\Local\Akamai\netsession_win.exe

(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe

(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe

(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe

(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

(AVM Berlin) C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe

(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe

(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe

(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe

(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe

(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe

(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11785832 2011-03-10] (Realtek Semiconductor)

HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)

HKLM\...\Run: [3D BubbleSound] => "C:\Program Files\BubbleSound\3D BubbleSound.exe"

HKLM-x32\...\Run: [SuiteTray] => C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [340848 2011-04-02] (Egis Technology Inc.)

HKLM-x32\...\Run: [EgisTecPMMUpdate] => C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [408432 2011-03-29] (Egis Technology Inc.)

HKLM-x32\...\Run: [EgisUpdate] => C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [202608 2011-03-29] (Egis Technology Inc.)

HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [297280 2011-04-24] (NTI Corporation)

HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)

HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55568 2015-03-25] (Raptr, Inc)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2014-11-20] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-11-17] (DivX, LLC)

HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-03-30] (LogMeIn Inc.)

HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [933888 2012-08-21] (AVM Berlin)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)

Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2888384 2015-05-15] (Valve Corporation)

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3619160 2015-01-28] (Electronic Arts)

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Dima\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-30] (Akamai Technologies, Inc.)

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [Dxtory Update Checker 2.0] => C:\Program Files (x86)\ExKode\Dxtory2.0\UpdateChecker.exe [93696 2010-10-17] (Dxtory Software)

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [\\DIMA-PC\EPSON SX210 Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFDE.EXE [223232 2008-11-05] (SEIKO EPSON CORPORATION)

HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Run: [GoogleChromeAutoLaunch_74AB638E1E27FA41128D672CA46F567E] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [812872 2015-05-05] (Google Inc.)

HKU\S-1-5-18\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2014-08-23]

ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)

BootExecute: autocheck autochk * sdnclean64.exe
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome

HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll No File

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28] (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation)

BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)

BHO-x32: PDF Architect Helper -> {691B33B0-B86E-47F3-81C7-56E4FE3B929C} -> C:\Program Files (x86)\PDF Architect 2\creator-ie-helper.dll [2014-10-10] (pdfforge GmbH)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28] (Oracle Corporation)

BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28] (Oracle Corporation)

Toolbar: HKLM-x32 - PDF Architect Toolbar - {DEEB13D7-CEA9-45FB-B77C-E039BEC85221} - C:\Program Files (x86)\PDF Architect 2\creator-ie-plugin.dll [2014-10-10] (pdfforge GmbH)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\Dima\AppData\Roaming\Mozilla\Firefox\Profiles\8wggqzsf.default

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)

FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll [2014-09-01] (EA Digital Illusions CE AB)

FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-28] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2013-09-08] (Microsoft Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-11-12] (VideoLAN)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll [2014-06-24] (Adobe Systems, Inc.)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)

FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2014-11-21] (DivX, LLC)

FF Plugin-x32: @esn/npbattlelog,version=2.3.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll No File

FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll [2014-09-01] (EA Digital Illusions CE AB)

FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-28] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-28] (Oracle Corporation)

FF Plugin-x32: @mcafee.com/SAFFPlugin -> C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll No File

FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2013-09-08] (Microsoft Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)

FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npnxgameEU.dll [2014-11-12] (Nexon)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-16] (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-04-30] (Adobe Systems Inc.)

FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll [2014-10-10] (pdfforge GmbH)

FF Plugin HKU\S-1-5-21-221738678-620704744-704572411-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Dima\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-04-30] (Adobe Systems Inc.)

FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor

FF HKLM-x32\...\Firefox\Extensions: [pdf_architect_2_conv@pdfarchitect.org] - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension

FF Extension: PDF Architect 2 Creator - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension [2015-02-26]

FF HKU\S-1-5-21-221738678-620704744-704572411-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi

FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
 

Chrome: 

=======

CHR Profile: C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Slides) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-05-08]

CHR Extension: (Google Docs) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-05-08]

CHR Extension: (Google Drive) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-05-08]

CHR Extension: (YouTube) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-05-08]

CHR Extension: (Google Search) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-05-08]

CHR Extension: (Google Sheets) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-05-08]

CHR Extension: (Bookmark Manager) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-08]

CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-08]

CHR Extension: (Google Wallet) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]

CHR Extension: (Gmail) - C:\Users\Dima\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-08]
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [237864 2015-03-21] (EasyAntiCheat Ltd)

R2 GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [29696 2011-05-26] (Acer Incorporated) [File not signed]

U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2015-02-16] (Hi-Rez Studios) [File not signed]

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-03-30] (LogMeIn, Inc.)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)

S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)

R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)

R2 MSMQ; C:\Windows\system32\mqsvc.exe [9216 2009-07-14] (Microsoft Corporation)

R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)

S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5128944 2013-11-19] (INCA Internet Co., Ltd.) [File not signed]

R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256832 2011-04-24] (NTI Corporation)

S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1910640 2015-03-02] (Electronic Arts)

S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-10-10] (pdfforge GmbH)

R2 PDF Architect 2 Creator; C:\Program Files (x86)\PDF Architect 2\creator-ws.exe [738856 2014-10-10] (pdfforge GmbH)

S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-10-10] (pdfforge GmbH)

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-10-11] ()

R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)

R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)

R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)

S3 Survarium-Steam Update Service; C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium_service.exe [76408 2015-04-03] ()

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

S2 McAfee SiteAdvisor Service; c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [X]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2012-04-25] (AVM Berlin)

R3 fwlanusb5; C:\Windows\System32\DRIVERS\fwlanusb5.sys [982784 2012-08-21] (AVM GmbH)

S3 GameKB; C:\Windows\System32\drivers\GameKB.sys [27648 2012-05-11] () [File not signed]

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)

S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)

R3 MQAC; C:\Windows\System32\drivers\mqac.sys [189440 2009-07-14] (Microsoft Corporation)

R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)

S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-05-17] (Anchorfree Inc.)

S3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2014-07-02] (SplitmediaLabs Limited)

S3 BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [X]

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

S3 hxsyol; \??\C:\AeriaGames\AuraKingdom\avital\hxsy64.sys [X]

S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-05-15 00:32 - 2015-05-15 00:32 - 00000000 ____D () C:\Program Files (x86)\ESET

2015-05-15 00:22 - 2015-05-15 00:22 - 04602089 _____ () C:\Users\Dima\Desktop\Qoobox.zip

2015-05-15 00:21 - 2015-05-15 00:21 - 17490277 _____ () C:\Users\Dima\Desktop\Quarantine.zip

2015-05-14 20:34 - 2015-05-14 20:34 - 00006567 _____ () C:\Users\Dima\AppData\Local\recently-used.xbel

2015-05-14 16:26 - 2015-05-14 20:34 - 00000000 ____D () C:\Users\Dima\AppData\Local\gtk-2.0

2015-05-13 16:31 - 2015-05-13 16:31 - 00000000 ____D () C:\Users\Dima\AppData\Local\Unity

2015-05-13 14:46 - 2015-05-13 14:46 - 00002936 _____ () C:\Users\Dima\Desktop\mbam.txt

2015-05-12 22:45 - 2015-05-12 22:45 - 00000008 __RSH () C:\ProgramData\ntuser.pol

2015-05-12 19:49 - 2015-05-12 19:49 - 00021496 _____ () C:\Users\Dima\Desktop\Tobi ist sexy.odt

2015-05-12 13:00 - 2015-05-12 13:00 - 00030620 _____ () C:\ComboFix.txt

2015-05-12 12:46 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe

2015-05-12 12:46 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe

2015-05-12 12:46 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2015-05-12 12:46 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2015-05-12 12:46 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2015-05-12 12:46 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe

2015-05-12 12:46 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe

2015-05-12 12:46 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe

2015-05-12 12:41 - 2015-05-12 13:00 - 00000000 ____D () C:\Qoobox

2015-05-12 12:40 - 2015-05-12 12:59 - 00000000 ____D () C:\Windows\erdnt

2015-05-12 12:38 - 2015-05-12 12:39 - 05623215 ____R (Swearware) C:\Users\Dima\Desktop\ComboFix.exe

2015-05-11 23:00 - 2015-05-15 13:24 - 00000000 ____D () C:\Users\Dima\AppData\Local\Eclipse

2015-05-11 22:03 - 2015-05-18 16:07 - 00000000 ____D () C:\FRST

2015-05-11 20:59 - 2015-05-11 20:59 - 00000000 ____D () C:\Users\Dima\AppData\Local\My Games

2015-05-10 18:44 - 2015-05-10 18:44 - 00000000 ____D () C:\Users\Dima\AppData\Local\Origin

2015-05-10 18:05 - 2015-05-10 18:05 - 00001117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2015-05-10 18:05 - 2015-05-10 18:05 - 00001105 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk

2015-05-10 18:05 - 2015-05-10 18:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2015-05-10 16:15 - 2015-05-10 16:15 - 00000000 ____D () C:\Users\Dima\AppData\Local\EgisTec IPS

2015-05-10 16:14 - 2015-05-10 16:14 - 00066432 _____ () C:\Users\Dima\AppData\Local\GDIPFONTCACHEV1.DAT

2015-05-10 16:13 - 2015-05-15 14:51 - 00000000 ____D () C:\Users\Dima\AppData\Local\LogMeIn Hamachi

2015-05-10 16:13 - 2015-05-10 16:13 - 00000000 ____D () C:\Users\Dima\AppData\Local\LogMeIn

2015-05-10 16:12 - 2015-05-10 16:12 - 00000000 ____D () C:\Users\Dima\AppData\Local\VirtualStore

2015-05-10 16:07 - 2015-05-11 23:41 - 00000000 ____D () C:\AdwCleaner

2015-05-08 20:43 - 2015-05-08 20:43 - 00000000 ____D () C:\Users\Dima\AppData\Local\openvr

2015-05-08 20:42 - 2015-05-08 20:42 - 00000000 ____D () C:\Users\Dima\AppData\Local\Steam

2015-05-08 19:44 - 2015-05-08 19:44 - 00000000 ____D () C:\Users\Dima\AppData\Local\Macromedia

2015-05-08 19:43 - 2015-05-09 22:34 - 00000000 ____D () C:\Users\Dima\AppData\Local\Mozilla

2015-05-08 18:41 - 2015-05-08 18:41 - 00000000 ____D () C:\Users\Dima\AppData\Local\ATI

2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieUserList

2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieSiteList

2015-05-08 14:55 - 2015-05-08 14:55 - 00000000 __SHD () C:\Users\Dima\AppData\Local\EmieBrowserModeList

