Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-02-2015 02
Ran by User (administrator) on USER-PC on 12-02-2015 12:17:59
Running from C:\Users\User\Desktop
Loaded Profiles: User (Available profiles: User)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe
() C:\Program Files (x86)\D-Link\DWA-125 revA\ANIWConnService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
() C:\Windows\DAODx.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Guillemot Corporation S.A.) C:\Program Files (x86)\Hercules\Deluxe Optical Glass\XtrCtrl.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(D-Link Corp.) C:\Program Files (x86)\D-Link\DWA-125 revA\AirNCFG.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GdBgInx64.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.66\opera.exe
() C:\Program Files (x86)\Opera\27.0.1689.66\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.66\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.66\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.66\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\27.0.1689.66\opera.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVK.exe
Failed to access process -> WMIADAP.exe
(Opera Software) C:\Program Files (x86)\Opera\launcher.exe
() C:\Program Files (x86)\Opera\27.0.1689.66\opera_autoupdate.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [613024 2010-09-27] (Atheros Communications)
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379040 2010-09-27] (Atheros Commnucations)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [CamserviceOG] => C:\Program Files (x86)\Hercules\Deluxe Optical Glass\XtrCtrl.exe [2999080 2009-10-19] (Guillemot Corporation S.A.)
HKLM-x32\...\Run: [D-Link D-Link DWA-125] => C:\Program Files (x86)\D-Link\DWA-125 revA\AirNCFG.exe [1095984 2014-03-18] (D-Link Corp.)
HKLM-x32\...\Run: [CamserviceOG] => C:\Program Files (x86)\Hercules\Deluxe Optical Glass\XtrCtrl.exe [2999080 2009-10-19] (Guillemot Corporation S.A.)
HKLM-x32\...\Run: [G Data AntiVirus Tray] => C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe [1444472 2013-08-21] (G Data Software AG)
HKLM-x32\...\Run: [GDFirewallTray] => C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1854928 2013-03-22] (G Data Software AG)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,c:\program files (x86)\g data\internetsecurity\avkkid\avkcks.exe
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3928150652-2756980015-3035233101-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31087200 2015-01-23] (Skype Technologies S.A.)
HKU\S-1-5-21-3928150652-2756980015-3035233101-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7404312 2015-01-20] (Piriform Ltd)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-3928150652-2756980015-3035233101-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========

Opera: 
=======
OPR Extension: (HDtubeV1.6V09.02) - C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\ofaemmlijemfcopjandkcndefpnacabg [2015-02-09]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [52896 2010-09-27] (Atheros Commnucations) [File not signed]
R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [1970296 2013-08-26] (G Data Software AG)
R2 AVKService; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe [635000 2013-08-21] (G Data Software AG)
R2 AVKWCtl; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe [2555528 2013-08-21] (G Data Software AG)
R2 D_Link_DWA-125_WPS; C:\Program Files (x86)\D-Link\DWA-125 revA\ANIWConnService.exe [53248 2010-07-12] () [File not signed]
R3 GDFwSvc; C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe [2936616 2013-08-21] (G Data Software AG)
R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [695416 2013-08-22] (G Data Software AG)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18956064 2014-07-25] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2015-02-05] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 anodlwf; C:\Windows\System32\DRIVERS\anodlwfx.sys [15872 2010-05-29] ()
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [60248 2015-02-10] (G Data Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [130392 2015-02-10] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [63320 2015-02-10] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64856 2015-02-10] (G Data Software AG)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [106272 2015-02-10] (G Data Software)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [65368 2015-02-10] (G Data Software AG)
R3 hxctlflt; C:\Windows\System32\DRIVERS\hxctlflt.sys [111104 2009-02-09] (Guillemot Corporation)
R3 L1c; C:\Windows\System32\DRIVERS\l1c51x64.sys [104600 2012-11-19] (Atheros Communications, Inc.)