2015-05-08 14:49 - 2015-05-08 14:49 - 00000000 ____D () C:\ProgramData\Kikblaster

2015-05-08 14:33 - 2015-05-08 19:54 - 00000000 ____D () C:\Program Files (x86)\Edu App

2015-05-08 14:20 - 2015-05-18 15:55 - 00000000 ____D () C:\Users\Dima\AppData\Local\00000000-1431094823-0000-0000-D43D7EBF2FB4

2015-05-04 20:34 - 2015-05-04 20:34 - 00059505 _____ () C:\Users\Dima\Documents\ts3_clientui-win64-1407159763-2015-05-04 20_34_27.843240.dmp

2015-04-26 16:02 - 2015-04-26 16:02 - 00000000 ____D () C:\Users\Dima\Documents\DFO

2015-04-25 20:20 - 2015-04-25 20:20 - 00001734 _____ () C:\Users\Public\Desktop\Dungeon Fighter Online.lnk

2015-04-25 20:20 - 2015-04-25 20:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\neople

2015-04-25 20:20 - 2015-04-25 20:20 - 00000000 ____D () C:\Neople

2015-04-25 15:57 - 2015-04-26 13:15 - 00000000 ____D () C:\Users\Dima\Documents\DragonNest

2015-04-24 12:20 - 2015-05-10 18:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2015-04-20 13:37 - 2015-04-20 13:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FRITZ!WLAN

2015-04-20 13:37 - 2015-04-20 13:37 - 00000000 ____D () C:\Program Files (x86)\avmwlanstick

2015-04-20 13:36 - 2015-04-20 13:36 - 00000000 ____D () C:\Users\Dima\AVM_Driver

2015-04-20 13:36 - 2012-04-25 01:00 - 00014120 _____ (AVM Berlin) C:\Windows\system32\Drivers\avmeject.sys

2015-04-20 00:51 - 2015-04-20 00:51 - 00002956 _____ () C:\Windows\avmacc1.log

2015-04-20 00:51 - 2012-07-12 02:00 - 00480632 _____ (AVM Berlin) C:\Windows\instwcli.dex

2015-04-20 00:45 - 2015-04-20 00:45 - 00003216 _____ () C:\Windows\System32\Tasks\{35EE529B-2794-4708-8B79-567E126A4A7F}

2015-04-20 00:05 - 2015-04-20 13:36 - 00001479 _____ () C:\Windows\avmsetup.log

2015-04-20 00:05 - 2015-04-20 13:36 - 00000490 _____ () C:\Windows\avmadd32.log

2015-04-20 00:05 - 2015-04-20 00:54 - 00197887 _____ () C:\Windows\avmacc.log

2015-04-20 00:05 - 2015-04-20 00:44 - 00000000 ____D () C:\Program Files (x86)\AVM_update

2015-04-19 20:43 - 2015-04-19 20:43 - 00001906 _____ () C:\Users\Dima\Desktop\EliteDekaron.lnk

2015-04-19 20:43 - 2015-04-19 20:43 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Elite Dekaron

2015-04-19 20:40 - 2015-04-19 21:03 - 00000000 ____D () C:\Program Files (x86)\Elite Dekaron

2015-04-19 20:40 - 2015-04-19 20:40 - 00000000 ____D () C:\Windows\Elite Dekaron
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-05-18 16:05 - 2013-08-08 20:19 - 01627403 _____ () C:\Windows\WindowsUpdate.log

2015-05-18 16:01 - 2013-08-15 21:16 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-05-18 15:47 - 2013-08-08 21:08 - 00000000 ____D () C:\Program Files (x86)\Steam

2015-05-18 15:14 - 2013-08-15 14:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-05-18 13:25 - 2013-11-06 17:55 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Raptr

2015-05-17 22:54 - 2013-09-21 18:06 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\TS3Client

2015-05-17 19:01 - 2013-08-15 21:16 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-05-17 16:42 - 2009-07-14 06:51 - 00121481 _____ () C:\Windows\setupact.log

2015-05-16 18:56 - 2013-08-15 21:16 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2015-05-16 18:56 - 2013-08-15 21:16 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2015-05-15 23:23 - 2013-10-04 17:11 - 00000000 ____D () C:\ProgramData\Package Cache

2015-05-15 18:56 - 2009-07-14 06:45 - 00028928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-05-15 18:56 - 2009-07-14 06:45 - 00028928 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-05-15 14:50 - 2013-08-17 15:43 - 00000000 ____D () C:\Program Files (x86)\Origin

2015-05-15 13:22 - 2015-04-10 17:41 - 00000000 ____D () C:\Users\Dima\Desktop\eclipse

2015-05-15 00:18 - 2014-08-09 17:35 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\.minecraft

2015-05-14 20:35 - 2014-11-30 22:57 - 00000000 ____D () C:\Users\Dima\.gimp-2.8

2015-05-14 20:34 - 2014-01-07 19:34 - 01856512 ___SH () C:\Users\Dima\Desktop\Thumbs.db

2015-05-14 20:27 - 2015-04-08 21:11 - 00000928 _____ () C:\Users\Dima\Desktop\GIMP 2.lnk

2015-05-14 16:25 - 2014-11-30 22:57 - 00000000 ____D () C:\Users\Dima\AppData\Local\gegl-0.2

2015-05-14 14:06 - 2013-11-11 13:28 - 00001912 _____ () C:\Windows\epplauncher.mif

2015-05-14 14:05 - 2013-11-11 13:27 - 00002119 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk

2015-05-14 14:05 - 2013-11-11 13:27 - 00000000 ____D () C:\Program Files\Microsoft Security Client

2015-05-14 14:05 - 2013-11-11 13:27 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client

2015-05-14 14:04 - 2013-11-11 13:25 - 00000000 ____D () C:\Windows\system32\MRT

2015-05-14 13:57 - 2013-11-11 13:25 - 140425016 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-05-14 13:53 - 2013-09-01 03:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2015-05-14 13:52 - 2013-09-01 03:02 - 00000000 ____D () C:\Program Files\Microsoft Silverlight

2015-05-14 13:52 - 2013-09-01 03:02 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight

2015-05-13 18:22 - 2014-12-11 00:11 - 00001981 _____ () C:\Users\Public\Desktop\Adobe Reader X.lnk

2015-05-13 18:22 - 2011-07-25 05:18 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk

2015-05-13 16:34 - 2015-02-28 15:36 - 00000000 ____D () C:\Users\Dima\Desktop\Reod

2015-05-13 16:32 - 2015-01-14 14:04 - 00000000 ____D () C:\ProgramData\Unity

2015-05-13 14:44 - 2014-11-22 13:30 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-05-13 14:43 - 2013-08-09 06:11 - 00699416 _____ () C:\Windows\system32\perfh007.dat

2015-05-13 14:43 - 2013-08-09 06:11 - 00149556 _____ () C:\Windows\system32\perfc007.dat

2015-05-13 14:43 - 2009-07-14 07:13 - 01620612 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-05-13 14:36 - 2010-11-21 05:47 - 00401272 _____ () C:\Windows\PFRO.log

2015-05-13 14:36 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-05-13 14:22 - 2014-11-22 13:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-05-13 14:22 - 2014-11-22 13:30 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2015-05-12 22:38 - 2014-08-24 20:42 - 00000000 ____D () C:\Windows\System32\Tasks\Games

2015-05-12 22:38 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy

2015-05-12 22:38 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy

2015-05-12 13:00 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default

2015-05-12 12:57 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini

2015-05-11 23:42 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2015-05-10 18:44 - 2013-08-17 15:43 - 00000000 ____D () C:\ProgramData\Origin

2015-05-10 18:19 - 2014-11-14 00:10 - 00000000 ____D () C:\Users\Dima\Desktop\lqobqwkv.default

2015-05-10 16:42 - 2014-10-05 15:02 - 00000000 ____D () C:\Users\Dima\AppData\Local\Adobe

2015-05-10 16:15 - 2013-12-20 13:37 - 00000000 ____D () C:\Users\Dima\AppData\Local\Akamai

2015-05-10 16:12 - 2013-08-08 15:36 - 00001419 _____ () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2015-05-10 16:10 - 2014-11-26 23:57 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WorldofTanks

2015-05-08 21:41 - 2013-12-30 15:03 - 00000000 ____D () C:\Program Files (x86)\7-Zip

2015-05-08 21:39 - 2013-12-18 15:08 - 00000000 ____D () C:\Program Files (x86)\ACASystems

2015-05-08 18:40 - 2013-11-02 02:16 - 00000000 ____D () C:\Users\Dima\Desktop\Neuer Ordner

2015-05-08 18:40 - 2013-08-15 21:16 - 00000000 ____D () C:\Users\Dima\AppData\Local\Google

2015-05-08 14:52 - 2013-12-14 00:39 - 00000000 ____D () C:\Users\Dima\AppData\Local\Battle.net

2015-05-08 13:16 - 2013-08-15 15:52 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\Skype

2015-05-02 22:30 - 2014-11-23 16:19 - 00000000 ____D () C:\Users\Dima\AppData\Roaming\.technic

2015-05-02 22:30 - 2014-08-25 02:48 - 04697768 _____ () C:\Users\Dima\Desktop\TechnicLauncher.exe

2015-04-27 16:21 - 2015-02-28 15:34 - 00000000 ____D () C:\Users\Dima\Desktop\Bewerbung

2015-04-20 13:37 - 2014-02-12 19:55 - 00011424 _____ () C:\Windows\avmfwlanci.log

2015-04-20 13:37 - 2014-02-12 19:55 - 00011167 _____ () C:\Windows\AVMInstall.Log

2015-04-20 13:36 - 2014-02-12 19:54 - 00000000 ____D () C:\Windows\AVM_Driver

2015-04-20 13:36 - 2013-08-08 15:34 - 00000000 ____D () C:\Users\Dima

2015-04-20 00:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF

2015-04-18 17:38 - 2013-09-13 14:13 - 00000000 ____D () C:\Program Files (x86)\Raptr

2015-04-18 12:26 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat
 

==================== Files in the root of some directories =======
 

2013-11-09 21:45 - 2013-11-09 21:45 - 0000004 _____ () C:\Users\Dima\AppData\Roaming\steam_md4.dat

2015-05-14 20:34 - 2015-05-14 20:34 - 0006567 _____ () C:\Users\Dima\AppData\Local\recently-used.xbel

2013-08-08 21:05 - 2013-08-08 21:05 - 0000654 _____ () C:\ProgramData\ArcadeDeluxe5.log
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2011-07-25 04:31
 

==================== End Of Log ============================

--- --- ---

kriegnes

18.05.2015 15:10

Additions.txt

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-05-2015 02

Ran by Dima at 2015-05-18 16:08:16

Running from C:\Users\Dima\Desktop\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Accounts: =============================
 

Administrator (S-1-5-21-221738678-620704744-704572411-500 - Administrator - Disabled)

Dima (S-1-5-21-221738678-620704744-704572411-1000 - Administrator - Enabled) => C:\Users\Dima

Gast (S-1-5-21-221738678-620704744-704572411-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-221738678-620704744-704572411-1002 - Limited - Enabled)
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}

AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )

ACA Screen Recorder 5.30 (HKLM-x32\...\ACAScreenRecorder_EN_is1) (Version: 5.30 - ACA Systems)

Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.99 - NTI Corporation)

Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3502 - Acer Incorporated)

Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3502 - Acer Incorporated)

Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0517.2011 - Acer Incorporated)

Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)

Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)

Adobe Reader X (10.1.14) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.14 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.)

AdVenture Capitalist (HKLM-x32\...\Steam App 346900) (Version:  - Hyper Hippo Games)

Agarest: Generations of War (HKLM-x32\...\Steam App 237890) (Version:  - Ghostlight)

Age of Empires II: HD Edition (HKLM-x32\...\Steam App 221380) (Version:  - Hidden Path Entertainment, Ensemble Studios)

AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)

Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.36 - Atheros Communications Inc.)

Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team)

Avidemux 2.6 - 64bits (HKLM-x32\...\Avidemux 2.6 - 64bits (64-bit)) (Version: 2.6.8.9046 - )

AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version: 1.2.0.0 - AVM Berlin)

Backup Manager V3 (x32 Version: 3.0.0.99 - NTI Corporation) Hidden

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)

Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.3.2.15221 - Electronic Arts)

Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.5.1 - EA Digital Illusions CE AB)

Borderlands 2 (HKLM-x32\...\Steam App 49520) (Version:  - Gearbox Software)

Call of Duty 4: Modern Warfare (HKLM-x32\...\Steam App 7940) (Version:  - Infinity Ward)

Call of Duty: Black Ops II - Multiplayer (HKLM-x32\...\Steam App 202990) (Version:  - )

Call of Duty: Black Ops II - Zombies (HKLM-x32\...\Steam App 212910) (Version:  - )

Call of Duty: Black Ops II (HKLM-x32\...\Steam App 202970) (Version:  - Treyarch)

Call of Duty: Ghosts - Multiplayer (HKLM-x32\...\Steam App 209170) (Version:  - )

Call of Duty: Ghosts (HKLM-x32\...\Steam App 209160) (Version:  - Infinity Ward)

Call of Duty: Modern Warfare 3 - Multiplayer (HKLM-x32\...\Steam App 42690) (Version:  - Infinity Ward)

Call of Duty: Modern Warfare 3 (HKLM-x32\...\Steam App 42680) (Version:  - Infinity Ward)

Castle Crashers (HKLM-x32\...\Steam App 204360) (Version:  - The Behemoth)

Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)

Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)

Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)

clear.fi Client (HKLM-x32\...\{43AAE145-83CF-4C96-9A5E-756CEFCE879F}) (Version: 1.00.3500 - Acer Incorporated)

Combined Community Codec Pack 2013-11-27 (HKLM-x32\...\Combined Community Codec Pack_is1) (Version: 2013.11.27.0 - CCCP Project)

Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)

Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version:  - Valve)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Darksiders II (HKLM-x32\...\Steam App 50650) (Version:  - Vigil Games)

DFO (HKLM-x32\...\{C1E5C0FB-527E-42C6-BCA0-0A37A6124AE4}) (Version: 1.01.0000 - Neople)

DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.7.0.64 - DivX, LLC)

Dota 2 (HKLM-x32\...\Steam App 570) (Version:  - Valve)

Dragon Nest Europe (HKLM-x32\...\Steam App 258700) (Version:  - Eyedentity Games)

Dungeon Defenders (HKLM-x32\...\Steam App 65800) (Version:  - Trendy Entertainment)

Dxtory version 2.0.128 (HKLM-x32\...\Dxtory2.0_is1) (Version: 2.0.128 - ExKode Co. Ltd.)

Elite Dekaron (HKLM-x32\...\Elite Dekaron1.0) (Version: 1.0 - EliteKingdoms)

EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - )

ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )

Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )

Free YouTube to MP3 Converter version 3.12.20.1230 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.20.1230 - DVDVideoSoft Ltd.)

Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Gameforge Live 2.0.5 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.5 - Gameforge)

Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Facepunch Studios)

GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)

Glyph (HKLM-x32\...\Glyph) (Version:  - Trion Worlds, Inc.)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 42.0.2311.152 - Google Inc.)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden

Gumboy Tournament (HKLM-x32\...\Steam App 11230) (Version:  - CINEMAX, s.r.o.)

Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)

Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)

Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.2.1004 - Intel Corporation)

Java 7 Update 75 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417075FF}) (Version: 7.0.750 - Oracle)

Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)

Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)

Java SE Development Kit 7 Update 75 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170750}) (Version: 1.7.0.750 - Oracle)

Java SE Development Kit 8 Update 25 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180250}) (Version: 8.0.250.18 - Oracle Corporation)

Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )

League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden

Loadout (HKLM-x32\...\Steam App 208090) (Version:  - Edge of Reality)

LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.328 - LogMeIn, Inc.)

LogMeIn Hamachi (x32 Version: 2.2.0.328 - LogMeIn, Inc.) Hidden

LOLReplay (HKLM-x32\...\LOLReplay) (Version: 0.8.9.11 - www.leaguereplays.com)

Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)

McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)

Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)

Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)

Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)

Might & Magic: Duel of Champions (HKLM-x32\...\Steam App 256410) (Version:  - Ubisoft Quebec)

MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)

Mozilla Firefox 37.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.2 (x86 de)) (Version: 37.0.2 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.2 - Mozilla)

MyWinLocker (Version: 4.0.14.25 - Egis Technology Inc.) Hidden

MyWinLocker 4 (x32 Version: 4.0.14.25 - Egis Technology Inc.) Hidden

MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.15 - Egis Technology Inc.)

MyWinLocker Suite (x32 Version: 4.0.14.15 - Egis Technology Inc.) Hidden

Neverwinter (HKLM-x32\...\Steam App 109600) (Version:  - Cryptic Studios)

newsXpresso (HKLM-x32\...\InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}) (Version: 1.0.0.40 - esobi Inc.)

newsXpresso (x32 Version: 1.0.0.40 - esobi Inc.) Hidden

Nosgoth (HKLM-x32\...\Steam App 200110) (Version: 150120.100528 - Square Enix Ltd)

Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)

NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.8942 - NTI Corporation)

NTI Media Maker 9 (x32 Version: 9.0.2.8942 - NTI Corporation) Hidden

NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)

Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )

OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)

Origin (HKLM-x32\...\Origin) (Version: 9.3.1.4482 - Electronic Arts, Inc.)

paint.net (HKLM\...\{141BA46D-2D1F-4DA6-9448-B847334585C0}) (Version: 4.0.4 - dotPDN LLC)

PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.51.17865 - pdfforge GmbH)

PDF Architect 2 Create Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden

PDF Architect 2 Edit Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden

PDF Architect 2 View Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden

PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.0.2 - pdfforge)

Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Pokemon Online 2.4.1 (HKLM-x32\...\{2C08D7E7-9EE1-4A08-AFE0-745F02DCD6A4}_is1) (Version:  - Dreambelievers)

Pokémon Trading Card Game Online (HKLM-x32\...\{B0952280-3DF0-4AA9-9599-092D5E8D36AD}) (Version: 2.24.1 - The Pokémon Company International)

Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)

Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Ralink RT2860 Wireless LAN Card (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 1.5.6.0 - Ralink)

Raptr (HKLM-x32\...\Raptr) (Version:  - )

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6329 - Realtek Semiconductor Corp.)

Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30123 - Realtek Semiconductor Corp.)

Serious Sam 3: BFE (HKLM-x32\...\Steam App 41070) (Version:  - Croteam)

Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden

Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden

Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version:  - 2K Games, Inc.)

SIW 2013 Home Edition (HKLM-x32\...\{AB67580-257C-45FF-B8F4-C8C30682091A}_is1) (Version: 2013.05.14 - Topala Software Solutions)

Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)

Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 2.0.2574.0 - Hi-Rez Studios)

Source SDK Base 2006 (HKLM-x32\...\Steam App 215) (Version:  - Valve)

SpellForce (HKLM-x32\...\SpellForce) (Version:  - )

Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)

Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)

Survarium (HKLM-x32\...\Steam App 355840) (Version:  - Vostok Games)

Survarium-Steam (HKLM-x32\...\{A3D9343D-77CD-4bf4-A47A-F87B3BE985B4}_is1) (Version: 0.27d - )

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

System Requirements Lab CYRI (HKLM-x32\...\{E362724E-9320-4946-AF34-874E7B6B2927}) (Version: 6.0.7.0 - Husdawg, LLC)

Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)

TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)

TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.12 - TeamSpeak Systems GmbH)

TIPP10 Version 2.1.0 (HKLM-x32\...\TIPP10_is1) (Version:  - (c) 2006-2011, Tom Thielicke IT Solutions)

Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel)

Unity (HKLM-x32\...\Unity) (Version: 4.6.1f1 - Unity Technologies ApS)

VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden

Vindictus EU (HKLM-x32\...\Vindictus EU) (Version:  - )

VLC media player 2.1.1 (HKLM\...\VLC media player) (Version: 2.1.1 - VideoLAN)

Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3503 - Acer Incorporated)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)

WinRAR 5.00 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)

YGOPro DevPro Version 1.9.7 r2 (HKLM-x32\...\{3CF2634F-3F38-4DD3-9201-CB2FE6B5FF23}_is1) (Version: 1.9.7 r2 - YGOPro DevPro Online)

Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden

Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
 

==================== Restore Points  =========================
 

14-05-2015 13:48:43 Windows Update

15-05-2015 23:20:19 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501

15-05-2015 23:20:48 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005

15-05-2015 23:21:51 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005

15-05-2015 23:22:34 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501

17-05-2015 14:49:58 Windows Update
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 04:34 - 2014-09-21 15:27 - 00000860 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost

::1 localhost
 

==================== Scheduled Tasks (Whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {15731A0E-D960-4E94-9E60-DACD297E3193} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2014-06-24] (Safer-Networking Ltd.)

Task: {1860A38F-8939-478A-BF5C-F565A480142F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2014-06-24] (Safer-Networking Ltd.)