S3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-05-14] ()
R3 netr28ux; C:\Windows\System32\DRIVERS\Dnetr28ux.sys [1617472 2011-04-28] (Ralink Technology Corp.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-07-25] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
S3 rusb3xhc; C:\Windows\System32\DRIVERS\rusb3xhc.sys [230280 2012-08-27] (Renesas Electronics Corporation)
R3 Sftfs; C:\Windows\System32\DRIVERS\Sftfswin7.sys [765288 2011-10-01] (Microsoft Corporation)
R3 Sftplay; C:\Windows\System32\DRIVERS\Sftplaywin7.sys [268648 2011-10-01] (Microsoft Corporation)
R3 Sftredir; C:\Windows\System32\DRIVERS\Sftredirwin7.sys [25960 2011-10-01] (Microsoft Corporation)
R3 Sftvol; C:\Windows\System32\DRIVERS\Sftvolwin7.sys [22376 2011-10-01] (Microsoft Corporation)
R3 SNPSTD3; C:\Windows\System32\DRIVERS\snpstd3.sys [10684672 2007-07-17] (Sonix Co. Ltd.)
S3 VUSB3HUB; C:\Windows\System32\DRIVERS\ViaHub3.sys [225792 2013-09-25] (VIA Technologies, Inc.)
S3 xhcdrv; C:\Windows\System32\DRIVERS\xhcdrv.sys [296960 2013-09-25] (VIA Technologies, Inc.)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-12 10:47 - 2015-02-12 12:10 - 00004638 _____ () C:\Windows\PFRO.log
2015-02-11 23:13 - 2015-02-11 23:13 - 00000000 ____D () C:\MATS
2015-02-11 23:02 - 2015-02-11 23:02 - 00000000 ____D () C:\Users\User\AppData\Roaming\WinRAR
2015-02-11 23:02 - 2015-02-11 22:43 - 00000000 ____D () C:\Users\User\Desktop\fixit
2015-02-11 23:01 - 2015-02-11 23:01 - 00000000 ___DC () C:\Program Files\WinRAR
2015-02-11 23:01 - 2015-02-11 23:01 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-02-11 23:01 - 2015-02-11 23:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-02-11 22:36 - 2015-02-11 22:37 - 00347440 _____ (Microsoft Corporation) C:\Users\User\Desktop\MicrosoftFixit-portable.exe
2015-02-10 22:49 - 2015-02-10 22:50 - 00020618 _____ () C:\Users\User\Desktop\scan z tego programu.txt
2015-02-10 22:32 - 2015-02-11 23:28 - 00031015 _____ () C:\Users\User\Desktop\Shortcut.txt
2015-02-10 22:31 - 2015-02-11 23:28 - 00029425 _____ () C:\Users\User\Desktop\Addition.txt
2015-02-10 22:28 - 2015-02-12 12:18 - 00010446 _____ () C:\Users\User\Desktop\FRST.txt
2015-02-10 22:25 - 2015-02-12 12:18 - 00000000 ____D () C:\FRST
2015-02-10 22:25 - 2015-02-12 10:43 - 02134016 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2015-02-10 22:25 - 2015-02-10 22:21 - 00380416 _____ () C:\Users\User\Desktop\ze4sqtf7.exe
2015-02-10 21:49 - 2015-02-10 21:47 - 05611930 _____ (Swearware) C:\Users\User\Desktop\ComboFix.exe
2015-02-10 12:17 - 2015-02-10 12:17 - 00106272 _____ (G Data Software) C:\Windows\system32\Drivers\GRD.sys
2015-02-10 12:17 - 2015-02-10 12:17 - 00019016 _____ (G Data Software) C:\Windows\system32\Drivers\GdPhyMem.sys
2015-02-10 12:14 - 2015-02-12 12:11 - 00001546 _____ () C:\Windows\setupact.log
2015-02-10 12:14 - 2015-02-10 12:14 - 00000000 _____ () C:\Windows\setuperr.log
2015-02-10 11:47 - 2015-02-10 11:47 - 00063320 _____ (G Data Software AG) C:\Windows\system32\Drivers\PktIcpt.sys
2015-02-10 11:47 - 2015-02-10 11:47 - 00002062 _____ () C:\Users\Public\Desktop\G Data InternetSecurity 2014.lnk
2015-02-10 11:47 - 2015-02-10 11:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G Data InternetSecurity 2014
2015-02-10 11:46 - 2015-02-10 11:46 - 00130392 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys
2015-02-10 11:46 - 2015-02-10 11:46 - 00065368 _____ (G Data Software AG) C:\Windows\system32\Drivers\HookCentre.sys