Task: {1D4EC24B-2C6F-4F04-8F3E-6AA90BAED5D2} - System32\Tasks\{A10EA19B-8B09-454D-B360-CA92A1D17DBD} => pcalua.exe -a C:\Users\Dima\Desktop\InstallIW4M(1).exe -d C:\Users\Dima\Desktop

Task: {276BF61D-668E-4313-BA37-702F352555A9} - System32\Tasks\Adobe Reader Speed Launcher => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2015-04-30] (Adobe Systems Incorporated)

Task: {2B46497E-052E-4882-879A-2CED38AE75F5} - System32\Tasks\{6B05723E-8DB6-495D-A0DA-ECA4FC2E26D7} => C:\Program Files (x86)\WeGame\wegame.exe

Task: {54E1645E-EDBD-4280-B2FF-13D3BBEC2047} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-07] (Google Inc.)

Task: {5975092F-1EFE-4D6C-A337-025C0E67059F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)

Task: {5B6F25FF-1AB6-4306-AF5F-150B752505F5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-07] (Google Inc.)

Task: {ADDA105F-5269-41EB-BE7A-FADC87447563} - System32\Tasks\{153E695E-4162-4A7B-8004-BCBAF85CE618} => pcalua.exe -a C:\Users\Dima\AVM_Driver\FWLAN\setup.exe -d C:\Users\Dima\AVM_Driver\FWLAN

Task: {B0E56CFC-54EA-49E5-AEE6-544EE780094B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15] (Adobe Systems Incorporated)

Task: {C4630A3F-B5F1-4159-9F2B-8EF55530D99B} - System32\Tasks\Adobe ARM => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)

Task: {C618B53C-0F59-4601-8B52-1D81C275086B} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)

Task: {C7F562CC-8836-44FC-8085-91BD492874BE} - System32\Tasks\{35EE529B-2794-4708-8B79-567E126A4A7F} => pcalua.exe -a C:\Users\Dima\Desktop\Downloads\avm_fritz!wlan_usb_stick_x64_build_100906.exe -d C:\Users\Dima\Desktop\Downloads

Task: {D021483F-10CB-41B4-8816-109CDA214F59} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)

Task: {D216A597-8DFB-49AE-BB0C-69D9574172C8} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {D9E5BB12-DEEF-4673-A22C-7A60AF737292} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {E66F9E32-E05D-43A5-8A61-1251E464ABF9} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (Whitelisted) ==============
 

2013-09-02 13:14 - 2014-10-11 21:02 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe

2014-01-10 07:26 - 2014-01-10 07:26 - 01861968 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

2011-04-24 03:29 - 2011-04-24 03:29 - 00465640 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll

2011-04-24 03:29 - 2011-04-24 03:29 - 01081664 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll

2011-04-24 03:29 - 2011-04-24 03:29 - 00125760 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll

2014-11-09 03:42 - 2014-05-13 13:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl

2014-11-09 03:42 - 2014-05-13 13:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl

2014-11-09 03:42 - 2014-05-13 13:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl

2014-11-09 03:42 - 2012-08-23 11:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll

2014-11-09 03:42 - 2012-04-03 18:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll

2014-10-21 22:56 - 2014-10-21 22:56 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\9b1cac8d98bd69d3e56a26ff2f96f266\IsdiInterop.ni.dll

2011-07-25 04:42 - 2011-01-13 02:56 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

2014-01-10 07:28 - 2014-01-10 07:28 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll

2010-11-23 00:56 - 2010-11-23 00:56 - 00087040 _____ () C:\Program Files (x86)\Raptr\_ctypes.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00043008 _____ () C:\Program Files (x86)\Raptr\_socket.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00805376 _____ () C:\Program Files (x86)\Raptr\_ssl.pyd

2014-05-14 01:26 - 2014-05-14 01:26 - 05812736 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtGui.pyd

2014-05-14 01:26 - 2014-05-14 01:26 - 00067584 _____ () C:\Program Files (x86)\Raptr\sip.pyd

2014-05-14 01:26 - 2014-05-14 01:26 - 01662464 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtCore.pyd

2014-05-14 01:26 - 2014-05-14 01:26 - 00494592 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtNetwork.pyd

2010-11-23 00:57 - 2010-11-23 00:57 - 00096256 _____ () C:\Program Files (x86)\Raptr\win32api.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00110592 _____ () C:\Program Files (x86)\Raptr\pywintypes26.dll

2010-11-23 00:56 - 2010-11-23 00:56 - 00010240 _____ () C:\Program Files (x86)\Raptr\select.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00356864 _____ () C:\Program Files (x86)\Raptr\_hashlib.pyd

2010-11-23 00:57 - 2010-11-23 00:57 - 00036352 _____ () C:\Program Files (x86)\Raptr\win32process.pyd

2010-11-23 00:57 - 2010-11-23 00:57 - 00111104 _____ () C:\Program Files (x86)\Raptr\win32file.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00044544 _____ () C:\Program Files (x86)\Raptr\_sqlite3.pyd

2011-02-15 20:17 - 2011-02-15 20:17 - 00417501 _____ () C:\Program Files (x86)\Raptr\sqlite3.dll

2010-11-23 00:57 - 2010-11-23 00:57 - 00167936 _____ () C:\Program Files (x86)\Raptr\win32gui.pyd

2014-05-14 01:26 - 2014-05-14 01:26 - 00313856 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtWebKit.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00127488 _____ () C:\Program Files (x86)\Raptr\pyexpat.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00009216 _____ () C:\Program Files (x86)\Raptr\winsound.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00354304 _____ () C:\Program Files (x86)\Raptr\pythoncom26.dll

2010-11-23 00:57 - 2010-11-23 00:57 - 00016384 _____ () C:\Program Files (x86)\Raptr\win32trace.pyd

2014-08-14 02:37 - 2014-08-14 02:37 - 00113171 _____ () C:\Program Files (x86)\Raptr\libvlc.dll

2014-08-14 02:37 - 2014-08-14 02:37 - 02396691 _____ () C:\Program Files (x86)\Raptr\libvlccore.dll

2010-11-23 00:56 - 2010-11-23 00:56 - 00583680 _____ () C:\Program Files (x86)\Raptr\unicodedata.pyd

2010-11-23 00:57 - 2010-11-23 00:57 - 00263168 _____ () C:\Program Files (x86)\Raptr\win32com.shell.shell.pyd

2010-11-23 00:56 - 2010-11-23 00:56 - 00324608 _____ () C:\Program Files (x86)\Raptr\PIL._imaging.pyd

2013-11-21 02:05 - 2013-11-21 02:05 - 00256000 _____ () C:\Program Files (x86)\Raptr\amd_ags.dll

2012-02-06 22:28 - 2012-02-06 22:28 - 00010752 _____ () C:\Program Files (x86)\Raptr\Crypto.Random.OSRNG.winrandom.pyd

2012-02-06 22:28 - 2012-02-06 22:28 - 00011264 _____ () C:\Program Files (x86)\Raptr\Crypto.Util._counter.pyd

2012-02-06 22:28 - 2012-02-06 22:28 - 00031744 _____ () C:\Program Files (x86)\Raptr\Crypto.Cipher.AES.pyd

2015-03-25 01:50 - 2015-03-25 01:50 - 02539776 _____ () C:\Program Files (x86)\Raptr\ltc_host_ex.DLL

2010-11-23 00:57 - 2010-11-23 00:57 - 00141312 _____ () C:\Program Files (x86)\Raptr\gobject._gobject.pyd

2014-06-18 02:56 - 2014-06-18 02:56 - 02717595 _____ () C:\Program Files (x86)\Raptr\heliotrope._purple.pyd

2011-02-15 20:17 - 2011-02-15 20:17 - 01213633 _____ () C:\Program Files (x86)\Raptr\libxml2-2.dll

2010-11-23 01:06 - 2010-11-23 01:06 - 00055808 _____ () C:\Program Files (x86)\Raptr\zlib1.dll

2013-05-10 01:52 - 2013-05-10 01:52 - 00495680 _____ () C:\Program Files (x86)\Raptr\plugins\libaim.dll

2013-05-10 01:52 - 2013-05-10 01:52 - 01183699 _____ () C:\Program Files (x86)\Raptr\liboscar.dll

2013-05-10 01:52 - 2013-05-10 01:52 - 00483306 _____ () C:\Program Files (x86)\Raptr\plugins\libicq.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 00655356 _____ () C:\Program Files (x86)\Raptr\plugins\libirc.dll

2013-05-03 20:56 - 2013-05-03 20:56 - 01306387 _____ () C:\Program Files (x86)\Raptr\plugins\libmsn.dll

2013-05-03 20:56 - 2013-05-03 20:56 - 00565461 _____ () C:\Program Files (x86)\Raptr\plugins\libxmpp.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 01640221 _____ () C:\Program Files (x86)\Raptr\libjabber.dll

2013-05-03 20:56 - 2013-05-03 20:56 - 00506276 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoo.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 01053730 _____ () C:\Program Files (x86)\Raptr\libymsg.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 00497782 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoojp.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 00603326 _____ () C:\Program Files (x86)\Raptr\plugins\ssl-nss.dll

2013-05-03 20:57 - 2013-05-03 20:57 - 00474199 _____ () C:\Program Files (x86)\Raptr\plugins\ssl.dll

2013-07-01 08:20 - 2015-04-16 19:40 - 00776192 _____ () C:\Program Files (x86)\Steam\SDL2.dll

2015-01-04 19:33 - 2015-04-23 04:16 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll

2015-01-04 19:33 - 2015-04-23 04:16 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll

2015-01-04 19:33 - 2015-04-23 04:16 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll

2014-05-21 20:08 - 2015-05-15 03:58 - 02396352 _____ () C:\Program Files (x86)\Steam\video.dll

2014-08-29 16:43 - 2014-12-01 23:31 - 02396672 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll

2014-08-29 16:43 - 2014-12-01 23:31 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll

2014-08-29 16:43 - 2014-12-01 23:31 - 00479744 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll

2014-08-29 16:43 - 2014-12-01 23:31 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll

2014-08-29 16:43 - 2014-12-01 23:31 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll

2013-07-26 14:46 - 2015-05-15 03:57 - 00703168 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL

2013-07-15 14:32 - 2015-05-11 21:01 - 36302728 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll

2015-04-24 19:11 - 2015-05-11 21:01 - 08958344 _____ () C:\Program Files (x86)\Steam\bin\pdf.dll
 

==================== Alternate Data Streams (Whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 

==================== Safe Mode (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
 

==================== EXE Association (Whitelisted) ===============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 

HKU\S-1-5-21-221738678-620704744-704572411-1000\Software\Classes\exefile:  <===== ATTENTION!
 

==================== Internet Explorer trusted/restricted ===============
 

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)
 

IE trusted site: HKU\S-1-5-21-221738678-620704744-704572411-1000\...\aeriagames.com -> hxxps://aeriagames.com

IE trusted site: HKU\S-1-5-21-221738678-620704744-704572411-1000\...\aeriagames.com -> hxxp://aeriagames.com
 
 

==================== Other Areas ============================
 

(Currently there is no automatic fix for this section.)
 

HKU\S-1-5-21-221738678-620704744-704572411-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Dima\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.178.1
 

==================== MSCONFIG/TASK MANAGER disabled items ==
 

(Currently there is no automatic fix for this section.)
 

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Ralink Wireless Utility.lnk => C:\Windows\pss\Ralink Wireless Utility.lnk.CommonStartup

MSCONFIG\startupreg: Aeria Ignite => "C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe" silent

MSCONFIG\startupreg: Overwolf => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent

MSCONFIG\startupreg: Raptr => C:\PROGRA~2\Raptr\raptrstub.exe --startup
 

==================== FirewallRules (Whitelisted) ===============
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

FirewallRules: [{78594C1C-0D50-4158-BE4B-630F903AD614}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [{6FBF251F-BD39-4F99-9B43-11228600FA75}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe

FirewallRules: [{D2661B1C-FB14-4488-85B6-C9F0F671AC26}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe

FirewallRules: [{2C171432-29A8-41AE-B4FC-C8A1B17AA814}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{5AB70EC2-290C-47AF-93E6-2FF6583923AE}] => (Allow) LPort=2869

FirewallRules: [{E223E5D1-C91F-43A7-BAF4-034AF2D39963}] => (Allow) LPort=1900

FirewallRules: [{87113CB6-D031-4465-A7DA-1190F21F5789}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe

FirewallRules: [{A6A9391B-02D1-49D7-ADC4-9186A84936CB}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

FirewallRules: [{57B9C597-A0EB-408F-856B-FA683C8132A3}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{714CDBAF-5604-42B3-B700-E8038F5DF945}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [TCP Query User{06F842FE-DDFA-4FCC-AE92-5F69EEE0F652}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe

FirewallRules: [UDP Query User{3661892A-DE75-4580-91A0-F9FBF1799DF3}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe

FirewallRules: [TCP Query User{5765CABA-404A-44EF-8227-7422B4001117}C:\program files (x86)\dragon's prophet\dp_x64.exe] => (Allow) C:\program files (x86)\dragon's prophet\dp_x64.exe

FirewallRules: [UDP Query User{4AB4E404-C83C-479E-AE15-ED70B9717177}C:\program files (x86)\dragon's prophet\dp_x64.exe] => (Allow) C:\program files (x86)\dragon's prophet\dp_x64.exe

FirewallRules: [{D8B75AC5-DB8B-4A3C-A379-08351FDB3A8A}] => (Block) C:\program files (x86)\dragon's prophet\dp_x64.exe

FirewallRules: [{FA2BCC55-2D25-4982-9813-648096C2D014}] => (Block) C:\program files (x86)\dragon's prophet\dp_x64.exe

FirewallRules: [TCP Query User{8BC7D8B9-96BF-48DA-B566-50842124FA04}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe

FirewallRules: [UDP Query User{9C72FA86-27B7-40B5-BCCB-3EE160D8159F}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe

FirewallRules: [TCP Query User{643C5904-C3B1-4EF9-B893-4374ECF6D6DA}C:\program files (x86)\dragon's prophet\launcher.exe] => (Allow) C:\program files (x86)\dragon's prophet\launcher.exe

FirewallRules: [UDP Query User{878B8F84-B88B-4D79-BA68-B0CE420657C1}C:\program files (x86)\dragon's prophet\launcher.exe] => (Allow) C:\program files (x86)\dragon's prophet\launcher.exe

FirewallRules: [{80ED7FA9-4202-4D90-836F-F9F56B4CDAE4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe

FirewallRules: [{4399A304-14B2-4EFA-B537-E8EA862FCC80}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe

FirewallRules: [{01721DB0-F656-4031-8930-1E8373DC2F7F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3sp.exe

FirewallRules: [{C1942149-4BF2-4840-B25B-0861219DBE3B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3sp.exe

FirewallRules: [{AD3CBC94-9015-4EEC-8010-9730A95F050C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3mp.exe

FirewallRules: [{83C71D22-7773-410B-9C20-2AA7FDCEB96E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty 4\iw3mp.exe

FirewallRules: [{E7F483C4-10DC-4293-ACA0-F3AF08D31698}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x86.exe

FirewallRules: [{27ADCB35-4841-4AF9-B2D7-CC086CF7A903}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\launcher.exe

FirewallRules: [{4933D89C-009A-43A4-A839-09A511BC8DFC}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\launcher.exe

FirewallRules: [{3D9A3A59-0A6C-440B-A6F9-0A90AC0DE8EB}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x64.exe

FirewallRules: [{18241FBC-0EF3-483B-94A6-AC00EEDBF4A7}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x64.exe

FirewallRules: [{C7D1F9D6-5F5C-4788-8D75-AA4662252A42}] => (Allow) C:\Program Files (x86)\Dragon's Prophet\dp_x86.exe

FirewallRules: [TCP Query User{4C269EB3-8471-4A9F-8BEC-B534B181151E}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe

FirewallRules: [UDP Query User{721D1BD2-BDD0-4F36-AD02-862EE89713FE}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4m.exe

FirewallRules: [TCP Query User{C39306B7-FF57-4794-8B9A-9AA0F84CB38F}C:\users\dima\appdata\local\iw4m\iw4m.dat] => (Block) C:\users\dima\appdata\local\iw4m\iw4m.dat

FirewallRules: [UDP Query User{F8E2B0E8-5340-4B1C-92C0-7DA4FD31E1C2}C:\users\dima\appdata\local\iw4m\iw4m.dat] => (Block) C:\users\dima\appdata\local\iw4m\iw4m.dat

FirewallRules: [TCP Query User{1D2F39A8-48D1-4F21-9CF1-DE335D47F856}C:\users\dima\desktop\iw4m\iw4m.dat] => (Allow) C:\users\dima\desktop\iw4m\iw4m.dat

FirewallRules: [UDP Query User{56A99EDF-B65F-4AFD-AE16-F7D98D17E077}C:\users\dima\desktop\iw4m\iw4m.dat] => (Allow) C:\users\dima\desktop\iw4m\iw4m.dat

FirewallRules: [TCP Query User{2615C76C-73D3-4D32-B632-E52A4C790CC1}C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe

FirewallRules: [UDP Query User{06CB1C71-BEEC-4057-B2DC-C2D7E2D1CA89}C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4m.exe

FirewallRules: [{C39F0114-CCFF-4583-BE3C-FCC7B4C918B2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014 Demo\DotP_D14.exe

FirewallRules: [{586F7494-D5E6-431C-B8E6-847AF4C525E9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014 Demo\DotP_D14.exe

FirewallRules: [{76EF348E-4A47-485D-9F6F-4D71F6E38FC1}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe

FirewallRules: [{7AE12753-DC2E-4865-9B9B-D3A3E3937C08}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe

FirewallRules: [{5951B7B2-DBCA-4C9A-9BF3-C4114D1B65B5}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe

FirewallRules: [{65B33429-5091-41E6-A332-E473323DD788}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe

FirewallRules: [{1EC8437C-CE05-4587-9FC8-1F694B4C7C17}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe

FirewallRules: [{D0028759-3301-4357-8B2F-C150FE1F51E3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe

FirewallRules: [{FBA36FBF-DB77-4FD8-BC3F-80825FA74D59}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe

FirewallRules: [{5F4313DD-BA94-4F06-A2F0-B409FDAC09F4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe

FirewallRules: [{67D60A7C-0385-470F-9033-87A08C2D2E4F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe

FirewallRules: [{E3735442-0A8C-41A3-9B08-729BC8802589}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe

FirewallRules: [TCP Query User{7090371A-9B4F-4254-84A8-364D16F3A38C}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [UDP Query User{31DB48CF-D0EF-4B0D-AAE6-7AF83D2137D8}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [{A045D731-60D5-4EAD-BF23-1F7796BB34FA}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [{2C6C6FBA-5AFC-4085-8A68-A8C98856386B}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [TCP Query User{3C639DFB-197E-4AFF-A15E-25F14B889032}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat

FirewallRules: [UDP Query User{82EE40F2-E294-4D7B-9D68-1B75AE208E6A}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat

FirewallRules: [{64E878D7-1907-4A7D-A779-834D5D060955}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat

FirewallRules: [{68209FB4-C66B-4D9D-A2F0-2397BE1AB277}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\com.dat

FirewallRules: [TCP Query User{00A0BD31-B63A-4C19-93E8-ABCC8DB5C578}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [UDP Query User{8999A7F5-D427-4328-AAB7-ADA1FA9C59BF}C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [{8DC4935E-B350-42D1-8FB1-1BB8F7442E36}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [{6CFC61D0-18CC-49EB-B25A-ACAECA62E42B}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [TCP Query User{EBCAC3E3-AA9A-43CF-B83E-98D5FD5EA402}C:\users\dima\desktop\call of duty modern warfare 2\com.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\com.dat

FirewallRules: [UDP Query User{84C7686B-75DF-401A-9FDF-7FC9F6392C7D}C:\users\dima\desktop\call of duty modern warfare 2\com.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\com.dat

FirewallRules: [{049E4550-90D7-4FEF-B6AD-9D74DED0C676}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\com.dat

FirewallRules: [{993FB1C4-D279-479A-90BE-6165BF19AF2E}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\com.dat

FirewallRules: [TCP Query User{9B3FB14A-DDF0-4459-AB11-D96BA0A21D17}C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [UDP Query User{3511F905-74A3-4CF9-9DC4-31D40CA6C995}C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [{4BBE5ECB-54A4-4EF1-BAA9-DBE3F102DC2F}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [{A73E2F4B-AB36-4447-B71B-F28AF0D3F1C5}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4masterserver.dat

FirewallRules: [TCP Query User{85EDB327-F94C-42C7-A714-B52DCFABB896}C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [UDP Query User{62DB249D-8E0B-4DE5-866A-A5EC513C7675}C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat] => (Allow) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [{9BA06BB7-A418-404C-A95C-D8E2282C6F57}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [{CED6EBE2-E036-4988-AB13-D5DA803410B6}] => (Block) C:\users\dima\desktop\call of duty modern warfare 2\iw4mp.dat

FirewallRules: [{E546D188-E7DD-44EE-BC95-7E5100A1366C}] => (Allow) C:\Users\Dima\Downloads\HOTO_downloader.exe