2015-02-10 11:46 - 2015-02-10 11:46 - 00064856 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys
2015-02-10 11:46 - 2015-02-10 11:46 - 00060248 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDBehave.sys
2015-02-10 11:45 - 2015-02-10 11:45 - 00000000 ___DC () C:\Program Files (x86)\G Data
2015-02-10 11:20 - 2015-02-10 11:20 - 00002770 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2015-02-10 11:20 - 2015-02-10 11:20 - 00000830 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-02-10 11:20 - 2015-02-10 11:20 - 00000000 ___DC () C:\Program Files\CCleaner
2015-02-10 11:20 - 2015-02-10 11:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-02-10 11:15 - 2015-02-10 12:27 - 00000000 ____D () C:\ProgramData\G Data
2015-02-10 11:06 - 2015-02-12 12:11 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2015-02-09 13:32 - 2015-02-09 13:32 - 00000000 ____D () C:\Windows\system32\appmgmt
2015-02-09 12:21 - 2015-02-09 12:21 - 00000000 ____D () C:\Users\User\AppData\Roaming\Macromedia
2015-02-09 12:20 - 2015-02-09 12:20 - 00000000 ___DC () C:\Windows\SysWOW64\Flash
2015-02-09 11:04 - 2015-02-09 11:04 - 00001109 _____ () C:\Users\Public\Desktop\StarCraft II.lnk
2015-02-09 11:03 - 2015-02-09 11:03 - 00000000 __SHD () C:\Users\User\AppData\Local\EmieUserList
2015-02-09 11:03 - 2015-02-09 11:03 - 00000000 __SHD () C:\Users\User\AppData\Local\EmieSiteList
2015-02-09 10:57 - 2015-02-09 10:57 - 00001078 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2015-02-09 10:57 - 2015-02-09 10:57 - 00000000 ___DC () C:\Program Files (x86)\VideoLAN
2015-02-09 10:57 - 2015-02-09 10:57 - 00000000 ____D () C:\Users\User\AppData\Roaming\vlc
2015-02-09 10:57 - 2015-02-09 10:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-02-09 10:55 - 2015-02-09 10:55 - 00000000 ____D () C:\Users\User\Documents\Add-in Express
2015-02-09 10:50 - 2015-02-09 10:57 - 00000000 ____D () C:\Users\User\Documents\vlc
2015-02-09 10:36 - 2015-02-09 11:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarCraft II
2015-02-06 23:39 - 2015-02-10 11:21 - 00000000 ____D () C:\Users\User\AppData\Local\CrashDumps
2015-02-06 20:38 - 2015-02-06 20:38 - 00000000 ____D () C:\Users\User\Documents\Diablo III
2015-02-06 18:48 - 2015-02-06 18:48 - 00001168 _____ () C:\Users\Public\Desktop\Diablo III.lnk
2015-02-06 18:46 - 2015-02-06 18:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo III
2015-02-06 18:44 - 2015-02-06 20:37 - 00000000 ___DC () C:\Program Files (x86)\Diablo III
2015-02-06 14:57 - 2015-02-10 11:48 - 00000000 ____D () C:\Users\User\AppData\Local\Battle.net
2015-02-06 14:57 - 2015-02-06 15:01 - 00000000 ____D () C:\Users\User\AppData\Roaming\Battle.net
2015-02-06 14:57 - 2015-02-06 14:57 - 00001130 _____ () C:\Users\Public\Desktop\Battle.net.lnk
2015-02-06 14:57 - 2015-02-06 14:57 - 00000000 ____D () C:\Users\User\AppData\Roaming\NVIDIA
2015-02-06 14:57 - 2015-02-06 14:57 - 00000000 ____D () C:\Users\User\AppData\Local\Blizzard Entertainment
2015-02-06 14:56 - 2015-02-06 14:57 - 00000000 ___DC () C:\Program Files (x86)\Battle.net
2015-02-06 14:56 - 2015-02-06 14:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2015-02-06 14:45 - 2015-02-11 23:23 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-06 14:45 - 2015-02-06 14:45 - 00701616 ____C (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-06 14:45 - 2015-02-06 14:45 - 00071344 ____C (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-06 14:45 - 2015-02-06 14:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-06 14:45 - 2015-02-06 14:45 - 00000000 ___DC () C:\Windows\SysWOW64\Macromed
2015-02-06 14:45 - 2015-02-06 14:45 - 00000000 ____D () C:\Windows\system32\Macromed
2015-02-06 14:42 - 2015-02-06 14:46 - 00000000 ____D () C:\Users\User\AppData\Local\Adobe
2015-02-06 14:21 - 2015-02-09 11:44 - 00000000 ____D () C:\Users\User\Documents\StarCraft II
2015-02-06 14:21 - 2015-02-09 11:42 - 00000000 ___DC () C:\Program Files (x86)\StarCraft II
2015-02-06 14:21 - 2015-02-06 14:57 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2015-02-06 14:14 - 2009-02-09 10:43 - 00111104 _____ (Guillemot Corporation) C:\Windows\system32\Drivers\hxctlflt.sys
2015-02-06 14:14 - 2007-07-20 11:33 - 00015478 _____ () C:\Windows\snpstd3.ini
2015-02-06 14:14 - 2007-07-20 11:18 - 00013003 _____ () C:\Windows\snpstd3.src
2015-02-06 14:14 - 2007-07-17 18:10 - 10684672 _____ (Sonix Co. Ltd.) C:\Windows\system32\Drivers\snpstd3.sys
2015-02-06 14:14 - 2007-04-20 16:26 - 00057344 ____C ( ) C:\Windows\SysWOW64\vsnpstd3.dll
2015-02-06 14:14 - 2005-11-22 20:40 - 00018944 _____ ( ) C:\Windows\system32\csnpstd3.dll
2015-02-06 14:12 - 2015-02-06 14:14 - 33555888 _____ (Macrovision Corporation) C:\Users\User\Downloads\HOPGL_v3.2.2.1.exe
2015-02-06 14:12 - 2015-02-06 14:14 - 33555888 _____ (Macrovision Corporation) C:\Users\User\Downloads\HOPGL_v3.2.2.1 (1).exe
2015-02-06 14:08 - 2015-02-06 14:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hercules
2015-02-06 14:07 - 2015-02-06 14:14 - 00000000 ___DC () C:\Program Files (x86)\Hercules
2015-02-06 13:59 - 2015-02-06 14:02 - 115887608 _____ (Macrovision Corporation) C:\Users\User\Downloads\HWSE_V4.0.2.6.exe
2015-02-05 11:33 - 2015-02-05 11:33 - 00000000 ____D () C:\Users\User\AppData\Roaming\Canneverbe Limited
2015-02-05 11:33 - 2015-02-05 11:33 - 00000000 ____D () C:\ProgramData\Canneverbe Limited
2015-02-05 11:27 - 2015-02-09 13:38 - 00103736 ____C () C:\Windows\SysWOW64\PnkBstrB.exe
2015-02-05 11:27 - 2015-02-05 11:28 - 00000000 ____D () C:\Users\User\Documents\NFS ProStreet
2015-02-05 11:27 - 2015-02-05 11:27 - 00066872 ____C () C:\Windows\SysWOW64\PnkBstrA.exe
2015-02-05 11:27 - 2015-02-05 11:27 - 00000000 __RHD () C:\Users\User\AppData\Roaming\SecuROM
2015-02-05 11:27 - 2015-02-05 11:27 - 00000000 ____D () C:\Users\User\AppData\Local\PunkBuster
2015-02-05 11:26 - 2015-02-05 11:26 - 00002140 _____ () C:\Users\Public\Desktop\Need for Speed™ ProStreet.lnk
2015-02-05 11:26 - 2015-02-05 11:26 - 00000778 _____ () C:\Users\User\Desktop\BESTplayer - Verknüpfung.lnk
2015-02-05 11:26 - 2015-02-05 11:26 - 00000000 ____D () C:\Users\User\AppData\Roaming\BESTplayer
2015-02-05 11:26 - 2015-02-05 11:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Electronic Arts
2015-02-05 11:09 - 2015-02-05 11:09 - 00000000 ___DC () C:\Program Files (x86)\Electronic Arts
2015-02-05 11:09 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2015-02-05 11:09 - 2007-06-20 20:46 - 00266088 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2015-02-05 11:09 - 2007-06-20 20:45 - 00021352 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_2.dll
2015-02-05 11:09 - 2007-06-20 20:45 - 00018280 ____C (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_2.dll