FirewallRules: [{60F46196-1CBF-40C0-970C-031D8BAD38B2}] => (Allow) C:\Users\Dima\Downloads\HOTO_downloader.exe

FirewallRules: [{F45FED77-FF04-4879-9444-42D263E00C25}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe

FirewallRules: [{28EC56F2-D3A9-4BCE-A5F5-878749DE6407}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe

FirewallRules: [{A4083F49-4F11-4A32-B91C-2BAF1B4BF058}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe

FirewallRules: [{DF37D091-D2F9-4401-B457-D9030A3919A8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Agarest Generations of War\Agarest.exe

FirewallRules: [{1315155E-2220-4EDE-A4A4-755669B75E19}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe

FirewallRules: [{58E7FDFD-4736-4213-9B42-50E885AE99CA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe

FirewallRules: [{31958790-F30C-4BC7-BDAC-03B4DED35B86}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe

FirewallRules: [{CC1F0407-71B4-4EC3-9F37-0E161C8A3322}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe

FirewallRules: [{145C7649-7AA9-42B3-97E8-5B8400173F22}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe

FirewallRules: [{936F4879-D6DB-4A9A-BEB0-D9E0A63B56E1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe

FirewallRules: [{375BA601-C201-4FFF-9426-9DC8362E1D6A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe

FirewallRules: [{4EAF1A42-8BB1-49A8-8D54-63BE9EF5E1FC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe

FirewallRules: [{E7EEA6A5-9E71-4A90-B195-713ADC4D3DD9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe

FirewallRules: [{C7E9681A-9A64-4D1A-99A8-CFC9168448D5}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe

FirewallRules: [{4352484E-8611-4EF5-92B1-E1134658D51D}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe

FirewallRules: [{FAF9A5EF-500F-48F2-9A53-FB0E549E87A7}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe

FirewallRules: [{45E32924-61E5-4693-8142-5090A1DACC77}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe

FirewallRules: [{B51953D9-7C03-413E-B7EA-B60979F79136}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe

FirewallRules: [TCP Query User{58A3D1CA-EB63-41E1-815B-2C296E72A629}C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe] => (Allow) C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe

FirewallRules: [UDP Query User{42C952D4-1892-4D10-9AB1-1CC3F39A23F3}C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe] => (Allow) C:\users\dima\neverwinter_en\neverwinter\live\gameclient.exe

FirewallRules: [{1D455526-6B1D-4BF9-B8BA-00306E25FF9A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe

FirewallRules: [{0DA93301-8BDC-47FD-B914-E2FA1EC7AAFB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Might & Magic - Duel of Champions\Game.exe

FirewallRules: [TCP Query User{0729B18F-9796-4FCF-A32F-7A5833FBE815}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\dima\appdata\local\akamai\netsession_win.exe

FirewallRules: [UDP Query User{A54F5C5A-D8E2-403E-A810-D1615D1E56C6}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\dima\appdata\local\akamai\netsession_win.exe

FirewallRules: [TCP Query User{9C8EF3A7-3266-4542-B95E-133CF9D2DFA9}C:\programdata\battle.net\agent\agent.beta.2514\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2514\agent.exe

FirewallRules: [UDP Query User{DF8986C4-FB63-4A37-874F-5E4F5AB0B070}C:\programdata\battle.net\agent\agent.beta.2514\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2514\agent.exe

FirewallRules: [TCP Query User{7D2074A4-AA89-4BA7-A7EB-1268C6492AEE}C:\program files (x86)\devpro\devpro.dll] => (Allow) C:\program files (x86)\devpro\devpro.dll

FirewallRules: [UDP Query User{F2B7C119-C5D0-4914-BEBC-71E99254D344}C:\program files (x86)\devpro\devpro.dll] => (Allow) C:\program files (x86)\devpro\devpro.dll

FirewallRules: [{EA7F7B92-3349-4537-9E50-3A0B4D818281}] => (Allow) C:\AeriaGames\AuraKingdom\game.bin

FirewallRules: [{AB6209F8-0BA4-4FC4-803C-1A73FEFDA112}] => (Allow) C:\AeriaGames\AuraKingdom\game.bin

FirewallRules: [TCP Query User{4F600FC8-F54A-49E9-B588-2F547BBA96B1}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe

FirewallRules: [UDP Query User{DF1CE9AE-5217-4393-B737-92F45CBCB4BD}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe

FirewallRules: [{A1A5A428-B18A-4BC9-A553-B1E6989C2A42}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Darksiders 2\Darksiders2.exe

FirewallRules: [{F60EBF1D-B0A7-4638-B48C-AF3F18B494BA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Darksiders 2\Darksiders2.exe

FirewallRules: [{767607AA-81B6-406F-BF1E-B8A81ED847FC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe

FirewallRules: [{35789372-EE60-4ED3-81F9-A81ED3BF2CE4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic 2014\DotP_D14.exe

FirewallRules: [{07DE1F4A-0A51-4A63-BF8D-CD9580D92EB6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe

FirewallRules: [{5F40E8E8-9EF2-41AA-9414-FBA5770F0A94}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe

FirewallRules: [TCP Query User{744A07AB-09FD-499C-9F04-E01BB0351E8D}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\dima\appdata\local\akamai\netsession_win.exe

FirewallRules: [UDP Query User{F7498DED-162B-488F-B59F-256A51C6CE71}C:\users\dima\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\dima\appdata\local\akamai\netsession_win.exe

FirewallRules: [{AEAB3ECF-0BB1-453B-8D1F-476AE01D86A0}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe

FirewallRules: [{8D48AAEF-A0CE-44E7-9024-CA3944E81E7D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe

FirewallRules: [TCP Query User{6CF9A63C-F912-4E3A-8DDA-6D3AC6AF66DF}C:\programdata\battle.net\agent\agent.beta.2638\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2638\agent.exe

FirewallRules: [UDP Query User{5A9CB3D7-8747-407A-97AB-191DBFC43D75}C:\programdata\battle.net\agent\agent.beta.2638\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2638\agent.exe

FirewallRules: [{94644398-7E26-4C3A-BD3D-8AC488A93807}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe

FirewallRules: [{03DDFDE2-264E-4187-85CD-4382D41F4A6C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe

FirewallRules: [{C38A5A06-BB40-4CFC-BA71-87AEC286F6D6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe

FirewallRules: [{CB8BA2E2-B98E-442B-87D9-92EFB85FECAD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe

FirewallRules: [{234100A5-3277-4236-B80F-3BD7A113F330}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe

FirewallRules: [{9472EB6F-9BC9-4FC2-B7B2-45A96212D7C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe

FirewallRules: [{4DDCAB31-D1CA-49D7-83D1-9A7708CA3387}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Loadout\Loadout.exe

FirewallRules: [{50274324-D5E3-4A7D-9551-60285C4D51CE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Loadout\Loadout.exe

FirewallRules: [{505A793E-19FF-4163-85DA-BDD1366147B4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe

FirewallRules: [{5D9B037C-78AD-4F93-AFCB-A8BF0480CCCF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe

FirewallRules: [{71BA2590-5ED7-4DC0-919C-603D078A17E1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe

FirewallRules: [{E3C9045F-0538-43CE-9AC0-B88A7047D12B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe

FirewallRules: [{AA27854D-9002-4BB1-AC3B-2B040589990B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe

FirewallRules: [{F262DA23-A9A0-45ED-875A-42640AB812FD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe

FirewallRules: [{5B584B43-CDC2-482C-A915-51ED708E2BDE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe

FirewallRules: [{FBE87CBF-6E5E-443B-BB64-D76E91781977}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe

FirewallRules: [TCP Query User{5B78C40B-EF9C-4DE3-B847-DDC0913711FC}C:\program files (x86)\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\tera\tera-launcher.exe

FirewallRules: [UDP Query User{02ADE6C1-8488-448C-9DD6-1D4ABC838F09}C:\program files (x86)\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\tera\tera-launcher.exe

FirewallRules: [{4EC807D8-651B-4EDE-906E-15D8940E045A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe

FirewallRules: [{5C43F976-C8BD-461A-8160-E4037DEC5A46}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe

FirewallRules: [{91A8DE20-9DBA-43BD-9F4B-DE1B625D0D83}] => (Allow) C:\AeriaGames\EdenEternal-DE\_Launcher.exe

FirewallRules: [{CD8464F5-1D27-4ACC-848F-AD802961AD3D}] => (Allow) C:\AeriaGames\EdenEternal-DE\_Launcher.exe

FirewallRules: [{20FF7205-61B2-44CC-87A6-CCE211D4603C}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{6B725485-B1DC-4646-B9AD-C4E754073AD5}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{EFDADD2B-5B82-4D44-BFF6-7533A33E5D4B}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{EDABDFE1-A779-47FE-A7F2-0BE99128B9D1}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{C864BA6F-6F65-4A53-BACD-5590447E71A3}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe

FirewallRules: [{BF9437A3-0AAD-4EF3-9020-8A7EDA18FFFB}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe

FirewallRules: [{5EC4813D-F4A5-44A4-99AE-2FEEADC7BD68}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe

FirewallRules: [{5741DE79-8863-4C92-8CA4-43D24ED12E9D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe

FirewallRules: [{7FA5A6CC-69A0-4EF2-9E4E-D36CF4A6FFB1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe

FirewallRules: [{1E27B3D7-EBC5-46D1-A1F4-5150D5FC7ECA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe

FirewallRules: [{7ACB6A7B-1D9F-4159-9E5C-57293DE770B9}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA World\fifaworld.exe

FirewallRules: [{CC579040-BC64-4658-B938-3FC11265DBA0}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA World\fifaworld.exe

FirewallRules: [TCP Query User{466B6D60-FB8E-40F4-9A96-3F6B84C31F10}C:\programdata\battle.net\agent\agent.2787\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.2787\agent.exe

FirewallRules: [UDP Query User{747BD4DC-E6ED-4E9F-889A-E1029B9BD7EC}C:\programdata\battle.net\agent\agent.2787\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.2787\agent.exe

FirewallRules: [{024C2E0F-0F94-4571-AAA1-63A5D32016D2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe

FirewallRules: [{19CDF823-35E4-43AD-8A38-931E02B58B64}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe

FirewallRules: [{EA2378D9-ADC4-4A3E-947C-030BBA9A41B0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Aura Kingdom\game.bin

FirewallRules: [{E3E3914B-6929-4469-A807-4C9FC60B3CA5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Aura Kingdom\game.bin

FirewallRules: [{AB6817F8-474B-413B-B1A1-DB9F05CE61BB}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{8192EF82-EABD-49D0-92CB-1E602FCB2399}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{8E9567B7-FEC3-4B6A-8469-1B65ACAEBCF2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe

FirewallRules: [{9832DDCA-66F8-432C-8B22-60682E5E919E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe

FirewallRules: [TCP Query User{1128027D-DF51-428D-BBF5-261AD7F20EEC}C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe

FirewallRules: [UDP Query User{0D0921EC-8295-44F1-A446-52BAFD8EF6EB}C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\bloodline champions\binary\bloodlinechampions.exe

FirewallRules: [TCP Query User{1FC5CC73-6F52-4B75-8D0B-4753B673D255}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [UDP Query User{A5E61E08-5C0A-4EA7-BD2C-D6ACED33386F}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [TCP Query User{E290B8F5-DC46-4D43-9E40-A8CFEBD19A8A}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe

FirewallRules: [UDP Query User{4A59CA75-CB6F-46C3-8E3B-D091F44ACDC5}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe

FirewallRules: [{51E7B824-61EF-498A-94AE-826ED3FE5CF2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe

FirewallRules: [{B9C59147-9E45-4E11-9B2F-5702A1ACAFA5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe

FirewallRules: [{BB70E8F0-DE1E-4EEF-873C-95044B81A8C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe

FirewallRules: [{49C70379-991F-4248-81CB-BA51F9158E4F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe

FirewallRules: [{6BB569B0-D223-4EAB-A4A0-83B776CDA2DD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age2HD\Launcher.exe

FirewallRules: [{D341F20A-E2E0-4320-82A8-3607608AD108}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age2HD\Launcher.exe

FirewallRules: [{757CE32E-DE9A-440C-BAB3-B9F8EF37A2A0}] => (Allow) C:\Users\Dima\Downloads\b9_downloader.exe

FirewallRules: [{ACA68B80-8F45-4E75-B7D3-470AF290871F}] => (Allow) C:\Users\Dima\Downloads\b9_downloader.exe

FirewallRules: [TCP Query User{B5BB55CB-DE77-4080-963B-3A266AC37CE5}C:\programdata\battle.net\agent\agent.3235\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3235\agent.exe

FirewallRules: [UDP Query User{30EBE90E-7ED1-4868-9D3D-50E6D7112675}C:\programdata\battle.net\agent\agent.3235\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3235\agent.exe

FirewallRules: [{1BAA9821-E2DD-48BF-9E27-F6297D2F5116}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe

FirewallRules: [{9C9260ED-7AA0-4AE4-972E-D83A5D097028}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe

FirewallRules: [{EA27D1BB-E05D-4097-97AF-BC7DE8174F52}] => (Allow) C:\Program Files (x86)\Bench\Proxy\proc.exe

FirewallRules: [{953D2DA8-7AEB-4931-BE76-87BDE0ACBC39}] => (Allow) C:\Program Files (x86)\Bench\Proxy\pwdg.exe

FirewallRules: [{91AF5EE1-530D-4D72-A308-BDBA132ABA31}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe

FirewallRules: [{AF831DA2-EC4A-4642-915F-DF7CBB2A2CF3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe

FirewallRules: [{BBBB3AD6-5EB2-4204-B5AF-9716942ACB1C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe

FirewallRules: [{63BB69A1-F607-4FB8-9EDD-1A607AABDA8B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe

FirewallRules: [{34F27A20-13E6-46E6-9901-39383CB7F97A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe

FirewallRules: [{DA9D712D-0C9F-441F-A880-FF8D27837E6E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe

FirewallRules: [TCP Query User{A250025F-7CBE-4CAD-93AE-C02E36E841C1}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe

FirewallRules: [UDP Query User{3D207EE9-306F-48FF-8735-CD8CDAFA0490}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\launcher.exe

FirewallRules: [TCP Query User{F7376CA3-FA2C-4F56-9AD8-0A2ADC4927AE}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe

FirewallRules: [UDP Query User{BCBA424F-EDE5-4DFC-8FD5-56BB5666B2F5}C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dragon's prophet (eu)\dp_x64.exe

FirewallRules: [{7A5EB71C-C724-402F-8557-A92B3BAD628E}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe

FirewallRules: [{AF09CC9B-68D7-404C-B498-D144643C1A54}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe

FirewallRules: [{D56AE5C0-0487-4C87-8284-10DC792A01DE}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe

FirewallRules: [{CB98B3E2-40A1-4A7C-ACCB-56A50C8E3F7B}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe

FirewallRules: [{B3D84AF2-F39E-4E7D-9D7E-FFCD803C1135}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe

FirewallRules: [{AB8E5377-F2F7-441D-9A50-434D83F90C0E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe

FirewallRules: [{CCA3F085-5CA5-4FEE-9ADD-935183AE6F1C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{9EA1B11A-0179-414A-AFF8-82050C792E6B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{256D7304-2C38-45D1-97DB-71739BA92297}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe

FirewallRules: [{E2070B33-5CCB-46B0-B6CF-4ED92F8AB562}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe

FirewallRules: [{1E69481E-7920-4B4D-9047-B812C456A75A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{A416660E-98DD-4A45-8A5A-C8BBA66A68A3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{72A09F1B-7789-4A3E-B327-FD1D052150FF}] => (Allow) C:\Program Files (x86)\GameforgeLive\gfl_client.exe

FirewallRules: [TCP Query User{2A0CBFD5-23A1-4C20-91ED-B00077755298}C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe

FirewallRules: [UDP Query User{3933DFA8-6EB3-47A1-A4F9-7C3E7BD2ED67}C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe

FirewallRules: [TCP Query User{69CF256B-C011-492C-B7A0-04F509D0D67B}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe

FirewallRules: [UDP Query User{FFEA845F-4BF9-44FF-89AC-628034543D28}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe

FirewallRules: [{7809CF2C-51C3-4520-8BD0-F210B5BBB57B}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe

FirewallRules: [{CE1678FF-6995-415D-ADDC-E165111812E1}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe

FirewallRules: [{2412E622-4FBF-402A-B899-DBC82E5C6B2B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe

FirewallRules: [{5817EFF9-3537-4F8B-97F9-2C33716052B4}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe

FirewallRules: [{B65003CD-97BF-4394-A2F7-21A3E24DCFB5}] => (Allow) C:\Nexon\Vindictus EU\en-EU\NMService.exe

FirewallRules: [{0CA242B9-DEDD-43C3-9F4C-BADAE74781E9}] => (Allow) C:\Nexon\Vindictus EU\en-EU\NMService.exe

FirewallRules: [TCP Query User{3D2A0F20-56AE-42D0-80DF-E8AC85D00D13}C:\nexon\vindictus eu\en-eu\vindictus.exe] => (Allow) C:\nexon\vindictus eu\en-eu\vindictus.exe

FirewallRules: [UDP Query User{2DFE002E-3069-4DA8-920D-442A029D663E}C:\nexon\vindictus eu\en-eu\vindictus.exe] => (Allow) C:\nexon\vindictus eu\en-eu\vindictus.exe

FirewallRules: [TCP Query User{93A7A5BC-03EA-42A5-AE99-CC30CBDF752F}C:\users\dima\desktop\eclipse\eclipse.exe] => (Allow) C:\users\dima\desktop\eclipse\eclipse.exe

FirewallRules: [UDP Query User{13A19341-79DD-4889-B496-24BB0AA8C4C2}C:\users\dima\desktop\eclipse\eclipse.exe] => (Allow) C:\users\dima\desktop\eclipse\eclipse.exe

FirewallRules: [TCP Query User{95CD7A11-031A-4E37-B3A1-64F53A1F7A75}C:\program files\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\javaw.exe

FirewallRules: [UDP Query User{9B60CDE5-BA1E-4E6D-BDF3-C1056F5F8650}C:\program files\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\javaw.exe

FirewallRules: [TCP Query User{C4E30886-3358-4A99-BE81-2F5BED09E73D}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe

FirewallRules: [UDP Query User{710835ED-1463-4E58-8DB1-9F37F56C4A0F}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe

FirewallRules: [TCP Query User{C7584B0F-6622-4E1D-8987-9D85C77F36F0}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe

FirewallRules: [UDP Query User{F365D46D-EED4-49F4-93DF-234F94019BB2}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe

FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe

FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe

FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe

FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe

FirewallRules: [TCP Query User{63488A2D-8F13-4C4E-8CC0-49944F9372BA}C:\users\dima\desktop\lancraft\lancraft.exe] => (Allow) C:\users\dima\desktop\lancraft\lancraft.exe

FirewallRules: [UDP Query User{EAEC2D64-0B8E-4599-A61B-53F358A64796}C:\users\dima\desktop\lancraft\lancraft.exe] => (Allow) C:\users\dima\desktop\lancraft\lancraft.exe

FirewallRules: [TCP Query User{A91AD53F-87ED-432A-9D7C-0AC95375B702}C:\users\dima\desktop\warcraft\war3.exe] => (Allow) C:\users\dima\desktop\warcraft\war3.exe

FirewallRules: [UDP Query User{CC9DF559-105D-4031-9013-ADF7BC24CFC3}C:\users\dima\desktop\warcraft\war3.exe] => (Allow) C:\users\dima\desktop\warcraft\war3.exe

FirewallRules: [TCP Query User{6E3020FE-2B2A-413D-8EBC-AC0261DDA56B}C:\users\dima\desktop\warcraft\lancraft.exe] => (Allow) C:\users\dima\desktop\warcraft\lancraft.exe

FirewallRules: [UDP Query User{83FC41EC-2250-4389-B57F-7CF1CF138244}C:\users\dima\desktop\warcraft\lancraft.exe] => (Allow) C:\users\dima\desktop\warcraft\lancraft.exe

FirewallRules: [{E762770A-34B1-461E-B15E-FFC052875F0A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\CastleCrashers\castle.exe

FirewallRules: [{32B2CED0-8283-4A5A-8965-FFCB653C38DA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\CastleCrashers\castle.exe

FirewallRules: [TCP Query User{CA917D8D-9E80-4B19-90E8-110407378DDD}C:\program files (x86)\unity\editor\unity.exe] => (Allow) C:\program files (x86)\unity\editor\unity.exe

FirewallRules: [UDP Query User{4A9F69B2-9BB4-4F0E-B34D-4D95E242700A}C:\program files (x86)\unity\editor\unity.exe] => (Allow) C:\program files (x86)\unity\editor\unity.exe

FirewallRules: [{5A44804A-99EB-4C63-8F18-C9310F1C4657}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe

FirewallRules: [{5C90DDB5-DFDC-4BF5-B6D0-B86A95AEE724}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe

FirewallRules: [TCP Query User{DD861486-7A78-460B-9A83-BFA67BC6A454}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe

FirewallRules: [UDP Query User{21543651-AA0C-4F30-B6F4-14C779C5E70B}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe

FirewallRules: [TCP Query User{5C83AE95-A82A-49CA-B905-4EFC8C6961F9}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe

FirewallRules: [UDP Query User{640696E3-D785-4576-883E-596F24E072B3}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe

FirewallRules: [{5880095B-DD8E-4F79-BA8F-727A270A9A7B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dungeon Defenders\Binaries\Win32\DungeonDefenders.exe

FirewallRules: [{A02B8413-228D-4E79-9B24-1B23EEBA9CE2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dungeon Defenders\Binaries\Win32\DungeonDefenders.exe

FirewallRules: [TCP Query User{E5CD1AD8-4898-41F1-880E-C3CCEEF12C49}C:\program files (x86)\secondlifeviewer\slvoice.exe] => (Allow) C:\program files (x86)\secondlifeviewer\slvoice.exe

FirewallRules: [UDP Query User{37F84E6A-EF30-44B7-8E99-DE3F7E7DF7EE}C:\program files (x86)\secondlifeviewer\slvoice.exe] => (Allow) C:\program files (x86)\secondlifeviewer\slvoice.exe

FirewallRules: [TCP Query User{2478D171-94B3-4D1F-8C59-4E8322B8E276}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [UDP Query User{28D75031-A654-47AF-802E-4A9A15D5EF3F}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [{3A112284-5247-4174-9FB4-B86BFEBD19F9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe

FirewallRules: [{B2899169-D59D-4AC1-BBE3-3F3903152981}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe

FirewallRules: [{12C4EFF7-DD2B-4A0E-A3A0-98777451B440}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3.exe

FirewallRules: [{4060C2B9-6F65-462B-9221-EEEBCF58BB56}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3.exe

FirewallRules: [{EFA22BC5-7DE3-47F6-8167-289BFDD93178}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3_Unrestricted.exe

FirewallRules: [{C0D1322B-FEBC-4B0A-BD29-158C54B47C3F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Serious Sam 3\Bin\Sam3_Unrestricted.exe

FirewallRules: [{13A229AF-4A20-4E5A-B1D5-E4DA450947FA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Gumboy Tournament\gumboytournament.exe

FirewallRules: [{BD506B34-1746-48BC-A17D-29CE55B609BC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Gumboy Tournament\gumboytournament.exe

FirewallRules: [TCP Query User{E9B42C51-F75A-4042-8D09-5FE64A6E0AFD}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe

FirewallRules: [UDP Query User{A47B5394-0D06-4B60-AEAC-F80C6A18EC73}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe

FirewallRules: [{1F0F5A11-9A4F-49CF-8202-86A2DAEB8299}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_launcher.exe

FirewallRules: [{472579C8-4E14-4D30-9C6E-7C1E88FAB3FD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe

FirewallRules: [{09D4FEB7-995B-4579-90DC-1C535713E99A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe

FirewallRules: [{418B6FDA-1046-4E47-AFFC-EC7C31A532E9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe

FirewallRules: [{7199E669-27DE-4BFD-94D5-FDCF6A7C93AA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\temp\survarium_updater.exe

FirewallRules: [{BFF61270-CC5A-432C-A7FB-7D76DC47C782}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium.exe

FirewallRules: [{490B16FF-C2D2-4175-A366-EFDAA08EB979}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Survarium\game\binaries\x86\survarium.exe

FirewallRules: [TCP Query User{C9F38270-E9E5-4168-9E99-11073C550934}C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe

FirewallRules: [UDP Query User{6082536E-F697-45B2-969C-5E5CA8E07E06}C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\survarium\game\binaries\x86\survarium.exe

FirewallRules: [TCP Query User{5AC0DF45-9E80-410D-A952-1DDA7A565671}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe

FirewallRules: [UDP Query User{31F72C84-B935-4C8E-8E1E-6FBDDC891D1C}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe

FirewallRules: [{8EB84DED-EB81-4D74-9575-8282402E2D2E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cryptic Studios\Neverwinter.exe

FirewallRules: [{B5B40F25-2AC6-4642-8BBC-63AE2A925B7B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cryptic Studios\Neverwinter.exe

FirewallRules: [TCP Query User{096444F6-AA1C-44A3-8C5E-A8DFF4A1C6D0}C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe

FirewallRules: [UDP Query User{9E1BE6EE-CCE2-4CFC-8375-7D1F41A71285}C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe

FirewallRules: [{3E6ED98E-B2F8-4E5F-BAED-9D8ACD743A90}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe

FirewallRules: [{2F7FD9C7-09FF-4330-AB1D-62122B26142B}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe

FirewallRules: [{B6917A43-4FD1-4943-819E-0224DF009AD4}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe

FirewallRules: [{580CEC6F-22A8-423D-B6A2-60898E1991C0}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe

FirewallRules: [{1D779765-CEC8-476D-8663-FF565F9943D2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dragon Nest Europe\DragonNest\DragonNest.exe

FirewallRules: [{BFD8F340-3BB5-4D13-B4C8-64605B781AE5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dragon Nest Europe\DragonNest\DragonNest.exe

FirewallRules: [TCP Query User{51AE804F-C3F0-4BE7-8861-486111D1A4C3}C:\neople\dfo\dfo.exe] => (Allow) C:\neople\dfo\dfo.exe

FirewallRules: [UDP Query User{813C44E8-970E-4FB2-A994-1B7E6CFAB002}C:\neople\dfo\dfo.exe] => (Allow) C:\neople\dfo\dfo.exe

FirewallRules: [{0FE2304A-0072-4655-BD88-8EAC2F3EE694}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{7C5F9697-EA12-4FD9-AA6A-450DA3B7D57A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{C5FE8083-9835-43F3-84CC-1CE403C9CBA7}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

FirewallRules: [{82994BB7-EAE8-4B5D-9D16-0C4D21C9BEBD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe

FirewallRules: [{5AE542AF-7756-45E9-8C69-ED3AA9618842}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe

FirewallRules: [{B0B5A360-9E6E-443A-90B8-80094D1A2B73}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AdVenture Capitalist\adventure-capitalist.exe

FirewallRules: [{9C15C70C-9E4C-4502-92C2-C767C7E22FB5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AdVenture Capitalist\adventure-capitalist.exe

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
 

==================== Faulty Device Manager Devices =============
 

Name: USB (Universal Serial Bus)-Controller

Description: USB (Universal Serial Bus)-Controller

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: Ethernet-Controller

Description: Ethernet-Controller

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 

Name: SM-Bus-Controller

Description: SM-Bus-Controller

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (05/18/2015 01:34:01 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (05/18/2015 01:33:59 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (05/18/2015 01:33:48 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (05/18/2015 01:33:48 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (05/18/2015 01:33:48 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (05/18/2015 01:32:30 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (05/18/2015 01:32:23 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (05/18/2015 01:32:23 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (05/18/2015 01:32:20 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (05/17/2015 03:34:41 AM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm csgo.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 2718
 

Startzeit: 01d090419913fd3d
 

Endzeit: 32
 

Anwendungspfad: C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
 

Berichts-ID:
 
 

System errors:

=============

Error: (05/18/2015 03:55:36 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1275
 

Error: (05/18/2015 03:55:36 PM) (Source: Application Popup) (EventID: 1060) (User: )

Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\Dima\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
 

Error: (05/18/2015 03:55:35 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1275
 

Error: (05/18/2015 03:55:35 PM) (Source: Application Popup) (EventID: 1060) (User: )

Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\Dima\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
 

Error: (05/18/2015 03:55:35 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1275
 

Error: (05/18/2015 03:55:35 PM) (Source: Application Popup) (EventID: 1060) (User: )

Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\Dima\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
 

Error: (05/18/2015 03:55:34 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1275
 

Error: (05/18/2015 03:55:34 PM) (Source: Application Popup) (EventID: 1060) (User: )

Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\Dima\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
 

Error: (05/18/2015 03:55:34 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1275
 

Error: (05/18/2015 03:55:34 PM) (Source: Application Popup) (EventID: 1060) (User: )

Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\Dima\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
 
 

Microsoft Office Sessions:

=========================

Error: (05/18/2015 01:34:01 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe
 

Error: (05/18/2015 01:33:59 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe
 

Error: (05/18/2015 01:33:48 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Dima\Desktop\Downloads\esetsmartinstaller_deu.exe
 

Error: (05/18/2015 01:33:48 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Dima\Desktop\Downloads\esetsmartinstaller_deu.exe
 

Error: (05/18/2015 01:33:48 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe
 

Error: (05/18/2015 01:32:30 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Dima\Desktop\Downloads\esetsmartinstaller_deu.exe
 

Error: (05/18/2015 01:32:23 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Dima\Desktop\Downloads\esetsmartinstaller_deu.exe
 

Error: (05/18/2015 01:32:23 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Dima\Desktop\Downloads\esetsmartinstaller_deu.exe
 

Error: (05/18/2015 01:32:20 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Dima\Desktop\Downloads\esetsmartinstaller_deu.exe
 

Error: (05/17/2015 03:34:41 AM) (Source: Application Hang) (EventID: 1002) (User: )

Description: csgo.exe0.0.0.0271801d090419913fd3d32C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
 
 

CodeIntegrity Errors:

===================================

  Date: 2015-05-12 12:56:52.122

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-05-12 12:56:52.091

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2015-05-08 20:38:53.994

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:37:07.273

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:37:03.798

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:36:19.340

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:34:40.221

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:34:12.814

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:20:56.969

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-05-08 20:20:56.706

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\BubbleSound\BubbleSound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Core(TM) i5-4570 CPU @ 3.20GHz

Percentage of memory in use: 40%

Total physical RAM: 8136.6 MB

Available physical RAM: 4800.99 MB

Total Pagefile: 16271.39 MB

Available Pagefile: 12184.91 MB

Total Virtual: 8192 MB

Available Virtual: 8191.85 MB
 

==================== Drives ================================
 

Drive c: (OS) (Fixed) (Total:915.41 GB) (Free:455.78 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 277A7941)

Partition 1: (Not Active) - (Size=16 GB) - (Type=27)

Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=915.4 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

Bootsektor

18.05.2015 22:44

Hallo,

hast du die Quarantäne gezippt und mit einem Passwort versehen? Wir brauchen die füür weitere Analysen, ansonsten nochmal upload versuchen. Danke dir.

kriegnes

19.05.2015 15:27

Hat diesmal funktioniert. (Die Email nicht das uploaden.)

Alle Zeitangaben in WEZ +1. Es ist jetzt 07:36 Uhr.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132