2015-02-05 11:09 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2015-02-05 11:09 - 2007-05-16 16:45 - 03497832 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2015-02-05 11:09 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2015-02-05 11:09 - 2007-05-16 16:45 - 01124720 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2015-02-05 11:09 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2015-02-05 11:09 - 2007-05-16 16:45 - 00443752 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2015-02-05 11:09 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2015-02-05 11:09 - 2007-04-04 18:55 - 00261480 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2015-02-05 11:09 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2015-02-05 11:09 - 2007-04-04 18:53 - 00081768 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2015-02-05 11:09 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2015-02-05 11:09 - 2007-03-15 16:57 - 00443752 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2015-02-05 11:09 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2015-02-05 11:09 - 2007-03-12 16:42 - 03495784 ____C (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2015-02-05 11:09 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2015-02-05 11:09 - 2007-03-12 16:42 - 01123696 ____C (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2015-02-05 11:09 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2015-02-05 11:09 - 2007-03-05 12:42 - 00015128 ____C (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2015-02-05 11:09 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2015-02-05 11:09 - 2007-01-24 15:27 - 00255848 ____C (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2015-02-05 11:04 - 2015-02-05 15:44 - 00000000 ____D () C:\ProgramData\Battle.net
2015-02-05 10:40 - 2015-02-06 12:44 - 00000000 ____D () C:\Neuer Ordner
2015-02-05 10:36 - 2015-02-05 10:36 - 00001428 _____ () C:\Users\User\Desktop\TERA.lnk
2015-02-05 10:34 - 2015-02-12 12:19 - 00003850 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1423128877
2015-02-05 10:34 - 2015-02-12 12:19 - 00000000 ___DC () C:\Program Files (x86)\Opera
2015-02-05 10:34 - 2015-02-12 12:17 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype
2015-02-05 10:34 - 2015-02-05 10:34 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2015-02-05 10:34 - 2015-02-05 10:34 - 00001147 _____ () C:\Users\Public\Desktop\Opera.lnk
2015-02-05 10:34 - 2015-02-05 10:34 - 00001147 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-02-05 10:34 - 2015-02-05 10:34 - 00000000 __RDC () C:\Program Files (x86)\Skype
2015-02-05 10:34 - 2015-02-05 10:34 - 00000000 ____D () C:\Users\User\AppData\Roaming\Opera Software
2015-02-05 10:34 - 2015-02-05 10:34 - 00000000 ____D () C:\Users\User\AppData\Local\Skype
2015-02-05 10:34 - 2015-02-05 10:34 - 00000000 ____D () C:\Users\User\AppData\Local\Opera Software
2015-02-05 10:34 - 2015-02-05 10:34 - 00000000 ____D () C:\ProgramData\Skype
2015-02-05 10:34 - 2015-02-05 10:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-02-05 10:31 - 2015-02-05 10:31 - 00000000 ____D () C:\Users\User\AppData\Roaming\TERA
2015-02-05 02:35 - 2015-02-05 02:36 - 00003858 _____ () C:\Windows\system32\RaCoInst.log
2015-02-05 02:35 - 2015-02-05 02:35 - 00000000 ___DC () C:\Program Files (x86)\D-Link
2015-02-05 02:35 - 2015-02-05 02:35 - 00000000 ____D () C:\Users\User\AppData\Roaming\InstallShield
2015-02-05 02:35 - 2011-04-28 14:20 - 01617472 _____ (Ralink Technology Corp.) C:\Windows\system32\Drivers\Dnetr28ux.sys
2015-02-05 02:35 - 2011-04-28 14:17 - 00327008 _____ (Ralink Technology, Inc.) C:\Windows\system32\RaCoInstx.dll
2015-02-05 02:35 - 2011-04-28 14:17 - 00014119 _____ () C:\Windows\system32\RaCoInst.dat
2015-02-05 02:35 - 2010-07-12 14:39 - 00302080 _____ () C:\Windows\lwd.exe
2015-02-05 02:35 - 2010-05-29 07:58 - 00015872 _____ () C:\Windows\system32\Drivers\anodlwfx.sys
2015-02-05 02:34 - 2015-02-05 02:34 - 00000000 ____D () C:\Users\User\AppData\Roaming\Carambis
2015-02-04 12:39 - 2014-02-27 17:27 - 682299392 _____ () C:\StarCraft (PL).iso
2015-02-04 12:35 - 2014-05-13 12:27 - 968511488 _____ () C:\Heroes.3.Zlota Edycja.PL.iso
2015-02-04 12:34 - 2014-02-25 19:27 - 565276672 _____ () C:\Heroes III Złota Edycja + WoG.iso
2015-02-04 12:32 - 2015-02-04 23:22 - 00000000 ____D () C:\programy
2015-02-04 11:09 - 2015-02-04 11:10 - 45109352 _____ (Skype Technologies S.A.) C:\SkypeSetup71Full.exe
2015-02-04 09:59 - 2015-02-04 23:21 - 00000000 ____D () C:\GameforgeLive
2015-02-03 11:39 - 2015-02-03 11:40 - 32896408 _____ (Opera Software) C:\Opera_27.0.1689.54_Setup.exe
2015-02-03 11:39 - 2015-02-03 11:39 - 36942788 _____ () C:\dwa-125a3-1-51s0039.zip
2015-02-03 11:38 - 2015-02-03 11:39 - 23320495 _____ () C:\DWA-125_drv_reva3_153s0050_ALL_multi_20140421.zip
2015-02-03 11:22 - 2015-02-05 14:10 - 00000000 ____D () C:\dwoch i pol 7

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-12 12:18 - 2009-07-14 05:45 - 00022384 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-12 12:18 - 2009-07-14 05:45 - 00022384 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-12 12:17 - 2009-07-14 18:58 - 01673464 _____ () C:\Windows\system32\perfh007.dat
2015-02-12 12:17 - 2009-07-14 18:58 - 00451738 _____ () C:\Windows\system32\perfc007.dat
2015-02-12 12:17 - 2009-07-14 06:13 - 00006468 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-12 12:14 - 2011-05-25 03:18 - 01810422 _____ () C:\Windows\WindowsUpdate.log
2015-02-12 12:11 - 2013-11-28 02:14 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-02-12 12:11 - 2011-06-26 21:08 - 00000035 _____ () C:\Users\Public\Documents\AtherosServiceConfig.ini
2015-02-12 12:11 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-12 10:51 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\GroupPolicy
2015-02-11 22:27 - 2012-04-22 03:16 - 00001433 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-02-10 21:50 - 2013-11-20 13:42 - 00000000 ___DC () C:\Program Files\VIA XHCI UASP Utility
2015-02-10 21:35 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-02-10 12:25 - 2014-03-23 17:27 - 00000000 ____D () C:\ProgramData\VirtualizedApplications
2015-02-10 11:21 - 2013-07-15 10:49 - 00000000 ____D () C:\Windows\Minidump
2015-02-10 11:21 - 2011-05-25 04:15 - 00000000 ____D () C:\Windows\Panther
2015-02-10 11:15 - 2009-07-14 03:34 - 00000505 _____ () C:\Windows\win.ini
2015-02-09 11:02 - 2013-11-26 12:14 - 00000000 ___DC () C:\Program Files (x86)\ATI Technologies
2015-02-06 14:46 - 2014-03-25 14:06 - 00000000 ____D () C:\Users\User\AppData\Roaming\Adobe
2015-02-06 14:43 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-02-06 14:14 - 2011-05-25 03:25 - 00000000 __HDC () C:\Program Files (x86)\InstallShield Installation Information
2015-02-06 12:41 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-02-05 15:32 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Public\Libraries
2015-02-05 14:13 - 2014-03-01 00:59 - 00000000 ____D () C:\Two and a half Man 5
2015-02-05 14:09 - 2012-08-20 17:16 - 00000000 ____D () C:\cali sezon 4
2015-02-05 11:27 - 2012-04-22 03:15 - 00000000 ____D () C:\Users\User\AppData\Local\VirtualStore
2015-02-04 22:20 - 2009-02-28 10:34 - 00000000 ____D () C:\Fotki

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-02-04 23:49

==================== End Of Log ============================